Function at 0x50eef4
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xe7
push 0
push 0
dec ecx
jne 0x50eefc
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], edx
mov edi, eax
mov eax, dword [ebp - 4]
call fcn.004055e8
xor eax, eax
push ebp
push 0x518108
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
cmp byte [eax], 0x2b
jne 0x51025d
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x50ef3a
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.00405660
push 0
lea eax, [ebp - 0x22c]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x18]
call fcn.00488b74
mov edx, dword [ebp - 0x22c]
lea eax, [ebp - 0x18]
call fcn.004051f0
mov eax, dword [ebp - 0x14]
mov edx, 0x518124
call fcn.00405590
jne 0x50ef99
mov eax, dword [0x68eb24]
mov byte [eax], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518130
call fcn.00405590
jne 0x50f0ca
mov eax, dword [0x68e988]
mov byte [eax], 1
mov eax, dword [0x68e778]
cmp byte [eax + 0x11e8], 0
je 0x50f03d
push 1
push 0
mov edx, 0x518134
lea eax, [ebp - 0x248]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x1112
lea eax, [ebp - 0x248]
mov cl, 0x13
call fcn.00403930
lea edx, [ebp - 0x248]
lea eax, [ebp - 0x260]
call fcn.00403960
mov edx, 0x51813c
lea eax, [ebp - 0x260]
mov cl, 0x14
call fcn.00403930
lea edx, [ebp - 0x260]
lea eax, [ebp - 0x234]
call fcn.004053cc
mov edx, dword [ebp - 0x234]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [0x68e778]
cmp byte [eax + 0x12eea], 0
je case.0x5103da.5079
push 1
push 0
mov edx, 0x518134
lea eax, [ebp - 0x248]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x120a6
lea eax, [ebp - 0x248]
mov cl, 0x13
call fcn.00403930
lea edx, [ebp - 0x248]
lea eax, [ebp - 0x260]
call fcn.00403960
mov edx, 0x51813c
lea eax, [ebp - 0x260]
mov cl, 0x14
call fcn.00403930
lea edx, [ebp - 0x260]
lea eax, [ebp - 0x264]
call fcn.004053cc
mov edx, dword [ebp - 0x264]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518148
call fcn.00405590
jne 0x50f1fb
mov eax, dword [0x68e988]
mov byte [eax], 0
mov eax, dword [0x68e778]
cmp byte [eax + 0x11e8], 0
je 0x50f16e
push 1
push 0
mov edx, 0x518150
lea eax, [ebp - 0x248]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x1112
lea eax, [ebp - 0x248]
mov cl, 0x13
call fcn.00403930
lea edx, [ebp - 0x248]
lea eax, [ebp - 0x260]
call fcn.00403960
mov edx, 0x51813c
lea eax, [ebp - 0x260]
mov cl, 0x14
call fcn.00403930
lea edx, [ebp - 0x260]
lea eax, [ebp - 0x268]
call fcn.004053cc
mov edx, dword [ebp - 0x268]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [0x68e778]
cmp byte [eax + 0x12eea], 0
je case.0x5103da.5079
push 1
push 0
mov edx, 0x518150
lea eax, [ebp - 0x248]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x120a6
lea eax, [ebp - 0x248]
mov cl, 0x13
call fcn.00403930
lea edx, [ebp - 0x248]
lea eax, [ebp - 0x260]
call fcn.00403960
mov edx, 0x51813c
lea eax, [ebp - 0x260]
mov cl, 0x14
call fcn.00403930
lea edx, [ebp - 0x260]
lea eax, [ebp - 0x26c]
call fcn.004053cc
mov edx, dword [ebp - 0x26c]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518160
call fcn.00405590
jne 0x50f32c
mov eax, dword [0x68eac4]
mov byte [eax], 1
mov eax, dword [0x68e778]
cmp byte [eax + 0x254e], 0
je 0x50f29f
push 1
push 0
mov edx, 0x518134
lea eax, [ebp - 0x248]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x238e
lea eax, [ebp - 0x248]
mov cl, 0x13
call fcn.00403930
lea edx, [ebp - 0x248]
lea eax, [ebp - 0x260]
call fcn.00403960
mov edx, 0x51813c
lea eax, [ebp - 0x260]
mov cl, 0x14
call fcn.00403930
lea edx, [ebp - 0x260]
lea eax, [ebp - 0x270]
call fcn.004053cc
mov edx, dword [ebp - 0x270]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [0x68e778]
cmp byte [eax + 0x13068], 0
je case.0x5103da.5079
push 1
push 0
mov edx, 0x518134
lea eax, [ebp - 0x248]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x12212
lea eax, [ebp - 0x248]
mov cl, 0x13
call fcn.00403930
lea edx, [ebp - 0x248]
lea eax, [ebp - 0x260]
call fcn.00403960
mov edx, 0x51813c
lea eax, [ebp - 0x260]
mov cl, 0x14
call fcn.00403930
lea edx, [ebp - 0x260]
lea eax, [ebp - 0x274]
call fcn.004053cc
mov edx, dword [ebp - 0x274]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x51816c
call fcn.00405590
jne 0x50f45d
mov eax, dword [0x68eac4]
mov byte [eax], 0
mov eax, dword [0x68e778]
cmp byte [eax + 0x254e], 0
je 0x50f3d0
push 1
push 0
mov edx, 0x518150
lea eax, [ebp - 0x248]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x238e
lea eax, [ebp - 0x248]
mov cl, 0x13
call fcn.00403930
lea edx, [ebp - 0x248]
lea eax, [ebp - 0x260]
call fcn.00403960
mov edx, 0x51813c
lea eax, [ebp - 0x260]
mov cl, 0x14
call fcn.00403930
lea edx, [ebp - 0x260]
lea eax, [ebp - 0x278]
call fcn.004053cc
mov edx, dword [ebp - 0x278]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [0x68e778]
cmp byte [eax + 0x13068], 0
je case.0x5103da.5079
push 1
push 0
mov edx, 0x518150
lea eax, [ebp - 0x248]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x12212
lea eax, [ebp - 0x248]
mov cl, 0x13
call fcn.00403930
lea edx, [ebp - 0x248]
lea eax, [ebp - 0x260]
call fcn.00403960
mov edx, 0x51813c
lea eax, [ebp - 0x260]
mov cl, 0x14
call fcn.00403930
lea edx, [ebp - 0x260]
lea eax, [ebp - 0x27c]
call fcn.004053cc
mov edx, dword [ebp - 0x27c]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x51817c
call fcn.00405590
jne 0x50f479
mov eax, dword [0x68ef14]
mov byte [eax], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518188
call fcn.00405590
jne 0x50f495
mov eax, dword [0x68ef14]
mov byte [eax], 0
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518198
call fcn.00405590
jne 0x50f4b1
mov eax, dword [0x68ea40]
mov byte [eax], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5181a4
call fcn.00405590
jne 0x50f4cd
mov eax, dword [0x68ea40]
mov byte [eax], 0
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5181b4
call fcn.00405590
jne 0x50f4e9
mov eax, dword [0x68e538]
mov byte [eax], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5181c0
call fcn.00405590
jne 0x50f505
mov eax, dword [0x68e538]
mov byte [eax], 0
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5181d0
call fcn.00405590
jne 0x50f5a7
mov eax, dword [0x68ecb8]
mov byte [eax], 1
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x9c6a
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2ac]
call fcn.00403960
mov edx, 0x5181dc
lea eax, [ebp - 0x2ac]
mov cl, 0x18
call fcn.00403930
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x280]
call fcn.004053cc
mov edx, dword [ebp - 0x280]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0xa425], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5181f0
call fcn.00405590
jne 0x50f67a
mov eax, dword [0x68ecb8]
mov byte [eax], 0
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x9c6a
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2c8]
call fcn.00403960
mov edx, 0x5181f8
lea eax, [ebp - 0x2c8]
mov cl, 0x16
call fcn.00403930
lea edx, [ebp - 0x2c8]
lea eax, [ebp - 0x2b0]
call fcn.004053cc
mov edx, dword [ebp - 0x2b0]
mov ecx, 0xff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0xa425], 0
mov eax, dword [0x68e740]
cmp dword [eax], 0x6e
jne case.0x5103da.5079
mov eax, dword [0x68e740]
mov dword [eax], 0xffffffff
push 1
push 0
mov ecx, 0xff00
mov edx, 0x518208
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518224
call fcn.00405590
jne 0x50f71c
mov eax, dword [0x68e880]
mov byte [eax], 1
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x9f42
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2ac]
call fcn.00403960
mov edx, 0x5181dc
lea eax, [ebp - 0x2ac]
mov cl, 0x18
call fcn.00403930
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x2cc]
call fcn.004053cc
mov edx, dword [ebp - 0x2cc]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0xa721], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518234
call fcn.00405590
jne 0x50f7ef
mov eax, dword [0x68e880]
mov byte [eax], 0
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x9f42
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2c8]
call fcn.00403960
mov edx, 0x5181f8
lea eax, [ebp - 0x2c8]
mov cl, 0x16
call fcn.00403930
lea edx, [ebp - 0x2c8]
lea eax, [ebp - 0x2d0]
call fcn.004053cc
mov edx, dword [ebp - 0x2d0]
mov ecx, 0xff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0xa721], 0
mov eax, dword [0x68e740]
cmp dword [eax], 0x70
jne case.0x5103da.5079
mov eax, dword [0x68e740]
mov dword [eax], 0xffffffff
push 1
push 0
mov ecx, 0xff00
mov edx, 0x518208
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518244
call fcn.00405590
jne 0x50f8c2
mov eax, dword [0x68e370]
mov byte [eax], 1
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0xa0ae
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2ac]
call fcn.00403960
mov edx, 0x5181dc
lea eax, [ebp - 0x2ac]
mov cl, 0x18
call fcn.00403930
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x2d4]
call fcn.004053cc
mov edx, dword [ebp - 0x2d4]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0xa89f], 1
mov eax, dword [0x68e740]
cmp dword [eax], 0x71
jne case.0x5103da.5079
mov eax, dword [0x68e740]
mov dword [eax], 0xffffffff
push 1
push 0
mov ecx, 0xff00
mov edx, 0x518208
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518254
call fcn.00405590
jne 0x50f964
mov eax, dword [0x68e370]
mov byte [eax], 0
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0xa0ae
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2c8]
call fcn.00403960
mov edx, 0x5181f8
lea eax, [ebp - 0x2c8]
mov cl, 0x16
call fcn.00403930
lea edx, [ebp - 0x2c8]
lea eax, [ebp - 0x2d8]
call fcn.004053cc
mov edx, dword [ebp - 0x2d8]
mov ecx, 0xff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0xa89f], 0
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518264
call fcn.00405590
jne 0x50fa06
mov eax, dword [0x68e914]
mov byte [eax], 1
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0xad7a
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2ac]
call fcn.00403960
mov edx, 0x5181dc
lea eax, [ebp - 0x2ac]
mov cl, 0x18
call fcn.00403930
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x2dc]
call fcn.004053cc
mov edx, dword [ebp - 0x2dc]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0xb60d], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518274
call fcn.00405590
jne 0x50faa8
mov eax, dword [0x68e914]
mov byte [eax], 0
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0xad7a
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2c8]
call fcn.00403960
mov edx, 0x5181f8
lea eax, [ebp - 0x2c8]
mov cl, 0x16
call fcn.00403930
lea edx, [ebp - 0x2c8]
lea eax, [ebp - 0x2e0]
call fcn.004053cc
mov edx, dword [ebp - 0x2e0]
mov ecx, 0xff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0xb60d], 0
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518284
call fcn.00405590
jne 0x50fbf5
mov eax, dword [0x68e670]
mov byte [eax], 1
mov eax, dword [0x68e778]
cmp byte [eax + 0x5390], 0
je 0x50fb5c
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x4fa2
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2ac]
call fcn.00403960
mov edx, 0x5181dc
lea eax, [ebp - 0x2ac]
mov cl, 0x18
call fcn.00403930
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x2e4]
call fcn.004053cc
mov edx, dword [ebp - 0x2e4]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x5391], 1
jmp case.0x5103da.5079
mov eax, dword [0x68e778]
cmp byte [eax + 0x13364], 0
je case.0x5103da.5079
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x124ea
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2ac]
call fcn.00403960
mov edx, 0x5181dc
lea eax, [ebp - 0x2ac]
mov cl, 0x18
call fcn.00403930
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x2e8]
call fcn.004053cc
mov edx, dword [ebp - 0x2e8]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x13365], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x518290
call fcn.00405590
jne 0x50fd42
mov eax, dword [0x68e670]
mov byte [eax], 0
mov eax, dword [0x68e778]
cmp byte [eax + 0x5390], 0
je 0x50fca9
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x4fa2
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2c8]
call fcn.00403960
mov edx, 0x5181f8
lea eax, [ebp - 0x2c8]
mov cl, 0x16
call fcn.00403930
lea edx, [ebp - 0x2c8]
lea eax, [ebp - 0x2ec]
call fcn.004053cc
mov edx, dword [ebp - 0x2ec]
mov ecx, 0xff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x5391], 0
jmp case.0x5103da.5079
mov eax, dword [0x68e778]
cmp byte [eax + 0x13364], 0
je case.0x5103da.5079
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x124ea
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2c8]
call fcn.00403960
mov edx, 0x5181f8
lea eax, [ebp - 0x2c8]
mov cl, 0x16
call fcn.00403930
lea edx, [ebp - 0x2c8]
lea eax, [ebp - 0x2f0]
call fcn.004053cc
mov edx, dword [ebp - 0x2f0]
mov ecx, 0xff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x13365], 0
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5182a0
call fcn.00405590
jne 0x50fe8f
mov eax, dword [0x68ed9c]
mov byte [eax], 1
mov eax, dword [0x68e778]
cmp byte [eax + 0x26cc], 0
je 0x50fdf6
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x24fa
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2ac]
call fcn.00403960
mov edx, 0x5181dc
lea eax, [ebp - 0x2ac]
mov cl, 0x18
call fcn.00403930
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x2f4]
call fcn.004053cc
mov edx, dword [ebp - 0x2f4]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x26cd], 1
jmp case.0x5103da.5079
mov eax, dword [0x68e778]
cmp byte [eax + 0x12bee], 0
je case.0x5103da.5079
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x11dce
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2ac]
call fcn.00403960
mov edx, 0x5181dc
lea eax, [ebp - 0x2ac]
mov cl, 0x18
call fcn.00403930
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x2f8]
call fcn.004053cc
mov edx, dword [ebp - 0x2f8]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x12bef], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5182ac
call fcn.00405590
jne 0x50ffdc
mov eax, dword [0x68ed9c]
mov byte [eax], 0
mov eax, dword [0x68e778]
cmp byte [eax + 0x26cc], 0
je 0x50ff43
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x24fa
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2c8]
call fcn.00403960
mov edx, 0x5181f8
lea eax, [ebp - 0x2c8]
mov cl, 0x16
call fcn.00403930
lea edx, [ebp - 0x2c8]
lea eax, [ebp - 0x2fc]
call fcn.004053cc
mov edx, dword [ebp - 0x2fc]
mov ecx, 0xff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x26cd], 0
jmp case.0x5103da.5079
mov eax, dword [0x68e778]
cmp byte [eax + 0x12bee], 0
je case.0x5103da.5079
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x11dce
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2c8]
call fcn.00403960
mov edx, 0x5181f8
lea eax, [ebp - 0x2c8]
mov cl, 0x16
call fcn.00403930
lea edx, [ebp - 0x2c8]
lea eax, [ebp - 0x300]
call fcn.004053cc
mov edx, dword [ebp - 0x300]
mov ecx, 0xff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x12bef], 0
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5182bc
call fcn.00405590
jne 0x510086
mov eax, dword [0x68eee4]
mov byte [eax], 1
mov eax, dword [0x68e644]
mov byte [eax], 1
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x3d26
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2ac]
call fcn.00403960
mov edx, 0x5181dc
lea eax, [ebp - 0x2ac]
mov cl, 0x18
call fcn.00403930
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x304]
call fcn.004053cc
mov edx, dword [ebp - 0x304]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x402b], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5182cc
call fcn.00405590
jne 0x510130
mov eax, dword [0x68eee4]
mov byte [eax], 1
mov eax, dword [0x68e644]
mov byte [eax], 0
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x3d26
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2ac]
call fcn.00403960
mov edx, 0x5181dc
lea eax, [ebp - 0x2ac]
mov cl, 0x18
call fcn.00403930
lea edx, [ebp - 0x2ac]
lea eax, [ebp - 0x308]
call fcn.004053cc
mov edx, dword [ebp - 0x308]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x402b], 1
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5182dc
call fcn.00405590
jne 0x5101d2
mov eax, dword [0x68eee4]
mov byte [eax], 0
push 1
push 0
mov edx, 0x5181d8
lea eax, [ebp - 0x290]
call fcn.00403960
mov edx, dword [0x68ef64]
add edx, 0x3d26
lea eax, [ebp - 0x290]
mov cl, 0xf
call fcn.00403930
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x2c8]
call fcn.00403960
mov edx, 0x5181f8
lea eax, [ebp - 0x2c8]
mov cl, 0x16
call fcn.00403930
lea edx, [ebp - 0x2c8]
lea eax, [ebp - 0x30c]
call fcn.004053cc
mov edx, dword [ebp - 0x30c]
mov ecx, 0xff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68e778]
mov byte [eax + 0x402b], 0
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5182ec
call fcn.00405590
jne 0x510212
mov byte [edi + 0x428], 0
mov eax, dword [0x68e33c]
inc dword [eax]
cmp dword [ebp - 0x18], 0
je case.0x5103da.5079
or edx, 0xffffffff
mov eax, dword [ebp - 0x18]
call fcn.0040a1d0
mov edx, eax
mov eax, edi
call fcn.0050ed14
jmp case.0x5103da.5079
mov eax, dword [ebp - 0x14]
mov edx, 0x5182fc
call fcn.00405590
jne case.0x5103da.5079
mov eax, edi
call fcn.0050e140
mov byte [edi + 0x428], 0
mov eax, dword [0x68e33c]
inc dword [eax]
cmp dword [ebp - 0x18], 0
