Function at 0x55d39c
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Copy file
Create a process with modified i/o handles and window
Create process on windows
Enumerate gui resources
Extract resource via kernel32 functions
Log keystrokes
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x2e4
push 0
push 0
dec ecx
jne 0x55d3a5
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x10c], eax
xor eax, eax
push ebp
push 0x5715a8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104660], 0
je 0x55d815
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x105bda], 0
jne 0x55d815
mov eax, dword [ebp - 0x10c]
mov esi, dword [eax + 0x105bc4]
lea eax, [ebp - 0x274]
call fcn.00404fd8
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00405274
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x44e4]
call fcn.00405070
mov dword [ebp - 0x278], 1
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ecx]
lea eax, [ebp - 0x140]
mov edx, 0x5715c4
call fcn.004052e4
lea eax, [ebp - 0x26c]
push eax
mov ecx, dword [ebp - 0x278]
mov edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov ebx, 0xfffffff5
jmp 0x55d7b9
lea eax, [ebp - 0x270]
push eax
mov ecx, dword [ebp - 0x278]
mov edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x270]
call fcn.00405298
test eax, eax
jle 0x55d706
mov eax, dword [ebp - 0x270]
cmp byte [eax], 0x25
jne 0x55d706
mov eax, dword [ebp - 0x270]
call fcn.00405298
mov edx, dword [ebp - 0x10c]
add eax, dword [edx + 0x105bc0]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x140]
call fcn.00405298
mov dword [ebp - 0x13c], eax
mov byte [ebp - 0x265], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x164], eax
jmp 0x55d579
mov eax, dword [ebp - 0x140]
mov edx, dword [ebp - 0x1e0]
cmp byte [eax + edx - 1], 0x5b
jne 0x55d573
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x13c]
jg 0x55d5d1
mov eax, dword [ebp - 0x140]
mov edx, dword [ebp - 0x1e0]
cmp byte [eax + edx - 1], 0x5d
jne 0x55d55d
mov byte [ebp - 0x265], 1
jmp 0x55d5d1
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x13c]
jle 0x55d541
jmp 0x55d5d1
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x13c]
jg 0x55d5d1
mov eax, dword [0x59046c]
push esi
mov esi, eax
lea edi, [ebp - 0xe70]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
pop esi
lea eax, [ebp - 0xe70]
mov edx, 0x5715d0
mov cl, 0x20
call fcn.00403c78
mov eax, dword [ebp - 0x140]
mov edx, dword [ebp - 0x1e0]
mov al, byte [eax + edx - 1]
and eax, 0xff
bt dword [ebp - 0xe70], eax
jae 0x55d510
cmp byte [ebp - 0x265], 0
je 0x55d706
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bc0]
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0xe74]
push eax
push 0x5715f8
push dword [ebp - 0x270]
push 0x571608
lea eax, [ebp - 0xe7c]
push eax
mov ecx, dword [ebp - 0x1e0]
sub ecx, dword [ebp - 0x164]
inc ecx
mov edx, dword [ebp - 0x164]
mov eax, dword [ebp - 0x140]
call fcn.004054f8
push dword [ebp - 0xe7c]
lea eax, [ebp - 0xe78]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0xe78]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0xe74]
lea eax, [ebp - 0x270]
call fcn.00405070
mov eax, dword [ebp - 0x26c]
call fcn.00405298
add eax, dword [ebp - 0x13c]
add eax, ebx
push eax
push 0x571614
push dword [ebp - 0x270]
push 0x571620
lea eax, [ebp - 0xf80]
mov edx, 3
call fcn.00405358
mov edx, dword [ebp - 0xf80]
lea eax, [ebp - 0xf7c]
mov ecx, 0xff
call fcn.00405274
lea eax, [ebp - 0xf7c]
mov edx, dword [ebp - 0x10c]
add edx, 0x9c
mov ecx, 0xff
call fcn.00402d60
mov eax, dword [ebp - 0x270]
call fcn.00405298
add ebx, eax
add ebx, 2
inc dword [ebp - 0x278]
lea eax, [ebp - 0x26c]
push eax
mov ecx, dword [ebp - 0x278]
mov edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
jmp 0x55d7b9
mov eax, dword [ebp - 0x26c]
mov edx, dword [ebp - 0x270]
call fcn.004053e4
je 0x55d795
mov eax, dword [ebp - 0x26c]
call fcn.00405298
mov edx, dword [ebp - 0x10c]
add eax, dword [edx + 0x105bc0]
add eax, ebx
push eax
push 0x571614
push dword [ebp - 0x270]
push 0x571620
lea eax, [ebp - 0xf84]
mov edx, 3
call fcn.00405358
mov edx, dword [ebp - 0xf84]
lea eax, [ebp - 0xf7c]
mov ecx, 0xff
call fcn.00405274
lea eax, [ebp - 0xf7c]
mov edx, dword [ebp - 0x10c]
add edx, 0x9c
mov ecx, 0xff
call fcn.00402d60
mov eax, dword [ebp - 0x270]
call fcn.00405298
add ebx, eax
add ebx, 2
inc dword [ebp - 0x278]
lea eax, [ebp - 0x26c]
push eax
mov ecx, dword [ebp - 0x278]
mov edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x26c]
call fcn.00405298
test eax, eax
jg 0x55d48d
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.00404fd8
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
mov edx, dword [ebp - 0x138]
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x105bc4], esi
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bda], 0
mov eax, dword [ebp - 0x160]
mov eax, dword [eax]
cmp eax, 0x87
ja case.0x55d835.47
jmp dword [eax*4 + 0x55d83c]
mov eax, dword [ebp - 0x10c]
mov edx, 8
mov dword [eax + 0x105bdc], edx
lea eax, [ebp - 0xf88]
push eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105bdc]
mov eax, ecx
neg ecx
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xf88]
lea edx, [ebp - 0x138]
call fcn.0040b05c
jmp 0x55daf1
mov eax, dword [ebp - 0x10c]
dec dword [eax + 0x105bdc]
lea eax, [ebp - 0xf8c]
push eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105bdc]
mov eax, ecx
neg ecx
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xf8c]
lea edx, [ebp - 0x138]
call fcn.0040b05c
cmp dword [ebp - 0x138], 0
jne 0x55db09
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 0
jge 0x55daaa
mov dword [ebp - 0x1d8], 0xffffffff
mov dword [ebp - 0x1d4], 0xffffffff
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x1c4], 1
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 0
jle case.0x55d835.43
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 7
jle 0x55dbc1
xor eax, eax
push ebp
push 0x55dbaf
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xf90]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 7
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xf90]
call fcn.0040b6e8
mov dword [ebp - 0x1d8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55dbc1
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 6
jle 0x55dc2a
xor eax, eax
push ebp
push 0x55dc18
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xf94]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 6
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xf94]
call fcn.0040b6e8
mov dword [ebp - 0x1d4], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55dc2a
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 5
jle 0x55dc95
xor eax, eax
push ebp
push 0x55dc81
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xf98]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 5
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xf98]
call fcn.0040b6e8
mov dword [ebp - 0x1d0], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55dc95
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 4
jle 0x55dd00
xor eax, eax
push ebp
push 0x55dcec
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xf9c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 4
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xf9c]
call fcn.0040b6e8
mov dword [ebp - 0x1cc], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55dd00
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 3
jle 0x55dd6b
xor eax, eax
push ebp
push 0x55dd57
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xfa0]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xfa0]
call fcn.0040b6e8
mov dword [ebp - 0x1c8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55dd6b
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 2
jle 0x55ddd6
xor eax, eax
push ebp
push 0x55ddc2
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xfa4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xfa4]
call fcn.0040b6e8
mov dword [ebp - 0x1c4], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55ddd6
cmp dword [ebp - 0x1d8], 0
jg 0x55dde9
mov dword [ebp - 0x1d8], 0xffffffff
cmp dword [ebp - 0x1d4], 0
jg 0x55ddfc
mov dword [ebp - 0x1d4], 0xffffffff
cmp dword [ebp - 0x1d0], 1
jge 0x55de0f
mov dword [ebp - 0x1d0], 1
cmp dword [ebp - 0x1cc], 1
jge 0x55de22
mov dword [ebp - 0x1cc], 1
cmp dword [ebp - 0x1c8], 1
jge 0x55de35
mov dword [ebp - 0x1c8], 1
cmp dword [ebp - 0x1c4], 1
jge 0x55de48
mov dword [ebp - 0x1c4], 1
mov edx, dword [ebp - 0x138]
mov eax, 0x57162c
call fcn.004055dc
test eax, eax
jne 0x55deab
mov edx, dword [ebp - 0x138]
mov eax, 0x571638
call fcn.004055dc
test eax, eax
jne 0x55deab
mov edx, dword [ebp - 0x138]
mov eax, 0x571644
call fcn.004055dc
test eax, eax
jne 0x55deab
mov eax, dword [0x59049c]
push dword [eax]
push 0x571650
push 0x57162c
push dword [ebp - 0x138]
lea eax, [ebp - 0x138]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0x480]
call fcn.004033e0
lea eax, [ebp - 0x140]
mov edx, dword [ebp - 0x138]
call fcn.00405070
lea eax, [ebp - 0xfa8]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xfa8]
lea edx, [ebp - 0x138]
call fcn.0040b05c
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x25
jne 0x55df1d
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
xor eax, eax
mov dword [ebp - 0x148], eax
jmp 0x55df77
lea eax, [ebp - 0xfac]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x48]
lea edx, [ecx + edx*4]
call fcn.0040523c
mov eax, dword [ebp - 0xfac]
push eax
lea edx, [ebp - 0xfb0]
mov eax, dword [ebp - 0x138]
call fcn.0040b05c
mov edx, dword [ebp - 0xfb0]
pop eax
call fcn.004053e4
je 0x55df8d
inc dword [ebp - 0x148]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x48]
call fcn.004063e0
cmp eax, dword [ebp - 0x148]
jg 0x55df27
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x48]
call fcn.004063e0
cmp eax, dword [ebp - 0x148]
jg 0x55e009
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x48]
call fcn.004063e0
inc eax
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x48
mov ecx, 1
mov edx, dword [0x52f2cc]
call fcn.0040659c
add esp, 4
lea edx, [ebp - 0xfb4]
mov eax, dword [ebp - 0x138]
call fcn.0040af24
mov edx, dword [ebp - 0xfb4]
mov eax, dword [ebp - 0x148]
mov ecx, eax
shl eax, 6
add eax, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x48]
lea eax, [ecx + eax*4]
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov edi, eax
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x9c], 0
xor eax, eax
push ebp
push 0x55e68e
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0xfbc]
mov eax, dword [ebp - 0x140]
call fcn.0040c0c4
mov eax, dword [ebp - 0xfbc]
lea edx, [ebp - 0xfb8]
call fcn.0040af24
mov eax, dword [ebp - 0xfb8]
call fcn.00405498
push eax
push 0xffffffffffffffff
push 0
call fcn.00407794
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x55e0bd
call sub.KERNEL32.DLL_GetLastError
cmp eax, 0xb7
jne 0x55e0bd
jmp 0x55e0a8
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x71], 0
jne 0x55e0bd
push 0x64
mov eax, dword [ebp - 0x280]
push eax
call sub.KERNEL32.DLL_WaitForSingleObject
cmp eax, 0x102
je 0x55e09c
mov eax, dword [0x590610]
mov byte [eax], 0x40
xor eax, eax
push ebp
push 0x55e56c
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x480]
call fcn.00403164
call fcn.00402dc8
test eax, eax
jne 0x55e524
jmp 0x55e10f
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x480]
call fcn.00403840
lea eax, [ebp - 0x480]
call fcn.004038ac
dec dword [ebp - 0x1cc]
lea eax, [ebp - 0x480]
call fcn.0040364c
test al, al
jne 0x55e127
cmp dword [ebp - 0x1cc], 1
jg 0x55e0ed
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 4], eax
jmp 0x55e4a7
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x71], 0
jne 0x55e4c3
inc dword [ebp - 4]
dec dword [ebp - 0x1d4]
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x480]
call fcn.00403840
lea eax, [ebp - 0x480]
call fcn.004038ac
mov eax, dword [ebp - 0x138]
call fcn.00405298
test eax, eax
jle 0x55e1a2
mov eax, dword [ebp - 0x138]
call fcn.00405298
mov edx, dword [ebp - 0x138]
cmp byte [edx + eax - 1], 9
je 0x55e1a2
lea eax, [ebp - 0x138]
mov edx, 0x571660
call fcn.004052a0
mov edx, dword [ebp - 0x138]
mov eax, 0x571660
call fcn.004055dc
mov dword [ebp - 0x134], eax
mov esi, dword [ebp - 0x1d0]
jmp 0x55e1ed
lea eax, [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov edx, 1
call fcn.00405538
mov edx, dword [ebp - 0x138]
mov eax, 0x571660
call fcn.004055dc
mov dword [ebp - 0x134], eax
dec esi
cmp esi, 1
jle 0x55e20a
cmp dword [ebp - 0x134], 0
jle 0x55e20a
mov eax, dword [ebp - 0x138]
call fcn.00405298
test eax, eax
jg 0x55e1c0
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 8], eax
mov esi, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x138]
call fcn.00405298
mov ebx, eax
cmp ebx, 1
jl 0x55e246
mov eax, dword [ebp - 0x138]
cmp byte [eax + ebx - 1], 9
jne 0x55e241
inc dword [ebp - 8]
dec esi
test esi, esi
je 0x55e246
dec ebx
test ebx, ebx
jne 0x55e22c
mov eax, dword [ebp - 4]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x158], eax
xor eax, eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x134]
jge 0x55e2a4
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x154], eax
jmp 0x55e2bc
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x134]
jle 0x55e2bc
mov dword [ebp - 0x15c], 1
cmp dword [ebp - 0x134], 0
jle 0x55e2ef
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x134]
jge 0x55e30b
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x158], eax
jmp 0x55e323
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x134]
jle 0x55e323
mov dword [ebp - 0x15c], 1
cmp dword [ebp - 0x15c], 0
jle 0x55e36f
mov eax, dword [ebp - 0x158]
push eax
mov eax, dword [ebp - 0x154]
add eax, 0x3e8
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 8], eax
mov esi, dword [ebp - 0x1d8]
mov edx, dword [ebp - 0x138]
mov eax, 0x571660
call fcn.004055dc
mov dword [ebp - 0x134], eax
mov byte [ebp - 0x185], 0
jmp 0x55e48d
inc dword [ebp - 8]
dec esi
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
push eax
mov ecx, dword [ebp - 0x134]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x138]
call fcn.004054f8
lea eax, [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 4]
mov eax, dword [eax + edx*4 - 4]
mov edx, dword [ebp - 8]
lea eax, [eax + edx*4 - 4]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x105be0]
call fcn.0040502c
mov edx, dword [ebp - 0x138]
mov eax, 0x571660
call fcn.004055dc
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jne 0x55e486
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 4]
mov eax, dword [eax + edx*4 - 4]
call fcn.004063e0
cdq
push edx
push eax
mov eax, dword [ebp - 8]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x55e479
cmp eax, dword [esp]
pop edx
pop eax
jae 0x55e486
jmp 0x55e47d
pop edx
pop eax
jge 0x55e486
mov byte [ebp - 0x185], 1
jmp 0x55e48d
mov byte [ebp - 0x185], 0
cmp dword [ebp - 0x134], 0
setg al
or al, byte [ebp - 0x185]
je 0x55e4a7
test esi, esi
jne 0x55e3a1
lea eax, [ebp - 0x480]
call fcn.0040364c
test al, al
jne 0x55e4c3
cmp dword [ebp - 0x1d4], 0
jne 0x55e136
mov eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
mov eax, edi
cdq
cmp edx, dword [esp + 4]
jne 0x55e4dc
cmp eax, dword [esp]
pop edx
pop eax
jbe 0x55e4e3
jmp 0x55e4e0
pop edx
pop eax
jle 0x55e4e3
mov dword [ebp - 4], edi
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 1
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 4
lea eax, [ebp - 0x480]
call fcn.004034a8
jmp 0x55e55f
push 0x57166c
push dword [ebp - 0x140]
push 0x571688
lea eax, [ebp - 0xfc0]
mov edx, 3
call fcn.00405358
mov edx, dword [ebp - 0xfc0]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55e660
mov eax, dword [0x590610]
mov byte [eax], 2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x55e695
mov eax, dword [ebp - 0x280]
push eax
call sub.KERNEL32.DLL_ReleaseMutex
mov eax, dword [ebp - 0x280]
push eax
call sub.KERNEL32.DLL_CloseHandle
ret
mov byte [ebp - 0x266], 0
lea eax, [ebp - 0x138]
call fcn.00404fd8
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x105bdc], 8
jmp 0x55e785
mov eax, dword [ebp - 0x10c]
dec dword [eax + 0x105bdc]
lea eax, [ebp - 0xfd8]
push eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105bdc]
mov eax, ecx
neg ecx
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xfd8]
lea edx, [ebp - 0x138]
call fcn.0040b05c
mov eax, dword [ebp - 0x138]
mov edx, 0x5716b0
call fcn.004053e4
jne 0x55e785
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105bc0]
mov eax, dword [ebp - 0x120]
mov ecx, 6
call fcn.00405538
lea eax, [ebp - 0x138]
call fcn.00404fd8
mov byte [ebp - 0x266], 1
cmp dword [ebp - 0x138], 0
jne 0x55e7a1
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 0
jge 0x55e6fe
mov dword [ebp - 0x1d8], 0xffffffff
mov dword [ebp - 0x1d4], 0xffffffff
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x1c4], 1
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 0
jle case.0x55d835.43
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 5
jle 0x55e845
xor eax, eax
push ebp
push 0x55e833
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xfdc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 5
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xfdc]
call fcn.0040b6e8
mov dword [ebp - 0x1d8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55e845
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 4
jle 0x55e8ae
xor eax, eax
push ebp
push 0x55e89c
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xfe0]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 4
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xfe0]
call fcn.0040b6e8
mov dword [ebp - 0x1d4], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55e8ae
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 3
jle 0x55e919
xor eax, eax
push ebp
push 0x55e905
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xfe4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xfe4]
call fcn.0040b6e8
mov dword [ebp - 0x1c8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55e919
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 2
jle 0x55e984
xor eax, eax
push ebp
push 0x55e970
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xfe8]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xfe8]
call fcn.0040b6e8
mov dword [ebp - 0x1c4], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55e984
cmp dword [ebp - 0x1d8], 0
jg 0x55e997
mov dword [ebp - 0x1d8], 0xffffffff
cmp dword [ebp - 0x1d4], 0
jg 0x55e9aa
mov dword [ebp - 0x1d4], 0xffffffff
cmp dword [ebp - 0x1c8], 1
jge 0x55e9bd
mov dword [ebp - 0x1c8], 1
cmp dword [ebp - 0x1c4], 1
jge 0x55e9d0
mov dword [ebp - 0x1c4], 1
mov edx, dword [ebp - 0x138]
mov eax, 0x57162c
call fcn.004055dc
test eax, eax
jne 0x55ea33
mov edx, dword [ebp - 0x138]
mov eax, 0x571638
call fcn.004055dc
test eax, eax
jne 0x55ea33
mov edx, dword [ebp - 0x138]
mov eax, 0x571644
call fcn.004055dc
test eax, eax
jne 0x55ea33
mov eax, dword [0x59049c]
push dword [eax]
push 0x571650
push 0x57162c
push dword [ebp - 0x138]
lea eax, [ebp - 0x138]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0x480]
call fcn.004033e0
xor eax, eax
push ebp
push 0x55ed7f
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0xff0]
mov eax, dword [ebp - 0x138]
call fcn.0040c0c4
mov eax, dword [ebp - 0xff0]
lea edx, [ebp - 0xfec]
call fcn.0040af24
mov eax, dword [ebp - 0xfec]
call fcn.00405498
push eax
push 0xffffffffffffffff
push 0
call fcn.00407794
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x55eac7
call sub.KERNEL32.DLL_GetLastError
cmp eax, 0xb7
jne 0x55eac7
jmp 0x55eab2
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x71], 0
jne 0x55eac7
push 0x64
mov eax, dword [ebp - 0x280]
push eax
call sub.KERNEL32.DLL_WaitForSingleObject
cmp eax, 0x102
je 0x55eaa6
lea eax, [ebp - 0x480]
call fcn.00403170
lea eax, [ebp - 0xff4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0xff4]
lea edx, [ebp - 0x138]
call fcn.0040b05c
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x25
jne 0x55eb22
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
xor eax, eax
mov dword [ebp - 0x148], eax
xor eax, eax
push ebp
push 0x55ed09
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x55eb8a
lea eax, [ebp - 0xff8]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x48]
lea edx, [ecx + edx*4]
call fcn.0040523c
mov eax, dword [ebp - 0xff8]
push eax
lea edx, [ebp - 0xffc]
mov eax, dword [ebp - 0x138]
call fcn.0040b05c
mov edx, dword [ebp - 0xffc]
pop eax
call fcn.004053e4
je 0x55eba0
inc dword [ebp - 0x148]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x48]
call fcn.004063e0
cmp eax, dword [ebp - 0x148]
jg 0x55eb3a
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x48]
call fcn.004063e0
cmp eax, dword [ebp - 0x148]
jle 0x55ecff
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
test eax, eax
jle 0x55ecff
mov eax, dword [ebp - 0x1c4]
dec eax
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov ebx, eax
dec ebx
pop eax
sub ebx, eax
jb 0x55ecff
inc ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.00404fd8
mov esi, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1c8]
dec eax
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 4]
mov eax, dword [eax + edx*4]
call fcn.004063e0
mov edi, eax
dec edi
pop eax
sub edi, eax
jb 0x55ecca
inc edi
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x10c]
push dword [eax + 0x105be0]
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 4]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 8]
push dword [eax + edx*4]
push 0x571660
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, 3
call fcn.00405358
dec esi
test esi, esi
je 0x55ecca
inc dword [ebp - 8]
dec edi
jne 0x55ec70
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
lea eax, [ebp - 0x480]
call fcn.004056b4
call fcn.00403b88
dec dword [ebp - 0x1d4]
cmp dword [ebp - 0x1d4], 0
je 0x55ecff
inc dword [ebp - 4]
dec ebx
jne 0x55ec1e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55ed4e
lea eax, [ebp - 0x480]
call fcn.004034a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x55d835.43
mov eax, dword [ebp - 0x280]
push eax
call sub.KERNEL32.DLL_ReleaseMutex
mov eax, dword [ebp - 0x280]
push eax
call sub.KERNEL32.DLL_CloseHandle
ret
lea eax, [ebp - 0x1000]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1000]
lea edx, [ebp - 0x138]
call fcn.0040b05c
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov dword [ebp - 4], 1
mov dword [ebp - 8], 1
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
xor eax, eax
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x1004]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1004]
lea edx, [ebp - 0x1e0]
call fcn.0040b73c
test al, al
je 0x55eeff
cmp dword [ebp - 0x1e0], 0
jle 0x55ee79
xor eax, eax
mov dword [ebp - 0x13c], eax
dec dword [ebp - 0x1e0]
jmp 0x55ee95
mov eax, dword [ebp - 0x1e0]
cdq
xor eax, edx
sub eax, edx
dec eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1e0], 0xffffffff
lea eax, [ebp - 0x100c]
push eax
lea eax, [ebp - 0x1010]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1010]
mov ecx, 1
mov edx, 1
call fcn.004054f8
mov eax, dword [ebp - 0x100c]
lea edx, [ebp - 0x1008]
call fcn.0040b05c
mov eax, dword [ebp - 0x1008]
mov edx, 0x5716c8
call fcn.004053e4
jne 0x55ef6f
mov dword [ebp - 0x164], 1
jmp 0x55ef6f
xor eax, eax
mov dword [ebp - 0x1e0], eax
lea eax, [ebp - 0x1018]
push eax
lea eax, [ebp - 0x101c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x101c]
mov ecx, 1
mov edx, 1
call fcn.004054f8
mov eax, dword [ebp - 0x1018]
lea edx, [ebp - 0x1014]
call fcn.0040b05c
mov eax, dword [ebp - 0x1014]
mov edx, 0x5716c8
call fcn.004053e4
jne 0x55ef6f
mov dword [ebp - 0x164], 1
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 0
jle 0x55ef9b
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be4]
mov eax, dword [ebp - 0x10c]
call fcn.0055409c
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x1e0], 0
jl 0x55eff8
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e8
push eax
mov eax, dword [ebp - 0x1e0]
push eax
mov eax, dword [ebp - 0x13c]
push eax
cmp dword [ebp - 0x164], 0
sete al
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x10c]
call fcn.00555354
jmp case.0x55d835.43
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e8
push eax
mov eax, dword [ebp - 0x1e0]
push eax
mov eax, dword [ebp - 0x13c]
push eax
cmp dword [ebp - 0x164], 0
sete al
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x10c]
call fcn.00555794
jmp case.0x55d835.43
lea eax, [ebp - 0x1020]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1020]
lea edx, [ebp - 0x138]
call fcn.0040b05c
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov dword [ebp - 4], 1
mov dword [ebp - 8], 1
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1d4], 1
lea eax, [ebp - 0x1024]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1024]
lea edx, [ebp - 0x1c4]
call fcn.0040b73c
test al, al
je 0x55f164
lea eax, [ebp - 0x1028]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1028]
lea edx, [ebp - 0x1d4]
call fcn.0040b73c
test al, al
jne 0x55f164
mov dword [ebp - 0x1d4], 1
mov eax, dword [ebp - 0x1d4]
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 0
jle 0x55f1a1
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be4]
mov eax, dword [ebp - 0x10c]
call fcn.0055409c
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x1c4], 0
jge 0x55f322
mov eax, dword [ebp - 0x1c4]
cdq
xor eax, edx
sub eax, edx
dec eax
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov edx, dword [ebp - 0x1c4]
add edx, dword [ebp - 0x1d4]
cmp eax, edx
jge 0x55f220
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
sub eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov ebx, eax
dec ebx
sub ebx, dword [ebp - 0x1d4]
pop eax
sub ebx, eax
jl 0x55f2c4
inc ebx
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 0x13c]
lea eax, [eax + edx*4]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x48]
mov edx, dword [ecx + edx*4 + 0x100]
mov ecx, dword [ebp - 0x13c]
add ecx, dword [ebp - 0x1d4]
mov edx, dword [edx + ecx*4]
mov ecx, dword [0x52ef38]
call fcn.004065e4
inc dword [ebp - 0x13c]
dec ebx
jne 0x55f25e
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
sub eax, dword [ebp - 0x1d4]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 1
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 4
jmp case.0x55d835.43
dec dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
cmp eax, dword [ebp - 0x1d4]
je 0x55f52a
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
mov edx, dword [ebp - 0x1c4]
add edx, dword [ebp - 0x1d4]
cmp eax, edx
jge 0x55f3bc
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
sub eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov ebx, eax
dec ebx
test ebx, ebx
jl case.0x55d835.43
inc ebx
mov dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 0x13c]
mov eax, dword [eax + edx*4]
call fcn.004063e0
mov edi, eax
dec edi
sub edi, dword [ebp - 0x1d4]
pop eax
sub edi, eax
jl 0x55f4ad
inc edi
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 0x13c]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x48]
mov edx, dword [ecx + edx*4 + 0x100]
mov ecx, dword [ebp - 0x13c]
mov edx, dword [edx + ecx*4]
mov ecx, dword [ebp - 0x1e0]
add ecx, dword [ebp - 0x1d4]
mov edx, dword [edx + ecx*4]
call fcn.0040502c
inc dword [ebp - 0x1e0]
dec edi
jne 0x55f43b
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 0x13c]
mov eax, dword [eax + edx*4]
call fcn.004063e0
sub eax, dword [ebp - 0x1d4]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 0x13c]
lea eax, [eax + edx*4]
mov ecx, 1
mov edx, dword [0x52ef38]
call fcn.0040659c
add esp, 4
inc dword [ebp - 0x13c]
dec ebx
jne 0x55f3f4
jmp case.0x55d835.43
push 0
push 0
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
inc eax
mov dword [ebp - 0x14c], eax
xor ebx, ebx
jmp 0x55f652
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x80]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [edx + ecx*4]
call fcn.00405070
lea eax, [ebp - 0x102c]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x102c]
lea eax, [ebp - 0x144]
call fcn.00405070
mov eax, dword [ebp - 0x144]
mov edx, 0x5716d4
call fcn.004053e4
je 0x55f610
mov eax, dword [ebp - 0x144]
mov edx, 0x5716e4
call fcn.004053e4
je 0x55f610
mov eax, dword [ebp - 0x144]
mov edx, 0x5716f8
call fcn.004053e4
je 0x55f610
mov eax, dword [ebp - 0x144]
mov edx, 0x571708
call fcn.004053e4
jne 0x55f611
inc ebx
mov eax, dword [ebp - 0x144]
mov edx, 0x571714
call fcn.004053e4
je 0x55f647
mov eax, dword [ebp - 0x144]
mov edx, 0x571728
call fcn.004053e4
je 0x55f647
mov eax, dword [ebp - 0x144]
mov edx, 0x57173c
call fcn.004053e4
jne 0x55f648
dec ebx
test ebx, ebx
jl 0x55f66f
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x55f57d
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x55f73c
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x55f6dc
lea edx, [ebp - 0x1030]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1c1
call fcn.0040ba78
lea eax, [ebp - 0x1030]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x1030]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x55f6f5
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571744
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x14c]
dec eax
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bd4], eax
jmp case.0x55d835.43
lea eax, [ebp - 0x1034]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1034]
lea edx, [ebp - 0x278]
call fcn.0040b73c
test al, al
jne 0x55f792
mov dword [ebp - 0x278], 1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
inc eax
mov dword [ebp - 0x14c], eax
mov ebx, dword [ebp - 0x278]
dec ebx
xor esi, esi
xor eax, eax
mov dword [ebp - 0x1bc], eax
xor eax, eax
mov dword [ebp - 0x1c0], eax
jmp 0x55f8f5
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x80]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [edx + ecx*4]
call fcn.00405070
lea eax, [ebp - 0x1038]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x1038]
lea eax, [ebp - 0x144]
call fcn.00405070
mov eax, dword [ebp - 0x144]
mov edx, 0x57177c
call fcn.004053e4
jne 0x55f835
test esi, esi
jne 0x55f835
cmp dword [ebp - 0x1bc], 0
jne 0x55f835
test ebx, ebx
je 0x55f912
mov eax, dword [ebp - 0x144]
mov edx, 0x5716d4
call fcn.004053e4
je 0x55f86b
mov eax, dword [ebp - 0x144]
mov edx, 0x5716e4
call fcn.004053e4
je 0x55f86b
mov eax, dword [ebp - 0x144]
mov edx, 0x571790
call fcn.004053e4
jne 0x55f86c
inc ebx
mov eax, dword [ebp - 0x144]
mov edx, 0x5716f8
call fcn.004053e4
jne 0x55f880
inc ebx
inc esi
mov eax, dword [ebp - 0x144]
mov edx, 0x571708
call fcn.004053e4
jne 0x55f899
inc ebx
inc dword [ebp - 0x1bc]
mov eax, dword [ebp - 0x144]
mov edx, 0x571714
call fcn.004053e4
je 0x55f8bd
mov eax, dword [ebp - 0x144]
mov edx, 0x57177c
call fcn.004053e4
jne 0x55f8be
dec ebx
mov eax, dword [ebp - 0x144]
mov edx, 0x571728
call fcn.004053e4
jne 0x55f8d2
dec ebx
dec esi
mov eax, dword [ebp - 0x144]
mov edx, 0x57173c
call fcn.004053e4
jne 0x55f8eb
dec ebx
dec dword [ebp - 0x1bc]
test ebx, ebx
jl 0x55f912
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x55f7c3
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x55f9df
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x55f97f
lea edx, [ebp - 0x103c]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1c1
call fcn.0040ba78
lea eax, [ebp - 0x103c]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x103c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x55f998
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571744
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
xor eax, eax
push ebp
push 0x55fa65
push dword fs:[eax]
mov dword fs:[eax], esp
test esi, esi
je 0x55fa1e
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
add esi, eax
push esi
mov eax, dword [ebp - 0x10c]
add eax, 0x54
mov ecx, 1
mov edx, dword [0x52f31c]
call fcn.0040659c
add esp, 4
cmp dword [ebp - 0x1bc], 0
je 0x55fa58
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
add eax, dword [ebp - 0x1bc]
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x50
mov ecx, 1
mov edx, dword [0x52f2f4]
call fcn.0040659c
add esp, 4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55faec
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x71], 0
je 0x55fb3f
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je 0x55fb30
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 0
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x14c]
mov dword [eax + 0x105bd4], edx
jmp case.0x55d835.43
xor eax, eax
mov dword [ebp - 0x1e0], eax
xor eax, eax
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x124]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053ddf0
cmp dword [ebp - 0x13c], 0
jle case.0x55d835.43
mov eax, dword [ebp - 0x124]
call fcn.00405298
test eax, eax
jle case.0x55d835.43
lea eax, [ebp - 0x17c]
call fcn.00404fd8
lea eax, [ebp - 0x140]
call fcn.00404fd8
mov eax, dword [ebp - 0x160]
mov eax, dword [eax]
add eax, 0xffffff9a
sub eax, 2
jb 0x55fbf7
je 0x55fcf4
dec eax
sub eax, 2
jb 0x55fd80
sub eax, 2
jb 0x55fcf4
jmp 0x55fe2f
xor eax, eax
mov dword [ebp - 0x1e4], eax
xor eax, eax
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x124]
cmp byte [eax], 0x22
jne 0x55fc3f
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x17c]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x10c]
call fcn.0053e018
jmp 0x55fc72
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x1044]
mov ecx, dword [ebp - 0x124]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1044]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x124]
call fcn.00405298
mov edx, dword [ebp - 0x124]
cmp byte [edx + eax - 1], 0x22
jne 0x55fcbc
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x140]
push eax
mov ecx, dword [ebp - 0x1e8]
inc ecx
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x10c]
call fcn.0053e018
jmp 0x55fe2f
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x1048]
mov ecx, dword [ebp - 0x124]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1048]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
jmp 0x55fe2f
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x17c]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x10c]
call fcn.0053e018
cmp dword [ebp - 0x17c], 0
jne 0x55fd39
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x124]
call fcn.00405070
lea eax, [ebp - 0x104c]
push eax
lea eax, [ebp - 0x1050]
mov ecx, dword [ebp - 0x17c]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1050]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x104c]
lea eax, [ebp - 0x17c]
call fcn.00405070
jmp 0x55fe2f
mov eax, dword [ebp - 0x124]
cmp byte [eax], 0x22
jne 0x55fdb8
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x17c]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x10c]
call fcn.0053e018
jmp 0x55fdeb
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x1054]
mov ecx, dword [ebp - 0x124]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1054]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x1058]
push eax
lea eax, [ebp - 0x105c]
