Function at 0x53dc6c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1e
push 0
push 0
dec ecx
jne 0x53dc74
push ebx
push esi
push edi
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.00405878
xor eax, eax
push ebp
push 0x541478
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
cmp byte [eax], 0x2b
jne 0x53de7f
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 4]
call fcn.004056b8
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.004058f0
push 0
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 0x60], 0x2f
lea ecx, [ebp - 0x60]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x18]
call fcn.004cffd4
mov edx, dword [ebp - 0x5c]
lea eax, [ebp - 0x18]
call fcn.00405474
mov eax, dword [ebp - 0x14]
mov edx, 0x541490
call fcn.00405820
jne 0x53dcfb
mov eax, dword [0x5535e0]
mov byte [eax], 1
mov eax, dword [ebp - 0x14]
mov edx, 0x54149c
call fcn.00405820
jne 0x53dd12
mov eax, dword [0x5534ec]
mov byte [eax], 1
mov eax, dword [ebp - 0x14]
mov edx, 0x5414a8
call fcn.00405820
jne 0x53dd29
mov eax, dword [0x5534ec]
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
mov edx, 0x5414b8
call fcn.00405820
jne 0x53dd40
mov eax, dword [0x5535ac]
mov byte [eax], 1
mov eax, dword [ebp - 0x14]
mov edx, 0x5414c4
call fcn.00405820
jne 0x53dd57
mov eax, dword [0x5535ac]
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
mov edx, 0x5414d4
call fcn.00405820
jne 0x53dd6e
mov eax, dword [0x553880]
mov byte [eax], 1
mov eax, dword [ebp - 0x14]
mov edx, 0x5414e0
call fcn.00405820
jne 0x53dd85
mov eax, dword [0x553880]
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
mov edx, 0x5414f0
call fcn.00405820
jne 0x53dd9c
mov eax, dword [0x553560]
mov byte [eax], 1
mov eax, dword [ebp - 0x14]
mov edx, 0x5414fc
call fcn.00405820
jne 0x53ddb3
mov eax, dword [0x553560]
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
mov edx, 0x54150c
call fcn.00405820
jne 0x53ddca
mov eax, dword [0x553224]
mov byte [eax], 1
mov eax, dword [ebp - 0x14]
mov edx, 0x541518
call fcn.00405820
jne 0x53dde1
mov eax, dword [0x553224]
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
mov edx, 0x541528
call fcn.00405820
jne 0x53de05
mov eax, dword [0x553794]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5531e0]
mov dword [edx], eax
mov eax, dword [ebp - 0x14]
mov edx, 0x541534
call fcn.00405820
jne 0x53de1c
mov eax, dword [0x553794]
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
mov edx, 0x541544
call fcn.00405820
jne 0x53de39
mov byte [ebx + 0x414], 0
mov eax, dword [0x5530b0]
inc dword [eax]
mov eax, dword [ebp - 0x14]
mov edx, 0x541554
call fcn.00405820
jne 0x53de5d
mov eax, ebx
call fcn.0053d490
mov byte [ebx + 0x414], 0
mov eax, dword [0x5530b0]
inc dword [eax]
cmp dword [ebp - 0x18], 0
je case.default.0x53dfec
xor edx, edx
mov eax, dword [ebp - 0x18]
call fcn.004cfdac
mov edx, eax
mov eax, ebx
call fcn.0053da50
jmp case.default.0x53dfec
mov eax, dword [ebp - 4]
call fcn.004056b8
cmp eax, 0x10
jge 0x53deda
mov eax, dword [ebp - 4]
cmp byte [eax], 0x3d
jne case.default.0x53dfec
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 4]
call fcn.004056b8
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.004058f0
mov eax, dword [ebp - 0x18]
mov edx, 0x541564
call fcn.00405820
jne case.default.0x53dfec
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov byte [eax + 0x10c], 1
jmp case.default.0x53dfec
lea eax, [ebp - 8]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.004058f0
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
call fcn.004056b8
mov ecx, eax
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 4]
call fcn.004058f0
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 8]
call fcn.004cf8b4
movzx eax, word [ebp - 0x44]
cmp ax, 0x35
je 0x53df3c
cmp ax, 0x35
je 0x53df3c
cmp byte [0x552ffc], 0
je 0x53df3c
lea edx, [ebp - 0x48]
mov eax, ebx
call fcn.005466e0
mov eax, dword [0x55359c]
cmp dword [eax], 0
jne case.0x53dfec.528
movzx eax, word [ebp - 0x44]
cmp eax, 0x20d
jg 0x53dfd1
je 0x53e40b
cmp eax, 0x1fb
jg 0x53dfa8
je 0x53e389
cmp eax, 0x1f8
jg 0x53df91
je 0x53e046
add eax, 0xffffffce
sub eax, 2
jb case.0x53dfec.528
sub eax, 0x1c3
je 0x53e0ee
jmp case.default.0x53dfec
sub eax, 0x1f9
je 0x53e063
dec eax
je 0x53e36c
jmp case.default.0x53dfec
add eax, 0xfffffdf8
cmp eax, 4
ja case.default.0x53dfec
jmp dword [eax*4 + 0x53dfbd]
cmp eax, 0x213
jg 0x53e007
je 0x53e1c4
add eax, 0xfffffdf2
cmp eax, 4
ja case.default.0x53dfec
jmp dword [eax*4 + 0x53dff3]
cmp eax, 0x292
jg 0x53e02b
je case.0x53dfec.528
sub eax, 0x214
je 0x53e1d3
dec eax
je 0x53e1f7
jmp case.default.0x53dfec
sub eax, 0x322
je case.0x53dfec.528
sub eax, 0x130
je 0x53e43e
jmp case.default.0x53dfec
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541574
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [ebp - 0x48]
sub eax, 0xfffffffe
je 0x53e0b4
sub eax, 2
jne 0x53e0d1
push 0x541618
push dword [ebx + 0x3c8]
push 0x541624
lea eax, [ebp - 0x64]
mov edx, 3
call fcn.0040578c
mov edx, dword [ebp - 0x64]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
call fcn.0050801c
xor edx, edx
mov eax, dword [0x6ce48c]
call fcn.0051a8d4
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541658
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x54169c
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [ebp - 0x48]
add eax, 5
cmp eax, 4
ja case.default.0x53e0fd
jmp dword [eax*4 + 0x53e104]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5416e0
call fcn.0050801c
jmp 0x53e1b5
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5416fc
call fcn.0050801c
jmp 0x53e1b5
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541738
call fcn.0050801c
jmp 0x53e1b5
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x54176c
call fcn.0050801c
jmp 0x53e1b5
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541794
call fcn.0050801c
jmp 0x53e1b5
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5417c4
call fcn.0050801c
mov eax, dword [0x6ce48c]
call fcn.005194cc
jmp case.0x53dfec.528
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00542970
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5417e4
call fcn.0050801c
mov eax, ebx
call fcn.00542930
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541860
call fcn.0050801c
mov eax, ebx
call fcn.00542930
jmp case.0x53dfec.528
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x48]
mov eax, ebx
call fcn.00542574
jmp case.0x53dfec.528
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00542324
jmp case.0x53dfec.528
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.005429d8
jmp case.0x53dfec.528
mov eax, dword [0x5537b8]
mov byte [eax], 0
mov eax, dword [0x553954]
mov byte [eax], 0
mov eax, dword [0x553680]
mov byte [eax], 0
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541878
call fcn.0050801c
mov eax, ebx
call fcn.004c362c
jmp case.0x53dfec.528
mov eax, ebx
call fcn.0053b410