je case.0x5103da.5079
or edx, 0xffffffff
mov eax, dword [ebp - 0x18]
call fcn.0040a1d0
mov edx, eax
mov eax, edi
call fcn.0050ed14
jmp case.0x5103da.5079
mov ebx, dword [ebp - 4]
mov eax, ebx
test eax, eax
je 0x51026b
sub eax, 4
mov eax, dword [eax]
cmp eax, 0x18
jge 0x5102bf
mov eax, dword [ebp - 4]
cmp byte [eax], 0x3d
jne case.0x5103da.5079
test ebx, ebx
je 0x510285
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.00405660
mov eax, dword [ebp - 0x18]
mov edx, 0x51830c
call fcn.00405590
jne case.0x5103da.5079
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov byte [eax + 0x174], 1
jmp case.0x5103da.5079
lea eax, [ebp - 8]
push eax
mov ecx, 0x18
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405660
test ebx, ebx
je 0x5102de
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
push eax
mov ecx, ebx
sub ecx, 0x18
mov edx, 0x19
mov eax, dword [ebp - 4]
call fcn.00405660
lea edx, [ebp - 0x76]
mov eax, dword [ebp - 8]
call fcn.004adf6c
mov eax, dword [0x68eab8]
cmp dword [eax], 0
jne case.0x5103da.5078
movzx eax, word [ebp - 0x72]
cmp eax, 0x13d2
jg 0x5103bf
je 0x510b7a
add eax, 0xffffec50
cmp eax, 0x21
ja case.0x5103da.5079
jmp dword [eax*4 + 0x510337]
cmp eax, 0x1402
jg 0x5103f9
je case.0x5103da.5078
add eax, 0xffffec2d
cmp eax, 5
ja case.0x5103da.5079
jmp dword [eax*4 + 0x5103e1]
cmp eax, 0x1494
jg 0x51041f
je 0x510572
sub eax, 0x1444
je case.0x5103da.5078
sub eax, 0x31
je 0x510c59
jmp case.0x5103da.5079
sub eax, 0x14bd
je case.0x5103da.5078
sub eax, 0x16
je case.0x5103da.5078
jmp case.0x5103da.5079
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x518318
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518328
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x518318
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
mov eax, dword [ebp - 0x76]
sub eax, 0xfffffffe
je 0x51053c
sub eax, 2
jne 0x510557
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518344
call fcn.004051ac
push 0x46
push 0
push 0
push 0x518350
push dword [edi + 0x3a0]
push 0x51835c
lea eax, [ebp - 0x310]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x310]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
xor edx, edx
mov eax, dword [0x69a58c]
call fcn.0053d644
xor edx, edx
mov eax, dword [0x69a590]
call fcn.005ae254
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518394
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5183b8
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68ee04]
mov eax, dword [eax]
movzx edx, word [ebp - 0x70]
mov word [eax + 0x58c], dx
mov eax, dword [0x68ee04]
mov eax, dword [eax]
movzx edx, word [ebp - 0x6c]
mov word [eax + 0x58e], dx
mov eax, dword [0x68ee04]
mov eax, dword [eax]
movzx edx, word [ebp - 0x68]
mov word [eax + 0x590], dx
xor edx, edx
mov eax, dword [0x69a58c]
call fcn.0053d644
mov dl, 5
mov eax, dword [0x69a590]
call fcn.005aed7c
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x518318
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
mov eax, dword [ebp - 0x76]
add eax, 8
cmp eax, 7
ja case.default.0x510607
jmp dword [eax*4 + 0x51060e]
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5183d8
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5183f8
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518420
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x51844c
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518470
call fcn.004051ac
jmp case.0x5103da.5078
mov byte [edi + 0x441], 1
mov eax, dword [0x69a588]
mov eax, dword [eax + 0x360]
xor edx, edx
call fcn.004762e4
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518490
call fcn.004051ac
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 3
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x5184b4
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5184c4
call fcn.004051ac
jmp case.0x5103da.5078
mov byte [edi + 0x441], 1
mov eax, dword [0x69a588]
mov eax, dword [eax + 0x360]
xor edx, edx
call fcn.004762e4
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5184f0
call fcn.004051ac
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 5
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x5184b4
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x51851c
call fcn.004051ac
jmp case.0x5103da.5078
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.00519ec0
cmp dword [ebp - 0x68], 0
je 0x5107e2
mov eax, dword [0x68f08c]
mov eax, dword [eax]
mov edx, 0x5c8
call fcn.0048ecc8
test eax, eax
je 0x5107e2
xor eax, eax
jmp 0x5107e4
mov al, 1
mov edx, dword [0x68ef08]
mov byte [edx], al
jmp case.0x5103da.5078
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051a074
jmp case.0x5103da.5078
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051f2c4
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 1
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518538
call fcn.004051ac
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x518318
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
mov eax, edi
call fcn.0050bb88
jmp case.0x5103da.5078
mov eax, dword [0x68edbc]
mov byte [eax], 0
mov eax, dword [0x68f05c]
mov byte [eax], 0
mov eax, dword [0x68ec00]
mov byte [eax], 0
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518568
call fcn.00554248
mov eax, edi
call fcn.00462e3c
jmp case.0x5103da.5078
mov edx, dword [edi + 0x44c]
mov eax, dword [0x69a588]
call fcn.0050bce8
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 3
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518584
call fcn.004051ac
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x5185a8
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 0
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 1
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x518318
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
mov eax, dword [ebp - 0x76]
add eax, 2
cmp eax, 7
ja case.default.0x510949
jmp dword [eax*4 + 0x510950]
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5185b8
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5185e4
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x51860c
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x51863c
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x51866c
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518698
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5186cc
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5185b8
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x518318
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5186f0
call fcn.004051ac
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x518318
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
mov eax, dword [ebp - 0x76]
sub eax, 0xfffffffe
je 0x510aef
dec eax
jne 0x510b0a
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x51870c
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x5183f8
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x51870c
call fcn.004051ac
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 1
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518734
call fcn.004051ac
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x518318
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
mov eax, edi
call fcn.0050bb88
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 1
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518764
call fcn.004051ac
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x518318
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 1
jmp case.0x5103da.5078
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa4], 3
mov eax, dword [0x68f170]
mov eax, dword [eax]
add eax, 0xaa8
mov edx, 0x518788
call fcn.004051ac
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov edx, 0x5185a8
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov byte [eax + 0xaa5], 0
mov dl, 4
mov eax, dword [0x69a58c]
call fcn.0053d644
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051a34c
jmp case.0x5103da.5079
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5187ac
call fcn.00554248
mov eax, dword [0x69a588]
call fcn.00462e3c
jmp case.0x5103da.5079
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5187c4
call fcn.00554248
jmp case.0x5103da.5079
movzx eax, word [ebp - 0x72]
add eax, 0xffffec77
cmp eax, 0x19a
ja case.0x510c90.5030
jmp dword [eax*4 + 0x510c97]
push edi
add edi, 0x3c8
lea esi, [ebp - 0x76]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
lea edx, [ebp - 0x314]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x314]
lea eax, [edi + 0x3dc]
call fcn.004051ac
mov eax, dword [0x68e288]
mov byte [eax], 1
mov eax, dword [edi + 0x36c]
mov dl, 1
call fcn.00436fe8
jmp case.0x510c90.5039
movzx ebx, word [ebp - 0x70]
movzx eax, word [ebp - 0x6c]
shl eax, 0x10
or ebx, eax
lea edx, [ebp - 0x34]
mov ecx, 4
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [0x68e9f0]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x76]
je case.0x510c90.5039
mov eax, dword [0x68e9f0]
cmp ebx, dword [eax]
je case.0x510c90.5039
mov eax, dword [0x68e9f0]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x34]
je case.0x510c90.5039
cmp dword [ebp - 0x34], 1
jne case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5187c4
call fcn.00554248
mov eax, dword [edi + 0x360]
call fcn.004764d0
jmp case.0x5103da.5079
mov eax, dword [0x68eb0c]
mov byte [eax], 0
mov eax, dword [0x68e288]
mov byte [eax], 0
mov eax, dword [0x68e708]
cmp byte [eax], 0
je case.0x510c90.5039
mov eax, dword [0x68f1cc]
cmp dword [eax], 0
je case.0x510c90.5039
mov eax, dword [0x68f1cc]
mov eax, dword [eax]
call fcn.0059c024
jmp case.0x510c90.5039
mov eax, dword [0x68eb28]
call fcn.00405158
mov eax, dword [0x68e84c]
xor edx, edx
mov dword [eax], edx
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov eax, dword [0x69a5ac]
mov dword [eax + 0xa6f91], 0xffffffff
call fcn.005b2ac4
mov eax, dword [0x68e3e0]
mov eax, dword [eax]
add eax, 0x2349b64
mov edx, dword [ebp - 0x1c]
call fcn.004051ac
lea edx, [ebp - 0x318]
mov eax, dword [ebp - 0x1c]
call fcn.00582700
mov edx, dword [ebp - 0x318]
mov eax, dword [0x68e3e0]
mov eax, dword [eax]
call fcn.004a7f90
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
xor ecx, ecx
mov edx, 0x13b1
mov eax, dword [0x69a598]
call fcn.0052e9bc
mov edx, dword [ebp - 0x1c]
mov eax, edi
call fcn.0050e184
jmp case.0x510c90.5039
mov eax, dword [0x68e2bc]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x68e918]
xor edx, edx
mov dword [eax], edx
lea edx, [ebp - 0x91]
mov ecx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x91]
push eax
mov eax, dword [ebp - 0x8d]
push eax
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x76]
mov edx, 0x13b0
mov eax, dword [0x69a598]
call fcn.0052e9bc
mov dl, 2
mov eax, dword [0x69a58c]
call fcn.0053d644
mov eax, dword [0x68ee64]
mov edx, dword [ebp - 0x89]
mov dword [eax], edx
mov eax, dword [0x68e2fc]
mov byte [eax], 0
mov eax, dword [0x68e398]
movzx edx, word [ebp - 0x85]
mov word [eax], dx
call fcn.004f1cac
mov eax, dword [edi + 0x420]
call fcn.004f17a4
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je 0x51156b
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.005727f8
call sub.kernel32.dll_GetTickCount
add eax, 0xea60
mov dword [edi + 0x5b8], eax
mov eax, dword [0x68edec]
mov byte [eax], 0
push 0
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x4f
mov eax, edi
call fcn.0050b274
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
mov dword [ebp - 0x48], eax
movzx eax, word [ebp - 0x70]
mov word [ebp - 0x44], ax
movzx eax, word [ebp - 0x6c]
mov word [ebp - 0x42], ax
mov eax, dword [0x68e830]
mov edx, dword [ebp - 0x48]
mov dword [eax], edx
mov edx, dword [ebp - 0x44]
mov dword [eax + 4], edx
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e910]
mov dword [edx], eax
jmp case.0x510c90.5039
mov eax, dword [0x68e3a8]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e738]
mov dword [edx], eax
cmp dword [ebp - 0xc], 0
je 0x511628
mov edx, dword [0x68e820]
mov ecx, 0x30
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [0x68e278]
xor ecx, ecx
mov edx, 0x3c
call fcn.004883d0
mov ecx, dword [0x68e820]
add ecx, 0x20
mov edx, dword [0x68e820]
mov eax, dword [0x68e278]
call fcn.0048a794
mov eax, dword [0x68e3a8]
cmp dword [eax], 0
jg 0x511640
mov eax, dword [0x68e738]
cmp dword [eax], 0
jle 0x5116c1
mov eax, dword [0x68ea68]
cmp dword [eax], 0
jne 0x5116c1
mov edx, dword [0x582420]
mov eax, 0x11
call fcn.00406310
mov edx, dword [0x68ea68]
mov dword [edx], eax
mov eax, dword [0x68ea68]
mov eax, dword [eax]
call fcn.00405158
mov eax, dword [0x68ea68]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [0x68ea68]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 8], edx
mov eax, dword [0x68ea68]
mov eax, dword [eax]
mov byte [eax + 0xc], 3
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68ea68]
mov edx, dword [edx]
mov dword [edx + 0xd], eax
mov edx, dword [0x68ea68]
mov edx, dword [edx]
mov eax, dword [0x68eca8]
mov eax, dword [eax]
call fcn.0041a1b0
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00571a54
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00572164
jmp case.0x510c90.5039
cmp dword [ebp - 0x76], 1
sete al
mov edx, dword [0x68ec48]
mov byte [edx + 0x88], al
mov eax, dword [0x68ec48]
movzx edx, byte [ebp - 0x70]
mov byte [eax + 9], dl
movzx eax, word [ebp - 0x70]
shr eax, 8
mov edx, dword [0x68ec48]
mov byte [edx + 0xa], al
mov eax, dword [0x68ec48]
movzx edx, byte [ebp - 0x6c]
mov byte [eax + 0xb], dl
movzx eax, word [ebp - 0x6c]
shr eax, 8
mov edx, dword [0x68ec48]
mov byte [edx + 0xc], al
mov eax, dword [0x68ec48]
movzx edx, byte [ebp - 0x68]
mov byte [eax + 0xd], dl
movzx eax, word [ebp - 0x68]
shr eax, 8
mov edx, dword [0x68ec48]
mov byte [edx + 0xe], al
push 0
lea eax, [ebp - 0x31c]
push eax
lea edx, [ebp - 0x320]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov eax, dword [ebp - 0x320]
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
call fcn.004889c0
mov edx, dword [ebp - 0x31c]
lea eax, [ebp - 0xc]
call fcn.004051f0
lea eax, [ebp - 0x420]
mov edx, dword [ebp - 0x1c]
mov ecx, 0xff
call fcn.00405404
lea edx, [ebp - 0x420]
mov eax, dword [0x68ec48]
add eax, 0x89
mov cl, 0x10
call fcn.0040396c
push 0
lea eax, [ebp - 0x424]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.004889c0
mov edx, dword [ebp - 0x424]
lea eax, [ebp - 0xc]
call fcn.004051f0
lea eax, [ebp - 0x420]
mov edx, dword [ebp - 0x1c]
mov ecx, 0xff
call fcn.00405404
lea edx, [ebp - 0x420]
mov eax, dword [0x68ec48]
mov cl, 8
call fcn.0040396c
lea eax, [ebp - 0x420]
mov edx, dword [ebp - 0xc]
mov ecx, 0xff
call fcn.00405404
lea edx, [ebp - 0x420]
mov eax, dword [0x68ec48]
add eax, 0xf
mov cl, 0x78
call fcn.0040396c
mov eax, dword [0x68ec48]
cmp byte [eax + 0x89], 0
je 0x5118d1
mov eax, dword [0x68f164]
push dword [eax]
lea eax, [ebp - 0x42c]
mov edx, dword [0x68ec48]
add edx, 0x89
call fcn.004053cc
push dword [ebp - 0x42c]
push 0x5187fc
lea eax, [ebp - 0x428]
mov edx, 3
call fcn.004054fc
mov eax, dword [ebp - 0x428]
call fcn.0040a570
test al, al
je 0x5118d1
mov eax, dword [0x68f164]
push dword [eax]
lea eax, [ebp - 0x434]
mov edx, dword [0x68ec48]
add edx, 0x89
call fcn.004053cc
push dword [ebp - 0x434]
push 0x5187fc
lea eax, [ebp - 0x430]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x430]
mov eax, dword [0x68f170]
mov eax, dword [eax]
lea ecx, [eax + 0x2158]
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00572374
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.0057255c
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.005230f0
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051a488
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051a6e0
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0050ed14
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051a578
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68e268]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
movzx eax, word [ebp - 0x6c]
movzx edx, word [ebp - 0x68]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68ecb4]
mov dword [edx], eax
mov eax, dword [0x68ebe8]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051b338
jmp case.0x510c90.5039
mov eax, dword [0x68ece8]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x70]
mov eax, esi
call fcn.005a4f10
jmp case.0x510c90.5039
push 0x51880c
lea edx, [ebp - 0x43c]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
push dword [ebp - 0x43c]
push 0x51881c
lea eax, [ebp - 0x438]
mov edx, 3
call fcn.004054fc
mov eax, dword [ebp - 0x438]
call fcn.0059c024
jmp case.0x510c90.5039
mov eax, dword [0x68ed6c]
mov byte [eax], 1
jmp case.0x510c90.5039
lea edx, [ebp - 0x440]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x440]
mov eax, dword [0x68ee04]
mov eax, dword [eax]
add eax, 0x6f4
call fcn.004051ac
imul eax, dword [ebp - 0x68], 0x3e8
mov edx, dword [0x68ee04]
mov edx, dword [edx]
mov dword [edx + 0x6f8], eax
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68ee04]
mov edx, dword [edx]
mov dword [edx + 0x6fc], eax
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov edx, dword [ebp - 0x6c]
mov dword [eax + 0x700], edx
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0x704], edx
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov edx, dword [ebp - 0x70]