mov ecx, dword [ebp - 0x124]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x105c]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1058]
lea edx, [ebp - 0x140]
call fcn.0040b05c
mov eax, dword [ebp - 0x160]
mov eax, dword [eax]
add eax, 0xffffff9a
cmp eax, 6
ja case.default.0x55fe43
jmp dword [eax*4 + 0x55fe4a]
mov edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x17c]
call fcn.0040bf04
jmp case.default.0x55fe43
push 0xffffffffffffffff
mov eax, dword [ebp - 0x140]
call fcn.00405498
push eax
mov eax, dword [ebp - 0x17c]
call fcn.00405498
push eax
call sub.KERNEL32.DLL_CopyFileA
jmp case.default.0x55fe43
mov eax, dword [ebp - 0x17c]
call fcn.0040bdbc
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jl case.default.0x55fe43
mov edx, dword [ebp - 0x140]
mov eax, 0x5717c4
call fcn.004055dc
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jle 0x55ff07
mov eax, dword [ebp - 0x140]
mov edx, dword [ebp - 0x1ec]
mov al, byte [eax + edx - 2]
sub al, 0x2b
je 0x55fef7
sub al, 2
je 0x55ff00
jmp 0x55ff07
or dword [ebp - 0x1e4], 1
jmp 0x55ff07
and dword [ebp - 0x1e4], 0xfffffffe
mov edx, dword [ebp - 0x140]
mov eax, 0x5717d0
call fcn.004055dc
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jle 0x55ff50
mov eax, dword [ebp - 0x140]
mov edx, dword [ebp - 0x1ec]
mov al, byte [eax + edx - 2]
sub al, 0x2b
je 0x55ff40
sub al, 2
je 0x55ff49
jmp 0x55ff50
or dword [ebp - 0x1e4], 0x20
jmp 0x55ff50
and dword [ebp - 0x1e4], 0xffffffdf
mov edx, dword [ebp - 0x140]
mov eax, 0x5717dc
call fcn.004055dc
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jle 0x55ff99
mov eax, dword [ebp - 0x140]
mov edx, dword [ebp - 0x1ec]
mov al, byte [eax + edx - 2]
sub al, 0x2b
je 0x55ff89
sub al, 2
je 0x55ff92
jmp 0x55ff99
or dword [ebp - 0x1e4], 4
jmp 0x55ff99
and dword [ebp - 0x1e4], 0xfffffffb
mov edx, dword [ebp - 0x140]
mov eax, 0x5717e8
call fcn.004055dc
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jle 0x55ffe2
mov eax, dword [ebp - 0x140]
mov edx, dword [ebp - 0x1ec]
mov al, byte [eax + edx - 2]
sub al, 0x2b
je 0x55ffd2
sub al, 2
je 0x55ffdb
jmp 0x55ffe2
or dword [ebp - 0x1e4], 2
jmp 0x55ffe2
and dword [ebp - 0x1e4], 0xfffffffd
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x17c]
call fcn.0040bdd0
jmp case.default.0x55fe43
xor eax, eax
push ebp
push 0x56003d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x140]
call fcn.0040ee74
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.0040c260
mov edx, eax
mov eax, dword [ebp - 0x17c]
call fcn.0040bd2c
push eax
call sub.KERNEL32.DLL_SetLastError
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.default.0x55fe43
mov eax, dword [ebp - 0x17c]
call fcn.0040beec
jmp case.default.0x55fe43
mov eax, dword [ebp - 0x17c]
call fcn.00405298
test eax, eax
jle case.default.0x55fe43
mov eax, dword [ebp - 0x17c]
call fcn.00405298
cmp eax, 2
jle 0x560092
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x5c
je 0x5600be
mov eax, dword [ebp - 0x17c]
cmp byte [eax + 1], 0x3a
je 0x5600be
lea eax, [ebp - 0x1060]
call fcn.0040c2f0
push dword [ebp - 0x1060]
push 0x57162c
push dword [ebp - 0x17c]
lea eax, [ebp - 0x17c]
mov edx, 3
call fcn.00405358
mov eax, dword [ebp - 0x17c]
call fcn.0040bc44
test al, al
je 0x5600d6
push 0
call sub.KERNEL32.DLL_SetLastError
jmp case.default.0x55fe43
push 2
call sub.KERNEL32.DLL_SetLastError
jmp case.default.0x55fe43
mov eax, dword [ebp - 0x17c]
call fcn.0040c330
call sub.KERNEL32.DLL_GetLastError
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x4405], 0
je case.0x55d835.43
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0x12b8]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je case.0x55d835.43
lea ecx, [ebp - 0x1064]
mov edx, dword [ebp - 0x160]
mov edx, dword [edx]
mov eax, dword [0x5906d0]
mov eax, dword [eax]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x1064]
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.0040502c
lea edx, [ebp - 0x1068]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104534]
call fcn.0040ef34
mov edx, dword [ebp - 0x1068]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.00404fd8
jmp case.0x55d835.43
xor eax, eax
mov dword [ebp - 0x1e0], eax
xor eax, eax
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x124]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053ddf0
cmp dword [ebp - 0x13c], 0
jle case.0x55d835.43
mov eax, dword [ebp - 0x124]
call fcn.00405298
test eax, eax
jle case.0x55d835.43
lea eax, [ebp - 0x17c]
call fcn.00404fd8
lea eax, [ebp - 0x140]
call fcn.00404fd8
xor eax, eax
mov dword [ebp - 0x1e4], eax
xor eax, eax
mov dword [ebp - 0x1e8], eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x106c]
mov ecx, dword [ebp - 0x124]
mov edx, 0x5717f4
call fcn.004052e4
mov edx, dword [ebp - 0x106c]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x1070]
push eax
lea eax, [ebp - 0x1074]
mov ecx, dword [ebp - 0x124]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1074]
xor ecx, ecx
mov eax, dword [ebp - 0x10c]
call fcn.0053dbac
mov eax, dword [ebp - 0x1070]
lea edx, [ebp - 0x140]
call fcn.0040b05c
lea eax, [ebp - 0x1078]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 0x140]
call fcn.004054f8
mov eax, dword [ebp - 0x1078]
mov edx, 0x571804
call fcn.004053e4
jne 0x56030b
lea eax, [ebp - 0x124]
push eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105bc0]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x124]
call fcn.004054f8
mov byte [ebp - 0x12d], 1
jmp 0x560312
mov byte [ebp - 0x12d], 0
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x105bf5], 0
je 0x56036a
lea eax, [ebp - 0x140]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x105c28]
call fcn.00405070
lea edx, [ebp - 0x107c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105c2c]
call fcn.0040b05c
mov edx, dword [ebp - 0x107c]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.0040502c
jmp 0x56043b
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x1080]
mov ecx, dword [ebp - 0x124]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1080]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
lea eax, [ebp - 0x1088]
push eax
lea eax, [ebp - 0x108c]
mov ecx, dword [ebp - 0x140]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x108c]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1088]
lea edx, [ebp - 0x1084]
call fcn.0040b05c
mov edx, dword [ebp - 0x1084]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.0040502c
lea eax, [ebp - 0x1090]
push eax
lea eax, [ebp - 0x1094]
mov ecx, dword [ebp - 0x140]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1094]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1090]
lea eax, [ebp - 0x140]
call fcn.00405070
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x17c]
call fcn.0040b05c
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x25
jne 0x56046c
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
xor eax, eax
mov dword [ebp - 0x148], eax
jmp 0x5604c6
lea eax, [ebp - 0x1098]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x48]
lea edx, [ecx + edx*4]
call fcn.0040523c
mov eax, dword [ebp - 0x1098]
push eax
lea edx, [ebp - 0x109c]
mov eax, dword [ebp - 0x138]
call fcn.0040b05c
mov edx, dword [ebp - 0x109c]
pop eax
call fcn.004053e4
je 0x5604dc
inc dword [ebp - 0x148]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x48]
call fcn.004063e0
cmp eax, dword [ebp - 0x148]
jg 0x560476
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x48]
call fcn.004063e0
cmp eax, dword [ebp - 0x148]
jg 0x560558
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x48]
call fcn.004063e0
inc eax
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x48
mov ecx, 1
mov edx, dword [0x52f2cc]
call fcn.0040659c
add esp, 4
lea edx, [ebp - 0x10a0]
mov eax, dword [ebp - 0x138]
call fcn.0040af24
mov edx, dword [ebp - 0x10a0]
mov eax, dword [ebp - 0x148]
mov ecx, eax
shl eax, 6
add eax, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x48]
lea eax, [ecx + eax*4]
mov ecx, 0xff
call fcn.00405274
cmp dword [ebp - 0x140], 0
jne 0x5605d2
push 4
push 1
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
lea eax, [ebp - 0x10a4]
call fcn.0040c2f0
mov edx, dword [ebp - 0x10a4]
mov eax, dword [ebp - 0x148]
mov ecx, eax
shl eax, 6
add eax, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x48]
mov eax, dword [ecx + eax*4 + 0x100]
mov eax, dword [eax]
add eax, 0xc
call fcn.0040502c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x140]
call fcn.00405298
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x140]
mov edx, dword [ebp - 0x1e0]
cmp byte [eax + edx - 1], 0x5c
jne 0x56060c
lea eax, [ebp - 0x140]
mov ecx, 1
mov edx, dword [ebp - 0x1e0]
call fcn.00405538
mov dword [ebp - 4], 1
mov dword [ebp - 8], 1
mov eax, dword [ebp - 0x10c]
add eax, 0x105be4
call fcn.00404fd8
xor eax, eax
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4458]
call fcn.004d2528
push ebp
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
mov cl, byte [ebp - 0x12d]
mov eax, dword [ebp - 0x140]
call fcn.0055c838
pop ecx
dec dword [ebp - 4]
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 1
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x4405], 0
je case.0x55d835.43
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0x12b8]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je case.0x55d835.43
lea ecx, [ebp - 0x10a8]
mov edx, dword [ebp - 0x160]
mov edx, dword [edx]
mov eax, dword [0x5906d0]
mov eax, dword [eax]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x10a8]
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.0040502c
lea edx, [ebp - 0x10b0]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104534]
call fcn.0040b57c
mov ecx, dword [ebp - 0x10b0]
lea eax, [ebp - 0x10ac]
mov edx, 0x571814
call fcn.004052e4
mov edx, dword [ebp - 0x10ac]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x104534], 0
jle 0x560810
lea eax, [ebp - 0x10b8]
mov edx, dword [ebp - 0x10c]
add edx, 0x9c
call fcn.0040523c
push dword [ebp - 0x10b8]
push 0x57182c
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
lea edx, [ebp - 0x10bc]
call fcn.0040b57c
push dword [ebp - 0x10bc]
lea eax, [ebp - 0x10b4]
mov edx, 3
call fcn.00405358
mov edx, dword [ebp - 0x10b4]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.00404fd8
jmp case.0x55d835.43
xor eax, eax
mov dword [ebp - 0x14c], eax
jmp 0x560871
imul eax, dword [ebp - 0x14c], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 + 0x108]
mov edx, dword [ebp - 0x10c]
cmp eax, dword [edx + 0x105bd4]
je 0x560887
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x560846
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jle 0x560951
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x5608f1
lea edx, [ebp - 0x10c0]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1cb
call fcn.0040ba78
lea eax, [ebp - 0x10c0]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x10c0]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x56090a
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571834
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
lea eax, [ebp - 0x10c4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x10c4]
lea edx, [ebp - 0x138]
call fcn.0040af24
push 0x571864
push dword [ebp - 0x138]
push 0x571608
lea eax, [ebp - 0x10c8]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
push dword [ebp - 0x10c8]
mov eax, dword [ebp - 0x120]
mov edx, 4
call fcn.00405358
xor eax, eax
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x23
jne 0x560d57
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x560d57
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x40]
call fcn.004063e0
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x1e0]
jge 0x560a73
lea eax, [ebp - 0x10cc]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 5
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x40]
lea edx, [ecx + edx*8]
call fcn.0040523c
mov eax, dword [ebp - 0x10cc]
mov edx, dword [ebp - 0x138]
call fcn.004053e4
je 0x560a73
inc dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x1e0]
jl 0x560a28
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x1e0]
jge 0x560b0e
lea eax, [ebp - 0x10d0]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x10d0]
mov eax, dword [ebp - 0x10c]
add eax, 0x429f
mov ecx, 0xff
call fcn.00405274
push 0
push 0
lea eax, [ebp - 0x10d4]
mov edx, dword [ebp - 0x10c]
add edx, 0x429f
call fcn.0040523c
mov eax, dword [ebp - 0x10d4]
call fcn.0040b7a0
mov ecx, dword [ebp - 0x148]
mov ebx, ecx
shl ecx, 5
add ecx, ebx
mov ebx, dword [ebp - 0x10c]
mov ebx, dword [ebx + 0x40]
mov dword [ebx + ecx*8 + 0x100], eax
mov dword [ebx + ecx*8 + 0x104], edx
jmp 0x560bfd
mov eax, dword [ebp - 0x1e0]
inc eax
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x40
mov ecx, 1
mov edx, dword [0x52f27c]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x419e], 1
lea edx, [ebp - 0x10d8]
mov eax, dword [ebp - 0x138]
call fcn.0040af24
mov edx, dword [ebp - 0x10d8]
mov eax, dword [ebp - 0x148]
mov ecx, eax
shl eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x40]
lea eax, [ecx + eax*8]
mov ecx, 0xff
call fcn.00405274
lea eax, [ebp - 0x10dc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x10dc]
mov eax, dword [ebp - 0x10c]
add eax, 0x429f
mov ecx, 0xff
call fcn.00405274
push 0
push 0
lea eax, [ebp - 0x10e0]
mov edx, dword [ebp - 0x10c]
add edx, 0x429f
call fcn.0040523c
mov eax, dword [ebp - 0x10e0]
call fcn.0040b7a0
mov ecx, dword [ebp - 0x148]
mov ebx, ecx
shl ecx, 5
add ecx, ebx
mov ebx, dword [ebp - 0x10c]
mov ebx, dword [ebx + 0x40]
mov dword [ebx + ecx*8 + 0x100], eax
mov dword [ebx + ecx*8 + 0x104], edx
lea eax, [ebp - 0x10e8]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 5
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x40]
lea edx, [ecx + edx*8]
call fcn.0040523c
mov ecx, dword [ebp - 0x10e8]
lea eax, [ebp - 0x10e4]
mov edx, 0x571874
call fcn.004052e4
mov edx, dword [ebp - 0x10e4]
mov eax, dword [ebp - 0x10c]
add eax, 0x419f
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x90], 0
je 0x560c9a
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x10489c], 0
je 0x560c9a
mov eax, dword [ebp - 0x148]
inc eax
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x43a0], eax
mov eax, dword [ebp - 0x10c]
push eax
push fcn.00532f4c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x40]
mov eax, dword [edx + eax*8 + 0x100]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
inc eax
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x50
mov ecx, 1
mov edx, dword [0x52f2f4]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
dec eax
mov dword [ebp - 0x1e0], eax
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
lea eax, [edx + eax*8]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 5
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x40]
lea edx, [ecx + edx*8]
call fcn.00403530
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x105bd4]
mov dword [edx + eax*8 + 0x108], ecx
jmp 0x560e36
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x560dd4
push 0x571614
lea edx, [ebp - 0x10f0]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x10f0]
lea edx, [ebp - 0x10f4]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1cc
call fcn.0040ba78
push dword [ebp - 0x10f4]
push 0x571688
lea eax, [ebp - 0x10ec]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x10ec]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x560e2b
push 0x571614
lea edx, [ebp - 0x10fc]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x10fc]
push 0x571880
push 0x571688
lea eax, [ebp - 0x10f8]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x10f8]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
lea eax, [ebp - 0x1100]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 4
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1100]
lea edx, [ebp - 0x148]
call fcn.0040b73c
test al, al
jne 0x560e74
mov dword [ebp - 0x148], 1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
dec eax
mov dword [ebp - 0x1e0], eax
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov ecx, dword [ebp - 0x148]
mov dword [edx + eax*8 + 0x100], ecx
lea eax, [ebp - 0x1104]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1104]
call fcn.0040b6e8
imul edx, dword [ebp - 0x1e0], 0x22
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x50]
mov dword [ecx + edx*8 + 0x104], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
inc eax
mov dword [ebp - 0x14c], eax
xor esi, esi
jmp 0x560fa2
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x80]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [edx + ecx*4]
call fcn.00405070
lea eax, [ebp - 0x1108]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x1108]
lea eax, [ebp - 0x144]
call fcn.00405070
mov eax, dword [ebp - 0x144]
mov edx, 0x571708
call fcn.004053e4
jne 0x560f5f
inc esi
mov eax, dword [ebp - 0x144]
mov edx, 0x57173c
call fcn.004053e4
jne 0x560f72
dec esi
test esi, esi
jge 0x560f9c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
imul eax, eax, 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov ecx, dword [ebp - 0x14c]
mov dword [edx + eax*8 - 4], ecx
jmp 0x560fbf
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x560f01
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x56108b
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x56102c
lea edx, [ebp - 0x110c]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1cd
call fcn.0040ba78
lea eax, [ebp - 0x110c]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x110c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x561044
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x5718a4
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 + 0x100]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jle 0x5610d0
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 + 0x104]
cmp eax, dword [ebp - 0x154]
jl 0x5610fc
cmp dword [ebp - 0x13c], 0
jge 0x5610f8
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 + 0x104]
cmp eax, dword [ebp - 0x154]
jg 0x5610fc
xor eax, eax
jmp 0x5610fe
mov al, 1
mov byte [ebp - 0x12d], al
cmp byte [ebp - 0x12d], 0
je case.0x55d835.43
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 + 0x10c]
dec eax
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bd4], eax
jmp case.0x55d835.43
xor eax, eax
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
dec eax
mov dword [ebp - 0x1e0], eax
jmp 0x561197
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x40]
lea eax, [edx + eax*8]
imul edx, dword [ebp - 0x1e0], 0x22
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x50]
lea edx, [ecx + edx*8]
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004035dc
je 0x5611ad
inc dword [ebp - 0x148]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x40]
call fcn.004063e0
cmp eax, dword [ebp - 0x148]
jg 0x561159
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x40]
call fcn.004063e0
cmp eax, dword [ebp - 0x148]
jle 0x561467
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 + 0x100]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jle 0x561245
mov eax, dword [ebp - 0x13c]
cdq
mov ecx, dword [ebp - 0x148]
mov ebx, ecx
shl ecx, 5
add ecx, ebx
mov ebx, dword [ebp - 0x10c]
mov ebx, dword [ebx + 0x40]
add eax, dword [ebx + ecx*8 + 0x100]
adc edx, dword [ebx + ecx*8 + 0x104]
push edx
push eax
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 + 0x104]
cdq
cmp edx, dword [esp + 4]
jne 0x561241
cmp eax, dword [esp]
pop edx
pop eax
jae 0x5612b3
jmp 0x561245
pop edx
pop eax
jge 0x5612b3
cmp dword [ebp - 0x13c], 0
jge 0x5612a6
mov eax, dword [ebp - 0x13c]
cdq
mov ecx, dword [ebp - 0x148]
mov ebx, ecx
shl ecx, 5
add ecx, ebx
mov ebx, dword [ebp - 0x10c]
mov ebx, dword [ebx + 0x40]
add eax, dword [ebx + ecx*8 + 0x100]
adc edx, dword [ebx + ecx*8 + 0x104]
push edx
push eax
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 + 0x104]
cdq
cmp edx, dword [esp + 4]
jne 0x5612a2
cmp eax, dword [esp]
pop edx
pop eax
jbe 0x5612b3
jmp 0x5612a6
pop edx
pop eax
jle 0x5612b3
cmp dword [ebp - 0x13c], 0
je 0x5612b3
xor eax, eax
jmp 0x5612b5
mov al, 1
mov byte [ebp - 0x12d], al
cmp byte [ebp - 0x12d], 0
je 0x56143f
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 + 0x100]
cdq
mov ecx, dword [ebp - 0x148]
mov ebx, ecx
shl ecx, 5
add ecx, ebx
mov ebx, dword [ebp - 0x10c]
mov ebx, dword [ebx + 0x40]
add eax, dword [ebx + ecx*8 + 0x100]
adc edx, dword [ebx + ecx*8 + 0x104]
mov ecx, dword [ebp - 0x148]
mov ebx, ecx
shl ecx, 5
add ecx, ebx
mov ebx, dword [ebp - 0x10c]
mov ebx, dword [ebx + 0x40]
mov dword [ebx + ecx*8 + 0x100], eax
mov dword [ebx + ecx*8 + 0x104], edx
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x90], 0
je 0x561417
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x10489c], 0
je 0x561417
lea eax, [ebp - 0x1114]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 5
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x40]
lea edx, [ecx + edx*8]
call fcn.0040523c
mov ecx, dword [ebp - 0x1114]
lea eax, [ebp - 0x1110]
mov edx, 0x571874
call fcn.004052e4
mov edx, dword [ebp - 0x1110]
mov eax, dword [ebp - 0x10c]
add eax, 0x419f
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x40]
push dword [edx + eax*8 + 0x104]
push dword [edx + eax*8 + 0x100]
lea eax, [ebp - 0x1118]
call fcn.0040b668
mov edx, dword [ebp - 0x1118]
mov eax, dword [ebp - 0x10c]
add eax, 0x429f
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x148]
inc eax
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x43a0], eax
mov eax, dword [ebp - 0x10c]
push eax
push fcn.00532f4c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
imul eax, dword [ebp - 0x1e0], 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 + 0x108]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bd4], eax
jmp case.0x55d835.43
mov eax, dword [ebp - 0x1e0]
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x50
mov ecx, 1
mov edx, dword [0x52f2f4]
call fcn.0040659c
add esp, 4
jmp case.0x55d835.43
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x5614e4
push 0x571614
lea edx, [ebp - 0x1120]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x1120]
lea edx, [ebp - 0x1124]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1ce
call fcn.0040ba78
push dword [ebp - 0x1124]
push 0x571688
lea eax, [ebp - 0x111c]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x111c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x56153b
push 0x571614
lea edx, [ebp - 0x112c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x112c]
push 0x5718e4
push 0x571688
lea eax, [ebp - 0x1128]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x1128]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x105bdc], edx
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.00404fd8
lea eax, [ebp - 0x1130]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1130]
lea edx, [ebp - 0x138]
call fcn.0040b05c
mov byte [ebp - 0x125], 1
mov eax, dword [ebp - 0x138]
mov edx, 0x571910
call fcn.004053e4
jne 0x561869
lea eax, [ebp - 0x1f8]
push eax
call sub.user32.dll_GetCursorPos
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x105bf5], 0
je 0x5615dd
mov dword [ebp - 0x13c], 2
jmp 0x5615e7
mov dword [ebp - 0x13c], 4
lea eax, [ebp - 0x1138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1138]
lea edx, [ebp - 0x1134]
call fcn.0040b05c
mov eax, dword [ebp - 0x1134]
mov edx, 0x571924
call fcn.004053e4
je 0x561643
lea eax, [ebp - 0x1f8]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x84]
push eax
call sub.user32.dll_ScreenToClient
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x105bf5], 0
je 0x56167b
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1f8]
mov dword [eax + 0x105c00], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1f4]
mov dword [eax + 0x105c04], edx
jmp 0x563847
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x17c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x56185d
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x23
je 0x5616e7
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x24
jne 0x56185d
mov eax, dword [ebp - 0x17c]
call fcn.00405298
cmp eax, 2
jl 0x56185d
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x23
je 0x561715
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x24
jne 0x56185d
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x1f8]
call fcn.0040b57c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
mov eax, dword [ebp - 0x17c]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x17c]
mov ecx, 1
mov edx, 1
call fcn.00405538
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x17c]
call fcn.00405070
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x1f4]
call fcn.0040b57c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp 0x563847
mov byte [ebp - 0x125], 0
jmp 0x563847
mov eax, dword [ebp - 0x138]
mov edx, 0x571930
call fcn.004053e4
jne 0x561db5
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x561da9
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x23
je 0x5618cc
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x24
jne 0x561da9
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x113c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffd
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x113c]
mov eax, dword [ebp - 0x120]
mov edx, 0x5715f8
call fcn.004052e4
lea eax, [ebp - 0x1140]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1140]
lea eax, [ebp - 0x270]
mov edx, 0x5715f8
call fcn.004052e4
lea eax, [ebp - 0x1144]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1144]
call fcn.0040b6e8
mov dword [ebp - 0x1f8], eax
lea eax, [ebp - 0x1148]
push eax
mov ecx, 2
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1148]
call fcn.0040b6e8
mov dword [ebp - 0x1f4], eax
lea eax, [ebp - 0x114c]
push eax
mov ecx, 3
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x114c]
lea edx, [ebp - 0x26c]
call fcn.0040b05c
lea eax, [ebp - 0x1154]
push eax
mov ecx, 4
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1154]
lea edx, [ebp - 0x1150]
call fcn.0040b05c
mov edx, dword [ebp - 0x1150]
lea eax, [ebp - 0x270]
call fcn.00405070
lea edx, [ebp - 0x244]
mov eax, dword [ebp - 0x26c]
call fcn.0040b73c
test al, al
jne 0x561a6e
xor eax, eax
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x26c]
mov edx, 0x571924
call fcn.004053e4
je 0x561a92
mov eax, dword [ebp - 0x270]
mov edx, 0x571924
call fcn.004053e4
jne 0x561af8
cmp dword [ebp - 0x244], 0
jle 0x561abb
lea eax, [ebp - 0x1f8]
push eax
mov eax, dword [ebp - 0x244]
push eax
call sub.user32.dll_ScreenToClient
xor eax, eax
mov dword [ebp - 0x180], eax
jmp 0x561b5f
push 0
call sub.user32.dll_GetDC
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x1f4]
push eax
mov eax, dword [ebp - 0x1f8]
push eax
mov eax, dword [ebp - 0x248]
push eax
call sub.gdi32.dll_GetPixel_1
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x248]
push eax
push 0
call sub.user32.dll_ReleaseDC
jmp 0x561b5f
cmp dword [ebp - 0x244], 0
jle 0x561b0b
xor eax, eax
mov dword [ebp - 0x180], eax
jmp 0x561b5f
lea eax, [ebp - 0x1f8]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x84]
push eax
call sub.user32.dll_ClientToScreen
push 0
call sub.user32.dll_GetDC
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x1f4]
push eax
mov eax, dword [ebp - 0x1f8]
push eax
mov eax, dword [ebp - 0x248]
push eax
call sub.gdi32.dll_GetPixel_1
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x248]
push eax
push 0
call sub.user32.dll_ReleaseDC
cmp dword [ebp - 0x180], 0
jne 0x561d4f
cmp dword [ebp - 0x244], 0
jle 0x561b89
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x244]
mov dword [eax + 0x449c], edx
jmp 0x561ba1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x84]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x449c], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1f8]
mov dword [eax + 0x44b8], edx
mov edx, dword [ebp - 0x1f4]
mov dword [eax + 0x44bc], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1f8]
mov dword [eax + 0x44c0], edx
mov edx, dword [ebp - 0x1f4]
mov dword [eax + 0x44c4], edx
mov eax, dword [ebp - 0x10c]
inc dword [eax + 0x44b8]
mov eax, dword [ebp - 0x10c]
inc dword [eax + 0x44bc]
xor eax, eax
push ebp
push 0x561c31
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x448c], 0
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0052fda8
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x561c48
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x448c], 0
je 0x561c67
lea eax, [ebp - 0x17c]
mov edx, 0x571940
call fcn.00405070
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x448c], 0
je 0x561cc7
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x4405], 0
je 0x561cc7
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x4405], 0
je 0x561d06
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571944
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp 0x561d06
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x44ac]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
movzx eax, byte [eax + 2]
mov edx, dword [ebp - 0x2ac]
movzx edx, byte [edx + 1]
shl edx, 8
add eax, edx
mov edx, dword [ebp - 0x2ac]
movzx edx, byte [edx]
shl edx, 0x10
add eax, edx
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x44ac]
push eax
call sub.KERNEL32.DLL_GlobalFree
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x44ac], edx
push 0
lea eax, [ebp - 0x284]
mov ecx, 1
mov edx, dword [0x555bf8]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x248]
push eax
push 0
call sub.user32.dll_ReleaseDC
mov eax, dword [ebp - 0x180]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x138]
call fcn.0040b668
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp 0x563847
mov byte [ebp - 0x125], 0
jmp 0x563847
mov eax, dword [ebp - 0x138]
mov edx, 0x571968
call fcn.004053e4
jne 0x5621b4
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x17c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x5621a8
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x23
je 0x561e37
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x24
jne 0x5621a8
mov eax, dword [ebp - 0x17c]
call fcn.00405298
cmp eax, 2
jl 0x5621a8
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x23
je 0x561e65
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x24
jne 0x5621a8
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x1158]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffc
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1158]
mov eax, dword [ebp - 0x120]
mov edx, 0x5715f8
call fcn.004052e4
lea eax, [ebp - 0x115c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x115c]
mov eax, dword [ebp - 0x120]
mov edx, 0x5715f8
call fcn.004052e4
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
mov ebx, eax
test ebx, ebx
jle 0x561f84
mov dword [ebp - 0x134], 1
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x134]
movzx eax, byte [eax + edx - 1]
cmp eax, 0x2e
jg 0x561f5b
je 0x561f65
add eax, 0xffffffd8
sub eax, 2
jb 0x561f65
sub eax, 2
je 0x561f65
jmp 0x561f7b
sub eax, 0x5b
je 0x561f65
sub eax, 2
jne 0x561f7b
mov eax, dword [ebp - 0x120]
call fcn.004054f0
mov edx, dword [ebp - 0x134]
mov byte [eax + edx - 1], 0x20
inc dword [ebp - 0x134]
dec ebx
jne 0x561f32
mov byte [ebp - 0x12d], 0
mov dword [ebp - 0x134], 1
mov dword [ebp - 0x250], 0xffffffff
mov dword [ebp - 0x24c], 0xffffffff
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
jmp 0x562084
mov eax, dword [ebp - 0x138]
call fcn.00405298
dec eax
jle 0x562016
mov eax, dword [ebp - 0x138]
cmp byte [eax + 1], 0x78
je 0x562016
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
sub al, 0x30
je 0x562000
add al, 0xef
sub al, 6
jb 0x562000
add al, 0xe6
sub al, 6
jae 0x562016
lea eax, [ebp - 0x138]
mov ecx, dword [ebp - 0x138]
mov edx, 0x571978
call fcn.004052e4
xor eax, eax
push ebp
push 0x562054
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x138]
call fcn.0040b75c
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], edx
mov byte [ebp - 0x12d], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x56209a
cmp byte [ebp - 0x12d], 0
jne 0x56209a
cmp dword [ebp - 0x138], 0
jne 0x561fce
cmp byte [ebp - 0x12d], 0
jne 0x5620b9
lea eax, [ebp - 0x138]
mov edx, 0x571984
call fcn.00405070
dec dword [ebp - 0x134]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
mov eax, dword [ebp - 0x17c]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x17c]
mov ecx, 1
mov edx, 1
call fcn.00405538
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x17c]
call fcn.00405070
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x134]
call fcn.0040b57c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp 0x563847
mov byte [ebp - 0x125], 0
jmp 0x563847
mov eax, dword [ebp - 0x138]
mov edx, 0x571990
call fcn.004053e4
jne 0x56245c
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x562450
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x24
jne 0x562450
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
lea eax, [ebp - 0x1160]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffd
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1160]
mov eax, dword [ebp - 0x120]
mov edx, 0x5715f8
call fcn.004052e4
lea eax, [ebp - 0x1164]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1164]
mov eax, dword [ebp - 0x120]
mov edx, 0x5715f8
call fcn.004052e4
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
mov ebx, eax
test ebx, ebx
jle 0x562306
mov dword [ebp - 0x134], 1
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x134]
movzx eax, byte [eax + edx - 1]
cmp eax, 0x2e
jg 0x5622dd
je 0x5622e7
add eax, 0xffffffd8
sub eax, 2
jb 0x5622e7
sub eax, 2
je 0x5622e7
jmp 0x5622fd
sub eax, 0x5b
je 0x5622e7
sub eax, 2
jne 0x5622fd
mov eax, dword [ebp - 0x120]
call fcn.004054f0
mov edx, dword [ebp - 0x134]
mov byte [eax + edx - 1], 0x20
inc dword [ebp - 0x134]
dec ebx
jne 0x5622b4
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x138]
call fcn.00404fd8
lea eax, [ebp - 0x1168]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1168]
call fcn.0040b6e8
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
je 0x56240b
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
mov ebx, eax
test ebx, ebx
jle 0x5623d3
mov dword [ebp - 0x134], 1
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x134]
mov al, byte [eax + edx - 1]
add al, 0xd8
sub al, 2
jb 0x5623b4
sub al, 2
je 0x5623b4
sub al, 0x2f
je 0x5623b4
sub al, 2
jne 0x5623ca
mov eax, dword [ebp - 0x120]
call fcn.004054f0
mov edx, dword [ebp - 0x134]
mov byte [eax + edx - 1], 0x20
inc dword [ebp - 0x134]
dec ebx
jne 0x562390
cmp dword [ebp - 0x168], 0
jle 0x5623e4
inc dword [ebp - 0x168]
jmp 0x5623eb
sub dword [ebp - 0x168], 2
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp 0x563847
mov byte [ebp - 0x125], 0
jmp 0x563847
mov eax, dword [ebp - 0x138]
mov edx, 0x5719a0
call fcn.004053e4
jne 0x562bc7
lea eax, [ebp - 0x116c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffd
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x116c]
lea edx, [ebp - 0x138]
call fcn.0040af24
mov eax, dword [ebp - 0x138]
call fcn.00405298
test eax, eax
jle 0x5624e9
mov edx, dword [ebp - 0x138]
mov eax, 0x5719b4
call fcn.004055dc
test eax, eax