jmp case.0x53dfec.528
mov eax, dword [ebp - 0x48]
cmp eax, 5
ja case.0x53e29f.1
jmp dword [eax*4 + 0x53e2a6]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5418a4
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x54190c
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x54192c
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5418a4
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541960
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5418a4
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x54198c
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [ebp - 0x48]
sub eax, 0xfffffffe
je 0x53e3b1
dec eax
jne 0x53e3ce
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5419a4
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5419d0
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5419a4
call fcn.0050801c
jmp case.0x53dfec.528
mov eax, ebx
call fcn.0053b410
jmp case.0x53dfec.528
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5419f8
call fcn.0050801c
jmp case.0x53dfec.528
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00542bd8
jmp case.default.0x53dfec
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541a18
call fcn.0050801c
mov eax, ebx
call fcn.00542930
jmp case.default.0x53dfec
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541a30
call fcn.0050801c
mov eax, dword [0x6ce480]
call fcn.004c362c
jmp case.default.0x53dfec
mov eax, dword [0x5533f0]
cmp byte [eax], 0
je 0x53e4c9
cmp word [ebp - 0x44], 0x27a
jne case.default.0x53dfec
mov eax, dword [ebp - 0x48]
mov dword [ebx + 0x3f0], eax
mov eax, dword [ebp - 0x44]
mov dword [ebx + 0x3f4], eax
mov eax, dword [ebp - 0x40]
mov dword [ebx + 0x3f8], eax
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov edx, dword [ebp - 0x68]
lea eax, [ebx + 0x3fc]
call fcn.00405430
mov eax, dword [0x553054]
mov byte [eax], 1
mov dl, 1
mov eax, dword [ebx + 0x39c]
call fcn.004981e0
jmp case.default.0x53dfec
movzx esi, word [ebp - 0x44]
movzx eax, si
cmp eax, 0x296
jg 0x53e755
je 0x540781
cmp eax, 0x210
jg 0x53e648
je 0x53f4d4
cmp eax, 0x21
jg 0x53e580
je 0x53f593
add eax, 0xfffffffa
cmp eax, 0x1a
ja case.0x53e916.773
jmp dword [eax*4 + 0x53e514]
cmp eax, 0x35
jg 0x53e5ea
je 0x53f781
add eax, 0xffffffde
cmp eax, 0x12
ja case.0x53e916.773
jmp dword [eax*4 + 0x53e59e]
cmp eax, 0xca
jg 0x53e621
je 0x53fcd0
sub eax, 0x36
je 0x53ed01
add eax, 0xffffffd2
sub eax, 5
jb 0x53f9c2
sub eax, 0x5f
je 0x53fca3
dec eax
je 0x53fcb2
jmp case.0x53e916.773
sub eax, 0xcb
je 0x53fcc1
sub eax, 7
je 0x54000f
dec eax
je 0x540028
dec eax
je 0x540041
jmp case.0x53e916.773
add eax, 0xfffffda8
cmp eax, 0x3d
ja case.0x53e916.773
jmp dword [eax*4 + 0x53e65d]
cmp eax, 0x2f6
jg 0x53e8f7
je 0x540c63
add eax, 0xfffffd69
cmp eax, 0x5e
ja case.0x53e916.773
jmp dword [eax*4 + 0x53e77b]
cmp eax, 0x32a
jg 0x53e9e1
je 0x53ece3
add eax, 0xfffffd09
cmp eax, 0x30
ja case.0x53e916.773
jmp dword [eax*4 + 0x53e91d]
cmp eax, 0x1391
jg 0x53ea4b
je 0x53f8d7
cmp eax, 0x44f
jg 0x53ea24
je 0x53f942
sub eax, 0x32b
je 0x53ed25
sub eax, 0x121
je 0x53f8e3
dec eax
je 0x53f91f
dec eax
je 0x53f98a
jmp case.0x53e916.773
sub eax, 0x450
je 0x53f87b
sub eax, 2
je 0x53eab0
sub eax, 0xf3d
je 0x53ecc2
dec eax
je 0x53ed13
jmp case.0x53e916.773
cmp eax, 0x1f43
jg 0x53ea85
je 0x541293
sub eax, 0x1392
je case.0x53e50d.13
sub eax, 0x3f1
je 0x53eb3d
sub eax, 0x7be
je 0x541116
dec eax
je 0x5412a2
jmp case.0x53e916.773
sub eax, 0x1f44
je 0x5412b4
sub eax, 0xdebb
je case.default.0x540de3
dec eax
je case.default.0x540de3
sub eax, 0xd
je 0x54068b
jmp case.0x53e916.773
movzx edx, word [ebp - 0x40]
movzx eax, word [ebp - 0x42]
call fcn.00408748
mov ebx, eax
lea edx, [ebp - 0x34]
mov ecx, 4
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov eax, dword [0x553524]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x48]
je case.default.0x540de3
mov eax, dword [0x553524]
cmp ebx, dword [eax]
je case.default.0x540de3
mov eax, dword [0x553524]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x34]
jmp case.default.0x540de3
mov eax, dword [0x5535e4]
call fcn.004053dc
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
xor ecx, ecx
mov edx, 0x33
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
movzx eax, word [ebp - 0x42]
push eax
mov eax, dword [0x5531ac]
mov ecx, 1
mov edx, dword [0x51e24c]
call fcn.004068a8
add esp, 4
movzx edx, word [ebp - 0x42]
mov eax, dword [0x5531ac]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00403b4c
mov edx, dword [0x5531ac]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov eax, dword [ebx + 0x40c]
call fcn.00534a64
jmp case.default.0x540de3
mov eax, dword [0x553078]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x55349c]
xor edx, edx
mov dword [eax], edx
lea edx, [ebp - 0x58]
mov ecx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x54]
push eax
push 0
mov ecx, dword [ebp - 0x48]
mov edx, 0x32
mov eax, dword [0x6ce494]
call fcn.005261a0
mov dl, 7
mov eax, dword [0x6ce484]
call fcn.0051c6fc
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x51
mov eax, ebx
call fcn.0053add4
cmp byte [ebp - 0x50], 1
jne 0x53ec0c
mov eax, dword [0x5533cc]
mov byte [eax], 1
jmp 0x53ec14
mov eax, dword [0x5533cc]
mov byte [eax], 0
mov eax, dword [0x553090]
mov byte [eax], 0
mov eax, dword [0x5531d4]
cmp word [eax], 0
jbe 0x53ec42
push 0xffffff
mov ecx, 0x8000
mov edx, 0x541a74
mov eax, dword [0x6ce484]
call fcn.0051c7fc
jmp 0x53ecb2
mov eax, dword [0x553188]
cmp word [eax], 0
jbe 0x53ec68
push 0xffffff
mov ecx, 0x8000
mov edx, 0x541aa8
mov eax, dword [0x6ce484]
call fcn.0051c7fc
jmp 0x53ecb2
mov eax, dword [0x553708]
cmp word [eax], 0
jbe 0x53ec8e
push 0xffffff
mov ecx, 0x8000
mov edx, 0x541adc
mov eax, dword [0x6ce484]
call fcn.0051c7fc
jmp 0x53ecb2
mov eax, dword [0x553754]
cmp word [eax], 0
jbe 0x53ecb2
push 0xffffff
mov ecx, 0x8000
mov edx, 0x541b10
mov eax, dword [0x6ce484]
call fcn.0051c7fc
mov eax, dword [ebx + 0x40c]
call fcn.00534a64
jmp case.default.0x540de3
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x48]
mov eax, ebx
call fcn.00545b2c
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00542d88
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.0053da50
jmp case.default.0x540de3
mov eax, dword [0x553324]
mov edx, dword [ebp - 0x48]
mov dword [eax], edx
jmp case.default.0x540de3
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x48]
mov eax, ebx
call fcn.0054305c
jmp case.default.0x540de3
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x48]
mov eax, ebx
call fcn.00543120
jmp case.default.0x540de3
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.0054320c
jmp case.default.0x540de3
movzx eax, word [ebp - 0x42]
mov edx, dword [0x553720]
mov dword [edx], eax
jmp case.default.0x540de3
push 0x40255555
push 0x55555555
call fcn.004d0764
mov esi, eax
mov eax, dword [ebp - 0xc]
call fcn.004056b8
cmp esi, eax
jge 0x53edb2
lea eax, [ebp - 0x10]
push eax
