Function at 0x540ed0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x3c
push 0
push 0
dec ecx
jne 0x540ed8
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.0040509c
xor eax, eax
push ebp
push 0x54784a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp byte [eax], 0x2b
jne 0x5411bc
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 8]
call fcn.00404eac
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.0040510c
push 0
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.00478ce0
mov edx, dword [ebp - 0x94]
lea eax, [ebp - 0x1c]
call fcn.00404c84
mov eax, dword [ebp - 0x18]
mov edx, 0x547860
call fcn.00404ff8
jne 0x540f6c
mov eax, dword [0x573894]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x54786c
call fcn.00404ff8
jne 0x540f83
mov eax, dword [0x573714]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x547878
call fcn.00404ff8
jne 0x540f9a
mov eax, dword [0x573714]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x547888
call fcn.00404ff8
jne 0x540fb1
mov eax, dword [0x573840]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x547894
call fcn.00404ff8
jne 0x540fc8
mov eax, dword [0x573840]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x5478a4
call fcn.00404ff8
jne 0x540fdf
mov eax, dword [0x573cc8]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5478b0
call fcn.00404ff8
jne 0x540ff6
mov eax, dword [0x573cc8]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x5478c0
call fcn.00404ff8
jne 0x54100d
mov eax, dword [0x573e70]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5478cc
call fcn.00404ff8
jne 0x541024
mov eax, dword [0x573e70]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x5478dc
call fcn.00404ff8
jne 0x54103b
mov eax, dword [0x574284]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5478e8
call fcn.00404ff8
jne 0x541052
mov eax, dword [0x574284]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x5478f8
call fcn.00404ff8
jne 0x541076
mov eax, dword [0x5737c4]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5736d4]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x547904
call fcn.00404ff8
jne 0x54108d
mov eax, dword [0x5737c4]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x547914
call fcn.00404ff8
jne 0x5410b1
mov eax, dword [0x573aac]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5736d4]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x547924
call fcn.00404ff8
jne 0x5410c8
mov eax, dword [0x573aac]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x547934
call fcn.00404ff8
jne 0x5410ec
mov eax, dword [0x573b90]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x574208]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x547940
call fcn.00404ff8
jne 0x541103
mov eax, dword [0x573b90]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x547950
call fcn.00404ff8
jne 0x541127
mov eax, dword [0x573e64]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573578]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x547960
call fcn.00404ff8
jne 0x54113e
mov eax, dword [0x573e64]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x547970
call fcn.00404ff8
jne 0x541162
mov eax, dword [0x573ef8]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x574208]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x547980
call fcn.00404ff8
jne 0x541179
mov eax, dword [0x573ef8]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x547990
call fcn.00404ff8
jne 0x541192
mov eax, dword [ebp - 4]
mov byte [eax + 0x3d4], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x5479a0
call fcn.00404ff8
jne case.default.0x542821
mov eax, dword [ebp - 4]
call fcn.00540bcc
mov eax, dword [ebp - 4]
mov byte [eax + 0x3d4], 0
jmp case.default.0x542821
mov eax, dword [ebp - 8]
call fcn.00404eac
cmp eax, 0x16
jge 0x541217
mov eax, dword [ebp - 8]
cmp byte [eax], 0x3d
jne case.default.0x542821
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 8]
call fcn.00404eac
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.0040510c
mov eax, dword [ebp - 0x1c]
mov edx, 0x5479b0
call fcn.00404ff8
jne case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov byte [eax + 0x118], 1
jmp case.default.0x542821
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x16
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040510c
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 8]
call fcn.00404eac
mov ecx, eax
sub ecx, 0x16
mov edx, 0x17
mov eax, dword [ebp - 8]
call fcn.0040510c
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0xc]
call fcn.00482b90
mov eax, dword [0x57382c]
cmp dword [eax], 0
jne case.0x5412eb.528
movzx eax, word [ebp - 0x7c]
cmp eax, 0x212
jg 0x54130e
je 0x541666
cmp eax, 0x20a
jg 0x5412dd
je 0x541823
cmp eax, 0x1fa
jg 0x5412bd
je 0x5418c7
add eax, 0xffffffce
sub eax, 2
jb case.0x5412eb.528
sub eax, 0x1c3
je 0x541523
dec eax
je 0x54144d
dec eax
je 0x54146a
jmp case.default.0x542821
sub eax, 0x1fb
je 0x5418e4
sub eax, 0xd
je 0x541676
dec eax
je 0x541814
jmp case.default.0x542821
add eax, 0xfffffdf5
cmp eax, 6
ja case.default.0x542821
jmp dword [eax*4 + 0x5412f2]
cmp eax, 0x21a
jg 0x54134c
je 0x5416e2
add eax, 0xfffffded
cmp eax, 6
ja case.default.0x542821
jmp dword [eax*4 + 0x541330]
cmp eax, 0x7d7
jg 0x54137f
je 0x5416ff
sub eax, 0x292
je case.0x5412eb.528
sub eax, 0x90
je case.0x5412eb.528
sub eax, 0x130
je 0x5419a7
jmp case.default.0x542821
sub eax, 0x4e82
je 0x541783
sub eax, 0x2c
je 0x5413bd
dec eax
jne case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5479c0
call fcn.004f6038
mov eax, dword [0x5ddd94]
call fcn.0052dd88
jmp case.0x5412eb.528
cmp dword [ebp - 0x10], 0
je case.0x5412eb.528
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
lea edx, [ebp - 0xa0]
mov eax, 0x5479dc
call fcn.004a9448
mov edx, dword [ebp - 0xa0]
lea ecx, [ebp - 0x9c]
mov eax, dword [ebp - 0x64]
call fcn.004976bc
mov edx, dword [ebp - 0x9c]
lea eax, [ebp - 0x64]
call fcn.00404c84
lea edx, [ebp - 0xa4]
mov eax, 2
call fcn.00402ee4
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x64]
call fcn.00404ff8
je case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5479f0
call fcn.004f6038
mov eax, dword [ebp - 4]
call fcn.0045995c
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547a10
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [ebp - 0x80]
sub eax, 0xfffffffe
je 0x5414c4
sub eax, 2
jne 0x5414e1
push 0x547a60
mov eax, dword [ebp - 4]
push dword [eax + 0x388]
push 0x547a6c
lea eax, [ebp - 0xa8]
mov edx, 3
call fcn.00404f6c
mov edx, dword [ebp - 0xa8]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
xor edx, edx
mov eax, dword [0x5ddd94]
call fcn.0052f398
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547a88
call fcn.004f6038
jmp case.0x5412eb.528
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 0x80]
call fcn.004096c8
mov ecx, dword [ebp - 0xb0]
lea eax, [ebp - 0xac]
mov edx, 0x547aa8
call fcn.00404ef8
mov edx, dword [ebp - 0xac]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [ebp - 0x80]
add eax, 5
cmp eax, 4
ja case.default.0x541532
jmp dword [eax*4 + 0x541539]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547ae0
call fcn.004f6038
jmp 0x5415ea
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547af8
call fcn.004f6038
jmp 0x5415ea
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547b38
call fcn.004f6038
jmp 0x5415ea
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547b6c
call fcn.004f6038
jmp 0x5415ea
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547b88
call fcn.004f6038
jmp 0x5415ea
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547ba4
call fcn.004f6038
mov eax, dword [0x5ddd94]
call fcn.0052dd88
jmp case.0x5412eb.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00548e08
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547bcc
call fcn.004f6038
mov eax, dword [ebp - 4]
call fcn.00548de8
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547be8
call fcn.004f6038
mov eax, dword [ebp - 4]
call fcn.00548de8
jmp case.0x5412eb.528
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.00548a08
jmp case.0x5412eb.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054878c
jmp case.0x5412eb.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00548e74
jmp case.0x5412eb.528
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00551628
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547c00
call fcn.004f6038
jmp case.0x5412eb.528
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0053e014
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547c24
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547c58
call fcn.004f6038
jmp case.0x5412eb.528
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
cmp dword [ebp - 0xb4], 0
je case.0x5412eb.528
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0xb8]
mov eax, dword [0x573680]
call fcn.00404c40
mov eax, dword [ebp - 4]
call fcn.0054f52c
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8e0]
cmp byte [eax + 0x26c], 0
jne case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8e0]
call fcn.00488994
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f0]
call fcn.0048a530
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8e0]
xor edx, edx
call fcn.004887f8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
mov eax, dword [eax + 0x34]
mov edx, 0x23
call fcn.00478140
mov eax, dword [eax + 0x20]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 8]
jmp case.0x5412eb.528
cmp word [ebp - 0x76], 1
jne 0x5417d7
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8e0]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x573ba0]
mov byte [eax], 0
mov eax, dword [0x573e04]
mov byte [eax], 0
mov eax, dword [0x5739b4]
mov byte [eax], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547c84
call fcn.004f6038
mov eax, dword [ebp - 4]
call fcn.0045995c
jmp case.0x5412eb.528
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0053e014
jmp case.0x5412eb.528
mov eax, dword [ebp - 0x80]
sub eax, 1
jb 0x541836
dec eax
je 0x541853
dec eax
je 0x541870
dec eax
je 0x54188d
jmp 0x5418aa
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547ca0
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547cc8
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547cec
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547d18
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547d40
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547d6c
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [ebp - 0x80]
sub eax, 0xfffffffe
je 0x54190c
dec eax
jne 0x541929
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547d88
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547da8
call fcn.004f6038
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547dc8
call fcn.004f6038
jmp case.0x5412eb.528
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0053e014
jmp case.0x5412eb.528
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547dec
call fcn.004f6038
jmp case.0x5412eb.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00549094
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547e14
call fcn.004f6038
mov eax, dword [ebp - 4]
call fcn.00548de8
jmp case.default.0x542821
push 0x547e2c
lea edx, [ebp - 0xc4]
mov eax, 0x547e64
call fcn.004a9448
mov edx, dword [ebp - 0xc4]
lea ecx, [ebp - 0xc0]
mov eax, dword [0x573ff0]
mov eax, dword [eax]
call fcn.004a91e4
push dword [ebp - 0xc0]
push 0x547e74
lea eax, [ebp - 0xbc]
mov edx, 3
call fcn.00404f6c
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5735b0]
cmp byte [eax], 0
je 0x541a71
cmp word [ebp - 0x7c], 0x27a
jne case.default.0x542821
mov eax, dword [ebp - 4]
lea esi, [ebp - 0x80]
lea edi, [eax + 0x3ac]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0xc8]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 4]
add eax, 0x3bc
call fcn.00404c40
mov eax, dword [0x573fc4]
mov byte [eax], 1
mov dl, 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
call fcn.00434afc
jmp case.default.0x542821
movzx eax, word [ebp - 0x7c]
cmp eax, 0x325
jg 0x541f68
je 0x545f49
cmp eax, 0x289
jg 0x541ce5
je 0x54654a
cmp eax, 0x63
jge 0x541b8b
add eax, 0xfffffffa
cmp eax, 0x35
ja case.0x5423c7.20130
jmp dword [eax*4 + 0x541ab3]
cmp eax, 0x26b
jg 0x541c5c
je 0x54610d
cmp eax, 0x258
jg 0x541c07
je 0x545fc1
cmp eax, 0xcb
jg 0x541bde
je 0x545f91
add eax, 0xffffff9d
sub eax, 6
jb 0x545b42
sub eax, 0x5f
je 0x545f5b
dec eax
je 0x545f6b
dec eax
je 0x545fa1
jmp case.0x5423c7.20130
sub eax, 0xd2
je 0x54634e
dec eax
je 0x546368
dec eax
je 0x546382
sub eax, 0x13c
je 0x5455a2
jmp case.0x5423c7.20130
add eax, 0xfffffda7
cmp eax, 0xf
ja case.0x5423c7.20130
jmp dword [eax*4 + 0x541c1c]
add eax, 0xfffffd94
cmp eax, 0x1c
ja case.0x5423c7.20130
jmp dword [eax*4 + 0x541c71]
add eax, 0xfffffd76
cmp eax, 0x9a
ja case.0x5423c7.20130
jmp dword [eax*4 + 0x541cfc]
cmp eax, 0x4e54