jle 0x5624cc
or dword [ebp - 0x134], 1
mov edx, dword [ebp - 0x138]
mov eax, 0x571990
call fcn.004055dc
test eax, eax
jle 0x5624f1
or dword [ebp - 0x134], 2
jmp 0x5624f1
xor eax, eax
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
call fcn.0043ce7c
mov dx, 1
call fcn.0043ce44
test al, al
je 0x5625e2
mov dword [ebp - 0x164], 0xfa
mov byte [ebp - 0x12d], 0
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x104534], edx
jmp 0x5625ca
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x71], 0
jne 0x5625ed
xor eax, eax
push ebp
push 0x5625b3
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0043ce7c
lea edx, [ebp - 0x1170]
call fcn.0043c990
mov edx, dword [ebp - 0x1170]
mov eax, dword [ebp - 0x120]
call fcn.0040502c
mov byte [ebp - 0x12d], 1
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5625c4
dec dword [ebp - 0x164]
cmp byte [ebp - 0x12d], 0
jne 0x5625ed
cmp dword [ebp - 0x164], 0
jg 0x56254a
jmp 0x5625ed
mov eax, dword [ebp - 0x120]
call fcn.00404fd8
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x5626b0
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x24
jne 0x5626b0
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
call fcn.00405070
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp 0x563847
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x562bbb
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x25
jne 0x562bbb
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x105bdc], edx
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x138]
call fcn.00405070
xor eax, eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 1
lea ecx, [ebp - 4]
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x10c]
call fcn.005550b4
mov dword [ebp - 4], 1
mov dword [ebp - 8], 1
mov eax, dword [ebp - 0x134]
and eax, 3
cmp eax, 3
jne 0x562926
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, 0x5719c4
call fcn.004055dc
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x164], 1
mov byte [ebp - 0x12d], 0
cmp dword [ebp - 0x13c], 0
jne 0x5627a6
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
inc eax
mov dword [ebp - 0x13c], eax
mov byte [ebp - 0x12d], 1
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
test eax, eax
jg 0x5627c4
lea eax, [ebp - 0x140]
call fcn.00404fd8
jmp 0x562828
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x13c]
cmp byte [eax + edx - 2], 0xd
jne 0x562802
lea eax, [ebp - 0x140]
push eax
mov ecx, dword [ebp - 0x13c]
sub ecx, dword [ebp - 0x164]
dec ecx
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x164]
call fcn.004054f8
jmp 0x562828
lea eax, [ebp - 0x140]
push eax
mov ecx, dword [ebp - 0x13c]
sub ecx, dword [ebp - 0x164]
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x164]
call fcn.004054f8
mov dword [ebp - 8], 1
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x17c]
call fcn.00405070
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x1174]
mov ecx, dword [ebp - 0x140]
mov edx, 0x5719d0
call fcn.004052e4
mov edx, dword [ebp - 0x1174]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
inc dword [ebp - 8]
cmp dword [ebp - 0x138], 0
jne 0x56282f
inc dword [ebp - 4]
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x164], eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x164]
mov eax, 0x5719c4
call fcn.0043cfd0
mov dword [ebp - 0x13c], eax
cmp byte [ebp - 0x12d], 0
je 0x562782
jmp 0x563847
mov eax, dword [ebp - 0x134]
and eax, 1
dec eax
jne 0x562abb
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, 0x5719c4
call fcn.004055dc
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x164], 1
mov byte [ebp - 0x12d], 0
cmp dword [ebp - 0x13c], 0
jne 0x562983
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
inc eax
mov dword [ebp - 0x13c], eax
mov byte [ebp - 0x12d], 1
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x17c]
call fcn.00405070
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
test eax, eax
jg 0x5629d7
lea eax, [ebp - 0x138]
call fcn.00404fd8
jmp 0x562a3b
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x13c]
cmp byte [eax + edx - 2], 0xd
jne 0x562a15
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x13c]
sub ecx, dword [ebp - 0x164]
dec ecx
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x164]
call fcn.004054f8
jmp 0x562a3b
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x13c]
sub ecx, dword [ebp - 0x164]
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x164]
call fcn.004054f8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
inc dword [ebp - 4]
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x164], eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x164]
mov eax, 0x5719c4
call fcn.0043cfd0
mov dword [ebp - 0x13c], eax
cmp byte [ebp - 0x12d], 0
je 0x56295f
jmp 0x563847
mov byte [ebp - 0x12d], 0
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x17c]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
cmp byte [ebp - 0x12d], 0
jne 0x562b2a
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ecx]
lea eax, [ebp - 0x1178]
mov edx, 0x5719d0
call fcn.004052e4
mov edx, dword [ebp - 0x1178]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov byte [ebp - 0x12d], 1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
inc dword [ebp - 8]
cmp byte [ebp - 0x12d], 0
je 0x562ba9
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ecx]
lea eax, [ebp - 0x117c]
mov edx, 0x5719d0
call fcn.004052e4
mov edx, dword [ebp - 0x117c]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
cmp dword [ebp - 0x138], 0
jne 0x562ac2
jmp 0x563847
mov byte [ebp - 0x125], 0
jmp 0x563847
mov eax, dword [ebp - 0x138]
mov edx, dword [0x590210]
mov edx, dword [edx + 0x150]
call fcn.004053e4
jne 0x562ec9
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 0x10c]
push eax
push 0x536548
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov dl, 1
mov eax, dword [0x41aea0]
call fcn.00404194
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104540], eax
mov eax, dword [ebp - 0x10c]
push eax
push 0x53656c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x10453c]
mov dword [ebp - 4], eax
mov dword [ebp - 8], 3
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x138]
call fcn.00405070
mov ebx, dword [ebp - 4]
dec ebx
test ebx, ebx
jl 0x562ea5
inc ebx
mov dword [ebp - 0x13c], 0
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x17c]
call fcn.00405070
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 4], eax
mov dword [ebp - 8], 3
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
mov dword [ebp - 8], 1
lea ecx, [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104540]
mov edx, dword [ebp - 0x13c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x138]
call fcn.0040b6e8
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
mov dword [ebp - 8], 2
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x74]
lea edx, [ebp - 0x138]
call fcn.0040c0c4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4]
cmp byte [eax + 0x71], 0
je 0x562def
lea eax, [ebp - 0x138]
mov edx, 0x5719e4
call fcn.00405070
jmp 0x562e51
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4]
cmp byte [eax + 0x92], 0
je 0x562e18
lea eax, [ebp - 0x138]
mov edx, 0x5719f4
call fcn.00405070
jmp 0x562e51
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4]
cmp byte [eax + 0x91], 0
je 0x562e41
lea eax, [ebp - 0x138]
mov edx, 0x571a04
call fcn.00405070
jmp 0x562e51
lea eax, [ebp - 0x138]
mov edx, 0x5719e4
call fcn.00405070
mov dword [ebp - 8], 3
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
inc dword [ebp - 0x13c]
dec ebx
jne 0x562caa
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104540]
call fcn.004041c4
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x104540], edx
jmp 0x563847
mov eax, dword [ebp - 0x138]
mov edx, dword [0x590210]
mov edx, dword [edx + 0xa8]
call fcn.004053e4
jne 0x5635f8
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x104534], edx
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x1184]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1184]
lea eax, [ebp - 0x1180]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1180]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x140]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 7
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov byte [ebp - 0x12d], 0
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x138]
call fcn.0040b73c
test al, al
je 0x56342f
cmp dword [ebp - 4], 0
jne 0x562f97
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov dword [ebp - 4], eax
lea eax, [ebp - 0x690]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.user32.dll_GetWindowRect
test eax, eax
jne 0x562fdb
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x104534], 3
xor eax, eax
mov dword [ebp - 0x688], eax
xor eax, eax
mov dword [ebp - 0x690], eax
xor eax, eax
mov dword [ebp - 0x684], eax
xor eax, eax
mov dword [ebp - 0x68c], eax
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x17c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 4
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x105bf5], 0
je 0x563081
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x690]
mov dword [eax + 0x105c00], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x68c]
mov dword [eax + 0x105c04], edx
mov eax, dword [ebp - 0x688]
sub eax, dword [ebp - 0x690]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105c08], eax
mov eax, dword [ebp - 0x684]
sub eax, dword [ebp - 0x68c]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105c0c], eax
jmp 0x56343f
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x56341d
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x23
je 0x5630af
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x24
jne 0x56341d
mov eax, dword [ebp - 0x17c]
call fcn.00405298
cmp eax, 2
jl 0x56341d
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x23
je 0x5630dd
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x24
jne 0x56341d
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x690]
call fcn.0040b57c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
mov eax, dword [ebp - 0x17c]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x17c]
mov ecx, 1
mov edx, 1
call fcn.00405538
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x17c]
call fcn.00405070
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x68c]
call fcn.0040b57c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 5
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x17c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 6
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x56340b
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x23
je 0x56328c
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x24
jne 0x56340b
mov eax, dword [ebp - 0x17c]
call fcn.00405298
cmp eax, 2
jl 0x56340b
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x23
je 0x5632ba
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x24
jne 0x56340b
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x688]
sub eax, dword [ebp - 0x690]
call fcn.0040b57c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
mov eax, dword [ebp - 0x17c]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x17c]
mov ecx, 1
mov edx, 1
call fcn.00405538
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x17c]
call fcn.00405070
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x684]
sub eax, dword [ebp - 0x68c]
call fcn.0040b57c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp 0x56343f
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x104534], 1
jmp 0x56343f
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x104534], 2
jmp 0x56343f
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x104534], 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104534]
dec eax
je 0x563459
dec eax
je 0x563473
dec eax
je 0x563490
dec eax
je 0x5634a8
jmp 0x5634c3
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571a0c
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
jmp 0x5634c3
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571a30
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jmp 0x5634c3
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571a4c
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jmp 0x5634c3
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571a60
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x104534], 1
jl 0x5634e9
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x105bf5], 0
je 0x563515
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104534]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105c10], eax
jmp 0x563847
mov eax, dword [ebp - 0x140]
call fcn.00405298
cmp eax, 2
jl 0x563847
mov eax, dword [ebp - 0x140]
cmp byte [eax], 0x23
je 0x563543
mov eax, dword [ebp - 0x140]
cmp byte [eax], 0x24
jne 0x563847
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x140]
call fcn.00405070
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104534]
call fcn.0040b57c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp 0x563847
lea eax, [ebp - 0x1188]
push eax
lea edx, [ebp - 0x118c]
mov eax, dword [ebp - 0x138]
call fcn.0040af24
mov eax, dword [ebp - 0x118c]
mov ecx, 7
mov edx, 1
call fcn.004054f8
mov eax, dword [ebp - 0x1188]
mov edx, 0x571a80
call fcn.004053e4
jne 0x56372c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43fc]
mov edx, 0x80000001
call fcn.0044197c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43fc]
mov cl, 1
mov edx, 0x571a90
call fcn.004419e0
lea eax, [ebp - 0x17c]
push eax
mov ecx, 0x20
mov edx, 8
mov eax, dword [ebp - 0x138]
call fcn.004054f8
lea eax, [ebp - 0x1190]
push eax
lea eax, [ebp - 0x1194]
mov ecx, dword [ebp - 0x17c]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1194]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1190]
lea eax, [ebp - 0x17c]
call fcn.00405070
lea ecx, [ebp - 0x1198]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43fc]
mov edx, dword [ebp - 0x17c]
call fcn.00441d60
mov edx, dword [ebp - 0x1198]
lea eax, [ebp - 0x17c]
call fcn.00405070
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43fc]
call fcn.0044194c
jmp 0x563847
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x5637a9
push 0x571614
lea edx, [ebp - 0x11a0]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x11a0]
lea edx, [ebp - 0x11a4]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x151
call fcn.0040ba78
push dword [ebp - 0x11a4]
push 0x571688
lea eax, [ebp - 0x119c]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x119c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x563800
push 0x571614
lea edx, [ebp - 0x11ac]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x11ac]
push 0x571aa8
push 0x571688
lea eax, [ebp - 0x11a8]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x11a8]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
cmp byte [ebp - 0x125], 0
jne case.0x55d835.43
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x5638d1
push 0x571614
lea edx, [ebp - 0x11b4]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x11b4]
lea edx, [ebp - 0x11b8]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1ba
call fcn.0040ba78
push dword [ebp - 0x11b8]
push 0x571688
lea eax, [ebp - 0x11b0]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x11b0]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x563928
push 0x571614
lea edx, [ebp - 0x11c0]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x11c0]
push 0x571ad0
push 0x571688
lea eax, [ebp - 0x11bc]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x11bc]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
mov dword [ebp - 0x168], eax
xor eax, eax
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x11c4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x11c4]
lea edx, [ebp - 0x138]
call fcn.0040b05c
jmp 0x563a38
lea eax, [ebp - 0x11cc]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
mov edx, dword [ebp - 0x14c]
mov edx, dword [eax + edx*4]
xor ecx, ecx
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x11cc]
lea edx, [ebp - 0x11c8]
call fcn.0040b05c
mov eax, dword [ebp - 0x11c8]
push eax
lea eax, [ebp - 0x11d0]
mov ecx, dword [ebp - 0x138]
mov edx, 0x571644
call fcn.004052e4
mov edx, dword [ebp - 0x11d0]
pop eax
call fcn.004053e4
jne 0x563a32
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x14c]
mov dword [eax + 0x105bd4], edx
jmp 0x563a55
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x5639b9
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x563bba
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x563b14
lea edx, [ebp - 0x11d8]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1c6
call fcn.0040ba78
push dword [ebp - 0x11d8]
lea eax, [ebp - 0x11dc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
push dword [ebp - 0x11dc]
lea edx, [ebp - 0x11e0]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1c7
call fcn.0040ba78
push dword [ebp - 0x11e0]
push 0x571688
lea eax, [ebp - 0x11d4]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x11d4]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x563b73
push 0x571b00
lea eax, [ebp - 0x11e8]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
push dword [ebp - 0x11e8]
push 0x571b10
push 0x571688
lea eax, [ebp - 0x11e4]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x11e4]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
mov dword [ebp - 0x14c], eax
xor ebx, ebx
xor esi, esi
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x168]
je 0x563ce2
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x80]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [edx + ecx*4]
call fcn.00405070
lea eax, [ebp - 0x26c]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x168]
jle 0x563c7e
mov eax, dword [ebp - 0x26c]
mov edx, 0x5716f8
call fcn.004053e4
jne 0x563c3d
inc ebx
mov eax, dword [ebp - 0x26c]
mov edx, 0x571728
call fcn.004053e4
jne 0x563c50
dec ebx
mov eax, dword [ebp - 0x26c]
mov edx, 0x571708
call fcn.004053e4
jne 0x563c63
inc esi
mov eax, dword [ebp - 0x26c]
mov edx, 0x57173c
call fcn.004053e4
jne 0x563c76
dec esi
dec dword [ebp - 0x14c]
jmp 0x563cd0
mov eax, dword [ebp - 0x26c]
mov edx, 0x5716f8
call fcn.004053e4
jne 0x563c91
dec ebx
mov eax, dword [ebp - 0x26c]
mov edx, 0x571728
call fcn.004053e4
jne 0x563ca4
inc ebx
mov eax, dword [ebp - 0x26c]
mov edx, 0x571708
call fcn.004053e4
jne 0x563cb7
dec esi
mov eax, dword [ebp - 0x26c]
mov edx, 0x57173c
call fcn.004053e4
jne 0x563cca
inc esi
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x168]
jne 0x563be2
test ebx, ebx
je 0x563d13
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
add ebx, eax
push ebx
mov eax, dword [ebp - 0x10c]
add eax, 0x54
mov ecx, 1
mov edx, dword [0x52f31c]
call fcn.0040659c
add esp, 4
test esi, esi
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
add esi, eax
push esi
mov eax, dword [ebp - 0x10c]
add eax, 0x50
mov ecx, 1
mov edx, dword [0x52f2f4]
call fcn.0040659c
add esp, 4
jmp case.0x55d835.43
xor eax, eax
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
inc eax
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x58
mov ecx, 1
mov edx, dword [0x52f344]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x58]
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x105bd4]
mov dword [edx + eax*4 - 0xc], ecx
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
test eax, eax
jle 0x563e4c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
imul eax, eax, 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 - 8]
mov edx, dword [ebp - 0x10c]
cmp eax, dword [edx + 0x105bd4]
jge 0x563e4c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
imul eax, eax, 0x22
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*8 - 4]
mov edx, dword [ebp - 0x10c]
cmp eax, dword [edx + 0x105bd4]
jle 0x563e4c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x58]
lea eax, [edx + eax*4 - 8]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x50]
call fcn.004063e0
dec eax
pop edx
mov dword [edx], eax
jmp 0x563e6e
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x58]
mov dword [edx + eax*4 - 8], 0xffffffff
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
test eax, eax
jle 0x563f0f
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
mov eax, dword [edx + eax*4 - 0xc]
mov edx, dword [ebp - 0x10c]
cmp eax, dword [edx + 0x105bd4]
jge 0x563f0f
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
mov eax, dword [edx + eax*4 - 8]
mov edx, dword [ebp - 0x10c]
cmp eax, dword [edx + 0x105bd4]
jle 0x563f0f
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x58]
lea eax, [edx + eax*4 - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
dec eax
pop edx
mov dword [edx], eax
jmp 0x563f31
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x58]
mov dword [edx + eax*4 - 4], 0xffffffff
lea eax, [ebp - 0x11ec]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x11ec]
lea edx, [ebp - 0x138]
call fcn.0040b05c
jmp 0x563fe0
lea eax, [ebp - 0x11f4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
mov edx, dword [ebp - 0x14c]
mov edx, dword [eax + edx*4]
xor ecx, ecx
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x11f4]
lea edx, [ebp - 0x11f0]
call fcn.0040b05c
mov eax, dword [ebp - 0x11f0]
push eax
lea eax, [ebp - 0x11f8]
mov ecx, dword [ebp - 0x138]
mov edx, 0x571644
call fcn.004052e4
mov edx, dword [ebp - 0x11f8]
pop eax
call fcn.004053e4
jne 0x563fda
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x14c]
mov dword [eax + 0x105bd4], edx
jmp 0x563ffd
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x563f61
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg case.0x55d835.43
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x5640bc
lea edx, [ebp - 0x1200]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1c6
call fcn.0040ba78
push dword [ebp - 0x1200]
lea eax, [ebp - 0x1204]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
push dword [ebp - 0x1204]
lea edx, [ebp - 0x1208]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1c7
call fcn.0040ba78
push dword [ebp - 0x1208]
push 0x571688
lea eax, [ebp - 0x11fc]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x11fc]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x56411b
push 0x571b00
lea eax, [ebp - 0x1210]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
push dword [ebp - 0x1210]
push 0x571b10
push 0x571688
lea eax, [ebp - 0x120c]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x120c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
test eax, eax
jle case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x58]
mov eax, dword [edx + eax*4 - 0xc]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bd4], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x58]
cmp dword [edx + eax*4 - 8], 0
jl 0x5641ff
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x58]
mov eax, dword [edx + eax*4 - 8]
inc eax
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x50
mov ecx, 1
mov edx, dword [0x52f2f4]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x58]
cmp dword [edx + eax*4 - 4], 0
jl 0x56425c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x58]
mov eax, dword [edx + eax*4 - 4]
inc eax
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x54
mov ecx, 1
mov edx, dword [0x52f31c]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x58]
call fcn.004063e0
dec eax
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x58
mov ecx, 1
mov edx, dword [0x52f344]
call fcn.0040659c
add esp, 4
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
inc eax
mov dword [ebp - 0x14c], eax
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x16c], eax
jmp 0x56435e
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x80]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [edx + ecx*4]
call fcn.00405070
lea eax, [ebp - 0x1214]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x1214]
lea eax, [ebp - 0x144]
call fcn.00405070
mov eax, dword [ebp - 0x144]
mov edx, 0x571b38
call fcn.004053e4
je 0x56431e
mov eax, dword [ebp - 0x144]
mov edx, 0x571b44
call fcn.004053e4
jne 0x56431f
inc ebx
mov eax, dword [ebp - 0x144]
mov edx, 0x571b54
call fcn.004053e4
jne 0x564332
dec ebx
mov eax, dword [ebp - 0x144]
mov edx, 0x571b64
call fcn.004053e4
jne 0x564354
test ebx, ebx
jne 0x564354
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x16c], eax
test ebx, ebx
jl 0x56437b
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x5642af
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jne 0x564448
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x5643e8
lea edx, [ebp - 0x1218]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1c5
call fcn.0040ba78
lea eax, [ebp - 0x1218]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x1218]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x564401
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571b6c
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
push ebp
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00557000
pop ecx
mov byte [ebp - 0x125], al
mov eax, dword [ebp - 0x160]
cmp dword [eax], 0x2a
jne 0x564476
mov al, byte [ebp - 0x125]
xor al, 1
mov byte [ebp - 0x125], al
cmp byte [ebp - 0x125], 0
jne case.0x55d835.43
cmp dword [ebp - 0x16c], 0
je 0x5644a3
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x16c]
mov dword [eax + 0x105bd4], edx
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x14c]
mov dword [eax + 0x105bd4], edx
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
inc eax
mov dword [ebp - 0x14c], eax
xor ebx, ebx
jmp 0x564561
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x80]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [edx + ecx*4]
call fcn.00405070
lea eax, [ebp - 0x121c]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x121c]
lea eax, [ebp - 0x144]
call fcn.00405070
mov eax, dword [ebp - 0x144]
mov edx, 0x571b38
call fcn.004053e4
je 0x564543
mov eax, dword [ebp - 0x144]
mov edx, 0x571b44
call fcn.004053e4
jne 0x564544
inc ebx
mov eax, dword [ebp - 0x144]
mov edx, 0x571b54
call fcn.004053e4
jne 0x564557
dec ebx
test ebx, ebx
jl 0x56457e
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x5644d4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jne 0x56464b
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x5645eb
lea edx, [ebp - 0x1220]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1c5
call fcn.0040ba78
lea eax, [ebp - 0x1220]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x1220]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x564604
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571b6c
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x14c]
mov dword [eax + 0x105bd4], edx
jmp case.0x55d835.43
lea eax, [ebp - 0x124]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x124]
mov eax, 0x57162c
call fcn.004055dc
dec eax
jge 0x5646d6
lea edx, [ebp - 0x1228]
mov eax, dword [0x59051c]
mov eax, dword [eax]
call fcn.00483800
mov eax, dword [ebp - 0x1228]
lea edx, [ebp - 0x1224]
call fcn.0040c03c
push dword [ebp - 0x1224]
push 0x57162c
push dword [ebp - 0x124]
lea eax, [ebp - 0x124]
mov edx, 3
call fcn.00405358
mov eax, dword [0x590504]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x124]
mov dl, 2
call fcn.00516a50
jmp case.0x55d835.43
lea eax, [ebp - 0x124]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [0x590544]
mov eax, dword [eax]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x124]
call fcn.0040b73c
test al, al
jne 0x564735
mov eax, dword [0x590544]
mov eax, dword [eax]
mov dword [eax + 0x34], 1
lea eax, [ebp - 0x124]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0x124]
call fcn.0040b73c
test al, al
jne 0x56477f
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0x1324]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x134], eax
mov eax, dword [0x590544]
mov eax, dword [eax]
mov edx, dword [ebp - 0x134]
call fcn.0057a6c8
mov eax, dword [0x590544]
mov eax, dword [eax]
call fcn.0057a6c0
mov eax, dword [0x590504]
mov eax, dword [eax]
mov edx, dword [0x59051c]
mov edx, dword [edx]
mov dword [edx + 0xdc], eax
mov dword [edx + 0xd8], 0x525f84
mov eax, dword [0x590544]
mov eax, dword [eax]
call fcn.0057a420
jmp 0x5647d6
mov eax, dword [0x59051c]
mov eax, dword [eax]
call fcn.00483044
mov eax, dword [0x590544]
mov eax, dword [eax]
cmp byte [eax + 4], 2
je 0x5647ca
mov eax, dword [0x59051c]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xd8], edx
mov dword [eax + 0xdc], edx
jmp case.0x55d835.43
lea eax, [ebp - 0x122c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x122c]
lea eax, [ebp - 0x138]
mov edx, 0x571bb0
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1230]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1230]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 1
call fcn.0055738c
pop ecx
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
jmp case.0x55d835.43
lea eax, [ebp - 0x1234]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1234]
lea eax, [ebp - 0x138]
mov edx, 0x571bc0
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1238]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1238]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 2
call fcn.0055738c
pop ecx
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
jmp case.0x55d835.43
lea eax, [ebp - 0x123c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x123c]
lea eax, [ebp - 0x138]
mov edx, 0x571bd0
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1240]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1240]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xb
call fcn.0055738c
pop ecx
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
jmp case.0x55d835.43
lea eax, [ebp - 0x1244]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1244]
lea eax, [ebp - 0x138]
mov edx, 0x571be8
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1248]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1248]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x16
call fcn.0055738c
pop ecx
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
jmp case.0x55d835.43
lea eax, [ebp - 0x124c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x124c]
lea eax, [ebp - 0x138]
mov edx, 0x571c00
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1250]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1250]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x1e
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1254]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1254]
lea eax, [ebp - 0x138]
mov edx, 0x571c14
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1258]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1258]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x28
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x125c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x125c]
lea eax, [ebp - 0x138]
mov edx, 0x571c28
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1260]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1260]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x21
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1264]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1264]
lea eax, [ebp - 0x138]
mov edx, 0x571c3c
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1268]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1268]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x22
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x126c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x126c]
lea eax, [ebp - 0x138]
mov edx, 0x571c50
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1270]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1270]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x6e
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1274]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1274]
lea eax, [ebp - 0x138]
mov edx, 0x571c50
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1278]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1278]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x65
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x127c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x127c]
lea eax, [ebp - 0x138]
mov edx, 0x571c50
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1280]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1280]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x78
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1284]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1284]
lea eax, [ebp - 0x138]
mov edx, 0x571c50
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1288]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1288]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x66
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x128c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x128c]
lea eax, [ebp - 0x138]
mov edx, 0x571c50
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1290]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1290]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x6f
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1294]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1294]
lea eax, [ebp - 0x138]
mov edx, 0x571c50
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1298]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1298]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x70
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x129c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x129c]
lea eax, [ebp - 0x138]
mov edx, 0x571c50
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12a0]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12a0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x79
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x12a4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12a4]
lea eax, [ebp - 0x138]
mov edx, 0x571c50
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12a8]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12a8]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x7a
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x12ac]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12ac]
lea eax, [ebp - 0x138]
mov edx, 0x571c60
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12b0]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12b0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xd2
call fcn.0055738c
pop ecx
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
jmp case.0x55d835.43
lea eax, [ebp - 0x12b4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12b4]
lea eax, [ebp - 0x138]
mov edx, 0x571c70
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12b8]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12b8]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xc9
call fcn.0055738c
pop ecx
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
jmp case.0x55d835.43
lea eax, [ebp - 0x12bc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12bc]
lea eax, [ebp - 0x138]
mov edx, 0x571c80
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12c0]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12c0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xdc