push 0x40255555
push 0x55555555
call fcn.004d0764
inc eax
push eax
mov eax, dword [ebp - 0xc]
call fcn.004056b8
mov ecx, eax
mov eax, dword [ebp - 0xc]
pop edx
call fcn.004058f0
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.004cf968
push 0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0x60], 0x2f
lea ecx, [ebp - 0x60]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x18]
call fcn.004cffd4
jmp 0x53edba
lea eax, [ebp - 0x18]
call fcn.004053dc
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
mov ecx, dword [ebp - 0x48]
mov edx, 0xa
mov eax, dword [0x6ce494]
call fcn.005261a0
cmp dword [ebp - 0x18], 0
je case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
push 0
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 0x60], 0x5c
lea ecx, [ebp - 0x60]
lea edx, [esi + 0x34]
mov eax, dword [ebp - 0x18]
call fcn.004cffd4
mov edx, dword [ebp - 0x6c]
lea eax, [esi + 0x30]
call fcn.00405430
mov edx, esi
mov eax, ebx
call fcn.00543fe8
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.004cfdac
call fcn.005357d4
mov dword [esi + 0x38], eax
jmp case.default.0x540de3
push 0x40255555
push 0x55555555
call fcn.004d0764
mov esi, eax
mov eax, dword [ebp - 0xc]
call fcn.004056b8
cmp esi, eax
jge 0x53eec3
lea eax, [ebp - 0x10]
push eax
push 0x40255555
push 0x55555555
call fcn.004d0764
inc eax
push eax
mov eax, dword [ebp - 0xc]
call fcn.004056b8
mov ecx, eax
mov eax, dword [ebp - 0xc]
pop edx
call fcn.004058f0
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.004cf968
push 0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0x60], 0x2f
lea ecx, [ebp - 0x60]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x18]
call fcn.004cffd4
jmp 0x53eecb
lea eax, [ebp - 0x18]
call fcn.004053dc
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
mov ecx, dword [ebp - 0x48]
mov edx, 9
mov eax, dword [0x6ce494]
call fcn.005261a0
cmp dword [ebp - 0x18], 0
je case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
push 0
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 0x60], 0x5c
lea ecx, [ebp - 0x60]
lea edx, [esi + 0x34]
mov eax, dword [ebp - 0x18]
call fcn.004cffd4
mov edx, dword [ebp - 0x70]
lea eax, [esi + 0x30]
call fcn.00405430
mov edx, esi
mov eax, ebx
call fcn.00543fe8
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.004cfdac
call fcn.005357d4
mov dword [esi + 0x38], eax
jmp case.default.0x540de3
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 0x48]
cmp edx, eax
je case.default.0x540de3
movzx edx, word [ebp - 0x42]
push edx
movzx edx, word [ebp - 0x40]
push edx
push 0
push 0
push 0
push 0
movzx edx, si
mov ecx, eax
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
push 0x40255555
push 0x55555555
call fcn.004d0764
mov esi, eax
mov eax, dword [ebp - 0xc]
call fcn.004056b8
cmp esi, eax
jge 0x53f010
lea eax, [ebp - 0x10]
push eax
push 0x40255555
push 0x55555555
call fcn.004d0764
inc eax
push eax
mov eax, dword [ebp - 0xc]
call fcn.004056b8
mov ecx, eax
mov eax, dword [ebp - 0xc]
pop edx
call fcn.004058f0
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.004cf968
push 0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0x60], 0x2f
lea ecx, [ebp - 0x60]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x18]
call fcn.004cffd4
jmp 0x53f018
lea eax, [ebp - 0x18]
call fcn.004053dc
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 0x48]
cmp edx, eax
je 0x53f05c
movzx edx, word [ebp - 0x40]
push edx
movzx edx, word [ebp - 0x3e]
push edx
mov edx, dword [ebp - 0x30]
push edx
mov edx, dword [ebp - 0x2c]
push edx
movzx ecx, word [ebp - 0x42]
mov edx, eax
mov eax, dword [0x6ce494]
call fcn.005256fc
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
movzx edx, word [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.005261a0
cmp dword [ebp - 0x18], 0
je case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
push 0
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 0x60], 0x5c
lea ecx, [ebp - 0x60]
lea edx, [esi + 0x34]
mov eax, dword [ebp - 0x18]
call fcn.004cffd4
mov edx, dword [ebp - 0x74]
lea eax, [esi + 0x30]
call fcn.00405430
mov edx, esi
mov eax, ebx
call fcn.00543fe8
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.004cfdac
call fcn.005357d4
mov dword [esi + 0x38], eax
jmp case.default.0x540de3
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 0x48]
cmp edx, eax
jne 0x53f11a
cmp word [ebp - 0x44], 6
je 0x53f11a
cmp word [ebp - 0x44], 7
jne 0x53f143
movzx edx, word [ebp - 0x42]
push edx
movzx edx, word [ebp - 0x40]
push edx
movzx edx, word [ebp - 0x3e]
push edx
mov edx, dword [ebp - 0x30]
push edx
mov edx, dword [ebp - 0x2c]
push edx
push 0
movzx edx, word [ebp - 0x44]
mov ecx, eax
mov eax, dword [0x6ce494]
call fcn.005261a0
cmp word [ebp - 0x44], 6
jne case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5537c0]
mov dword [edx], eax
jmp case.default.0x540de3
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 0x48]
cmp edx, eax
je case.default.0x540de3
movzx edx, word [ebp - 0x42]
push edx
movzx edx, word [ebp - 0x40]
push edx
movzx edx, word [ebp - 0x3e]
push edx
mov edx, dword [ebp - 0x30]
push edx
mov edx, dword [ebp - 0x2c]
push edx
push 0
movzx edx, word [ebp - 0x44]
mov ecx, eax
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
movzx eax, word [ebp - 0x42]
mov dword [esi + 0x188], eax
jmp case.default.0x540de3
mov eax, dword [0x5533dc]
cmp byte [eax + 0x98], 0
je case.default.0x540de3
mov eax, dword [0x5533dc]
movzx edx, word [ebp - 0x48]
mov word [eax + 0xe0], dx
jmp case.default.0x540de3
mov eax, ebx
call fcn.0053d490
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
mov ecx, dword [ebp - 0x48]
mov edx, 0xa
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 0x48]
cmp edx, eax
je case.default.0x540de3
mov edx, eax
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x42]
mov dx, 0xc
mov eax, esi
call fcn.0052def0
jmp case.default.0x540de3
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 0x48]
cmp edx, eax
je case.default.0x540de3
mov edx, eax
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x42]
mov dx, 0xc
mov eax, esi
call fcn.0052def0
jmp case.default.0x540de3
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 0x48]
cmp edx, eax
je case.default.0x540de3
mov edx, eax
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x42]
movzx edx, word [ebp - 0x44]
mov eax, esi
call fcn.0052def0
cmp word [ebp - 0x44], 0xf
jne case.default.0x540de3
cmp dword [ebp - 0xc], 0
je case.default.0x540de3
mov byte [esi + 0x10c], 1
jmp case.default.0x540de3
lea edx, [ebp - 0x28]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x42]
movzx edx, word [ebp - 0x44]
mov eax, esi
call fcn.0052def0
movzx eax, word [ebp - 0x28]
mov dword [esi + 0xf4], eax
movzx eax, word [ebp - 0x26]
mov dword [esi + 0xf8], eax
movzx edx, word [ebp - 0x22]
movzx eax, word [ebp - 0x24]
call fcn.00408748
mov dword [esi + 0xfc], eax
jmp case.default.0x540de3
lea edx, [ebp - 0x58]
