Function at 0x5734f8
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x82
push 0
push 0
dec ecx
jne 0x573500
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00405854
xor eax, eax
push ebp
push 0x57ba28
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x57b95f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp byte [eax], 0x2b
jne 0x573554
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00573104
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [ebp - 8]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x57356b
mov eax, dword [ebp - 0x6c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x10
jge 0x5735cf
mov eax, dword [ebp - 8]
cmp byte [eax], 0x3d
jne 0x5735c2
mov eax, dword [ebp - 8]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x573590
mov eax, dword [ebp - 0x70]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x70]
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.004058cc
mov eax, dword [ebp - 0x1c]
mov edx, 0x57ba44
call fcn.004057fc
jne 0x5735c2
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov byte [eax + 0x17c], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [ebp - 8]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x5735e6
mov eax, dword [ebp - 0x74]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x74]
dec ecx
mov edx, 0x11
mov eax, dword [ebp - 8]
call fcn.004058cc
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004058cc
mov eax, dword [ebp - 8]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x573628
mov eax, dword [ebp - 0x78]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x78]
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 8]
call fcn.004058cc
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 0x10]
call fcn.004b5120
cmp word [ebp - 0xbc], 0x35
je 0x57366e
cmp byte [0x6e1144], 0
je 0x57366e
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0058b70c
mov eax, dword [0x6e42cc]
cmp dword [eax], 0
jne case.0x573739.528
movzx eax, word [ebp - 0xbc]
cmp eax, 0x20d
jg 0x57371e
je 0x573d3d
cmp eax, 0x206
jg 0x5736f1
je 0x573b48
cmp eax, 0x1f9
jg 0x5736d1
je 0x573948
add eax, 0xffffffce
sub eax, 2
jb case.0x573739.528
sub eax, 0x1c3
je 0x5739df
dec eax
je 0x5738ac
jmp case.default.0x573739
sub eax, 0x1fa
je 0x573c91
dec eax
je 0x573cae
sub eax, 3
je 0x5738d9
jmp case.default.0x573739
add eax, 0xfffffdf9
cmp eax, 5
ja case.default.0x573739
jmp dword [eax*4 + 0x573706]
cmp eax, 0x215
jg 0x57375c
je 0x573aed
add eax, 0xfffffdf2
cmp eax, 6
ja case.default.0x573739
jmp dword [eax*4 + 0x573740]
cmp eax, 0x452
jg 0x57378f
je 0x573d82
sub eax, 0x292
je case.0x573739.528
sub eax, 0x90
je case.0x573739.528
sub eax, 0xc6
je case.0x573739.528
jmp case.default.0x573739
add eax, 0xffffe890
sub eax, 8
jb case.0x573739.528
sub eax, 6
jne case.default.0x573739
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5486a0]
call fcn.00428e48
mov dword [ebp - 0x60], eax
xor eax, eax
push ebp
push 0x5738a5
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x108]
mov eax, 0x57ba50
call fcn.004b51dc
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x104]
mov eax, 0x57ba6c
call fcn.0055895c
mov edx, dword [ebp - 0x104]
mov eax, dword [ebp - 0x60]
call fcn.00548888
lea edx, [ebp - 0x110]
mov eax, 0x57ba50
call fcn.004b51dc
mov edx, dword [ebp - 0x110]
lea ecx, [ebp - 0x10c]
mov eax, 0x57baa0
call fcn.0055895c
mov edx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x60]
call fcn.00548918
mov eax, dword [ebp - 0x60]
mov byte [eax + 0x51], 1
cmp dword [ebp - 0xc0], 1
jne 0x573867
lea ecx, [ebp - 0x114]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x60]
call fcn.005489a8
mov ecx, dword [ebp - 0x114]
mov eax, dword [0x6e492c]
mov eax, dword [eax]
mov edx, 1
call fcn.004d1d20
jmp 0x57388f
lea ecx, [ebp - 0x118]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x60]
call fcn.005489a8
mov ecx, dword [ebp - 0x118]
mov eax, dword [0x6e492c]
mov eax, dword [eax]
mov edx, 2
call fcn.004d1d20
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x573739.528
mov eax, dword [ebp - 0x60]
call fcn.00404454
ret
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bad8
call fcn.005de228
mov eax, dword [0x6ef080]
mov eax, dword [eax + 8]
mov edx, dword [eax]
call dword [edx + 0xd4]
jmp case.0x573739.528
mov eax, dword [ebp - 0xc0]
sub eax, 0xfffffffe
je 0x57392b
sub eax, 2
je 0x5738f1
dec eax
je 0x57390e
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bb64
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bba8
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bbcc
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [ebp - 0xc0]
sub eax, 0xfffffffe
je 0x5739a5
sub eax, 2
jne 0x5739c2
push 0x57bbf8
mov eax, dword [ebp - 4]
push dword [eax + 0x3c0]
push 0x57bc04
lea eax, [ebp - 0x11c]
mov edx, 3
call fcn.00405768
mov edx, dword [ebp - 0x11c]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
xor edx, edx
mov eax, dword [0x6ef080]
call fcn.005c74a4
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bbcc
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bc38
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [ebp - 0xc0]
add eax, 5
cmp eax, 4
ja case.default.0x5739f1
jmp dword [eax*4 + 0x5739f8]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bc7c
call fcn.005de228
jmp 0x573aa9
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bc90
call fcn.005de228
jmp 0x573aa9
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bccc
call fcn.005de228
jmp 0x573aa9
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bd10
call fcn.005de228
jmp 0x573aa9
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bd30
call fcn.005de228
jmp 0x573aa9
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bd58
call fcn.005de228
mov eax, dword [0x6ef080]
call fcn.005c57bc
jmp case.0x573739.528
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057d748
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bd74
call fcn.005de228
mov eax, dword [ebp - 4]
call fcn.0057d6c0
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57be00
call fcn.005de228
mov eax, dword [ebp - 4]
call fcn.0057d6c0
jmp case.0x573739.528
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0057d288
jmp case.0x573739.528
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057cfa4
jmp case.0x573739.528
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057db58
jmp case.0x573739.528
lea edx, [ebp - 0xc0]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057d81c
jmp case.0x573739.528
mov eax, dword [ebp - 4]
call fcn.0056e788
jmp case.0x573739.528
mov eax, dword [0x6e46c4]
mov byte [eax], 0
mov eax, dword [0x6e4988]
mov byte [eax], 0
mov eax, dword [0x6e4464]
mov byte [eax], 0
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57be18
call fcn.005de228
mov eax, dword [ebp - 4]
call fcn.00478740
jmp case.0x573739.528
mov eax, dword [ebp - 4]
call fcn.0056e788
jmp case.0x573739.528
mov eax, dword [ebp - 0xc0]
cmp eax, 5
ja case.0x573bc4.1
jmp dword [eax*4 + 0x573bcb]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57be44
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57beac
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57becc
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57be44
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bf00
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57be44
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bf2c
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [ebp - 0xc0]
sub eax, 0xfffffffe
je 0x573cd9
dec eax
jne 0x573cf6
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bf44
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bf70
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bf44
call fcn.005de228
jmp case.0x573739.528
mov eax, dword [ebp - 4]
call fcn.0056e788
jmp case.0x573739.528
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bf98
call fcn.005de228
jmp case.0x573739.528
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057ddfc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57bfb8
call fcn.005de228
mov eax, dword [ebp - 4]
call fcn.0057d6c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
push 0x57bfd0
mov eax, dword [0x6e3f28]
push dword [eax]
push 0x57bff4
lea eax, [ebp - 0x120]
mov edx, 3
call fcn.00405768
mov edx, dword [ebp - 0x120]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
mov eax, dword [0x6ef074]
call fcn.00478740
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [0x6e3fe8]
cmp byte [eax], 0
je 0x573e62
cmp word [ebp - 0xbc], 0x27a
jne 0x573e55
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0x3e8], edx
mov edx, dword [ebp - 0xbc]
mov dword [eax + 0x3ec], edx
mov edx, dword [ebp - 0xb8]
mov dword [eax + 0x3f0], edx
lea edx, [ebp - 0x124]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 4]
add eax, 0x3f4
call fcn.00405428
mov eax, dword [0x6e39b4]
mov byte [eax], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x36c]
mov dl, 1
call fcn.0044af80
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
movzx eax, word [ebp - 0xbc]
cmp eax, 0x333
jg 0x5743c9
je 0x57aec6
cmp eax, 0x28e
jg 0x574122
je 0x5764f3
cmp eax, 0xca
jg 0x573feb
je 0x578570
cmp eax, 0x21
jg 0x573f2a
je 0x576f39
add eax, 0xfffffffa
cmp eax, 0x1a
ja case.0x574806.6100
jmp dword [eax*4 + 0x573ebe]
cmp eax, 0x34
jg 0x573f90
je 0x57716f
add eax, 0xffffffde
cmp eax, 0x11
ja case.0x574806.6100
jmp dword [eax*4 + 0x573f48]
cmp eax, 0x39
jg 0x573fbe
je 0x5776ba
sub eax, 0x35
je 0x5775e7
dec eax
je 0x5751ec
dec eax
je 0x57524b
dec eax
je 0x575202
jmp case.0x574806.6100
add eax, 0xffffffc4
sub eax, 3
jb 0x576909
add eax, 0xffffffdb
sub eax, 5
jb 0x577a49
sub eax, 0x5f
je 0x57847a
dec eax
je 0x5784b6
jmp case.0x574806.6100
cmp eax, 0x279
jg 0x5740c1
je 0x578b6c
cmp eax, 0x263
jg 0x574080
je 0x578640
cmp eax, 0x217
jg 0x574057
je 0x5785db
cmp eax, 0xd3
jg 0x57403c
je 0x578cf4
sub eax, 0xcb
je 0x578560
sub eax, 7
je 0x578cda
jmp case.0x574806.6100
sub eax, 0xd4
je 0x578d1d
sub eax, 0x13c
je 0x576d42
jmp case.0x574806.6100
sub eax, 0x22a
je 0x576909
sub eax, 0x2e
je 0x578590
dec eax
je 0x5785b4
sub eax, 9
je 0x578601
jmp case.0x574806.6100
add eax, 0xfffffd9c
cmp eax, 0xa
ja case.0x574806.6100
jmp dword [eax*4 + 0x574095]
add eax, 0xfffffd85
cmp eax, 0x12
ja case.0x574806.6100
jmp dword [eax*4 + 0x5740d6]
add eax, 0xfffffd71
cmp eax, 0xa3
ja case.0x574806.6100
jmp dword [eax*4 + 0x574139]
cmp eax, 0x177b
jg 0x574663
je 0x57b702
cmp eax, 0x642
jg 0x57452c
je 0x5793f0
cmp eax, 0x395
jg 0x574461
je 0x57b414
add eax, 0xfffffc80
cmp eax, 0x14
ja case.0x574806.6100
jmp dword [eax*4 + 0x57440d]
cmp eax, 0x44c
jg 0x5744cd
je 0x5778e4
cmp eax, 0x39b
jg 0x5744a4
je 0x57b4d0
add eax, 0xfffffc6a
cmp eax, 4
ja case.0x574806.6100
jmp dword [eax*4 + 0x574490]
sub eax, 0x39c
je 0x57b501
dec eax
je 0x57b511
sub eax, 0x4b
je 0x57b524
sub eax, 0x3c
je 0x578490
jmp case.0x574806.6100
cmp eax, 0x451
jg 0x5744ff
je 0x5778d7
sub eax, 0x44d
je 0x57797a
dec eax
je 0x577a09
dec eax
je 0x5779a6
dec eax
je 0x57781f
jmp case.0x574806.6100
sub eax, 0x452
je 0x574af7
sub eax, 0xc2
je 0x57b679
sub eax, 0x12c
je 0x57882b
dec eax
je 0x57885a
jmp case.0x574806.6100
cmp eax, 0x65d
jg 0x5745ba
je 0x57912e
add eax, 0xfffff9bd
cmp eax, 0x19
ja case.0x574806.6100
jmp dword [eax*4 + 0x574552]
cmp eax, 0x1392
jg 0x574622
je case.0x573eb7.13
cmp eax, 0x662
jg 0x5745f9
je 0x5787cf
sub eax, 0x65e
je 0x575218
dec eax
je 0x5787bf
dec eax
je 0x5787df
dec eax
je 0x57b666
jmp case.0x574806.6100
sub eax, 0x663
je 0x57b6a6
sub eax, 0xd2c
je 0x5750b8
dec eax
je 0x575261
dec eax
je 0x5750ce
jmp case.0x574806.6100
add eax, 0xffffe890
cmp eax, 0xa
ja case.0x574806.6100
jmp dword [eax*4 + 0x574637]
cmp eax, 0x17a8
jg 0x574739
je 0x574fb5
add eax, 0xffffe884
cmp eax, 0x2b
ja case.0x574806.6100
jmp dword [eax*4 + 0x574689]
cmp eax, 0x17cc
jg 0x5747eb
je 0x574be2
add eax, 0xffffe857
cmp eax, 0x22
ja case.0x574806.6100
jmp dword [eax*4 + 0x57475f]
cmp eax, 0x1f41
jg 0x574839
je 0x57a897
add eax, 0xffffe833
cmp eax, 0xa
ja case.0x574806.6100
jmp dword [eax*4 + 0x57480d]
cmp eax, 0x1fe1
jg 0x57486d
je 0x57ac92
sub eax, 0x1f42
je 0x57aa6d
dec eax
je 0x57aa5d
dec eax
je 0x57aa83
sub eax, 0x75
je 0x57aaa9
jmp case.0x574806.6100
sub eax, 0x2747
je 0x577366
sub eax, 0xd6b8
je case.default.0x5773bc
dec eax
je case.default.0x5773bc
sub eax, 0xd
je 0x579963
jmp case.0x574806.6100
mov eax, dword [0x6e4234]
cmp byte [eax], 0
je case.default.0x5773bc
lea edx, [ebp - 0x128]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x128]
mov eax, dword [0x6e473c]
call fcn.00405428
jmp case.default.0x5773bc
mov eax, dword [0x6e4234]
cmp byte [eax], 0
je case.default.0x5773bc
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x12c]
mov eax, dword [0x6e3ad4]
call fcn.00405428
jmp case.default.0x5773bc
mov eax, dword [0x6e4234]
cmp byte [eax], 0
je case.default.0x5773bc
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [ebp - 0x130]
call fcn.0061ea9c
jmp case.default.0x5773bc
mov eax, dword [0x6e4234]
cmp byte [eax], 0
je case.default.0x5773bc
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x134]
movzx ecx, word [ebp - 0xba]
mov eax, dword [0x6ef078]
call fcn.005a6374
jmp case.default.0x5773bc
mov eax, dword [0x6e4234]
cmp byte [eax], 0
je case.default.0x5773bc
movzx eax, word [ebp - 0xba]
shr eax, 8
call fcn.0055ba98
push eax
call sub.kernel32.dll_GetTickCount_1
add eax, dword [ebp - 0xc0]
push eax
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [ebp - 0x138]
push eax
mov al, byte [ebp - 0xba]
call fcn.0055ba98
mov ecx, eax
mov eax, dword [0x6ef078]
pop edx
call fcn.005a69a8
jmp case.default.0x5773bc
mov eax, dword [0x6e4234]
cmp byte [eax], 0
je case.default.0x5773bc
movzx eax, word [ebp - 0xba]
shr eax, 8
call fcn.0055ba98
push eax
call sub.kernel32.dll_GetTickCount_1
add eax, dword [ebp - 0xc0]
push eax
lea edx, [ebp - 0x13c]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [ebp - 0x13c]
push eax
mov al, byte [ebp - 0xba]
call fcn.0055ba98
mov ecx, eax
mov eax, dword [0x6ef078]
pop edx
call fcn.005a642c
jmp case.default.0x5773bc
mov eax, dword [0x6e4234]
cmp byte [eax], 0
je case.default.0x5773bc
mov dl, 1
mov eax, dword [0x42e020]
call fcn.0042e18c
mov dword [ebp - 0x58], eax
xor eax, eax
push ebp
push 0x574ac4
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000001
mov eax, dword [ebp - 0x58]
call fcn.0042e268
lea edx, [ebp - 0x140]
mov eax, 0x57c000
call fcn.004b51dc
mov edx, dword [ebp - 0x140]
mov cl, 1
mov eax, dword [ebp - 0x58]
call fcn.0042e2d0
test al, al
je 0x574aae
lea edx, [ebp - 0x144]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [ebp - 0x144]