jg 0x54226e
je 0x544a59
cmp eax, 0x13b4
jg 0x5420d5
je 0x544827
cmp eax, 0x1399
jg 0x54205c
je 0x5447b4
cmp eax, 0x452
jg 0x541ffe
je case.default.0x542821
cmp eax, 0x44d
jg 0x541fe0
je 0x545a82
sub eax, 0x326
je case.0x541cf5.800
dec eax
je case.0x541cf5.801
sub eax, 4
je 0x544c88
sub eax, 0x121
je 0x545a37
jmp case.0x5423c7.20130
sub eax, 0x44e
je 0x545b05
dec eax
je 0x545aab
dec eax
je 0x5459bf
jmp case.0x5423c7.20130
cmp eax, 0x138c
jg 0x54203c
je 0x544261
sub eax, 0x4b0
je 0x547538
sub eax, 0x514
je 0x544170
sub eax, 0x212
je 0x545a2a
sub eax, 0x7b3
je 0x5441cb
jmp case.0x5423c7.20130
sub eax, 0x138d
je 0x54446a
sub eax, 0xa
je 0x54473b
dec eax
je 0x544799
jmp case.0x5423c7.20130
add eax, 0xffffec66
cmp eax, 0x18
ja case.0x5423c7.20130
jmp dword [eax*4 + 0x542071]
cmp eax, 0x232b
jg 0x54218c
je 0x543fc5
cmp eax, 0x13c0
jg 0x542130
je 0x54453e
add eax, 0xffffec4b
cmp eax, 9
ja case.0x5423c7.20130
jmp dword [eax*4 + 0x542108]
cmp eax, 0x13c7
jg 0x542166
je 0x544127
sub eax, 0x13c1
je 0x544565
sub eax, 2
je 0x5444fe
dec eax
je 0x544514
sub eax, 2
je 0x544119
jmp case.0x5423c7.20130
sub eax, 0x13c8
je 0x543e80
sub eax, 0xb7b
je 0x5476e8
sub eax, 0x3e6
je 0x543fa9
jmp case.0x5423c7.20130
cmp eax, 0x4e35
jg 0x5421ed
je 0x5442d6
cmp eax, 0x4e21
jg 0x5421cd
je case.default.0x542821
sub eax, 0x232c
je 0x5440d3
dec eax
je 0x544109
sub eax, 2
je 0x544031
dec eax
je 0x543ffb
jmp case.0x5423c7.20130
sub eax, 0x4e22
je 0x544c20
sub eax, 0x10
je case.0x541aac.23
dec eax
je 0x544c33
jmp case.0x5423c7.20130
add eax, 0xffffb1c8
cmp eax, 0x1a
ja case.0x5423c7.20130
jmp dword [eax*4 + 0x542202]
cmp eax, 0x4e9f
jg 0x5423a8
je 0x542fb0
add eax, 0xffffb1a7
cmp eax, 0x44
ja case.0x5423c7.20130
jmp dword [eax*4 + 0x542294]
cmp eax, 0x4ec6
jg 0x542462
je 0x542ac2
add eax, 0xffffb160
cmp eax, 0x24
ja case.0x5423c7.20130
jmp dword [eax*4 + 0x5423ce]
cmp eax, 0x59e2
jg 0x5424c3
je 0x543d4b
cmp eax, 0x59d9
jg 0x5424a1
je 0x543cd6
sub eax, 0x4ec8
je 0x542516
dec eax
je 0x542628
dec eax
je 0x5426e6
dec eax
je 0x5427a4
jmp case.0x5423c7.20130
sub eax, 0x59db
je 0x543ce6
sub eax, 2
je 0x543d0b
sub eax, 3
je 0x543d30
jmp case.0x5423c7.20130
cmp eax, 0x59ed
jg 0x5424f2
je 0x543cb6
sub eax, 0x59e6
je 0x543d95
sub eax, 2
je 0x543c39
sub eax, 2
je 0x543c63
jmp case.0x5423c7.20130
sub eax, 0x59ef
je 0x543cc6
sub eax, 4
je 0x543c0a
sub eax, 0xa419
je 0x546879
jmp case.0x5423c7.20130
mov eax, dword [ebp - 0x80]
dec eax
je 0x542524
dec eax
je 0x54253d
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa50]
xor edx, edx
call fcn.004887f8
jmp case.default.0x542821
mov eax, dword [0x573dec]
mov byte [eax], 1
mov eax, dword [0x573eb8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573c24]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573618]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5742fc]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573b50]
mov eax, dword [eax]
mov edx, 0x1d0
call fcn.0047e974
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x54260f
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa50]
mov ecx, 0x1d0
call fcn.00487fa0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa50]
xor edx, edx
call fcn.0043c040
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa50]
mov edx, 0x5f
call fcn.0043c064
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa58]
mov ecx, 0x1e4
call fcn.00487fa0
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa5c]
mov ecx, 0x1e5
call fcn.00487fa0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa50]
mov dl, 1
call fcn.004887f8
jmp case.default.0x542821
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
cmp dword [ebp - 0x54], 0
je case.default.0x542821
push 0
lea eax, [ebp - 0xcc]
push eax
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x54]
call fcn.00478ce0
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0x54]
call fcn.00404c84
push 0
lea eax, [ebp - 0xd0]
push eax
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x54]
call fcn.00478ce0
mov edx, dword [ebp - 0xd0]
lea eax, [ebp - 0x54]
call fcn.00404c84
cmp dword [ebp - 0x58], 0
je 0x5426b1
mov eax, dword [ebp - 0x58]
call fcn.00409878
mov edx, dword [0x573618]
mov dword [edx], eax
cmp dword [ebp - 0x18], 0
je 0x5426c7
mov eax, dword [ebp - 0x18]
call fcn.00409878
mov edx, dword [0x573c24]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je case.default.0x542821
mov eax, dword [ebp - 0x54]
call fcn.00409878
mov edx, dword [0x5742fc]
mov dword [edx], eax
jmp case.default.0x542821
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
cmp dword [ebp - 0x54], 0
je case.default.0x542821
push 0
lea eax, [ebp - 0xd4]
push eax
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x54]
call fcn.00478ce0
mov edx, dword [ebp - 0xd4]
lea eax, [ebp - 0x54]
call fcn.00404c84
push 0
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x54]
call fcn.00478ce0
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
call fcn.00404c84
cmp dword [ebp - 0x58], 0
je 0x54276f
mov eax, dword [ebp - 0x58]
call fcn.00409878
mov edx, dword [0x573eb8]
mov dword [edx], eax
cmp dword [ebp - 0x18], 0
je 0x542785
mov eax, dword [ebp - 0x18]
call fcn.00409878
mov edx, dword [0x573c24]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je case.default.0x542821
mov eax, dword [ebp - 0x54]
call fcn.00409878
mov edx, dword [0x5742fc]
mov dword [edx], eax
jmp case.default.0x542821
mov eax, dword [0x573dec]
mov dl, byte [ebp - 0x80]
mov byte [eax], dl
mov eax, dword [0x573dec]
cmp byte [eax], 5
ja case.default.0x542821
mov edx, dword [0x573dec]
movzx edx, byte [edx]
add edx, 0x1d0
dec edx
mov eax, dword [0x573b50]
mov eax, dword [eax]
call fcn.0047e974
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je case.default.0x542821
mov ecx, dword [0x573dec]
movzx ecx, byte [ecx]
add ecx, 0x1d0
dec ecx
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa50]
call fcn.00487fa0
mov eax, dword [0x573dec]
movzx eax, byte [eax]
dec eax
cmp eax, 4
ja case.default.0x542821
jmp dword [eax*4 + 0x542828]
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa58]
mov ecx, 0x1e4
call fcn.00487fa0
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa5c]
mov ecx, 0x1e5
call fcn.00487fa0
jmp case.default.0x542821
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa58]
mov ecx, 0x1e6
call fcn.00487fa0
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa5c]
mov ecx, 0x1e7
call fcn.00487fa0
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa54]
mov ecx, 0x1d4
call fcn.00487fa0
jmp case.default.0x542821
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa58]
mov ecx, 0x1e8
call fcn.00487fa0
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa5c]
mov ecx, 0x1e9
call fcn.00487fa0
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa54]
mov ecx, 0x1d6
call fcn.00487fa0
jmp case.default.0x542821
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa58]
mov ecx, 0x1ea
call fcn.00487fa0
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa5c]
mov ecx, 0x1eb
call fcn.00487fa0
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa54]
mov ecx, 0x1d8
call fcn.00487fa0
jmp case.default.0x542821
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa58]
mov ecx, 0x1ea
call fcn.00487fa0
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa5c]
mov ecx, 0x1eb
call fcn.00487fa0
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa54]
mov ecx, 0x1da
call fcn.00487fa0
mov edx, dword [0x573dec]
movzx edx, byte [edx]
add edx, 0x1d0
sub edx, 2
mov eax, dword [0x573b50]
mov eax, dword [eax]
call fcn.0047e974
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je case.default.0x542821
mov ecx, dword [0x573dec]
movzx ecx, byte [ecx]
add ecx, 0x1d0
sub ecx, 2
mov edx, dword [0x573b50]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa50]
call fcn.00487fa0
jmp case.default.0x542821
mov eax, dword [0x573cf0]
call fcn.00404bec
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa4c]
mov byte [eax + 0x26c], 1
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0xdc]
mov eax, dword [0x573cf0]
call fcn.00404c40
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa4c]
mov byte [eax + 0x26c], 0
jmp case.default.0x542821
cmp dword [ebp - 0x80], 0
jle case.default.0x542821
mov eax, dword [0x5ddd8c]
cmp byte [eax + 0x4c], 0
je case.default.0x542821
mov eax, dword [0x5ddd8c]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x5c], edx
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ddd8c]
mov dword [edx + 0x58], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ddd8c]
mov dword [edx + 0x60], eax
jmp case.default.0x542821
mov eax, dword [0x573ad0]
mov dl, byte [ebp - 0x76]
mov byte [eax], dl
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
cmp dword [ebp - 0xe0], 0
je 0x542b83
push 0
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0xe4]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0xe4]
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x58]
call fcn.00478ce0
cmp dword [ebp - 0x58], 0
je 0x542b6d
mov eax, dword [ebp - 0x58]
call fcn.00409878
mov edx, dword [0x5736c0]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je 0x542b83
mov eax, dword [ebp - 0x54]
call fcn.00409878
mov edx, dword [0x5743a4]
mov dword [edx], eax
mov eax, dword [0x573844]
mov eax, dword [eax]
mov edx, 0x2e4
call fcn.0047e974
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x542bbc
mov edx, dword [0x573844]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f8]
mov ecx, 0x2e4
call fcn.00487fa0
mov eax, dword [0x573ae0]
mov byte [eax], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa44]
mov byte [eax + 0x26c], 1
jmp case.default.0x542821
mov eax, dword [0x573ba4]
mov dl, byte [ebp - 0x76]
mov byte [eax], dl
lea edx, [ebp - 0xe8]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
cmp dword [ebp - 0xe8], 0
je 0x542c59
push 0
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0xec]
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x58]
call fcn.00478ce0
cmp dword [ebp - 0x58], 0
je 0x542c43
mov eax, dword [ebp - 0x58]
call fcn.00409878
mov edx, dword [0x573794]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je 0x542c59
mov eax, dword [ebp - 0x54]
call fcn.00409878
mov edx, dword [0x573544]
mov dword [edx], eax
mov eax, dword [0x573844]
mov eax, dword [eax]
mov edx, 0x2ec
call fcn.0047e974
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x542c92
mov edx, dword [0x573844]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64c]
mov ecx, 0x2ec
call fcn.00487fa0
mov eax, dword [0x573bc4]
mov byte [eax], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa48]
mov byte [eax + 0x26c], 1
jmp case.default.0x542821
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0x4ebd
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xf0]
call fcn.004097b4
lea eax, [ebp - 0xf0]
mov edx, 0x547e80
call fcn.00404eb4
mov edx, dword [ebp - 0xf0]
mov eax, dword [0x5ddd8c]
call fcn.005319f4
jmp case.default.0x542821
push 0x547e98
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xf8]
call fcn.004097b4
push dword [ebp - 0xf8]
push 0x547e80
lea eax, [ebp - 0xf4]
mov edx, 3
call fcn.00404f6c
mov edx, dword [ebp - 0xf4]
mov eax, dword [0x5ddd8c]
call fcn.005319f4
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
mov eax, dword [ebp - 0x4c]
add eax, 0x34
mov edx, dword [ebp - 0x4c]
mov ecx, dword [edx + 0x34]
mov edx, 0x547ea8
call fcn.00404ef8
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735d4]
mov dword [edx], eax
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547ebc
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735d4]
mov dword [edx], eax
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0xfc]
mov eax, dword [0x5736e0]
call fcn.00404c40
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.00506668
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa04]
xor edx, edx
call fcn.004887f8
jmp case.default.0x542821
call fcn.004e6e54
mov eax, dword [0x57403c]
cmp byte [eax], 0
je 0x542e43
mov eax, dword [0x57403c]
call fcn.004e636c
mov eax, dword [0x57403c]
mov byte [eax], 0
mov eax, dword [0x573ed4]
cmp dword [eax], 0
jle 0x542e68
mov eax, dword [0x573990]
mov eax, dword [eax]
mov edx, dword [0x57382c]
mov edx, dword [edx]
add dword [edx + 0x7c], eax
mov eax, dword [0x573990]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.00506730
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735b4]
mov dword [edx], eax
mov eax, dword [0x57403c]
cmp byte [eax], 0
je case.default.0x542821
mov eax, dword [0x57403c]
call fcn.004e6df4
mov eax, dword [0x57403c]
mov byte [eax], 0
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735b4]
mov dword [edx], eax
mov eax, dword [0x57403c]
cmp byte [eax], 0
je case.default.0x542821
mov eax, dword [0x57403c]
call fcn.004e636c
mov eax, dword [0x57403c]
