Function at 0x58ffdc
Capabilities:
Check for time delay via gettickcount
Check http status code

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x48
push 0
push 0
dec ecx
jne 0x58ffe4
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404c38
xor eax, eax
push ebp
push 0x597593
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp byte [eax], 0x2b
jne 0x5903dc
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 8]
call fcn.00404a48
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00404ca8
push 0
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
mov edx, dword [ebp - 0xc4]
lea eax, [ebp - 0x1c]
call fcn.00404820
mov eax, dword [ebp - 0x18]
mov edx, 0x5975ac
call fcn.00404b94
jne 0x590078
mov eax, dword [0x5ab738]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5975b8
call fcn.00404b94
jne 0x59008f
mov eax, dword [0x5ab5a0]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5975c4
call fcn.00404b94
jne 0x5900a6
mov eax, dword [0x5ab5a0]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x5975d4
call fcn.00404b94
jne 0x5900bd
mov eax, dword [0x5ab6d8]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5975e0
call fcn.00404b94
jne 0x5900d4
mov eax, dword [0x5ab6d8]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x5975f0
call fcn.00404b94
jne 0x5900eb
mov eax, dword [0x5abbe4]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5975fc
call fcn.00404b94
jne 0x590102
mov eax, dword [0x5abbe4]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x59760c
call fcn.00404b94
jne 0x590119
mov eax, dword [0x5abda8]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x597618
call fcn.00404b94
jne 0x590130
mov eax, dword [0x5abda8]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x597628
call fcn.00404b94
jne 0x590147
mov eax, dword [0x5ab9a0]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x597638
call fcn.00404b94
jne 0x59015e
mov eax, dword [0x5ab9a0]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x597648
call fcn.00404b94
jne 0x590175
mov eax, dword [0x5aba7c]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x597654
call fcn.00404b94
jne 0x59018c
mov eax, dword [0x5aba7c]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x597664
call fcn.00404b94
jne 0x5901a3
mov eax, dword [0x5ac210]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x597670
call fcn.00404b94
jne 0x5901ba
mov eax, dword [0x5ac210]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x597680
call fcn.00404b94
jne 0x5901de
mov eax, dword [0x5ab65c]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab55c]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x59768c
call fcn.00404b94
jne 0x5901f5
mov eax, dword [0x5ab65c]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x59769c
call fcn.00404b94
jne 0x590219
mov eax, dword [0x5ab98c]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab55c]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x5976ac
call fcn.00404b94
jne 0x590230
mov eax, dword [0x5ab98c]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x5976bc
call fcn.00404b94
jne 0x590247
mov eax, dword [0x5abbc8]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5976cc
call fcn.00404b94
jne 0x59025e
mov eax, dword [0x5ac028]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5976dc
call fcn.00404b94
jne 0x590275
mov eax, dword [0x5abdf8]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5976ec
call fcn.00404b94
jne 0x59028c
mov eax, dword [0x5ac0b0]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x5976fc
call fcn.00404b94
jne 0x5902a3
mov eax, dword [0x5ac3b4]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x59770c
call fcn.00404b94
jne 0x5902ba
mov eax, dword [0x5ac3b4]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x59771c
call fcn.00404b94
jne 0x5902d1
mov eax, dword [0x5abdb8]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x59772c
call fcn.00404b94
jne 0x5902e8
mov eax, dword [0x5abdb8]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x59773c
call fcn.00404b94
jne 0x59030c
mov eax, dword [0x5aba8c]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac194]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x597748
call fcn.00404b94
jne 0x590323
mov eax, dword [0x5aba8c]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x597758
call fcn.00404b94
jne 0x590347
mov eax, dword [0x5abd9c]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab3ec]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x597768
call fcn.00404b94
jne 0x59035e
mov eax, dword [0x5abd9c]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x597778
call fcn.00404b94
jne 0x590382
mov eax, dword [0x5abe4c]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac194]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x597788
call fcn.00404b94
jne 0x590399