mov ecx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x42]
movzx edx, word [ebp - 0x44]
mov eax, esi
call fcn.0052def0
mov eax, dword [ebp - 0x58]
mov dword [esi + 0xf4], eax
mov eax, dword [ebp - 0x54]
mov dword [esi + 0xf8], eax
mov eax, dword [ebp - 0x50]
mov dword [esi + 0xfc], eax
mov eax, dword [ebp - 0x4c]
mov dword [esi + 0x104], eax
jmp case.default.0x540de3
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.004cfdac
push eax
movzx ecx, word [ebp - 0x3e]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.005389f8
jmp case.default.0x540de3
lea edx, [ebp - 0x38]
mov ecx, 4
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
movzx eax, word [ebp - 0x3e]
call fcn.00408758
movzx eax, al
push eax
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
mov eax, dword [ebp - 0x38]
push eax
movzx ecx, byte [ebp - 0x3e]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00538a80
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00538adc
jmp case.default.0x540de3
mov eax, dword [0x5537b8]
mov byte [eax], 0
mov eax, dword [0x553954]
mov byte [eax], 0
mov eax, dword [0x553680]
mov byte [eax], 0
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541b48
call fcn.0050801c
mov eax, ebx
call fcn.004c362c
jmp case.default.0x540de3
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je 0x53f563
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x42]
movzx edx, word [ebp - 0x44]
mov eax, esi
call fcn.0052def0
mov word [esi + 0x52], 0
jmp case.default.0x540de3
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
mov ecx, dword [ebp - 0x48]
mov edx, 0x20
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
mov ecx, dword [ebp - 0x48]
mov edx, 0x21
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
mov ecx, dword [ebp - 0x48]
mov edx, 0x1b
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x70], edx
mov eax, dword [0x55359c]
mov eax, dword [eax]
movzx edx, byte [ebp - 0x42]
mov byte [eax + 0x18], dl
movzx edx, word [ebp - 0x3e]
movzx eax, word [ebp - 0x40]
call fcn.00408748
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov dword [edx + 0x74], eax
mov eax, dword [0x55359c]
mov eax, dword [eax]
lea edx, [eax + 0x3c]
mov ecx, 0x32
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
jmp case.default.0x540de3
movzx eax, byte [ebp - 0x42]
mov edx, dword [0x553050]
mov dword [edx], eax
movzx eax, word [ebp - 0x42]
call fcn.00408758
movzx eax, al
mov edx, dword [0x55348c]
mov dword [edx], eax
movzx eax, byte [ebp - 0x40]
mov edx, dword [0x553540]
mov dword [edx], eax
movzx eax, word [ebp - 0x40]
call fcn.00408758
movzx eax, al
mov edx, dword [0x55353c]
mov dword [edx], eax
movzx eax, byte [ebp - 0x3e]
mov edx, dword [0x5535a4]
mov dword [edx], eax
movzx eax, word [ebp - 0x3e]
call fcn.00408758
movzx eax, al
mov edx, dword [0x553574]
mov dword [edx], eax
movzx eax, byte [ebp - 0x48]
mov edx, dword [0x55337c]
mov dword [edx], eax
jmp case.default.0x540de3
movzx eax, word [ebp - 0x42]
mov edx, dword [0x5537a4]
mov dword [edx], eax
movzx eax, word [ebp - 0x40]
mov edx, dword [0x5536c8]
mov dword [edx], eax
mov eax, dword [0x5536c8]
cmp dword [eax], 0
jne 0x53f702
mov eax, dword [0x553700]
mov byte [eax], 0
jmp case.default.0x540de3
mov eax, dword [0x553700]
mov byte [eax], 1
jmp case.default.0x540de3
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x5a], edx
push 0xff
movzx edx, word [ebp - 0x40]
movzx eax, word [ebp - 0x42]
call fcn.00408748
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x78]
call fcn.00409db0
lea eax, [ebp - 0x78]
mov edx, 0x541b98
call fcn.004056c4
mov edx, dword [ebp - 0x78]
mov ecx, 0xffffff
mov eax, dword [0x6ce484]
call fcn.0051c7fc
jmp case.default.0x540de3
mov eax, dword [0x55359c]
mov eax, dword [eax]
movzx edx, word [ebp - 0x42]
mov word [eax + 0x3c], dx
mov edx, 0x541bb0
mov eax, dword [0x6ce484]
call fcn.0051c790
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
movzx eax, word [ebp - 0x40]
push eax
movzx ecx, word [ebp - 0x42]
mov edx, esi
mov eax, ebx
call fcn.005471a4
movzx eax, word [ebp - 0x42]
mov word [esi + 0x52], ax
movzx eax, word [ebp - 0x40]
mov word [esi + 0x54], ax
movzx eax, word [ebp - 0x3e]
mov word [esi + 0x56], ax
jmp case.default.0x540de3
lea edx, [ebp - 0x58]
mov ecx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
mov eax, dword [0x55359c]
cmp esi, dword [eax]
jne 0x53f816
mov eax, dword [0x55359c]
mov eax, dword [eax]
cmp dword [eax + 0x38], 0xf9
jne 0x53f828
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553030]
mov dword [edx], eax
jmp 0x53f828
mov eax, esi
call fcn.005310b4
test al, al
je 0x53f828
mov eax, esi
call fcn.005310d0
push 0
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x54]
push eax
push 0
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x4c]
mov dx, 0x1f
mov eax, esi
call fcn.0052dfcc
movzx eax, word [ebp - 0x40]
push eax
cmp word [ebp - 0x3e], 0xa
sete al
push eax
movzx ecx, word [ebp - 0x42]
mov edx, esi
mov eax, ebx
call fcn.0054700c
movzx eax, word [ebp - 0x42]
mov word [esi + 0x52], ax
movzx eax, word [ebp - 0x40]
mov word [esi + 0x56], ax
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
lea edx, [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
movzx edx, word [ebp - 0x40]
movzx eax, word [ebp - 0x42]
call fcn.00408748
mov dword [esi + 0x12c], eax
mov eax, dword [ebp - 0x30]
mov dword [esi + 0x130], eax
mov eax, dword [ebp - 0x2c]
mov dword [esi + 0x134], eax
mov eax, dword [esi + 0x12c]
call fcn.0052cf20
jmp case.default.0x540de3
mov eax, ebx
call fcn.00545ab8
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
mov eax, dword [0x55359c]
cmp esi, dword [eax]
je 0x53f913
movzx eax, word [ebp - 0x42]
mov word [esi + 0x52], ax
movzx eax, word [ebp - 0x40]
mov word [esi + 0x56], ax
mov byte [esi + 0x168], 1
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
mov byte [esi + 0x168], 0
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
movzx eax, word [ebp - 0x42]
mov word [esi + 0x52], ax
movzx eax, word [ebp - 0x40]
mov word [esi + 0x56], ax
mov byte [esi + 0x169], 1
mov dword [esi + 0x170], 0x7d0
call sub.kernel32.dll_GetTickCount_1
mov dword [esi + 0x16c], eax
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
mov eax, esi
mov edx, dword [0x52d15c]
call fcn.00404564
test al, al
je case.default.0x540de3
mov eax, esi
call fcn.00532a04
jmp case.default.0x540de3
cmp word [ebp - 0x44], 0x66
jne 0x53f9d7
mov eax, dword [0x5538a0]
cmp byte [eax], 0
jne case.default.0x53dfec
cmp word [ebp - 0x44], 0x67
jne 0x53f9ec
mov eax, dword [0x553988]
cmp byte [eax], 0
jne case.default.0x53dfec
cmp word [ebp - 0x44], 0x68
jne 0x53fa01
mov eax, dword [0x553774]
cmp byte [eax], 0
jne case.default.0x53dfec
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
movzx ebx, word [ebp - 0x44]
cmp bx, 0x64
je 0x53fa25
movzx eax, bx
mov edx, dword [ebp - 0x1c]
call fcn.00520bd0
test al, al
je 0x53fa4c