mov byte [eax], 0
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735b4]
mov dword [edx], eax
mov eax, dword [0x57403c]
cmp byte [eax], 0
je case.default.0x542821
mov eax, dword [0x57403c]
mov byte [eax], 0
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735b4]
mov dword [edx], eax
mov eax, dword [0x57403c]
cmp byte [eax], 0
je case.default.0x542821
lea eax, [ebp - 0x100]
mov edx, dword [0x57403c]
call fcn.00404e50
mov eax, dword [ebp - 0x100]
mov edx, dword [0x57403c]
mov edx, dword [edx + 0x3c]
call fcn.004e6750
mov eax, dword [0x57403c]
call fcn.004e6df4
mov eax, dword [0x57403c]
mov byte [eax], 0
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00551384
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.005513e8
jmp case.default.0x542821
mov eax, dword [0x573990]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
mov edx, dword [0x57382c]
mov edx, dword [edx]
mov dword [edx + 0x7c], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735b4]
mov dword [edx], eax
jmp case.default.0x542821
mov eax, dword [0x573990]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
mov edx, dword [0x57382c]
mov edx, dword [edx]
mov dword [edx + 0x7c], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735b4]
mov dword [edx], eax
jmp case.default.0x542821
mov eax, dword [0x573a24]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov eax, 0x6a
call fcn.004e5790
jmp case.default.0x542821
mov eax, dword [0x573ea8]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
mov edx, dword [0x57382c]
mov edx, dword [edx]
mov dword [edx + 0x88], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735b4]
mov dword [edx], eax
jmp case.default.0x542821
mov eax, dword [0x573ea8]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
mov edx, dword [0x57382c]
mov edx, dword [edx]
mov dword [edx + 0x88], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735b4]
mov dword [edx], eax
jmp case.default.0x542821
mov eax, dword [0x573f34]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov eax, 0x6a
call fcn.004e5790
jmp case.default.0x542821
mov eax, dword [0x573910]
cmp dword [eax], 0
jne 0x5430e7
mov dl, 1
mov eax, dword [0x48b8b0]
call fcn.0048b940
mov edx, dword [0x573910]
mov dword [edx], eax
mov eax, dword [0x573910]
mov eax, dword [eax]
add eax, 0x54
mov edx, dword [0x5dddc0]
mov edx, dword [edx + 0x26de58]
call fcn.00404c40
mov eax, dword [0x573910]
mov eax, dword [eax]
add eax, 4
mov edx, dword [0x5dddc0]
mov edx, dword [edx + 4]
call fcn.00404c40
mov eax, dword [0x573910]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.0048bd94
jmp 0x543147
mov eax, dword [0x5dddc0]
mov eax, dword [eax + 0x26de58]
mov edx, dword [0x573910]
mov edx, dword [edx]
mov edx, dword [edx + 0x54]
call fcn.00404ff8
je 0x543147
mov eax, dword [0x573910]
mov eax, dword [eax]
add eax, 0x54
mov edx, dword [0x5dddc0]
mov edx, dword [edx + 0x26de58]
call fcn.00404c40
mov eax, dword [0x573910]
mov eax, dword [eax]
add eax, 4
mov edx, dword [0x5dddc0]
mov edx, dword [edx + 4]
call fcn.00404c40
mov eax, dword [0x573910]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.0048bd94
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
push 1
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 4]
call fcn.0054ffdc
mov dl, 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x354]
call fcn.00434afc
mov eax, dword [0x573c6c]
cmp byte [eax], 0
jne case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735d4]
cmp eax, dword [edx]
jbe case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
add eax, 0xbb8
mov edx, dword [0x5735d4]
mov dword [edx], eax
mov eax, dword [0x5ddd88]
call fcn.0053fbf4
mov eax, dword [0x573564]
mov dword [eax], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x848]
mov edx, 0x2a8
call fcn.0043c040
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x848]
mov edx, 0x78
call fcn.0043c08c
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x848]
mov edx, 0x78
call fcn.0043c0b0
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov eax, dword [0x5740ac]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
call fcn.004a2df4
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054e380
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x854]
mov dl, 1
call fcn.004887f8
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054e500
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.00503414
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
xor edx, edx
call fcn.004887f8
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [0x573e90]
call fcn.004e636c
mov eax, dword [0x573e90]
mov byte [eax], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x547eec
call fcn.004f6038
jmp case.default.0x542821
lea edx, [ebp - 0x104]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0x104]
push eax
movzx ecx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054e5f8
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.00503414
mov eax, dword [0x5738dc]
mov byte [eax], 0
cmp word [ebp - 0x78], 1
jne 0x5434b0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x868]
mov dl, 1
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x884]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x888]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x880]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x88c]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x890]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x894]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x870]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x874]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x878]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8b8]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8b0]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8b4]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5737fc]
mov byte [eax], 0
mov eax, dword [0x573ffc]
mov byte [eax], 0
mov eax, dword [0x573920]
mov byte [eax], 0
mov eax, dword [0x574424]
mov byte [eax], 0
mov eax, dword [0x574424]
mov byte [eax + 1], 0
mov eax, dword [0x5740a0]
mov byte [eax], 0
mov eax, dword [0x5740a0]
mov byte [eax + 1], 0
mov eax, dword [0x5735f4]
mov byte [eax], 3
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x87c]
mov byte [eax + 0x26c], 0
mov eax, dword [0x573d3c]
mov byte [eax], 4
mov eax, dword [0x57425c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [0x57425c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x40]
call fcn.00419c58
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 6
jne 0x543498
cmp word [ebp - 0x78], 2
jne 0x543535
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x898]
mov dl, 1
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x898]
xor edx, edx
call fcn.0043c040
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x898]
xor edx, edx
call fcn.0043c064
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x1a9
call fcn.0043c040
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x14
call fcn.0043c064
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov dl, 1
call fcn.004887f8
mov eax, dword [0x5735c0]
mov dl, byte [ebp - 0x76]
mov byte [eax], dl
mov eax, dword [0x5740c4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573aa4]
call fcn.00404bec
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov eax, dword [0x573aa4]
mov edx, dword [ebp - 0x10]
call fcn.00404c40
jmp case.default.0x542821
mov eax, dword [0x573c80]
mov dl, byte [ebp - 0x80]
mov byte [eax], dl
mov eax, dword [0x573ad4]
mov dl, byte [ebp - 0x78]
mov byte [eax], dl
mov eax, dword [0x5735f4]
mov dl, byte [ebp - 0x76]
mov byte [eax], dl
mov eax, dword [0x5735f4]
cmp byte [eax], 2
jne 0x54359e
mov eax, dword [0x573920]
mov byte [eax], 0
mov eax, dword [0x5735f4]
cmp byte [eax], 0
jne 0x5435b0
mov eax, dword [0x57367c]
mov byte [eax], 0
mov eax, dword [0x573908]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573560]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573ffc]
mov byte [eax], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov dl, 1
call fcn.005208bc
jmp case.default.0x542821
mov eax, dword [0x5735f4]
cmp byte [eax], 0
jne 0x5435ef
mov eax, dword [0x57367c]
mov byte [eax], 1
cmp word [ebp - 0x7a], 1
jne 0x5435fe
mov eax, dword [0x5737fc]
mov byte [eax], 1
mov eax, dword [0x5740a0]
mov dl, byte [ebp - 0x78]
mov byte [eax], dl
mov eax, dword [0x5740a0]
mov dl, byte [ebp - 0x76]
mov byte [eax + 1], dl
cmp dword [ebp - 0x80], 0
jne 0x543623
mov eax, dword [0x5738dc]
mov byte [eax], 2
jmp 0x54362b
mov eax, dword [0x5738dc]
mov byte [eax], 1
mov eax, dword [0x5740c4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573920]
mov byte [eax], 0
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x868]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x898]
xor edx, edx
call fcn.004887f8
jmp case.default.0x542821
mov eax, dword [0x573d44]
xor ecx, ecx
mov edx, 0x88
call fcn.004035b8
mov eax, dword [0x5738dc]
mov byte [eax], 1
jmp case.default.0x542821
mov eax, dword [0x573d44]
call fcn.004e636c
mov eax, dword [0x573d44]
add eax, 0x44
call fcn.004e636c
jmp case.default.0x542821
mov ax, word [ebp - 0x7a]
sub ax, 2
jae case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov eax, dword [0x57365c]
mov dl, byte [ebp - 0x7a]
mov byte [eax], dl
mov eax, dword [0x573aa4]
mov edx, dword [ebp - 0x10]
call fcn.00404c40
mov eax, dword [0x57365c]
cmp byte [eax], 0
jne 0x54371b
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x904]
add eax, 0x80
mov edx, 0x547f08
call fcn.00404c40
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x908]
add eax, 0x80
mov edx, 0x547f1c
call fcn.00404c40
jmp 0x543753
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x904]
add eax, 0x80
mov edx, 0x547f30
call fcn.00404c40
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x908]
add eax, 0x80
mov edx, 0x547f44
call fcn.00404c40
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x904]
xor edx, edx
call fcn.0043ca20
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x908]
xor edx, edx
call fcn.0043ca20
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov dl, 1
call fcn.0052377c
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f4]
mov edx, 0x17c
call fcn.0043c040
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f4]
mov edx, 0x32
call fcn.0043c064
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f4]
mov dl, 1
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.00503414
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x14
call fcn.0043c040
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x22
call fcn.0043c064
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov dl, 1
call fcn.004887f8
jmp case.default.0x542821
mov ax, word [ebp - 0x7a]
sub ax, 2
jae case.default.0x542821
cmp word [ebp - 0x7a], 1
jne 0x543846
mov eax, dword [0x574228]
xor ecx, ecx
mov edx, 0xcc
call fcn.004035b8
jmp 0x543857
mov eax, dword [0x573548]
xor ecx, ecx
mov edx, 0x1dc
call fcn.004035b8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f4]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
xor edx, edx
call fcn.004887f8
jmp case.default.0x542821
mov ax, word [ebp - 0x7a]
sub ax, 2
jae case.default.0x542821
cmp word [ebp - 0x7a], 1
jne 0x5438eb
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x574228]
cmp byte [edx + eax*4], 0
je 0x5438e0
mov eax, dword [ebp - 0x40]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x574228]
lea eax, [edx + eax*4]
call fcn.004e636c
mov eax, dword [ebp - 0x40]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x574228]
mov byte [edx + eax*4], 0
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jne 0x54389e
jmp 0x54393b
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x573548]
cmp byte [edx + eax*4], 0
je 0x543932
mov eax, dword [ebp - 0x40]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x573548]
lea eax, [edx + eax*4]
call fcn.004e636c
mov eax, dword [ebp - 0x40]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x573548]
mov byte [edx + eax*4], 0
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 7
jne 0x5438f0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f4]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
xor edx, edx
call fcn.004887f8
jmp case.default.0x542821
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
cmp dword [ebp - 0x108], 0
je case.default.0x542821
push 0
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0x10c]
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x58]
call fcn.00478ce0
cmp dword [ebp - 0x58], 0
je 0x5439c8
mov eax, dword [ebp - 0x58]
call fcn.00409878
mov edx, dword [0x573f50]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je case.default.0x542821
mov eax, dword [ebp - 0x54]
call fcn.00409878
mov edx, dword [0x573c98]
mov dword [edx], eax
jmp case.default.0x542821