mov eax, dword [0x5abe4c]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x597798
call fcn.00404b94
jne 0x5903b2
mov eax, dword [ebp - 4]
mov byte [eax + 0x3f0], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x5977a8
call fcn.00404b94
jne case.default.0x591c2a
mov eax, dword [ebp - 4]
call fcn.0058fcd8
mov eax, dword [ebp - 4]
mov byte [eax + 0x3f0], 0
jmp case.default.0x591c2a
mov eax, dword [ebp - 8]
call fcn.00404a48
cmp eax, 0x20
jge 0x590437
mov eax, dword [ebp - 8]
cmp byte [eax], 0x3d
jne case.default.0x591c2a
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 8]
call fcn.00404a48
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00404ca8
mov eax, dword [ebp - 0x1c]
mov edx, 0x5977b8
call fcn.00404b94
jne case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov byte [eax + 0x13c], 1
jmp case.default.0x591c2a
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x20
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404ca8
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 8]
call fcn.00404a48
mov ecx, eax
sub ecx, 0x20
mov edx, 0x21
mov eax, dword [ebp - 8]
call fcn.00404ca8
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 0xc]
call fcn.00494930
mov eax, dword [0x5ab6c4]
cmp dword [eax], 0
jne case.0x590511.528
movzx eax, word [ebp - 0x84]
cmp eax, 0x212
jg 0x590534
je 0x5908e1
cmp eax, 0x20a
jg 0x590503
je 0x590aa0
cmp eax, 0x1fa
jg 0x5904e3
je 0x590b47
add eax, 0xffffffce
sub eax, 2
jb case.0x590511.528
sub eax, 0x1c3
je 0x590798
dec eax
je 0x5906bc
dec eax
je 0x5906d9
jmp case.default.0x591c2a
sub eax, 0x1fb
je 0x590b64
sub eax, 0xd
je 0x5908f1
dec eax
je 0x590a91
jmp case.default.0x591c2a
add eax, 0xfffffdf5
cmp eax, 6
ja case.default.0x591c2a
jmp dword [eax*4 + 0x590518]
cmp eax, 0x292
jg 0x590576
je case.0x590511.528
add eax, 0xfffffded
cmp eax, 7
ja case.default.0x591c2a
jmp dword [eax*4 + 0x590556]
cmp eax, 0x7d7
jg 0x5905a7
je 0x59097d
sub eax, 0x322
je case.0x590511.528
sub eax, 0xa
je 0x590c90
sub eax, 0x126
je 0x590c2a
jmp case.default.0x591c2a
sub eax, 0x4e82
je 0x590a01
sub eax, 0x2c
je 0x5905e5
dec eax
jne case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5977c8
call fcn.0051bde4
mov eax, dword [0x5b6a1c]
call fcn.0057af0c
jmp case.0x590511.528
cmp dword [ebp - 0x10], 0
je case.0x590511.528
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
lea edx, [ebp - 0xd0]
mov eax, 0x5977e4
call fcn.004bb6c8
mov edx, dword [ebp - 0xd0]
lea ecx, [ebp - 0xcc]
mov eax, dword [ebp - 0x64]
call fcn.004bb464
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0x64]
call fcn.00404820
lea edx, [ebp - 0xd4]
mov eax, 2
call fcn.00402af8
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x64]
call fcn.00404b94
je case.0x590511.528
push dword [ebp - 0x64]
push 0x5977f4
lea edx, [ebp - 0xdc]
mov eax, 2
call fcn.00402af8
push dword [ebp - 0xdc]
lea eax, [ebp - 0xd8]
mov edx, 3
call fcn.00404b08
mov edx, dword [ebp - 0xd8]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597800
call fcn.0051bde4
mov eax, dword [ebp - 4]
call fcn.0046cebc
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597820
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffe
je 0x590736
sub eax, 2
jne 0x590753
push 0x597870
mov eax, dword [ebp - 4]
push dword [eax + 0x394]
push 0x59787c
lea eax, [ebp - 0xe0]
mov edx, 3
call fcn.00404b08
mov edx, dword [ebp - 0xe0]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
xor edx, edx
mov eax, dword [0x5b6a1c]
call fcn.0057c51c
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597898
call fcn.0051bde4
jmp case.0x590511.528
lea edx, [ebp - 0xe8]
mov eax, dword [ebp - 0x88]
call fcn.0040959c
mov ecx, dword [ebp - 0xe8]
lea eax, [ebp - 0xe4]
mov edx, 0x5978b8
call fcn.00404a94
mov edx, dword [ebp - 0xe4]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [ebp - 0x88]
add eax, 5
cmp eax, 4
ja case.default.0x5907aa
jmp dword [eax*4 + 0x5907b1]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5978f0
call fcn.0051bde4
jmp 0x590862
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597908
call fcn.0051bde4
jmp 0x590862
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597948
call fcn.0051bde4
jmp 0x590862
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x59797c
call fcn.0051bde4
jmp 0x590862
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597998
call fcn.0051bde4
jmp 0x590862
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5979b4
call fcn.0051bde4
mov eax, dword [0x5b6a1c]
call fcn.0057af0c
jmp case.0x590511.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00598c00
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5979dc
call fcn.0051bde4
mov eax, dword [ebp - 4]
call fcn.00598be0
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5979f8
call fcn.0051bde4
mov eax, dword [ebp - 4]
call fcn.00598be0