call fcn.0055738c
pop ecx
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
jmp case.0x55d835.43
lea eax, [ebp - 0x12c4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12c4]
lea eax, [ebp - 0x138]
mov edx, 0x571c98
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12c8]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12c8]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xca
call fcn.0055738c
pop ecx
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
jmp case.0x55d835.43
lea eax, [ebp - 0x12cc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12cc]
lea eax, [ebp - 0x138]
mov edx, 0x571cb0
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12d0]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12d0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xd3
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x12d4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12d4]
lea eax, [ebp - 0x138]
mov edx, 0x571cc4
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12d8]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12d8]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xd4
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x12dc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12dc]
lea eax, [ebp - 0x138]
mov edx, 0x571cd8
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12e0]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12e0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xdd
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x12e4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12e4]
lea eax, [ebp - 0x138]
mov edx, 0x571cf0
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12e8]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12e8]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xde
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x12ec]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12ec]
lea eax, [ebp - 0x138]
mov edx, 0x571d04
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12f0]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12f0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 3
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x12f4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12f4]
lea eax, [ebp - 0x138]
mov edx, 0x571d14
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x12f8]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x12f8]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x17
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x12fc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x12fc]
lea eax, [ebp - 0x138]
mov edx, 0x571d2c
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1300]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1300]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x2b
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1304]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1304]
lea eax, [ebp - 0x138]
mov edx, 0x571d44
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1308]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1308]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x2c
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x130c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x130c]
lea eax, [ebp - 0x138]
mov edx, 0x571d58
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1310]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1310]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xcb
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1314]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1314]
lea eax, [ebp - 0x138]
mov edx, 0x571d6c
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1318]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1318]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xe9
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x131c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x131c]
lea eax, [ebp - 0x138]
mov edx, 0x571d84
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1320]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1320]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xf3
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1324]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1324]
lea eax, [ebp - 0x138]
mov edx, 0x571d9c
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1328]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1328]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0xf4
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x132c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x132c]
lea eax, [ebp - 0x138]
mov edx, 0x571db0
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1330]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1330]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x67
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1334]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1334]
lea eax, [ebp - 0x138]
mov edx, 0x571dc4
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1338]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1338]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x85
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x133c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x133c]
lea eax, [ebp - 0x138]
mov edx, 0x571ddc
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1340]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1340]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x83
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1344]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1344]
lea eax, [ebp - 0x138]
mov edx, 0x571df4
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1348]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1348]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x84
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x134c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x134c]
lea eax, [ebp - 0x138]
mov edx, 0x571e08
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1350]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1350]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x5b
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1354]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1354]
lea eax, [ebp - 0x138]
mov edx, 0x571e1c
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1358]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1358]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x5c
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x135c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x135c]
lea eax, [ebp - 0x138]
mov edx, 0x571e30
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1360]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1360]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x5d
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1364]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1364]
lea eax, [ebp - 0x138]
mov edx, 0x571e48
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1368]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1368]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x5e
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x136c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x136c]
lea eax, [ebp - 0x138]
mov edx, 0x571e5c
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1370]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1370]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x5f
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1374]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1374]
lea eax, [ebp - 0x138]
mov edx, 0x571e74
call fcn.004052e4
push ebp
lea eax, [ebp - 0x1b0]
push eax
push 0
lea eax, [ebp - 0x1378]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1378]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov ecx, dword [ebp - 0x138]
mov dl, 0x60
call fcn.0055738c
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1a0]
push eax
call sub.user32.dll_GetCursorPos
lea eax, [ebp - 0x137c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x137c]
lea eax, [ebp - 0x138]
mov edx, 0x571e88
call fcn.004052e4
lea eax, [ebp - 0x1380]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1380]
call fcn.0040b6e8
mov dword [ebp - 0x198], eax
lea eax, [ebp - 0x1384]
push eax
mov ecx, 2
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1384]
call fcn.0040b6e8
mov dword [ebp - 0x194], eax
lea eax, [ebp - 0x1388]
push eax
mov ecx, 0xfffffffd
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1388]
lea edx, [ebp - 0x274]
call fcn.0040b05c
mov edx, dword [ebp - 0x274]
mov eax, 0x571924
call fcn.004055dc
mov esi, eax
test esi, esi
setg byte [ebp - 0x267]
cmp byte [ebp - 0x267], 0
je 0x565e7c
lea eax, [ebp - 0x274]
mov ecx, 3
mov edx, esi
call fcn.00405538
mov edx, dword [ebp - 0x274]
mov eax, 0x571e98
call fcn.004055dc
mov esi, eax
test esi, esi
setg byte [ebp - 0x185]
cmp byte [ebp - 0x185], 0
je 0x565eb2
lea eax, [ebp - 0x274]
mov ecx, 8
mov edx, esi
call fcn.00405538
xor eax, eax
mov dword [ebp - 0x1a8], eax
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1a4], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
lea eax, [ebp - 0x138c]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x138c]
lea edx, [ebp - 0x1a8]
call fcn.0040b73c
test al, al
je 0x56600c
lea eax, [ebp - 0x1390]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1390]
lea edx, [ebp - 0x1a4]
call fcn.0040b73c
test al, al
je 0x56600c
lea eax, [ebp - 0x1394]
push eax
mov ecx, 0xfffffffe
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x1394]
lea eax, [ebp - 0x274]
call fcn.00405070
lea eax, [ebp - 0x1398]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1398]
lea edx, [ebp - 0x1b0]
call fcn.0040b73c
test al, al
je 0x565ffa
lea eax, [ebp - 0x139c]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x139c]
lea edx, [ebp - 0x1ac]
call fcn.0040b73c
test al, al
je 0x565ffa
lea eax, [ebp - 0x13a0]
push eax
mov ecx, 0xfffffffe
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x13a0]
lea eax, [ebp - 0x274]
call fcn.00405070
jmp 0x56601c
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
jmp 0x56601c
xor eax, eax
mov dword [ebp - 0x1a8], eax
xor eax, eax
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1b0]
cdq
xor eax, edx
sub eax, edx
add eax, dword [ebp - 0x1a8]
inc eax
call fcn.004036f0
mov ecx, eax
mov eax, dword [ebp - 0x1b0]
cdq
xor eax, edx
sub eax, edx
mov edx, dword [ebp - 0x198]
sub edx, eax
add ecx, edx
mov dword [ebp - 0x198], ecx
mov eax, dword [ebp - 0x1ac]
cdq
xor eax, edx
sub eax, edx
add eax, dword [ebp - 0x1a4]
inc eax
call fcn.004036f0
mov ecx, eax
mov eax, dword [ebp - 0x1ac]
cdq
xor eax, edx
sub eax, edx
mov edx, dword [ebp - 0x194]
sub edx, eax
add ecx, edx
mov dword [ebp - 0x194], ecx
cmp byte [ebp - 0x185], 0
jne 0x5660b1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104674]
add dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104678]
add dword [ebp - 0x194], eax
cmp byte [ebp - 0x267], 0
jne 0x566105
xor eax, eax
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x10c]
mov ebx, dword [eax + 0x43c4]
mov eax, dword [ebp - 0x274]
call fcn.00405298
test eax, eax
jle 0x5660f8
lea edx, [ebp - 0x278]
mov eax, dword [ebp - 0x274]
call fcn.0040b73c
test al, al
je 0x5660f8
mov ebx, dword [ebp - 0x278]
lea eax, [ebp - 0x198]
push eax
push ebx
call sub.user32.dll_ClientToScreen
mov eax, dword [ebp - 0x160]
mov eax, dword [eax]
sub eax, 0x1c
je 0x56611c
sub eax, 0x65
je 0x566140
jmp case.0x55d835.43
mov eax, dword [ebp - 0x194]
push eax
mov eax, dword [ebp - 0x198]
push eax
call sub.user32.dll_SetCursorPos
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x12d], al
jmp case.0x55d835.43
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x1a0]
call fcn.005592cc
mov byte [ebp - 0x12d], al
jmp case.0x55d835.43
lea eax, [ebp - 0x13a4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x13a4]
lea eax, [ebp - 0x138]
mov edx, 0x571eac
call fcn.004052e4
lea eax, [ebp - 0x13a8]
push eax
mov ecx, 2
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x13a8]
call fcn.0040b6e8
push eax
lea eax, [ebp - 0x13ac]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x13ac]
call fcn.0040b6e8
pop edx
call fcn.004084a0
mov esi, eax
lea eax, [ebp - 0x13b0]
push eax
mov ecx, 4
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x13b0]
call fcn.0040b6e8
push eax
lea eax, [ebp - 0x13b4]
push eax
mov ecx, 3
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x13b4]
call fcn.0040b6e8
pop edx
call fcn.004084a0
mov dword [ebp - 0x178], eax
mov dx, 0x201
mov ax, 1
call fcn.004084a0
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
push 0x20
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_PostMessageA
push esi
push 1
push 0x201
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_PostMessageA
push ebp
lea edx, [ebp - 0x13b8]
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0x470]
call fcn.004631f4
mov eax, dword [ebp - 0x13b8]
call fcn.0055c150
pop ecx
mov eax, dword [ebp - 0x178]
push eax
push 1
push 0x200
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_PostMessageA
push ebp
lea edx, [ebp - 0x13bc]
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0x470]
call fcn.004631f4
mov eax, dword [ebp - 0x13bc]
call fcn.0055c150
pop ecx
lea eax, [ebp - 0x13c0]
push eax
mov ecx, 5
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x13c0]
lea edx, [ebp - 0x124]
call fcn.0040b05c
cmp dword [ebp - 0x124], 0
je 0x566390
mov eax, dword [ebp - 0x124]
mov edx, 0x571ebc
call fcn.004053e4
je 0x566390
mov eax, dword [ebp - 0x124]
call fcn.00405298
mov ebx, eax
test ebx, ebx
jle 0x566390
mov dword [ebp - 0x14c], 1
push 0
mov eax, dword [ebp - 0x124]
mov edx, dword [ebp - 0x14c]
movzx eax, byte [eax + edx - 1]
push eax
push 0x102
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_PostMessageA
inc dword [ebp - 0x14c]
dec ebx
jne 0x56635c
cmp dword [ebp - 0x124], 0
je 0x5663b4
push 0
push 0xd
push 0x102
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_PostMessageA
push ebp
lea edx, [ebp - 0x13c4]
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0x928]
call fcn.004631f4
mov eax, dword [ebp - 0x13c4]
call fcn.0055c150
pop ecx
mov eax, dword [ebp - 0x178]
push eax
push 0
push 0x202
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_PostMessageA
jmp case.0x55d835.43
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x566cfa
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x23
je 0x56644b
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x24
jne 0x566cfa
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x13c8]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x13c8]
mov eax, dword [ebp - 0x120]
mov edx, 0x5715f8
call fcn.004052e4
lea eax, [ebp - 0x13cc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x13cc]
call fcn.0040b75c
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], edx
lea eax, [ebp - 0x13d4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x13d4]
lea edx, [ebp - 0x13d0]
call fcn.0040b05c
mov edx, dword [ebp - 0x13d0]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
cmp byte [eax], 0x73
jne 0x5665a4
lea eax, [ebp - 0x13dc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x13dc]
lea edx, [ebp - 0x13d8]
call fcn.0040b05c
mov eax, dword [ebp - 0x13d8]
mov edx, 1
call fcn.0040b724
mov dword [ebp - 8], eax
mov dword [ebp - 0x278], 4
jmp 0x5665ae
mov dword [ebp - 0x278], 3
lea eax, [ebp - 0x13e0]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x278]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x13e0]
lea edx, [ebp - 0x274]
call fcn.0040b05c
lea eax, [ebp - 0x13e8]
push eax
mov ecx, dword [ebp - 0x278]
inc ecx
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x13e8]
lea edx, [ebp - 0x13e4]
call fcn.0040b05c
mov edx, dword [ebp - 0x13e4]
mov eax, dword [ebp - 0x10c]
add eax, 0x4460
call fcn.0040502c
mov byte [ebp - 0x265], 0
cmp dword [ebp - 0x274], 0
je 0x5666fd
lea edx, [ebp - 0x278]
mov eax, dword [ebp - 0x274]
call fcn.0040b73c
test al, al
je 0x566688
lea eax, [ebp - 0x28c]
push eax
mov eax, dword [ebp - 0x278]
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 0x28c]
push eax
push 0
push 0x638
call sub.KERNEL32.DLL_OpenProcess
mov dword [ebp - 0x288], eax
mov byte [ebp - 0x265], 1
jmp 0x566721
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x4460], 0
jne 0x5666e7
mov eax, dword [ebp - 0x10c]
add eax, 0x4460
mov edx, dword [ebp - 0x274]
call fcn.0040502c
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0
jmp 0x566721
mov dword [ebp - 0x240], 0xfffffffc
mov dword [ebp - 0x23c], 0xffffffff
jmp 0x566721
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 0x209], 0
mov word [ebp - 0x20c], 0
xor eax, eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], eax
xor eax, eax
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
xor eax, eax
mov dword [ebp - 0x218], eax
xor eax, eax
mov dword [ebp - 0x220], eax
mov word [ebp - 0x21c], ax
mov byte [ebp - 0x211], 0
mov byte [ebp - 0x580], 0
cmp dword [ebp - 0x23c], 0
jne 0x566798
cmp dword [ebp - 0x240], 0
jb 0x566c34
jmp 0x56679e
jl 0x566c34
xor eax, eax
push ebp
push 0x566c16
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x104534], edx
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
movzx eax, byte [eax]
add eax, 0xffffff9e
cmp eax, 0x15
ja case.0x5667db.98
mov al, byte [eax + 0x5667e2]
jmp dword [eax*4 + 0x5667f8]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x209]
mov eax, dword [ebp - 0x288]
call fcn.0052e5e4
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
lea edx, [ebp - 0x138]
xor eax, eax
mov al, byte [ebp - 0x209]
call fcn.0040b57c
jmp 0x566c0c
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 2
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x20c]
mov eax, dword [ebp - 0x288]
call fcn.0052e5e4
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
lea edx, [ebp - 0x138]
movzx eax, word [ebp - 0x20c]
call fcn.0040b57c
jmp 0x566c0c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
call fcn.00405298
dec eax
jle 0x566973
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
cmp byte [eax + 1], 0x6f
jne 0x566973
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x228]
mov eax, dword [ebp - 0x288]
call fcn.0052e5e4
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
fld qword [ebp - 0x228]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x138]
call fcn.0040d188
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x210]
mov eax, dword [ebp - 0x288]
call fcn.0052e5e4
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
mov eax, dword [ebp - 0x210]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x138]
call fcn.0040b668
jmp 0x566c0c
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x230]
mov eax, dword [ebp - 0x288]
call fcn.0052e5e4
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
lea eax, [ebp - 0x138]
call fcn.0040b668
jmp 0x566c0c
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x218]
mov eax, dword [ebp - 0x288]
call fcn.0052e5e4
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
fld dword [ebp - 0x218]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x138]
call fcn.0040d188
jmp 0x566c0c
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 6
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x288]
call fcn.0052e5e4
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
lea eax, [ebp - 0x220]
call fcn.00403f74
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x138]
call fcn.0040d188
jmp 0x566c0c
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x211]
mov eax, dword [ebp - 0x288]
call fcn.0052e5e4
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
lea eax, [ebp - 0x138]
mov dl, byte [ebp - 0x211]
call fcn.004051c0
jmp 0x566c0c
cmp dword [ebp - 8], 0xff
jbe 0x566b94
mov dword [ebp - 8], 0xff
push dword [ebp - 0x234]
push dword [ebp - 0x238]
mov eax, dword [ebp - 8]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x680]
mov eax, dword [ebp - 0x288]
call fcn.0052e5e4
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
lea eax, [ebp - 0x138]
lea edx, [ebp - 0x680]
call fcn.004051d0
jmp 0x566c0c
mov dword [ebp - 0x240], 0xfffffffe
mov dword [ebp - 0x23c], 0xffffffff
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x566c34
cmp byte [ebp - 0x265], 0
je 0x566c49
mov eax, dword [ebp - 0x288]
push eax
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [ebp - 0x240]
sub eax, 0xfffffffc
je 0x566c95
dec eax
je 0x566c83
dec eax
je 0x566c71
sub eax, 2
jne 0x566ca5
lea eax, [ebp - 0x138]
mov edx, 0x571984
call fcn.00405070
jmp 0x566ca5
lea eax, [ebp - 0x138]
mov edx, 0x571ec8
call fcn.00405070
jmp 0x566ca5
lea eax, [ebp - 0x138]
mov edx, 0x571ed4
call fcn.00405070
jmp 0x566ca5
lea eax, [ebp - 0x138]
mov edx, 0x571ee0
call fcn.00405070
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.00404fd8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp case.0x55d835.43
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x566d77
push 0x571614
lea edx, [ebp - 0x13f0]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x13f0]
lea edx, [ebp - 0x13f4]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1ba
call fcn.0040ba78
push dword [ebp - 0x13f4]
push 0x571688
lea eax, [ebp - 0x13ec]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x13ec]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x566dce
push 0x571614
lea edx, [ebp - 0x13fc]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x13fc]
push 0x571ad0
push 0x571688
lea eax, [ebp - 0x13f8]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x13f8]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x138]
call fcn.00405298
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jbe 0x566e80
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x22
jne 0x566e80
mov eax, dword [ebp - 0x138]
mov edx, dword [ebp - 4]
cmp byte [eax + edx - 1], 0x22
jne 0x566e80
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 4]
sub ecx, 2
mov edx, 2
mov eax, dword [ebp - 0x138]
call fcn.004054f8
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x566eea
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x23
je 0x566ea6
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x24
jne 0x566eea
lea eax, [ebp - 0x1400]
push eax
lea eax, [ebp - 0x1404]
mov ecx, dword [ebp - 0x138]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1404]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1400]
lea eax, [ebp - 0x138]
call fcn.00405070
lea eax, [ebp - 0x1408]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1408]
mov eax, dword [ebp - 0x120]
mov edx, 0x5715f8
call fcn.004052e4
lea eax, [ebp - 0x140c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x140c]
call fcn.0040b75c
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], edx
lea eax, [ebp - 0x1414]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1414]
lea edx, [ebp - 0x1410]
call fcn.0040b05c
mov edx, dword [ebp - 0x1410]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.0040502c
lea eax, [ebp - 0x274]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
lea eax, [ebp - 0x141c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 4
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x141c]
lea edx, [ebp - 0x1418]
call fcn.0040b05c
mov edx, dword [ebp - 0x1418]
mov eax, dword [ebp - 0x10c]
add eax, 0x4460
call fcn.0040502c
lea eax, [ebp - 0x1420]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 5
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x1420]
mov eax, dword [ebp - 0x10c]
add eax, 0x4464
call fcn.0040502c
cmp dword [ebp - 0x274], 0
je 0x56729d
mov eax, dword [ebp - 0x274]
cmp byte [eax], 0x23
je 0x567251
mov eax, dword [ebp - 0x274]
cmp byte [eax], 0x24
je 0x567251
lea eax, [ebp - 0x1424]
push eax
lea eax, [ebp - 0x1428]
mov ecx, dword [ebp - 0x274]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1428]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1424]
lea eax, [ebp - 0x274]
call fcn.00405070
lea edx, [ebp - 0x278]
mov eax, dword [ebp - 0x274]
call fcn.0040b73c
test al, al
je 0x567205
lea eax, [ebp - 0x28c]
push eax
mov eax, dword [ebp - 0x278]
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 0x28c]
push eax
push 0
push 0x638
call sub.KERNEL32.DLL_OpenProcess
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x4460], 0
je 0x5672c1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
cmp byte [eax], 0x23
je 0x5671d4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
cmp byte [eax], 0x24
je 0x5671d4
lea eax, [ebp - 0x1430]
push eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x4460]
lea eax, [ebp - 0x1434]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1434]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1430]
lea edx, [ebp - 0x142c]
call fcn.0040b05c
mov edx, dword [ebp - 0x142c]
mov eax, dword [ebp - 0x10c]
add eax, 0x4460
call fcn.0040502c
lea eax, [ebp - 0x1438]
push eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x4464]
lea eax, [ebp - 0x143c]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x143c]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1438]
mov eax, dword [ebp - 0x10c]
add eax, 0x4464
call fcn.0040502c
jmp 0x5672c1
mov eax, dword [ebp - 0x10c]
add eax, 0x4464
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x4460]
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
add eax, 0x4460
call fcn.00404fd8
jmp 0x5672c1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x10c]
add eax, 0x4460
mov edx, dword [ebp - 0x274]
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
add eax, 0x4464
call fcn.00404fd8
jmp 0x5672c1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x10c]
add eax, 0x4460
call fcn.00404fd8
mov eax, dword [ebp - 0x10c]
add eax, 0x4464
mov edx, dword [ebp - 0x274]
call fcn.0040502c
jmp 0x5672c1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x104534], edx
xor eax, eax
push ebp
push 0x5677b1
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
movzx eax, byte [eax]
add eax, 0xffffff9e
cmp eax, 0x15
ja case.0x5672fe.98
mov al, byte [eax + 0x567305]
jmp dword [eax*4 + 0x56731b]
mov eax, dword [ebp - 0x138]
call fcn.0040b6e8
mov byte [ebp - 0x209], al
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x209]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
jmp case.0x5672fe.98
mov eax, dword [ebp - 0x138]
call fcn.0040b6e8
mov word [ebp - 0x20c], ax
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 2
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x20c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
jmp case.0x5672fe.98
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
call fcn.00405298
dec eax
jle 0x5674b2
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
cmp byte [eax + 1], 0x6f
jne 0x5674b2
mov eax, dword [ebp - 0x138]
call fcn.0040d1e8
fstp qword [ebp - 0x228]
wait
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x228]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
mov eax, dword [ebp - 0x138]
call fcn.0040b6e8
mov dword [ebp - 0x210], eax
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x210]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
jmp case.0x5672fe.98
mov eax, dword [ebp - 0x138]
call fcn.0040b75c
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], edx
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x230]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
jmp case.0x5672fe.98
mov eax, dword [ebp - 0x138]
call fcn.0040d1e8
fstp dword [ebp - 0x218]
wait
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x218]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
jmp case.0x5672fe.98
mov eax, dword [ebp - 0x138]
call fcn.0040d1e8
lea eax, [ebp - 0x220]
call fcn.00403fa4
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 6
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
jmp case.0x5672fe.98
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x211], al
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x211]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
jmp case.0x5672fe.98
mov eax, dword [ebp - 0x138]
call fcn.00405298
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xff
jle 0x567712
mov dword [ebp - 0x1f4], 0xff
lea eax, [ebp - 0x1440]
push eax
mov ecx, dword [ebp - 0x1f4]
mov edx, 1
mov eax, dword [ebp - 0x138]
call fcn.004054f8
mov edx, dword [ebp - 0x1440]
lea eax, [ebp - 0x580]
mov ecx, 0xff
call fcn.00405274
push dword [ebp - 0x234]
push dword [ebp - 0x238]
xor eax, eax
mov al, byte [ebp - 0x580]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x57f]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
mov eax, dword [0x5903e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5677cf
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x4464], 0
je case.0x55d835.43
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x4464]
call fcn.00405070
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
lea eax, [ebp - 0x138]
call fcn.0040b668
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.00404fd8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp case.0x55d835.43
xor eax, eax
mov dword [ebp - 0x14c], eax
jmp 0x5678e0
mov eax, dword [ebp - 0x14c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 0x10c]
cmp eax, dword [edx + 0x105bd4]
je 0x5678f6
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x5678b7
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jle 0x5679bf
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x567960
lea edx, [ebp - 0x1444]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1d2
call fcn.0040ba78
lea eax, [ebp - 0x1444]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x1444]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x567978
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571ee4
mov ecx, 0xa
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
lea eax, [ebp - 0x1448]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1448]
mov eax, dword [ebp - 0x120]
mov edx, 0x571f14
call fcn.004052e4
lea eax, [ebp - 0x144c]
push eax
lea eax, [ebp - 0x1450]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1450]
lea ecx, [ebp - 0x15c]
lea edx, [ebp - 0x134]
call fcn.0052d600
mov eax, dword [ebp - 0x144c]
call fcn.0040b6e8
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x134], 0
je 0x567b14
push 0x571614
lea edx, [ebp - 0x1458]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x1458]
push 0x571f24
mov eax, dword [0x5905e4]
mov edx, dword [ebp - 0x134]
push dword [eax + edx*4 + 0x18]
push 0x571f30
lea edx, [ebp - 0x145c]
mov eax, dword [ebp - 0x15c]
call fcn.0040b57c
push dword [ebp - 0x145c]
push 0x571f40
lea eax, [ebp - 0x1454]
mov edx, 7
call fcn.00405358
mov edx, dword [ebp - 0x1454]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
inc eax
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x54
mov ecx, 1
mov edx, dword [0x52f31c]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x105bd4]
mov dword [edx + eax*4 - 0xc], ecx
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
mov ecx, dword [ebp - 0x168]
mov dword [edx + eax*4 - 4], ecx
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
inc eax
mov dword [ebp - 0x14c], eax
xor ebx, ebx
jmp 0x567c49
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x80]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [edx + ecx*4]
call fcn.00405070
lea eax, [ebp - 0x1460]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x1460]
lea eax, [ebp - 0x144]
call fcn.00405070
mov eax, dword [ebp - 0x144]
mov edx, 0x5716f8
call fcn.004053e4
jne 0x567c06
inc ebx
mov eax, dword [ebp - 0x144]
mov edx, 0x571728
call fcn.004053e4
jne 0x567c19
dec ebx
test ebx, ebx
jge 0x567c43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
mov ecx, dword [ebp - 0x14c]
mov dword [edx + eax*4 - 8], ecx
jmp 0x567c66
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x567ba8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jne 0x567d35
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x567cd3
lea edx, [ebp - 0x1464]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1d3
call fcn.0040ba78
lea eax, [ebp - 0x1464]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x1464]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x567cee
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571f48
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
cmp dword [edx + eax*4 - 4], 0
jg case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
mov eax, dword [edx + eax*4 - 8]
dec eax
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bd4], eax
jmp case.0x55d835.43
xor eax, eax
mov dword [ebp - 0x14c], eax
jmp 0x567dbe
mov eax, dword [ebp - 0x14c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [ebp - 0x10c]
cmp eax, dword [edx + 0x105bd4]
je 0x567dd4
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x567d94
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x567e9d
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x567e3e
lea edx, [ebp - 0x1468]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1d4
call fcn.0040ba78
lea eax, [ebp - 0x1468]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x1468]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x567e56
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571f84
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x14c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
dec dword [edx + eax*4 + 8]
mov eax, dword [ebp - 0x14c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
cmp dword [edx + eax*4 + 8], 0
jle 0x567ef2
mov eax, dword [ebp - 0x14c]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x54]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bd4], eax
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x54]
call fcn.004063e0
dec eax
push eax
mov eax, dword [ebp - 0x10c]
add eax, 0x54
mov ecx, 1
mov edx, dword [0x52f31c]
call fcn.0040659c
add esp, 4
jmp case.0x55d835.43
lea eax, [ebp - 0x124]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x10c]
call fcn.00553c54
jmp case.0x55d835.43
lea eax, [ebp - 0x146c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x146c]
mov eax, dword [ebp - 0x120]
call fcn.0040502c
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
test eax, eax
jle 0x56809a
mov byte [ebp - 0x12d], 0
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
cmp byte [eax], 0x7b
jne 0x568018
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
cmp byte [edx + eax - 1], 0x7d
jne 0x568018
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, 0x571fb8
call fcn.0043cfd0
test eax, eax
jne 0x568018
mov eax, dword [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
mov ecx, eax
sub ecx, 2
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, 2
call fcn.004054f8
mov byte [ebp - 0x12d], 1
jmp 0x56801f
mov byte [ebp - 0x12d], 0
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x120]
mov edx, 0x571fc4
call fcn.004052e4
mov dword [ebp - 0x134], 1
lea eax, [ebp - 0x1470]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1470]
lea edx, [ebp - 0x124]
call fcn.0040b05c