lea edx, [ebp - 0x110]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
cmp dword [ebp - 0x110], 0
je case.default.0x542821
push 0
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x58]
call fcn.00478ce0
cmp dword [ebp - 0x58], 0
je 0x543a47
mov eax, dword [ebp - 0x58]
call fcn.00409878
mov edx, dword [0x574054]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je case.default.0x542821
mov eax, dword [ebp - 0x54]
call fcn.00409878
mov edx, dword [0x573da0]
mov dword [edx], eax
jmp case.default.0x542821
lea eax, [ebp - 0x5c]
call fcn.00404bec
cmp dword [ebp - 0x80], 0
jl 0x543a83
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x6f], dx
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov dx, word [ebp - 0x7a]
mov word [eax + 0x71], dx
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov dx, word [ebp - 0x78]
mov word [eax + 0x73], dx
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov dx, word [ebp - 0x76]
mov word [eax + 0x75], dx
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
cmp dword [ebp - 0x5c], 0
je case.default.0x542821
mov eax, dword [ebp - 0x5c]
call fcn.00409804
test eax, eax
jl case.default.0x542821
mov eax, dword [ebp - 0x5c]
call fcn.00409804
mov edx, dword [0x57382c]
mov edx, dword [edx]
mov word [edx + 0x77], ax
jmp case.default.0x542821
lea eax, [ebp - 0x60]
call fcn.00404bec
cmp dword [ebp - 0x80], 0
jl 0x543b0b
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x6f], dx
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov dx, word [ebp - 0x7a]
mov word [eax + 0x71], dx
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov dx, word [ebp - 0x78]
mov word [eax + 0x73], dx
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov dx, word [ebp - 0x76]
mov word [eax + 0x75], dx
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
cmp dword [ebp - 0x60], 0
je case.default.0x542821
mov eax, dword [ebp - 0x60]
call fcn.00409804
test eax, eax
jl case.default.0x542821
mov eax, dword [ebp - 0x60]
call fcn.00409804
mov edx, dword [0x57414c]
mov edx, dword [edx]
mov word [edx + 0x77], ax
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
xor eax, eax
call fcn.00461704
mov edx, dword [0x573824]
mov byte [edx], al
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c8]
cmp byte [eax + 0x26c], 0
jne case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c8]
mov dl, 1
call fcn.004887f8
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054e2a8
jmp case.default.0x542821
mov eax, dword [0x574018]
mov byte [eax], 0
mov eax, dword [0x573ee0]
mov byte [eax + 4], 0
mov eax, dword [0x5740f4]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x5740f4]
add eax, 4
call fcn.004e636c
mov eax, dword [0x5740f4]
mov byte [eax + 4], 0
jmp case.default.0x542821
call fcn.004e6824
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x800]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5738e0]
xor ecx, ecx
mov edx, 0x2d3
call fcn.004035b8
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7ec]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743b8]
xor ecx, ecx
mov edx, 0x264
call fcn.004035b8
jmp case.default.0x542821
call fcn.004e6fec
mov eax, dword [0x5735a8]
cmp byte [eax], 0
je 0x543c84
mov eax, dword [0x5735a8]
call fcn.004e636c
mov eax, dword [0x5735a8]
mov byte [eax], 0
mov eax, dword [0x5743b8]
xor ecx, ecx
mov edx, 0x264
call fcn.004035b8
mov eax, dword [0x573d9c]
call fcn.00404bec
mov eax, dword [0x5740ec]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573658]
xor edx, edx
mov dword [eax], edx
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054e128
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054e08c
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054e058
jmp case.default.0x542821
mov eax, dword [0x5735a8]
cmp byte [eax], 0
je case.default.0x542821
mov eax, dword [0x5735a8]
call fcn.004e6f8c
mov eax, dword [0x5735a8]
mov byte [eax], 0
jmp case.default.0x542821
mov eax, dword [0x5735a8]
cmp byte [eax], 0
je case.default.0x542821
mov eax, dword [0x5735a8]
call fcn.004e636c
mov eax, dword [0x5735a8]
mov byte [eax], 0
jmp case.default.0x542821
mov eax, dword [0x5735a8]
cmp byte [eax], 0
je case.default.0x542821
mov eax, dword [0x5735a8]
mov byte [eax], 0
jmp case.default.0x542821
mov eax, dword [0x5735a8]
cmp byte [eax], 0
je case.default.0x542821
lea eax, [ebp - 0x118]
mov edx, dword [0x5735a8]
call fcn.00404e50
mov eax, dword [ebp - 0x118]
mov edx, dword [0x5735a8]
mov edx, dword [edx + 0x3c]
call fcn.004e6750
mov eax, dword [0x5735a8]
call fcn.004e6f8c
mov eax, dword [0x5735a8]
mov byte [eax], 0
jmp case.default.0x542821
call fcn.004e6fec
mov eax, dword [0x5735a8]
cmp byte [eax], 0
je case.default.0x542821
mov eax, dword [0x5735a8]
call fcn.004e636c
mov eax, dword [0x5735a8]
mov byte [eax], 0
jmp case.default.0x542821
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x11c]
mov eax, dword [0x573ec8]
call fcn.00404c40
jmp case.default.0x542821
mov eax, dword [0x573bb8]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
cmp word [ebp - 0x7a], 0
jne 0x543e4c
mov eax, dword [0x57431c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7b4]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7b8]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7bc]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7ac]
mov dl, 1
call fcn.004887f8
mov ax, word [ebp - 0x7a]
dec eax
sub ax, 5
jae case.default.0x542821
movzx eax, word [ebp - 0x7a]
mov edx, dword [0x573cc4]
mov dword [edx], eax
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c0]
mov dl, 1
call fcn.004887f8
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054b7ac
jmp case.default.0x542821
mov eax, dword [0x573e74]
mov byte [eax], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x780]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
xor edx, edx
call fcn.00516068
mov eax, dword [0x5742f8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573a84]
mov dword [eax], 0xffffffff
mov eax, dword [0x573d7c]
call fcn.004e636c
mov eax, dword [0x573edc]
call fcn.004e636c
mov eax, dword [0x573edc]
mov byte [eax], 0
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x780]
mov dl, 1
call fcn.004887f8
mov edx, dword [0x574294]
mov edx, dword [edx]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x780]
mov ecx, 0x1fe
call fcn.00487fa0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7a8]
mov byte [eax + 0x26c], 1
mov eax, dword [0x573f30]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573f84]
mov byte [eax], 1
mov eax, dword [0x573a84]
mov dword [eax], 8
mov eax, dword [0x5739f8]
mov byte [eax], 0
mov eax, dword [0x573b80]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov dl, 1
call fcn.00516068
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.00516b48
jmp case.default.0x542821
mov eax, dword [0x573764]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
movzx eax, word [ebp - 0x7a]
mov edx, dword [0x573bf4]
mov dword [edx], eax
movzx eax, word [ebp - 0x78]
mov edx, dword [0x5743a0]
mov dword [edx], eax
jmp case.default.0x542821
movzx eax, word [ebp - 0x7a]
mov edx, dword [0x573e30]
mov dword [edx], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054b68c
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x120]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
lea edx, [ebp - 0x124]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x124]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
lea edx, [ebp - 0x128]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x128]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x12c]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x130]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x134]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054b580
jmp case.default.0x542821
mov eax, dword [0x5740f4]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x5740f4]
add eax, 4
call fcn.004e636c
mov eax, dword [0x5740f4]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
movzx ecx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.0053aff0
jmp case.default.0x542821
mov eax, dword [0x57391c]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
movzx eax, word [ebp - 0x78]
mov edx, dword [0x573f9c]
mov dword [edx], eax
movzx eax, word [ebp - 0x76]
mov edx, dword [0x5738cc]
mov dword [edx], eax
cmp word [ebp - 0x7a], 0xffff
jne 0x5441a5
mov eax, dword [0x573e40]
xor edx, edx
mov dword [eax], edx
jmp 0x5441b1
movzx eax, word [ebp - 0x7a]
mov edx, dword [0x573e40]
mov dword [edx], eax
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00549e18
jmp case.default.0x542821
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0x1389
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x634]
xor edx, edx
call fcn.0043ca20
mov eax, dword [0x57414c]
cmp dword [eax], 0
je case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6b8]
mov dl, 1
call fcn.004887f8
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x13a7
mov eax, dword [ebp - 4]
call fcn.0053d97c
mov eax, dword [0x573c78]
cmp byte [eax], 0
je case.default.0x542821
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.005515b0
jmp case.default.0x542821
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0x138c
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
cmp dword [ebp - 0x80], 0
jle 0x5442c7
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.0053b414
mov eax, 0x547f58
call fcn.004e55cc
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
mov eax, dword [0x57414c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4c]
jne case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bd0a8
mov eax, dword [0x57414c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x57414c]
cmp dword [eax], 0
jne case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6b8]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64c]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ac]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6c0]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x634]
mov dl, 1
call fcn.0043ca20
mov eax, dword [0x573ba4]
mov byte [eax], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov byte [eax + 0xab5], 0
mov eax, dword [0x573794]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573544]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x573bc4]
mov byte [eax], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0xa48]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6b8]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xc5c], edx
mov eax, dword [0x5738b0]
xor ecx, ecx
mov edx, 0x3b8
call fcn.004035b8
mov eax, dword [0x5742b0]
xor ecx, ecx
mov edx, 0xdd0
call fcn.004035b8
mov eax, dword [0x573a44]
mov eax, dword [eax]
cmp dword [eax + 8], 0
jle 0x544459
mov eax, dword [0x573a44]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x544459
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x40], 0
mov eax, dword [0x573a44]
mov eax, dword [eax]
mov edx, dword [ebp - 0x40]
call fcn.00419dc8
mov edx, 0x54
call fcn.00402b50
inc dword [ebp - 0x40]
dec dword [ebp - 0x70]
jne 0x544438
mov eax, dword [0x573a44]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6b8]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64c]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ac]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6c0]
xor edx, edx
call fcn.004887f8
mov eax, dword [0x57414c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x634]
mov dl, 1
call fcn.0043ca20
mov eax, dword [0x57414c]
cmp dword [eax], 0
jne case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6b8]
xor edx, edx
call fcn.004887f8
jmp case.default.0x542821
mov eax, dword [0x574114]
mov byte [eax], 0
mov eax, dword [0x57400c]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x57400c]
add eax, 4
call fcn.004e648c
mov eax, dword [0x57400c]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x573dc8]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
mov ecx, 4
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x5ddd88]
call fcn.0053aff0
jmp case.default.0x542821
movzx eax, word [ebp - 0x7a]
mov edx, dword [0x573c30]
mov dword [edx], eax
mov eax, dword [0x574174]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov eax, dword [0x5738b0]
cmp byte [eax + 0x274], 9
jne 0x5445b0
mov eax, dword [0x5738b0]
cmp byte [eax + 0x273], 0x19
jne 0x5445b0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6c0]
mov dl, 1
call fcn.004887f8
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x6c0]
xor edx, edx
call fcn.004887f8
jmp case.default.0x542821
mov eax, dword [0x574114]
cmp byte [eax], 0
je 0x5445df
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.004f54cc
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054ac2c
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054ae70