push eax
lea edx, [ebp - 0x148]
mov eax, 0x57c040
call fcn.004b51dc
mov edx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x58]
pop ecx
call fcn.0042e63c
mov eax, dword [ebp - 0x58]
call fcn.0042e238
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.default.0x5773bc
mov eax, dword [ebp - 0x58]
call fcn.00404454
ret
mov eax, dword [0x6e4234]
cmp byte [eax], 0
je case.default.0x5773bc
lea edx, [ebp - 0x14c]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [ebp - 0x14c]
call fcn.0061e708
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov dword [ebp - 0x40], eax
lea edx, [ebp - 0x44]
mov ecx, 4
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e41f0]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc0]
je case.default.0x5773bc
mov eax, dword [0x6e41f0]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x40]
je case.default.0x5773bc
mov eax, dword [0x6e41f0]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x44]
jmp case.default.0x5773bc
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
mov eax, dword [ebp - 0x20]
push eax
push 0
xor ecx, ecx
mov edx, 0x33
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00563528
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00563a18
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00563e2c
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00564240
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005648bc
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00564f38
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005655b4
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00565c30
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005662ac
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00566928
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00566fa4
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00567620
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00567c9c
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00568318
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005687b0
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
push eax
mov eax, dword [0x6e3c18]
mov ecx, 1
mov edx, dword [0x622760]
call fcn.00406b5c
add esp, 4
movzx edx, word [ebp - 0xba]
mov eax, dword [0x6e3c18]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00403bb4
mov eax, dword [0x6e3c18]
mov eax, dword [eax]
mov edx, eax
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp case.default.0x5773bc
mov edx, dword [0x6e3b14]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp case.default.0x5773bc
mov edx, dword [0x6e3d24]
mov ecx, 0xa
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp case.default.0x5773bc
mov edx, dword [0x6e4674]
mov ecx, 0xa
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp case.default.0x5773bc
mov eax, dword [0x6e49c0]
mov dl, byte [ebp - 0xc0]
mov byte [eax], dl
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov dx, word [ebp - 0xbc]
call fcn.00635814
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, word [ebp - 0xbc]
mov eax, dword [ebp - 0x50]
call fcn.00635814
jmp case.default.0x5773bc
push 0x68
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
push 0
push 7
push 0
push 0x1e
lea eax, [ebp - 0x61]
push eax
mov ecx, 0x68
xor edx, edx
mov eax, dword [0x6ef088]
call fcn.005aea60
mov eax, 0x200e
call fcn.0061cac8
jmp case.default.0x5773bc
mov edx, dword [0x6e3948]
mov ecx, 7
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp case.default.0x5773bc
mov edx, dword [0x6e481c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp case.default.0x5773bc
mov edx, dword [0x6e4a88]
mov ecx, 0xa
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp case.default.0x5773bc
mov edx, dword [0x6e41e4]
mov ecx, 0xa
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp case.default.0x5773bc
mov edx, dword [0x6e4678]
mov ecx, 7
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp case.default.0x5773bc
mov eax, dword [0x6e451c]
mov dl, byte [ebp - 0xc0]
mov byte [eax], dl
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
je case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, word [ebp - 0xbc]
mov eax, dword [ebp - 0x50]
call fcn.00635814
jmp case.default.0x5773bc
cmp word [ebp - 0xba], 0
jne 0x574f11
mov edx, dword [0x6e3dbc]
mov ecx, 0xc
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp 0x574f24
mov edx, dword [0x6e3960]
mov ecx, 0xc
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x1326a4c
jle case.default.0x5773bc
cmp word [ebp - 0xba], 0
jne 0x574f53
fild dword [ebp - 0xc0]
mov eax, dword [0x6e3dbc]
fstp qword [eax + 4]
wait
jmp case.default.0x5773bc
fild dword [ebp - 0xc0]
mov eax, dword [0x6e3960]
fstp qword [eax + 4]
wait
jmp case.default.0x5773bc
cmp word [ebp - 0xb8], 0
jne 0x574f93
movzx eax, word [ebp - 0xb6]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0058355c
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb6]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005835fc
jmp case.default.0x5773bc
mov eax, dword [0x6e3e40]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
jmp case.default.0x5773bc
mov eax, dword [0x6e39e4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6e4118]
xor edx, edx
mov dword [eax], edx
lea edx, [ebp - 0xf0]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xf0]
push eax
mov eax, dword [ebp - 0xec]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc0]
mov edx, 0x32
mov eax, dword [0x6ef088]
call fcn.005b2448
mov dl, 7
mov eax, dword [0x6ef078]
call fcn.005a625c
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x51
mov eax, dword [ebp - 4]
call fcn.0056d958
cmp byte [ebp - 0xe8], 1
jne 0x57505f
mov eax, dword [0x6e3fac]
mov byte [eax], 1
jmp 0x575067
mov eax, dword [0x6e3fac]
mov byte [eax], 0
mov eax, dword [0x6e3a24]
mov byte [eax], 0
mov eax, dword [0x6e3c48]
cmp word [eax], 0
ja 0x575099
mov eax, dword [0x6e3bd0]
cmp word [eax], 0
ja 0x575099
mov eax, dword [0x6e457c]
cmp word [eax], 0
ja 0x575099
mov eax, dword [0x6e45f4]
cmp word [eax], 0
mov eax, dword [0x6e3c64]
mov dl, byte [ebp - 0xe4]
mov byte [eax], dl
mov eax, dword [0x6e43f8]
mov dl, byte [ebp - 0xdc]
mov byte [eax], dl
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0058a8cc
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
mov edx, dword [0x6e4044]
mov byte [edx], al
mov ax, word [ebp - 0xba]
mov edx, dword [0x6e467c]
mov byte [edx], al
mov ax, word [ebp - 0xb8]
mov edx, dword [0x6e3e24]
mov byte [edx], al
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov eax, dword [eax + 0x75c]
mov dl, 1
call fcn.004d7d0c
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov dword [eax + 0xec0], 0xffffffff
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov eax, dword [eax + 0x36c]
mov dl, 1
call fcn.004d7d0c
jmp case.default.0x5773bc
mov eax, dword [0x6e4558]
mov dl, byte [ebp - 0xc0]
mov byte [eax], dl
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.005daa14
jmp case.default.0x5773bc
mov eax, dword [0x6e3c38]
mov eax, dword [eax]
cmp byte [eax + 0x1da], 0
jne case.default.0x5773bc
lea edx, [ebp - 0x154]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x154]
lea eax, [ebp - 0x150]
call fcn.00405d60
mov edx, dword [ebp - 0x150]
mov eax, dword [0x6e3c38]
mov eax, dword [eax]
mov eax, dword [eax + 0x364]
call fcn.0054c63c
mov eax, dword [0x6e3c38]
mov eax, dword [eax]
call fcn.004788e8
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057e03c
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005730f4
jmp case.default.0x5773bc
mov eax, dword [0x6e3e64]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0057e2f8
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0057e410
jmp case.default.0x5773bc
lea edx, [ebp - 0x158]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x158]
mov eax, dword [0x6e4958]
call fcn.00405428
mov eax, dword [0x6e4958]
mov eax, dword [eax]
mov cl, 1
mov dl, 1
call fcn.0061cc1c
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0057ece4
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0057ece4
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0057eed0
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
mov edx, dword [0x6e459c]
mov dword [edx], eax
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
cmp word [ebp - 0xba], 1
sete al
mov edx, dword [ebp - 0x50]
mov byte [edx + 0x6d], al
cmp dword [ebp - 0x14], 0
je case.default.0x5773bc
lea edx, [ebp - 0x25c]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x25c]
lea eax, [ebp - 0x258]
mov ecx, 0xff
call fcn.00405670
lea edx, [ebp - 0x258]
mov eax, dword [ebp - 0x50]
add eax, 0x6e
mov cl, 0x10
call fcn.00403aa4
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 4]
call fcn.0058095c
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005807ec
jmp case.default.0x5773bc
mov eax, dword [0x6e48b8]
cmp byte [eax], 0
jne case.default.0x5773bc
lea edx, [ebp - 0x260]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov ecx, dword [ebp - 0x260]
mov dl, 1
mov eax, dword [0x54abf0]
call fcn.0054ac64
jmp case.default.0x5773bc
lea edx, [ebp - 0x264]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x264]
lea eax, [ebp - 0x258]
mov ecx, 0xff
call fcn.00405670
lea edx, [ebp - 0x258]
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
add eax, 0x6e
mov cl, 0x10
call fcn.00403aa4
jmp case.default.0x5773bc
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x13269e8
jle 0x5754c5
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x5753f0
mov eax, dword [ebp - 0x7c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
push 0x40400000
push 0
call fcn.004b4e14
cmp eax, dword [ebp - 0x7c]
jge 0x575461
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x575418
mov eax, dword [ebp - 0x80]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x18]
push eax
push 0x40400000
push 0
call fcn.004b4e14
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x14]
call fcn.004058cc
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.004b51dc
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x268], 0x2f
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
jmp 0x575469
lea eax, [ebp - 0x1c]
call fcn.004053d4
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
push 0
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, 0xa
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp 0x5755c2
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x5754e8
mov eax, dword [ebp - 0x84]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
push 0x40255555
push 0x55555555
call fcn.004b4e14
cmp eax, dword [ebp - 0x84]
jge 0x575571
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x575522
mov eax, dword [ebp - 0x88]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x18]
push eax
push 0x40255555
push 0x55555555
call fcn.004b4e14
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x14]
call fcn.004058cc
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.004b51dc
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x268], 0x2f
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
jmp 0x575579
lea eax, [ebp - 0x1c]
call fcn.004053d4
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc0]
mov edx, 0xa
mov eax, dword [0x6ef088]
call fcn.005b2448
cmp dword [ebp - 0x1c], 0
je case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
push 0
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 0x268], 0x7c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
push 0
lea eax, [ebp - 0x26c]
push eax
mov byte [ebp - 0x268], 0x7c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
mov eax, dword [ebp - 0x50]
cmp dword [eax + 0x90], 0
je 0x5756ab
lea eax, [ebp - 0x270]
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x90]
mov ecx, 0x57c058
mov edx, 0x57c064
call fcn.00447bc8
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
lea eax, [ebp - 0x274]
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x90]
mov ecx, 0x57c058
mov edx, 0x57c070
call fcn.00447bc8
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
cmp dword [ebp - 0x24], 0
je 0x575798
push 0
lea eax, [ebp - 0x278]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x278]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x80], eax
cmp dword [ebp - 0x24], 0
je 0x575798
xor eax, eax
mov dword [ebp - 0x40], eax
push 0
lea eax, [ebp - 0x27c]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x27c]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x40]
mov word [edx + ecx*2 + 0x86], ax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 5
jne 0x575706
push 0
lea eax, [ebp - 0x280]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x280]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov byte [edx + 0x84], al
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je 0x5757d3
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne 0x5757d3
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
push 0
lea eax, [ebp - 0x284]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
mov eax, dword [ebp - 0x50]
lea edx, [eax + 0x98]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
mov edx, dword [ebp - 0x284]
mov eax, dword [ebp - 0x50]
add eax, 0x94
call fcn.00405428
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004b42e0
call fcn.0055ba98
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x9c], eax
mov eax, dword [ebp - 0x50]
call fcn.0062e900
jmp case.default.0x5773bc
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x13269e8
jle 0x57594d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x575866
mov eax, dword [ebp - 0x8c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
push 0x40400000
push 0
call fcn.004b4e14
cmp eax, dword [ebp - 0x8c]
jge 0x5758e9
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x57589d
mov eax, dword [ebp - 0x90]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x18]
push eax
push 0x40400000
push 0
call fcn.004b4e14
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x14]
call fcn.004058cc
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.004b51dc
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x268], 0x2f
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
jmp 0x5758f1
lea eax, [ebp - 0x1c]
call fcn.004053d4
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
push 0
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, 9
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp 0x575a4a
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x575970
mov eax, dword [ebp - 0x94]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
push 0x40255555
push 0x55555555
call fcn.004b4e14