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x134]
add ecx, 2
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
jmp 0x568caf
lea eax, [ebp - 0x124]
call fcn.00404fd8
jmp 0x568caf
xor ebx, ebx
mov eax, dword [ebp - 0x124]
cmp byte [eax], 0x7b
jne 0x5680fd
mov eax, dword [ebp - 0x124]
call fcn.00405298
mov edx, dword [ebp - 0x124]
cmp byte [edx + eax - 1], 0x7d
jne 0x5680fd
lea eax, [ebp - 0x124]
push eax
mov eax, dword [ebp - 0x124]
call fcn.00405298
mov ecx, eax
sub ecx, 2
mov edx, 2
mov eax, dword [ebp - 0x124]
call fcn.004054f8
mov byte [ebp - 0x12d], 1
cmp byte [ebp - 0x12d], 0
je 0x56811b
xor edx, edx
mov eax, dword [ebp - 0x124]
call fcn.0040b724
mov dword [ebp - 0x13c], eax
jmp 0x568123
xor eax, eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0xa
jge 0x56819a
xor eax, eax
mov dword [ebp - 0x14c], eax
mov eax, dword [0x5900d0]
mov dword [ebp - 0x2b0], eax
mov eax, dword [0x5904d4]
mov dword [ebp - 0x2b4], eax
lea edx, [ebp - 0x1474]
mov eax, dword [ebp - 0x2b0]
mov eax, dword [eax]
call fcn.0040b05c
mov edx, dword [ebp - 0x1474]
mov eax, dword [ebp - 0x124]
call fcn.0040afb0
test eax, eax
jne 0x56817e
mov eax, dword [ebp - 0x2b4]
xor ebx, ebx
mov bl, byte [eax]
jmp 0x56819a
inc dword [ebp - 0x14c]
inc dword [ebp - 0x2b4]
add dword [ebp - 0x2b0], 4
cmp dword [ebp - 0x14c], 0x66
jne 0x56814a
test ebx, ebx
jne 0x5681ac
mov ebx, dword [ebp - 0x13c]
xor eax, eax
mov dword [ebp - 0x14c], eax
test ebx, ebx
je 0x5689d8
mov eax, dword [ebp - 0x14c]
sub eax, 0x1d
jb 0x5681c7
add eax, 0xffffffdc
sub eax, 0x15
jae 0x5681cb
mov esi, ebx
jmp 0x5681d4
push ebx
call sub.user32.dll_VkKeyScanA
movsx esi, ax
cmp esi, 0xffffffff
jne 0x5681db
mov esi, ebx
push 0
mov eax, esi
and eax, 0xff
push eax
call sub.user32.dll_MapVirtualKeyA
mov dword [ebp - 0x11c], eax
shl dword [ebp - 0x11c], 0x10
mov eax, dword [ebp - 0x160]
mov eax, dword [eax]
cmp eax, 0x65
jg 0x568224
je 0x56886b
sub eax, 0x12
je 0x568822
sub eax, 0x45
je 0x568708
dec eax
je 0x568239
jmp 0x5688fc
sub eax, 0x75
je 0x568795
dec eax
je 0x56847b
jmp 0x5688fc
mov eax, dword [ebp - 0x11c]
inc eax
push eax
push esi
push pe_nt_image_headers32
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_PostMessageA
mov dword [ebp - 0x1e0], 1
cmp dword [ebp - 0x1e0], 0xa
jg 0x5682c4
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
cmp dword [eax + edx*4 + 0x4404], 0
je 0x5682c4
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
cmp byte [eax + 0x41], 0
je 0x5682b5
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4 + 0x4404]
call fcn.004112e8
jmp 0x5682c4
inc dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e0], 0xa
jle 0x56826c
cmp dword [ebp - 0x1e0], 0xa
jg 0x568445
mov cl, 1
mov dl, 1
mov eax, dword [0x52efa0]
call fcn.00425a24
mov edx, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x1e0]
mov dword [edx + ecx*4 + 0x4404], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov byte [eax + 0xf], 0
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov byte [eax + 0x41], 0
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4 + 0x4404]
mov edx, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [edx + ecx*4 + 0x4404]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x43c4]
mov dword [eax + 0x44], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov dword [eax + 0x48], esi
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
xor edx, edx
mov dword [eax + 0x4c], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov byte [eax + 0x60], 0
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov edx, dword [ebp - 0x11c]
inc edx
or edx, 2
mov dword [eax + 0x50], edx
lea eax, [ebp - 0x1478]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1478]
lea edx, [ebp - 0x13c]
call fcn.0040b73c
test al, al
jne 0x56840c
xor eax, eax
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov edx, dword [ebp - 0x13c]
mov dword [eax + 0x54], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
call fcn.00425e24
jmp 0x5688fc
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571fcc
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp 0x5688fc
push 0
push ebx
call sub.user32.dll_MapVirtualKeyA
mov dword [ebp - 0x11c], eax
shl dword [ebp - 0x11c], 0x10
push 2
push ebx
call sub.user32.dll_MapVirtualKeyA
mov esi, eax
and esi, 0xff
mov eax, dword [ebp - 0x11c]
inc eax
push eax
push ebx
push pe_nt_image_headers32
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_SendMessageA
test esi, esi
je 0x5684e8
mov eax, dword [ebp - 0x11c]
add eax, 0xc0000001
push eax
push esi
push 0x102
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x1e0], 1
cmp dword [ebp - 0x1e0], 0xa
jg 0x568553
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
cmp dword [eax + edx*4 + 0x4404], 0
je 0x568553
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
cmp byte [eax + 0x41], 0
je 0x568544
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4 + 0x4404]
call fcn.004112e8
jmp 0x568553
inc dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e0], 0xa
jle 0x5684fb
cmp dword [ebp - 0x1e0], 0xa
jg 0x5686d2
mov cl, 1
mov dl, 1
mov eax, dword [0x52efa0]
call fcn.00425a24
mov edx, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x1e0]
mov dword [edx + ecx*4 + 0x4404], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov byte [eax + 0xf], 0
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov byte [eax + 0x41], 0
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4 + 0x4404]
mov edx, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [edx + ecx*4 + 0x4404]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x43c4]
mov dword [eax + 0x44], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov dword [eax + 0x48], ebx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov dword [eax + 0x4c], esi
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov byte [eax + 0x60], 1
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov edx, dword [ebp - 0x11c]
inc edx
or edx, 2
mov dword [eax + 0x50], edx
lea eax, [ebp - 0x147c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x147c]
lea edx, [ebp - 0x13c]
call fcn.0040b73c
test al, al
jne 0x568699
xor eax, eax
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov edx, dword [ebp - 0x13c]
mov dword [eax + 0x54], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
call fcn.00425e24
jmp 0x5688fc
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571fcc
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp 0x5688fc
mov dword [ebp - 0x1e0], 1
cmp dword [ebp - 0x1e0], 0xa
jg 0x5688fc
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
cmp dword [eax + edx*4 + 0x4404], 0
je 0x568781
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
cmp esi, dword [eax + 0x48]
jne 0x568781
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov byte [eax + 0x40], 1
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4 + 0x4404]
call fcn.004112e8
jmp 0x5688fc
inc dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e0], 0xa
jle 0x56871f
jmp 0x5688fc
mov dword [ebp - 0x1e0], 1
cmp dword [ebp - 0x1e0], 0xa
jg 0x5688fc
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
cmp dword [eax + edx*4 + 0x4404], 0
je 0x56880e
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
cmp ebx, dword [eax + 0x48]
jne 0x56880e
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x4404]
mov byte [eax + 0x40], 1
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4 + 0x4404]
call fcn.004112e8
jmp 0x5688fc
inc dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e0], 0xa
jle 0x5687ac
jmp 0x5688fc
mov eax, dword [ebp - 0x11c]
inc eax
push eax
push esi
push pe_nt_image_headers32
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_PostMessageA
mov eax, dword [ebp - 0x11c]
add eax, 0xc0000001
push eax
push esi
push 0x101
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_PostMessageA
jmp 0x5688fc
push 0
push ebx
call sub.user32.dll_MapVirtualKeyA
mov dword [ebp - 0x11c], eax
shl dword [ebp - 0x11c], 0x10
mov eax, dword [ebp - 0x11c]
inc eax
push eax
push ebx
push pe_nt_image_headers32
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_SendMessageA
push 2
push ebx
call sub.user32.dll_MapVirtualKeyA
mov esi, eax
and esi, 0xff
test esi, esi
je 0x5688d8
mov eax, dword [ebp - 0x11c]
add eax, 0xc0000001
push eax
push esi
push 0x102
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 0x11c]
add eax, 0xc0000001
push eax
push ebx
push 0x101
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_SendMessageA
cmp dword [ebp - 0x138], 0
jne 0x5689a5
lea eax, [ebp - 0x1480]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
cmp dword [ebp - 0x1480], 0
je 0x5689a5
xor eax, eax
push ebp
push 0x568975
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1484]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1484]
call fcn.0040b6e8
mov ebx, eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x568982
test ebx, ebx
jl 0x5689a5
push ebp
lea edx, [ebp - 0x1488]
mov eax, ebx
call fcn.0040b57c
mov eax, dword [ebp - 0x1488]
call fcn.0055c150
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x148c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x148c]
mov eax, dword [ebp - 0x120]
call fcn.0040502c
jmp 0x568c7e
lea eax, [ebp - 0x1490]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1490]
mov eax, dword [ebp - 0x120]
call fcn.0040502c
mov byte [ebp - 0x265], 0
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
mov ebx, eax
test ebx, ebx
jle 0x568c61
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14c]
mov al, byte [eax + edx - 1]
push eax
call sub.user32.dll_VkKeyScanA
movsx esi, ax
cmp esi, 0xffffffff
jne 0x568aab
mov al, byte [ebp - 0x265]
xor al, 1
test al, al
je 0x568a75
push 0
push 0
call sub.user32.dll_ActivateKeyboardLayout
mov esi, eax
mov al, byte [ebp - 0x265]
xor al, 1
mov byte [ebp - 0x265], al
jmp 0x568a8e
push 0
push 0
call sub.user32.dll_ActivateKeyboardLayout
mov esi, eax
mov al, byte [ebp - 0x265]
xor al, 1
mov byte [ebp - 0x265], al
test esi, esi
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14c]
mov al, byte [eax + edx - 1]
push eax
call sub.user32.dll_VkKeyScanA
movsx esi, ax
push 0
mov eax, esi
and eax, 0xff
push eax
call sub.user32.dll_MapVirtualKeyA
mov dword [ebp - 0x11c], eax
shl dword [ebp - 0x11c], 0x10
mov eax, esi
shr eax, 8
test eax, eax
jle 0x568b3a
mov eax, esi
shr eax, 8
and eax, 1
dec eax
jne 0x568af6
push 0
push 0
push 0
push 0xa1
call sub.user32.dll_MapVirtualKeyA
push eax
push 0xa1
call sub.user32.dll_keybd_event
mov eax, esi
shr eax, 8
and eax, 2
cmp eax, 2
jne 0x568b18
push 0
push 0
push 0
push 0x11
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x11
call sub.user32.dll_keybd_event
mov eax, esi
shr eax, 8
and eax, 4
cmp eax, 4
jne 0x568b3a
push 0
push 0
push 0
push 0x12
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x12
call sub.user32.dll_keybd_event
mov eax, dword [ebp - 0x11c]
inc eax
push eax
push esi
push pe_nt_image_headers32
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 0x11c]
add eax, 0xc0000001
push eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14c]
movzx eax, byte [eax + edx - 1]
push eax
push 0x102
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 0x11c]
add eax, 0xc0000001
push eax
push esi
push 0x101
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_SendMessageA
mov eax, esi
shr eax, 8
test eax, eax
jle 0x568c54
mov eax, esi
shr eax, 8
and eax, 1
dec eax
jne 0x568c12
push 0
push 3
push 0
push 0xa1
call sub.user32.dll_MapVirtualKeyA
push eax
push 0xa1
call sub.user32.dll_keybd_event
push 0
push 0
push 0
push 0x10
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x10
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x10
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x10
call sub.user32.dll_keybd_event
mov eax, esi
shr eax, 8
and eax, 2
cmp eax, 2
jne 0x568c34
push 0
push 2
push 0
push 0x11
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x11
call sub.user32.dll_keybd_event
shr esi, 8
and esi, 4
cmp esi, 4
jne 0x568c54
push 0
push 2
push 0
push 0x12
call sub.user32.dll_MapVirtualKeyA
push eax
push 0x12
call sub.user32.dll_keybd_event
inc dword [ebp - 0x14c]
dec ebx
jne 0x568a2e
cmp byte [ebp - 0x265], 0
je 0x568c73
push 0
push 0
call sub.user32.dll_ActivateKeyboardLayout
mov eax, dword [ebp - 0x120]
call fcn.00404fd8
lea eax, [ebp - 0x1494]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1494]
lea edx, [ebp - 0x124]
call fcn.0040b05c
cmp dword [ebp - 0x124], 0
jne 0x5680aa
jmp case.0x55d835.43
push 1
call sub.KERNEL32.DLL_Sleep_1
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov ecx, 0x571ffc
mov edx, 0x571fb8
call fcn.00410c50
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x1498]
push eax
mov ecx, 0x572008
mov edx, 0x572014
mov eax, dword [ebp - 0x138]
call fcn.00410c50
mov edx, dword [ebp - 0x1498]
lea eax, [ebp - 0x138]
call fcn.00405070
lea eax, [ebp - 0x149c]
push eax
or ecx, 0xffffffff
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x149c]
lea eax, [ebp - 0x138]
call fcn.00405070
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x14a0]
push eax
mov ecx, 0x571fb8
mov edx, 0x571ffc
mov eax, dword [ebp - 0x138]
call fcn.00410c50
mov edx, dword [ebp - 0x14a0]
lea eax, [ebp - 0x138]
call fcn.00405070
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x14a4]
push eax
mov ecx, 0x572014
mov edx, 0x572008
mov eax, dword [ebp - 0x138]
call fcn.00410c50
mov edx, dword [ebp - 0x14a4]
lea eax, [ebp - 0x138]
call fcn.00405070
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43d8]
push eax
push 0
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x104884]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov edx, dword [ebp - 0x138]
call fcn.004ec2b4
jmp case.0x55d835.43
push 1
call sub.KERNEL32.DLL_Sleep_1
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov ecx, 0x571ffc
mov edx, 0x571fb8
call fcn.00410c50
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x14a8]
push eax
mov ecx, 0x572008
mov edx, 0x572014
mov eax, dword [ebp - 0x138]
call fcn.00410c50
mov edx, dword [ebp - 0x14a8]
lea eax, [ebp - 0x138]
call fcn.00405070
lea eax, [ebp - 0x14ac]
push eax
or ecx, 0xffffffff
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x14ac]
lea eax, [ebp - 0x138]
call fcn.00405070
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x14b0]
push eax
mov ecx, 0x571fb8
mov edx, 0x571ffc
mov eax, dword [ebp - 0x138]
call fcn.00410c50
mov edx, dword [ebp - 0x14b0]
lea eax, [ebp - 0x138]
call fcn.00405070
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x14b4]
push eax
mov ecx, 0x572014
mov edx, 0x572008
mov eax, dword [ebp - 0x138]
call fcn.00410c50
mov edx, dword [ebp - 0x14b4]
lea eax, [ebp - 0x138]
call fcn.00405070
mov eax, dword [ebp - 0x138]
call fcn.00405498
call fcn.0052daec
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1e0], 1
cmp dword [ebp - 0x1e0], 0xa
jg case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
cmp dword [eax + edx*4 + 0x442c], 0
je 0x568f6d
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
mov eax, dword [eax + 0x48]
cmp eax, dword [ebp - 0x13c]
jne 0x568f6d
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
mov byte [eax + 0x40], 1
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4 + 0x442c]
call fcn.004112e8
jmp case.0x55d835.43
inc dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e0], 0xa
jle 0x568f05
jmp case.0x55d835.43
push 1
call sub.KERNEL32.DLL_Sleep_1
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov ecx, 0x571ffc
mov edx, 0x571fb8
call fcn.00410c50
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x14b8]
push eax
mov ecx, 0x572008
mov edx, 0x572014
mov eax, dword [ebp - 0x138]
call fcn.00410c50
mov edx, dword [ebp - 0x14b8]
lea eax, [ebp - 0x138]
call fcn.00405070
lea eax, [ebp - 0x14bc]
push eax
or ecx, 0xffffffff
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x14bc]
lea eax, [ebp - 0x138]
call fcn.00405070
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x14c0]
push eax
mov ecx, 0x571fb8
mov edx, 0x571ffc
mov eax, dword [ebp - 0x138]
call fcn.00410c50
mov edx, dword [ebp - 0x14c0]
lea eax, [ebp - 0x138]
call fcn.00405070
mov al, byte [0x571ff0]
push eax
lea eax, [ebp - 0x14c4]
push eax
mov ecx, 0x572014
mov edx, 0x572008
mov eax, dword [ebp - 0x138]
call fcn.00410c50
mov edx, dword [ebp - 0x14c4]
lea eax, [ebp - 0x138]
call fcn.00405070
mov eax, dword [ebp - 0x138]
call fcn.00405498
call fcn.0052daec
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1e0], 1
cmp dword [ebp - 0x1e0], 0xa
jg 0x5690f2
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
cmp dword [eax + edx*4 + 0x442c], 0
je 0x5690f2
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
cmp byte [eax + 0x41], 0
je 0x5690e3
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4 + 0x442c]
call fcn.004112e8
jmp 0x5690f2
inc dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e0], 0xa
jle 0x56909a
cmp dword [ebp - 0x1e0], 0xa
jg 0x56928f
mov cl, 1
mov dl, 1
mov eax, dword [0x52f004]
call fcn.00425a24
mov edx, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x1e0]
mov dword [edx + ecx*4 + 0x442c], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
mov byte [eax + 0xf], 0
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
mov byte [eax + 0x41], 0
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4 + 0x442c]
mov edx, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [edx + ecx*4 + 0x442c]
mov dword [edx + 0x5c], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x43c4]
mov dword [eax + 0x44], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
mov edx, dword [ebp - 0x13c]
mov dword [eax + 0x48], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
add eax, 0x4c
mov edx, dword [ebp - 0x138]
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x43d8]
mov dword [eax + 0x50], edx
lea eax, [ebp - 0x14c8]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x14c8]
lea edx, [ebp - 0x13c]
call fcn.0040b73c
test al, al
jne 0x569234
xor eax, eax
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
mov edx, dword [ebp - 0x13c]
mov dword [eax + 0x58], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x104884]
mov dword [eax + 0x54], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4 + 0x442c]
call fcn.00425e24
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x571fcc
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
push 1
call sub.KERNEL32.DLL_Sleep_1
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x138]
call fcn.0057a8d4
mov dword [ebp - 0x134], eax
mov eax, dword [0x590544]
mov eax, dword [eax]
mov dword [eax + 0x34], 1
mov eax, dword [0x590544]
mov eax, dword [eax]
mov edx, 0x64
call fcn.0057a6c8
mov eax, dword [0x590504]
mov eax, dword [eax]
mov edx, dword [0x59051c]
mov edx, dword [edx]
mov dword [edx + 0xdc], eax
mov dword [edx + 0xd8], 0x525f84
mov eax, dword [0x590544]
mov eax, dword [eax]
call fcn.0057a420
jmp 0x569352
mov eax, dword [0x59051c]
mov eax, dword [eax]
call fcn.00483044
mov eax, dword [0x590544]
mov eax, dword [eax]
cmp byte [eax + 4], 2
je 0x569346
mov eax, dword [0x59051c]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xd8], edx
mov dword [eax + 0xdc], edx
jmp case.0x55d835.43
xor eax, eax
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov dword [ebp - 0x168], 0xffffffff
mov edx, dword [ebp - 0x138]
mov eax, 0x571614
call fcn.004055dc
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bdc], eax
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 0
jle 0x5693f9
lea eax, [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105bdc]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x138]
call fcn.004054f8
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, dword [ebp - 0x138]
call fcn.0040502c
lea eax, [ebp - 0x17c]
call fcn.00404fd8
mov eax, dword [ebp - 0x10c]
add eax, 0x5c
mov edx, dword [ebp - 0x138]
call fcn.0040502c
lea eax, [ebp - 0x26c]
mov edx, dword [ebp - 0x138]
call fcn.00405070
lea eax, [ebp - 0x26c]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x25
jne 0x56ae45
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x56ae45
mov eax, dword [ebp - 0x10c]
mov edi, dword [eax + 0x105bc0]
lea eax, [ebp - 0x14cc]
push eax
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ecx]
lea eax, [ebp - 0x14d0]
mov edx, 0x572020
call fcn.004052e4
mov edx, dword [ebp - 0x14d0]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x14cc]
lea edx, [ebp - 0x17c]
call fcn.0040b05c
mov edx, dword [ebp - 0x17c]
mov eax, 0x571614
call fcn.004055dc
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jle 0x569506
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x13c]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov eax, dword [0x590710]
mov eax, dword [eax]
mov edx, dword [ebp - 0x17c]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, dword [0x5901a4]
cmp eax, dword [edx]
jle 0x5697d1
lea eax, [ebp - 0x140]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
xor eax, eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 1
lea ecx, [ebp - 4]
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x10c]
call fcn.005550b4
mov dword [ebp - 4], 1
mov dword [ebp - 8], 1
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x105bdc], edx
jmp 0x5697bf
mov edx, dword [ebp - 0x140]
mov eax, 0x572030
call fcn.004055dc
mov dword [ebp - 0x158], eax
mov byte [ebp - 0x12d], 0
mov edx, dword [ebp - 0x140]
mov eax, 0x5719c4
call fcn.004055dc
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x1e4]
jle 0x5695de
mov byte [ebp - 0x12d], 1
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jle 0x5695f6
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x154], eax
jmp 0x569607
mov eax, dword [ebp - 0x140]
call fcn.00405298
mov dword [ebp - 0x154], eax
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x154]
mov edx, 1
mov eax, dword [ebp - 0x140]
call fcn.004054f8
cmp byte [ebp - 0x12d], 0
jne 0x56967d
lea eax, [ebp - 0x14d4]
push eax
mov edx, dword [ebp - 0x154]
add edx, 2
mov ecx, 1
mov eax, dword [ebp - 0x140]
call fcn.004054f8
mov eax, dword [ebp - 0x14d4]
mov edx, 0x5719c4
call fcn.004053e4
jne 0x56967d
mov ecx, dword [ebp - 0x154]
add ecx, 2
lea eax, [ebp - 0x140]
mov edx, 1
call fcn.00405538
jmp 0x5697a8
mov ecx, dword [ebp - 0x154]
inc ecx
lea eax, [ebp - 0x140]
mov edx, 1
call fcn.00405538
jmp 0x5697a8
mov edx, dword [ebp - 0x17c]
mov eax, 0x571660
call fcn.004055dc
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jle 0x5696c7
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x154], eax
jmp 0x5696d8
mov eax, dword [ebp - 0x17c]
call fcn.00405298
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x10c]
add eax, 0x105be4
push eax
mov ecx, dword [ebp - 0x154]
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov ecx, dword [ebp - 0x154]
inc ecx
lea eax, [ebp - 0x17c]
mov edx, 1
call fcn.00405538
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x26c]
call fcn.00405070
mov byte [ebp - 0x186], 0x25
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x105be4]
call fcn.00405070
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
inc dword [ebp - 8]
cmp dword [ebp - 0x17c], 0
jne 0x569699
inc dword [ebp - 4]
mov dword [ebp - 8], 1
cmp dword [ebp - 0x140], 0
jne 0x56958a
jmp 0x56ad54
mov eax, dword [ebp - 0x17c]
mov edx, 0x57203c
call fcn.004053e4
jne 0x569950
lea eax, [ebp - 0x140]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
xor eax, eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 1
lea ecx, [ebp - 4]
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x10c]
call fcn.005550b4
mov dword [ebp - 4], 1
mov dword [ebp - 8], 1
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x105bdc], edx
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x14d8]
mov ecx, dword [ebp - 0x140]
mov edx, 0x572020
call fcn.004052e4
mov edx, dword [ebp - 0x14d8]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
jmp 0x56993e
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x26c]
call fcn.00405070
mov byte [ebp - 0x186], 0x25
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x17c]
call fcn.00405070
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
inc dword [ebp - 8]
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x14dc]
mov ecx, dword [ebp - 0x140]
mov edx, 0x572020
call fcn.004052e4
mov edx, dword [ebp - 0x14dc]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
cmp dword [ebp - 0x17c], 0
jne 0x56987c
jmp 0x56ad54
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
inc edi
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
mov dword [ebp - 0x13c], eax
mov byte [ebp - 0x12d], 0
jmp 0x56999b
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
cmp byte [eax + edi - 1], 0x5b
jne 0x56999a
mov byte [ebp - 0x12d], 1
jmp 0x5699e4
inc edi
cmp edi, dword [ebp - 0x13c]
jg 0x5699e4
push edi
mov esi, 0x5715d0
lea edi, [ebp - 0xe70]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
pop edi
lea eax, [ebp - 0xe70]
mov edx, dword [0x59046c]
mov cl, 0x20
call fcn.00403c6c
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov al, byte [eax + edi - 1]
and eax, 0xff
bt dword [ebp - 0xe70], eax
jb 0x569982
cmp byte [ebp - 0x12d], 0
jne 0x569a52
jmp 0x569a08
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
cmp byte [eax + edi - 1], 0x5b
jne 0x569a07
mov byte [ebp - 0x12d], 1
jmp 0x569a52
inc edi
cmp edi, dword [ebp - 0x13c]
jg 0x569a52
mov eax, dword [0x59046c]
push edi
mov esi, eax
lea edi, [ebp - 0xe70]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
pop edi
lea eax, [ebp - 0xe70]
mov edx, 0x5715d0
mov cl, 0x20
call fcn.00403c78
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov al, byte [eax + edi - 1]
and eax, 0xff
bt dword [ebp - 0xe70], eax
jae 0x5699ef
cmp byte [ebp - 0x12d], 0
je 0x569a8f
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, 0x57204c
call fcn.004055dc
mov ecx, eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, 1
call fcn.004054f8
jmp 0x569a9f
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.00404fd8
mov eax, dword [ebp - 0x10c]
add eax, 0x105be4
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x105be0]
call fcn.0040502c
lea eax, [ebp - 0x14e0]
push eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x14e0]
lea edx, [ebp - 4]
call fcn.0040b73c
test al, al
je 0x56a288
mov byte [ebp - 0x185], 0
xor eax, eax
push ebp
push 0x569b7f
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x14e4]
push eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x14e4]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105be0], 0
je 0x569b6e
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
call fcn.0040b6e8
mov dword [ebp - 8], eax
mov byte [ebp - 0x185], 1
jmp 0x569b75
mov dword [ebp - 8], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x569b90
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, 0x57204c
call fcn.004055dc
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
push eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
mov ecx, eax
sub ecx, dword [ebp - 0x168]
inc ecx
mov edx, dword [ebp - 0x168]
inc edx
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.004054f8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
call fcn.00405298
test eax, eax
jle 0x569c2f
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
cmp byte [eax], 0x20
je 0x569c15
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
cmp byte [eax], 9
jne 0x569c2f
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, 0x25
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x270]
mov edx, dword [ebp - 0x138]
call fcn.00405070
lea eax, [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105be0]
lea eax, [ebp - 0x14e8]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x14e8]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
xor eax, eax
push ebp
push 0x569ce4
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x14ec]
push eax
lea ecx, [ebp - 0x15c]
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0x138]
call fcn.0052d600
mov edx, dword [ebp - 0x14ec]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.0040502c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x569cf8
cmp dword [ebp - 0x15c], 0
jle 0x569d17
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, dword [ebp - 0x138]
call fcn.0040502c
cmp dword [ebp - 0x134], 0
jne 0x569d37
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x105be0]
call fcn.00405070
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x105be4]
call fcn.0040502c
cmp byte [ebp - 0x185], 0
jne 0x569d70
mov edx, dword [ebp - 0x138]
mov eax, 0x572058
call fcn.004055dc
test eax, eax
jne 0x569db1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, 0x25
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp 0x56ad54
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 0
jle 0x569dd9
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
call fcn.0040b6e8
mov dword [ebp - 0x168], eax
jmp 0x569de3
mov dword [ebp - 0x168], 0xffffffff
lea eax, [ebp - 0x26c]
mov edx, dword [ebp - 0x138]
call fcn.00405070
mov eax, dword [ebp - 0x26c]
call fcn.00405298
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jle 0x56ad54
mov eax, dword [ebp - 0x26c]
mov edx, dword [ebp - 0x1e4]
cmp byte [eax + edx - 1], 0x2f
je 0x569e3b
lea eax, [ebp - 0x26c]
mov edx, 0x571638
call fcn.004052a0
inc dword [ebp - 0x1e4]
mov dword [ebp - 0x1e8], 1
lea eax, [ebp - 0x138]
call fcn.00404fd8
mov dword [ebp - 8], 1
mov byte [ebp - 0x265], 0
mov edi, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x168], 0
jl 0x569f02
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov eax, dword [eax + edx*4 + 0x100]
call fcn.004063e0
cdq
push edx
push eax
mov eax, dword [ebp - 4]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x569ebc
cmp eax, dword [esp]
pop edx
pop eax
jbe 0x569f73
jmp 0x569ec4
pop edx
pop eax
jle 0x569f73
mov eax, dword [ebp - 4]
push eax
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
lea eax, [eax + edx*4 + 0x100]
mov ecx, 1
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 4
jmp 0x569f73
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
cdq
push edx
push eax
mov eax, dword [ebp - 4]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x569f3b
cmp eax, dword [esp]
pop edx
pop eax
jbe 0x569f73
jmp 0x569f3f
pop edx
pop eax
jle 0x569f73
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 1
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x1e4]
jg 0x56ad54
mov eax, dword [ebp - 0x26c]
mov edx, dword [ebp - 0x1e8]
mov al, byte [eax + edx - 1]
sub al, 0x2f
je 0x569fa9
sub al, 0x4d
jne 0x569fbc
mov byte [ebp - 0x265], 1
inc dword [ebp - 8]
jmp 0x569fe8
mov byte [ebp - 0x265], 1
inc dword [ebp - 4]
mov dword [ebp - 8], 1
jmp 0x569fe8
lea eax, [ebp - 0x14f0]
mov edx, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x1e8]
mov dl, byte [edx + ecx - 1]
call fcn.004051c0
mov edx, dword [ebp - 0x14f0]
lea eax, [ebp - 0x138]
call fcn.004052a0
cmp byte [ebp - 0x265], 0
je 0x56a25f
mov byte [ebp - 0x265], 0
cmp dword [ebp - 0x168], 0
jl 0x56a045
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov eax, dword [eax + edx*4 + 0x100]
mov edx, dword [ebp - 0x1f0]
mov eax, dword [eax + edx*4 - 4]
lea eax, [eax + edi*4 - 4]
mov edx, dword [ebp - 0x138]
call fcn.0040502c
jmp 0x56a07b
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 0x1f0]
mov eax, dword [eax + edx*4 - 4]
lea eax, [eax + edi*4 - 4]
mov edx, dword [ebp - 0x138]
call fcn.0040502c
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x1e4]
jge 0x56a24d
cmp dword [ebp - 0x168], 0
jl 0x56a184
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov eax, dword [eax + edx*4 + 0x100]
call fcn.004063e0
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jle 0x56a112
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov eax, dword [eax + edx*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
mov ebx, eax
cmp ebx, dword [ebp - 8]
jae 0x56a117
mov byte [ebp - 0x265], 1
mov ebx, dword [ebp - 8]
jmp 0x56a117
mov ebx, 1
mov eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 4]
jae 0x56a132
mov byte [ebp - 0x265], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1ec], eax
cmp byte [ebp - 0x265], 0
je 0x56a24d
push ebx
mov eax, dword [ebp - 0x1ec]
push eax
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
lea eax, [eax + edx*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
jmp 0x56a24d
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jle 0x56a1ec
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
mov ebx, eax
cmp ebx, dword [ebp - 8]
jae 0x56a1f1
mov byte [ebp - 0x265], 1
mov ebx, dword [ebp - 8]
jmp 0x56a1f1
mov ebx, 1
mov eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 4]
jae 0x56a20c
mov byte [ebp - 0x265], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1ec], eax
cmp byte [ebp - 0x265], 0
je 0x56a24d
push ebx
mov eax, dword [ebp - 0x1ec]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
mov byte [ebp - 0x265], 0
lea eax, [ebp - 0x138]
call fcn.00404fd8
mov edi, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1f0], eax
inc dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x1e4]
jle 0x569f85
jmp 0x56ad54
lea eax, [ebp - 0x14f4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x14f4]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
cmp byte [eax], 0x25
jne 0x56a6da
mov byte [ebp - 0x186], 0x25
mov dword [ebp - 4], 1
mov dword [ebp - 8], 1
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x105be0]
call fcn.00405070
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov dword [ebp - 4], 1
mov dword [ebp - 8], 1
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105bc0]
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, 0x572064
call fcn.0043cfd0
mov dword [ebp - 0x1e0], eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x1e0]
mov eax, 0x57204c
call fcn.0043cfd0
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x1e0], 0
jle 0x56a585
cmp dword [ebp - 0x13c], 0
jle 0x56a585
lea eax, [ebp - 0x140]
push eax
mov ecx, dword [ebp - 0x13c]
sub ecx, dword [ebp - 0x1e0]
dec ecx
mov edx, dword [ebp - 0x1e0]
inc edx
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.004054f8
lea eax, [ebp - 0x14f8]
push eax
lea eax, [ebp - 0x14fc]
mov ecx, dword [ebp - 0x140]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x14fc]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x14f8]
lea eax, [ebp - 0x140]
call fcn.00405070
mov eax, dword [ebp - 0x154]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jle 0x56a4a6
mov eax, dword [ebp - 0x154]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
mov dword [ebp - 0x13c], eax
jmp 0x56a4ae
xor eax, eax
mov dword [ebp - 0x13c], eax
push 1
mov eax, dword [ebp - 0x13c]
push eax
mov eax, dword [ebp - 0x158]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
mov eax, dword [ebp - 0x140]
call fcn.0040b6e8
mov dword [ebp - 0x1e0], eax
dec dword [ebp - 0x1e0]
dec dword [ebp - 0x13c]
mov ebx, dword [ebp - 0x13c]
test ebx, ebx
jl 0x56ad54
inc ebx