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054ad54
jmp case.default.0x542821
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov dl, byte [ebp - 0x80]
mov byte [eax + 0x11], dl
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov dl, byte [ebp - 0x78]
mov byte [eax + 0x17], dl
movzx eax, word [ebp - 0x76]
mov edx, dword [0x57414c]
mov edx, dword [edx]
mov dword [edx + 0x1c], eax
mov eax, dword [0x57414c]
mov eax, dword [eax]
lea edx, [eax + 0x3d]
mov ecx, 0x3c
mov eax, dword [ebp - 0x10]
call fcn.00497488
jmp case.default.0x542821
xor eax, eax
mov al, byte [ebp - 0x7a]
mov edx, dword [0x573904]
mov dword [edx], eax
mov ax, word [ebp - 0x7a]
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x573fb8]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x78]
mov edx, dword [0x5740e0]
mov dword [edx], eax
mov ax, word [ebp - 0x78]
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x5740dc]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x76]
mov edx, dword [0x574150]
mov dword [edx], eax
mov ax, word [ebp - 0x76]
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x57412c]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x80]
mov edx, dword [0x573db4]
mov dword [edx], eax
jmp case.default.0x542821
mov eax, dword [0x5741ac]
add eax, 4
call fcn.004e648c
mov eax, dword [0x5741ac]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x5741ac]
add eax, 4
call fcn.004e636c
mov eax, dword [0x5741ac]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x5740f4]
add eax, 4
call fcn.004e636c
mov eax, dword [0x5740f4]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x5741ac]
add eax, 4
call fcn.004e648c
mov eax, dword [0x5741ac]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x20], edx
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.00403fe4
mov eax, dword [0x5741ac]
mov eax, dword [eax]
sub eax, 0xe
jae 0x54478b
mov eax, dword [0x5741ac]
mov eax, dword [eax]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x5738b0]
mov ecx, dword [0x5741ac]
lea edi, [edx + eax*4]
lea esi, [ecx + 4]
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x5741ac]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x5741ac]
add eax, 4
call fcn.004e648c
mov eax, dword [0x5741ac]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x20], edx
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.00403fe4
mov eax, dword [0x5741ac]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x5741ac]
cmp dword [eax], 0
jge 0x544819
mov eax, dword [0x5741ac]
mov eax, dword [eax]
inc eax
neg eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x5738b0]
mov ecx, dword [0x5741ac]
lea edi, [edx + eax*4]
lea esi, [ecx + 4]
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x5741ac]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x574008]
mov byte [eax], 0
call fcn.004e69e4
jmp case.default.0x542821
mov eax, dword [0x574008]
call fcn.004e648c
mov eax, dword [0x574008]
mov byte [eax], 0
jmp case.default.0x542821
mov eax, dword [0x57414c]
cmp dword [eax], 0
je case.default.0x542821
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x5b], edx
mov eax, dword [0x574004]
cmp byte [eax], 0
je 0x5448d8
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
cmp eax, 0x7d0
jbe case.default.0x542821
push 0xff
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x138]
call fcn.004097b4
lea eax, [ebp - 0x138]
mov edx, 0x547f74
call fcn.00404eb4
mov edx, dword [ebp - 0x138]
mov ecx, 0xffffff
mov eax, dword [0x5ddd8c]
call fcn.00531b30
jmp case.default.0x542821
push 0xff
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x13c]
call fcn.004097b4
lea eax, [ebp - 0x13c]
mov edx, 0x547f74
call fcn.00404eb4
mov edx, dword [ebp - 0x13c]
mov ecx, 0xffffff
mov eax, dword [0x5ddd8c]
call fcn.00531b30
jmp case.default.0x542821
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov dx, word [ebp - 0x7a]
mov word [eax + 0x3d], dx
mov edx, 0x547f90
mov eax, dword [0x5ddd8c]
call fcn.0053197c
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00549a48
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00549978
jmp case.default.0x542821
lea edx, [ebp - 0x140]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0x140]
mov edx, dword [ebp - 0x80]
call fcn.004e6cb8
jmp case.default.0x542821
lea edx, [ebp - 0x144]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054a6ec
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054b008
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054b0a8
jmp case.default.0x542821
mov eax, dword [0x57414c]
cmp dword [eax], 0
je case.default.0x542821
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x63], dx
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov dx, word [ebp - 0x7a]
mov word [eax + 0x67], dx
mov eax, dword [0x57414c]
mov eax, dword [eax]
mov dx, word [ebp - 0x78]
mov word [eax + 0x6b], dx
jmp case.default.0x542821
mov dx, word [ebp - 0x76]
mov ax, word [ebp - 0x78]
call fcn.00407ca0
push eax
movzx ecx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054b19c
jmp case.default.0x542821
mov dx, word [ebp - 0x76]
mov ax, word [ebp - 0x78]
call fcn.00407ca0
push eax
movzx edx, word [ebp - 0x7a]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054b29c
jmp case.default.0x542821
movzx ecx, word [ebp - 0x78]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054b304
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00549b14
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00549c78
jmp case.default.0x542821
mov eax, dword [0x573898]
call fcn.00404bec
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
push 0
push 0
mov eax, dword [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x33
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
lea edx, [ebp - 0x90]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00497488
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x8c]
push eax
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0x32
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
mov dl, 7
mov eax, dword [0x5ddd8c]
call fcn.005318c0
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x51
mov eax, dword [ebp - 4]
call fcn.0053d97c
cmp byte [ebp - 0x88], 1
jne 0x544b51
mov eax, dword [0x573568]
mov byte [eax], 1
jmp 0x544b59
mov eax, dword [0x573568]
mov byte [eax], 0
mov eax, dword [0x57402c]
mov byte [eax], 0
mov eax, dword [0x5741f4]
cmp word [eax], 0
jbe 0x544b87
push 0xffffff
mov ecx, 0x8000
mov edx, 0x547fa4
mov eax, dword [0x5ddd8c]
call fcn.00531b30
jmp 0x544bf7
mov eax, dword [0x574190]
cmp word [eax], 0
jbe 0x544bad
push 0xffffff
mov ecx, 0x8000
mov edx, 0x547fc4
mov eax, dword [0x5ddd8c]
call fcn.00531b30
jmp 0x544bf7
mov eax, dword [0x573aa8]
cmp word [eax], 0
jbe 0x544bd3
push 0xffffff
mov ecx, 0x8000
mov edx, 0x547fe4
mov eax, dword [0x5ddd8c]
call fcn.00531b30
jmp 0x544bf7
mov eax, dword [0x573b08]
cmp word [eax], 0
jbe 0x544bf7
push 0xffffff
mov ecx, 0x8000
mov edx, 0x548004
mov eax, dword [0x5ddd8c]
call fcn.00531b30
mov eax, dword [ebp - 4]
call fcn.0054eb9c
mov eax, dword [ebp - 4]
call fcn.0054eda8
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x8fc]
mov byte [eax + 0x26c], 1
jmp case.default.0x542821
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054d994
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054daf4
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00549260
jmp case.default.0x542821
mov eax, dword [0x5743c0]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
jmp case.default.0x542821
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.00549570
jmp case.default.0x542821
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.00549638
jmp case.default.0x542821
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.005497e0
jmp case.default.0x542821
movzx eax, word [ebp - 0x7a]
mov edx, dword [0x573abc]
mov dword [edx], eax
jmp case.default.0x542821
push 0x40255555
push 0x55555555
call fcn.00479394
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404eac
cmp ebx, eax
jge 0x544d1c
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.00479394
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404eac
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.0040510c
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004973c8
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.00478ce0
jmp 0x544d24
lea eax, [ebp - 0x1c]
call fcn.00404bec
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0xa
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
cmp dword [ebp - 0x1c], 0
je case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
push 0
lea eax, [ebp - 0x148]
push eax
mov byte [ebp - 0x98], 0x5c
lea ecx, [ebp - 0x98]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.00478ce0
mov edx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x4c]
add eax, 0x30
call fcn.00404c40
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00497108
call fcn.00534248
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00497108
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x3c], al
jmp case.default.0x542821
push 0x40255555
push 0x55555555
call fcn.00479394
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404eac
cmp ebx, eax
jge 0x544e52
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.00479394
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404eac
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.0040510c
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004973c8
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.00478ce0
jmp 0x544e5a
lea eax, [ebp - 0x1c]
call fcn.00404bec
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 9
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
cmp dword [ebp - 0x1c], 0
je case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
push 0
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 0x98], 0x5c
lea ecx, [ebp - 0x98]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.00478ce0
mov edx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x4c]
add eax, 0x30
call fcn.00404c40
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00497108
call fcn.00534248
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00497108
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x3c], al
jmp case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x80]
je case.default.0x542821
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
movzx edx, word [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
push 0x40255555
push 0x55555555
call fcn.00479394
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404eac
cmp ebx, eax
jge 0x544fc3
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.00479394
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404eac
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.0040510c
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004973c8
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.00478ce0
jmp 0x544fcb
lea eax, [ebp - 0x1c]
call fcn.00404bec
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x80]
je 0x54500d
mov ax, word [ebp - 0x78]
push eax
mov ax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov cx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc4a4
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
movzx edx, word [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
cmp dword [ebp - 0x1c], 0
je case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
push 0
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 0x98], 0x5c
lea ecx, [ebp - 0x98]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.00478ce0
mov edx, dword [ebp - 0x150]
mov eax, dword [ebp - 0x4c]
add eax, 0x30
call fcn.00404c40
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00497108
call fcn.00534248
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00497108
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x3c], al
jmp case.default.0x542821
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x80]
jne 0x5450e7
cmp word [ebp - 0x7c], 6
je 0x5450e7
cmp word [ebp - 0x7c], 7
jne 0x545111
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
movzx edx, word [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
cmp word [ebp - 0x7c], 6
jne case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573bac]
mov dword [edx], eax
jmp case.default.0x542821
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x80]
je case.default.0x542821
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
movzx edx, word [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
movzx eax, word [ebp - 0x7a]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x194], eax
jmp case.default.0x542821
mov eax, dword [0x57357c]
cmp byte [eax + 0x88], 0
je case.default.0x542821
mov eax, dword [0x57357c]
mov dx, word [ebp - 0x80]
mov word [eax + 0xc8], dx
jmp case.default.0x542821
mov eax, dword [ebp - 4]
call fcn.00540bcc