movzx eax, word [ebp - 0x42]
call fcn.00408758
call fcn.005357d4
push eax
movzx eax, byte [ebp - 0x42]
call fcn.005357d4
mov ecx, eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x6ce484]
call fcn.0051c7fc
cmp word [ebp - 0x44], 0x68
jne case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.00515700
jmp case.default.0x540de3
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov eax, dword [0x553110]
cmp byte [eax], 0
jne 0x53fab7
movzx eax, word [ebp - 0x44]
mov edx, dword [ebp - 0x1c]
call fcn.00520bd0
test al, al
je 0x53fab7
movzx eax, word [ebp - 0x42]
call fcn.00408758
call fcn.005357d4
push eax
movzx eax, byte [ebp - 0x42]
call fcn.005357d4
mov ecx, eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x6ce484]
call fcn.0051c7fc
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
mov edx, dword [ebp - 0x1c]
mov eax, esi
call fcn.00531138
jmp case.default.0x540de3
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
push 0
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 0x60], 0x5c
lea ecx, [ebp - 0x60]
lea edx, [esi + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.004cffd4
mov edx, dword [ebp - 0x7c]
lea eax, [esi + 0x30]
call fcn.00405430
mov edx, esi
mov eax, ebx
call fcn.00543fe8
movzx eax, byte [ebp - 0x42]
call fcn.005357d4
mov dword [esi + 0x38], eax
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
je case.default.0x540de3
movzx eax, byte [ebp - 0x42]
call fcn.005357d4
mov dword [esi + 0x38], eax
jmp case.default.0x540de3
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 0x48]
cmp edx, eax
je case.default.0x540de3
movzx edx, word [ebp - 0x42]
push edx
movzx edx, word [ebp - 0x40]
push edx
push 0
push 0
push 0
push 0
mov ecx, eax
mov edx, 0x1d
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
lea edx, [ebp - 0x58]
mov ecx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.0052555c
mov esi, eax
test esi, esi
jne 0x53fbea
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x54]
push eax
movzx ecx, word [ebp - 0x42]
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.005256fc
mov esi, eax
mov eax, dword [ebp - 0x50]
mov dword [esi + 0x108], eax
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x54]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x42]
mov dx, 0x14
mov eax, esi
call fcn.0052def0
jmp case.default.0x540de3
movzx eax, word [ebp - 0x42]
push eax
movzx eax, word [ebp - 0x40]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x48]
mov edx, 0x15
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
lea edx, [ebp - 0x20]
mov ecx, 4
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
movzx eax, word [ebp - 0x42]
push eax
mov ecx, dword [ebp - 0x48]
mov dl, 1
mov eax, dword [0x5013f8]
call fcn.005014b8
xor edx, edx
mov dword [eax + 0xc], edx
movzx edx, word [ebp - 0x20]
mov dword [eax + 0x1c], edx
mov edx, eax
mov eax, dword [0x6ce4a4]
call fcn.005017a4
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, dword [0x6ce4a4]
call fcn.005017fc
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.005432ec
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.005436e8
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00543394
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00543430
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.005434dc
jmp case.default.0x540de3
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov eax, dword [ebp - 0x80]
mov edx, dword [ebp - 0x48]
call fcn.0052c2b8
jmp case.default.0x540de3
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00543888
jmp case.default.0x540de3
movzx eax, word [ebp - 0x40]
push eax
movzx eax, word [ebp - 0x3e]
push eax
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov eax, dword [ebp - 0x88]
push eax
movzx ecx, word [ebp - 0x42]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.005438e8
jmp case.default.0x540de3
movzx eax, word [ebp - 0x40]
push eax
movzx ecx, word [ebp - 0x42]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.005439b4
jmp case.default.0x540de3
movzx ecx, word [ebp - 0x40]
movzx edx, word [ebp - 0x42]
mov eax, dword [0x6ce4b8]
call fcn.0050205c
jmp case.default.0x540de3
mov edx, 0x541bc0
mov eax, dword [0x6ce484]
call fcn.0051c790
jmp case.default.0x540de3
movzx ecx, word [ebp - 0x40]
movzx edx, word [ebp - 0x42]
mov eax, dword [0x6ce4b8]
call fcn.00502130
jmp case.default.0x540de3
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x20], edx
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.004045d4
mov eax, dword [0x553104]
mov eax, dword [eax]
mov edx, eax
sub edx, 0xd
jae 0x53fe05
mov edx, dword [0x553104]
imul eax, eax, 0x13
mov edx, dword [0x5533dc]
mov ecx, dword [0x553104]
lea edi, [edx + eax*4]
lea esi, [ecx + 4]
mov ecx, 0x13
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x553104]
mov byte [eax + 4], 0
jmp case.default.0x540de3
mov eax, dword [0x553104]
add eax, 4
call fcn.0052bf20
mov eax, dword [0x553104]
mov byte [eax + 4], 0
jmp case.default.0x540de3
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x20], edx
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.004045d4
mov eax, dword [0x553104]
mov byte [eax + 4], 0
jmp case.default.0x540de3
mov eax, dword [0x553104]
mov eax, dword [eax]
test eax, eax
jge 0x53fe89
mov edx, dword [0x553104]
inc eax
neg eax
imul eax, eax, 0x13
mov edx, dword [0x5533dc]
mov ecx, dword [0x553104]
lea edi, [edx + eax*4]
lea esi, [ecx + 4]
mov ecx, 0x13
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x553104]
mov byte [eax + 4], 0
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00543a08
jmp case.default.0x540de3
mov eax, dword [0x55359c]
mov eax, dword [eax]
movzx edx, word [ebp - 0x48]
mov word [eax + 0x62], dx
mov eax, dword [0x55359c]
mov eax, dword [eax]
movzx edx, word [ebp - 0x42]
mov word [eax + 0x66], dx
mov eax, dword [0x55359c]
mov eax, dword [eax]
movzx edx, word [ebp - 0x40]
mov word [eax + 0x6a], dx
jmp case.default.0x540de3
mov eax, 0x6a
call fcn.005178fc
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov esi, dword [eax + 0x70]
mov ebx, dword [ebp - 0x48]
cmp esi, ebx
jge 0x53ff3e
mov eax, dword [0x55359c]
mov eax, ebx
sub eax, esi
lea edx, [ebp - 0x90]
call fcn.00409cc4
push dword [ebp - 0x90]
push 0x541bd4
mov eax, dword [0x553228]
push dword [eax]
push 0x541be0
lea eax, [ebp - 0x8c]
mov edx, 4
call fcn.0040578c
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x6ce484]
call fcn.0051c790
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x70], edx
movzx edx, word [ebp - 0x40]
movzx eax, word [ebp - 0x42]
call fcn.00408748
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov dword [edx + 0x74], eax
jmp case.default.0x540de3
push 0
push 0
push 0
movzx edx, word [ebp - 0x40]
movzx eax, word [ebp - 0x42]
call fcn.00408748
push eax
xor edx, edx
movzx eax, word [ebp - 0x3e]
call fcn.00408748
push eax
push 0
movzx edx, si
mov ecx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