mov dword [eax + 0x708], edx
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x514]
mov dl, 1
call fcn.00493c78
mov eax, dword [0x68ee04]
mov eax, dword [eax]
cmp dword [eax + 0x700], 0x75
jne case.0x510c90.5039
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x504]
xor edx, edx
call fcn.00493c78
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68ef8c]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68effc]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68e228]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68e8cc]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68f1ec]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68ec90]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68ed20]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68e7ec]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68efe0]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68e928]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68f058]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68ece4]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68f1e8]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68e2d4]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68e28c]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68e338]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68ebcc]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68ec68]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68ec34]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68ecc0]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68ed74]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68ef78]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68ec8c]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68e424]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68e4bc]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68ef74]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68f040]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68e3c8]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68f128]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68f1e4]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68ebec]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68e904]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68ef70]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68f03c]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68efdc]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68f09c]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68f10c]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68edb0]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68f118]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68f1c8]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68e88c]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68e3b0]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68e44c]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68ee3c]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68e580]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68f04c]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68f108]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68eb98]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68f104]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68f1a4]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68ec30]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68e854]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68e4e4]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68e574]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68e4d4]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68e564]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68ea1c]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68ead0]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68ea3c]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68eaf8]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68e690]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68e710]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68e758]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68e7e8]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68ebe0]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68ec78]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68ee38]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68ef00]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
mov eax, dword [0x68ec74]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68ecf8]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68ebc8]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
mov eax, dword [0x68ec64]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x514]
xor edx, edx
call fcn.00493c78
jmp case.0x510c90.5039
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x511f14
sub ebx, 4
mov ebx, dword [ebx]
push 0x402d5555
push 0x55555555
call fcn.004887e0
cmp ebx, eax
jle 0x511f7e
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x511f33
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x10]
push eax
push 0x402d5555
push 0x55555555
call fcn.004887e0
mov edx, eax
inc edx
mov ecx, ebx
mov eax, dword [ebp - 0xc]
call fcn.00405660
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.004ae018
push 0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x18]
call fcn.00488b74
jmp 0x511f86
lea eax, [ebp - 0x18]
call fcn.00405158
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
push 0
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x78]
push eax
movzx eax, byte [ebp - 0x77]
push eax
mov ecx, dword [ebp - 0x76]
mov edx, 0x138d
mov eax, dword [0x69a598]
call fcn.0052e9bc
cmp dword [ebp - 0x18], 0
je case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov edx, 0xff
mov eax, dword [ebp - 0x1c]
call fcn.0040a1d0
mov ecx, eax
mov edx, dword [ebp - 0x18]
mov eax, esi
call fcn.005a431c
jmp case.0x510c90.5039
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x51201e
sub ebx, 4
mov ebx, dword [ebx]
push 0x402d5555
push 0x55555555
call fcn.004887e0
cmp ebx, eax
jle 0x512088
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x51203d
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x10]
push eax
push 0x402d5555
push 0x55555555
call fcn.004887e0
mov edx, eax
inc edx
mov ecx, ebx
mov eax, dword [ebp - 0xc]
call fcn.00405660
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.004ae018
push 0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x18]
call fcn.00488b74
jmp 0x512090
lea eax, [ebp - 0x18]
call fcn.00405158
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
push 0
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x78]
push eax
movzx eax, byte [ebp - 0x77]
push eax
mov ecx, dword [ebp - 0x76]
mov edx, 0x138c
mov eax, dword [0x69a598]
call fcn.0052e9bc
cmp dword [ebp - 0x18], 0
je case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov edx, 0xff
mov eax, dword [ebp - 0x1c]
call fcn.0040a1d0
mov ecx, eax
mov edx, dword [ebp - 0x18]
mov eax, esi
call fcn.005a431c
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x76]
je case.0x510c90.5039
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
movzx edx, word [ebp - 0x72]
mov ecx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052e9bc
jmp case.0x510c90.5039
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x512167
sub ebx, 4
mov ebx, dword [ebx]
push 0x402d5555
push 0x55555555
call fcn.004887e0
cmp ebx, eax
jle 0x5121d1
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x512186
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x10]
push eax
push 0x402d5555
push 0x55555555
call fcn.004887e0
mov edx, eax
inc edx
mov ecx, ebx
mov eax, dword [ebp - 0xc]
call fcn.00405660
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.004ae018
push 0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x18]
call fcn.00488b74
jmp 0x5121d9
lea eax, [ebp - 0x18]
call fcn.00405158
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x76]
je 0x512230
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x78]
push eax
movzx eax, byte [ebp - 0x77]
push eax
movzx ecx, word [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052d5bc
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
push 0
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x78]
push eax
movzx eax, byte [ebp - 0x77]
push eax
movzx edx, word [ebp - 0x72]
mov ecx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052e9bc
cmp dword [ebp - 0x18], 0
je case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov edx, 0xff
mov eax, dword [ebp - 0x1c]
call fcn.0040a1d0
mov ecx, eax
mov edx, dword [ebp - 0x18]
mov eax, esi
call fcn.005a431c
jmp case.0x510c90.5039
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x76]
jne 0x5122f2
cmp word [ebp - 0x72], 0x1389
je 0x5122f2
cmp word [ebp - 0x72], 0x14af
je 0x5122f2
cmp word [ebp - 0x72], 0x14ea
je 0x5122f2
cmp word [ebp - 0x72], 0x138a
je 0x5122f2
cmp word [ebp - 0x72], 0x14eb
jne 0x51232b
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
push 0
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x78]
push eax
movzx eax, byte [ebp - 0x77]
push eax
movzx edx, word [ebp - 0x72]
mov ecx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052e9bc
cmp word [ebp - 0x72], 0x1389
je 0x51233f
cmp word [ebp - 0x72], 0x14af
jne case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68edc0]
mov dword [edx], eax
jmp case.0x510c90.5039
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x76]
je case.0x510c90.5039
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
push 0
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x78]
push eax
movzx eax, byte [ebp - 0x77]
push eax
movzx edx, word [ebp - 0x72]
mov ecx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052e9bc
jmp case.0x510c90.5039
mov eax, edi
call fcn.0050e140
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
push 0
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x78]
push eax
movzx eax, byte [ebp - 0x77]
push eax
mov ecx, dword [ebp - 0x76]
mov edx, 0x138d
mov eax, dword [0x69a598]
call fcn.0052e9bc
jmp case.0x510c90.5039
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x76]
je case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x70]
mov dx, 0x138f
mov eax, esi
call fcn.005a33d8
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
movzx edx, word [ebp - 0x70]
movzx eax, word [ebp - 0x6c]
shl eax, 0x10
or edx, eax
mov ecx, dword [ebp - 0x68]
mov eax, esi
mov si, 0xfff8
call fcn.00404528
jmp case.0x510c90.5039
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x76]
je case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x70]
mov dx, 0x138f
mov eax, esi
call fcn.005a33d8
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x76]
je case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
push eax
movzx eax, byte [ebp - 0x68]
push eax
push 0
movzx eax, word [ebp - 0x68]
shr eax, 8
movzx eax, al
push eax
push 0
push 0
mov ecx, dword [ebp - 0x70]
movzx edx, word [ebp - 0x72]
mov eax, esi
call fcn.005a33d8
cmp word [ebp - 0x72], 0x1392
jne case.0x510c90.5039
cmp dword [ebp - 0xc], 0
je case.0x510c90.5039
mov byte [esi + 0x174], 1
jmp case.0x510c90.5039
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x70]
movzx edx, word [ebp - 0x72]
mov eax, esi
call fcn.005a33d8
movzx eax, word [ebp - 0x30]
mov dword [esi + 0x15c], eax
movzx eax, word [ebp - 0x2e]
mov dword [esi + 0x160], eax
movzx eax, word [ebp - 0x2c]
movzx edx, word [ebp - 0x2a]
shl edx, 0x10
or eax, edx
mov dword [esi + 0x164], eax
jmp case.0x510c90.5039
lea edx, [ebp - 0x91]
mov ecx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x70]
movzx edx, word [ebp - 0x72]
mov eax, esi
call fcn.005a33d8
mov eax, dword [ebp - 0x91]
mov dword [esi + 0x15c], eax
mov eax, dword [ebp - 0x8d]
mov dword [esi + 0x160], eax
mov eax, dword [ebp - 0x89]
mov dword [esi + 0x164], eax
mov eax, dword [ebp - 0x85]
mov dword [esi + 0x16c], eax
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0040a1d0
push eax
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.005055c0
jmp case.0x510c90.5039
lea edx, [ebp - 0x38]
mov ecx, 4
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
movzx eax, word [ebp - 0x68]
shr eax, 8
movzx eax, al
push eax
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x38]
push eax
movzx ecx, byte [ebp - 0x68]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.00505648
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.005056a4
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x510c90.5039
movzx eax, word [ebp - 0x76]
call fcn.005826b4
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 1
jne 0x512706
mov eax, dword [0x68e58c]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 2
jne 0x51271b
mov eax, dword [0x68efd0]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68f1d0]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 1
jne 0x512770
push 0x46
push 0
push 0
lea edx, [ebp - 0x444]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x444]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov byte [eax + 0x4486], 0
jmp case.0x510c90.5039
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov byte [eax + 0x4486], 0
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x6c]
mov dword [eax + 0x462c], edx
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x70]
mov dword [eax + 0x4630], edx
cmp dword [ebp - 0xc], 0
je 0x5127c3
mov eax, dword [0x68e91c]
mov eax, dword [eax]
lea edx, [eax + 0x4487]
mov ecx, 0x1a4
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
jmp case.0x510c90.5039
mov eax, dword [0x68e91c]
mov eax, dword [eax]
add eax, 0x4487
xor ecx, ecx
mov edx, 0x1a4
call fcn.00403a7c
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
mov dword [edx], eax
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x68]
call fcn.004def0c
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov ecx, dword [ebp - 0x448]
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov edx, dword [ebp - 0x68]
call fcn.004f9d50
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68eab8]
mov edx, dword [edx]
mov dword [edx + 0xbc], eax
lea edx, [ebp - 0x44c]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov ecx, dword [ebp - 0x44c]
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov edx, dword [ebp - 0x68]
call fcn.004fb9cc
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
mov dword [edx], eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov ecx, 1
mov edx, dword [ebp - 0x68]
call fcn.004de93c
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
mov dword [edx], eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x68]
mov edx, 0xfffffff8
call fcn.004de93c
jmp case.0x510c90.5039
mov eax, dword [0x68e50c]
mov byte [eax + 2], 0
cmp dword [ebp - 0x68], 1
jne case.0x510c90.5039
cmp dword [ebp - 0x76], 0
jle 0x512969
mov eax, dword [0x68e50c]
movzx eax, word [eax + 0xa5]
push eax
mov edx, dword [0x68e50c]
mov edx, dword [edx + 0x97]
mov ecx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051bcac
jmp 0x512986
mov edx, dword [0x68e50c]
mov edx, dword [edx + 0x97]
mov eax, dword [0x68e50c]
movzx eax, word [eax + 0x9b]
call fcn.005b7814
lea ecx, [ebp - 0x226]
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0050ee34
lea eax, [ebp - 0x226]
call fcn.005b75e4
call sub.kernel32.dll_GetTickCount
add eax, 0x5dc
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x2188], eax
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov edx, dword [ebp - 0x226]
mov dword [eax + 0x218c], edx
jmp case.0x510c90.5039
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x68]
call fcn.004df2bc
jmp case.0x510c90.5039
mov eax, dword [0x68edbc]
mov byte [eax], 0
mov eax, dword [0x68f05c]
mov byte [eax], 0
mov eax, dword [0x68ec00]
mov byte [eax], 0
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518828
call fcn.00554248
mov eax, edi
call fcn.00462e3c
jmp case.0x510c90.5039
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je 0x512ab5
movzx eax, byte [ebp - 0x79]
mov byte [esi + 0x1a8], al
movzx eax, byte [ebp - 0x78]
mov byte [esi + 0x23c], al
movzx eax, byte [ebp - 0x77]
mov byte [esi + 0x1e], al
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x70]
movzx edx, word [ebp - 0x72]
mov eax, esi
call fcn.005a33d8
xor eax, eax
mov dword [esi + 0x93], eax
cmp dword [esi + 0xe8], 0
je case.0x510c90.5039
mov eax, dword [esi + 0xe8]
xor edx, edx
mov dword [eax + 0x16], edx
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
push 0
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x78]
push eax
movzx eax, byte [ebp - 0x77]
push eax
mov ecx, dword [ebp - 0x76]
mov edx, 0x13a3
mov eax, dword [0x69a598]
call fcn.0052e9bc
jmp case.0x510c90.5039
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
push 0
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x78]
push eax
movzx eax, byte [ebp - 0x77]
push eax
mov ecx, dword [ebp - 0x76]
mov edx, 0x13a4
mov eax, dword [0x69a598]
call fcn.0052e9bc
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 0
mov eax, dword [0x68e8b0]
sete byte [eax]
push 0
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0xc]
call fcn.00488b74
mov edx, dword [0x68e5c0]
mov ecx, 0x3c
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
xor eax, eax