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0xa
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x80]
je case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x7a]
mov dx, 0xc
mov eax, dword [ebp - 0x4c]
call fcn.004dd094
jmp case.default.0x542821
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x80]
je case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x7a]
mov dx, 0xc
mov eax, dword [ebp - 0x4c]
call fcn.004dd094
jmp case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x80]
je case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x7a]
mov dx, word [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
call fcn.004dd094
cmp word [ebp - 0x7c], 0xf
jne case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x118], 1
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x7a]
mov dx, word [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
call fcn.004dd094
cmp word [ebp - 0x7c], 0xf
jne case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x118], 1
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x7a]
mov dx, 0xe
mov eax, dword [ebp - 0x4c]
call fcn.004dd094
cmp word [ebp - 0x7c], 0xf
jne case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x118], 1
jmp case.default.0x542821
lea edx, [ebp - 0x2c]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x7a]
mov dx, word [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
call fcn.004dd094
movzx eax, word [ebp - 0x2c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x100], eax
movzx eax, word [ebp - 0x2a]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x104], eax
mov dx, word [ebp - 0x26]
mov ax, word [ebp - 0x28]
call fcn.00407ca0
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x108], eax
jmp case.default.0x542821
lea edx, [ebp - 0x90]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x7a]
mov dx, word [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
call fcn.004dd094
mov eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x100], eax
mov eax, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x104], eax
mov eax, dword [ebp - 0x88]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x108], eax
mov eax, dword [ebp - 0x84]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x110], eax
jmp case.default.0x542821
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00497108
push eax
movzx ecx, word [ebp - 0x76]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.005382d0
jmp case.default.0x542821
lea edx, [ebp - 0x48]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov ax, word [ebp - 0x76]
call fcn.00407cb0
and eax, 0xff
push eax
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x48]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x76]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0053837c
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.005383f4
jmp case.default.0x542821
mov eax, dword [0x573ba0]
mov byte [eax], 0
mov eax, dword [0x573e04]
mov byte [eax], 0
mov eax, dword [0x5739b4]
mov byte [eax], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548024
call fcn.004f6038
mov eax, dword [ebp - 4]
call fcn.0045995c
jmp case.default.0x542821
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x545639
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x7a]
mov dx, word [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
call fcn.004dd094
mov eax, dword [ebp - 0x4c]
mov word [eax + 0x53], 0
jmp case.default.0x542821
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0x20
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0x21
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0x1b
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x7c], edx
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov dl, byte [ebp - 0x7a]
mov byte [eax + 0x17], dl
mov dx, word [ebp - 0x76]
mov ax, word [ebp - 0x78]
call fcn.00407ca0
mov edx, dword [0x57382c]
mov edx, dword [edx]
mov dword [edx + 0x80], eax
mov eax, dword [0x57382c]
mov eax, dword [eax]
lea edx, [eax + 0x3d]
mov ecx, 0x3c
mov eax, dword [ebp - 0x10]
call fcn.00497488
jmp case.default.0x542821
xor eax, eax
mov al, byte [ebp - 0x7a]
mov edx, dword [0x573fb4]
mov dword [edx], eax
mov ax, word [ebp - 0x7a]
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x5736a4]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x78]
mov edx, dword [0x573788]
mov dword [edx], eax
mov ax, word [ebp - 0x78]
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x573784]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x76]
mov edx, dword [0x573834]
mov dword [edx], eax
mov ax, word [ebp - 0x76]
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x5737dc]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x80]
mov edx, dword [0x574420]
mov dword [edx], eax
jmp case.default.0x542821
movzx eax, word [ebp - 0x7a]
mov edx, dword [0x573b94]
mov dword [edx], eax
jmp case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x5b], edx
mov eax, dword [0x574004]
cmp byte [eax], 0
je 0x545840
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
cmp eax, 0x7d0
jbe case.default.0x542821
push 0xff
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x154]
call fcn.004097b4
lea eax, [ebp - 0x154]
mov edx, 0x54805c
call fcn.00404eb4
mov edx, dword [ebp - 0x154]
mov ecx, 0xffffff
mov eax, dword [0x5ddd8c]
call fcn.00531b30
jmp case.default.0x542821
push 0xff
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x158]
call fcn.004097b4
lea eax, [ebp - 0x158]
mov edx, 0x54805c
call fcn.00404eb4
mov edx, dword [ebp - 0x158]
mov ecx, 0xffffff
mov eax, dword [0x5ddd8c]
call fcn.00531b30
jmp case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov dx, word [ebp - 0x7a]
mov word [eax + 0x3d], dx
mov edx, 0x548074
mov eax, dword [0x5ddd8c]
call fcn.0053197c
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
mov ax, word [ebp - 0x7a]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x53], ax
mov ax, word [ebp - 0x78]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x55], ax
mov ax, word [ebp - 0x76]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x57], ax
jmp case.default.0x542821
mov ax, word [ebp - 0x7c]
sub ax, 0x1f
jne case.default.0x542821
lea edx, [ebp - 0x90]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4c]
jne 0x545954
mov eax, dword [0x57382c]
mov eax, dword [eax]
cmp dword [eax + 0x38], 0xf9
jne 0x545968
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573f88]
mov dword [edx], eax
jmp 0x545968
mov eax, dword [ebp - 0x4c]
call fcn.004e17b4
test al, al
je 0x545968
mov eax, dword [ebp - 0x4c]
call fcn.004e17e4
mov eax, dword [0x57382c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4c]
je 0x5459a4
push 0
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x8c]
push eax
push 0
mov eax, dword [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x84]
mov dx, 0x1f
mov eax, dword [ebp - 0x4c]
call fcn.004dd190
mov ax, word [ebp - 0x7a]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x53], ax
mov ax, word [ebp - 0x78]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x57], ax
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x138], eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x13c], eax
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x140], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x138]
call fcn.004e7f3c
jmp case.default.0x542821
mov eax, dword [ebp - 4]
call fcn.0054d924
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4c]
je 0x545a73
mov ax, word [ebp - 0x7a]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x53], ax
mov ax, word [ebp - 0x78]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x57], ax
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x174], 1
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x174], 0
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
mov ax, word [ebp - 0x7a]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x53], ax
mov ax, word [ebp - 0x78]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x57], ax
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x175], 1
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x17c], 0x7d0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x178], eax
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
mov eax, dword [ebp - 0x4c]
mov edx, dword [0x4dbaa4]
call fcn.00403f74
test al, al
je case.default.0x542821
mov eax, dword [ebp - 0x4c]
call fcn.004e3f9c
jmp case.default.0x542821
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 4]
call fcn.0054f37c
test al, al
jne case.default.0x542821
cmp word [ebp - 0x7c], 0x63
jne 0x545bf5
mov ax, word [ebp - 0x76]
sub ax, 1
jb 0x545b90
je 0x545bb5
dec ax
je 0x545bdc
jmp 0x545c1b
mov ax, word [ebp - 0x7a]
call fcn.00407cb0
and eax, 0xff
push eax
push 0x32
xor ecx, ecx
mov cl, byte [ebp - 0x7a]
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5ddd8c]
call fcn.00531a6c
jmp 0x545c1b
movzx eax, word [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov ax, word [ebp - 0x7a]
call fcn.00407cb0
xor ecx, ecx
mov cl, al
xor edx, edx
mov dl, byte [ebp - 0x7a]
mov eax, dword [0x5ddd8c]
call fcn.00532f54
jmp 0x545c1b
mov eax, dword [ebp - 0x20]
push eax
movzx ecx, word [ebp - 0x78]
xor edx, edx
mov dl, byte [ebp - 0x7a]
mov eax, dword [0x5ddd8c]
call fcn.005337dc
jmp 0x545c1b
mov ax, word [ebp - 0x7a]
call fcn.00407cb0
call fcn.00534248
push eax
mov al, byte [ebp - 0x7a]
call fcn.00534248
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5ddd8c]
call fcn.00531b30
cmp word [ebp - 0x7c], 0x68
jne case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.0050a220
jmp case.default.0x542821
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x545c78
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 4]
call fcn.0054f37c
test al, al
jne 0x545c78
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
call fcn.004e188c
mov eax, dword [0x574378]
cmp byte [eax], 0
jne case.default.0x542821
cmp dword [ebp - 0x4c], 0
je 0x545ccd
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 4]
call fcn.0054f37c
test al, al
jne case.default.0x542821
mov ax, word [ebp - 0x7a]
call fcn.00407cb0
call fcn.00534248
push eax
mov al, byte [ebp - 0x7a]
call fcn.00534248
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5ddd8c]
call fcn.00531b30
jmp case.default.0x542821
mov ax, word [ebp - 0x7a]
call fcn.00407cb0
call fcn.00534248
push eax
mov al, byte [ebp - 0x7a]
call fcn.00534248
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5ddd8c]
call fcn.00531b30
jmp case.default.0x542821
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
push 0
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 0x98], 0x5c
lea ecx, [ebp - 0x98]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x20]
call fcn.00478ce0
mov edx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x4c]
add eax, 0x30
call fcn.00404c40
mov al, byte [ebp - 0x7a]
call fcn.00534248
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
mov al, byte [ebp - 0x7a]
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x3c], al
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x542821
mov al, byte [ebp - 0x7a]
call fcn.00534248
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
mov al, byte [ebp - 0x7a]
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x3c], al
jmp case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x80]
je case.default.0x542821
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0x1d
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
lea edx, [ebp - 0x90]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00497488
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc32c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x545e35
mov ax, word [ebp - 0x78]
push eax
mov ax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x8c]
push eax
mov cx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bc4a4
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x88]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x114], eax
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
mov eax, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x8c]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x7a]
mov dx, 0x14
mov eax, dword [ebp - 0x4c]
call fcn.004dd094
jmp case.default.0x542821
movzx eax, word [ebp - 0x7a]
push eax
movzx eax, word [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov edx, 0x15
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
lea edx, [ebp - 0x24]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.00497488
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
movzx eax, word [ebp - 0x7a]
push eax
mov ecx, dword [ebp - 0x80]
mov dl, 1
mov eax, dword [0x4a96b8]
call fcn.004a9778
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
xor edx, edx
mov dword [eax + 0xc], edx