cmp eax, dword [ebp - 0x94]
jge 0x5759f9
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
je 0x5759aa
mov eax, dword [ebp - 0x98]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x18]
push eax
push 0x40255555
push 0x55555555
call fcn.004b4e14
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x14]
call fcn.004058cc
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.004b51dc
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x268], 0x2f
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
jmp 0x575a01
lea eax, [ebp - 0x1c]
call fcn.004053d4
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc0]
mov edx, 9
mov eax, dword [0x6ef088]
call fcn.005b2448
cmp dword [ebp - 0x1c], 0
je case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
push 0
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 0x268], 0x7c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
push 0
lea eax, [ebp - 0x288]
push eax
mov byte [ebp - 0x268], 0x7c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x288]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
mov eax, dword [ebp - 0x50]
cmp dword [eax + 0x90], 0
je 0x575b33
lea eax, [ebp - 0x28c]
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x90]
mov ecx, 0x57c058
mov edx, 0x57c064
call fcn.00447bc8
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
lea eax, [ebp - 0x290]
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x90]
mov ecx, 0x57c058
mov edx, 0x57c070
call fcn.00447bc8
mov edx, dword [ebp - 0x290]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
cmp dword [ebp - 0x24], 0
je 0x575c20
push 0
lea eax, [ebp - 0x294]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x294]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x80], eax
cmp dword [ebp - 0x24], 0
je 0x575c20
xor eax, eax
mov dword [ebp - 0x40], eax
push 0
lea eax, [ebp - 0x298]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x298]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x40]
mov word [edx + ecx*2 + 0x86], ax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 5
jne 0x575b8e
push 0
lea eax, [ebp - 0x29c]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x29c]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov byte [edx + 0x84], al
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je 0x575c5b
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne 0x575c5b
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
push 0
lea eax, [ebp - 0x2a0]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
mov eax, dword [ebp - 0x50]
lea edx, [eax + 0x98]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
mov edx, dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x50]
add eax, 0x94
call fcn.00405428
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004b42e0
call fcn.0055ba98
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x9c], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
je case.default.0x5773bc
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
push 0
push 0
push 0
push 0
push 0
movzx edx, word [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x13269e8
jle 0x575e88
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x575d32
mov eax, dword [ebp - 0x9c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x9c], eax
push 0x40400000
push 0
call fcn.004b4e14
cmp eax, dword [ebp - 0x9c]
jge 0x575db5
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
je 0x575d69
mov eax, dword [ebp - 0xa0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x18]
push eax
push 0x40400000
push 0
call fcn.004b4e14
mov edx, eax
inc edx
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x14]
call fcn.004058cc
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.004b51dc
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x268], 0x2f
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
jmp 0x575dbd
lea eax, [ebp - 0x1c]
call fcn.004053d4
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
je 0x575e1e
mov ax, word [ebp - 0xb8]
push eax
mov ax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
lea eax, [ebp - 0xd8]
push eax
mov cx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b1304
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
push 0
push 0
movzx edx, word [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b2448
mov eax, dword [0x6e4734]
cmp byte [eax + 0x26], 0
je 0x575e77
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4344]
mov dword [edx], eax
mov eax, dword [0x6e4734]
cmp byte [eax + 0xdd], 0
jmp 0x575fca
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
je 0x575eab
mov eax, dword [ebp - 0xa4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
push 0x40255555
push 0x55555555
call fcn.004b4e14
cmp eax, dword [ebp - 0xa4]
jge 0x575f34
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
je 0x575ee5
mov eax, dword [ebp - 0xa8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x18]
push eax
push 0x40255555
push 0x55555555
call fcn.004b4e14
mov edx, eax
inc edx
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x14]
call fcn.004058cc
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.004b51dc
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x268], 0x2f
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
jmp 0x575f3c
lea eax, [ebp - 0x1c]
call fcn.004053d4
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
je 0x575f8f
mov ax, word [ebp - 0xb8]
push eax
mov ax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
mov cx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b1304
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
push 0
movzx edx, word [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b2448
cmp dword [ebp - 0x1c], 0
je case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
push 0
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 0x268], 0x7c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
push 0
lea eax, [ebp - 0x2a4]
push eax
mov byte [ebp - 0x268], 0x7c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
mov eax, dword [ebp - 0x50]
cmp dword [eax + 0x90], 0
je 0x5760b3
lea eax, [ebp - 0x2a8]
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x90]
mov ecx, 0x57c058
mov edx, 0x57c064
call fcn.00447bc8
mov edx, dword [ebp - 0x2a8]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
lea eax, [ebp - 0x2ac]
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x90]
mov ecx, 0x57c058
mov edx, 0x57c070
call fcn.00447bc8
mov edx, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
cmp dword [ebp - 0x24], 0
je 0x5761a0
push 0
lea eax, [ebp - 0x2b0]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x2b0]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x80], eax
cmp dword [ebp - 0x24], 0
je 0x5761a0
xor eax, eax
mov dword [ebp - 0x40], eax
push 0
lea eax, [ebp - 0x2b4]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x2b4]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x40]
mov word [edx + ecx*2 + 0x86], ax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 5
jne 0x57610e
push 0
lea eax, [ebp - 0x2b8]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x2b8]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov byte [edx + 0x84], al
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je 0x5761db
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne 0x5761db
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
push 0
lea eax, [ebp - 0x2bc]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
mov eax, dword [ebp - 0x50]
lea edx, [eax + 0x98]
mov eax, dword [ebp - 0x1c]
call fcn.004b4424
mov edx, dword [ebp - 0x2bc]
mov eax, dword [ebp - 0x50]
add eax, 0x94
call fcn.00405428
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004b42e0
call fcn.0055ba98
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x9c], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x13269e8
jle 0x576320
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
jne 0x57627c
cmp word [ebp - 0xbc], 6
je 0x57627c
cmp word [ebp - 0xbc], 7
jne 0x5762c2
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
push 0
lea eax, [ebp - 0xd8]
push eax
movzx edx, word [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b2448
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x576391
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je 0x576391
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne 0x576391
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
jmp 0x576391
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
jne 0x576356
cmp word [ebp - 0xbc], 6
je 0x576356
cmp word [ebp - 0xbc], 7
jne 0x576391
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
push 0
movzx edx, word [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b2448
cmp word [ebp - 0xbc], 6
jne case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e46d4]
mov dword [edx], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x13269e8
jle 0x57648d
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
je 0x576428
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
push 0
push 0
movzx edx, word [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b2448
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
jmp case.default.0x5773bc
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
je case.default.0x5773bc
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
push 0
movzx edx, word [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x13269e8
jle 0x576588
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x576540
movzx eax, word [ebp - 0xba]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x210], eax
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
jmp case.default.0x5773bc
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
movzx eax, word [ebp - 0xba]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x210], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e3fc0]
cmp byte [eax + 0x142], 0
je case.default.0x5773bc
mov eax, dword [0x6e3fc0]
mov dx, word [ebp - 0xc0]
mov word [eax + 0x182], dx
jmp case.default.0x5773bc
mov eax, dword [ebp - 4]
call fcn.00572cbc
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x13269e8
jle 0x5766c9
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
push 0
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, 0xa
mov eax, dword [0x6ef088]
call fcn.005b2448
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
jmp case.default.0x5773bc
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc0]
mov edx, 0xa
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
je case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x576784
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, 0xc
mov eax, dword [ebp - 0x50]
call fcn.00635814
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
jmp case.default.0x5773bc
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
je case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x576839
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, 0xc
mov eax, dword [ebp - 0x50]
call fcn.00635814
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
je case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, word [ebp - 0xbc]
mov eax, dword [ebp - 0x50]
call fcn.00635814
cmp word [ebp - 0xbc], 0xf
jne case.default.0x5773bc
cmp dword [ebp - 0x14], 0
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov byte [eax + 0x17c], 1
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, word [ebp - 0xbc]
mov eax, dword [ebp - 0x50]
call fcn.00635814
cmp word [ebp - 0xba], 0x64
jne case.default.0x5773bc
mov eax, 0x6c
call fcn.0061cac8
jmp case.default.0x5773bc
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, word [ebp - 0xbc]
mov eax, dword [ebp - 0x50]
call fcn.00635814
movzx eax, word [ebp - 0x34]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x164], eax
movzx eax, word [ebp - 0x32]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x168], eax
movzx eax, word [ebp - 0x30]
movzx edx, word [ebp - 0x2e]
shl edx, 0x10
or eax, edx
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x16c], eax
jmp case.default.0x5773bc
lea edx, [ebp - 0xf0]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, word [ebp - 0xbc]
mov eax, dword [ebp - 0x50]
call fcn.00635814
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xf0]
mov dword [eax + 0x164], edx
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xec]
mov dword [eax + 0x168], edx
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xe8]
mov dword [eax + 0x16c], edx
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xe4]
mov dword [eax + 0x174], edx
jmp case.default.0x5773bc
lea edx, [ebp - 0xf0]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, word [ebp - 0xbc]
mov eax, dword [ebp - 0x50]
call fcn.00635814
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xf0]
mov dword [eax + 0x164], edx
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xec]
mov dword [eax + 0x168], edx
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xe8]
mov dword [eax + 0x16c], edx
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xe4]
mov dword [eax + 0x174], edx
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov ax, word [ebp - 0xba]
mov edx, dword [ebp - 0x50]
mov byte [edx + 0x16], al
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.004b42e0
push eax
movzx ecx, word [ebp - 0xb6]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00563250
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.004b42e0
push eax
movzx ecx, word [ebp - 0xb6]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00563364
jmp case.default.0x5773bc
mov eax, 0x201e
call fcn.0061cac8
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
movzx edx, word [ebp - 0xba]
movzx ecx, word [ebp - 0xb8]
shl ecx, 0x10
or edx, ecx
imul edx, edx, 0x3e8
add eax, edx
mov edx, dword [0x6e3d3c]
mov dword [edx], eax
movzx eax, word [ebp - 0xb6]
mov edx, dword [0x6e4424]
mov dword [edx], eax
lea edx, [ebp - 0x2c0]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x2c0]
mov eax, dword [0x6e44cc]
call fcn.00405428
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov dword [eax + 0xeac], 0x1cc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov eax, dword [eax + 0xb78]
mov dl, 1
call fcn.004d7d0c
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov dword [eax + 0xeac], 0x1cc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov eax, dword [eax + 0xb78]
xor edx, edx
call fcn.004d7d0c
jmp case.default.0x5773bc
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x2c4]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57c074]
call fcn.005de228
dec eax
jne 0x576cd1