push 0
push 0
push 0
movzx edx, word [ebp - 0x40]
movzx eax, word [ebp - 0x42]
call fcn.00408748
push eax
movzx eax, word [ebp - 0x3e]
push eax
push 0
movzx edx, si
mov ecx, dword [ebp - 0x48]
mov eax, dword [0x6ce494]
call fcn.005261a0
jmp case.default.0x540de3
mov eax, dword [0x6ce494]
call fcn.00521770
mov eax, dword [0x5533f0]
mov byte [eax], 1
jmp case.default.0x540de3
mov eax, dword [0x5539e0]
mov byte [eax], 0
call fcn.0052c0e4
jmp case.default.0x540de3
mov eax, dword [0x5539e0]
call fcn.0052bf20
mov eax, dword [0x5539e0]
mov byte [eax], 0
jmp case.default.0x540de3
cmp dword [ebp - 0xc], 0
je case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00543b14
jmp case.default.0x540de3
cmp dword [ebp - 0xc], 0
je case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00543bcc
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00543b7c
jmp case.default.0x540de3
movzx edx, word [ebp - 0x3e]
movzx eax, word [ebp - 0x40]
call fcn.00408748
push eax
movzx ecx, word [ebp - 0x42]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00543ca8
jmp case.default.0x540de3
movzx edx, word [ebp - 0x3e]
movzx eax, word [ebp - 0x40]
call fcn.00408748
push eax
movzx edx, word [ebp - 0x42]
mov ecx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00543d10
jmp case.default.0x540de3
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov eax, dword [ebp - 0x94]
push eax
movzx ecx, word [ebp - 0x42]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00543d50
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
call fcn.00510358
jmp case.default.0x540de3
mov eax, dword [ebp - 0xc]
push eax
movzx ecx, word [ebp - 0x42]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00543e2c
jmp case.default.0x540de3
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00544214
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.005443c8
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.005443fc
jmp case.default.0x540de3
mov eax, dword [0x5534b8]
cmp byte [eax], 0
je case.default.0x540de3
mov ebx, dword [ebp - 0x48]
test ebx, ebx
jle 0x54015a
lea edx, [ebp - 0x98]
mov eax, ebx
call fcn.00409cc4
push dword [ebp - 0x98]
push 0x541bd4
mov eax, dword [0x553228]
push dword [eax]
mov eax, dword [0x553344]
mov edx, 3
call fcn.0040578c
jmp case.default.0x540de3
mov ecx, dword [0x553228]
mov ecx, dword [ecx]
mov eax, dword [0x553344]
mov edx, 0x541bf4
call fcn.00405710
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x70], edx
mov eax, dword [0x5539a4]
mov byte [eax], 0
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
mov eax, dword [0x5539a4]
call fcn.0052bf20
mov eax, dword [0x5539a4]
mov byte [eax], 0
mov eax, dword [ebp - 0x48]
sub eax, 0xfffffffc
je 0x540263
dec eax
je 0x540246
dec eax
je 0x540229
dec eax
jne 0x540280
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 0xa4], 0x7fffffff
mov byte [ebp - 0xa0], 0
lea edx, [ebp - 0xa4]
xor ecx, ecx
mov eax, 0x541c04
call fcn.0040b1c4
mov edx, dword [ebp - 0x9c]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541c2c
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541c2c
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541c44
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541c60
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5534b8]
cmp byte [eax], 0
je case.default.0x540de3
mov ebx, dword [ebp - 0x48]
test ebx, ebx
jl 0x5402e5
lea edx, [ebp - 0xa8]
mov eax, ebx
call fcn.00409cc4
push dword [ebp - 0xa8]
push 0x541bd4
mov eax, dword [0x553228]
push dword [eax]
mov eax, dword [0x553344]
mov edx, 3
call fcn.0040578c
jmp case.default.0x540de3
mov ecx, dword [0x553228]
mov ecx, dword [ecx]
mov eax, dword [0x553344]
mov edx, 0x541bf4
call fcn.00405710
jmp case.default.0x540de3
mov eax, dword [0x5539a4]
cmp byte [eax], 0
je case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x70], edx
mov eax, dword [0x5539a4]
movzx edx, word [ebp - 0x42]
mov word [eax + 0x48], dx
mov eax, dword [0x5539a4]
movzx edx, word [ebp - 0x40]
mov word [eax + 0x4a], dx
mov eax, dword [0x5539a4]
call fcn.0052bf20
mov eax, dword [0x5539a4]
mov byte [eax], 0
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
mov eax, dword [0x5539a4]
call fcn.0052bf20
mov eax, dword [0x5539a4]
mov byte [eax], 0
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541c7c
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
movzx eax, word [ebp - 0x44]
cmp ax, 0x2bd
je 0x540401
cmp ax, 0x2be
jne 0x5403df
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541c98
call fcn.0050801c
jmp 0x5403f7
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541cc8
call fcn.0050801c
mov eax, dword [0x5539a4]
call fcn.0052bf20
mov eax, dword [0x5539a4]
mov byte [eax], 0
jmp case.default.0x540de3
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.005444b4
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
movzx eax, word [ebp - 0x44]
cmp ax, 0x2c1
je 0x54047d
cmp ax, 0x2c3
jne 0x540460
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541cdc
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541cfc
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
call fcn.00511b3c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x70], edx
movzx edx, word [ebp - 0x40]
movzx eax, word [ebp - 0x42]
call fcn.00408748
mov edx, eax
mov eax, dword [0x5539d0]
mov eax, dword [eax]
call fcn.00511ab4
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
mov eax, dword [ebp - 0x48]
dec eax
je 0x5404f5
dec eax
je 0x540512
dec eax
je 0x54052f
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541d10
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541d24
call fcn.0050801c
jmp case.default.0x540de3
mov edx, dword [0x553228]
mov edx, dword [edx]
lea eax, [ebp - 0xac]
mov ecx, 0x541d48
call fcn.00405710
mov edx, dword [ebp - 0xac]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
mov eax, dword [0x55359c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x70], edx
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541d58
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
mov eax, dword [ebp - 0x48]
dec eax
je 0x5405c9
dec eax
je 0x5405e6
dec eax
je 0x540603
dec eax
je 0x540639
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541d74
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541d24
call fcn.0050801c
jmp case.default.0x540de3
mov edx, dword [0x553228]
mov edx, dword [edx]
lea eax, [ebp - 0xb0]
mov ecx, 0x541d48
call fcn.00405710
mov edx, dword [ebp - 0xb0]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541d88
call fcn.0050801c
jmp case.default.0x540de3
movzx eax, word [ebp - 0x40]
push eax
movzx ecx, word [ebp - 0x42]
movzx edx, word [ebp - 0x3e]
mov eax, ebx
call fcn.00545408
jmp case.default.0x540de3
movzx eax, word [ebp - 0x40]
push eax
mov eax, dword [ebp - 0xc]
push eax
movzx ecx, word [ebp - 0x42]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00544690
jmp case.default.0x540de3