movzx eax, word [ebp - 0x24]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x1c], eax
mov edx, dword [ebp - 0x50]
mov eax, dword [0x5dddac]
call fcn.004a9fc0
mov ax, word [ebp - 0x7a]
add eax, 0xfffffff9
sub ax, 8
jb 0x545f0d
je 0x545f2b
dec ax
je 0x545f3a
sub ax, 0x137b
je 0x545f1c
jmp case.default.0x542821
mov eax, 0x548084
call fcn.004e55cc
jmp case.default.0x542821
mov eax, 0x5480a4
call fcn.004e55cc
jmp case.default.0x542821
mov eax, 0x5480c0
call fcn.004e55cc
jmp case.default.0x542821
mov eax, 0x5480d8
call fcn.004e55cc
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5dddac]
call fcn.004aa050
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.005498cc
jmp case.default.0x542821
mov eax, dword [0x574018]
cmp byte [eax], 0
je 0x545f81
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.004f5598
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054a4d0
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00549f90
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054a05c
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054a13c
jmp case.default.0x542821
lea edx, [ebp - 0x160]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0x160]
mov edx, dword [ebp - 0x80]
call fcn.004e6cb8
jmp case.default.0x542821
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054a67c
jmp case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0x168]
push eax
movzx ecx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054a75c
jmp case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
movzx ecx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054a860
jmp case.default.0x542821
movzx ecx, word [ebp - 0x78]
movzx edx, word [ebp - 0x7a]
mov eax, dword [0x5dddc0]
call fcn.004a3efc
jmp case.default.0x542821
mov edx, 0x5480f0
mov eax, dword [0x5ddd8c]
call fcn.0053197c
jmp case.default.0x542821
movzx ecx, word [ebp - 0x78]
movzx edx, word [ebp - 0x7a]
mov eax, dword [0x5dddc0]
call fcn.004a4180
jmp case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x20], edx
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.00403fe4
mov eax, dword [0x5740f4]
mov eax, dword [eax]
sub eax, 0xe
jae 0x5460e4
mov eax, dword [0x5740f4]
mov eax, dword [eax]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x57357c]
mov ecx, dword [0x5740f4]
lea edi, [edx + eax*4]
lea esi, [ecx + 4]
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x5740f4]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x5740f4]
add eax, 4
call fcn.004e636c
mov eax, dword [0x5740f4]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x20], edx
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.00403fe4
mov eax, dword [0x5740f4]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov eax, dword [0x5740f4]
cmp dword [eax], 0
jge 0x546172
mov eax, dword [0x5740f4]
mov eax, dword [eax]
inc eax
neg eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x57357c]
mov ecx, dword [0x5740f4]
lea edi, [edx + eax*4]
lea esi, [ecx + 4]
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x5740f4]
mov byte [eax + 4], 0
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054a8e0
jmp case.default.0x542821
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x63], dx
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov dx, word [ebp - 0x7a]
mov word [eax + 0x67], dx
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov dx, word [ebp - 0x78]
mov word [eax + 0x6b], dx
jmp case.default.0x542821
mov eax, 0x6a
call fcn.004e5790
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
cmp eax, dword [ebp - 0x80]
jge 0x54622d
mov eax, dword [0x57382c]
mov eax, dword [eax]
push dword [eax + 0x7c]
mov eax, dword [ebp - 0x80]
pop edx
sub eax, edx
lea edx, [ebp - 0x170]
call fcn.004096c8
push dword [ebp - 0x170]
push 0x548104
mov eax, dword [0x574288]
push dword [eax]
push 0x548110
lea eax, [ebp - 0x16c]
mov edx, 4
call fcn.00404f6c
mov edx, dword [ebp - 0x16c]
mov eax, dword [0x5ddd8c]
call fcn.0053197c
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x7c], edx
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
mov edx, dword [0x57382c]
mov edx, dword [edx]
mov dword [edx + 0x80], eax
jmp case.default.0x542821
push 0
push 0
push 0
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
push eax
xor edx, edx
mov ax, word [ebp - 0x76]
call fcn.00407ca0
push eax
push 0
movzx edx, word [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
push 0
push 0
push 0
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
push eax
movzx eax, word [ebp - 0x76]
push eax
push 0
movzx edx, word [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [0x5ddd9c]
call fcn.004bd3cc
jmp case.default.0x542821
mov eax, dword [0x5ddd9c]
call fcn.004b7ca4
mov eax, dword [0x5735b0]
mov byte [eax], 1
jmp case.default.0x542821
mov eax, dword [0x573edc]
mov byte [eax], 0
mov eax, dword [0x5740a4]
cmp byte [eax], 0xc8
je 0x54632d
mov eax, dword [0x573df0]
cmp byte [eax], 0
je 0x54632d
mov eax, dword [0x5740a4]
movzx eax, byte [eax]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x5741ec]
mov ecx, dword [0x573df0]
lea edi, [edx + eax*4]
mov esi, ecx
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x573df0]
mov byte [eax], 0
mov eax, dword [0x5740a4]
mov byte [eax], 0xc8
call fcn.004e6824
jmp case.default.0x542821
mov eax, dword [0x573edc]
call fcn.004e636c
mov eax, dword [0x573edc]
mov byte [eax], 0
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054b3ec
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054b9c0
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054b48c
jmp case.default.0x542821
mov dx, word [ebp - 0x76]
mov ax, word [ebp - 0x78]
call fcn.00407ca0
push eax
movzx ecx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054bb80
jmp case.default.0x542821
mov dx, word [ebp - 0x76]
mov ax, word [ebp - 0x78]
call fcn.00407ca0
push eax
movzx edx, word [ebp - 0x7a]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054bc80
lea edx, [ebp - 0x174]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
cmp dword [ebp - 0x174], 0
je case.default.0x542821
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0x178]
call fcn.00409804
test eax, eax
jle case.default.0x542821
lea edx, [ebp - 0x17c]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0x17c]
call fcn.00409804
mov edx, dword [0x573ac8]
mov word [edx], ax
jmp case.default.0x542821
lea edx, [ebp - 0x180]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov eax, dword [ebp - 0x180]
push eax
movzx ecx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054bce8
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.00503414
jmp case.default.0x542821
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054bdd4
jmp case.default.0x542821
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054bfbc
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054c1a8
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054c1e8
jmp case.default.0x542821
mov eax, dword [0x5736e8]
cmp byte [eax], 0
je case.default.0x542821
cmp dword [ebp - 0x80], 0
jle 0x546501
lea edx, [ebp - 0x184]
mov eax, dword [ebp - 0x80]
call fcn.004096c8
push dword [ebp - 0x184]
push 0x548104
mov eax, dword [0x574288]
push dword [eax]
mov eax, dword [0x5743f4]
mov edx, 3
call fcn.00404f6c
jmp case.default.0x542821
mov ecx, dword [0x574288]
mov ecx, dword [ecx]
mov eax, dword [0x5743f4]
mov edx, 0x548120
call fcn.00404ef8
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x7c], edx
mov eax, dword [0x573e90]
mov byte [eax], 0
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [0x573e90]
call fcn.004e636c
mov eax, dword [0x573e90]
mov byte [eax], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548130
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5736e8]
cmp byte [eax], 0
je case.default.0x542821
cmp dword [ebp - 0x80], 0
jl 0x5465d4
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 0x80]
call fcn.004096c8
push dword [ebp - 0x188]
push 0x548104
mov eax, dword [0x574288]
push dword [eax]
mov eax, dword [0x5743f4]
mov edx, 3
call fcn.00404f6c
jmp case.default.0x542821
mov ecx, dword [0x574288]
mov ecx, dword [ecx]
mov eax, dword [0x5743f4]
mov edx, 0x548120
call fcn.00404ef8
jmp case.default.0x542821
mov eax, dword [0x573e90]
cmp byte [eax], 0
je case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x7c], edx
mov eax, dword [0x573e90]
mov dx, word [ebp - 0x7a]
mov word [eax + 0x40], dx
mov eax, dword [0x573e90]
mov dx, word [ebp - 0x78]
mov word [eax + 0x42], dx
mov eax, dword [0x573e90]
call fcn.004e636c
mov eax, dword [0x573e90]
mov byte [eax], 0
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [0x573e90]
call fcn.004e636c
mov eax, dword [0x573e90]
mov byte [eax], 0
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x54814c
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
cmp word [ebp - 0x7c], 0x2bd
je 0x5466f0
cmp word [ebp - 0x7c], 0x2be
jne 0x5466ce
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548168
call fcn.004f6038
jmp 0x5466e6
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548198
call fcn.004f6038
mov eax, dword [0x573e90]
call fcn.004e636c
mov eax, dword [0x573e90]
mov byte [eax], 0
jmp case.default.0x542821
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054c268
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
cmp word [ebp - 0x7c], 0x2c1
je 0x54676d
cmp word [ebp - 0x7c], 0x2c3
jne 0x546750
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5481b0
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5481d0
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
call fcn.005049dc
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x7c], edx
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
mov edx, eax
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.005048f8
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [ebp - 0x80]
dec eax
je 0x5467e5
dec eax
je 0x546802
dec eax
je 0x54681f
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5481e8
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5481b0
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548200
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [0x57382c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x7c], edx
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548224
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [ebp - 0x80]
dec eax
je 0x5468a0
dec eax
je 0x5468bd
dec eax
je 0x5468da
dec eax
je 0x546910
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548244
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5481b0
call fcn.004f6038
jmp case.default.0x542821
mov edx, dword [0x574288]
mov edx, dword [edx]
lea eax, [ebp - 0x18c]
mov ecx, 0x548258
call fcn.00404ef8
mov edx, dword [ebp - 0x18c]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548268
call fcn.004f6038
jmp case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
movzx ecx, word [ebp - 0x7a]
movzx edx, word [ebp - 0x76]
mov eax, dword [ebp - 4]
call fcn.0054d32c
jmp case.default.0x542821
movzx eax, word [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x7a]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054c4a0
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054c6a0
jmp case.default.0x542821
cmp word [ebp - 0x7a], 0
jbe 0x546985
mov eax, dword [0x573568]
mov byte [eax], 1
jmp 0x54698d
mov eax, dword [0x573568]
mov byte [eax], 0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573fdc]
mov dword [edx], eax
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573fdc]
mov dword [edx], eax
mov eax, dword [0x573568]
mov byte [eax], 1
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573fdc]
mov dword [edx], eax
mov eax, dword [ebp - 0x80]
sub eax, 0xfffffffc
je 0x546a32
dec eax
je 0x546a15
dec eax
je 0x5469f8
dec eax
jne case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548288
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5482a0
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5482c0
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5482f0
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573fdc]
mov dword [edx], eax
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573fdc]
mov dword [edx], eax
mov eax, dword [ebp - 0x80]
add eax, 5
cmp eax, 4
ja case.default.0x542821
jmp dword [eax*4 + 0x546a84]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548288
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5482a0
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548308
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5482f0
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548320
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573fdc]
mov dword [edx], eax
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573fdc]
mov dword [edx], eax
mov eax, dword [ebp - 0x80]
sub eax, 0xfffffffd
je 0x546b94
dec eax
je 0x546b77
dec eax
jne case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548288