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.005701ac
jmp case.default.0x5773bc
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.005701ac
jmp case.default.0x5773bc
lea edx, [ebp - 0x4c]
mov ecx, 4
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xb6]
shr eax, 8
and eax, 0xff
push eax
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0x4c]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0xb6]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005633a8
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0056347c
jmp case.default.0x5773bc
mov eax, dword [0x6e46c4]
mov byte [eax], 0
mov eax, dword [0x6e4988]
mov byte [eax], 0
mov eax, dword [0x6e4464]
mov byte [eax], 0
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c080
call fcn.005de228
mov eax, dword [ebp - 4]
call fcn.00478740
jmp case.default.0x5773bc
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x13269e8
jle 0x576e92
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x576e49
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, word [ebp - 0xbc]
mov eax, dword [ebp - 0x50]
call fcn.00635814
mov eax, dword [ebp - 0x50]
mov word [eax + 0x4f], 0
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
push 0
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, 0x20
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x576efb
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, word [ebp - 0xbc]
mov eax, dword [ebp - 0x50]
call fcn.00635814
mov eax, dword [ebp - 0x50]
mov word [eax + 0x4f], 0
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc0]
mov edx, 0x20
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x13269e8
jle 0x577006
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
push 0
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, 0x21
mov eax, dword [0x6ef088]
call fcn.005b2448
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
jmp case.default.0x5773bc
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc0]
mov edx, 0x21
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
mov eax, dword [0x6e3e40]
cmp dword [eax], 0x13269e8
jle 0x577121
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
push 0
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, 0x1b
mov eax, dword [0x6ef088]
call fcn.005b2448
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
jmp case.default.0x5773bc
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc0]
mov edx, 0x1b
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0xa0], edx
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov dl, byte [ebp - 0xba]
mov byte [eax + 0x1d], dl
movzx eax, word [ebp - 0xb8]
movzx edx, word [ebp - 0xb6]
shl edx, 0x10
or eax, edx
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
mov dword [edx + 0xa4], eax
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
lea edx, [eax + 0x39]
mov ecx, 0x34
mov eax, dword [ebp - 0x14]
call fcn.004b5274
jmp case.default.0x5773bc
xor eax, eax
mov al, byte [ebp - 0xba]
mov edx, dword [0x6e39ac]
mov dword [edx], eax
movzx eax, word [ebp - 0xba]
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e4104]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0xb8]
mov edx, dword [0x6e4224]
mov dword [edx], eax
movzx eax, word [ebp - 0xb8]
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e4220]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0xb6]
mov edx, dword [0x6e42d4]
mov dword [edx], eax
movzx eax, word [ebp - 0xb6]
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e4290]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0xc0]
mov edx, dword [0x6e3f14]
mov dword [edx], eax
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
mov edx, dword [0x6e46a8]
mov dword [edx], eax
mov eax, dword [0x6e46a8]
mov eax, dword [eax]
sub eax, 1
jb 0x577281
je 0x5772a3
dec eax
je 0x5772c5
dec eax
je 0x5772e7
jmp 0x577307
mov eax, dword [0x6e441c]
mov byte [eax], 0x64
mov eax, dword [0x6e45b0]
mov byte [eax], 0x64
mov eax, dword [0x6e491c]
mov byte [eax], 0x6e
mov eax, dword [0x6e4998]
mov byte [eax], 0xff
jmp 0x577307
mov eax, dword [0x6e441c]
mov byte [eax], 0xff
mov eax, dword [0x6e45b0]
mov byte [eax], 0xff
mov eax, dword [0x6e491c]
mov byte [eax], 0xff
mov eax, dword [0x6e4998]
mov byte [eax], 0xff
jmp 0x577307
mov eax, dword [0x6e441c]
mov byte [eax], 0x3c
mov eax, dword [0x6e45b0]
mov byte [eax], 0x32
mov eax, dword [0x6e491c]
mov byte [eax], 0x32
mov eax, dword [0x6e4998]
mov byte [eax], 0xff
jmp 0x577307
mov eax, dword [0x6e441c]
mov byte [eax], 0
mov eax, dword [0x6e45b0]
mov byte [eax], 0
mov eax, dword [0x6e491c]
mov byte [eax], 0
mov eax, dword [0x6e4998]
mov byte [eax], 0xff
mov eax, dword [0x6e491c]
mov al, byte [eax]
push eax
mov ecx, dword [0x6e45b0]
mov cl, byte [ecx]
mov edx, dword [0x6e441c]
mov dl, byte [edx]
mov eax, dword [0x6e4998]
mov al, byte [eax]
call fcn.0048bef4
mov edx, dword [0x6e3d80]
mov dword [edx], eax
movzx eax, word [ebp - 0xb8]
mov edx, dword [0x6e44ec]
mov dword [edx], eax
mov eax, dword [0x6e44ec]
cmp dword [eax], 0
jne 0x577359
mov eax, dword [0x6e4574]
mov byte [eax], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e4574]
mov byte [eax], 1
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
mov edx, dword [0x6e3ef8]
mov dword [edx], eax
mov eax, dword [0x6e3ef8]
cmp dword [eax], 0xffffffff
jle 0x57738d
mov eax, dword [0x6e3ef8]
mov eax, dword [eax]
call fcn.00620848
jmp 0x57739f
mov eax, dword [0x6e3d94]
cmp byte [eax], 0
je 0x57739f
mov eax, dword [0x6e3d94]
mov byte [eax], 0
cmp dword [ebp - 0xc0], 1
jne case.default.0x5773bc
mov eax, dword [0x6e3ef8]
mov eax, dword [eax]
cmp eax, 8
ja case.default.0x5773bc
jmp dword [eax*4 + 0x5773c3]
push 0xff
mov ecx, 0xffff
mov edx, 0x57c0d0
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
push 0xff
mov ecx, 0xffff
mov edx, 0x57c0e8
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
push 0xff
mov ecx, 0xffff
mov edx, 0x57c100
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
push 0xff
mov ecx, 0xffff
mov edx, 0x57c118
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
push 0xff
mov ecx, 0xffff
mov edx, 0x57c130
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
push 0xff
mov ecx, 0xffff
mov edx, 0x57c148
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
push 0xff
mov ecx, 0xffff
mov edx, 0x57c160
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
push 0xff
mov ecx, 0xffff
mov edx, 0x57c178
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
push 0xff
mov ecx, 0xffff
mov edx, 0x57c190
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0x57], edx
mov eax, dword [0x6e4044]
cmp byte [eax], 0
je 0x57756d
push 0xffffff
push 0x57c1a8
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x2cc]
call fcn.0040a73c
push dword [ebp - 0x2cc]
push 0x57c1b8
lea eax, [ebp - 0x2c8]
mov edx, 3
call fcn.00405768
mov edx, dword [ebp - 0x2c8]
mov ecx, 0xff
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp 0x5775af
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x2d0]
call fcn.0040a73c
lea eax, [ebp - 0x2d0]
mov edx, 0x57c1cc
call fcn.004056a0
mov edx, dword [ebp - 0x2d0]
mov eax, dword [0x6ef078]
call fcn.005a6800
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4040]
mov dword [edx], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov dx, word [ebp - 0xba]
mov word [eax + 0x39], dx
mov edx, 0x57c1e4
mov eax, dword [0x6ef078]
call fcn.005a68d4
jmp case.default.0x5773bc
lea edx, [ebp - 0xf0]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x577672
mov ax, word [ebp - 0xb8]
push eax
mov cx, word [ebp - 0xba]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 4]
call fcn.0058bad4
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xba]
mov word [eax + 0x4f], dx
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xb8]
mov word [eax + 0x51], dx
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xb6]
mov word [eax + 0x53], dx
mov eax, dword [0x6e450c]
cmp byte [eax], 1
jne 0x577672
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xc0]
call fcn.00630044
mov eax, dword [0x6e4078]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc0]
jne case.default.0x5773bc
mov eax, dword [0x6e3f7c]
mov dx, word [ebp - 0xba]
mov word [eax + 0x16], dx
mov eax, dword [0x6e3f7c]
mov dx, word [ebp - 0xb8]
mov word [eax + 0x18], dx
mov eax, dword [0x6e3f7c]
mov dx, word [ebp - 0xb6]
mov word [eax + 0x1a], dx
jmp case.default.0x5773bc
call fcn.00631148
jmp case.default.0x5773bc
lea edx, [ebp - 0xf0]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x5777e7
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
jne 0x577722
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp dword [eax + 0x9c], 0xf9
jne 0x577743
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e3978]
mov dword [edx], eax
jmp 0x577743
mov eax, dword [ebp - 0x50]
call fcn.0063b328
test al, al
je 0x577736
mov eax, dword [ebp - 0x50]
call fcn.0063b3b8
mov eax, dword [0x6e3a5c]
mov edx, dword [ebp - 0xe0]
mov dword [eax], edx
mov eax, dword [0x6e4734]
cmp byte [eax + 0x227], 0
je 0x57775d
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je 0x57778a
push 0
push 0
mov eax, dword [ebp - 0xf0]
push eax
mov eax, dword [ebp - 0xec]
push eax
push 0
mov eax, dword [ebp - 0xe8]
push eax
mov ecx, dword [ebp - 0xe4]
mov dx, 0x1f
mov eax, dword [ebp - 0x50]
call fcn.00635970
mov ax, word [ebp - 0xb8]
push eax
cmp word [ebp - 0xb6], 0xa
sete al
push eax
mov cx, word [ebp - 0xba]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 4]
call fcn.0058b844
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xba]
mov word [eax + 0x4f], dx
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xb8]
mov word [eax + 0x53], dx
mov eax, dword [0x6e450c]
cmp byte [eax], 1
jne 0x5777e7
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xc0]
call fcn.00630044
mov eax, dword [0x6e4078]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc0]
jne case.default.0x5773bc
mov eax, dword [0x6e3f7c]
mov dx, word [ebp - 0xba]
mov word [eax + 0x16], dx
mov eax, dword [0x6e3f7c]
mov dx, word [ebp - 0xb8]
mov word [eax + 0x1a], dx
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x19c], eax
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xd8]
mov dword [eax + 0x1a0], edx
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xd4]
mov dword [eax + 0x1a4], edx
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je 0x5778c4
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne 0x5778c4
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x19c]
call fcn.00648b40
jmp case.default.0x5773bc
mov eax, dword [ebp - 4]
call fcn.0058a7e4
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
lea edx, [ebp - 0xd8]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
je 0x57796b
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xba]
mov word [eax + 0x4f], dx
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xb8]
mov word [eax + 0x53], dx
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc6]
mov byte [eax + 0x1d], dl
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xc8]
mov word [eax + 0x39], dx
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0x2d
jne 0x57796b
mov eax, dword [ebp - 0x50]
mov dl, byte [ebp - 0xc5]
mov byte [eax + 0x14], dl
mov eax, dword [ebp - 0x50]
mov byte [eax + 0x1e8], 1
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov byte [eax + 0x1e8], 0
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xba]
mov word [eax + 0x4f], dx
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xb8]
mov word [eax + 0x53], dx
mov eax, dword [ebp - 0x50]
mov byte [eax + 0x1e9], 1
mov eax, dword [ebp - 0x50]
mov dword [eax + 0x1f0], 0x7d0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x1ec], eax
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov edx, dword [0x633eb4]
call fcn.004045e0
test al, al
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
call fcn.0063e3d8
jmp case.default.0x5773bc
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
cmp word [ebp - 0xbc], 0x66
jne 0x577a75
mov eax, dword [0x6e4844]
cmp byte [eax], 0
je 0x577a75
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
cmp word [ebp - 0xbc], 0x67
jne 0x577ab0
mov eax, dword [0x6e49ec]
cmp byte [eax], 0
je 0x577a96
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [0x6e4734]
cmp byte [eax + 0x13], 0
je 0x577ab0
mov eax, dword [0x6e4644]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.00559190
cmp word [ebp - 0xbc], 0x68
jne 0x577ad1
mov eax, dword [0x6e4630]
cmp byte [eax], 0
je 0x577ad1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x577dc8
inc eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x40], 0
cmp word [ebp - 0xbc], 0x66
jne 0x577c50
mov eax, dword [0x6e4734]
cmp byte [eax + 0x11], 0
je 0x577c50
mov eax, dword [0x6e4734]
cmp byte [eax + 0xc], 0
je 0x577b27
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [0x6ef074]
call fcn.00475200
mov edx, dword [ebp - 0x20]
call fcn.00431c24
mov edx, dword [0x6e3b80]
mov edx, dword [edx]
sar edx, 1
jns 0x577b48
adc edx, 0
sub edx, 0xd6
add edx, edx
cmp eax, edx
jle 0x577b8d
lea ecx, [ebp - 0x2d4]
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x40]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x2d4]
mov edx, dword [ebp - 0x20]
call fcn.004059b0
test eax, eax
jle 0x577c50
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [0x6ef074]
call fcn.00475200
mov edx, dword [ebp - 0x20]
call fcn.00431c24
mov edx, dword [0x6e3b80]
mov edx, dword [edx]
sar edx, 1
jns 0x577bae
adc edx, 0
sub edx, 0xd6
add edx, edx
add edx, edx
cmp eax, edx
jle 0x577c1b
lea ecx, [ebp - 0x2d8]
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x40]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x2d8]
push eax
lea ecx, [ebp - 0x2dc]
mov edx, dword [ebp - 0x40]
inc edx
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2dc]
pop eax
call fcn.004056a0
mov eax, dword [ebp - 0x2d8]
mov edx, dword [ebp - 0x20]
call fcn.004059b0
test eax, eax
jle 0x577c50
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
lea ecx, [ebp - 0x2e0]
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x40]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x20]
call fcn.0040a000
test eax, eax
jne 0x577c50
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
cmp word [ebp - 0xbc], 0x64
jne 0x577dbc
cmp word [ebp - 0xb6], 3
jne 0x577dbc
mov eax, dword [0x6e4734]
cmp byte [eax + 0x12], 0
je 0x577dbc
mov eax, dword [0x6e4734]
cmp byte [eax + 0xd], 0
je 0x577c93
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [0x6ef074]
call fcn.00475200
mov edx, dword [ebp - 0x20]
call fcn.00431c24
mov edx, dword [0x6e3b80]
mov edx, dword [edx]