call fcn.005b6ee8
mov eax, dword [ebp - 0x76]
call fcn.0059bdf4
lea edx, [ebp - 0x450]
mov eax, dword [ebp - 0x10]
call fcn.004ae018
mov edx, dword [ebp - 0x450]
lea eax, [ebp - 0x10]
call fcn.004051f0
push 0
lea eax, [ebp - 0x454]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00488b74
mov edx, dword [ebp - 0x454]
lea eax, [ebp - 0x10]
call fcn.004051f0
cmp dword [ebp - 0x1c], 0
je 0x512bf0
mov eax, dword [0x68eb04]
mov edx, dword [ebp - 0x1c]
call fcn.004051ac
push 0
lea eax, [ebp - 0x458]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00488b74
mov edx, dword [ebp - 0x458]
lea eax, [ebp - 0x10]
call fcn.004051f0
cmp dword [ebp - 0x1c], 0
je 0x512c32
mov eax, dword [0x68eb70]
mov edx, dword [ebp - 0x1c]
call fcn.004051ac
push 0
lea eax, [ebp - 0x45c]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00488b74
mov edx, dword [ebp - 0x45c]
lea eax, [ebp - 0x10]
call fcn.004051f0
cmp dword [ebp - 0x1c], 0
je 0x512c74
mov eax, dword [0x68ee60]
mov edx, dword [ebp - 0x1c]
call fcn.004051ac
push 0
lea eax, [ebp - 0x460]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00488b74
mov edx, dword [ebp - 0x460]
lea eax, [ebp - 0x10]
call fcn.004051f0
cmp dword [ebp - 0x1c], 0
je 0x512cb6
mov eax, dword [0x68ec24]
mov edx, dword [ebp - 0x1c]
call fcn.004051ac
push 0
lea eax, [ebp - 0x464]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00488b74
mov edx, dword [ebp - 0x464]
lea eax, [ebp - 0x10]
call fcn.004051f0
cmp dword [ebp - 0x1c], 0
je 0x512cf8
mov eax, dword [0x68edf4]
mov edx, dword [ebp - 0x1c]
call fcn.004051ac
push 0
lea eax, [ebp - 0x468]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00488b74
mov edx, dword [ebp - 0x468]
lea eax, [ebp - 0x10]
call fcn.004051f0
cmp dword [ebp - 0x1c], 0
je 0x512d3a
mov eax, dword [0x68e90c]
mov edx, dword [ebp - 0x1c]
call fcn.004051ac
push 0
lea eax, [ebp - 0x46c]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00488b74
mov edx, dword [ebp - 0x46c]
lea eax, [ebp - 0x10]
call fcn.004051f0
cmp dword [ebp - 0x1c], 0
je 0x512d7c
mov eax, dword [0x68e2b4]
mov edx, dword [ebp - 0x1c]
call fcn.004051ac
push 0
lea eax, [ebp - 0x470]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00488b74
mov edx, dword [ebp - 0x470]
lea eax, [ebp - 0x10]
call fcn.004051f0
cmp dword [ebp - 0x1c], 0
je 0x512dbe
mov eax, dword [0x68e4d8]
mov edx, dword [ebp - 0x1c]
call fcn.004051ac
push 0
lea eax, [ebp - 0x474]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00488b74
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 0x10]
call fcn.004051f0
cmp dword [ebp - 0x1c], 0
je case.0x510c90.5039
mov eax, dword [0x68f068]
mov edx, dword [ebp - 0x1c]
call fcn.004051ac
jmp case.0x510c90.5039
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x81]
push eax
mov eax, dword [ebp - 0x7d]
push eax
push 0
movzx eax, byte [ebp - 0x79]
push eax
movzx eax, byte [ebp - 0x78]
push eax
movzx eax, byte [ebp - 0x77]
push eax
mov ecx, dword [ebp - 0x76]
mov edx, 0x139e
mov eax, dword [0x69a598]
call fcn.0052e9bc
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.00523204
mov eax, dword [ebp - 0x76]
call fcn.0059bf6c
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
mov eax, dword [0x68eab8]
mov eax, dword [eax]
movzx edx, byte [ebp - 0x70]
mov byte [eax + 0x1e], dl
movzx eax, word [ebp - 0x6c]
movzx edx, word [ebp - 0x68]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
mov dword [edx], eax
mov eax, dword [0x68eab8]
mov eax, dword [eax]
lea edx, [eax + 0x59]
mov ecx, 0x5e
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [0x68eab8]
mov eax, dword [eax]
cmp word [eax + 0x59], 2
jae case.0x510c90.5039
mov al, 1
call fcn.004f16c0
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x510c90.5039
lea edx, [ebp - 0x9d]
mov ecx, 0xc
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
movzx eax, byte [ebp - 0x70]
mov edx, dword [0x68e280]
mov dword [edx], eax
movzx eax, word [ebp - 0x70]
shr eax, 8
movzx eax, al
mov edx, dword [0x68e8f0]
mov dword [edx], eax
movzx eax, byte [ebp - 0x6c]
mov edx, dword [0x68ea08]
mov dword [edx], eax
movzx eax, word [ebp - 0x6c]
shr eax, 8
movzx eax, al
mov edx, dword [0x68ea04]
mov dword [edx], eax
movzx eax, byte [ebp - 0x68]
mov edx, dword [0x68eac0]
mov dword [edx], eax
movzx eax, word [ebp - 0x68]
shr eax, 8
movzx eax, al
mov edx, dword [0x68ea6c]
mov dword [edx], eax
movzx eax, byte [ebp - 0x76]
mov edx, dword [0x68e704]
mov dword [edx], eax
movzx eax, word [ebp - 0x76]
shr eax, 8
mov edx, dword [0x68eab8]
mov edx, dword [edx]
mov byte [edx + 0x23c], al
mov eax, dword [ebp - 0x76]
shr eax, 0x10
mov edx, dword [0x68f15c]
mov byte [edx], al
mov eax, dword [ebp - 0x76]
shr eax, 0x10
movzx eax, ax
shr eax, 8
mov edx, dword [0x68f000]
mov byte [edx], al
mov eax, dword [0x68e4a4]
movzx edx, byte [ebp - 0x9d]
mov byte [eax], dl
movzx eax, word [ebp - 0x9d]
shr eax, 8
mov edx, dword [0x68ea70]
mov byte [edx], al
mov eax, dword [ebp - 0x9d]
shr eax, 0x10
movzx eax, al
mov edx, dword [0x68ebfc]
mov dword [edx], eax
mov eax, dword [0x68f0a4]
mov edx, dword [ebp - 0x99]
mov dword [eax], edx
mov eax, dword [0x68ecc8]
mov edx, dword [ebp - 0x95]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x510c90.5039
movzx eax, byte [ebp - 0x70]
mov edx, dword [0x68e890]
mov dword [edx], eax
movzx eax, word [ebp - 0x70]
shr eax, 8
movzx eax, al
mov edx, dword [0x68e584]
mov dword [edx], eax
mov eax, dword [0x68edc4]
mov edx, dword [ebp - 0x6c]
mov dword [eax], edx
jmp case.0x510c90.5039
mov eax, dword [0x68f0a4]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
movzx eax, word [ebp - 0x6c]
movzx edx, word [ebp - 0x68]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68ecc8]
mov dword [edx], eax
jmp case.0x510c90.5039
lea edx, [ebp - 0x478]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x478]
mov eax, dword [0x68e39c]
call fcn.004051ac
jmp case.0x510c90.5039
lea edx, [ebp - 0x47c]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov eax, dword [ebp - 0x47c]
push eax
mov ecx, dword [ebp - 0x76]
shr ecx, 0x10
movzx ecx, cx
movzx edx, word [ebp - 0x76]
mov eax, edi
call fcn.004ff778
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 2
jne 0x51310d
mov eax, dword [0x68e7a8]
movzx edx, byte [ebp - 0x76]
mov byte [eax + 0xe9f], dl
push 1
push 0
push 0x518874
lea edx, [ebp - 0x484]
mov eax, dword [ebp - 0x76]
call fcn.0040a028
push dword [ebp - 0x484]
push 0x518898
lea eax, [ebp - 0x480]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x480]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 1
jne 0x513203
mov eax, dword [0x68e7a8]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xe3f], edx
mov eax, dword [0x68e600]
cmp byte [eax + 9], 0
je 0x5131a9
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e600]
movzx edx, word [edx + 0xa]
cmp eax, edx
jbe case.0x510c90.5039
push 1
push 0
push 0x5188ac
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x48c]
call fcn.0040a114
push dword [ebp - 0x48c]
push 0x5188c4
lea eax, [ebp - 0x488]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x488]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
push 1
push 0
push 0x5188ac
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x494]
call fcn.0040a114
push dword [ebp - 0x494]
push 0x5188c4
lea eax, [ebp - 0x490]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x490]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xa3], edx
mov eax, dword [0x68e600]
cmp byte [eax + 9], 0
je 0x513297
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e600]
movzx edx, word [edx + 0xa]
cmp eax, edx
jbe case.0x510c90.5039
push 1
push 0
push 0x5188ac
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x49c]
call fcn.0040a114
push dword [ebp - 0x49c]
push 0x5188e0
lea eax, [ebp - 0x498]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x498]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
push 1
push 0
push 0x5188ac
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x4a4]
call fcn.0040a114
push dword [ebp - 0x4a4]
push 0x5188e0
lea eax, [ebp - 0x4a0]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x4a0]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 4
jne 0x51333e
push 1
push 0
push 0x518874
lea edx, [ebp - 0x4ac]
mov eax, dword [ebp - 0x76]
call fcn.0040a028
push dword [ebp - 0x4ac]
push 0x518898
lea eax, [ebp - 0x4a8]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x4a8]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
cmp dword [ebp - 0x68], 1
jne 0x513399
push 1
push 0
push 0x5188ac
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x4b4]
call fcn.0040a114
push dword [ebp - 0x4b4]
push 0x5188c4
lea eax, [ebp - 0x4b0]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x4b0]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
cmp dword [ebp - 0x68], 2
jne 0x5133f4
push 1
push 0
push 0x5188f8
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x4bc]
call fcn.0040a114
push dword [ebp - 0x4bc]
push 0x51891c
lea eax, [ebp - 0x4b8]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x4b8]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
cmp dword [ebp - 0x68], 3
jne case.0x510c90.5039
push 1
push 0
push 0x51892c
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x4c4]
call fcn.0040a114
push dword [ebp - 0x4c4]
push 0x51891c
lea eax, [ebp - 0x4c0]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x4c0]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
mov eax, dword [0x68ecfc]
movzx edx, word [ebp - 0x68]
mov word [eax], dx
mov eax, dword [0x68eab8]
mov eax, dword [eax]
movzx eax, word [eax + 0x59]
cmp eax, dword [ebp - 0x70]
je case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
movzx edx, word [ebp - 0x70]
mov word [eax + 0x59], dx
push 1
push 0
push 0x518950
mov eax, dword [ebp - 0x70]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x4cc]
call fcn.0040a114
push dword [ebp - 0x4cc]
push 0x518970
lea eax, [ebp - 0x4c8]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x4c8]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x69a598]
call fcn.0052d1e8
jmp case.0x510c90.5039
mov eax, dword [0x68eeac]
mov byte [eax], 0
mov eax, dword [0x68ecfc]
movzx edx, word [ebp - 0x68]
mov word [eax], dx
mov eax, dword [0x68f0b8]
movzx edx, byte [ebp - 0x70]
mov byte [eax], dl
movzx eax, word [ebp - 0x70]
shr eax, 8
mov edx, dword [0x68ebe4]
mov byte [edx], al
mov eax, dword [0x68e618]
movzx edx, byte [ebp - 0x6c]
mov byte [eax], dl
movzx eax, word [ebp - 0x6c]
shr eax, 8
mov edx, dword [0x68e35c]
mov byte [edx], al
mov edx, dword [0x68e6e0]
mov ecx, 0xa
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je 0x51356f
mov eax, dword [ebp - 0x70]
mov dword [esi + 0x93], eax
mov eax, dword [ebp - 0x6c]
mov dword [esi + 0x97], eax
mov eax, dword [ebp - 0x68]
mov dword [esi + 0x9b], eax
cmp dword [esi + 0xe8], 0
je case.0x510c90.5039
mov eax, dword [esi + 0xe8]
mov edx, dword [ebp - 0x70]
mov dword [eax + 0x16], edx
mov eax, dword [esi + 0xe8]
mov edx, dword [ebp - 0x6c]
mov dword [eax + 0x1a], edx
mov eax, dword [esi + 0xe8]
mov edx, dword [ebp - 0x68]
mov dword [eax + 0x1e], edx
mov eax, dword [esi + 0xe8]
mov eax, dword [eax + 0x1a]
mov edx, dword [esi + 0xe8]
cmp eax, dword [edx + 0x22]
jle case.0x510c90.5039
mov eax, dword [esi + 0xe8]
mov eax, dword [eax + 0x1a]
mov edx, dword [esi + 0xe8]
mov dword [edx + 0x22], eax
jmp case.0x510c90.5039
lea edx, [ebp - 0x91]
mov ecx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp esi, dword [eax]
jne 0x51361e
mov eax, dword [0x68eab8]
mov eax, dword [eax]
cmp byte [eax + 0x58], 0xf9
jne 0x513630
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e24c]
mov dword [edx], eax
jmp 0x513630
mov eax, esi
call fcn.005a7fd8
test al, al
je 0x513630
mov eax, esi
call fcn.005a7ff4
mov eax, dword [0x68eab8]
cmp esi, dword [eax]
je 0x51366a
push 0
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x91]
push eax
mov eax, dword [ebp - 0x8d]
push eax
push 0
mov eax, dword [ebp - 0x89]
push eax
movzx ecx, word [ebp - 0x85]
mov dx, 0x13a2
mov eax, esi
call fcn.005a34b4
jmp 0x51367c
mov eax, dword [ebp - 0x85]
shr eax, 0x10
mov edx, dword [0x68e398]
mov word [edx], ax
mov ecx, dword [ebp - 0x68]
mov edx, esi
mov eax, edi
call fcn.00504770
mov eax, dword [ebp - 0x70]
mov dword [esi + 0x93], eax
mov eax, dword [ebp - 0x6c]
mov dword [esi + 0x9b], eax
cmp dword [esi + 0xe8], 0
je case.0x510c90.5039
mov eax, dword [esi + 0xe8]
mov edx, dword [ebp - 0x70]
mov dword [eax + 0x16], edx
mov eax, dword [esi + 0xe8]
mov edx, dword [ebp - 0x6c]
mov dword [eax + 0x1e], edx
jmp case.0x510c90.5039
lea edx, [ebp - 0x4d0]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov ecx, dword [ebp - 0x4d0]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.00520730
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
lea edx, [ebp - 0x81]
mov ecx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov dword [esi + 0x19c], eax
mov eax, dword [ebp - 0x81]
mov dword [esi + 0x1a0], eax
mov eax, dword [ebp - 0x7d]
mov dword [esi + 0x1a4], eax
movzx eax, byte [ebp - 0x79]
mov byte [esi + 0x1a8], al
movzx eax, byte [ebp - 0x78]
mov byte [esi + 0x23c], al
movzx eax, byte [ebp - 0x77]
mov byte [esi + 0x1e], al
mov eax, dword [esi + 0x19c]
call fcn.005b86fc
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp esi, dword [eax]
je 0x513796
mov eax, dword [ebp - 0x70]
mov dword [esi + 0x93], eax
mov eax, dword [ebp - 0x6c]
mov dword [esi + 0x9b], eax
cmp dword [esi + 0xe8], 0
je 0x5137b7
mov eax, dword [esi + 0xe8]
mov edx, dword [ebp - 0x70]
mov dword [eax + 0x16], edx
mov eax, dword [esi + 0xe8]
mov edx, dword [ebp - 0x6c]
mov dword [eax + 0x1e], edx
mov byte [esi + 0x1ec], 1
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov byte [esi + 0x1ec], 0
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.00520940
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov eax, dword [ebp - 0x70]
mov dword [esi + 0x93], eax
mov eax, dword [ebp - 0x6c]
mov dword [esi + 0x9b], eax
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
mov eax, esi
mov edx, dword [0x5a0964]
call fcn.004044b8
test al, al
je case.0x510c90.5039
mov eax, esi
call fcn.005ab828
jmp case.0x510c90.5039
cmp byte [0x68a2bc], 0
je 0x513888
mov eax, dword [ebp - 0xc]
call fcn.004fdaa0
lea edx, [ebp - 0x4d4]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov eax, dword [ebp - 0x4d4]
call fcn.004fdaa0
lea edx, [ebp - 0x4d8]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov ecx, dword [ebp - 0x4d8]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051fa94
jmp case.0x510c90.5039
push 1
push 0
lea edx, [ebp - 0x4dc]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x4dc]
mov ecx, dword [ebp - 0x76]
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051f768
jmp case.0x510c90.5039
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
movzx eax, byte [ebp - 0x6c]
mov byte [esi + 0x23c], al
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x1c]
mov eax, esi
call fcn.005a431c
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
push 0
mov ecx, dword [ebp - 0x70]
xor edx, edx
mov eax, esi
mov si, 0xfffa
call fcn.00404528
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x76]
je case.0x510c90.5039
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x76]
mov edx, 0x13a0
mov eax, dword [0x69a598]
call fcn.0052e9bc
jmp case.0x510c90.5039
lea edx, [ebp - 0x91]
mov ecx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
jne 0x5139ea
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x91]
push eax
mov eax, dword [ebp - 0x8d]
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
movzx ecx, word [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052d5bc
mov esi, eax
mov eax, dword [ebp - 0x89]
mov dword [esi + 0x170], eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x91]
push eax
mov eax, dword [ebp - 0x8d]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x70]
mov dx, 0x1397
mov eax, esi
call fcn.005a33d8
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x6c]
push eax
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x76]
mov edx, 0x1398
mov eax, dword [0x69a598]
call fcn.0052e9bc
jmp case.0x510c90.5039
movzx eax, word [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x76]
mov dl, 1
mov eax, dword [0x53b26c]
call fcn.0053b390
mov ebx, eax
xor eax, eax
mov dword [ebx + 0xc], eax
lea edx, [ebp - 0x4e0]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov eax, dword [ebp - 0x4e0]
xor edx, edx
call fcn.0040a1d0
mov dword [ebx + 0x3c], eax
mov edx, ebx
mov eax, dword [0x69a5a8]
call fcn.0053b9fc
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a5a8]
call fcn.0053ba54
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051b710
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051b8c8
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051bf20
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051bd34
jmp case.0x510c90.5039
mov eax, dword [0x68f0ac]
add eax, 6
or edx, 0xffffffff
call fcn.005b7208
mov eax, dword [0x68f0ac]
mov byte [eax + 8], 0
call fcn.005b7a34
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.005718bc
call fcn.005b7a7c
jmp case.0x510c90.5039
mov eax, dword [0x68f0ac]
mov eax, dword [eax]
sub eax, 3
jae 0x513b54
mov eax, dword [0x68f0ac]
imul eax, dword [eax], 0x43