mov dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x158]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 0x15c]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x154]
mov ecx, edx
shl edx, 6
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x48]
mov edx, dword [ecx + edx*4 + 0x100]
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [edx + ecx*4]
mov ecx, dword [ebp - 0x15c]
mov edx, dword [edx + ecx*4]
call fcn.0040502c
inc dword [ebp - 0x15c]
dec ebx
jne 0x56a51d
jmp 0x56ad54
mov eax, dword [ebp - 0x154]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jle 0x56a5e2
mov eax, dword [ebp - 0x154]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
mov dword [ebp - 0x13c], eax
jmp 0x56a5ea
xor eax, eax
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
push eax
mov eax, dword [ebp - 0x1e0]
push eax
mov eax, dword [ebp - 0x158]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
dec dword [ebp - 0x1e0]
dec dword [ebp - 0x13c]
cmp dword [ebp - 0x1e0], 0
jl 0x56ad54
mov ebx, dword [ebp - 0x13c]
test ebx, ebx
jl 0x56a6c2
inc ebx
mov dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x158]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x15c]
lea eax, [eax + edx*4]
mov edx, dword [ebp - 0x154]
mov ecx, edx
shl edx, 6
add edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx + 0x48]
mov edx, dword [ecx + edx*4 + 0x100]
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [edx + ecx*4]
mov ecx, dword [ebp - 0x15c]
mov edx, dword [edx + ecx*4]
call fcn.0040502c
inc dword [ebp - 0x15c]
dec ebx
jne 0x56a656
dec dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e0], 0
jge 0x56a641
jmp 0x56ad54
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, 0x25
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be4]
mov eax, dword [ebp - 0x10c]
call fcn.0055409c
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x56a75f
push 0
push 0
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
lea eax, [eax + edx*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
jmp 0x56a793
push 0
push 0
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
lea eax, [ebp - 0x26c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x26c]
call fcn.00405298
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jle 0x56ad54
mov eax, dword [ebp - 0x26c]
mov edx, dword [ebp - 0x1e4]
cmp byte [eax + edx - 1], 0x2f
je 0x56a7f9
lea eax, [ebp - 0x26c]
mov edx, 0x571638
call fcn.004052a0
inc dword [ebp - 0x1e4]
mov dword [ebp - 0x1e8], 1
lea eax, [ebp - 0x138]
call fcn.00404fd8
mov dword [ebp - 4], 1
mov dword [ebp - 8], 1
mov byte [ebp - 0x265], 0
mov edi, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x168], 0
jl 0x56a876
push 1
push 1
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
lea eax, [eax + edx*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
jmp 0x56a8aa
push 1
push 1
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x1e4]
jg 0x56acd1
mov eax, dword [ebp - 0x26c]
mov edx, dword [ebp - 0x1e8]
cmp byte [eax + edx - 1], 0x22
jne 0x56a9f0
cmp dword [ebp - 0x1e8], 1
jle 0x56a9f0
mov eax, dword [ebp - 0x26c]
mov edx, dword [ebp - 0x1e8]
mov al, byte [eax + edx - 2]
sub al, 0x2f
je 0x56a8fc
sub al, 0x4d
jne 0x56a9f0
lea edx, [ebp - 0x1500]
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.0040b05c
mov edx, dword [ebp - 0x1500]
mov eax, 0x572070
call fcn.004055dc
test eax, eax
jle 0x56a9f0
mov ecx, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x26c]
mov eax, 0x572058
call fcn.0043cfd0
mov ebx, eax
mov ecx, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x26c]
mov eax, 0x571638
call fcn.0043cfd0
mov esi, eax
jmp 0x56a9e5
test ebx, ebx
jne 0x56a964
mov ebx, esi
jmp 0x56a96e
test esi, esi
je 0x56a96e
cmp esi, ebx
jge 0x56a96e
mov ebx, esi
mov eax, dword [ebp - 0x26c]
cmp byte [eax + ebx - 2], 0x22
jne 0x56a9bb
inc dword [ebp - 0x1e8]
lea eax, [ebp - 0x1504]
push eax
mov ecx, ebx
sub ecx, dword [ebp - 0x1e8]
dec ecx
mov edx, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x26c]
call fcn.004054f8
mov edx, dword [ebp - 0x1504]
lea eax, [ebp - 0x138]
call fcn.004052a0
mov dword [ebp - 0x1e8], ebx
jmp 0x56a9f0
lea ecx, [ebx + 1]
mov edx, dword [ebp - 0x26c]
mov eax, 0x571638
call fcn.0043cfd0
mov esi, eax
lea ecx, [ebx + 1]
mov edx, dword [ebp - 0x26c]
mov eax, 0x572058
call fcn.0043cfd0
mov ebx, eax
lea eax, [esi + ebx]
test eax, eax
jg 0x56a95c
mov eax, dword [ebp - 0x26c]
mov edx, dword [ebp - 0x1e8]
mov al, byte [eax + edx - 1]
sub al, 0x2f
je 0x56aa14
sub al, 0x4d
jne 0x56aa27
mov byte [ebp - 0x265], 1
inc dword [ebp - 8]
jmp 0x56aa53
mov byte [ebp - 0x265], 1
inc dword [ebp - 4]
mov dword [ebp - 8], 1
jmp 0x56aa53
lea eax, [ebp - 0x1508]
mov edx, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x1e8]
mov dl, byte [edx + ecx - 1]
call fcn.004051c0
mov edx, dword [ebp - 0x1508]
lea eax, [ebp - 0x138]
call fcn.004052a0
cmp byte [ebp - 0x265], 0
je 0x56acad
mov byte [ebp - 0x265], 0
cmp dword [ebp - 0x168], 0
jl 0x56ab9c
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov eax, dword [eax + edx*4 + 0x100]
mov edx, dword [ebp - 0x1f0]
mov eax, dword [eax + edx*4 - 4]
lea eax, [eax + edi*4 - 4]
mov edx, dword [ebp - 0x138]
call fcn.0040502c
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov eax, dword [eax + edx*4 + 0x100]
call fcn.004063e0
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jle 0x56ab2a
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
mov eax, dword [eax + edx*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
mov ebx, eax
cmp ebx, dword [ebp - 8]
jae 0x56ab2f
mov byte [ebp - 0x265], 1
mov ebx, dword [ebp - 8]
jmp 0x56ab2f
mov ebx, 1
mov eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 4]
jae 0x56ab4a
mov byte [ebp - 0x265], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1ec], eax
cmp byte [ebp - 0x265], 0
je 0x56ac9b
push ebx
mov eax, dword [ebp - 0x1ec]
push eax
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
lea eax, [eax + edx*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
jmp 0x56ac9b
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 0x1f0]
mov eax, dword [eax + edx*4 - 4]
lea eax, [eax + edi*4 - 4]
mov edx, dword [ebp - 0x138]
call fcn.0040502c
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jle 0x56ac3a
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
mov ebx, eax
cmp ebx, dword [ebp - 8]
jae 0x56ac3f
mov byte [ebp - 0x265], 1
mov ebx, dword [ebp - 8]
jmp 0x56ac3f
mov ebx, 1
mov eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 4]
jae 0x56ac5a
mov byte [ebp - 0x265], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1ec], eax
cmp byte [ebp - 0x265], 0
je 0x56ac9b
push ebx
mov eax, dword [ebp - 0x1ec]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
mov byte [ebp - 0x265], 0
lea eax, [ebp - 0x138]
call fcn.00404fd8
mov edi, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1f0], eax
inc dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x1e4]
jle 0x56a8bc
cmp dword [ebp - 0x168], 0
jl 0x56ad1c
mov eax, dword [ebp - 0x1ec]
dec eax
push eax
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x148]
mov ecx, edx
shl edx, 6
add edx, ecx
lea eax, [eax + edx*4 + 0x100]
mov ecx, 1
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 4
jmp 0x56ad54
mov eax, dword [ebp - 0x1ec]
dec eax
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 1
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104660], 0
je case.0x55d835.43
lea eax, [ebp - 0x26c]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x44e4]
call fcn.00405070
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.00404fd8
push 0x572084
push dword [ebp - 0x270]
push 0x572090
mov eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1510]
call fcn.0040b668
push dword [ebp - 0x1510]
push 0x571608
mov eax, dword [ebp - 8]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1514]
call fcn.0040b668
push dword [ebp - 0x1514]
push 0x57209c
push 0x5720a8
push dword [ebp - 0x138]
push 0x571688
lea eax, [ebp - 0x150c]
mov edx, 0xa
call fcn.00405358
mov edx, dword [ebp - 0x150c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
mov edx, dword [ebp - 0x26c]
call fcn.0040502c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x23
je 0x56ae5f
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x24
jne 0x56b1b0
mov eax, dword [ebp - 0x138]
call fcn.00405298
cmp eax, 2
jl 0x56b1b0
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
cmp byte [ebp - 0x186], 0x23
jne 0x56b057
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, 0x23
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x274]
mov edx, dword [ebp - 0x138]
call fcn.00405070
lea eax, [ebp - 0x1518]
push eax
lea ecx, [ebp - 0x15c]
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0x138]
call fcn.0052d600
mov edx, dword [ebp - 0x1518]
lea eax, [ebp - 0x138]
call fcn.00405070
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x71], 0
jne case.0x55d835.43
cmp dword [ebp - 0x134], 0
je 0x56b019
push 0x571614
lea edx, [ebp - 0x1520]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x1520]
push 0x571f24
mov eax, dword [0x5905e4]
mov edx, dword [ebp - 0x134]
push dword [eax + edx*4 + 0x18]
push 0x571f30
lea edx, [ebp - 0x1524]
mov eax, dword [ebp - 0x15c]
call fcn.0040b57c
push dword [ebp - 0x1524]
push 0x5720b4
push dword [ebp - 0x274]
push 0x5720c0
push 0x571688
lea eax, [ebp - 0x151c]
mov edx, 0xa
call fcn.00405358
mov edx, dword [ebp - 0x151c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, 0x23
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
jmp 0x56b0d3
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, 0x24
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
push eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x148]
mov dl, 0x24
mov eax, dword [ebp - 0x10c]
call fcn.00554a98
mov eax, dword [ebp - 0x10c]
add eax, 0x5c
call fcn.00404fd8
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104660], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x44e4]
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.00404fd8
lea eax, [ebp - 0x152c]
mov dl, byte [ebp - 0x186]
call fcn.004051c0
push dword [ebp - 0x152c]
push dword [ebp - 0x26c]
push 0x5720a8
push dword [ebp - 0x138]
push 0x571688
lea eax, [ebp - 0x1528]
mov edx, 5
call fcn.00405358
mov edx, dword [ebp - 0x1528]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x105be0]
call fcn.0040502c
jmp case.0x55d835.43
mov edx, dword [ebp - 0x138]
mov eax, 0x5720cc
call fcn.004055dc
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bdc], eax
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, dword [ebp - 0x138]
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 0
jle 0x56b29b
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105bdc]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
mov eax, dword [ebp - 0x10c]
call fcn.0055409c
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, dword [ebp - 0x138]
call fcn.0040502c
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x134]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x138]
call fcn.004054f8
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bcc], eax
jmp 0x56b2b3
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bcc], eax
lea edx, [ebp - 0x1530]
mov eax, dword [ebp - 0x138]
call fcn.0040af24
mov edx, dword [ebp - 0x1530]
mov eax, dword [0x590710]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov dword [ebp - 0x14c], eax
xor eax, eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x14c], 0
jle 0x56b351
mov eax, dword [ebp - 0x14c]
sub eax, 0x28
je 0x56b351
add eax, 0xffffffdc
sub eax, 3
jb 0x56b351
sub eax, 5
je 0x56b351
sub eax, 6
je 0x56b351
add eax, 0xffffff97
sub eax, 2
jb 0x56b351
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x1534]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1534]
lea ecx, [ebp - 0x15c]
lea edx, [ebp - 0x134]
call fcn.0052d600
jmp 0x56b35c
lea eax, [ebp - 0x17c]
call fcn.00404fd8
cmp dword [ebp - 0x134], 0
je 0x56b437
push 0x571614
lea edx, [ebp - 0x153c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x153c]
push 0x571f24
mov eax, dword [0x5905e4]
mov edx, dword [ebp - 0x134]
push dword [eax + edx*4 + 0x18]
push 0x571f30
lea edx, [ebp - 0x1540]
mov eax, dword [ebp - 0x15c]
call fcn.0040b57c
push dword [ebp - 0x1540]
push 0x571620
push 0x571688
lea eax, [ebp - 0x1538]
mov edx, 8
call fcn.00405358
mov edx, dword [ebp - 0x1538]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x105be0]
call fcn.00405070
mov eax, dword [ebp - 0x14c]
cmp eax, 0x38
jg 0x56b4ea
je 0x56c21e
add eax, 0xfffffff0
cmp eax, 0x1c
ja case.0x56b46f.29
jmp dword [eax*4 + 0x56b476]
cmp eax, 0xb5
jg 0x56b54c
je 0x56d143
cmp eax, 0x4e
jg 0x56b527
je 0x56c4af
sub eax, 0x49
je 0x56c2d5
dec eax
je 0x56c36b
sub eax, 2
je 0x56cce1
dec eax
je 0x56c3f0
jmp case.0x56b46f.29
sub eax, 0x6b
je 0x56cfaf
sub eax, 0x47
je 0x56d01d
dec eax
je 0x56d07f
dec eax
je 0x56d0e1
jmp case.0x56b46f.29
cmp eax, 0xe6
jge 0x56b587
add eax, 0xffffff42
sub eax, 3
jb 0x56d1a5
add eax, 0xfffffffe
sub eax, 2
jb 0x56d233
add eax, 0xfffffffd
sub eax, 0x14
jb 0x56d6e1
sub eax, 4
jb case.0x56b46f.17
jmp case.0x56b46f.29
cmp eax, 0xec
jge 0x56b5a7
add eax, 0xffffff1a
sub eax, 4
jb 0x56d738
je 0x56d7c3
jmp case.0x56b46f.29
add eax, 0xffffff14
sub eax, 2
jb 0x56d7c3
dec eax
sub eax, 2
jb 0x56d834
add eax, 0xffffffde
sub eax, 2
jb 0x56d881
jmp case.0x56b46f.29
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590170]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x17c]
call fcn.00405298
dec eax
jle 0x56b618
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x30
jne 0x56b618
lea eax, [ebp - 0x17c]
mov ecx, dword [ebp - 0x17c]
mov edx, 0x571978
call fcn.004052e4
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105e0c], 0
jne 0x56b66b
cmp dword [eax + 0x105e08], 0
jbe 0x56b6a1
jmp 0x56b66d
jle 0x56b6a1
lea eax, [ebp - 0x258]
push eax
call sub.KERNEL32.DLL_QueryPerformanceCounter
test eax, eax
je 0x56b6a1
fild qword [ebp - 0x258]
mov eax, dword [ebp - 0x10c]
fild qword [eax + 0x105e08]
fdivp st(1)
fmul dword [0x5720d0]
call fcn.004030cc
mov dword [ebp - 4], eax
jmp 0x56b6a9
call sub.KERNEL32.DLL_GetTickCount
mov dword [ebp - 4], eax
cmp dword [ebp - 0x168], 0
jge 0x56b749
mov eax, dword [ebp - 0x14c]
cmp eax, 0xdd
jg 0x56b6d6
je 0x56b70d
sub eax, 0x11
je 0x56b6e5
sub eax, 0xcb
je 0x56b6f9
jmp case.0x55d835.43
sub eax, 0xde
je 0x56b721
dec eax
je 0x56b735
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x43a8], edx
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x43ac], edx
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x43b0], edx
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x43b4], edx
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x43b8], edx
jmp case.0x55d835.43
mov eax, dword [ebp - 0x14c]
cmp eax, 0xdd
jg 0x56b769
je 0x56b7b0
sub eax, 0x11
je 0x56b778
sub eax, 0xcb
je 0x56b794
jmp case.0x55d835.43
sub eax, 0xde
je 0x56b7cc
dec eax
je 0x56b7e8
jmp case.0x55d835.43
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x43a8], edx
jmp case.0x55d835.43
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x43ac], edx
jmp case.0x55d835.43
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x43b0], edx
jmp case.0x55d835.43
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x43b4], edx
jmp case.0x55d835.43
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x43b8], edx
jmp case.0x55d835.43
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0x7ec]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590580]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x10c]
call fcn.00553d9c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x5901f4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x17c]
xor edx, edx
mov eax, dword [ebp - 0x10c]
call fcn.00553d9c
jmp case.0x55d835.43
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0x808]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590580]
mov eax, dword [edx + eax*4 + 0x64]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x10c]
call fcn.00553d9c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590390]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x30
jne 0x56b91a
mov eax, dword [ebp - 0x17c]
call fcn.00405298
dec eax
jle 0x56b91a
lea eax, [ebp - 0x17c]
mov ecx, dword [ebp - 0x17c]
mov edx, 0x571978
call fcn.004052e4
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov word [ebp - 0x1b6], ax
mov eax, dword [ebp - 0x14c]
sub eax, 0x15
je 0x56b93f
dec eax
je 0x56b945
dec eax
je 0x56b94b
jmp 0x56b94f
add dword [ebp - 4], 0
jmp 0x56b94f
add dword [ebp - 4], 2
jmp 0x56b94f
add dword [ebp - 4], 4
lea eax, [ebp - 8]
push eax
push 2
lea eax, [ebp - 0x1b6]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x59031c]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x17c]
xor edx, edx
mov eax, dword [ebp - 0x10c]
call fcn.00553d9c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x5906a8]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x17c]
xor edx, edx
mov eax, dword [ebp - 0x10c]
call fcn.00553d9c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x5906d4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x17c]
xor edx, edx
mov eax, dword [ebp - 0x10c]
call fcn.00553d9c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x5903a0]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x17c]
call fcn.0040b75c
push edx
push eax
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x5905b8]
mov eax, dword [edx + eax*4]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
push edx
push eax
lea eax, [ebp - 0x1544]
call fcn.0040b668
mov edx, dword [ebp - 0x1544]
lea eax, [ebp - 0x17c]
call fcn.00405070
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x17c]
xor edx, edx
mov eax, dword [ebp - 0x10c]
call fcn.00553d9c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590500]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x17c]
xor edx, edx
mov eax, dword [ebp - 0x10c]
call fcn.00553d9c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590460]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x17c]
xor edx, edx
mov eax, dword [ebp - 0x10c]
call fcn.00553d9c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590150]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov byte [ebp - 0x1d9], al
cmp byte [ebp - 0x1d9], 0
jbe 0x56bb3c
mov byte [ebp - 0x1d9], 1
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 0x1d9]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590144]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_ReadProcessMemory
mov eax, dword [ebp - 4]
add eax, 0x154
mov dword [ebp - 8], eax
add dword [ebp - 4], 0x9c
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jbe 0x56bbd3
mov dword [ebp - 0x184], 1
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x184]
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x168]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_ReadProcessMemory
mov eax, dword [ebp - 0x184]
sub eax, 1
jb 0x56bc28
je 0x56bc31
jmp 0x56bc38
and dword [ebp - 0x168], 0xffffffbf
jmp 0x56bc38
or dword [ebp - 0x168], 0x40
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x168]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
jmp case.0x55d835.43
lea eax, [ebp - 0x1548]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x1548]
mov eax, dword [ebp - 0x10c]
add eax, 0x1048b8
call fcn.0040502c
jmp 0x56bcb1
mov eax, dword [ebp - 0x10c]
add eax, 0x1048b8
mov ecx, 1
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x1048b8]
call fcn.00405298
test eax, eax
jle 0x56bd31
mov esi, 0x5720d4
lea edi, [ebp - 0xe70]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe70]
mov edx, dword [0x59046c]
mov cl, 0x20
call fcn.00403c6c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x1048b8]
mov al, byte [eax]
and eax, 0xff
bt dword [ebp - 0xe70], eax
jae 0x56bc97
jmp 0x56bd31
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x1048b8]
call fcn.00405298
mov edx, eax
mov eax, dword [ebp - 0x10c]
add eax, 0x1048b8
mov ecx, 1
call fcn.00405538
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x1048b8]
call fcn.00405298
test eax, eax
jle 0x56bd9f
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x1048b8]
call fcn.00405298
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x1048b8]
mov bl, byte [edx + eax - 1]
mov esi, 0x5720d4
lea edi, [ebp - 0xe70]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe70]
mov edx, dword [0x59046c]
mov cl, 0x20
call fcn.00403c6c
and ebx, 0xff
bt dword [ebp - 0xe70], ebx
jae 0x56bd09
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x1048b8]
call fcn.00405298
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jle case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x1048b8]
cmp byte [eax], 0x27
jne case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x1048b8]
mov edx, dword [ebp - 0x168]
cmp byte [eax + edx - 1], 0x27
jne case.0x55d835.43
mov eax, dword [ebp - 0x10c]
add eax, 0x1048b8
push eax
mov ecx, dword [ebp - 0x168]
sub ecx, 2
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x1048b8]
mov edx, 2
call fcn.004054f8
jmp case.0x55d835.43
lea eax, [ebp - 0x17c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x154c]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x154c]
lea edx, [ebp - 0x1e0]
call fcn.0040b73c
test al, al
jne 0x56be7d
mov dword [ebp - 0x1e0], 0xffffffff
lea eax, [ebp - 0x1550]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1550]
lea edx, [ebp - 0x13c]
call fcn.0040b73c
test al, al
jne 0x56beb9
mov dword [ebp - 0x13c], 0xffffffff
lea eax, [ebp - 0x1554]
push eax
mov ecx, 2
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1554]
lea edx, [ebp - 0x154]
call fcn.0040b73c
test al, al
jne 0x56bef5
mov dword [ebp - 0x154], 0xffffffff
lea eax, [ebp - 0x1558]
push eax
mov ecx, 3
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1558]
lea edx, [ebp - 0x158]
call fcn.0040b73c
test al, al
jne 0x56bf31
mov dword [ebp - 0x158], 0xffffffff
xor eax, eax
mov dword [ebp - 0x168], eax
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp - 0x154], 0
jl 0x56bf50
cmp dword [ebp - 0x158], 0
jge 0x56bf8e
mov dword [ebp - 0x168], 1
mov eax, dword [ebp - 0x158]
dec eax
je 0x56bf6e
dec eax
je 0x56bf75
dec eax
je 0x56bf7e
dec eax
je 0x56bf87
jmp 0x56bf8e
xor eax, eax
mov dword [ebp - 4], eax
jmp 0x56bf8e
mov dword [ebp - 4], 0xffffffff
jmp 0x56bf8e
mov dword [ebp - 4], 0xfffffffe
jmp 0x56bf8e
mov dword [ebp - 4], 1
lea eax, [ebp - 0x155c]
push eax
mov ecx, 4
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x155c]
lea edx, [ebp - 0x1ec]
call fcn.0040b73c
test al, al
je 0x56bfc9
cmp dword [ebp - 0x1ec], 0
jne 0x56bfdb
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x154], 0
jge 0x56c08f
cmp dword [ebp - 0x158], 0
jle 0x56c08f
mov eax, dword [ebp - 0x158]
dec eax
je 0x56c005
sub eax, 3
je 0x56c00c
jmp 0x56c013
xor eax, eax
mov dword [ebp - 4], eax
jmp 0x56c013
mov dword [ebp - 4], 1
push 0
mov eax, dword [ebp - 0x1ec]
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov dword [ebp - 0x164], eax
call sub.KERNEL32.DLL_GetCurrentThreadId
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x164]
cdq
cmp edx, dword [esp + 4]
jne 0x56c040
cmp eax, dword [esp]
pop edx
pop eax
je case.0x55d835.43
push 0xffffffffffffffff
mov eax, dword [ebp - 0x164]
push eax
call sub.KERNEL32.DLL_GetCurrentThreadId
push eax
call sub.user32.dll_AttachThreadInput
push 0x23
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x1ec]
push eax
call sub.user32.dll_SetWindowPos
push 0
mov eax, dword [ebp - 0x164]
push eax
call sub.KERNEL32.DLL_GetCurrentThreadId
push eax
call sub.user32.dll_AttachThreadInput
jmp case.0x55d835.43
mov eax, dword [ebp - 0x168]
push eax
mov eax, dword [ebp - 0x158]
push eax
mov eax, dword [ebp - 0x154]
push eax
mov eax, dword [ebp - 0x13c]
push eax
mov eax, dword [ebp - 0x1e0]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x1ec]
push eax
call sub.user32.dll_SetWindowPos
jmp case.0x55d835.43
lea eax, [ebp - 0x17c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
cmp dword [ebp - 0x168], 0
jge 0x56c106
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43dc]
call fcn.0040b6e8
mov dword [ebp - 0x168], eax
xor eax, eax
push ebp
push 0x56c13c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov edx, eax
mov ecx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x10c]
call fcn.005725f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x56c146
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x43c0], 0
je case.0x55d835.43
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x84]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x84], eax
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x43c4]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x43c4], eax
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x43cc]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x43cc], eax
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x8c]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x8c], eax
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x88]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x88], eax
mov eax, dword [0x5904ec]
mov edx, dword [ebp - 0x168]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 0x43c8]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x43c8], eax
jmp case.0x55d835.43
xor eax, eax
push ebp
push 0x56c266
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1560]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1560]
call fcn.0040b6e8
mov dword [ebp - 0x1e0], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x56c27a
mov eax, dword [ebp - 0x1e0]
sub eax, 1
jb 0x56c28d
dec eax
je 0x56c29f
dec eax
je 0x56c2b1
jmp 0x56c2c3
mov dl, 1
mov eax, dword [ebp - 0x10c]
call fcn.00425c24
jmp case.0x55d835.43
mov dl, 5
mov eax, dword [ebp - 0x10c]
call fcn.00425c24
jmp case.0x55d835.43
mov dl, 6
mov eax, dword [ebp - 0x10c]
call fcn.00425c24
jmp case.0x55d835.43
mov dl, 3
mov eax, dword [ebp - 0x10c]
call fcn.00425c24
jmp case.0x55d835.43
xor eax, eax
push ebp
push 0x56c34d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1568]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1568]
call fcn.0040b6e8
lea edx, [ebp - 0x1564]
call fcn.0040b57c
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x10c]
add eax, 0x104684
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x104551], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x5902f0]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov word [ebp - 0x1b6], ax
cmp word [ebp - 0x1b6], 0x421
jbe 0x56c3b5
sub word [ebp - 0x1b6], 0x421
cmp word [ebp - 0x1b6], 0x421
ja 0x56c3a1
cmp word [ebp - 0x1b6], 2
jae 0x56c3c8
mov word [ebp - 0x1b6], 2
lea eax, [ebp - 8]
push eax
push 2
lea eax, [ebp - 0x1b6]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
jmp case.0x55d835.43
mov dword [ebp - 4], 0xfa
mov byte [ebp - 0x12d], 0
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x104534], edx
lea eax, [ebp - 0x26c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
jmp 0x56c497
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x71], 0
jne case.0x55d835.43
xor eax, eax
push ebp
push 0x56c483
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0043ce7c
mov edx, dword [ebp - 0x26c]
call fcn.0043ca10
mov byte [ebp - 0x12d], 1
mov eax, dword [ebp - 0x26c]
call fcn.00405298
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x56c494
dec dword [ebp - 4]
cmp byte [ebp - 0x12d], 0
jne case.0x55d835.43
cmp dword [ebp - 4], 0
ja 0x56c42d
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x9c], 0
lea eax, [ebp - 0x156c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x156c]
lea edx, [ebp - 0x138]
call fcn.0040af24
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x105bf5], 0
je 0x56c51a
lea eax, [ebp - 0x270]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
jmp 0x56c537
lea eax, [ebp - 0x270]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x1570]
mov ecx, dword [ebp - 0x270]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1570]
mov eax, dword [ebp - 0x10c]
call fcn.0053d7b4
mov eax, dword [ebp - 0x138]
mov edx, 0x5720fc
call fcn.004053e4
jne 0x56c5a6
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x4405], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x104660], 0
mov eax, dword [ebp - 0x10c]
push eax
push 0x535e58
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x572108
call fcn.004053e4
jne 0x56c5ca
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x4405], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x572114
call fcn.004053e4
jne 0x56c605
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x104660], 1
mov eax, dword [ebp - 0x10c]
push eax
push 0x535e58
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x572128
call fcn.004053e4
jne 0x56c639
mov edx, 0x572130
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0xd7c]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x7c]
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x57213c
call fcn.004053e4
jne 0x56c68d
lea eax, [ebp - 0x1574]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffd
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1574]
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0xd7c]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x74]
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x57214c
call fcn.004053e4
jne 0x56c6bb
mov eax, dword [ebp - 0x10c]
push eax
push 0x5365ac
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x572160
call fcn.004053e4
jne 0x56c6ee
mov edx, 0x572130
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104548]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x7c]
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x572178
call fcn.004053e4
jne 0x56c741
lea eax, [ebp - 0x1578]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffd
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1578]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104548]
mov eax, dword [eax + 0x220]
mov ecx, dword [eax]
call dword [ecx + 0x74]
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x572190
call fcn.004053e4
jne 0x56c8ff
lea eax, [ebp - 0x157c]
mov edx, dword [ebp - 0x10c]
add edx, 0x1054c0
call fcn.0040523c
mov eax, dword [ebp - 0x157c]
lea edx, [ebp - 0x1e0]
call fcn.0040b73c
test al, al
jne 0x56c78d
mov dword [ebp - 0x1e0], 0xffffffff
mov eax, dword [0x590504]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1e0]
mov dword [eax + 0x1461], edx
lea eax, [ebp - 0x1580]
mov edx, dword [ebp - 0x10c]
add edx, 0x1055c0
call fcn.0040523c
mov eax, dword [ebp - 0x1580]
lea edx, [ebp - 0x1e0]
call fcn.0040b73c
test al, al
jne 0x56c7d6
mov dword [ebp - 0x1e0], 0xffffffff
mov eax, dword [0x590504]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1e0]
mov dword [eax + 0x1465], edx
lea eax, [ebp - 0x1584]
mov edx, dword [ebp - 0x10c]
add edx, 0x1056c0
call fcn.0040523c
mov eax, dword [ebp - 0x1584]
lea edx, [ebp - 0x1e0]
call fcn.0040b73c
test al, al
jne 0x56c81f
mov dword [ebp - 0x1e0], 0xffffffff
mov eax, dword [0x590504]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1e0]
mov dword [eax + 0x1469], edx
lea eax, [ebp - 0x1588]
mov edx, dword [ebp - 0x10c]
add edx, 0x1057c0
call fcn.0040523c
mov eax, dword [ebp - 0x1588]
lea edx, [ebp - 0x1e0]
call fcn.0040b73c
test al, al
jne 0x56c868
mov dword [ebp - 0x1e0], 0xffffffff
mov eax, dword [0x590504]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1e0]
mov dword [eax + 0x146d], edx
mov eax, dword [0x59016c]
cmp dword [eax], 0
jne 0x56c8e3
mov eax, dword [0x590504]
mov eax, dword [eax]
cmp dword [eax + 0x1469], 0xffffffff
je 0x56c8a5
mov eax, dword [0x590504]
mov eax, dword [eax]
cmp dword [eax + 0x146d], 0xffffffff
jne 0x56c8c7
mov eax, dword [0x590504]
mov eax, dword [eax]
mov dword [eax + 0x1469], 0x117
mov eax, dword [0x590504]
mov eax, dword [eax]
mov dword [eax + 0x146d], 0x14c
mov eax, dword [ebp - 0x10c]
push eax
push 0x535024
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
push eax
push 0x53503c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x5721a0
call fcn.004053e4
jne 0x56c94c
mov eax, dword [0x59016c]
cmp dword [eax], 0
je case.0x55d835.43
mov eax, dword [0x59016c]
mov eax, dword [eax]
cmp byte [eax + 0x57], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
push eax
push 0x535024
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x5721b0
call fcn.004053e4
jne 0x56ca99
mov eax, dword [ebp - 0x10c]
mov word [eax + 0x4406], 0
lea eax, [ebp - 0x158c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffd
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x158c]
lea edx, [ebp - 0x138]
call fcn.0040af24
mov edx, dword [ebp - 0x138]
mov eax, 0x5721c0
call fcn.004055dc
test eax, eax
jle 0x56c9c3
mov eax, dword [ebp - 0x10c]
or word [eax + 0x4406], 1
mov edx, dword [ebp - 0x138]
mov eax, 0x5721d0
call fcn.004055dc
test eax, eax
jle 0x56c9e5
mov eax, dword [ebp - 0x10c]
or word [eax + 0x4406], 2
mov edx, dword [ebp - 0x138]
mov eax, 0x5721e4
call fcn.004055dc
test eax, eax
jle 0x56ca07
mov eax, dword [ebp - 0x10c]
or word [eax + 0x4406], 4
mov edx, dword [ebp - 0x138]
mov eax, 0x5721f8
call fcn.004055dc
test eax, eax
jle 0x56ca29
mov eax, dword [ebp - 0x10c]
or word [eax + 0x4406], 8
mov edx, dword [ebp - 0x138]
mov eax, 0x572208
call fcn.004055dc
test eax, eax
jle 0x56ca4b
mov eax, dword [ebp - 0x10c]
or word [eax + 0x4406], 0xf
mov edx, dword [ebp - 0x138]
mov eax, 0x572218
call fcn.004055dc
test eax, eax
jle 0x56ca6d
mov eax, dword [ebp - 0x10c]
or word [eax + 0x4406], 0x10
mov edx, dword [ebp - 0x138]
mov eax, 0x57222c
call fcn.004055dc
test eax, eax
jle case.0x55d835.43
mov eax, dword [ebp - 0x10c]
and word [eax + 0x4406], 0xffef
jmp case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov edx, 0x572240
call fcn.004053e4
jne 0x56cb0f
lea eax, [ebp - 0x1594]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffd
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1594]
lea edx, [ebp - 0x1590]
call fcn.0040af24
mov eax, dword [ebp - 0x1590]
mov edx, dword [ebp - 0x10c]
add edx, 0x104664
call fcn.0040b73c
test al, al
jne case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x104664], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.00404fd8
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x270]
call fcn.00405070
lea eax, [ebp - 0x138]
mov ecx, 8
mov edx, 1
call fcn.00405538
lea edx, [ebp - 0x1598]
mov eax, dword [ebp - 0x138]
call fcn.004a8c88
mov edx, dword [ebp - 0x1598]
lea eax, [ebp - 0x138]
mov ecx, 0x571688
call fcn.004052e4
mov eax, dword [ebp - 0x138]
call fcn.00405298
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x164], 0x3ffe
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x104895], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x104894], 0
cmp dword [ebp - 0x13c], 0
jne 0x56cbe9
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x19c], 0
mov eax, dword [ebp - 0x10c]
push eax
push fcn.005334a8
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x13c]
jg case.0x55d835.43
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x1e0]
inc eax
cmp eax, dword [ebp - 0x164]
jle 0x56cc1e