mov eax, dword [0x553984]
inc dword [eax]
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.0054484c
jmp case.default.0x540de3
cmp word [ebp - 0x42], 0
jbe 0x5406b7
mov eax, dword [0x5533cc]
mov byte [eax], 1
jmp 0x5406bf
mov eax, dword [0x5533cc]
mov byte [eax], 0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553068]
mov dword [edx], eax
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553068]
mov dword [edx], eax
mov eax, dword [0x5533cc]
mov byte [eax], 1
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553068]
mov dword [edx], eax
mov eax, dword [ebp - 0x48]
sub eax, 0xfffffffc
je 0x540764
dec eax
je 0x540747
dec eax
je 0x54072a
dec eax
jne case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541da8
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541dc0
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541de8
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541e20
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553068]
mov dword [edx], eax
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553068]
mov dword [edx], eax
mov eax, dword [ebp - 0x48]
add eax, 5
cmp eax, 4
ja case.default.0x540de3
jmp dword [eax*4 + 0x5407b6]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541e38
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541dc0
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541da8
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541e20
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541e64
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553068]
mov dword [edx], eax
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553068]
mov dword [edx], eax
mov eax, dword [ebp - 0x48]
sub eax, 0xfffffffd
je 0x5408c6
dec eax
je 0x5408a9
dec eax
jne case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541e7c
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541ea8
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541ed4
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5530d8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.default.0x540de3
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov edx, dword [ebp - 0xb4]
mov eax, ebx
call fcn.00544954
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553420]
mov dword [edx], eax
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.005449f0
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553420]
mov dword [edx], eax
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00544e64
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553420]
mov dword [edx], eax
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541ef0
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553420]
mov dword [edx], eax
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541f14
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553420]
mov dword [edx], eax
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov edx, dword [ebp - 0xb8]
mov eax, dword [0x553818]
call fcn.00405430
mov eax, dword [0x5539d0]
mov eax, dword [eax]
call fcn.00513054
jmp case.default.0x540de3
call fcn.0052c3b8
mov eax, dword [0x55341c]
cmp byte [eax], 0
je 0x5409fd
mov eax, dword [0x55341c]
call fcn.0052bf20
mov eax, dword [0x55341c]
mov byte [eax], 0
mov eax, dword [0x5539c8]
cmp dword [eax], 0
jle 0x540a22
mov eax, dword [0x5539c8]
mov eax, dword [eax]
mov edx, dword [0x55359c]
mov edx, dword [edx]
add dword [edx + 0x70], eax
mov eax, dword [0x5539c8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5539d0]
mov eax, dword [eax]
call fcn.00513120
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553750]
mov dword [edx], eax
mov eax, dword [0x55341c]
cmp byte [eax], 0
je case.default.0x540de3
mov eax, dword [0x55341c]
call fcn.0052c378
mov eax, dword [0x55341c]
mov byte [eax], 0
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553750]
mov dword [edx], eax
mov eax, dword [0x55341c]
cmp byte [eax], 0
je case.default.0x540de3
mov eax, dword [0x55341c]
call fcn.0052bf20
mov eax, dword [0x55341c]
mov byte [eax], 0
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553750]
mov dword [edx], eax
mov eax, dword [0x55341c]
cmp byte [eax], 0
je case.default.0x540de3
mov eax, dword [0x55341c]
mov byte [eax], 0
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553750]
mov dword [edx], eax
mov eax, dword [0x55341c]
cmp byte [eax], 0
je case.default.0x540de3
lea eax, [ebp - 0xbc]
mov edx, dword [0x55341c]
call fcn.00405640
mov eax, dword [ebp - 0xbc]
mov edx, dword [0x55341c]
mov edx, dword [edx + 0x44]
call fcn.0052c038
mov eax, dword [0x55341c]
call fcn.0052c378
mov eax, dword [0x55341c]
mov byte [eax], 0
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00545228
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00545288
jmp case.default.0x540de3
mov eax, dword [0x5539c8]
mov edx, dword [ebp - 0x48]
mov dword [eax], edx
movzx edx, word [ebp - 0x40]
movzx eax, word [ebp - 0x42]
call fcn.00408748
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov dword [edx + 0x70], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553750]
mov dword [edx], eax
jmp case.default.0x540de3
mov eax, dword [0x5539c8]
mov edx, dword [ebp - 0x48]
mov dword [eax], edx
movzx edx, word [ebp - 0x40]
movzx eax, word [ebp - 0x42]
call fcn.00408748
mov edx, dword [0x55359c]
mov edx, dword [edx]
mov dword [edx + 0x70], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553750]
mov dword [edx], eax
jmp case.default.0x540de3
mov eax, dword [0x553020]
mov edx, dword [ebp - 0x48]
mov dword [eax], edx
mov eax, 0x6a
call fcn.005178fc
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
call fcn.00513120
jmp case.default.0x540de3
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.00544430
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553420]
mov dword [edx], eax
movzx edx, word [ebp - 0x42]
mov eax, ebx
call fcn.005452e8
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x553420]
mov dword [edx], eax
push 0xff
mov ecx, 0xffffff
mov edx, 0x541f48
mov eax, dword [0x6ce484]
call fcn.0051c7fc
mov eax, dword [0x553058]
mov dword [eax], 0xffffffff
jmp case.default.0x540de3
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov edx, dword [ebp - 0xc0]
mov eax, ebx
call fcn.00545300
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00545388
jmp case.default.0x540de3
mov eax, ebx
call fcn.0053cf5c
jmp case.default.0x540de3
mov eax, dword [ebp - 0x48]
cmp eax, 6
ja case.default.0x540de3
jmp dword [eax*4 + 0x540c76]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541f60
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541f80
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541fa8
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541fc4
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541fe0
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541ffc
call fcn.0050801c
jmp case.default.0x540de3
mov eax, ebx
call fcn.0053cf5c
jmp case.default.0x540de3