mov edx, dword [0x68e63c]
mov ecx, dword [0x68f0ac]
lea edi, [edx + eax*4]
lea esi, [ecx + 6]
mov ecx, 0x43
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x68f0ac]
mov byte [eax + 8], 0
call fcn.005b7a34
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.005718bc
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x518984
call fcn.00554248
call fcn.005b7a7c
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051beb8
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x68]
sub eax, 3
jae 0x513bca
imul eax, dword [ebp - 0x68], 0x43
mov edx, dword [0x68e63c]
mov ecx, dword [0x68f0ac]
lea edi, [edx + eax*4]
lea esi, [ecx + 6]
mov ecx, 0x43
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x68f0ac]
mov byte [eax + 8], 0
call fcn.005b7a34
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.005718bc
call fcn.005b7a7c
jmp case.0x510c90.5039
mov edx, dword [0x68f0ac]
mov edx, dword [edx]
mov eax, dword [0x68f0ac]
add eax, 6
call fcn.005b7208
mov eax, dword [0x68f0ac]
mov byte [eax + 8], 0
call fcn.005b7a34
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.005718bc
call fcn.005b7a7c
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051bad8
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051bbc4
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051bbcc
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
call fcn.005b7c80
call fcn.005b7a7c
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051cfb4
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051cc48
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051c080
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x70]
shr eax, 0x10
movzx eax, ax
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
lea edx, [ebp - 0x4e4]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov eax, dword [ebp - 0x4e4]
push eax
movzx ecx, word [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051d3e4
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051d590
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x70]
mov eax, dword [0x69a5ac]
call fcn.00523c14
jmp case.0x510c90.5039
push 1
push 0
mov ecx, 0xffffff
mov edx, 0x5189cc
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x70]
mov eax, dword [0x69a5ac]
call fcn.00523cfc
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0x24], edx
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov si, 0xfff1
call fcn.00404528
imul eax, dword [ebp - 0x68], 0x43
mov edx, dword [0x68e7a8]
lea ecx, [edx + eax*4 + 0x97]
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0050ee34
imul eax, dword [ebp - 0x68], 0x43
mov edx, dword [0x68e7a8]
movzx eax, word [edx + eax*4 + 0x9b]
lea edx, [ebp - 0x57c]
call fcn.00584258
imul eax, dword [ebp - 0x68], 0x43
mov edx, dword [0x68e7a8]
lea esi, [ebp - 0x57c]
lea edi, [edx + eax*4]
mov ecx, 0x25
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0x24], edx
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov si, 0xfff1
call fcn.00404528
mov eax, dword [0x68e3a0]
mov eax, dword [eax]
sub eax, 0x10
jae 0x513df0
mov eax, dword [0x68e3a0]
imul eax, dword [eax], 0x43
mov edx, dword [0x68e7a8]
mov ecx, dword [0x68e3a0]
lea edi, [edx + eax*4]
lea esi, [ecx + 6]
mov ecx, 0x43
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x68e3a0]
mov eax, dword [eax]
add eax, 0xfffffff0
sub eax, 5
jae 0x513e37
lea edx, [ebp - 0x590]
mov eax, dword [0x68e3a0]
add eax, 0x9d
call fcn.0048ba3c
mov eax, dword [0x68e3a0]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov edx, dword [0x68e7a8]
lea esi, [ebp - 0x590]
lea edi, [edx + eax*2 + 0xd23]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [0x68e3a0]
mov byte [eax + 8], 0
call fcn.005b7a7c
jmp case.0x510c90.5039
mov eax, dword [0x68e3a0]
add eax, 6
or edx, 0xffffffff
call fcn.005b7208
mov eax, dword [0x68e3a0]
mov byte [eax + 8], 0
call fcn.005b7a7c
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0x24], edx
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov si, 0xfff1
call fcn.00404528
mov eax, dword [0x68e3a0]
add eax, 6
or edx, 0xffffffff
call fcn.005b7208
mov eax, dword [0x68e3a0]
mov byte [eax + 8], 0
call fcn.005b7a7c
jmp case.0x510c90.5039
mov eax, dword [0x68e3a0]
cmp dword [eax], 0
jge 0x513f22
mov esi, dword [0x68e3a0]
mov esi, dword [esi]
inc esi
neg esi
mov eax, esi
sub eax, 0x10
jae 0x513ee7
imul eax, esi, 0x43
mov edx, dword [0x68e7a8]
mov ecx, dword [0x68e3a0]
push esi
lea edi, [edx + eax*4]
lea esi, [ecx + 6]
mov ecx, 0x43
rep movsd dword es:[edi], dword [esi]
pop esi
mov eax, esi
add eax, 0xfffffff0
sub eax, 5
jae 0x513f22
lea edx, [ebp - 0x590]
mov eax, dword [0x68e3a0]
add eax, 0x9d
call fcn.0048ba3c
lea eax, [esi + esi*8]
mov edx, dword [0x68e7a8]
lea esi, [ebp - 0x590]
lea edi, [edx + eax*2 + 0xd23]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [0x68e3a0]
mov byte [eax + 8], 0
call fcn.005b7a7c
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
mov dl, 1
call fcn.00493c78
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c4]
mov dl, 1
call fcn.00493c78
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3a0]
mov dl, 1
call fcn.00493c78
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
mov dl, 1
call fcn.00493c78
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
sub eax, 0xfffffffd
je 0x514079
dec eax
je 0x51403f
dec eax
je 0x514005
sub eax, 2
je 0x5140b3
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x5189e4
call fcn.00554248
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov byte [eax + 0x1291], 0
mov eax, dword [0x68e5b4]
mov byte [eax + 2], 0
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x518a0c
call fcn.00554248
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov byte [eax + 0x1291], 0
mov eax, dword [0x68e5b4]
mov byte [eax + 2], 0
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x518a38
call fcn.00554248
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov byte [eax + 0x1291], 0
mov eax, dword [0x68e5b4]
mov byte [eax + 2], 0
jmp case.0x510c90.5039
mov eax, dword [0x68ec18]
cmp byte [eax], 6
jne 0x5140d0
mov eax, dword [0x68ec18]
mov byte [eax], 0
mov dx, 1
mov eax, edi
call fcn.00447e40
mov eax, 0x3e
call fcn.005b2744
mov eax, dword [0x68e514]
mov eax, dword [eax]
movzx edx, byte [ebp - 0x68]
mov byte [eax + 0x15dc], dl
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e514]
mov edx, dword [edx]
mov dword [edx + 0x15d8], eax
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov byte [eax + 0x15d0], 1
mov eax, dword [0x68e514]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x15d4], edx
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e514]
mov edx, dword [edx]
mov edx, dword [edx + 0x374]
mov dword [edx + 0x334], eax
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051d750
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052ce24
mov esi, eax
test esi, esi
je case.0x510c90.5039
cmp dword [ebp - 0x68], 1
sete al
mov byte [esi + 0x134], al
cmp byte [esi + 0x134], 0
je 0x514218
lea edx, [ebp - 0x594]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x594]
lea eax, [ebp - 0x420]
mov ecx, 0xff
call fcn.00405404
lea edx, [ebp - 0x420]
lea eax, [esi + 0x137]
mov cl, 0x18
call fcn.0040396c
movzx eax, byte [ebp - 0x70]
dec eax
mov byte [esi + 0x135], al
movzx eax, word [ebp - 0x70]
shr eax, 8
test al, al
setne al
mov byte [esi + 0x136], al
cmp byte [esi + 0x136], 0
je 0x5141e7
mov byte [esi + 0x14], 1
jmp 0x5141eb
mov byte [esi + 0x14], 5
mov eax, dword [0x68e700]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x76]
jne 0x514254
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x4c0]
xor edx, edx
call fcn.00493c78
mov eax, dword [0x68f110]
mov dword [eax], 0xffffffff
jmp 0x514254
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x4c0]
cmp byte [eax + 0x314], 0
je 0x514254
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x6f0]
cmp eax, dword [ebp - 0x76]
jne 0x514254
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x4c0]
xor edx, edx
call fcn.00493c78
mov eax, esi
mov si, 0xfff9
call fcn.00404528
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051dba8
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68eab8]
mov edx, dword [edx]
mov dword [edx + 0xbc], eax
mov eax, dword [ebp - 0x68]
cmp eax, 0xf
ja case.0x5142ad.0
jmp dword [eax*4 + 0x5142b4]
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x518a64
call fcn.00554248
jmp case.0x5142ad.0
push 0x46
push 0
push 0
push 0x518a94
mov eax, dword [0x68ecf0]
push dword [eax]
push 0x518ab4
lea eax, [ebp - 0x598]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x598]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
call fcn.00554248
jmp case.0x5142ad.0
push 0x46
push 0
push 0
push 0x518a94
mov eax, dword [0x68e544]
push dword [eax]
push 0x518ab4
lea eax, [ebp - 0x59c]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x59c]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
call fcn.00554248
jmp case.0x5142ad.0
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x518ac4
call fcn.00554248
jmp case.0x5142ad.0
cmp dword [ebp - 0xc], 0
je case.0x5142ad.0
lea edx, [ebp - 0x5a0]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x5a0]
lea eax, [ebp - 0xc]
call fcn.004051f0
push 0
lea eax, [ebp - 0x5a4]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.00488b74
mov edx, dword [ebp - 0x5a4]
lea eax, [ebp - 0xc]
call fcn.004051f0
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.0040a1d0
mov esi, eax
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0040a1d0
mov dword [ebp - 0x34], eax
mov eax, esi
sub eax, 0xc
jae case.0x5142ad.0
cmp dword [ebp - 0x34], 0
jle 0x5144d3
mov eax, dword [0x68eb48]
movzx eax, word [eax + 0xa9]
cmp eax, dword [ebp - 0x34]
jle 0x51447d
mov eax, dword [0x68eb48]
movzx edx, word [ebp - 0x34]
sub word [eax + 0xa9], dx
mov edx, dword [0x68eb48]
mov edx, dword [edx]
mov eax, dword [0x68eb48]
add eax, 6
call fcn.005b7208
imul eax, esi, 0x119
mov edx, dword [0x68eb9c]
movzx eax, word [edx + eax + 0xae]
cmp eax, dword [ebp - 0x34]
jle 0x5144b3
imul eax, esi, 0x119
mov edx, dword [0x68eb9c]
movzx ecx, word [ebp - 0x34]
sub word [edx + eax + 0xae], cx
jmp case.0x5142ad.0
imul eax, esi, 0x119
mov edx, dword [0x68eb9c]
lea eax, [edx + eax]
xor ecx, ecx
mov edx, 0x119
call fcn.004883d0
jmp case.0x5142ad.0
imul eax, esi, 0x119
mov edx, dword [0x68eb9c]
test byte [edx + eax + 0x1e], 4
je 0x514563
imul eax, esi, 0x119
mov edx, dword [0x68eb9c]
cmp word [edx + eax + 0x2b], 1
jbe 0x514563
imul eax, esi, 0x119
mov edx, dword [0x68eb9c]
movzx eax, word [edx + eax + 0xae]
mov edx, dword [0x68eb48]
cmp ax, word [edx + 0xa9]
jbe 0x514543
imul eax, esi, 0x119
mov edx, dword [0x68eb9c]
mov ecx, dword [0x68eb48]
movzx ecx, word [ecx + 0xa9]
sub word [edx + eax + 0xae], cx
jmp case.0x5142ad.0
imul eax, esi, 0x119
mov edx, dword [0x68eb9c]
lea eax, [edx + eax]
xor ecx, ecx
mov edx, 0x119
call fcn.004883d0
jmp case.0x5142ad.0
imul eax, esi, 0x119
mov edx, dword [0x68eb9c]
lea eax, [edx + eax]
xor ecx, ecx
mov edx, 0x119
call fcn.004883d0
jmp case.0x5142ad.0
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x518af0
call fcn.00554248
jmp case.0x5142ad.0
push 0x46
push 0
push 0
push 0x518b24
mov eax, dword [0x68ecf0]
push dword [eax]
push 0x518b44
lea eax, [ebp - 0x5a8]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x5a8]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
call fcn.00554248
jmp case.0x5142ad.0
push 0x46
push 0
push 0
push 0x518b24
mov eax, dword [0x68e544]
push dword [eax]
push 0x518b44
lea eax, [ebp - 0x5ac]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x5ac]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
call fcn.00554248
jmp case.0x5142ad.0
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x518b5c
call fcn.00554248
jmp case.0x5142ad.0
mov ebx, 0xc
mov eax, dword [0x68ec0c]
add eax, 0xa2
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov edx, dword [0x68eb48]
cmp eax, dword [edx + 0x9d]
jne 0x514762
cmp dword [ebp - 0xc], 0
je 0x51473c
lea edx, [ebp - 0x5b0]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x5b0]
lea eax, [ebp - 0xc]
call fcn.004051f0
push 0
lea eax, [ebp - 0x5b4]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.00488b74
mov edx, dword [ebp - 0x5b4]
lea eax, [ebp - 0xc]
call fcn.004051f0
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.0040a1d0
mov esi, eax
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0040a1d0
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jle 0x5146fb
mov eax, dword [ebp - 0x64]
movzx edx, word [ebp - 0x34]
sub word [eax + 0xc], dx
test esi, esi
jle case.0x5142ad.0
cmp dword [ebp - 0x34], 0
jle case.0x5142ad.0
mov eax, dword [0x68eb48]
push esi
mov esi, eax
lea edi, [ebp - 0x1b4]
mov ecx, 0x45
rep movsd dword es:[edi], dword [esi]
pop esi
mov dword [ebp - 0x117], esi
movzx eax, word [ebp - 0x34]
mov word [ebp - 0x10b], ax
or edx, 0xffffffff
lea eax, [ebp - 0x1ae]
call fcn.005b7208
jmp case.0x5142ad.0
mov eax, dword [ebp - 0x64]
add eax, 0xffffff5e
xor ecx, ecx
mov edx, 0x119
call fcn.004883d0
mov eax, dword [0x68eb48]
add eax, 6
or edx, 0xffffffff
call fcn.005b7208
jmp case.0x5142ad.0
add dword [ebp - 0x64], 0x119
dec ebx
jne 0x514665
mov eax, dword [0x68eb48]
mov byte [eax + 8], 0
jmp case.0x510c90.5039
push 0
lea eax, [ebp - 0x5b8]
push eax
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.00488b74
mov edx, dword [ebp - 0x5b8]
lea eax, [ebp - 0xc]
call fcn.004051f0
call fcn.0040c18c
fstp qword [ebp - 0x50]
wait
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
lea eax, [ebp - 0x20]
mov edx, 0x518b88
call fcn.0040cd8c
push dword [ebp - 0x20]
lea edx, [ebp - 0x5c0]
mov eax, dword [ebp - 0x1c]
call fcn.004ae018
push dword [ebp - 0x5c0]
push 0x518ba0
lea edx, [ebp - 0x5c4]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
push dword [ebp - 0x5c4]
lea eax, [ebp - 0x5bc]
mov edx, 4
call fcn.004054fc
mov edx, dword [ebp - 0x5bc]
mov eax, dword [0x68ee04]
mov eax, dword [eax]
call fcn.004cf0e4
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 1
jne 0x51491d
mov ebx, 0xc
mov eax, dword [0x68e30c]
add eax, 0xa2
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x76]
jne 0x51490a
call fcn.0040c18c
fstp qword [ebp - 0x58]
wait
push dword [ebp - 0x54]
push dword [ebp - 0x58]
lea eax, [ebp - 0x24]
mov edx, 0x518b88
call fcn.0040cd8c
push dword [ebp - 0x24]
lea edx, [ebp - 0x5cc]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
push dword [ebp - 0x5cc]
push 0x518bac
lea eax, [ebp - 0x5d0]
mov edx, dword [ebp - 0x64]
add edx, 0xffffff6b
call fcn.004053cc
push dword [ebp - 0x5d0]
push 0x518bc4
mov eax, dword [ebp - 0x6c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x5d4]
call fcn.0040a114
push dword [ebp - 0x5d4]
lea eax, [ebp - 0x5c8]
mov edx, 6
call fcn.004054fc
mov edx, dword [ebp - 0x5c8]
mov eax, dword [0x68ee04]
mov eax, dword [eax]
call fcn.004cf0e4
cmp dword [ebp - 0x70], 0
jbe 0x5148f1
mov eax, dword [ebp - 0x64]
movzx edx, word [ebp - 0x70]
mov word [eax + 0xc], dx
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x64]
add eax, 0xffffff5e
xor ecx, ecx
mov edx, 0x119
call fcn.004883d0
jmp case.0x510c90.5039
add dword [ebp - 0x64], 0x119
dec ebx
jne 0x51483c
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
sub eax, 0xc
jae case.0x510c90.5039
call fcn.0040c18c
fstp qword [ebp - 0x60]
wait
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
lea eax, [ebp - 0x28]
mov edx, 0x518b88
call fcn.0040cd8c
push dword [ebp - 0x28]
lea edx, [ebp - 0x5dc]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
push dword [ebp - 0x5dc]
push 0x518bd4
lea eax, [ebp - 0x5e0]
imul edx, dword [ebp - 0x6c], 0x119
mov ecx, dword [0x68e294]
lea edx, [ecx + edx + 0xd]
call fcn.004053cc
push dword [ebp - 0x5e0]
push 0x518bc4
lea edx, [ebp - 0x5e4]
mov eax, dword [ebp - 0x76]
call fcn.0040a028
push dword [ebp - 0x5e4]
lea eax, [ebp - 0x5d8]
mov edx, 6
call fcn.004054fc
mov edx, dword [ebp - 0x5d8]
mov eax, dword [0x68ee04]
mov eax, dword [eax]
call fcn.004cf0e4
cmp dword [ebp - 0x70], 0
jbe 0x514a02
imul eax, dword [ebp - 0x6c], 0x119
mov edx, dword [0x68e294]
movzx eax, word [edx + eax + 0xae]
sub ax, word [ebp - 0x70]
mov word [ebp - 0x10b], ax
imul eax, dword [ebp - 0x6c], 0x119
mov edx, dword [0x68e294]
movzx ecx, word [ebp - 0x70]
mov word [edx + eax + 0xae], cx
jmp case.0x510c90.5039
imul eax, dword [ebp - 0x6c], 0x119
mov edx, dword [0x68e294]
lea eax, [edx + eax]
xor ecx, ecx
mov edx, 0x119
call fcn.004883d0
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68eab8]
mov edx, dword [edx]
mov dword [edx + 0xbc], eax
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x4a4]
mov byte [eax + 0x316], 1
cmp dword [ebp - 0x68], 0
jbe 0x514b3a
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov byte [eax + 0x134], 1
movzx eax, byte [ebp - 0x68]
dec eax
mov edx, dword [0x68eab8]
mov edx, dword [edx]
mov byte [edx + 0x135], al
movzx eax, word [ebp - 0x68]
shr eax, 8
test al, al
setne al
mov edx, dword [0x68eab8]
mov edx, dword [edx]
mov byte [edx + 0x136], al
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x498]
mov eax, dword [eax + 0x33c]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x68eab8]
mov eax, dword [eax]
cmp byte [eax + 0x136], 0
je 0x514aea