sar edx, 1
jns 0x577cb4
adc edx, 0
sub edx, 0xd6
add edx, edx
cmp eax, edx
jle 0x577cf9
lea ecx, [ebp - 0x2e4]
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x40]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x2e4]
mov edx, dword [ebp - 0x20]
call fcn.004059b0
test eax, eax
jle 0x577dbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [0x6ef074]
call fcn.00475200
mov edx, dword [ebp - 0x20]
call fcn.00431c24
mov edx, dword [0x6e3b80]
mov edx, dword [edx]
sar edx, 1
jns 0x577d1a
adc edx, 0
sub edx, 0xd6
add edx, edx
add edx, edx
cmp eax, edx
jle 0x577d87
lea ecx, [ebp - 0x2e8]
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x40]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp - 0x2ec]
mov edx, dword [ebp - 0x40]
inc edx
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2ec]
pop eax
call fcn.004056a0
mov eax, dword [ebp - 0x2e8]
mov edx, dword [ebp - 0x20]
call fcn.004059b0
test eax, eax
jle 0x577dbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
lea ecx, [ebp - 0x2f0]
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x40]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2f0]
mov eax, dword [ebp - 0x20]
call fcn.0040a000
test eax, eax
jne 0x577dbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
inc dword [ebp - 0x40]
dec dword [ebp - 0x68]
jne 0x577af2
cmp word [ebp - 0xbc], 0x64
je 0x577de5
movzx eax, word [ebp - 0xbc]
mov edx, dword [ebp - 0x20]
call fcn.0062e744
test al, al
je 0x577e0f
movzx eax, word [ebp - 0xba]
shr eax, 8
call fcn.0055ba98
push eax
mov al, byte [ebp - 0xba]
call fcn.0055ba98
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x6ef078]
call fcn.005a6c90
cmp word [ebp - 0xbc], 0x67
jne 0x577e32
mov eax, dword [0x6e4334]
cmp byte [eax], 0
je 0x577e32
mov eax, dword [0x6e3994]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.005a587c
cmp word [ebp - 0xbc], 0x68
jne case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.005fbf24
jmp case.default.0x5773bc
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [0x6e4734]
cmp byte [eax + 0x11], 0
je 0x577fdc
mov eax, dword [0x6e4734]
cmp byte [eax + 0xc], 0
je 0x577e86
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x577fdc
inc eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x40], 0
mov eax, dword [0x6ef074]
call fcn.00475200
mov edx, dword [ebp - 0x20]
call fcn.00431c24
mov edx, dword [0x6e3b80]
mov edx, dword [edx]
sar edx, 1
jns 0x577ec8
adc edx, 0
sub edx, 0xd6
add edx, edx
cmp eax, edx
jle 0x577f0d
lea ecx, [ebp - 0x2f4]
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x40]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x20]
call fcn.004059b0
test eax, eax
jle 0x577fd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov eax, dword [0x6ef074]
call fcn.00475200
mov edx, dword [ebp - 0x20]
call fcn.00431c24
mov edx, dword [0x6e3b80]
mov edx, dword [edx]
sar edx, 1
jns 0x577f2e
adc edx, 0
sub edx, 0xd6
add edx, edx
add edx, edx
cmp eax, edx
jle 0x577f9b
lea ecx, [ebp - 0x2f8]
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x40]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x2f8]
push eax
lea ecx, [ebp - 0x2fc]
mov edx, dword [ebp - 0x40]
inc edx
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x2fc]
pop eax
call fcn.004056a0
mov eax, dword [ebp - 0x2f8]
mov edx, dword [ebp - 0x20]
call fcn.004059b0
test eax, eax
jle 0x577fd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
lea ecx, [ebp - 0x300]
mov eax, dword [0x6ef078]
mov eax, dword [eax + 0x34]
mov edx, dword [ebp - 0x40]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x300]
mov eax, dword [ebp - 0x20]
call fcn.0040a000
test eax, eax
jne 0x577fd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
inc dword [ebp - 0x40]
dec dword [ebp - 0x68]
jne 0x577ea7
mov eax, dword [0x6e3b00]
cmp byte [eax], 0
jne 0x578025
movzx eax, word [ebp - 0xbc]
mov edx, dword [ebp - 0x20]
call fcn.0062e744
test al, al
je 0x578025
movzx eax, word [ebp - 0xba]
shr eax, 8
call fcn.0055ba98
push eax
mov al, byte [ebp - 0xba]
call fcn.0055ba98
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp 0x578032
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x50]
call fcn.0063b51c
jmp case.default.0x5773bc
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
push 0
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 0x268], 0x7c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x20]
call fcn.004b4424
push 0
lea eax, [ebp - 0x304]
push eax
mov byte [ebp - 0x268], 0x7c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x304]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
mov eax, dword [ebp - 0x50]
cmp dword [eax + 0x90], 0
je 0x578149
lea eax, [ebp - 0x308]
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x90]
mov ecx, 0x57c058
mov edx, 0x57c064
call fcn.00447bc8
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x90]
mov ecx, 0x57c058
mov edx, 0x57c070
call fcn.00447bc8
mov edx, dword [ebp - 0x30c]
mov eax, dword [ebp - 0x50]
add eax, 0x90
call fcn.00405428
cmp dword [ebp - 0x24], 0
je 0x578236
push 0
lea eax, [ebp - 0x310]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x310]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x80], eax
cmp dword [ebp - 0x24], 0
je 0x578236
xor eax, eax
mov dword [ebp - 0x40], eax
push 0
lea eax, [ebp - 0x314]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x314]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x40]
mov word [edx + ecx*2 + 0x86], ax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 5
jne 0x5781a4
push 0
lea eax, [ebp - 0x318]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.004b4424
mov edx, dword [ebp - 0x318]
lea eax, [ebp - 0x24]
call fcn.0040546c
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004b42e0
mov edx, dword [ebp - 0x50]
mov byte [edx + 0x84], al
push 0
lea eax, [ebp - 0x31c]
push eax
mov byte [ebp - 0x268], 0x5c
lea ecx, [ebp - 0x268]
mov eax, dword [ebp - 0x50]
lea edx, [eax + 0x98]
mov eax, dword [ebp - 0x20]
call fcn.004b4424
mov edx, dword [ebp - 0x31c]
mov eax, dword [ebp - 0x50]
add eax, 0x94
call fcn.00405428
mov al, byte [ebp - 0xba]
call fcn.0055ba98
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x9c], eax
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov al, byte [ebp - 0xba]
call fcn.0055ba98
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x9c], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0xc0]
je case.default.0x5773bc
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0xc0]
mov edx, 0x1d
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
lea edx, [ebp - 0xf0]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x57836f
mov ax, word [ebp - 0xb8]
push eax
mov ax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xf0]
push eax
mov eax, dword [ebp - 0xec]
push eax
push 0
mov cx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b1304
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0xe8]
mov dword [eax + 0x178], edx
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0xf0]
push eax
mov eax, dword [ebp - 0xec]
push eax
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov dx, 0x14
mov eax, dword [ebp - 0x50]
call fcn.00635814
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0xc0]
mov edx, 0x15
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
lea edx, [ebp - 0x2c]
mov ecx, 4
mov eax, dword [ebp - 0x14]
call fcn.004b5274
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
movzx eax, word [ebp - 0xba]
push eax
mov ecx, dword [ebp - 0xc0]
mov dl, 1
mov eax, dword [0x5bf630]
call fcn.005bf6f0
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor edx, edx
mov dword [eax + 0xc], edx
movzx eax, word [ebp - 0x2c]
mov edx, dword [ebp - 0x54]
mov dword [edx + 0x1c], eax
mov edx, dword [ebp - 0x54]
mov eax, dword [0x6ef0a0]
call fcn.005bff1c
cmp word [ebp - 0xba], 7
jne case.default.0x5773bc
mov eax, 0x57c1f4
call fcn.0061c9d0
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef0a0]
call fcn.005c000c
jmp case.default.0x5773bc
mov cl, byte [ebp - 0xba]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057f298
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00583318
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005812fc
jmp case.default.0x5773bc
cmp word [ebp - 0xb6], 1
sete al
push eax
mov eax, dword [ebp - 0x14]
push eax
mov cl, byte [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00580b0c
jmp case.default.0x5773bc
mov eax, dword [ebp - 0x14]
push eax
mov cl, byte [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00580cd0
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0058060c
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00580484
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057f804
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057fba4
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057fcf4
jmp case.default.0x5773bc
lea edx, [ebp - 0x320]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [ebp - 0x320]
mov edx, dword [ebp - 0xc0]
call fcn.00646f64
jmp case.default.0x5773bc
lea edx, [ebp - 0x324]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x324]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005816cc
jmp case.default.0x5773bc
movzx ecx, word [ebp - 0xba]
movzx eax, word [ebp - 0xb8]
shl eax, 0x10
or ecx, eax
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00581558
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
lea edx, [ebp - 0x328]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [ebp - 0x328]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005817ac
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00582100
jmp case.default.0x5773bc
movzx ecx, word [ebp - 0xb8]
movzx edx, word [ebp - 0xba]
mov eax, dword [0x6ef0b4]
call fcn.0061dffc
jmp case.default.0x5773bc
mov edx, 0x57c20c
mov eax, dword [0x6ef078]
call fcn.005a68d4
jmp case.default.0x5773bc
movzx ecx, word [ebp - 0xb8]
movzx edx, word [ebp - 0xba]
mov eax, dword [0x6ef0b4]
call fcn.0061e280
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0x24], edx
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.00404650
mov eax, dword [0x6e3aec]
cmp byte [eax + 4], 0
je case.default.0x5773bc
mov eax, dword [0x6e3aec]
mov eax, dword [eax]
sub eax, 0xe
jae 0x578710
mov eax, dword [0x6e3aec]
imul eax, dword [eax], 0xa1
mov edx, dword [0x6e3fc0]
mov ecx, dword [0x6e3aec]
lea edi, [edx + eax]
lea esi, [ecx + 4]
mov ecx, 0x28
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e3aec]
cmp byte [eax + 4], 0
je case.default.0x5773bc
mov eax, dword [0x6e3aec]
add eax, 4
or edx, 0xffffffff
call fcn.00645be8
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0x24], edx
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.00404650
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e3aec]
cmp dword [eax], 0
jge 0x5787b1
mov eax, dword [0x6e3aec]
mov eax, dword [eax]
inc eax
neg eax
mov dword [ebp - 0x48], eax
imul eax, dword [ebp - 0x48], 0xa1
mov edx, dword [0x6e3fc0]
mov ecx, dword [0x6e3aec]
lea edi, [edx + eax]
lea esi, [ecx + 4]
mov ecx, 0x28
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00580f64
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00580d90
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0xf18], edx
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0xf1c], eax
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov dl, byte [ebp - 0xb6]
mov byte [eax + 0xf14], dl
jmp case.default.0x5773bc
mov eax, 0x57c220
call fcn.0061c9d0
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xec0], edx
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00582270
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
sub eax, 1
jb 0x57886f
je 0x57888c
dec eax
je 0x5788a9
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c238
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c264
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c288
call fcn.005de228
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0058266c
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov dx, word [ebp - 0xc0]
mov word [eax + 0x5f], dx
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov dx, word [ebp - 0xba]
mov word [eax + 0x63], dx
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov dx, word [ebp - 0xb8]
mov word [eax + 0x67], dx
jmp case.default.0x5773bc
mov eax, 0x6a
call fcn.0061cac8
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov eax, dword [eax + 0xa0]
cmp eax, dword [ebp - 0xc0]
jge 0x578988
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0xc0]
pop edx
sub eax, edx
lea edx, [ebp - 0x330]
call fcn.0040a650
push dword [ebp - 0x330]
push 0x57c2b4
mov eax, dword [0x6e3cdc]
push dword [eax]
push 0x57c2c0
lea eax, [ebp - 0x32c]
mov edx, 4
call fcn.00405768
mov edx, dword [ebp - 0x32c]
mov eax, dword [0x6ef078]
call fcn.005a68d4
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0xa0], edx
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
mov dword [edx + 0xa4], eax
jmp case.default.0x5773bc
push 0
push 0
push 0
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
push eax
movzx eax, word [ebp - 0xb6]
or eax, 0
push eax
push 0
push 0
movzx edx, word [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
push 0
push 0
push 0
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
movzx edx, word [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b2448
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
mov eax, dword [0x6e450c]
cmp byte [eax], 1
jne case.default.0x5773bc
mov eax, dword [0x6e4734]
cmp byte [eax + 0x1ff], 0
je case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
jne case.default.0x5773bc
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
test byte [eax + 0x2f], 4
je case.default.0x5773bc
mov eax, dword [0x6e3994]
mov eax, dword [eax]
mov eax, dword [eax + 0x574]
mov edx, dword [eax]
call dword [edx + 0xdc]
sub eax, 1
jb 0x578abd
je 0x578acc
dec eax
je 0x578adb
jmp 0x578ae5
lea eax, [ebp - 0x5c]
mov edx, 0x57c2d0
call fcn.0040546c
jmp 0x578ae5
lea eax, [ebp - 0x5c]
mov edx, 0x57c2e4
call fcn.0040546c
jmp 0x578ae5
mov eax, dword [0x6ef074]
call fcn.0058d4bc
mov eax, dword [ebp - 0x5c]
call fcn.0062df10
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffff
jle 0x578b08
mov edx, dword [ebp - 0x40]
mov eax, dword [0x6ef074]
call fcn.00569230
jmp case.default.0x5773bc
mov eax, dword [ebp - 0x5c]
call fcn.0062de04
mov eax, dword [ebp - 0x5c]
call fcn.0062df10
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffff
jle 0x578b33
mov edx, dword [ebp - 0x40]
mov eax, dword [0x6ef074]
call fcn.00569230
jmp case.default.0x5773bc
push 0xff