mov eax, dword [ebp - 0x48]
dec eax
je 0x540d60
dec eax
je 0x540d7d
dec eax
je 0x540d9a
dec eax
je 0x540db7
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x541f60
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542024
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542044
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542068
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [ebp - 0x48]
add eax, 7
cmp eax, 5
ja case.default.0x540de3
jmp dword [eax*4 + 0x540dea]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542080
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5420a8
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5420d0
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542104
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542130
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x54215c
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [ebp - 0x48]
sub eax, 0xfffffffc
je 0x540f1c
dec eax
je 0x540eff
dec eax
je 0x540ee2
dec eax
jne case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542184
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x54219c
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5421b0
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5421dc
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [ebp - 0x48]
sub eax, 0xfffffffd
je 0x540f85
dec eax
je 0x540f68
dec eax
jne case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542184
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542200
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x54221c
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x54223c
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
mov eax, dword [ebp - 0x48]
sub eax, 0xfffffffd
je 0x54102d
dec eax
je 0x541010
dec eax
jne 0x54104a
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542254
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x54226c
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x542284
call fcn.0050801c
jmp case.default.0x540de3
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
mov edx, 0x5422ac
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
cmp dword [ebp - 0xc], 0
je case.default.0x540de3
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov edx, dword [ebp - 0xc4]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
call fcn.0050801c
jmp case.default.0x540de3
cmp dword [ebp - 0xc], 0
je case.default.0x540de3
lea edx, [ebp - 0xc8]
mov eax, dword [ebp - 0xc]
call fcn.004cf968
mov edx, dword [ebp - 0xc8]
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x541568]
call fcn.0050801c
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
jmp case.default.0x540de3
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x89c], eax
jmp case.default.0x540de3
lea eax, [ebp - 0x10]
push eax
push 0x40355555
push 0x55555555
call fcn.004d0764
inc eax
push eax
mov eax, dword [ebp - 0xc]
call fcn.004056b8
mov ecx, eax
mov eax, dword [ebp - 0xc]
pop edx
call fcn.004058f0
lea edx, [ebp - 0x58]
mov ecx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.004cf9f8
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.004cf968
movzx eax, word [ebp - 0x42]
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x764], eax
movzx eax, byte [ebp - 0x58]
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x76c], eax
movzx eax, word [ebp - 0x58]
call fcn.00408758
movzx eax, al
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x788], eax
mov eax, dword [ebp - 0x58]
call fcn.00408754
movzx eax, al
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x7a4], eax
mov eax, dword [ebp - 0x58]
call fcn.00408754
call fcn.00408758
movzx eax, al
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x7c0], eax
movzx eax, byte [ebp - 0x54]
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x7dc], eax
movzx eax, word [ebp - 0x54]
call fcn.00408758
movzx eax, al
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x7f8], eax
mov eax, dword [ebp - 0x54]
call fcn.00408754
movzx eax, al
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x814], eax
mov eax, dword [ebp - 0x54]
call fcn.00408754
call fcn.00408758
movzx eax, al
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x830], eax
movzx eax, byte [ebp - 0x50]
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x84c], eax
movzx eax, word [ebp - 0x50]
call fcn.00408758
movzx eax, al
mov edx, dword [0x5539d0]
mov edx, dword [edx]
mov dword [edx + 0x868], eax
mov eax, dword [0x5539d0]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x760], edx
mov eax, dword [0x5539d0]
mov eax, dword [eax]
movzx ecx, word [0x5422c0]
xor edx, edx
call fcn.0050801c
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.0053c0b0
jmp case.default.0x540de3
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.005459b4
jmp case.default.0x540de3
lea edx, [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
mov eax, ebx
call fcn.005459f0
jmp case.default.0x540de3
lea edx, [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00544464
jmp case.default.0x540de3
mov eax, dword [0x55359c]
cmp dword [eax], 0
je case.default.0x53dfec
lea edx, [ebp - 0xd0]
movzx eax, si
call fcn.00409cc4
mov ecx, dword [ebp - 0xd0]
lea eax, [ebp - 0xcc]
mov edx, 0x5422cc
call fcn.00405710
mov edx, dword [ebp - 0xcc]
mov eax, dword [0x6ce494]
mov eax, dword [eax + 0x5a858]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 0x48]
call fcn.00409cc4
mov ecx, dword [ebp - 0xd8]
lea eax, [ebp - 0xd4]
mov edx, 0x5422dc
call fcn.00405710
mov edx, dword [ebp - 0xd4]
mov eax, dword [0x6ce494]
mov eax, dword [eax + 0x5a858]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0xe0]
movzx eax, word [ebp - 0x42]
call fcn.00409cc4
mov ecx, dword [ebp - 0xe0]
lea eax, [ebp - 0xdc]
mov edx, 0x5422ec
call fcn.00405710
mov edx, dword [ebp - 0xdc]
mov eax, dword [0x6ce494]
mov eax, dword [eax + 0x5a858]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0xe8]
movzx eax, word [ebp - 0x40]
call fcn.00409cc4
mov ecx, dword [ebp - 0xe8]
lea eax, [ebp - 0xe4]
mov edx, 0x5422fc
call fcn.00405710
mov edx, dword [ebp - 0xe4]
mov eax, dword [0x6ce494]
mov eax, dword [eax + 0x5a858]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0xf0]
movzx eax, word [ebp - 0x3e]
call fcn.00409cc4
mov ecx, dword [ebp - 0xf0]
lea eax, [ebp - 0xec]
mov edx, 0x54230c
call fcn.00405710
mov edx, dword [ebp - 0xec]
mov eax, dword [0x6ce494]
mov eax, dword [eax + 0x5a858]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 4]
mov eax, 0x542320
call fcn.004059d4
test eax, eax
jle case.default.0x53dfec
mov edx, dword [ebp - 4]
mov eax, dword [0x6ce484]
call fcn.0051c790
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x54147f
lea eax, [ebp - 0xf0]
mov edx, 0x13
call fcn.00405400
lea eax, [ebp - 0x9c]
mov edx, 0xf
call fcn.00405400
lea eax, [ebp - 0x5c]
call fcn.004053dc
lea eax, [ebp - 0x1c]
mov edx, 7
call fcn.00405400
ret