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov byte [eax + 0x14], 1
jmp 0x514af5
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov byte [eax + 0x14], 5
mov eax, dword [0x68eab8]
mov eax, dword [eax]
add eax, 0x137
mov edx, dword [0x68ecec]
mov cl, 0x18
call fcn.0040396c
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x4a4]
mov edx, 0x518bec
call fcn.00492330
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov si, 0xfff9
call fcn.00404528
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 0
jne case.0x510c90.5039
mov eax, dword [0x68e99c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x68f18c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov byte [eax + 0x134], 0
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x4a4]
mov edx, 0x518c00
call fcn.00492330
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x48c]
cmp byte [eax + 0x314], 0
jne 0x514b9d
mov eax, dword [0x68ee04]
mov eax, dword [eax]
call fcn.004cf164
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov si, 0xfff9
call fcn.00404528
jmp case.0x510c90.5039
mov eax, dword [0x68e99c]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68f18c]
mov dword [edx], eax
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051d5e0
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
movzx edx, word [ebp - 0x76]
mov word [eax + 0xab], dx
mov eax, dword [0x68eab8]
mov eax, dword [eax]
movzx edx, word [ebp - 0x70]
mov word [eax + 0xaf], dx
mov eax, dword [0x68eab8]
mov eax, dword [eax]
movzx edx, word [ebp - 0x6c]
mov word [eax + 0xb3], dx
jmp case.0x510c90.5039
mov eax, 0x6a
call fcn.005b2460
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 0xb8]
cmp eax, dword [ebp - 0x76]
jge 0x514c9f
push 1
push 0
push 0x5188ac
mov eax, dword [0x68e544]
push dword [eax]
push 0x518344
mov eax, dword [0x68eab8]
mov eax, dword [eax]
push dword [eax + 0xb8]
mov eax, dword [ebp - 0x76]
pop edx
sub eax, edx
lea edx, [ebp - 0x5ec]
call fcn.0040a028
push dword [ebp - 0x5ec]
push 0x518c14
lea eax, [ebp - 0x5e8]
mov edx, 5
call fcn.004054fc
mov edx, dword [ebp - 0x5e8]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
cmp eax, dword [edx]
jle 0x514d2b
push 1
push 0
push 0x5188ac
mov eax, dword [0x68ea2c]
push dword [eax]
push 0x518344
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
sub eax, dword [edx]
lea edx, [ebp - 0x5f4]
call fcn.0040a028
push dword [ebp - 0x5f4]
push 0x518c14
lea eax, [ebp - 0x5f0]
mov edx, 5
call fcn.004054fc
mov edx, dword [ebp - 0x5f0]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
mov dword [edx], eax
jmp case.0x510c90.5039
mov eax, 0x6a
call fcn.005b2460
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 0xb8]
cmp eax, dword [ebp - 0x76]
jge 0x514dc4
push 1
push 0
push 0x5188ac
mov eax, dword [0x68e544]
push dword [eax]
push 0x518344
mov eax, dword [0x68eab8]
mov eax, dword [eax]
push dword [eax + 0xb8]
mov eax, dword [ebp - 0x76]
pop edx
sub eax, edx
lea edx, [ebp - 0x5fc]
call fcn.0040a028
push dword [ebp - 0x5fc]
push 0x518c14
lea eax, [ebp - 0x5f8]
mov edx, 5
call fcn.004054fc
mov edx, dword [ebp - 0x5f8]
mov ecx, 0xff00
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68eab8]
mov edx, dword [edx]
mov dword [edx + 0xc0], eax
jmp case.0x510c90.5039
push 0
push 0
push 0
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
push eax
movzx eax, word [ebp - 0x68]
or eax, 0
push eax
push 0
lea edx, [ebp - 0x600]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov eax, dword [ebp - 0x600]
or edx, 0xffffffff
call fcn.0040a1d0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
movzx edx, word [ebp - 0x72]
mov ecx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052e9bc
jmp case.0x510c90.5039
push 0
push 0
push 0
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
push eax
mov eax, dword [ebp - 0x68]
push eax
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
movzx edx, word [ebp - 0x72]
mov ecx, dword [ebp - 0x76]
mov eax, dword [0x69a598]
call fcn.0052e9bc
jmp case.0x510c90.5039
cmp dword [ebp - 0x76], 0
jle 0x514ea0
mov eax, dword [0x68f180]
cmp byte [eax + 0x18], 0
jne 0x514ea0
call sub.kernel32.dll_GetTickCount
add eax, dword [ebp - 0x76]
mov edx, dword [0x68e518]
mov dword [edx], eax
mov ecx, dword [0x68f180]
mov ecx, dword [ecx + 0x9d]
mov edx, dword [0x68f180]
movzx edx, word [edx + 0xa1]
mov eax, dword [0x68f180]
mov eax, dword [eax]
call fcn.005b7724
mov eax, dword [0x68f180]
mov byte [eax + 8], 0
call fcn.005b7a7c
mov eax, dword [0x68ee28]
cmp dword [eax], 0
je 0x514ef9
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e518]
mov dword [edx], eax
mov edx, dword [0x68ee28]
mov edx, dword [edx]
mov eax, edi
call fcn.00508cd8
mov eax, dword [0x68ee28]
call fcn.00405158
jmp case.0x510c90.5039
mov eax, dword [0x68f180]
mov eax, dword [eax + 0x9d]
cmp eax, dword [ebp - 0x76]
jne 0x514f58
mov eax, dword [0x68f180]
movzx edx, word [ebp - 0x70]
mov word [eax + 0xa9], dx
mov eax, dword [0x68f180]
movzx edx, word [ebp - 0x6c]
mov word [eax + 0xab], dx
mov edx, dword [0x68f180]
add edx, 6
mov eax, dword [0x68f180]
mov eax, dword [eax]
call fcn.005b73f8
mov eax, dword [0x68f180]
mov byte [eax + 8], 0
jmp 0x514fbd
mov eax, dword [0x68e2f0]
cmp byte [eax], 0
je 0x514fb4
mov eax, dword [0x68f17c]
cmp byte [eax + 8], 0
je 0x514fb4
mov eax, dword [0x68f17c]
mov eax, dword [eax + 0x9d]
cmp eax, dword [ebp - 0x76]
jne 0x514fb4
mov eax, dword [0x68f17c]
movzx edx, word [ebp - 0x70]
mov word [eax + 0xa9], dx
mov eax, dword [0x68f17c]
movzx edx, word [ebp - 0x6c]
mov word [eax + 0xab], dx
mov edx, dword [0x68f17c]
add edx, 6
mov eax, dword [0x68f17c]
mov eax, dword [eax]
call fcn.005b73f8
jmp 0x514fbd
mov eax, dword [0x68f180]
mov byte [eax + 8], 0
call fcn.005b7a7c
mov eax, dword [0x68ee28]
call fcn.00405158
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 0
je 0x515013
cmp dword [ebp - 0x70], 0
jbe 0x514ffe
mov eax, dword [0x68ee78]
movzx edx, word [ebp - 0x70]
mov word [eax + 0xa9], dx
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051bcac
mov edx, dword [0x68ee78]
mov edx, dword [edx]
mov eax, dword [0x68ee78]
add eax, 6
call fcn.005b7208
mov eax, dword [0x68ee78]
mov byte [eax + 8], 0
call fcn.005b7a7c
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 0
jne 0x51504c
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051bcac
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051b710
jmp 0x51505d
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051bcac
mov eax, dword [0x68ee78]
mov byte [eax + 8], 0
call fcn.005b7a7c
jmp case.0x510c90.5039
cmp dword [ebp - 0xc], 0
je case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051e24c
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 1
jne 0x5150db
mov eax, dword [0x68e740]
mov edx, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [0x68e3e8]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68e740]
mov eax, dword [eax]
add eax, 0xffffff8e
sub eax, 8
jae 0x5150bb
mov eax, dword [0x68e570]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x68e740]
cmp dword [eax], 0x6f
jne case.0x510c90.5039
mov edx, dword [edi + 0x388]
mov eax, edi
call fcn.0050e3d8
jmp case.0x510c90.5039
mov eax, dword [0x68efb4]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
cmp dword [ebp - 0xc], 0
je case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051e458
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051e39c
jmp case.0x510c90.5039
movzx eax, word [ebp - 0x6c]
movzx edx, word [ebp - 0x68]
shl edx, 0x10
or eax, edx
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051e678
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x76]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x68]
mov eax, edi
call fcn.0051e6ac
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051bcac
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051b500
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
lea edx, [ebp - 0x604]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov eax, dword [ebp - 0x604]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051e71c
jmp case.0x510c90.5039
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.0057301c
jmp case.0x510c90.5039
movzx eax, word [ebp - 0x6c]
movzx edx, word [ebp - 0x68]
shl edx, 0x10
or eax, edx
push eax
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051e8f4
jmp case.0x510c90.5039
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov ecx, dword [ebp - 0x608]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051eb54
jmp case.0x510c90.5039
lea edx, [ebp - 0x60c]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x60c]
mov eax, edi
call fcn.0051eb04
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051ee78
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051ed68
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051e7f4
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
mov dword [edx], eax
mov eax, 0x6a
call fcn.005b2460
mov eax, dword [ebp - 0x68]
xor edx, edx
push edx
push eax
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x2170]
mov eax, dword [eax + 8]
cdq
cmp edx, dword [esp + 4]
jne 0x51529c
cmp eax, dword [esp]
pop edx
pop eax
jbe 0x5152d4
jmp 0x5152a0
pop edx
pop eax
jle 0x5152d4
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x2170]
mov edx, dword [ebp - 0x68]
call fcn.0041a308
mov edx, 0x10c
call fcn.00402f70
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x2170]
mov edx, dword [ebp - 0x68]
call fcn.0041a1fc
mov eax, dword [0x68f12c]
add eax, 6
or edx, 0xffffffff
call fcn.005b7208
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
jmp case.0x510c90.5039
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
mov eax, dword [ebp - 0x68]
dec eax
je 0x515309
dec eax
je 0x51534e
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x518c24
mov eax, dword [0x68e544]
push dword [eax]
push 0x518c3c
lea eax, [ebp - 0x610]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x610]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x518c58
call fcn.00554248
jmp case.0x510c90.5039
mov eax, 0x6a
call fcn.005b2460
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x6c]
movzx edx, word [ebp - 0x68]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
mov dword [edx], eax
mov eax, 0x10c
call fcn.00402f54
mov edx, dword [0x68f12c]
lea esi, [edx + 6]
mov edi, eax
mov ecx, 0x43
rep movsd dword es:[edi], dword [esi]
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov edx, dword [edx + 0x2170]
mov ecx, eax
xor eax, eax
xchg edx, eax
call fcn.0041a394
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x2170]
cmp dword [eax + 8], 0x1e
jle 0x515432
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x2170]
mov edx, 0x1e
call fcn.0041a308
mov edx, 0x10c
call fcn.00402f70
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x2170]
mov edx, 0x1e
call fcn.0041a1fc
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x68]
sub eax, 0x10
jae case.0x510c90.5039
mov eax, dword [ebp - 0x68]
lea eax, [eax + eax*2]
mov edx, dword [0x68e624]
imul ecx, dword [ebp - 0x76], 0x3e8
mov dword [edx + eax*4], ecx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [ebp - 0x68]
lea edx, [edx + edx*2]
mov ecx, dword [0x68e624]
mov dword [ecx + edx*4 + 4], eax
cmp dword [ebp - 0x76], 0
jle 0x5154f9
mov eax, dword [0x68e5d4]
mov eax, dword [eax]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x5154c2
inc esi
xor ebx, ebx
mov eax, dword [0x68e5d4]
mov eax, dword [eax]
mov edx, ebx
call fcn.0041a308
cdq
push edx
push eax
mov eax, dword [ebp - 0x68]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x5154b6
cmp eax, dword [esp]
pop edx
pop eax
je case.0x5103da.5079
inc ebx
dec esi
jne 0x515497
mov eax, dword [0x68e5d4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x68]
call fcn.0041a1b0
mov eax, dword [ebp - 0x68]
lea eax, [eax + eax*2]
mov edx, dword [0x68e624]
mov eax, dword [edx + eax*4 + 8]
mov dl, 1
call fcn.004931c8
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00572764
jmp case.0x510c90.5039
mov eax, dword [0x68e5d4]
mov eax, dword [eax]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl case.0x510c90.5039
inc esi
xor ebx, ebx
mov eax, dword [0x68e5d4]
mov eax, dword [eax]
mov edx, ebx
call fcn.0041a308
cdq
push edx
push eax
mov eax, dword [ebp - 0x68]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x51552e
cmp eax, dword [esp]
pop edx
pop eax
jne 0x515568
mov eax, dword [ebp - 0x68]
lea eax, [eax + eax*2]
mov edx, dword [0x68e624]
mov eax, dword [edx + eax*4 + 8]
xor edx, edx
call fcn.004931c8
mov eax, dword [0x68e5d4]
mov eax, dword [eax]
mov edx, ebx
call fcn.0041a1fc
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00572764
jmp case.0x510c90.5039
inc ebx
dec esi
jne 0x51550f
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov edx, dword [0x68f12c]
mov edx, dword [edx]
mov eax, dword [0x68f12c]
add eax, 6
call fcn.005b7208
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
cmp dword [ebp - 0x76], 1
jne 0x5155ed
push 0x46
push 0
push 0
push 0x518c80
mov eax, dword [0x68e544]
push dword [eax]
push 0x518ca4
lea eax, [ebp - 0x614]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x614]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518cb0
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00543fa4
mov eax, dword [0x68f12c]
cmp byte [eax + 8], 0
je case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
mov eax, dword [0x68f12c]
movzx edx, word [ebp - 0x68]
mov word [eax + 0xa9], dx
mov eax, dword [0x68f12c]
movzx edx, word [ebp - 0x68]
mov word [eax + 0xab], dx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
mov dword [edx], eax
mov eax, dword [0x68e2f0]
mov byte [eax], 1
mov eax, dword [0x68f12c]
mov edx, dword [0x68f17c]
mov esi, eax
mov edi, edx
mov ecx, 0x45
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00543fa4
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
jmp case.0x510c90.5039
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00543fa4
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68e2f0]
mov byte [eax], 1
mov eax, dword [0x68f12c]
mov edx, dword [0x68f17c]
mov esi, eax
mov edi, edx
mov ecx, 0x45
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00543fa4
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
cmp dword [ebp - 0x76], 1
jne 0x515736
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518cd0
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x518cf0
mov eax, dword [0x68e544]
push dword [eax]
push 0x518d08
lea eax, [ebp - 0x618]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x618]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68f12c]
add eax, 6
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x70]
call fcn.005b733c
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov edx, dword [0x68f12c]
mov edx, dword [edx]
mov eax, dword [0x68f12c]
add eax, 6
call fcn.005b7208
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051f56c
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0050b6a0
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68f12c]
add eax, 6
or edx, 0xffffffff
call fcn.005b7208
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68f12c]
mov eax, dword [eax]
shr eax, 0x10
movzx ecx, ax
mov edx, dword [0x68f12c]
movzx edx, word [edx]
mov eax, dword [0x68f12c]
add eax, 6
call fcn.005b733c
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0xb8], edx
movzx eax, word [ebp - 0x6c]
movzx edx, word [ebp - 0x68]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e9bc]
mov dword [edx], eax
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
jmp case.0x510c90.5039
mov eax, dword [0x68f12c]
mov byte [eax + 8], 0
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [ebp - 0x76]
cmp eax, 5
ja case.0x510c90.5039
jmp dword [eax*4 + 0x5158f3]
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518d24
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518d44
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x518d6c
mov eax, dword [0x68e544]
push dword [eax]
push 0x518d8c
lea eax, [ebp - 0x61c]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x61c]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x518d6c
mov eax, dword [0x68ea2c]
push dword [eax]
push 0x518d8c
lea eax, [ebp - 0x620]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x620]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518da4
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x76]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x68]
mov eax, edi
call fcn.005224c4
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.00521ff0
jmp case.0x510c90.5039
mov eax, dword [0x68f0e8]
inc dword [eax]
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0052011c
jmp case.0x510c90.5039
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051fef0
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.005202f8
jmp case.0x510c90.5039
mov eax, dword [0x68ee64]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
cmp dword [ebp - 0xc], 0
je 0x515aa0
push 1
push 0
lea edx, [ebp - 0x624]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x624]
mov ecx, 0xffffff
mov eax, dword [0x69a58c]
call fcn.0053d6d4
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e2a4]
mov dword [edx], eax
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e2a4]
mov dword [edx], eax