push 0x57c2f4
push dword [ebp - 0x5c]
push 0x57c304
lea eax, [ebp - 0x334]
mov edx, 3
call fcn.00405768
mov edx, dword [ebp - 0x334]
xor ecx, ecx
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
mov eax, dword [0x6ef088]
call fcn.005aad84
mov eax, dword [0x6e3fe8]
mov byte [eax], 1
jmp case.default.0x5773bc
lea ecx, [ebp - 0x338]
movzx edx, word [ebp - 0xba]
mov eax, dword [ebp - 0xc0]
call fcn.0061f014
mov edx, dword [ebp - 0x338]
mov eax, dword [0x6e4aec]
mov ecx, dword [0x6214a8]
call fcn.00406cb8
mov eax, dword [0x6e4aec]
mov eax, dword [eax]
call fcn.004069a8
cmp eax, 2
jle case.default.0x5773bc
mov eax, dword [0x6e4a58]
mov byte [eax], 1
push 0xffffff
lea eax, [ebp - 0x33c]
push eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x34c], eax
mov byte [ebp - 0x348], 0
movzx eax, word [ebp - 0xba]
mov dword [ebp - 0x344], eax
mov byte [ebp - 0x340], 0
lea edx, [ebp - 0x34c]
mov ecx, 1
mov eax, 0x57c324
call fcn.0040b9d8
mov eax, dword [ebp - 0x33c]
push eax
mov al, 0xb4
call fcn.0055ba98
mov ecx, eax
mov eax, dword [0x6ef078]
pop edx
call fcn.005a6c90
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0057f164
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0057f93c
jmp case.default.0x5773bc
mov eax, dword [0x6e4734]
cmp byte [eax + 0x75], 0
je 0x578c8e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x444]
sub eax, 6
jae 0x578c8e
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x444]
mov eax, dword [0x6e4a90]
call fcn.006311f0
mov eax, dword [0x6e4a90]
mov byte [eax], 0
call fcn.0064667c
mov eax, dword [ebp - 4]
mov dword [eax + 0x444], 0xffffffff
jmp case.default.0x5773bc
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x444]
mov eax, dword [0x6e4a90]
call fcn.00645be8
mov eax, dword [0x6e4a90]
mov byte [eax], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x444], 0xffffffff
jmp case.default.0x5773bc
cmp dword [ebp - 0x14], 0
je case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00582814
jmp case.default.0x5773bc
cmp dword [ebp - 0xc0], 1
mov eax, dword [0x6e4234]
sete byte [eax]
cmp dword [ebp - 0x14], 0
je case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00583078
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005828f8
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
movzx edx, word [ebp - 0xb6]
shl edx, 0x10
or eax, edx
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005838bc
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00583448
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
movzx edx, word [ebp - 0xb6]
shl edx, 0x10
or eax, edx
push eax
movzx edx, word [ebp - 0xba]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00583a60
jmp case.default.0x5773bc
lea edx, [ebp - 0x350]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [ebp - 0x350]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005842a8
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.005f12c0
jmp case.default.0x5773bc
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005843f8
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00584644
jmp case.default.0x5773bc
mov cx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00584898
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00584958
jmp case.default.0x5773bc
mov eax, dword [0x6e3dfc]
cmp byte [eax], 0
je case.default.0x5773bc
cmp dword [ebp - 0xc0], 0
jle 0x578e9d
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0xc0]
call fcn.0040a650
push dword [ebp - 0x354]
push 0x57c2b4
mov eax, dword [0x6e3cdc]
push dword [eax]
mov eax, dword [0x6e3eb0]
mov edx, 3
call fcn.00405768
jmp case.default.0x5773bc
mov ecx, dword [0x6e3cdc]
mov ecx, dword [ecx]
mov eax, dword [0x6e3eb0]
mov edx, 0x57c360
call fcn.004056ec
jmp case.default.0x5773bc
mov eax, dword [0x6e4a20]
mov byte [eax], 0
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0xa0], edx
mov eax, dword [0x6e4a20]
mov byte [eax], 0
mov eax, 0x6a
call fcn.0061cac8
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e4a20]
or edx, 0xffffffff
call fcn.00645be8
mov eax, dword [0x6e4a20]
mov byte [eax], 0
mov eax, dword [ebp - 0xc0]
add eax, 4
cmp eax, 4
ja case.default.0x5773bc
jmp dword [eax*4 + 0x578f44]
lea eax, [ebp - 0x358]
push eax
mov dword [ebp - 0x360], 0x7fffffff
mov byte [ebp - 0x35c], 0
lea edx, [ebp - 0x360]
xor ecx, ecx
mov eax, 0x57c370
call fcn.0040b9d8
mov edx, dword [ebp - 0x358]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c398
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c398
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c3b0
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c3cc
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e4a20]
mov byte [eax], 0
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e4a20]
or edx, 0xffffffff
call fcn.00645be8
mov eax, dword [0x6e4a20]
mov byte [eax], 0
mov eax, dword [ebp - 0xc0]
sub eax, 1
jb 0x57906b
je 0x579088
jmp 0x5790a5
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c398
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c3b0
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c398
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
sub eax, 1
jb 0x5790d7
je 0x5790f4
dec eax
je 0x579111
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c3e8
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c414
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c43c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [ebp - 4]
call fcn.00580400
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57c464]
mov edx, 0x57c470
call fcn.005de228
cmp eax, 6
jne case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57c464]
mov edx, 0x57c4bc
call fcn.005de228
cmp eax, 6
jne case.default.0x5773bc
push 0
push 0
push 0
mov ecx, dword [ebp - 0xc0]
mov edx, 0xfb8
mov eax, dword [ebp - 4]
call fcn.0056d958
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e4138]
mov byte [eax], 0
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.0060c97c
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e4138]
or edx, 0xffffffff
call fcn.00645be8
mov eax, dword [0x6e4138]
mov byte [eax], 0
mov eax, dword [ebp - 0xc0]
cmp eax, 4
ja case.default.0x579206
jmp dword [eax*4 + 0x57920d]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c4f0
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c508
call fcn.005de228
jmp case.default.0x5773bc
push 0x57c520
lea edx, [ebp - 0x368]
movzx eax, word [ebp - 0xb8]
call fcn.0040a650
push dword [ebp - 0x368]
push 0x57c540
lea eax, [ebp - 0x364]
mov edx, 3
call fcn.00405768
mov edx, dword [ebp - 0x364]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
push 0x57c550
lea edx, [ebp - 0x370]
movzx eax, word [ebp - 0xba]
call fcn.0040a650
push dword [ebp - 0x370]
push 0x57c540
lea eax, [ebp - 0x36c]
mov edx, 3
call fcn.00405768
mov edx, dword [ebp - 0x36c]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c570
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c594
call fcn.005de228
jmp case.default.0x5773bc
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.0060c8e0
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
sub eax, 1
jb 0x579363
je 0x579394
dec eax
je 0x5793d3
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c5ac
call fcn.005de228
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.0060c8e0
jmp case.default.0x5773bc
push 0x57c5c4
mov eax, dword [0x6e45a8]
push dword [eax]
push 0x57c5dc
lea eax, [ebp - 0x374]
mov edx, 3
call fcn.00405768
mov edx, dword [ebp - 0x374]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c5f4
call fcn.005de228
jmp case.default.0x5773bc
mov ax, word [ebp - 0xba]
sub ax, 1
jb 0x57940e
je 0x57942b
dec ax
je 0x579448
dec ax
je 0x579465
jmp case.default.0x5773bc
mov eax, dword [0x6e4320]
mov dword [eax], 1
mov eax, dword [0x6e3d10]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
jmp case.default.0x5773bc
mov eax, dword [0x6e4320]
mov dword [eax], 0xd
mov eax, dword [0x6e3d10]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
jmp case.default.0x5773bc
mov eax, dword [0x6e4320]
mov dword [eax], 0xd
mov eax, dword [0x6e3d10]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
jmp case.default.0x5773bc
mov eax, dword [0x6e4320]
mov dword [eax], 0xd
jmp case.default.0x5773bc
mov ax, word [ebp - 0xba]
sub ax, 1
jb 0x579493
je 0x5794a3
dec ax
je 0x5794b3
dec ax
je 0x5794c3
jmp case.default.0x5773bc
mov eax, dword [0x6e4320]
mov dword [eax], 5
jmp case.default.0x5773bc
mov eax, dword [0x6e4320]
mov dword [eax], 6
jmp case.default.0x5773bc
mov eax, dword [0x6e4320]
mov dword [eax], 7
jmp case.default.0x5773bc
mov eax, dword [0x6e4320]
mov dword [eax], 8
jmp case.default.0x5773bc
mov eax, dword [0x6e3dfc]
cmp byte [eax], 0
je case.default.0x5773bc
cmp dword [ebp - 0xc0], 0
jl 0x579521
lea edx, [ebp - 0x378]
mov eax, dword [ebp - 0xc0]
call fcn.0040a650
push dword [ebp - 0x378]
push 0x57c2b4
mov eax, dword [0x6e3cdc]
push dword [eax]
mov eax, dword [0x6e3eb0]
mov edx, 3
call fcn.00405768
jmp case.default.0x5773bc
mov ecx, dword [0x6e3cdc]
mov ecx, dword [ecx]
mov eax, dword [0x6e3eb0]
mov edx, 0x57c360
call fcn.004056ec
jmp case.default.0x5773bc
mov eax, dword [0x6e4a20]
cmp byte [eax], 0
je case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0xa0], edx
mov eax, dword [0x6e4a20]
mov dx, word [ebp - 0xba]
mov word [eax + 0x40], dx
mov eax, dword [0x6e4a20]
mov dx, word [ebp - 0xb8]
mov word [eax + 0x42], dx
mov eax, dword [0x6e4a20]
or edx, 0xffffffff
call fcn.00645be8
mov eax, dword [0x6e4a20]
mov byte [eax], 0
mov eax, 0x6a
call fcn.0061cac8
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e4a20]
or edx, 0xffffffff
call fcn.00645be8
mov eax, dword [0x6e4a20]
mov byte [eax], 0
cmp dword [ebp - 0xc0], 0
jne case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c614
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
cmp word [ebp - 0xbc], 0x2bd
je 0x579678
cmp word [ebp - 0xbc], 0x2be
jne 0x57964a
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c630
call fcn.005de228
jmp 0x57966b
cmp dword [ebp - 0xc0], 0
jne 0x57966b
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c660
call fcn.005de228
mov eax, dword [0x6e4a20]
or edx, 0xffffffff
call fcn.00645be8
mov eax, dword [0x6e4a20]
mov byte [eax], 0
jmp case.default.0x5773bc
cmp word [ebp - 0xba], 1
jne 0x5796a5
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00584f40
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0058515c
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
cmp word [ebp - 0xbc], 0x2c1
je 0x57971e
cmp word [ebp - 0xbc], 0x2c3
jne 0x579701
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c674
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c694
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
call fcn.005f3dac
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0xa0], edx
mov eax, 0x6a
call fcn.0061cac8
movzx edx, word [ebp - 0xba]
movzx eax, word [ebp - 0xb8]
shl eax, 0x10
or edx, eax
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.005f3c78
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [ebp - 0xc0]
dec eax
je 0x5797b0
dec eax
je 0x5797cd
dec eax
je 0x5797ea
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c6a8
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c6bc
call fcn.005de228
jmp case.default.0x5773bc
mov edx, dword [0x6e3cdc]
mov edx, dword [edx]
lea eax, [ebp - 0x37c]
mov ecx, 0x57c6e0
call fcn.004056ec
mov edx, dword [ebp - 0x37c]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0xa0], edx
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c6f0
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [ebp - 0xc0]
dec eax
je 0x57988d
dec eax
je 0x5798aa
dec eax
je 0x5798c7
dec eax
je 0x5798fd
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c70c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c6bc
call fcn.005de228
jmp case.default.0x5773bc
mov edx, dword [0x6e3cdc]
mov edx, dword [edx]
lea eax, [ebp - 0x380]
mov ecx, 0x57c6e0
call fcn.004056ec
mov edx, dword [ebp - 0x380]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c720
call fcn.005de228
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx ecx, word [ebp - 0xba]
movzx edx, word [ebp - 0xb6]
mov eax, dword [ebp - 4]
call fcn.00586ed0
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00585488
jmp case.default.0x5773bc
mov eax, dword [0x6e49e8]
inc dword [eax]
jmp case.default.0x5773bc
cmp dword [ebp - 0xc0], 1
jne 0x5799a6
cmp word [ebp - 0xba], 1
jne 0x5799a6
cmp word [ebp - 0xb8], 1
jne 0x5799a6
cmp word [ebp - 0xb6], 1
jne 0x5799a6
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005856e4
jmp case.default.0x5773bc
mov eax, dword [0x6e46c4]
mov byte [eax], 0
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c740
call fcn.005de228
mov eax, dword [0x6ef074]
call fcn.00478740
jmp case.default.0x5773bc
cmp word [ebp - 0xba], 0
jbe 0x5799e9
mov eax, dword [0x6e3fac]
mov byte [eax], 1
jmp 0x5799f1
mov eax, dword [0x6e3fac]
mov byte [eax], 0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e39cc]
mov dword [edx], eax
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e39cc]
mov dword [edx], eax
mov eax, dword [0x6e3fac]
mov byte [eax], 1
jmp case.default.0x5773bc
lea edx, [ebp - 0x384]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x384]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.005f0db8
mov eax, dword [0x6e4164]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e39cc]
mov dword [edx], eax
mov eax, dword [ebp - 0xc0]
sub eax, 0xfffffffc
je 0x579acb
dec eax
je 0x579aae
dec eax
je 0x579a91
dec eax
jne case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c78c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c7a4
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c7cc
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c804
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e39cc]
mov dword [edx], eax
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e39cc]
mov dword [edx], eax
mov eax, dword [ebp - 0xc0]
add eax, 5
cmp eax, 4
ja case.default.0x5773bc
jmp dword [eax*4 + 0x579b20]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c81c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c7a4
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c78c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c804
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c848
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e39cc]
mov dword [edx], eax
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e39cc]
mov dword [edx], eax
mov eax, dword [ebp - 0xc0]
sub eax, 0xfffffffd
je 0x579c33
dec eax
je 0x579c16
dec eax