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5482a0
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548350
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5740b0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.default.0x542821
lea edx, [ebp - 0x190]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 4]
call fcn.0054c7a8
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735d4]
mov dword [edx], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054c844
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735d4]
mov dword [edx], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054ccf8
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735d4]
mov dword [edx], eax
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548368
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735d4]
mov dword [edx], eax
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548384
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735d4]
mov dword [edx], eax
lea edx, [ebp - 0x194]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x194]
mov eax, dword [0x573c20]
call fcn.00404c40
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.00506574
jmp case.default.0x542821
call fcn.004e7040
mov eax, dword [0x5735d0]
cmp byte [eax], 0
je 0x546cce
mov eax, dword [0x5735d0]
call fcn.004e636c
mov eax, dword [0x5735d0]
mov byte [eax], 0
mov eax, dword [0x573ed4]
cmp dword [eax], 0
jle 0x546cf3
mov eax, dword [0x573ed4]
mov eax, dword [eax]
mov edx, dword [0x57382c]
mov edx, dword [edx]
add dword [edx + 0x7c], eax
mov eax, dword [0x573ed4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.00506750
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573b04]
mov dword [edx], eax
mov eax, dword [0x5735d0]
cmp byte [eax], 0
je case.default.0x542821
mov eax, dword [0x5735d0]
call fcn.004e6d94
mov eax, dword [0x5735d0]
mov byte [eax], 0
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573b04]
mov dword [edx], eax
mov eax, dword [0x5735d0]
cmp byte [eax], 0
je case.default.0x542821
mov eax, dword [0x5735d0]
call fcn.004e636c
mov eax, dword [0x5735d0]
mov byte [eax], 0
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573b04]
mov dword [edx], eax
mov eax, dword [0x5735d0]
cmp byte [eax], 0
je case.default.0x542821
mov eax, dword [0x5735d0]
mov byte [eax], 0
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573b04]
mov dword [edx], eax
mov eax, dword [0x5735d0]
cmp byte [eax], 0
je case.default.0x542821
lea eax, [ebp - 0x198]
mov edx, dword [0x5735d0]
call fcn.00404e50
mov eax, dword [ebp - 0x198]
mov edx, dword [0x5735d0]
mov edx, dword [edx + 0x3c]
call fcn.004e6750
mov eax, dword [0x5735d0]
call fcn.004e6d94
mov eax, dword [0x5735d0]
mov byte [eax], 0
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054d11c
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054d180
jmp case.default.0x542821
mov eax, dword [0x573ed4]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
mov edx, dword [0x57382c]
mov edx, dword [edx]
mov dword [edx + 0x7c], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573b04]
mov dword [edx], eax
jmp case.default.0x542821
mov eax, dword [0x573ed4]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7a]
call fcn.00407ca0
mov edx, dword [0x57382c]
mov edx, dword [edx]
mov dword [edx + 0x7c], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x573b04]
mov dword [edx], eax
jmp case.default.0x542821
mov eax, dword [0x573f74]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov eax, 0x6a
call fcn.004e5790
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
call fcn.00506750
jmp case.default.0x542821
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0054c228
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735d4]
mov dword [edx], eax
movzx edx, word [ebp - 0x7a]
mov eax, dword [ebp - 4]
call fcn.0054d1e4
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5735d4]
mov dword [edx], eax
push 0xff
mov ecx, 0xffffff
mov edx, 0x5483ac
mov eax, dword [0x5ddd8c]
call fcn.00531b30
mov eax, dword [0x573fbc]
mov dword [eax], 0xffffffff
jmp case.default.0x542821
lea edx, [ebp - 0x19c]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 4]
call fcn.0054d224
jmp case.default.0x542821
mov eax, dword [0x5741cc]
mov dl, byte [ebp - 0x80]
mov byte [eax], dl
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054d2b0
jmp case.default.0x542821
mov eax, dword [ebp - 4]
call fcn.00540644
jmp case.default.0x542821
mov eax, dword [ebp - 0x80]
cmp eax, 5
ja case.default.0x542821
jmp dword [eax*4 + 0x546f58]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5483c4
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5483e4
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548410
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x54842c
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x54844c
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [ebp - 4]
call fcn.00540644
jmp case.default.0x542821
mov eax, dword [ebp - 0x80]
dec eax
je 0x547022
dec eax
je 0x54703f
dec eax
je 0x54705c
dec eax
je 0x547079
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548468
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548480
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x54849c
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5484c0
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [ebp - 0x80]
add eax, 7
cmp eax, 5
ja case.default.0x542821
jmp dword [eax*4 + 0x5470ac]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5484d8
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548500
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548530
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5484d8
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548564
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548590
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [ebp - 0x80]
sub eax, 0xfffffffc
je 0x5471de
dec eax
je 0x5471c1
dec eax
je 0x5471a4
dec eax
jne case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5485b8
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5485d0
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5485e4
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x54860c
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [ebp - 0x80]
sub eax, 0xfffffffd
je 0x547247
dec eax
je 0x54722a
dec eax
jne case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548630
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548644
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x54866c
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x548684
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
mov eax, dword [ebp - 0x80]
sub eax, 0xfffffffd
je 0x5472ef
dec eax
je 0x5472d2
dec eax
jne 0x54730c
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x54869c
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5486bc
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5486d4
call fcn.004f6038
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, 0x5486fc
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
cmp dword [ebp - 0x10], 0
je case.default.0x542821
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x1c]
mov eax, 0x548718
call fcn.004051f0
test eax, eax
jle 0x5474b7
push 0
lea eax, [ebp - 0x1a0]
push eax
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.00478ce0
mov edx, dword [ebp - 0x1a0]
lea eax, [ebp - 0x1c]
call fcn.00404c84
push 0
lea eax, [ebp - 0x1a4]
push eax
mov byte [ebp - 0x98], 0x2f
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 0x1c]
call fcn.00478ce0
mov edx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x1c]
call fcn.00404c84
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x54871c]
mov edx, dword [ebp - 0x18]
call fcn.004f6038
dec eax
jne 0x54744a
cmp dword [ebp - 0x6c], 0
je case.default.0x542821
push 0
push 0
mov eax, dword [0x5ddd88]
mov eax, dword [eax + 0x3d0]
push eax
lea eax, [ebp - 0x80]
push eax
xor ecx, ecx
xor edx, edx
mov ax, 0x4ec5
call fcn.0048292c
lea edx, [ebp - 0x1a8]
lea eax, [ebp - 0x80]
call fcn.00482c34
lea eax, [ebp - 0x1a8]
push eax
lea edx, [ebp - 0x1ac]
mov eax, dword [ebp - 0x6c]
call fcn.00497550
mov edx, dword [ebp - 0x1ac]
pop eax
call fcn.00404eb4
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 4]
call fcn.0053d8a4
jmp case.default.0x542821
cmp dword [ebp - 0x1c], 0
je case.default.0x542821
push 0
push 0
mov eax, dword [0x5ddd88]
mov eax, dword [eax + 0x3d0]
push eax
lea eax, [ebp - 0x80]
push eax
xor ecx, ecx
xor edx, edx
mov ax, 0x4ec5
call fcn.0048292c
lea edx, [ebp - 0x1b0]
lea eax, [ebp - 0x80]
call fcn.00482c34
lea eax, [ebp - 0x1b0]
push eax
lea edx, [ebp - 0x1b4]
mov eax, dword [ebp - 0x1c]
call fcn.00497550
mov edx, dword [ebp - 0x1b4]
pop eax
call fcn.00404eb4
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 4]
call fcn.0053d8a4
jmp case.default.0x542821
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
mov edx, dword [ebp - 0x1c]
call fcn.004f6038
jmp case.default.0x542821
cmp dword [ebp - 0x10], 0
je case.default.0x542821
lea edx, [ebp - 0x1b8]
mov eax, dword [ebp - 0x10]
call fcn.004973c8
mov edx, dword [ebp - 0x1b8]
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x5479b4]
call fcn.004f6038
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
jmp case.default.0x542821
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xda0], eax
jmp case.default.0x542821
lea eax, [ebp - 0x14]
push eax
push 0x40355555
push 0x55555555
call fcn.00479394
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404eac
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.0040510c
lea edx, [ebp - 0x90]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00497488
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004973c8
movzx eax, word [ebp - 0x7a]
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xc68], eax
xor eax, eax
mov al, byte [ebp - 0x90]
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xc70], eax
mov ax, word [ebp - 0x90]
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xc8c], eax
mov eax, dword [ebp - 0x90]
call fcn.00407cac
and eax, 0xff
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xca8], eax
mov eax, dword [ebp - 0x90]
call fcn.00407cac
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xcc4], eax
xor eax, eax
mov al, byte [ebp - 0x8c]
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xce0], eax
mov ax, word [ebp - 0x8c]
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xcfc], eax
mov eax, dword [ebp - 0x8c]
call fcn.00407cac
and eax, 0xff
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xd18], eax
mov eax, dword [ebp - 0x8c]
call fcn.00407cac
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xd34], eax
xor eax, eax
mov al, byte [ebp - 0x88]
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xd50], eax
mov ax, word [ebp - 0x88]
call fcn.00407cb0
and eax, 0xff
mov edx, dword [0x5743f8]
mov edx, dword [edx]
mov dword [edx + 0xd6c], eax
mov eax, dword [0x5743f8]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xc64], edx
mov eax, dword [0x5743f8]
mov eax, dword [eax]
mov cx, word [0x548720]
xor edx, edx
call fcn.004f6038
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0053ef98
jmp case.default.0x542821
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0054d820
jmp case.default.0x542821
mov eax, dword [0x57382c]
cmp dword [eax], 0
je case.default.0x542821
mov eax, 0x54872c
call fcn.005342a0
lea edx, [ebp - 0x1c0]
movzx eax, word [ebp - 0x7c]
call fcn.004096c8
mov ecx, dword [ebp - 0x1c0]
lea eax, [ebp - 0x1bc]
mov edx, 0x548740
call fcn.00404ef8
mov eax, dword [ebp - 0x1bc]
call fcn.005342a0
lea edx, [ebp - 0x1c8]
mov eax, dword [ebp - 0x80]
call fcn.004096c8
mov ecx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
mov edx, 0x548750
call fcn.00404ef8
mov eax, dword [ebp - 0x1c4]
call fcn.005342a0
lea edx, [ebp - 0x1d0]
movzx eax, word [ebp - 0x7a]
call fcn.004096c8
mov ecx, dword [ebp - 0x1d0]
lea eax, [ebp - 0x1cc]
mov edx, 0x548760
call fcn.00404ef8
mov eax, dword [ebp - 0x1cc]
call fcn.005342a0
lea edx, [ebp - 0x1d8]
movzx eax, word [ebp - 0x78]
call fcn.004096c8
mov ecx, dword [ebp - 0x1d8]
lea eax, [ebp - 0x1d4]
mov edx, 0x548770
call fcn.00404ef8
mov eax, dword [ebp - 0x1d4]
call fcn.005342a0
lea edx, [ebp - 0x1e0]
movzx eax, word [ebp - 0x76]
call fcn.004096c8
mov ecx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x1dc]
mov edx, 0x548780
call fcn.00404ef8
mov eax, dword [ebp - 0x1dc]
call fcn.005342a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x547851
lea eax, [ebp - 0x1e0]
mov edx, 0x52
call fcn.00404c10
lea eax, [ebp - 0x94]
call fcn.00404bec
lea eax, [ebp - 0x6c]
call fcn.00404bec
lea eax, [ebp - 0x64]
mov edx, 5
call fcn.00404c10
lea eax, [ebp - 0x20]
mov edx, 7
call fcn.00404c10
ret