mov eax, dword [0x68ee64]
xor ecx, ecx
mov dl, 1
call fcn.00488768
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e2a4]
mov dword [edx], eax
mov eax, dword [ebp - 0x76]
add eax, 4
cmp eax, 6
ja case.0x510c90.5039
jmp dword [eax*4 + 0x515af5]
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518dcc
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518dfc
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518e3c
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518e60
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518e90
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518ec4
call fcn.00554248
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e2a4]
mov dword [edx], eax
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.00520818
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e2a4]
mov dword [edx], eax
mov eax, dword [ebp - 0x76]
add eax, 5
cmp eax, 4
ja case.0x510c90.5039
jmp dword [eax*4 + 0x515c25]
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518ee8
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518f18
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518f4c
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518f84
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518fac
call fcn.00554248
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e2a4]
mov dword [edx], eax
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.00520ed0
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e2a4]
mov dword [edx], eax
mov eax, dword [ebp - 0x76]
sub eax, 0xfffffffd
je 0x515d6c
dec eax
je 0x515d49
dec eax
jne case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x518fd0
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519000
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x51902c
call fcn.00554248
jmp case.0x510c90.5039
lea edx, [ebp - 0x628]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov ecx, dword [ebp - 0x628]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.00520564
jmp case.0x510c90.5039
mov edx, dword [ebp - 0x76]
mov al, 1
call fcn.005840d4
jmp case.0x510c90.5039
mov eax, dword [0x68ee64]
xor ecx, ecx
mov dl, 1
call fcn.00488768
lea edx, [ebp - 0x62c]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov ecx, dword [ebp - 0x62c]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.00521018
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e818]
mov dword [edx], eax
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.00521250
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e818]
mov dword [edx], eax
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.005215f4
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e818]
mov dword [edx], eax
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519060
call fcn.00554248
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e818]
mov dword [edx], eax
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519084
call fcn.00554248
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68e818]
mov dword [edx], eax
lea edx, [ebp - 0x630]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x630]
mov eax, dword [0x68ee54]
call fcn.004051ac
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00570a94
jmp case.0x510c90.5039
call fcn.005b7d24
mov eax, dword [0x68e81c]
cmp byte [eax + 8], 0
je 0x515ef5
mov eax, dword [0x68e81c]
add eax, 6
or edx, 0xffffffff
call fcn.005b7208
mov eax, dword [0x68e81c]
mov byte [eax + 8], 0
mov eax, dword [0x68f160]
cmp dword [eax], 0
jle 0x515f1d
mov eax, dword [0x68f160]
mov eax, dword [eax]
mov edx, dword [0x68eab8]
mov edx, dword [edx]
add dword [edx + 0xb8], eax
mov eax, dword [0x68f160]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00570bec
call fcn.005b7a7c
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68ed40]
mov dword [edx], eax
mov eax, dword [0x68e81c]
cmp byte [eax + 8], 0
je 0x515f61
mov eax, dword [0x68e81c]
add eax, 6
call fcn.005b7cd4
mov eax, dword [0x68e81c]
mov byte [eax + 8], 0
call fcn.005b7a7c
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68ed40]
mov dword [edx], eax
mov eax, dword [0x68e81c]
cmp byte [eax + 8], 0
je 0x515fa1
mov edx, dword [0x68e81c]
mov edx, dword [edx]
mov eax, dword [0x68e81c]
add eax, 6
call fcn.005b7208
mov eax, dword [0x68e81c]
mov byte [eax + 8], 0
call fcn.005b7a7c
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68ed40]
mov dword [edx], eax
mov eax, dword [0x68e81c]
cmp byte [eax + 8], 0
je 0x515fdc
mov eax, dword [0x68e81c]
add eax, 6
or edx, 0xffffffff
call fcn.005b7208
mov eax, dword [0x68e81c]
mov byte [eax + 8], 0
call fcn.005b7a7c
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68ed40]
mov dword [edx], eax
mov eax, dword [0x68e81c]
cmp byte [eax + 8], 0
je 0x516014
mov eax, dword [0x68e81c]
add eax, 6
call fcn.005b7cd4
mov eax, dword [0x68e81c]
mov byte [eax + 8], 0
call fcn.005b7a7c
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.00521a78
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.00521b18
jmp case.0x510c90.5039
mov eax, dword [0x68f160]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68eab8]
mov edx, dword [edx]
mov dword [edx + 0xb8], eax
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68ed40]
mov dword [edx], eax
jmp case.0x510c90.5039
mov eax, dword [0x68f160]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68eab8]
mov edx, dword [edx]
mov dword [edx + 0xb8], eax
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68ed40]
mov dword [edx], eax
jmp case.0x510c90.5039
mov eax, dword [0x68e240]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, 0x6a
call fcn.005b2460
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
dec eax
je 0x5160d1
dec eax
je 0x51613c
jmp 0x51616d
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x54c]
mov byte [eax + 0x338], 1
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x54c]
cmp byte [eax + 0x338], 0
je 0x516105
mov eax, dword [0x68efb8]
cmp byte [eax], 0
jne 0x516109
xor eax, eax
jmp 0x51610b
mov al, 1
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov edx, dword [edx + 0x540]
mov byte [edx + 0x316], al
push 1
push 0
mov ecx, 0x32f4
mov edx, 0x5190b4
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x550]
mov byte [eax + 0x338], 1
push 1
push 0
mov ecx, 0x32f4
mov edx, 0x5190d0
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00570bec
push 1
push 0
mov ecx, 0x32f4
mov edx, 0x5190ec
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
mov eax, dword [0x68e27c]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [ebp - 0x70]
dec eax
je 0x5161b8
dec eax
je 0x5161db
dec eax
je 0x516220
dec eax
je 0x516265
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x519100
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x518c80
mov eax, dword [0x68e544]
push dword [eax]
push 0x519124
lea eax, [ebp - 0x634]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x634]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x519130
mov eax, dword [0x68e544]
push dword [eax]
push 0x51914c
lea eax, [ebp - 0x638]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x638]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x51915c
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [0x68e27c]
mov edx, dword [ebp - 0x76]
mov dword [eax], edx
mov eax, dword [0x68ecd0]
mov byte [eax], 1
cmp byte [ebp - 0x70], 1
sete al
mov edx, dword [0x68ecd0]
mov byte [edx + 1], al
movzx eax, word [ebp - 0x70]
shr eax, 8
cmp al, 1
sete al
mov edx, dword [0x68ecd0]
mov byte [edx + 2], al
cmp byte [ebp - 0x6c], 1
sete al
mov edx, dword [0x68ecd0]
mov byte [edx + 3], al
movzx eax, word [ebp - 0x6c]
shr eax, 8
cmp al, 1
sete al
mov edx, dword [0x68ecd0]
mov byte [edx + 4], al
cmp dword [ebp - 0xc], 0
je 0x516300
mov edx, dword [0x68e3b8]
add edx, 8
mov ecx, 0x20
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x4dc]
mov dl, 1
call fcn.00493c78
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 1
jne 0x51644f
mov eax, dword [ebp - 0x70]
push eax
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x519180]
mov edx, 0x51918c
call fcn.00554248
cmp eax, 6
jne 0x5164f2
lea edx, [ebp - 0xc]
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0xaac]
call fcn.00409d0c
cmp dword [ebp - 0xc], 0
je 0x51640e
mov eax, dword [ebp - 0x70]
push eax
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x519180]
mov edx, 0x5191b8
call fcn.00554248
cmp eax, 6
jne 0x5164f2
lea edx, [ebp - 0x63c]
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0xaac]
call fcn.00409d0c
mov eax, dword [ebp - 0x63c]
mov edx, dword [ebp - 0xc]
call fcn.00405590
jne 0x5163eb
push 0
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0050b274
jmp 0x5164f2
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x5191d4
call fcn.00554248
jmp 0x5164f2
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x5191ec]
mov edx, 0x5191f8
call fcn.00554248
cmp eax, 6
jne 0x5164f2
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0050b274
jmp 0x5164f2
mov eax, dword [ebp - 0x70]
push eax
push 0
push 0
lea edx, [ebp - 0x640]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x640]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x519180]
call fcn.00554248
cmp eax, 6
jne 0x5164f2
lea edx, [ebp - 0xc]
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0xaac]
call fcn.00409d0c
cmp dword [ebp - 0xc], 0
je 0x5164f2
push 0
push 0
push 0
lea edx, [ebp - 0x64c]
mov eax, dword [0x68eab8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
call fcn.0040a028
mov ecx, dword [ebp - 0x64c]
lea eax, [ebp - 0x648]
mov edx, dword [ebp - 0xc]
call fcn.00405480
mov eax, dword [ebp - 0x648]
lea edx, [ebp - 0x644]
call fcn.00487f10
mov eax, dword [ebp - 0x644]
push eax
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0050b274
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
jmp case.0x510c90.5039
lea edx, [ebp - 0x650]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov ecx, dword [ebp - 0x650]
lea edx, [ebp - 0x76]
mov eax, dword [0x68e91c]
mov eax, dword [eax]
call fcn.004dd268
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.00521bb8
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x510c90.5039
push 0
lea eax, [ebp - 0x654]
push eax
lea edx, [ebp - 0x658]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov eax, dword [ebp - 0x658]
mov byte [ebp - 0x230], 0x2f
lea ecx, [ebp - 0x230]
lea edx, [ebp - 0x1c]
call fcn.004889c0
mov edx, dword [ebp - 0x654]
lea eax, [ebp - 0xc]
call fcn.004051f0
cmp dword [ebp - 0xc], 0
je case.0x510c90.5039
cmp dword [ebp - 0x1c], 0
je case.0x510c90.5039
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x76]
movzx edx, byte [ebp - 0x70]
call fcn.004dd384
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
add eax, 2
cmp eax, 7
ja case.0x510c90.5039
jmp dword [eax*4 + 0x5165dc]
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x51922c
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519260
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5192a4
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5192d0
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5192fc
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519328
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x51934c
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x510c90.5039
lea edx, [ebp - 0x65c]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x65c]
mov eax, dword [0x68e91c]
mov eax, dword [eax]
call fcn.004e2d84
jmp case.0x510c90.5039
mov eax, dword [0x68e4ec]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0x29], edx
mov eax, dword [ebp - 0x68]
dec eax
je 0x516747
dec eax
je 0x51676a
dec eax
je 0x5167af
dec eax
je 0x5167d2
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519370
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x519394
mov eax, dword [0x68e544]
push dword [eax]
push 0x5193b0
lea eax, [ebp - 0x660]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x660]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5193c0
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x5193e4
mov eax, dword [0x68e544]
push dword [eax]
push 0x519124
lea eax, [ebp - 0x664]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x664]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
dec eax
je 0x51682b
dec eax
je 0x51684e
dec eax
je 0x516871
dec eax
je 0x516894
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519370
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519408
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519430
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x51945c
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
add eax, 0xb
cmp eax, 9
ja case.0x510c90.5039
jmp dword [eax*4 + 0x5168cd]
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519490
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5194b8
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5194e0
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519490
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519514
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519540
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519568
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5195c0
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5195f4
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519624
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
add eax, 5
cmp eax, 4
ja case.0x510c90.5039
jmp dword [eax*4 + 0x516a69]
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519658
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519684
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5196b4
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5196e8
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519718
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
sub eax, 0xfffffffd
je 0x516b84
dec eax
je 0x516b61
dec eax
jne case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x51974c
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x51976c
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x51979c
call fcn.00554248
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5197bc
call fcn.00554248
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
mov eax, dword [ebp - 0x76]
add eax, 7
cmp eax, 6
ja case.default.0x516bff
jmp dword [eax*4 + 0x516c06]
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5197e0
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519808
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519828
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x519858
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5198ac
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5198d8
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519908
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519938
call fcn.00554248
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
cmp dword [ebp - 0xc], 0
je case.0x510c90.5039
push 0x46
push 0
push 0
lea edx, [ebp - 0x668]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x668]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov byte [eax + 0x316], 1
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov edx, 0x51995c
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x688]
mov byte [eax + 0x316], 1
push 0x46
push 0
push 0
lea edx, [ebp - 0x66c]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x66c]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x68]
sub eax, 1
jb 0x516e17
je 0x516e6f
dec eax
je 0x516ffe
dec eax
je 0x517153
jmp case.0x510c90.5039
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x460]
mov dl, 1
call fcn.00493c78
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov byte [eax + 0x316], 1
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov edx, 0x51995c
call fcn.00492330
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x688]
mov byte [eax + 0x316], 1
jmp case.0x510c90.5039
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov edx, 0x51995c
call fcn.00492330
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov byte [eax + 0x316], 1
lea edx, [ebp - 0x670]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x670]
lea eax, [ebp - 0x420]
mov ecx, 0xff
call fcn.00405404
lea edx, [ebp - 0x420]
mov eax, dword [0x68ec48]
add eax, 0x89
mov cl, 0x10
call fcn.0040396c
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x688]
mov byte [eax + 0x316], 0
mov eax, dword [0x68ee04]
mov eax, dword [eax]
cmp dword [eax + 0x6e8], 0
je 0x516fc7
mov eax, dword [0x68f164]
push dword [eax]
lea eax, [ebp - 0x678]
mov edx, dword [0x68ec48]
add edx, 0x89
call fcn.004053cc
push dword [ebp - 0x678]
push 0x5187fc
lea eax, [ebp - 0x674]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x674]
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x6e8]
mov ecx, dword [eax]
call dword [ecx + 0x50]
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x6e8]
call fcn.0040432c
mov eax, dword [0x68ee04]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x6e8], edx
mov eax, dword [0x68f164]
push dword [eax]
lea eax, [ebp - 0x680]
mov edx, dword [0x68ec48]
add edx, 0x89
call fcn.004053cc
push dword [ebp - 0x680]
push 0x5187fc
lea eax, [ebp - 0x67c]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x67c]
mov eax, dword [0x68f170]
mov eax, dword [eax]
lea ecx, [eax + 0x2158]
mov eax, dword [0x68f170]