jne case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c860
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c88c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c8b8
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e3ab8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.default.0x5773bc
lea edx, [ebp - 0x388]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x388]
mov eax, dword [ebp - 4]
call fcn.0058589c
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4028]
mov dword [edx], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005859a0
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4028]
mov dword [edx], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00585f0c
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4028]
mov dword [edx], eax
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c8d4
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4028]
mov dword [edx], eax
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c8f8
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4028]
mov dword [edx], eax
lea edx, [ebp - 0x38c]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x38c]
mov eax, dword [0x6e4750]
call fcn.00405428
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.005f76f4
jmp case.default.0x5773bc
call fcn.00647150
mov eax, dword [0x6e402c]
cmp byte [eax], 0
je 0x579d70
mov eax, dword [0x6e402c]
or edx, 0xffffffff
call fcn.00645be8
mov eax, dword [0x6e402c]
mov byte [eax], 0
mov eax, dword [0x6e4a74]
cmp dword [eax], 0
jle 0x579d98
mov eax, dword [0x6e4a74]
mov eax, dword [eax]
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
add dword [edx + 0xa0], eax
mov eax, dword [0x6e4a74]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.005f7934
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.005f7860
mov eax, dword [0x6e4920]
mov dl, byte [ebp - 0xc0]
mov byte [eax], dl
lea edx, [ebp - 0x390]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x390]
lea eax, [ebp - 0x258]
mov ecx, 0xff
call fcn.00405670
lea edx, [ebp - 0x258]
mov eax, dword [0x6e42a4]
mov cl, 0x10
call fcn.00403aa4
jmp case.default.0x5773bc
call fcn.00647204
mov eax, dword [0x6e4434]
cmp dword [eax], 0
jle 0x579e2a
mov eax, dword [0x6e4434]
mov eax, dword [eax]
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
add dword [edx + 0xa0], eax
mov eax, dword [0x6e4434]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6e4134]
cmp dword [eax], 0
jle 0x579ea5
mov eax, dword [0x6e4920]
mov al, byte [eax]
sub al, 1
jb 0x579e47
je 0x579e67
dec al
je 0x579e87
jmp 0x579ea5
mov eax, dword [0x6e4134]
mov eax, dword [eax]
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
add dword [edx + 0xac], eax
mov eax, dword [0x6e4134]
xor edx, edx
mov dword [eax], edx
jmp 0x579ea5
mov eax, dword [0x6e4134]
mov eax, dword [eax]
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
add dword [edx + 0xa4], eax
mov eax, dword [0x6e4134]
xor edx, edx
mov dword [eax], edx
jmp 0x579ea5
mov eax, dword [0x6e4134]
mov eax, dword [eax]
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
add dword [edx + 0xb0], eax
mov eax, dword [0x6e4134]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov eax, dword [eax + 0xa54]
xor edx, edx
call fcn.004d7d0c
jmp case.default.0x5773bc
mov eax, dword [0x6e4434]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
mov dword [edx + 0xa0], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e4920]
mov al, byte [eax]
sub al, 1
jb 0x579f07
je 0x579f3a
dec al
je 0x579f6d
jmp case.default.0x5773bc
mov eax, dword [0x6e4134]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
mov dword [edx + 0xac], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e4134]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
mov dword [edx + 0xa4], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e4134]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
mov dword [edx + 0xb0], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e44c8]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
jmp case.default.0x5773bc
mov eax, dword [0x6e41bc]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
jmp case.default.0x5773bc
mov eax, dword [0x6e394c]
cmp byte [eax], 0
je case.default.0x5773bc
mov eax, dword [0x6e394c]
mov eax, dword [eax + 0x3c]
cmp eax, dword [ebp - 0xc0]
jne case.default.0x5773bc
lea eax, [ebp - 0x394]
mov edx, dword [0x6e394c]
call fcn.00405638
mov eax, dword [ebp - 0x394]
mov edx, dword [0x6e394c]
mov edx, dword [edx + 0x3c]
call fcn.00646a88
movzx eax, word [ebp - 0xba]
imul eax, eax, 0xa1
mov edx, dword [0x6e462c]
mov ecx, dword [0x6e394c]
lea edi, [edx + eax]
mov esi, ecx
mov ecx, 0x28
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0x6e394c]
mov byte [eax], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e394c]
cmp byte [eax], 0
je case.default.0x5773bc
mov eax, dword [0x6e394c]
mov eax, dword [eax + 0x3c]
cmp eax, dword [ebp - 0xc0]
jne case.default.0x5773bc
mov eax, dword [0x6e394c]
or edx, 0xffffffff
call fcn.00645be8
movzx eax, word [ebp - 0xba]
imul eax, eax, 0xa1
mov edx, dword [0x6e462c]
mov byte [edx + eax], 0
mov eax, dword [0x6e394c]
mov byte [eax], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e394c]
cmp byte [eax], 0
je case.default.0x5773bc
mov eax, dword [0x6e394c]
mov byte [eax], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e394c]
cmp byte [eax], 0
je case.default.0x5773bc
mov eax, dword [0x6e394c]
mov byte [eax], 0
jmp case.default.0x5773bc
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0058673c
jmp case.default.0x5773bc
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00586828
jmp case.default.0x5773bc
mov eax, dword [0x6e428c]
mov byte [eax], 1
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov eax, dword [eax + 0xa54]
xor edx, edx
call fcn.004d7d0c
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e45f8]
mov dword [edx], eax
mov eax, dword [0x6e402c]
cmp byte [eax], 0
je case.default.0x5773bc
mov eax, dword [0x6e402c]
call fcn.00647094
mov eax, dword [0x6e402c]
mov byte [eax], 0
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e45f8]
mov dword [edx], eax
mov eax, dword [0x6e402c]
cmp byte [eax], 0
je case.default.0x5773bc
mov eax, dword [0x6e402c]
or edx, 0xffffffff
call fcn.00645be8
mov eax, dword [0x6e402c]
mov byte [eax], 0
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e45f8]
mov dword [edx], eax
mov eax, dword [0x6e402c]
cmp byte [eax], 0
je case.default.0x5773bc
mov eax, dword [0x6e402c]
mov byte [eax], 0
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e45f8]
mov dword [edx], eax
mov eax, dword [0x6e402c]
cmp byte [eax], 0
je case.default.0x5773bc
lea eax, [ebp - 0x398]
mov edx, dword [0x6e402c]
call fcn.00405638
mov eax, dword [ebp - 0x398]
mov edx, dword [0x6e402c]
mov edx, dword [edx + 0x3c]
call fcn.00646a88
mov eax, dword [0x6e402c]
call fcn.00647094
mov eax, dword [0x6e402c]
mov byte [eax], 0
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00586594
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00586668
jmp case.default.0x5773bc
mov eax, dword [0x6e4a74]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
mov dword [edx + 0xa0], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e45f8]
mov dword [edx], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e4a74]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov edx, dword [0x6e42cc]
mov edx, dword [edx]
mov dword [edx + 0xa0], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e45f8]
mov dword [edx], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e395c]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
mov eax, 0x6a
call fcn.0061cac8
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
call fcn.005f7934
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00584a44
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00584a04
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4028]
mov dword [edx], eax
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00586940
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4028]
mov dword [edx], eax
push 0xff
mov ecx, 0xffffff
mov edx, 0x57c92c
mov eax, dword [0x6ef078]
call fcn.005a6c90
mov eax, dword [0x6e39bc]
mov dword [eax], 0xffffffff
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4028]
mov dword [edx], eax
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005869e4
jmp case.default.0x5773bc
push 0xff
mov ecx, 0xffffff
mov edx, 0x57c92c
mov eax, dword [0x6ef078]
call fcn.005a6c90
mov eax, dword [0x6e3998]
mov dword [eax], 0xffffffff
jmp case.default.0x5773bc
lea edx, [ebp - 0x39c]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 4]
call fcn.00586c54
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00586d78
jmp case.default.0x5773bc
mov eax, dword [ebp - 4]
call fcn.00572410
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
cmp eax, 6
ja case.default.0x5773bc
jmp dword [eax*4 + 0x57a3e7]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c944
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c964
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c98c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c9a8
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c9c4
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c9e0
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [ebp - 4]
call fcn.00572410
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
dec eax
je 0x57a4d5
dec eax
je 0x57a4f2
dec eax
je 0x57a50f
dec eax
je 0x57a52c
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57c944
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ca08
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ca28
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ca4c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
add eax, 7
cmp eax, 5
ja case.default.0x5773bc
jmp dword [eax*4 + 0x57a562]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ca64
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ca8c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cab4
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cae8
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cb14
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cb40
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
sub eax, 0xfffffffc
je 0x57a697
dec eax
je 0x57a67a
dec eax
je 0x57a65d
dec eax
jne case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cb68
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cb80
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cb94
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cbc0
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
sub eax, 0xfffffffd
je 0x57a703
dec eax
je 0x57a6e6
dec eax
jne case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cb68
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cbe4
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cc00
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cc20
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [ebp - 0xc0]
sub eax, 0xfffffffd
je 0x57a7ae
dec eax
je 0x57a791
dec eax
jne 0x57a7cb
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cc38
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cc50
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cc68
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cc90
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
cmp dword [ebp - 0x14], 0
je case.default.0x5773bc
lea edx, [ebp - 0x3a0]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x3a0]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
cmp dword [ebp - 0x14], 0
je case.default.0x5773bc
lea edx, [ebp - 0x3a4]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x3a4]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
jmp case.default.0x5773bc
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
je 0x57a8ba
mov eax, dword [ebp - 0xac]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xac], eax
lea eax, [ebp - 0x18]
push eax
push 0x40400000
push 0
call fcn.004b4e14
mov edx, eax
inc edx
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x14]
call fcn.004058cc
lea edx, [ebp - 0xf0]
mov ecx, 0x18
mov eax, dword [ebp - 0x14]
call fcn.004b5274
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
call fcn.004b51dc
movzx eax, word [ebp - 0xba]
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1114], eax
xor eax, eax
mov al, byte [ebp - 0xf0]
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x111c], eax
movzx eax, word [ebp - 0xf0]
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1138], eax
mov eax, dword [ebp - 0xf0]
shr eax, 0x10
and eax, 0xff
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1154], eax
mov eax, dword [ebp - 0xf0]
shr eax, 0x10
movzx eax, ax
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1170], eax
xor eax, eax
mov al, byte [ebp - 0xec]
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x118c], eax
movzx eax, word [ebp - 0xec]
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x11a8], eax
mov eax, dword [ebp - 0xec]
shr eax, 0x10
and eax, 0xff
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x11c4], eax
mov eax, dword [ebp - 0xec]
shr eax, 0x10
movzx eax, ax
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x11e0], eax
xor eax, eax
mov al, byte [ebp - 0xe8]
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x11fc], eax
movzx eax, word [ebp - 0xe8]
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1218], eax
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xe74], edx
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57cca4]
xor edx, edx
call fcn.005de228
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0056ff9c
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00588338
jmp case.default.0x5773bc
lea edx, [ebp - 0xc0]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005883f8
jmp case.default.0x5773bc
lea edx, [ebp - 0xc0]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00584af0
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00584bac
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00584d5c
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1260], eax
mov eax, dword [ebp - 0xc0]
add eax, 0x18
cmp eax, 0x18
ja case.0x57aae4.24
mov al, byte [eax + 0x57aaeb]
jmp dword [eax*4 + 0x57ab04]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ccb0
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ccb0
call fcn.005de228
jmp case.default.0x5773bc
push 0x57cce0
mov eax, dword [0x6e45a8]
push dword [eax]
push 0x57ccfc
lea eax, [ebp - 0x3a8]
mov edx, 3
call fcn.00405768
mov edx, dword [ebp - 0x3a8]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