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x154], eax
jmp 0x56cc31
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x164]
setne al
mov edx, dword [ebp - 0x10c]
mov byte [edx + 0x104895], al
lea eax, [ebp - 0x138]
call fcn.004054f0
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx - 1]
mov edx, dword [ebp - 0x10c]
add edx, 0x19c
mov ecx, dword [ebp - 0x154]
call fcn.00402de8
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x154]
mov byte [eax + edx + 0x19c], 0
mov eax, dword [ebp - 0x10c]
push eax
push fcn.005334a8
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x154]
add dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x13c]
jg 0x56ccca
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x104894], 1
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x13c]
jle 0x56cbfb
jmp case.0x55d835.43
mov byte [ebp - 0x12d], 0
mov dword [ebp - 4], 9
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 0x1e0], eax
jmp 0x56cd4a
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
mov al, byte [eax + edx - 1]
sub al, 0x28
je 0x56cd17
dec al
je 0x56cd35
jmp 0x56cd38
inc dword [ebp - 8]
mov byte [ebp - 0x12d], 1
cmp dword [ebp - 0x1e0], 0
jne 0x56cd38
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1e0], eax
jmp 0x56cd38
dec dword [ebp - 8]
cmp byte [ebp - 0x12d], 0
je 0x56cd47
cmp dword [ebp - 8], 0
je 0x56cd5c
inc dword [ebp - 4]
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
cmp eax, dword [ebp - 4]
jae 0x56ccfe
cmp byte [ebp - 0x12d], 0
je 0x56cf2a
cmp dword [ebp - 8], 0
jne 0x56cf2a
lea eax, [ebp - 0x17c]
push eax
mov eax, dword [ebp - 0x1e0]
inc eax
mov ecx, dword [ebp - 4]
sub ecx, eax
mov edx, dword [ebp - 0x1e0]
inc edx
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.004054f8
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x159c]
mov ecx, dword [ebp - 0x17c]
mov edx, 0x5717f4
call fcn.004052e4
mov edx, dword [ebp - 0x159c]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x15a0]
push eax
lea eax, [ebp - 0x15a4]
mov ecx, dword [ebp - 0x17c]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x15a4]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x15a0]
lea eax, [ebp - 0x17c]
call fcn.00405070
xor eax, eax
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x138]
cmp byte [eax], 0x25
jne 0x56cf1e
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
xor eax, eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, 0x25
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x15a8]
push eax
lea eax, [ebp - 0x15ac]
mov ecx, dword [ebp - 0x17c]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x15ac]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x15a8]
lea edx, [ebp - 4]
call fcn.0040b73c
test al, al
jne 0x56ceb2
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x56cefd
lea eax, [ebp - 0x15b0]
push eax
lea eax, [ebp - 0x15b4]
mov ecx, dword [ebp - 0x17c]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x15b4]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x15b0]
lea edx, [ebp - 8]
call fcn.0040b73c
test al, al
jne 0x56cf02
xor eax, eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 1
lea ecx, [ebp - 4]
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.005550b4
jmp 0x56cf34
mov dword [ebp - 0x1e0], 2
jmp 0x56cf34
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x4405], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x1e0]
dec eax
je 0x56cf55
dec eax
je 0x56cf6c
jmp 0x56cf86
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x572248
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jmp 0x56cf86
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x572258
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp dword [ebp - 0x1e0], 0
jle case.0x55d835.43
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
xor eax, eax
push ebp
push 0x56d000
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x15b8]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x15b8]
call fcn.0040b6e8
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bc8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x5905a0]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov byte [ebp - 0x1d9], al
cmp byte [ebp - 0x1d9], 0
jbe 0x56d057
mov byte [ebp - 0x1d9], 1
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 0x1d9]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590308]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov byte [ebp - 0x1d9], al
cmp byte [ebp - 0x1d9], 0
jbe 0x56d0b9
mov byte [ebp - 0x1d9], 1
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 0x1d9]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590200]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov byte [ebp - 0x1d9], al
cmp byte [ebp - 0x1d9], 0
jbe 0x56d11b
mov byte [ebp - 0x1d9], 1
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 0x1d9]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x5904fc]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov byte [ebp - 0x1d9], al
cmp byte [ebp - 0x1d9], 0
jbe 0x56d17d
mov byte [ebp - 0x1d9], 1
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 0x1d9]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
jmp case.0x55d835.43
mov eax, dword [ebp - 0x14c]
sub eax, 0xbe
je 0x56d1ba
dec eax
je 0x56d1cc
dec eax
je 0x56d1de
jmp 0x56d1ee
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x104554], 1
jmp 0x56d1ee
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x104554], 2
jmp 0x56d1ee
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x104554], 3
mov eax, dword [ebp - 0x10c]
lea edx, [eax + 0x104558]
mov eax, dword [ebp - 0x17c]
call fcn.0040b73c
test al, al
jne 0x56d217
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x104558], edx
mov eax, dword [ebp - 0x10c]
push eax
push 0x535458
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
lea eax, [ebp - 0x17c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x17c]
mov eax, 0x571fb8
call fcn.004055dc
inc eax
mov dword [ebp - 0x278], eax
mov edx, dword [ebp - 0x17c]
mov eax, 0x572014
call fcn.004055dc
mov ebx, eax
dec ebx
jmp 0x56d284
inc dword [ebp - 0x278]
mov eax, dword [ebp - 0x17c]
call fcn.00405298
cmp eax, dword [ebp - 0x278]
jle 0x56d2b2
mov eax, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x278]
mov al, byte [eax + edx - 1]
sub al, 9
je 0x56d27e
sub al, 0x17
je 0x56d27e
jmp 0x56d2b2
dec ebx
test ebx, ebx
jle 0x56d2c8
mov eax, dword [ebp - 0x17c]
mov al, byte [eax + ebx - 1]
sub al, 9
je 0x56d2b1
sub al, 0x17
je 0x56d2b1
mov eax, ebx
sub eax, dword [ebp - 0x278]
inc eax
test eax, eax
jle 0x56d533
mov eax, dword [ebp - 0x14c]
sub eax, 0xc3
je 0x56d2eb
dec eax
je 0x56d2f6
jmp 0x56d301
mov eax, dword [0x5906fc]
xor edx, edx
mov dword [eax], edx
jmp 0x56d301
mov eax, dword [0x5906fc]
mov dword [eax], 5
lea eax, [ebp - 0x15bc]
push eax
mov ecx, ebx
sub ecx, dword [ebp - 0x278]
inc ecx
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov eax, dword [ebp - 0x15bc]
lea edx, [ebp - 0x274]
call fcn.0040b028
lea eax, [ebp - 0x270]
call fcn.00404fd8
mov byte [ebp - 0x12d], 0
xor eax, eax
mov dword [ebp - 0x278], eax
mov eax, dword [0x5900d0]
mov dword [ebp - 0x2b4], eax
lea edx, [ebp - 0x15c0]
mov eax, dword [ebp - 0x2b4]
mov eax, dword [eax]
call fcn.0040b028
mov edx, dword [ebp - 0x15c0]
mov eax, dword [ebp - 0x274]
call fcn.004053e4
jne 0x56d387
mov byte [ebp - 0x12d], 1
jmp 0x56d39d
inc dword [ebp - 0x278]
add dword [ebp - 0x2b4], 4
cmp dword [ebp - 0x278], 0x66
jne 0x56d358
cmp byte [ebp - 0x12d], 0
je 0x56d521
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov edx, dword [ebp - 0x274]
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x449c], edx
mov eax, dword [ebp - 0x10c]
mov dl, byte [0x572130]
mov byte [eax + 0x4404], dl
mov edx, dword [ebp - 0x17c]
mov eax, 0x57227c
call fcn.004055dc
test eax, eax
jle 0x56d42d
mov eax, dword [ebp - 0x10c]
mov al, byte [eax + 0x4404]
or al, byte [0x571ff0]
mov edx, dword [ebp - 0x10c]
mov byte [edx + 0x4404], al
lea eax, [ebp - 0x270]
mov ecx, dword [ebp - 0x270]
mov edx, 0x572288
call fcn.004052e4
mov edx, dword [ebp - 0x17c]
mov eax, 0x57229c
call fcn.004055dc
test eax, eax
jle 0x56d475
mov eax, dword [ebp - 0x10c]
mov al, byte [eax + 0x4404]
or al, byte [0x5722a0]
mov edx, dword [ebp - 0x10c]
mov byte [edx + 0x4404], al
lea eax, [ebp - 0x270]
mov ecx, dword [ebp - 0x270]
mov edx, 0x5722ac
call fcn.004052e4
mov edx, dword [ebp - 0x17c]
mov eax, 0x5722bc
call fcn.004055dc
test eax, eax
jle 0x56d4bd
mov eax, dword [ebp - 0x10c]
mov al, byte [eax + 0x4404]
or al, byte [0x5722c0]
mov edx, dword [ebp - 0x10c]
mov byte [edx + 0x4404], al
lea eax, [ebp - 0x270]
mov ecx, dword [ebp - 0x270]
mov edx, 0x5722cc
call fcn.004052e4
mov eax, dword [0x5906fc]
mov eax, dword [eax]
sub eax, 1
jb 0x56d4d0
sub eax, 4
je 0x56d4e0
jmp 0x56d4f0
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x449c], edx
jmp 0x56d4f0
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x449c], 1
mov eax, dword [ebp - 0x10c]
push eax
push 0x535c54
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x449c]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104534], eax
jmp 0x56d543
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x104534], 3
jmp 0x56d543
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x104534], 4
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x104534], 0
jle case.0x55d835.43
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x4405], 0
je case.0x55d835.43
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0x12bc]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je case.0x55d835.43
lea ecx, [ebp - 0x15c4]
mov eax, dword [0x590710]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x15c4]
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x104534]
dec eax
je 0x56d5d9
dec eax
je 0x56d61f
dec eax
je 0x56d662
dec eax
je 0x56d69f
jmp 0x56d6b5
push 0x5722dc
push dword [ebp - 0x270]
push dword [ebp - 0x274]
push 0x572304
lea eax, [ebp - 0x15c8]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x15c8]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x56d6b5
push 0x572310
push dword [ebp - 0x270]
push dword [ebp - 0x274]
push 0x572304
lea eax, [ebp - 0x15cc]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x15cc]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x56d6b5
push 0x572330
push dword [ebp - 0x274]
push 0x572304
lea eax, [ebp - 0x15d0]
mov edx, 3
call fcn.00405358
mov edx, dword [ebp - 0x15d0]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x56d6b5
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x572344
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.00404fd8
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x14c]
mov dword [eax + 0x104554], edx
mov eax, dword [ebp - 0x10c]
lea edx, [eax + 0x104558]
mov eax, dword [ebp - 0x17c]
call fcn.0040b73c
test al, al
jne 0x56d71c
mov eax, dword [ebp - 0x10c]
xor edx, edx
mov dword [eax + 0x104558], edx
mov eax, dword [ebp - 0x10c]
push eax
push 0x535458
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x14c]
sub eax, 0xe6
je 0x56d753
dec eax
je 0x56d76f
dec eax
je 0x56d78b
dec eax
je 0x56d7a7
jmp case.0x55d835.43
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104674], eax
jmp case.0x55d835.43
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104678], eax
jmp case.0x55d835.43
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x10467c], eax
jmp case.0x55d835.43
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104680], eax
jmp case.0x55d835.43
mov eax, dword [ebp - 0x14c]
sub eax, 0xea
je 0x56d7f8
sub eax, 2
je 0x56d814
dec eax
jne case.0x55d835.43
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104888], eax
jmp case.0x55d835.43
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104884], eax
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
add eax, 0x104784
mov edx, dword [ebp - 0x17c]
mov ecx, 0xff
call fcn.00405274
jmp case.0x55d835.43
mov eax, dword [ebp - 0x14c]
sub eax, 0xef
je 0x56d849
dec eax
je 0x56d865
jmp case.0x55d835.43
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x10488c], eax
jmp case.0x55d835.43
mov eax, dword [ebp - 0x17c]
call fcn.0040b6e8
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x104890], eax
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590490]
mov eax, dword [edx + eax*4]
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_ReadProcessMemory
add dword [ebp - 4], 0x11c
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 4]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_ReadProcessMemory
mov eax, dword [ebp - 0x14c]
sub eax, 0x113
je 0x56d8f3
dec eax
je 0x56d8f9
jmp 0x56d8fd
add dword [ebp - 4], 0x30
jmp 0x56d8fd
add dword [ebp - 4], 0x34
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 0x1d9]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bcc]
push eax
call sub.KERNEL32.DLL_WriteProcessMemory
jmp case.0x55d835.43
lea eax, [ebp - 0x15d4]
push eax
lea edx, [ebp - 0x15d8]
mov eax, dword [ebp - 0x138]
call fcn.0040af24
mov eax, dword [ebp - 0x15d8]
mov ecx, 7
mov edx, 1
call fcn.004054f8
mov eax, dword [ebp - 0x15d4]
mov edx, 0x571a80
call fcn.004053e4
jne 0x56da04
lea eax, [ebp - 0x138]
push eax
mov ecx, 0x20
mov edx, 8
mov eax, dword [ebp - 0x138]
call fcn.004054f8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43fc]
mov edx, 0x80000001
call fcn.0044197c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43fc]
mov cl, 1
mov edx, 0x571a90
call fcn.004419e0
lea eax, [ebp - 0x15dc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x15dc]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43fc]
mov edx, dword [ebp - 0x138]
call fcn.00441d34
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43fc]
call fcn.0044194c
jmp case.0x55d835.43
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x17c]
call fcn.00405070
lea ecx, [ebp - 0x17c]
mov eax, dword [0x590710]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x17c]
mov eax, 0x5720cc
call fcn.004055dc
test eax, eax
jg 0x56e157
mov eax, dword [0x590710]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14c]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov edx, dword [0x52eeb4]
call fcn.00404350
test al, al
je 0x56e157
mov eax, dword [0x590710]
mov eax, dword [eax]
mov edx, dword [ebp - 0x14c]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov edx, dword [eax + 4]
lea eax, [ebp - 0x17c]
call fcn.00405070
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0x23c], 0xffffffff
mov edx, dword [ebp - 0x17c]
mov eax, 0x57235c
call fcn.004055dc
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
cmp dword [ebp - 0x1e0], 0
jle case.0x55d835.43
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
push eax
mov ecx, dword [ebp - 0x1e0]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
mov eax, 0x572368
call fcn.004055dc
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x15e0]
push eax
mov ecx, dword [ebp - 0x13c]
dec ecx
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
mov edx, 1
call fcn.004054f8
mov eax, dword [ebp - 0x15e0]
lea edx, [ebp - 0x240]
call fcn.0040b7d4
test al, al
jne 0x56db61
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov ecx, dword [ebp - 0x13c]
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
mov al, byte [eax]
mov byte [ebp - 0x186], al
lea eax, [ebp - 0x17c]
mov ecx, dword [ebp - 0x1e0]
mov edx, 1
call fcn.00405538
mov edx, dword [ebp - 0x17c]
mov eax, 0x57235c
call fcn.004055dc
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x238]
mov edx, dword [ebp - 0x234]
add eax, dword [ebp - 0x240]
adc edx, dword [ebp - 0x23c]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], edx
cmp dword [ebp - 0x234], 0
jne 0x56dbf0
cmp dword [ebp - 0x238], 0
je 0x56dc01
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x8c], 0
jne 0x56dc1a
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0x23c], 0xffffffff
jmp case.0x55d835.43
cmp dword [ebp - 0x1e0], 0
jle 0x56dd17
mov al, byte [ebp - 0x186]
sub al, 0x64
je 0x56dc3a
sub al, 8
je 0x56dc9a
jmp 0x56dcfe
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x210]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e5e4
mov eax, dword [ebp - 0x210]
xor edx, edx
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], edx
jmp 0x56e145
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x230]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e5e4
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x234], eax
jmp 0x56e145
mov dword [ebp - 0x240], 0xfffffffe
mov dword [ebp - 0x23c], 0xffffffff
jmp 0x56e145
xor eax, eax
mov al, byte [ebp - 0x186]
add eax, 0xffffff9e
cmp eax, 0x15
ja case.0x56dd31.98
mov al, byte [eax + 0x56dd38]
jmp dword [eax*4 + 0x56dd4e]
mov eax, dword [ebp - 0x138]
call fcn.0040b6e8
mov byte [ebp - 0x209], al
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x209]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
jmp 0x56e145
mov eax, dword [ebp - 0x138]
call fcn.0040b6e8
mov word [ebp - 0x20c], ax
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 2
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x20c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
jmp 0x56e145
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
call fcn.00405298
dec eax
jle 0x56deac
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
cmp byte [eax + 1], 0x6f
jne 0x56deac
mov eax, dword [ebp - 0x138]
call fcn.0040d1e8
fstp qword [ebp - 0x228]
wait
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x228]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
mov eax, dword [ebp - 0x138]
call fcn.0040b6e8
mov dword [ebp - 0x210], eax
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x210]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
jmp 0x56e145
mov eax, dword [ebp - 0x138]
call fcn.0040b75c
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], edx
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 8
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x230]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
jmp 0x56e145
mov eax, dword [ebp - 0x138]
call fcn.0040d1e8
fstp dword [ebp - 0x218]
wait
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 4
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x218]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
jmp 0x56e145
mov eax, dword [ebp - 0x138]
call fcn.0040d1e8
lea eax, [ebp - 0x220]
call fcn.00403fa4
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 6
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
jmp 0x56e145
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
mov byte [ebp - 0x211], al
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 0
push 1
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x211]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
jmp 0x56e145
mov eax, dword [ebp - 0x138]
call fcn.00405298
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xff
jle 0x56e0ad
mov dword [ebp - 0x1f4], 0xff
lea eax, [ebp - 0x15e4]
push eax
mov ecx, dword [ebp - 0x1f4]
mov edx, 1
mov eax, dword [ebp - 0x138]
call fcn.004054f8
mov edx, dword [ebp - 0x15e4]
lea eax, [ebp - 0x580]
mov ecx, 0xff
call fcn.00405274
push dword [ebp - 0x234]
push dword [ebp - 0x238]
xor eax, eax
mov al, byte [ebp - 0x580]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x4460]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x8c]
push eax
lea ecx, [ebp - 0x240]
lea edx, [ebp - 0x57f]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
call fcn.0052e71c
jmp 0x56e145
mov dword [ebp - 0x240], 0xfffffffe
mov dword [ebp - 0x23c], 0xffffffff
cmp dword [ebp - 0x1e0], 0
jg 0x56dad5
jmp case.0x55d835.43
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x56e1d4
push 0x571614
lea edx, [ebp - 0x15ec]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x15ec]
lea edx, [ebp - 0x15f0]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1ba
call fcn.0040ba78
push dword [ebp - 0x15f0]
push 0x571688
lea eax, [ebp - 0x15e8]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x15e8]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x56e22b
push 0x571614
lea edx, [ebp - 0x15f8]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x15f8]
push 0x571ad0
push 0x571688
lea eax, [ebp - 0x15f4]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x15f4]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
inc eax
mov dword [ebp - 0x14c], eax
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x170], eax
push 0
lea eax, [ebp - 0x27c]
mov ecx, 1
mov edx, dword [0x555bd0]
call fcn.0040659c
add esp, 4
jmp 0x56e3ef
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x80]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [edx + ecx*4]
call fcn.00405070
lea eax, [ebp - 0x274]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x274]
mov eax, 0x571644
call fcn.004055dc
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jle 0x56e326
lea eax, [ebp - 0x274]
push eax
mov ecx, dword [ebp - 0x13c]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x274]
call fcn.004054f8
mov eax, dword [ebp - 0x274]
mov edx, 0x571790
call fcn.004053e4
jne 0x56e339
inc ebx
mov eax, dword [ebp - 0x274]
mov edx, 0x57177c
call fcn.004053e4
jne 0x56e34c
dec ebx
mov eax, dword [ebp - 0x274]
mov edx, 0x572374
call fcn.004053e4
jne 0x56e3e5
test ebx, ebx
jne 0x56e3e5
mov eax, dword [ebp - 0x27c]
call fcn.004063e0
inc eax
push eax
lea eax, [ebp - 0x27c]
mov ecx, 1
mov edx, dword [0x555bd0]
call fcn.0040659c
add esp, 4
mov eax, dword [ebp - 0x27c]
call fcn.004063e0
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x27c]
lea eax, [edx + eax*8 - 8]
push eax
mov eax, dword [ebp - 0x14c]
cdq
pop ecx
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov eax, dword [ebp - 0x27c]
call fcn.004063e0
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x27c]
lea eax, [edx + eax*8 - 0x108]
mov edx, dword [ebp - 0x144]
mov ecx, 0xff
call fcn.00405274
test ebx, ebx
jl 0x56e40c
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x56e2af
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jne 0x56e540
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x56e4df
lea edx, [ebp - 0x15fc]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1f2
call fcn.0040ba78
lea eax, [ebp - 0x15fc]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x15fc]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
lea edx, [eax + 0x9c]
mov eax, 0x57237c
call fcn.00402fd4
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
inc eax
push eax
lea eax, [ebp - 0xf7c]
mov edx, dword [ebp - 0x160]
mov edx, dword [edx]
mov ecx, dword [0x5901e4]
mov edx, dword [ecx + edx*4 + 8]
mov ecx, 0xff
call fcn.00405274
lea eax, [ebp - 0xf7c]
mov edx, dword [ebp - 0x10c]
add edx, 0x9c
mov ecx, 0xff
call fcn.00402d60
jmp 0x56e4f9
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x572380
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x170], eax
mov byte [ebp - 0x12d], 1
lea eax, [ebp - 0x26c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x27c]
call fcn.004063e0
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x56e74d
inc ebx
mov dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x27c]
lea edx, [edx + eax*8]
mov eax, 0x5723b0
call fcn.00402fd4
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jne 0x56e5de
mov eax, dword [ebp - 0x14c]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x27c]
movzx eax, byte [edx + eax*8]
inc eax
mov dword [ebp - 0x1e0], eax
lea eax, [ebp - 0xf7c]
push eax
mov eax, dword [ebp - 0x14c]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x27c]
lea eax, [edx + eax*8]
mov ecx, dword [ebp - 0x1e0]
dec ecx
mov edx, 1
call fcn.00402c74
lea edx, [ebp - 0xf7c]
lea eax, [ebp - 0x270]
call fcn.0040523c
lea eax, [ebp - 0x1600]
push eax
lea eax, [ebp - 0x1604]
mov ecx, dword [ebp - 0x270]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x1604]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1600]
lea eax, [ebp - 0x270]
call fcn.00405070
mov eax, dword [ebp - 0x270]
call fcn.00405298
mov dword [ebp - 0x1e0], eax
jmp 0x56e67a
dec dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e0], 0
jle 0x56e6a9
mov eax, dword [ebp - 0x270]
mov edx, dword [ebp - 0x1e0]
cmp byte [eax + edx - 1], 0x20
je 0x56e674
mov eax, dword [ebp - 0x270]
mov edx, dword [ebp - 0x1e0]
cmp byte [eax + edx - 1], 9
je 0x56e674
lea eax, [ebp - 0x270]
push eax
mov ecx, dword [ebp - 0x1e0]
mov edx, 1
mov eax, dword [ebp - 0x270]
call fcn.004054f8
mov eax, dword [ebp - 0x270]
mov edx, dword [ebp - 0x26c]
call fcn.004053e4
jne 0x56e71a
mov eax, dword [ebp - 0x14c]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x27c]
mov eax, dword [edx + eax*8 + 0x100]
mov dword [ebp - 0x1608], eax
fild dword [ebp - 0x1608]
call fcn.004030cc
dec eax
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bd4], eax
mov byte [ebp - 0x12d], 0
jmp 0x56e74d
mov eax, dword [ebp - 0x14c]
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x27c]
lea eax, [edx + eax*8]
mov edx, dword [ebp - 0x270]
mov ecx, 0xff
call fcn.00405274
inc dword [ebp - 0x14c]
dec ebx
jne 0x56e591
cmp byte [ebp - 0x12d], 0
je 0x56e7d5
mov eax, dword [ebp - 0x27c]
call fcn.004063e0
test eax, eax
jle 0x56e7c3
mov eax, dword [ebp - 0x27c]
call fcn.004063e0
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x27c]
cmp byte [edx + eax*8 - 0x108], 0
jne 0x56e7c3
mov eax, dword [ebp - 0x27c]
call fcn.004063e0
mov edx, eax
shl eax, 5
add eax, edx
mov edx, dword [ebp - 0x27c]
mov eax, dword [edx + eax*8 - 8]
mov dword [ebp - 0x1608], eax
fild dword [ebp - 0x1608]
call fcn.004030cc
dec eax
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bd4], eax
jmp 0x56e7d5
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x170]
mov dword [eax + 0x105bd4], edx
push 0
lea eax, [ebp - 0x27c]
mov ecx, 1
mov edx, dword [0x555bd0]
call fcn.0040659c
add esp, 4
jmp case.0x55d835.43
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, 0x571644
call fcn.004055dc
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jle case.0x55d835.43
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x134]
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd9], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
inc eax
mov dword [ebp - 0x14c], eax
xor ebx, ebx
jmp 0x56e8e9
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x80]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [edx + ecx*4]
call fcn.00405070
lea eax, [ebp - 0x160c]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x160c]
lea eax, [ebp - 0x144]
call fcn.00405070
mov eax, dword [ebp - 0x144]
mov edx, 0x5716d4
call fcn.004053e4
je 0x56e8cb
mov eax, dword [ebp - 0x144]
mov edx, 0x5716e4
call fcn.004053e4
jne 0x56e8cc
inc ebx
mov eax, dword [ebp - 0x144]
mov edx, 0x571714
call fcn.004053e4
jne 0x56e8df
dec ebx
test ebx, ebx
jl 0x56e906
inc dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x56e85c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x80]
call fcn.004063e0
cmp eax, dword [ebp - 0x14c]
jg 0x56e9d4
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x56e973
lea edx, [ebp - 0x1610]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1b8
call fcn.0040ba78
lea eax, [ebp - 0x1610]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x1610]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x56e98d
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x5723b4
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
push ebp
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00557000
pop ecx
mov byte [ebp - 0x125], al
mov eax, dword [ebp - 0x160]
cmp dword [eax], 0x2d
jne 0x56ea02
mov al, byte [ebp - 0x125]
xor al, 1
mov byte [ebp - 0x125], al
cmp byte [ebp - 0x125], 0
jne case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x14c]
mov dword [eax + 0x105bd4], edx
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
dec eax
mov dword [ebp - 0x14c], eax
xor ebx, ebx
cmp dword [ebp - 0x14c], 0
jl 0x56eae2
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x80]
mov ecx, dword [ebp - 0x14c]
mov edx, dword [edx + ecx*4]
call fcn.00405070
lea eax, [ebp - 0x1614]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x1614]
lea eax, [ebp - 0x144]
call fcn.00405070
mov eax, dword [ebp - 0x144]
mov edx, 0x5716d4
call fcn.004053e4
je 0x56eab7
mov eax, dword [ebp - 0x144]
mov edx, 0x5716e4
call fcn.004053e4
jne 0x56eab8
dec ebx
mov eax, dword [ebp - 0x144]
mov edx, 0x571714
call fcn.004053e4
jne 0x56eacb
inc ebx
test ebx, ebx
jl 0x56eae2
dec dword [ebp - 0x14c]
cmp dword [ebp - 0x14c], 0
jge 0x56ea48
cmp dword [ebp - 0x14c], 0
jge 0x56eba1
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x56eb3f
lea edx, [ebp - 0x1618]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1b9
call fcn.0040ba78
lea eax, [ebp - 0x1618]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x1618]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x56eb5a
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x5723f0
mov ecx, 0xd
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x104550], 0
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x14c]
dec eax
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bd4], eax
jmp case.0x55d835.43
lea edx, [ebp - 0x161c]
mov eax, dword [ebp - 0x10c]
call fcn.005368f4
mov edx, dword [ebp - 0x161c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
lea edx, [ebp - 0x1620]
mov eax, dword [ebp - 0x10c]
call fcn.0053681c
mov edx, dword [ebp - 0x1620]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
lea edx, [ebp - 0x1624]
mov eax, dword [ebp - 0x10c]
call fcn.0053684c
mov edx, dword [ebp - 0x1624]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
lea edx, [ebp - 0x1628]
mov eax, dword [ebp - 0x10c]
call fcn.0053689c
mov edx, dword [ebp - 0x1628]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
lea eax, [ebp - 0x124]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x6d4]
mov edx, 0x44
call fcn.004084c0
lea eax, [ebp - 0x6e4]
mov edx, 0x10
call fcn.004084c0
mov dword [ebp - 0x6d4], 0x44
mov dword [ebp - 0x6a8], 1
mov word [ebp - 0x6a4], 1
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x10c]
call fcn.0053d7b4
lea eax, [ebp - 0x162c]
mov edx, dword [ebp - 0x10c]
add edx, 0x1051c0
call fcn.0040523c
mov eax, dword [ebp - 0x162c]
lea edx, [ebp - 0x138]
call fcn.0040c03c
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x124]
call fcn.00405070
mov eax, dword [ebp - 0x17c]
call fcn.00405298
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jle 0x56f0eb
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x22
jne 0x56ede1
mov ecx, 2
mov edx, dword [ebp - 0x17c]
mov eax, 0x572430
call fcn.0043cfd0
mov dword [ebp - 0x1e8], eax
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1e8]
sub ecx, 2
mov edx, 2
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov ecx, 3
mov edx, dword [ebp - 0x17c]
mov eax, 0x571644
call fcn.0043cfd0
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jle 0x56ee25
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1e8]
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov ecx, 3
mov edx, dword [ebp - 0x17c]
mov eax, 0x57243c
call fcn.0043cfd0
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jle 0x56ee67
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1e8]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov edx, dword [ebp - 0x17c]
mov eax, 0x5720cc
call fcn.004055dc
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1e8], 0
jle 0x56eec4
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0x1e8]
inc ecx
mov edx, dword [ebp - 0x17c]
mov eax, 0x5720cc
call fcn.0043cfd0
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jg 0x56ee92
lea eax, [ebp - 0x1630]
push eax
mov edx, dword [ebp - 0x1ec]
inc edx
mov ecx, 3
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov eax, dword [ebp - 0x1630]
lea edx, [ebp - 0x140]
call fcn.0040b05c
mov eax, dword [ebp - 0x140]
mov edx, 0x572448
call fcn.004053e4
je 0x56ef3b
mov eax, dword [ebp - 0x140]
mov edx, 0x572454
call fcn.004053e4
je 0x56ef3b
mov eax, dword [ebp - 0x140]
mov edx, 0x572460
call fcn.004053e4
je 0x56ef3b
mov eax, dword [ebp - 0x140]
mov edx, 0x57246c
call fcn.004053e4
jne 0x56efb0
lea eax, [ebp - 0x140]
push eax
mov edx, dword [ebp - 0x1ec]
add edx, 4
mov ecx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov eax, dword [ebp - 0x140]
mov edx, 0x571608
call fcn.004053e4
je 0x56ef7a
cmp dword [ebp - 0x140], 0
jne 0x56f0eb
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1ec]
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x17c]
call fcn.0040c03c
jmp 0x56f0eb
mov eax, dword [ebp - 0x140]
mov edx, 0x572478
call fcn.004053e4
jne 0x56f0eb
lea eax, [ebp - 0x140]
push eax
mov edx, dword [ebp - 0x1ec]
add edx, 4
mov ecx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov eax, dword [ebp - 0x140]
mov edx, 0x571608
call fcn.004053e4
je 0x56f005
cmp dword [ebp - 0x140], 0
jne 0x56f0eb
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1ec]
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
lea eax, [ebp - 0xe50]
xor ecx, ecx
mov edx, 0x76c
call fcn.004036d0
mov eax, dword [ebp - 0x17c]
call fcn.00405298
push eax
mov eax, dword [ebp - 0x17c]
call fcn.00405298
cmp eax, 0x105
setle al
xor ecx, ecx
pop edx
call fcn.00431788
push eax
lea eax, [ebp - 0x17c]
call fcn.004054f0
lea edx, [ebp - 0xe50]
pop ecx
call fcn.00402de8
lea eax, [ebp - 0xe50]
call fcn.0055d120
lea eax, [ebp - 0xf7c]
lea edx, [ebp - 0xd4b]
call fcn.00403bd0
lea edx, [ebp - 0xf7c]
lea eax, [ebp - 0x1634]
call fcn.0040523c
push dword [ebp - 0x1634]
push 0x571608
lea eax, [ebp - 0x1638]
lea edx, [ebp - 0xc46]
call fcn.004051d0
push dword [ebp - 0x1638]
lea eax, [ebp - 0x124]
mov edx, 3
call fcn.00405358
lea eax, [ebp - 0x138]
lea edx, [ebp - 0xb41]
mov ecx, 0x105
call fcn.00405248
cmp dword [ebp - 0x138], 0
jne 0x56f12f
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x6d4]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x124]
call fcn.00405498
push eax
push 0
call sub.KERNEL32.DLL_CreateProcessA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x265], al
jmp 0x56f172
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x6d4]
push eax
mov eax, dword [ebp - 0x138]
call fcn.00405498
push eax
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x124]
call fcn.00405498
push eax
push 0
call sub.KERNEL32.DLL_CreateProcessA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x265], al
cmp byte [ebp - 0x265], 0
jne 0x56f229
call sub.KERNEL32.DLL_GetLastError
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x104534], edx
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x57247c
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp dword [ebp - 4], 0
je 0x56f210
lea eax, [ebp - 0x1640]
mov edx, dword [ebp - 0x10c]
add edx, 0x9c
call fcn.0040523c
push dword [ebp - 0x1640]
push 0x571608
lea edx, [ebp - 0x1644]
mov eax, dword [ebp - 4]
call fcn.0040ef34
push dword [ebp - 0x1644]
lea eax, [ebp - 0x163c]
mov edx, 3
call fcn.00405358
mov edx, dword [ebp - 0x163c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push fcn.0053347c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp 0x56f23b
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x6dc]