mov eax, dword [eax]
call fcn.00572374
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov eax, dword [eax + 0x460]
xor edx, edx
call fcn.00493c78
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518978]
mov edx, 0x519970
call fcn.00554248
jmp case.0x510c90.5039
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x51700a
sub ebx, 4
mov ebx, dword [ebx]
mov eax, dword [ebp - 0x76]
add eax, eax
add eax, eax
mov dword [ebp - 0x684], eax
fild dword [ebp - 0x684]
fdiv dword [0x519980]
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.004887e0
cmp ebx, eax
jne case.0x510c90.5039
mov eax, dword [0x68ec48]
cmp byte [eax + 0x89], 0
je case.0x510c90.5039
mov eax, dword [ebp - 0x76]
call fcn.00402f54
mov dword [ebp - 0x40], eax
push 0xffff
mov eax, dword [0x68f164]
push dword [eax]
lea eax, [ebp - 0x68c]
mov edx, dword [0x68ec48]
add edx, 0x89
call fcn.004053cc
push dword [ebp - 0x68c]
push 0x5187fc
lea eax, [ebp - 0x688]
mov edx, 3
call fcn.004054fc
mov ecx, dword [ebp - 0x688]
mov dl, 1
mov eax, dword [0x4182c0]
call fcn.0041c9b4
mov dword [ebp - 0x3c], eax
xor eax, eax
push ebp
push 0x5170ef
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [ebp - 0x76]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x76]
mov eax, dword [ebp - 0x3c]
mov ebx, dword [eax]
call dword [ebx + 0x10]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5170f6
mov eax, dword [ebp - 0x3c]
call fcn.0040432c
mov eax, dword [ebp - 0x40]
call fcn.00402f70
ret
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x51715f
sub ebx, 4
mov ebx, dword [ebx]
mov eax, dword [ebp - 0x76]
add eax, eax
add eax, eax
mov dword [ebp - 0x684], eax
fild dword [ebp - 0x684]
fdiv dword [0x519980]
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.004887e0
cmp ebx, eax
jne case.0x510c90.5039
mov eax, dword [0x68f170]
mov eax, dword [eax]
cmp byte [eax + 0x1caf], 0x10
jne case.0x510c90.5039
mov eax, dword [ebp - 0x76]
call fcn.00402f54
mov dword [ebp - 0x40], eax
push 0xffff
mov eax, dword [0x68f164]
push dword [eax]
lea eax, [ebp - 0x69c]
mov edx, dword [0x68f170]
mov edx, dword [edx]
add edx, 0x1caf
call fcn.004053cc
push dword [ebp - 0x69c]
push 0x5187fc
lea eax, [ebp - 0x698]
mov edx, 3
call fcn.004054fc
mov ecx, dword [ebp - 0x698]
mov dl, 1
mov eax, dword [0x4182c0]
call fcn.0041c9b4
mov dword [ebp - 0x3c], eax
xor eax, eax
push ebp
push 0x517248
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [ebp - 0x76]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x76]
mov eax, dword [ebp - 0x3c]
mov ebx, dword [eax]
call dword [ebx + 0x10]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x51724f
mov eax, dword [ebp - 0x3c]
call fcn.0040432c
mov eax, dword [ebp - 0x40]
call fcn.00402f70
ret
cmp dword [ebp - 0xc], 0
je case.0x510c90.5039
push 0x46
push 0
push 0
lea edx, [ebp - 0x6a8]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x6a8]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
jmp case.0x510c90.5039
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x1f44], eax
jmp case.0x510c90.5039
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x517326
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x10]
push eax
push 0x40355555
push 0x55555555
call fcn.004887e0
mov edx, eax
inc edx
mov ecx, ebx
mov eax, dword [ebp - 0xc]
call fcn.00405660
lea edx, [ebp - 0x91]
mov ecx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.004ae0a8
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.004ae018
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov edx, dword [ebp - 0x70]
mov dword [eax + 0x984], edx
movzx eax, byte [ebp - 0x91]
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x98c], eax
movzx eax, word [ebp - 0x91]
shr eax, 8
movzx eax, al
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x9a8], eax
mov eax, dword [ebp - 0x91]
shr eax, 0x10
movzx eax, al
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x9c4], eax
mov eax, dword [ebp - 0x91]
shr eax, 0x10
movzx eax, ax
shr eax, 8
movzx eax, al
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x9e0], eax
movzx eax, byte [ebp - 0x8d]
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0x9fc], eax
movzx eax, word [ebp - 0x8d]
shr eax, 8
movzx eax, al
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0xa18], eax
mov eax, dword [ebp - 0x8d]
shr eax, 0x10
movzx eax, al
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0xa34], eax
mov eax, dword [ebp - 0x8d]
shr eax, 0x10
movzx eax, ax
shr eax, 8
movzx eax, al
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0xa50], eax
movzx eax, byte [ebp - 0x89]
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0xa6c], eax
movzx eax, word [ebp - 0x89]
shr eax, 8
movzx eax, al
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov dword [edx + 0xa88], eax
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x984]
dec eax
sub eax, 3
jae 0x5174a6
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x519984]
xor edx, edx
call fcn.00554248
mov eax, dword [0x68f170]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x984], edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0050ca9c
jmp case.0x510c90.5039
mov edx, dword [ebp - 0xc]
mov eax, edi
call fcn.00523084
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.005230ac
jmp case.0x510c90.5039
lea edx, [ebp - 0x6ac]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x6ac]
lea eax, [ebp - 0xc]
call fcn.004051f0
lea eax, [ebp - 0x6b0]
push eax
mov ecx, 0x519990
mov edx, 0x51999c
mov eax, dword [ebp - 0xc]
call fcn.00434528
mov edx, dword [ebp - 0x6b0]
lea eax, [ebp - 0xc]
call fcn.004051f0
lea eax, [ebp - 0x6b4]
push eax
mov ecx, 0x5199a8
mov edx, 0x5199b4
mov eax, dword [ebp - 0xc]
call fcn.00434528
mov edx, dword [ebp - 0x6b4]
lea eax, [ebp - 0xc]
call fcn.004051f0
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov eax, dword [eax + 0x15e4]
xor ecx, ecx
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
mov dl, 1
call fcn.00493c78
jmp case.0x510c90.5039
lea edx, [ebp - 0x6b8]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x6b8]
lea eax, [ebp - 0xc]
call fcn.004051f0
lea eax, [ebp - 0x6bc]
push eax
mov ecx, 0x519990
mov edx, 0x51999c
mov eax, dword [ebp - 0xc]
call fcn.00434528
mov edx, dword [ebp - 0x6bc]
lea eax, [ebp - 0xc]
call fcn.004051f0
lea eax, [ebp - 0x6c0]
push eax
mov ecx, 0x5199a8
mov edx, 0x5199b4
mov eax, dword [ebp - 0xc]
call fcn.00434528
mov edx, dword [ebp - 0x6c0]
lea eax, [ebp - 0xc]
call fcn.004051f0
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov eax, dword [eax + 0x15e8]
xor ecx, ecx
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x3c]
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov eax, dword [eax + 0x424]
mov dl, 1
call fcn.00493c78
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.005204b0
jmp case.0x510c90.5039
lea edx, [ebp - 0x6c4]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov ecx, dword [ebp - 0x6c4]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.00520624
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051f29c
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051cfd4
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
add eax, 0x14
cmp eax, 0x16
ja case.0x517684.19
jmp dword [eax*4 + 0x51768b]
push 1
push 0
mov ecx, 0xff00
mov edx, 0x5199c0
mov eax, dword [0x69a58c]
call fcn.0053d6d4
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5199e4
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x5199f8
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x519a24
mov eax, dword [0x68e5dc]
push dword [eax]
push 0x519a34
lea eax, [ebp - 0x6c8]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x6c8]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519a50
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519a78
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519aa4
call fcn.00554248
jmp case.0x510c90.5039
movzx ebx, word [ebp - 0x70]
movzx eax, word [ebp - 0x6c]
shl eax, 0x10
or ebx, eax
push 0x46
push 0
push 0
lea eax, [ebp - 0x6cc]
push eax
mov dword [ebp - 0x6ec], ebx
mov byte [ebp - 0x6e8], 0
mov eax, dword [0x68ecf0]
mov eax, dword [eax]
mov dword [ebp - 0x6e4], eax
mov byte [ebp - 0x6e0], 0xb
mov dword [ebp - 0x6dc], ebx
mov byte [ebp - 0x6d8], 0
mov eax, dword [0x68e2e4]
mov eax, dword [eax]
mov dword [ebp - 0x6d4], eax
mov byte [ebp - 0x6d0], 0xb
lea edx, [ebp - 0x6ec]
mov ecx, 3
mov eax, 0x519ad4
call fcn.0040b0c8
mov edx, dword [ebp - 0x6cc]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x519a24
mov eax, dword [0x68ecf0]
push dword [eax]
push 0x519a34
lea eax, [ebp - 0x6f0]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x6f0]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x519a24
mov eax, dword [0x68e544]
push dword [eax]
push 0x519a34
lea eax, [ebp - 0x6f4]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x6f4]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519af8
call fcn.00554248
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519b1c
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x76]
add eax, 9
cmp eax, 0xa
ja case.0x517966.0
jmp dword [eax*4 + 0x51796d]
push 1
push 0
mov ecx, 0xff00
mov edx, 0x5199c0
mov eax, dword [0x69a58c]
call fcn.0053d6d4
mov eax, dword [0x68f0c0]
cmp dword [eax], 0
je case.0x517966.0
mov eax, dword [0x68f0c0]
mov eax, dword [eax]
movzx edx, word [ebp - 0x68]
mov word [eax + 0x13], dx
jmp case.0x517966.0
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519b38
call fcn.00554248
jmp case.0x517966.0
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519b6c
call fcn.00554248
jmp case.0x517966.0
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519b98
call fcn.00554248
jmp case.0x517966.0
push 0x46
push 0
push 0
push 0x519bbc
mov eax, dword [0x68ecf0]
push dword [eax]
push 0x519a34
lea eax, [ebp - 0x6f8]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x6f8]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x517966.0
push 0x46
push 0
push 0
push 0x519bbc
mov eax, dword [0x68e5dc]
push dword [eax]
push 0x519a34
lea eax, [ebp - 0x6fc]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x6fc]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x517966.0
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519bd4
call fcn.00554248
jmp case.0x517966.0
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519c04
call fcn.00554248
jmp case.0x517966.0
push 0x46
push 0
push 0
push 0x519bbc
mov eax, dword [0x68e544]
push dword [eax]
push 0x519a34
lea eax, [ebp - 0x700]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x700]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
jmp case.0x517966.0
push 0x46
push 0
push 0
push 0x519c34
mov eax, dword [0x68e544]
push dword [eax]
push 0x519c54
lea eax, [ebp - 0x704]
mov edx, 3
call fcn.004054fc
mov edx, dword [ebp - 0x704]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
mov eax, dword [0x68f0c0]
xor edx, edx
mov dword [eax], edx
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov ecx, dword [ebp - 0xc]
mov eax, edi
call fcn.0051df60
jmp case.0x510c90.5039
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov byte [eax + 0x4479], 0
mov eax, dword [ebp - 0x68]
cmp eax, 0x3e8
jg 0x517bde
je 0x517cb9
dec eax
je 0x517bf5
dec eax
je 0x517c0c
dec eax
je 0x517ca0
jmp case.0x510c90.5039
sub eax, 0x3e9
je 0x517cf0
dec eax
je 0x517d4f
jmp case.0x510c90.5039
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x70]
call fcn.004e0fb8
jmp case.0x510c90.5039
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov byte [eax + 0x4479], 1
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x76]
mov dword [eax + 0x4454], edx
movzx eax, word [ebp - 0x70]
movzx edx, word [ebp - 0x6c]
shl edx, 0x10
or eax, edx
mov edx, dword [0x68e91c]
mov edx, dword [edx]
mov dword [edx + 0x4458], eax
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov byte [eax + 0x447a], 1
mov eax, dword [0x68e91c]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x447c], edx
call sub.kernel32.dll_GetTickCount
add eax, 0x96
mov edx, dword [0x68e91c]
mov edx, dword [edx]
mov dword [edx + 0x4480], eax
mov eax, dword [0x68e91c]
mov eax, dword [eax]
imul eax, dword [eax + 0x4470], 0x10d
mov edx, dword [0x68e91c]
mov edx, dword [edx]
mov byte [edx + eax + 0x37b7], 0
jmp case.0x510c90.5039
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov eax, dword [eax + 0x5a0]
xor edx, edx
call fcn.00493c78
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519c64
call fcn.00554248
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov eax, dword [eax + 0x5a0]
xor edx, edx
call fcn.00493c78
jmp case.0x510c90.5039
push 0x46
push 0
push 0
push 0x519c80
mov eax, dword [0x68e544]
push dword [eax]
push 0x519ca4
mov eax, dword [0x68ecf0]
push dword [eax]
push 0x51914c
lea eax, [ebp - 0x708]
mov edx, 5
call fcn.004054fc
mov edx, dword [ebp - 0x708]
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
call fcn.00554248
mov eax, dword [0x68e91c]
mov eax, dword [eax]
mov byte [eax + 0x4465], 0
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519cb4
call fcn.00554248
jmp case.0x510c90.5039
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x76]
mov eax, edi
call fcn.0051a44c
jmp case.0x510c90.5039
push 0x46
push 0
push 0
mov eax, dword [0x68f170]
mov eax, dword [eax]
movzx ecx, word [0x518388]
mov edx, 0x519ce0
call fcn.00554248
jmp case.0x510c90.5039
lea eax, [ebp - 0x76]
mov edx, dword [ebp - 0xc]
call fcn.004f3624
jmp case.0x510c90.5039
mov eax, dword [0x68e790]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
mov eax, dword [eax + 0x3d8]
mov byte [eax + 7], 1
mov eax, dword [ebp - 0x6c]
push eax
lea edx, [ebp - 0x70c]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x70c]
mov eax, dword [0x68ee04]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x70]
call fcn.004ce2b0
jmp case.0x510c90.5039
lea edx, [ebp - 0x710]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov ecx, dword [ebp - 0x710]
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051e1ac
jmp case.0x510c90.5039
lea edx, [ebp - 0x76]
mov eax, edi
call fcn.0051e22c
jmp case.0x510c90.5039
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov eax, dword [eax + 0x3dc]
mov dl, 1
call fcn.00493c78
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov eax, dword [eax + 0x3dc]
mov edx, dword [ebp - 0x70]
mov dword [eax + 0xc], edx
mov eax, dword [0x68e514]
mov eax, dword [eax]
call fcn.004f656c
mov eax, dword [0x68e514]
mov eax, dword [eax]
xor edx, edx
call fcn.004faf54
jmp case.0x510c90.5039
cmp dword [ebp - 0x68], 1
sete dl
mov eax, dword [0x68e554]
mov eax, dword [eax]
call fcn.0059ad48
jmp case.0x510c90.5039
lea edx, [ebp - 0x714]
mov eax, dword [ebp - 0xc]
call fcn.004ae018
mov edx, dword [ebp - 0x714]
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov eax, dword [eax + 0x3fc]
call fcn.00492330
mov eax, dword [0x68e514]
mov eax, dword [eax]
mov eax, dword [eax + 0x3fc]
mov dl, 1
call fcn.00493c78
mov eax, dword [0x68f170]
mov eax, dword [eax]
mov eax, dword [eax + 0x4bc]
mov dl, 1
call fcn.00493c78
jmp case.0x510c90.5039
mov eax, dword [0x68eab8]
cmp dword [eax], 0
je case.0x5103da.5079
lea edx, [ebp - 0x71c]
movzx eax, word [ebp - 0x72]
call fcn.0040a028
mov ecx, dword [ebp - 0x71c]
lea eax, [ebp - 0x718]
mov edx, 0x519cf4
call fcn.00405480
mov edx, dword [ebp - 0x718]
mov eax, dword [0x69a598]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x724]
mov eax, dword [ebp - 0x76]
call fcn.0040a028
mov ecx, dword [ebp - 0x724]
lea eax, [ebp - 0x720]
mov edx, 0x519d04
call fcn.00405480
mov edx, dword [ebp - 0x720]
mov eax, dword [0x69a598]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x70]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x72c]
call fcn.0040a114
mov ecx, dword [ebp - 0x72c]
lea eax, [ebp - 0x728]
mov edx, 0x519d14
call fcn.00405480
mov edx, dword [ebp - 0x728]
mov eax, dword [0x69a598]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x6c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x734]
call fcn.0040a114
mov ecx, dword [ebp - 0x734]
lea eax, [ebp - 0x730]
mov edx, 0x519d24
call fcn.00405480
mov edx, dword [ebp - 0x730]
mov eax, dword [0x69a598]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x68]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x73c]
call fcn.0040a114
mov ecx, dword [ebp - 0x73c]
lea eax, [ebp - 0x738]
mov edx, 0x519d34
call fcn.00405480
mov edx, dword [ebp - 0x738]
mov eax, dword [0x69a598]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 4]
mov eax, 0x519d48
call fcn.00405744
test eax, eax
jle case.0x5103da.5079
push 1
push 0
mov ecx, 0x8000
mov edx, dword [ebp - 4]
mov eax, dword [0x69a58c]
call fcn.0053d6d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x518112
lea eax, [ebp - 0x73c]
mov edx, 0x14
call fcn.0040517c
lea eax, [ebp - 0x6cc]
mov edx, 0x12
call fcn.0040517c
lea eax, [ebp - 0x680]
mov edx, 0x3c
call fcn.0040517c
lea eax, [ebp - 0x4e4]
mov edx, 2
call fcn.0040517c
lea eax, [ebp - 0x4dc]
mov edx, 0x2f
call fcn.0040517c
lea eax, [ebp - 0x320]
mov edx, 0x16
call fcn.0040517c
lea eax, [ebp - 0x2b0]
call fcn.00405158
lea eax, [ebp - 0x280]
mov edx, 8
call fcn.0040517c
lea eax, [ebp - 0x234]
call fcn.00405158
lea eax, [ebp - 0x22c]
call fcn.00405158
lea eax, [ebp - 0x28]
mov edx, 0xa
call fcn.0040517c
ret