push 0x57cce0
mov eax, dword [0x6e45a8]
push dword [eax]
push 0x57ccfc
lea eax, [ebp - 0x3ac]
mov edx, 3
call fcn.00405768
mov edx, dword [ebp - 0x3ac]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cd10
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ccb0
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cd3c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cd5c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cd84
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cdb4
call fcn.005de228
jmp case.default.0x5773bc
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x6e4a7c]
mov edx, dword [edx]
mov dword [edx + 0x1264], eax
mov eax, dword [ebp - 0xc0]
add eax, 0x18
cmp eax, 0x18
ja case.0x57acbd.24
mov al, byte [eax + 0x57acc4]
jmp dword [eax*4 + 0x57acdd]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ccb0
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ccb0
call fcn.005de228
jmp case.default.0x5773bc
push 0x57cce0
mov eax, dword [0x6e45a8]
push dword [eax]
push 0x57ccfc
lea eax, [ebp - 0x3b0]
mov edx, 3
call fcn.00405768
mov edx, dword [ebp - 0x3b0]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
push 0xff
push 0x57cdd8
mov eax, dword [0x6e3d90]
push dword [eax]
push 0x57cdec
mov eax, dword [0x6e45a8]
push dword [eax]
push 0x57cdf8
lea edx, [ebp - 0x3b8]
mov eax, dword [ebp - 0xc]
call fcn.004b51dc
push dword [ebp - 0x3b8]
push 0x57ce0c
lea eax, [ebp - 0x3b4]
mov edx, 7
call fcn.00405768
mov edx, dword [ebp - 0x3b4]
mov ecx, 0xffffff
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cd10
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ccb0
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cd5c
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cd84
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cdb4
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e3aec]
add eax, 4
call fcn.00645944
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
sub eax, 0xfffffffd
je 0x57aeab
dec eax
jne 0x57aeb8
mov eax, dword [0x6e3aec]
add eax, 4
or edx, 0xffffffff
call fcn.00645be8
jmp 0x57aeb8
mov eax, dword [0x6e3aec]
add eax, 4
call fcn.00645944
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e3aec]
add eax, 4
or edx, 0xffffffff
call fcn.00645be8
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov dx, word [ebp - 0xbc]
call fcn.00635814
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0xba]
mov eax, dword [0x6e42cc]
mov eax, dword [eax]
mov dx, word [ebp - 0xbc]
call fcn.00635814
jmp case.default.0x5773bc
mov eax, dword [0x6e4078]
cmp dword [eax], 0
je case.default.0x5773bc
lea edx, [ebp - 0x3bc]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x3bc]
lea eax, [ebp - 0x258]
mov ecx, 0xff
call fcn.00405670
lea edx, [ebp - 0x258]
mov eax, dword [0x6e43cc]
mov cl, 0x14
call fcn.00403aa4
jmp case.default.0x5773bc
lea edx, [ebp - 0x100]
mov ecx, 0x10
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0xc4], 1
mov byte [ebp - 0xc3], 0
mov byte [ebp - 0xc2], 0
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xb8]
push eax
movzx eax, word [ebp - 0xb6]
push eax
mov eax, dword [ebp - 0x100]
push eax
mov eax, dword [ebp - 0xfc]
push eax
push 0
lea eax, [ebp - 0xd8]
push eax
movzx edx, word [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b2448
mov eax, dword [0x6e4078]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
mov eax, dword [0x6e4474]
mov dl, byte [ebp - 0xf8]
mov byte [eax], dl
mov eax, dword [0x6e47e0]
mov dl, byte [ebp - 0xf7]
mov byte [eax], dl
mov eax, dword [0x6e454c]
mov dx, word [ebp - 0xf6]
mov word [eax], dx
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
mov dl, 1
call fcn.004d7d0c
mov edx, dword [0x6e4734]
movzx edx, word [edx + 0x228]
mov eax, dword [ebp - 4]
call fcn.00589010
jmp case.default.0x5773bc
mov eax, dword [0x6e47e0]
mov dl, byte [ebp - 0xba]
mov byte [eax], dl
mov edx, dword [0x6e3f7c]
mov ecx, 0x34
mov eax, dword [ebp - 0x14]
call fcn.004b5274
mov eax, dword [0x6e4398]
cmp byte [eax], 0
jne case.default.0x5773bc
mov eax, dword [0x6e4398]
mov byte [eax], 1
mov eax, dword [0x6e47e0]
cmp byte [eax], 1
jne 0x57b0cb
mov edx, dword [0x6e4734]
movzx edx, byte [edx + 0x223]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.00588dec
mov eax, dword [0x6e47e0]
cmp byte [eax], 2
jne case.default.0x5773bc
mov eax, dword [ebp - 4]
call fcn.00588d00
jmp case.default.0x5773bc
xor eax, eax
mov al, byte [ebp - 0xba]
mov edx, dword [0x6e4394]
mov dword [edx], eax
movzx eax, word [ebp - 0xba]
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e39a8]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0xb8]
mov edx, dword [0x6e3ae0]
mov dword [edx], eax
movzx eax, word [ebp - 0xb8]
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e3adc]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0xb6]
mov edx, dword [0x6e3b84]
mov dword [edx], eax
movzx eax, word [ebp - 0xb6]
shr eax, 8
and eax, 0xff
mov edx, dword [0x6e3b38]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0xc0]
mov edx, dword [0x6e4934]
mov dword [edx], eax
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005802d0
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005824c4
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00582f10
jmp case.default.0x5773bc
mov cl, byte [ebp - 0xba]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057f020
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0057fa50
jmp case.default.0x5773bc
mov eax, dword [0x6e3aec]
mov eax, dword [eax]
sub eax, 0xe
jae 0x57b1f7
mov eax, dword [0x6e3aec]
imul eax, dword [eax], 0xa1
mov edx, dword [0x6e40b4]
mov ecx, dword [0x6e3aec]
lea edi, [edx + eax]
lea esi, [ecx + 4]
mov ecx, 0x28
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0057e528
jmp case.default.0x5773bc
mov eax, dword [0x6e3aec]
add eax, 4
call fcn.00645944
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e3aec]
cmp dword [eax], 0
jge 0x57b27c
mov eax, dword [0x6e3aec]
mov eax, dword [eax]
inc eax
neg eax
mov dword [ebp - 0x48], eax
imul eax, dword [ebp - 0x48], 0xa1
mov edx, dword [0x6e40b4]
mov ecx, dword [0x6e3aec]
lea edi, [edx + eax]
lea esi, [ecx + 4]
mov ecx, 0x28
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0x6e3aec]
mov byte [eax + 4], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e3a08]
mov byte [eax], 0
call fcn.00646bac
jmp case.default.0x5773bc
mov eax, dword [0x6e3a08]
call fcn.00645944
mov eax, dword [0x6e3a08]
mov byte [eax], 0
jmp case.default.0x5773bc
mov eax, dword [0x6e3f7c]
mov dx, word [ebp - 0xba]
mov word [eax], dx
mov edx, 0x57ce1c
mov eax, dword [0x6ef078]
call fcn.005a68d4
jmp case.default.0x5773bc
mov eax, dword [0x6e3f7c]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0x1e], edx
mov eax, dword [0x6e4734]
cmp byte [eax + 0x2e], 0
jne 0x57b2f8
mov byte [ebp - 0xae], 1
jmp 0x57b337
mov eax, dword [0x6e4734]
cmp byte [eax + 0x2e], 0
je 0x57b324
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
cmp eax, 0x7d0
setg byte [ebp - 0xad]
jmp 0x57b32b
mov byte [ebp - 0xad], 0
mov al, byte [ebp - 0xad]
mov byte [ebp - 0xae], al
cmp byte [ebp - 0xae], 0
je case.default.0x5773bc
mov eax, dword [0x6e4044]
cmp byte [eax], 0
je 0x57b39f
push 0xff
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x3c0]
call fcn.0040a73c
lea eax, [ebp - 0x3c0]
mov edx, 0x57ce30
call fcn.004056a0
mov edx, dword [ebp - 0x3c0]
mov ecx, 0xffffff
mov eax, dword [0x6ef078]
call fcn.005a6c90
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x3c4]
call fcn.0040a73c
lea eax, [ebp - 0x3c4]
mov edx, 0x57ce30
call fcn.004056a0
mov edx, dword [ebp - 0x3c4]
mov eax, dword [0x6ef078]
call fcn.005a6800
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
movzx edx, word [ebp - 0xb6]
shl edx, 0x10
or eax, edx
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0058369c
jmp case.default.0x5773bc
movzx edx, word [ebp - 0xba]
mov eax, dword [ebp - 4]
call fcn.00580060
jmp case.default.0x5773bc
mov eax, dword [ebp - 4]
call fcn.0058377c
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
movzx edx, word [ebp - 0xb6]
shl edx, 0x10
or eax, edx
push eax
movzx edx, word [ebp - 0xba]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00583998
jmp case.default.0x5773bc
lea edx, [ebp - 0x3c8]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [ebp - 0x3c8]
mov edx, dword [ebp - 0xc0]
call fcn.00646f64
jmp case.default.0x5773bc
lea edx, [ebp - 0x3cc]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x3cc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.005815f4
jmp case.default.0x5773bc
movzx eax, word [ebp - 0xb8]
push eax
movzx ecx, word [ebp - 0xba]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0058320c
jmp case.default.0x5773bc
mov eax, dword [0x6e4704]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
cmp word [ebp - 0xba], 1
jne 0x57b4f4
mov eax, dword [0x6e3af8]
mov byte [eax], 1
jmp case.default.0x5773bc
mov eax, dword [0x6e3af8]
mov byte [eax], 0
jmp case.default.0x5773bc
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.005829d8
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00582ab0
jmp case.default.0x5773bc
lea edx, [ebp - 0x3d0]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x3d0]
mov eax, dword [0x6e4a10]
call fcn.00405428
jmp case.default.0x5773bc
mov eax, dword [0x6e47e4]
or edx, 0xffffffff
call fcn.00645be8
lea eax, [ebp - 0x3d4]
mov edx, dword [0x6e47e4]
call fcn.00405638
mov edx, dword [ebp - 0x3d4]
mov eax, dword [0x6e47e4]
mov eax, dword [eax + 0x3c]
call fcn.00645b14
mov eax, dword [0x6e47e4]
mov byte [eax], 0
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov byte [eax + 0x1298], 0
call fcn.0064667c
jmp case.default.0x5773bc
mov eax, dword [0x6e47e4]
mov byte [eax], 0
mov eax, dword [ebp - 0xc0]
dec eax
je 0x57b5b4
dec eax
je 0x57b5d1
dec eax
je 0x57b61c
jmp 0x57b639
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ce4c
call fcn.005de228
jmp case.default.0x5773bc
push 0x57ce7c
mov eax, dword [0x6e45a8]
push dword [eax]
push 0x57ce98
mov eax, dword [0x6e45a8]
push dword [eax]
push 0x57cec4
lea eax, [ebp - 0x3d8]
mov edx, 5
call fcn.00405768
mov edx, dword [ebp - 0x3d8]
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57ced0
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [0x6e4a7c]
mov eax, dword [eax]
mov cx, word [0x57bacc]
mov edx, 0x57cef8
call fcn.005de228
jmp case.default.0x5773bc
mov eax, dword [ebp - 0xc0]
call fcn.00645a78
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.00582b84
jmp case.default.0x5773bc
mov eax, dword [0x6e4180]
mov edx, dword [ebp - 0xc0]
mov dword [eax], edx
movzx eax, word [ebp - 0xba]
movzx edx, word [ebp - 0xb8]
shl edx, 0x10
or eax, edx
mov edx, dword [0x6e42e0]
mov dword [edx], eax
jmp case.default.0x5773bc
mov eax, dword [0x6e454c]
mov dx, word [ebp - 0xb6]
mov word [eax], dx
jmp case.default.0x5773bc
lea edx, [ebp - 0x3dc]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov ecx, dword [ebp - 0x3dc]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0058c26c
jmp case.default.0x5773bc
lea edx, [ebp - 0x3e0]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov edx, dword [ebp - 0x3e0]
mov eax, dword [ebp - 4]
call fcn.0058c120
jmp case.default.0x5773bc
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov ecx, dword [ebp - 0x3e4]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0058c190
jmp case.default.0x5773bc
mov al, byte [ebp - 0xb8]
call fcn.0055ba98
push eax
call sub.kernel32.dll_GetTickCount_1
add eax, dword [ebp - 0xc0]
push eax
lea edx, [ebp - 0x3e8]
mov eax, dword [ebp - 0x14]
call fcn.004b51dc
mov eax, dword [ebp - 0x3e8]
push eax
mov al, byte [ebp - 0xba]
call fcn.0055ba98
mov ecx, eax
mov eax, dword [0x6ef078]
pop edx
call fcn.005a69a8
jmp case.default.0x5773bc
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x6ef088]
call fcn.005b0f7c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je case.default.0x5773bc
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xba]
mov word [eax + 0x270], dx
mov eax, dword [ebp - 0x50]
mov dx, word [ebp - 0xb8]
mov word [eax + 0x272], dx
jmp case.default.0x5773bc
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.0057feac
jmp case.default.0x5773bc
mov eax, dword [0x6e42cc]
cmp dword [eax], 0
jne 0x57b7e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
lea edx, [ebp - 0x3f0]
movzx eax, word [ebp - 0xbc]
call fcn.0040a650
mov ecx, dword [ebp - 0x3f0]
lea eax, [ebp - 0x3ec]
mov edx, 0x57cf18
call fcn.004056ec
mov edx, dword [ebp - 0x3ec]
mov eax, dword [0x6ef088]
mov eax, dword [eax + 0x3494]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x3f8]
mov eax, dword [ebp - 0xc0]
call fcn.0040a650
mov ecx, dword [ebp - 0x3f8]
lea eax, [ebp - 0x3f4]
mov edx, 0x57cf28
call fcn.004056ec
mov edx, dword [ebp - 0x3f4]
mov eax, dword [0x6ef088]
mov eax, dword [eax + 0x3494]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x400]
movzx eax, word [ebp - 0xba]
call fcn.0040a650
mov ecx, dword [ebp - 0x400]
lea eax, [ebp - 0x3fc]
mov edx, 0x57cf38
call fcn.004056ec
mov edx, dword [ebp - 0x3fc]
mov eax, dword [0x6ef088]
mov eax, dword [eax + 0x3494]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x408]
movzx eax, word [ebp - 0xb8]
call fcn.0040a650
mov ecx, dword [ebp - 0x408]
lea eax, [ebp - 0x404]
mov edx, 0x57cf48
call fcn.004056ec
mov edx, dword [ebp - 0x404]
mov eax, dword [0x6ef088]
mov eax, dword [eax + 0x3494]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x410]
movzx eax, word [ebp - 0xb6]
call fcn.0040a650
mov ecx, dword [ebp - 0x410]
lea eax, [ebp - 0x40c]
mov edx, 0x57cf58
call fcn.004056ec
mov edx, dword [ebp - 0x40c]
mov eax, dword [0x6ef088]
mov eax, dword [eax + 0x3494]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 8]
mov eax, 0x57cf6c
call fcn.004059b0
test eax, eax
jle 0x57b955
mov edx, dword [ebp - 8]
mov eax, dword [0x6ef078]
call fcn.005a68d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x57b973
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x57ba32
lea eax, [ebp - 0x410]
mov edx, 0x2c
call fcn.004053f8
lea eax, [ebp - 0x358]
mov edx, 3
call fcn.004053f8
lea eax, [ebp - 0x33c]
call fcn.004053d4
lea eax, [ebp - 0x338]
mov edx, dword [0x6214a8]
call fcn.00406c7c
lea eax, [ebp - 0x334]
mov edx, 0x33
call fcn.004053f8
lea eax, [ebp - 0x264]
mov edx, 3
call fcn.004053f8
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.004053f8
lea eax, [ebp - 0x150]
call fcn.00405bdc
lea eax, [ebp - 0x14c]
mov edx, 0x13
call fcn.004053f8
lea eax, [ebp - 0xb4]
call fcn.004053d4
lea eax, [ebp - 0x5c]
call fcn.004053d4
lea eax, [ebp - 0x28]
mov edx, 9
call fcn.004053f8
ret