mov dword [eax + 0x104534], edx
mov eax, dword [ebp - 0x6e0]
push eax
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [ebp - 0x6e4]
push eax
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [0x59049c]
mov eax, dword [eax]
call fcn.0040c2fc
jmp case.0x55d835.43
lea eax, [ebp - 0x124]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x6d4]
mov edx, 0x44
call fcn.004084c0
lea eax, [ebp - 0x6e4]
mov edx, 0x10
call fcn.004084c0
mov dword [ebp - 0x6d4], 0x44
mov dword [ebp - 0x6a8], 1
mov word [ebp - 0x6a4], 1
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x10c]
call fcn.0053d7b4
lea eax, [ebp - 0x1648]
mov edx, dword [ebp - 0x10c]
add edx, 0x1051c0
call fcn.0040523c
mov eax, dword [ebp - 0x1648]
lea edx, [ebp - 0x138]
call fcn.0040c03c
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x124]
call fcn.00405070
mov eax, dword [ebp - 0x17c]
call fcn.00405298
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jle 0x56f676
mov eax, dword [ebp - 0x17c]
cmp byte [eax], 0x22
jne 0x56f36c
mov ecx, 2
mov edx, dword [ebp - 0x17c]
mov eax, 0x572430
call fcn.0043cfd0
mov dword [ebp - 0x1e8], eax
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1e8]
sub ecx, 2
mov edx, 2
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov ecx, 3
mov edx, dword [ebp - 0x17c]
mov eax, 0x571644
call fcn.0043cfd0
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jle 0x56f3b0
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1e8]
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov ecx, 3
mov edx, dword [ebp - 0x17c]
mov eax, 0x57243c
call fcn.0043cfd0
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jle 0x56f3f2
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1e8]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov edx, dword [ebp - 0x17c]
mov eax, 0x5720cc
call fcn.004055dc
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1e8], 0
jle 0x56f44f
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0x1e8]
inc ecx
mov edx, dword [ebp - 0x17c]
mov eax, 0x5720cc
call fcn.0043cfd0
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jg 0x56f41d
lea eax, [ebp - 0x164c]
push eax
mov edx, dword [ebp - 0x1ec]
inc edx
mov ecx, 3
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov eax, dword [ebp - 0x164c]
lea edx, [ebp - 0x140]
call fcn.0040b05c
mov eax, dword [ebp - 0x140]
mov edx, 0x572448
call fcn.004053e4
je 0x56f4c6
mov eax, dword [ebp - 0x140]
mov edx, 0x572454
call fcn.004053e4
je 0x56f4c6
mov eax, dword [ebp - 0x140]
mov edx, 0x572460
call fcn.004053e4
je 0x56f4c6
mov eax, dword [ebp - 0x140]
mov edx, 0x57246c
call fcn.004053e4
jne 0x56f53b
lea eax, [ebp - 0x140]
push eax
mov edx, dword [ebp - 0x1ec]
add edx, 4
mov ecx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov eax, dword [ebp - 0x140]
mov edx, 0x571608
call fcn.004053e4
je 0x56f505
cmp dword [ebp - 0x140], 0
jne 0x56f676
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1ec]
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x17c]
call fcn.0040c03c
jmp 0x56f676
mov eax, dword [ebp - 0x140]
mov edx, 0x572478
call fcn.004053e4
jne 0x56f676
lea eax, [ebp - 0x140]
push eax
mov edx, dword [ebp - 0x1ec]
add edx, 4
mov ecx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
mov eax, dword [ebp - 0x140]
mov edx, 0x571608
call fcn.004053e4
je 0x56f590
cmp dword [ebp - 0x140], 0
jne 0x56f676
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1ec]
add ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x17c]
call fcn.004054f8
lea eax, [ebp - 0xe50]
xor ecx, ecx
mov edx, 0x76c
call fcn.004036d0
mov eax, dword [ebp - 0x17c]
call fcn.00405298
push eax
mov eax, dword [ebp - 0x17c]
call fcn.00405298
cmp eax, 0x105
setle al
xor ecx, ecx
pop edx
call fcn.00431788
push eax
lea eax, [ebp - 0x17c]
call fcn.004054f0
lea edx, [ebp - 0xe50]
pop ecx
call fcn.00402de8
lea eax, [ebp - 0xe50]
call fcn.0055d120
lea eax, [ebp - 0xf7c]
lea edx, [ebp - 0xd4b]
call fcn.00403bd0
lea edx, [ebp - 0xf7c]
lea eax, [ebp - 0x1650]
call fcn.0040523c
push dword [ebp - 0x1650]
push 0x571608
lea eax, [ebp - 0x1654]
lea edx, [ebp - 0xc46]
call fcn.004051d0
push dword [ebp - 0x1654]
lea eax, [ebp - 0x124]
mov edx, 3
call fcn.00405358
lea eax, [ebp - 0x138]
lea edx, [ebp - 0xb41]
mov ecx, 0x105
call fcn.00405248
cmp dword [ebp - 0x138], 0
jne 0x56f6ba
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x6d4]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x124]
call fcn.00405498
push eax
push 0
call sub.KERNEL32.DLL_CreateProcessA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x265], al
jmp 0x56f6fd
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x6d4]
push eax
mov eax, dword [ebp - 0x138]
call fcn.00405498
push eax
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x124]
call fcn.00405498
push eax
push 0
call sub.KERNEL32.DLL_CreateProcessA
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x265], al
cmp byte [ebp - 0x265], 0
mov eax, dword [ebp - 0x6e0]
push eax
call sub.KERNEL32.DLL_CloseHandle
jmp 0x56f723
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x71], 0
jne 0x56f735
call fcn.0055d238
push 0x32
mov eax, dword [ebp - 0x6e4]
push eax
call sub.KERNEL32.DLL_WaitForSingleObject
test eax, eax
jne 0x56f712
lea eax, [ebp - 4]
push eax
mov eax, dword [ebp - 0x6e4]
push eax
call sub.KERNEL32.DLL_GetExitCodeProcess
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x104534], edx
mov eax, dword [ebp - 0x6e4]
push eax
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [0x59049c]
mov eax, dword [eax]
call fcn.0040c2fc
jmp case.0x55d835.43
lea eax, [ebp - 0x1658]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1658]
lea edx, [ebp - 0x124]
call fcn.0040b05c
lea eax, [ebp - 0x124]
push eax
push 0x50fdb4
call sub.user32.dll_EnumWindows
jmp case.0x55d835.43
call sub.KERNEL32.DLL_GetTickCount
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
xor eax, eax
push ebp
push 0x56f80f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x138]
call fcn.0040b6e8
add eax, dword [ebp - 0x174]
mov dword [ebp - 0x148], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x56f8d1
push 1
call sub.KERNEL32.DLL_Sleep_1
lea eax, [ebp - 0x184]
push eax
push 4
lea eax, [ebp - 0x180]
push eax
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax + 0x419c]
mov edx, dword [0x590460]
mov eax, dword [edx + eax*4]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c8]
push eax
call sub.KERNEL32.DLL_ReadProcessMemory
call sub.KERNEL32.DLL_GetTickCount
cmp eax, dword [ebp - 0x148]
jae case.0x55d835.43
cmp dword [ebp - 0x180], 0
je 0x56f8d1
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x90], 0
je 0x56f961
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x93], 0
je 0x56f961
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x92], 0
jne case.0x55d835.43
lea eax, [ebp - 0x26c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0x26c]
call fcn.0040b73c
test al, al
jne 0x56f9cb
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x15c]
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0x26c]
call fcn.0052d600
cmp dword [ebp - 0x134], 0
jne 0x56f9cb
lea eax, [ebp - 0x26c]
mov edx, dword [ebp - 0x270]
call fcn.00405070
push ebp
mov eax, dword [ebp - 0x26c]
call fcn.0055c150
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x165c]
push eax
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ecx]
lea eax, [ebp - 0x1660]
mov edx, 0x57248c
call fcn.004052e4
mov edx, dword [ebp - 0x1660]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x165c]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x165c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 4
mov edx, 1
call fcn.00402cb8
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
jmp case.0x55d835.43
lea eax, [ebp - 0x1664]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x1664]
mov eax, dword [ebp - 0x10c]
add eax, 0x105e38
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
inc edi
adc byte [esi + ebx*2], 0x10
add bh, bh
invalid
invalid
dec dword [ebx - 0x10b7b]
inc edi
sbb byte [eax], 0x5e
adc byte [eax], al
invalid
invalid
invalid
dec dword [ebx - 0x10b7b]
inc edi
sbb byte [esi + ebx*2], 0x10
add bh, bh
invalid
invalid
dec dword [ebx - 0x10b7b]
inc edi
and byte [eax], 0x5e
adc byte [eax], al
invalid
invalid
invalid
dec dword [ebx - 0x10b7b]
inc edi
and byte [esi + ebx*2], 0x10
add bh, bh
invalid
invalid
dec dword [ebx - 0x10b7b]
inc edi
sub byte [eax], 0x5e
adc byte [eax], al
invalid
invalid
invalid
dec dword [ebx - 0x10b7b]
inc edi
sub byte [esi + ebx*2], 0x10
add byte [eax], bl
add byte [eax], al
dec dword [ebx - 0x10b7b]
inc dword [0x105e30]
call fcn.00404fd8
mov eax, dword [ebp - 0x10c]
add eax, 0x105e34
mov edx, 0x57249c
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105e38]
call fcn.00405298
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jbe 0x56fe90
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105e38]
cmp byte [eax], 0x28
jne 0x56fe90
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105e38]
mov edx, dword [ebp - 4]
cmp byte [eax + edx - 1], 0x29
jne 0x56fe90
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 4]
sub ecx, 2
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105e38]
mov edx, 2
call fcn.004054f8
lea eax, [ebp - 0x1668]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1670]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053def4
mov ecx, dword [ebp - 0x1670]
lea eax, [ebp - 0x166c]
mov edx, 0x5724bc
call fcn.004052e4
mov edx, dword [ebp - 0x166c]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1668]
mov eax, dword [ebp - 0x10c]
add eax, 0x105e38
call fcn.0040502c
lea eax, [ebp - 0x1674]
push eax
lea eax, [ebp - 0x167c]
push eax
mov ecx, dword [ebp - 4]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x138]
call fcn.004054f8
mov ecx, dword [ebp - 0x167c]
lea eax, [ebp - 0x1678]
mov edx, 0x5724bc
call fcn.004052e4
mov edx, dword [ebp - 0x1678]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x1674]
lea eax, [ebp - 0x138]
mov edx, 0x5724bc
call fcn.004052e4
lea eax, [ebp - 0x1680]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1680]
or edx, 0xffffffff
call fcn.0040b724
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105e14], eax
lea eax, [ebp - 0x1684]
push eax
mov ecx, 2
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1684]
or edx, 0xffffffff
call fcn.0040b724
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105e18], eax
lea eax, [ebp - 0x1688]
push eax
mov ecx, 3
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1688]
or edx, 0xffffffff
call fcn.0040b724
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105e1c], eax
lea eax, [ebp - 0x168c]
push eax
mov ecx, 4
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x168c]
or edx, 0xffffffff
call fcn.0040b724
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105e20], eax
lea eax, [ebp - 0x1690]
push eax
mov ecx, 5
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1690]
or edx, 0xffffffff
call fcn.0040b724
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105e24], eax
lea eax, [ebp - 0x1694]
push eax
mov ecx, 6
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1694]
or edx, 0xffffffff
call fcn.0040b724
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105e28], eax
lea eax, [ebp - 0x1698]
push eax
mov ecx, 7
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x1698]
mov edx, 0xff000018
call fcn.0040b724
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105e2c], eax
lea eax, [ebp - 0x26c]
push eax
mov ecx, 8
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
cmp dword [ebp - 0x26c], 0
je 0x56fec3
lea edx, [ebp - 0x169c]
mov eax, dword [ebp - 0x26c]
call fcn.0040af24
mov edx, dword [ebp - 0x169c]
mov eax, dword [ebp - 0x10c]
add eax, 0x105e30
call fcn.0040502c
lea eax, [ebp - 0x26c]
push eax
mov ecx, 0xfffffff7
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
cmp dword [ebp - 0x26c], 0
je 0x56fec3
lea ecx, [ebp - 0x16a0]
mov dl, 0x22
mov eax, dword [ebp - 0x26c]
call fcn.0040b330
mov edx, dword [ebp - 0x16a0]
mov eax, dword [ebp - 0x10c]
add eax, 0x105e34
call fcn.0040502c
jmp 0x56fec3
lea eax, [ebp - 0x16a4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x16a4]
mov eax, dword [ebp - 0x10c]
add eax, 0x105e38
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
push eax
push 0x535848
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
xor eax, eax
push ebp
push 0x56ff54
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x16a8]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
cmp dword [ebp - 0x16a8], 0
je 0x56ff2b
push 0xffffffffffffffff
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_FlashWindow
jmp 0x56ff47
push 0xffffffffffffffff
mov eax, dword [0x590504]
mov eax, dword [eax]
call fcn.00469a3c
push eax
call sub.user32.dll_FlashWindow
mov eax, dword [0x590640]
mov byte [eax], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x55d835.43
lea eax, [ebp - 0x124]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
cmp dword [ebp - 0x124], 0
je 0x56ffbf
push 0x20002
push 0
mov eax, dword [ebp - 0x124]
call fcn.00405498
push eax
call sub.winmm.dll_PlaySoundA
mov edx, eax
and edx, 0xff
add edx, 0x30
lea eax, [ebp - 0x124]
call fcn.004051c0
cmp dword [ebp - 0x124], 0
je 0x56ffde
mov eax, dword [ebp - 0x124]
mov edx, 0x5724cc
call fcn.004053e4
jne case.0x55d835.43
push 0xa
push 0x5724d0
mov eax, dword [0x591668]
push eax
call sub.KERNEL32.DLL_FindResourceA
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [0x591668]
push eax
call sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
push eax
call sub.KERNEL32.DLL_LockResource
mov dword [ebp - 0x190], eax
push 6
mov eax, dword [ebp - 0x190]
push eax
call sub.winmm.dll_sndPlaySoundA
mov eax, dword [ebp - 8]
call fcn.004084c8
mov eax, dword [ebp - 8]
push eax
call sub.KERNEL32.DLL_FreeResource
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x92], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x91], 0
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x71], 1
jmp case.0x55d835.43
push ebp
call fcn.00559b40
pop ecx
jmp case.0x55d835.43
push ebp
call fcn.00559e58
pop ecx
jmp case.0x55d835.43
push ebp
call fcn.0055a0f4
pop ecx
jmp case.0x55d835.43
push ebp
call fcn.0055a538
pop ecx
jmp case.0x55d835.43
push ebp
call fcn.0055a948
pop ecx
jmp case.0x55d835.43
push ebp
call fcn.005594c4
pop ecx
test al, al
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bd8], 1
jmp case.0x55d835.43
push ebp
call fcn.0055af74
pop ecx
jmp case.0x55d835.43
push ebp
call fcn.0055bd80
pop ecx
jmp case.0x55d835.43
push ebp
call fcn.0055bf84
pop ecx
jmp case.0x55d835.43
push 0
push 0
push 0x10
mov eax, dword [0x590504]
mov eax, dword [eax]
call fcn.00469a3c
push eax
call sub.user32.dll_PostMessageA
jmp case.0x55d835.43
push 0
push 0
push 0x4721
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_SendMessageA
cmp eax, 0x4321
je 0x5701d3
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x92], 1
mov eax, dword [ebp - 0x10c]
cmp byte [eax + 0x90], 0
je 0x570158
mov eax, dword [ebp - 0x10c]
push eax
push fcn.00534bc8
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x5701a8
lea edx, [ebp - 0x16ac]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1c0
call fcn.0040ba78
lea eax, [ebp - 0x16ac]
mov edx, 0x571688
call fcn.004052a0
mov edx, dword [ebp - 0x16ac]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x5701c3
mov eax, dword [ebp - 0x10c]
lea edi, [eax + 0x9c]
mov esi, 0x5724d8
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
jmp case.0x55d835.43
lea eax, [ebp - 0x124]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x124]
call fcn.00405498
push eax
call sub.KERNEL32.DLL_GlobalAddAtomA
movzx eax, ax
push eax
push 1
push 0x4721
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
push eax
call sub.user32.dll_SendMessageA
jmp case.0x55d835.43
lea eax, [ebp - 0x16b0]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov ecx, dword [ebp - 0x16b0]
lea eax, [ebp - 0x124]
mov edx, 0x572500
call fcn.004052e4
xor eax, eax
mov dword [ebp - 4], eax
lea eax, [ebp - 0x16b4]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x16b4]
lea edx, [ebp - 0x134]
call fcn.0040b73c
test al, al
jne 0x570295
xor eax, eax
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
ja 0x5702b3
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x43c4]
mov dword [ebp - 4], eax
lea eax, [ebp - 0x16bc]
push eax
mov ecx, 2
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x16bc]
lea edx, [ebp - 0x16b8]
call fcn.0040b028
mov edx, dword [ebp - 0x16b8]
lea eax, [ebp - 0x124]
call fcn.00405070
mov eax, dword [ebp - 0x124]
mov edx, 0x57250c
call fcn.004053e4
jne 0x57030e
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x5703ae
mov eax, dword [ebp - 0x124]
mov edx, 0x57251c
call fcn.004053e4
jne 0x57032c
mov dword [ebp - 8], 3
jmp 0x5703ae
mov eax, dword [ebp - 0x124]
mov edx, 0x572530
call fcn.004053e4
jne 0x570347
mov dword [ebp - 8], 6
jmp 0x5703ae
mov eax, dword [ebp - 0x124]
mov edx, 0x572544
call fcn.004053e4
jne 0x570362
mov dword [ebp - 8], 9
jmp 0x5703ae
mov eax, dword [ebp - 0x124]
mov edx, 0x572554
call fcn.004053e4
jne 0x57037d
mov dword [ebp - 8], 5
jmp 0x5703ae
mov eax, dword [ebp - 4]
push eax
call sub.user32.dll_IsIconic
test eax, eax
je 0x570395
push 9
mov eax, dword [ebp - 4]
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [ebp - 4]
push eax
call sub.user32.dll_BringWindowToTop
mov eax, dword [ebp - 4]
push eax
call sub.user32.dll_SetForegroundWindow
mov dword [ebp - 8], 8
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.user32.dll_ShowWindow
jmp case.0x55d835.43
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffa
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
xor eax, eax
push ebp
push 0x570427
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x16c0]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x16c0]
call fcn.0040b6e8
mov dword [ebp - 0x264], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x570439
lea eax, [ebp - 0x16c4]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x16c4]
call fcn.0040b6e8
mov dword [ebp - 0x200], eax
lea eax, [ebp - 0x16c8]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x16c8]
call fcn.0040b6e8
mov dword [ebp - 0x1fc], eax
lea eax, [ebp - 0x16cc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 4
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x16cc]
call fcn.0040b6e8
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0x16d0]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 5
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x16d0]
call fcn.0040b6e8
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x200]
mov dword [eax + 0x44b8], edx
mov edx, dword [ebp - 0x1fc]
mov dword [eax + 0x44bc], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x208]
mov dword [eax + 0x44c0], edx
mov edx, dword [ebp - 0x204]
mov dword [eax + 0x44c4], edx
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x264]
mov dword [eax + 0x449c], edx
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov edx, dword [ebp - 0x138]
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push 0x5305dc
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
xor eax, eax
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x138]
mov eax, 0x571614
call fcn.004055dc
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jle 0x570606
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105bc0]
add ecx, dword [ebp - 0x1e0]
dec ecx
mov edx, dword [ebp - 0x120]
mov eax, 0x571608
call fcn.00405580
lea eax, [ebp - 0x138]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x138]
mov eax, 0x5720cc
call fcn.004055dc
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0x105bdc], eax
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, dword [ebp - 0x138]
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x105bdc], 0
jle 0x5706cf
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105bdc]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, 1
call fcn.00405538
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bdc]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
mov eax, dword [ebp - 0x10c]
call fcn.0055409c
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, dword [ebp - 0x138]
call fcn.0040502c
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x134]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x138]
call fcn.004054f8
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x105be0]
call fcn.00405070
lea eax, [ebp - 0x138]
mov ecx, 1
mov edx, 1
call fcn.00405538
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov eax, 0x572084
call fcn.004055dc
mov ebx, eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105be0]
call fcn.00405298
add ebx, eax
mov dword [ebp - 0x1e0], ebx
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
call fcn.00405298
mov dword [ebp - 0x13c], eax
mov byte [ebp - 0x265], 0
jmp 0x570768
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1e0]
cmp byte [eax + edx - 1], 0x5b
jne 0x570762
mov byte [ebp - 0x265], 1
jmp 0x5707bc
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x13c]
jg 0x5707bc
mov eax, dword [0x59046c]
mov esi, eax
lea edi, [ebp - 0xe70]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe70]
mov edx, 0x5715d0
mov cl, 0x20
call fcn.00403c78
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1e0]
mov al, byte [eax + edx - 1]
and eax, 0xff
bt dword [ebp - 0xe70], eax
jae 0x570744
cmp byte [ebp - 0x265], 0
je 0x570832
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x570827
push 0x571614
lea edx, [ebp - 0x16d8]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x105bd4]
call fcn.0040b57c
push dword [ebp - 0x16d8]
push 0x572564
push 0x571688
lea eax, [ebp - 0x16d4]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x16d4]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
lea eax, [ebp - 0x16dc]
push eax
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ecx]
lea eax, [ebp - 0x16e0]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x16e0]
mov ecx, 0xfffffffd
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x16dc]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
call fcn.0040502c
mov byte [ebp - 0x186], 0x25
mov dword [ebp - 4], 1
mov dword [ebp - 8], 1
mov eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x138]
mov dl, byte [ebp - 0x186]
mov eax, dword [ebp - 0x10c]
call fcn.0055418c
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x26c]
push eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053ddf0
mov ecx, dword [ebp - 0x13c]
sub ecx, dword [ebp - 0x1e0]
inc ecx
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, dword [ebp - 0x1e0]
call fcn.00405538
lea eax, [ebp - 0x16e4]
push eax
mov ecx, 2
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x16e4]
lea edx, [ebp - 0x1ec]
call fcn.0040b73c
test al, al
je 0x570946
cmp dword [ebp - 0x1ec], 0
jg 0x570950
mov dword [ebp - 0x1ec], 1
dec dword [ebp - 0x1ec]
lea eax, [ebp - 0x16e8]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x16e8]
lea edx, [ebp - 0x1e8]
call fcn.0040b73c
test al, al
je 0x570991
cmp dword [ebp - 0x1e8], 0
jg 0x570999
xor eax, eax
mov dword [ebp - 0x1e8], eax
dec dword [ebp - 0x1e8]
lea eax, [ebp - 0x16ec]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x16ec]
lea edx, [ebp - 0x1e4]
call fcn.0040b73c
test al, al
je 0x5709d7
cmp dword [ebp - 0x1e4], 0
jg 0x5709e9
mov dword [ebp - 0x1e4], 1
xor eax, eax
mov dword [ebp - 0x1e8], eax
dec dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
call fcn.004063e0
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0
jle 0x570a48
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov eax, dword [eax]
call fcn.004063e0
mov edi, eax
jmp 0x570a4a
xor edi, edi
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x1e4]
inc eax
add eax, 0x3e8
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x1f0]
jge 0x570a8f
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x158], eax
cmp edi, dword [ebp - 0x154]
jle 0x570a9d
mov dword [ebp - 0x154], edi
mov eax, dword [ebp - 0x154]
push eax
mov eax, dword [ebp - 0x158]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
xor eax, eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105be0]
mov eax, dword [ebp - 0x10c]
add eax, 0x105be0
mov edx, 0x5715f8
call fcn.004052e4
inc dword [ebp - 4]
lea eax, [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov byte [ebp - 0x265], 0
jmp 0x570c7f
mov eax, dword [ebp - 0x1e4]
inc eax
cmp eax, dword [ebp - 0x158]
jle 0x570b51
add dword [ebp - 0x158], 0x3e8
mov byte [ebp - 0x265], 1
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x1e0]
jge 0x570b72
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x154], eax
mov byte [ebp - 0x265], 1
cmp byte [ebp - 0x265], 0
je 0x570be8
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x1f0]
jge 0x570b95
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x158], eax
cmp edi, dword [ebp - 0x154]
jle 0x570ba3
mov dword [ebp - 0x154], edi
mov eax, dword [ebp - 0x154]
push eax
mov eax, dword [ebp - 0x158]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
mov byte [ebp - 0x265], 0
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
mov eax, dword [edx + eax*4 + 0x100]
mov edx, dword [ebp - 0x1e4]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x1e0]
lea eax, [eax + edx*4 - 4]
mov edx, dword [ebp - 0x138]
call fcn.0040502c
cmp dword [ebp - 0x1e8], 0
jl 0x570c55
mov eax, dword [ebp - 0x1e8]
add eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 0x1e0]
jge 0x570c55
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1e0], eax
inc dword [ebp - 0x1e4]
jmp 0x570c5b
inc dword [ebp - 0x1e0]
inc dword [ebp - 4]
lea eax, [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x105be0]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov eax, dword [ebp - 0x138]
call fcn.00405298
test eax, eax
jne 0x570b31
mov eax, dword [ebp - 0x1ec]
inc eax
cmp eax, dword [ebp - 0x1e0]
jne 0x570ca7
dec dword [ebp - 0x1e4]
inc dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e4]
cmp eax, dword [ebp - 0x1f0]
jge 0x570cc7
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x1e4], eax
cmp edi, dword [ebp - 0x154]
jle 0x570cd5
mov dword [ebp - 0x154], edi
mov eax, dword [ebp - 0x154]
push eax
mov eax, dword [ebp - 0x1e4]
push eax
mov eax, dword [ebp - 0x148]
mov edx, eax
shl eax, 6
add eax, edx
mov edx, dword [ebp - 0x10c]
mov edx, dword [edx + 0x48]
lea eax, [edx + eax*4 + 0x100]
mov ecx, 2
mov edx, dword [0x52ef5c]
call fcn.0040659c
add esp, 8
lea eax, [ebp - 0x138]
call fcn.00404fd8
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 0x105bc4]
add ecx, 2
mov eax, dword [ebp - 0x120]
mov edx, 1
call fcn.00405538
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x120]
mov edx, 0x572588
call fcn.004052e4
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
mov edx, 0x57259c
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x44e4]
mov eax, dword [0x5906d0]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, dword [ebp - 0x160]
mov dword [edx], eax
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bda], 1
jmp case.0x55d835.43
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x16f0]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053ddf0
mov edx, dword [ebp - 0x16f0]
mov eax, dword [ebp - 0x120]
call fcn.0040502c
lea eax, [ebp - 0x16f4]
push eax
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ecx]
lea eax, [ebp - 0x16f8]
mov edx, 0x5715f8
call fcn.004052e4
mov edx, dword [ebp - 0x16f8]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x16f4]
mov eax, dword [ebp - 0x120]
call fcn.0040502c
lea eax, [ebp - 0x16fc]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
xor ecx, ecx
mov eax, dword [ebp - 0x10c]
call fcn.0053d9e0
mov edx, dword [ebp - 0x16fc]
mov eax, dword [ebp - 0x10c]
add eax, 0x44e4
call fcn.0040502c
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax + 0x44e4]
mov eax, dword [0x5906d0]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, dword [ebp - 0x160]
mov dword [edx], eax
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x105bda], 1
jmp case.0x55d835.43
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x1700]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053ddf0
mov ecx, dword [ebp - 0x1700]
mov eax, dword [ebp - 0x120]
mov edx, 0x5715f8
call fcn.004052e4
lea eax, [ebp - 0x26c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
lea eax, [ebp - 0x270]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 0xfffffffe
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x26c]
mov eax, 0x57162c
call fcn.004055dc
test eax, eax
jne 0x570f6b
mov edx, dword [ebp - 0x26c]
mov eax, 0x571638
call fcn.004055dc
test eax, eax
jne 0x570f6b
mov edx, dword [ebp - 0x26c]
mov eax, 0x571644
call fcn.004055dc
test eax, eax
jne 0x570f6b
mov eax, dword [0x59049c]
push dword [eax]
push 0x571650
push 0x57162c
push dword [ebp - 0x26c]
lea eax, [ebp - 0x26c]
mov edx, 4
call fcn.00405358
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x480]
call fcn.004033e0
mov eax, dword [ebp - 0x26c]
call fcn.0040bc10
test al, al
je 0x570f98
lea eax, [ebp - 0x480]
call fcn.0040317c
jmp 0x570fa3
lea eax, [ebp - 0x480]
call fcn.00403170
mov edx, dword [ebp - 0x270]
mov eax, 0x5725a8
call fcn.004055dc
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jle 0x57100e
lea eax, [ebp - 0x270]
call fcn.004054f0
mov edx, dword [ebp - 0x1e0]
mov byte [eax + edx - 1], 0xd
mov edx, dword [ebp - 0x1e0]
inc edx
lea eax, [ebp - 0x270]
mov ecx, 1
call fcn.00405538
mov edx, dword [ebp - 0x270]
mov eax, 0x5725a8
call fcn.004055dc
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jg 0x570fc2
mov edx, dword [ebp - 0x270]
mov eax, 0x5725b4
call fcn.004055dc
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jle 0x571079
lea eax, [ebp - 0x270]
call fcn.004054f0
mov edx, dword [ebp - 0x1e0]
mov byte [eax + edx - 1], 0xa
mov edx, dword [ebp - 0x1e0]
inc edx
lea eax, [ebp - 0x270]
mov ecx, 1
call fcn.00405538
mov edx, dword [ebp - 0x270]
mov eax, 0x5725b4
call fcn.004055dc
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jg 0x57102d
mov edx, dword [ebp - 0x270]
lea eax, [ebp - 0x480]
call fcn.004056b4
call fcn.0040349c
lea eax, [ebp - 0x480]
call fcn.004034a8
jmp case.0x55d835.43
lea eax, [ebp - 0x1704]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1704]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push 0x535e80
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
lea eax, [ebp - 0x1708]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x1708]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push 0x535ed4
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
lea eax, [ebp - 0x170c]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov edx, dword [ebp - 0x170c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
push eax
push 0x535f50
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x120]
mov edx, 0x5725c0
call fcn.0040502c
push ebp
call fcn.00559b40
pop ecx
jmp case.0x55d835.43
lea eax, [ebp - 0x1710]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1710]
lea edx, [ebp - 0x138]
call fcn.0040b05c
mov eax, dword [ebp - 0x138]
call fcn.00405298
test eax, eax
jle case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
sub al, 0x64
je 0x57122a
dec al
jne case.0x55d835.43
mov eax, dword [ebp - 0x10c]
push eax
push 0x53691c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
push eax
push 0x536924
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
lea eax, [ebp - 0x1714]
push eax
mov edx, dword [ebp - 0x120]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebp - 0x10c]
call fcn.0053e8d4
mov eax, dword [ebp - 0x1714]
lea edx, [ebp - 0x138]
call fcn.0040b05c
mov eax, dword [ebp - 0x138]
call fcn.00405298
test eax, eax
jle case.0x55d835.43
mov eax, dword [ebp - 0x138]
mov al, byte [eax]
sub al, 0x64
je 0x5712c2
dec al
je 0x5712a6
sub al, 3
je 0x5712de
sub al, 0xb
je 0x57131c
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
push eax
push 0x53692c
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
mov eax, dword [ebp - 0x10c]
push eax
push 0x536934
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
jmp case.0x55d835.43
push 0
call sub.user32.dll_GetSystemMetrics
mov dword [ebp - 0x690], eax
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x688], eax
xor eax, eax
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x684], eax
lea eax, [ebp - 0x690]
push eax
call sub.user32.dll_ClipCursor
jmp case.0x55d835.43
push 0
call sub.user32.dll_ClipCursor
jmp case.0x55d835.43
lea eax, [ebp - 0x1718]
push eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 0x44e4]
mov ecx, 1
mov edx, 1
call fcn.004054f8
mov eax, dword [ebp - 0x1718]
mov edx, 0x571644
call fcn.004053e4
je case.0x55d835.43
mov eax, dword [0x590504]
mov eax, dword [eax]
mov eax, dword [eax + 0x11fc]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je case.0x55d835.43
mov eax, dword [ebp - 0x10c]
mov byte [eax + 0x92], 1
mov eax, dword [ebp - 0x10c]
push eax
push fcn.00534bc8
mov eax, dword [ebp - 0x10c]
call fcn.00425d90
mov eax, dword [0x590638]
cmp word [eax], 0
jbe 0x571408
lea edx, [ebp - 0x1720]
mov eax, dword [0x590638]
movzx eax, word [eax]
add eax, 0x1de
call fcn.0040ba78
push dword [ebp - 0x1720]
mov eax, dword [ebp - 0x10c]
push dword [eax + 0x44e4]
push 0x571688
lea eax, [ebp - 0x171c]
mov edx, 3
call fcn.00405358
mov edx, dword [ebp - 0x171c]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
jmp 0x571449
push 0x5725d8
mov eax, dword [ebp - 0x10c]
push dword [eax + 0x44e4]
push 0x571688
lea eax, [ebp - 0x1724]
mov edx, 3
call fcn.00405358
mov edx, dword [ebp - 0x1724]
mov eax, dword [ebp - 0x10c]
add eax, 0x9c
mov ecx, 0xff
call fcn.00405274
mov eax, dword [ebp - 0x10c]
call fcn.005331a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5715b2
lea eax, [ebp - 0x1724]
mov edx, 0x47
call fcn.00404ffc
lea eax, [ebp - 0x1604]
mov edx, 0x1c
call fcn.00404ffc
lea eax, [ebp - 0x1590]
call fcn.00404fd8
lea eax, [ebp - 0x1594]
call fcn.00404fd8
lea eax, [ebp - 0x158c]
mov edx, 0x62
call fcn.00404ffc
lea eax, [ebp - 0x1400]
call fcn.00404fd8
lea eax, [ebp - 0x1404]
call fcn.00404fd8
lea eax, [ebp - 0x13fc]
mov edx, 0xe
call fcn.00404ffc
lea eax, [ebp - 0x13c4]
call fcn.00404fd8
lea eax, [ebp - 0x13c0]
call fcn.00404fd8
lea eax, [ebp - 0x13bc]
mov edx, 2
call fcn.00404ffc
lea eax, [ebp - 0x13b4]
mov edx, 0x51
call fcn.00404ffc
lea eax, [ebp - 0x1270]
mov edx, 0x64
call fcn.00404ffc
lea eax, [ebp - 0x10e0]
mov edx, 0x59
call fcn.00404ffc
lea eax, [ebp - 0xe7c]
mov edx, 3
call fcn.00404ffc
lea eax, [ebp - 0x274]
mov edx, 3
call fcn.00404ffc
lea eax, [ebp - 0x17c]
call fcn.00404fd8
lea eax, [ebp - 0x140]
call fcn.00404fd8
lea eax, [ebp - 0x138]
call fcn.00404fd8
lea eax, [ebp - 0x124]
call fcn.00404fd8
lea eax, [ebp - 0x114]
call fcn.00404fd8
lea eax, [ebp - 0x284]
mov edx, dword [0x555bf8]
call fcn.004065a8
lea eax, [ebp - 0x27c]
mov edx, dword [0x555bd0]
call fcn.004065a8
lea eax, [ebp - 0x144]
call fcn.00404fd8
ret