jmp case.0x590511.528
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.005987fc
jmp case.0x590511.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00598580
jmp case.0x590511.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00598c6c
jmp case.0x590511.528
mov ecx, dword [ebp - 0x88]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.005a1ef4
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597a10
call fcn.0051bde4
jmp case.0x590511.528
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0058c9cc
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597a34
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597a68
call fcn.0051bde4
jmp case.0x590511.528
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
cmp dword [ebp - 0xec], 0
je case.0x590511.528
lea edx, [ebp - 0xf0]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0xf0]
mov eax, dword [0x5ab508]
call fcn.004047dc
mov eax, dword [ebp - 4]
call fcn.0059fc34
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8e0]
cmp byte [eax + 0x26c], 0
jne case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8e0]
call fcn.0049aef4
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f0]
call fcn.0049ca98
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8e0]
xor edx, edx
call fcn.0049ad58
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
mov eax, dword [eax + 0x34]
mov edx, 0x23
call fcn.0048c5a0
mov eax, dword [eax + 0x20]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 8]
jmp case.0x590511.528
cmp dword [ebp - 0x78], 1
jne 0x590a54
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8e0]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5aba9c]
mov byte [eax], 0
mov eax, dword [0x5abd34]
mov byte [eax], 0
mov eax, dword [0x5ab87c]
mov byte [eax], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597a94
call fcn.0051bde4
mov eax, dword [ebp - 4]
call fcn.0046cebc
jmp case.0x590511.528
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0058c9cc
jmp case.0x590511.528
mov eax, dword [ebp - 0x88]
sub eax, 1
jb 0x590ab6
dec eax
je 0x590ad3
dec eax
je 0x590af0
dec eax
je 0x590b0d
jmp 0x590b2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597ab0
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597ad8
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597afc
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597b28
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597b50
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597b7c
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffe
je 0x590b8f
dec eax
jne 0x590bac
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597b98
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597bb8
call fcn.0051bde4
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597bd8
call fcn.0051bde4
jmp case.0x590511.528
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0058c9cc
jmp case.0x590511.528
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597bfc
call fcn.0051bde4
jmp case.0x590511.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00598e8c
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597c24
call fcn.0051bde4
mov eax, dword [ebp - 4]
call fcn.00598be0
jmp case.default.0x591c2a
push 0x597c3c
lea edx, [ebp - 0xfc]
mov eax, 0x5977e4
call fcn.004bb6c8
mov edx, dword [ebp - 0xfc]
lea ecx, [ebp - 0xf8]
mov eax, dword [0x5abf54]
mov eax, dword [eax]
call fcn.004bb464
push dword [ebp - 0xf8]
push 0x597c74
lea eax, [ebp - 0xf4]
mov edx, 3
call fcn.00404b08
mov edx, dword [ebp - 0xf4]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
jmp case.default.0x591c2a
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x100]
lea eax, [ebp - 0x10]
call fcn.00404820
cmp dword [ebp - 0x10], 0
je case.0x590511.528
push 0
lea eax, [ebp - 0x104]
push eax
mov byte [ebp - 0xc8], 0x1b
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.0048d194
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 0x10]
call fcn.00404820
mov eax, dword [ebp - 0x1c]
call fcn.004b7720
jmp 0x590cac
mov eax, dword [0x5ab428]
cmp byte [eax], 0
je 0x590d58
cmp word [ebp - 0x84], 0x27a
jne case.default.0x591c2a
mov eax, dword [ebp - 4]
lea esi, [ebp - 0x88]
lea edi, [eax + 0x3c0]
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x108]
mov eax, dword [ebp - 4]
add eax, 0x3d8
call fcn.004047dc
mov eax, dword [0x5abf24]
mov byte [eax], 1
mov dl, 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
call fcn.00436654
jmp case.default.0x591c2a
movzx eax, word [ebp - 0x84]
cmp eax, 0x138c
jg 0x591286
je 0x5939bc
cmp eax, 0x290
jg 0x591032
je 0x595924
cmp eax, 0xca
jg 0x590eeb
je 0x595b63
cmp eax, 0x20
jg 0x590e1c
je case.0x590e33.34
add eax, 0xfffffffa
cmp eax, 0x19
ja case.0x5917a8.20124
jmp dword [eax*4 + 0x590db4]
cmp eax, 0x33
jg 0x590e82
je 0x59428d
add eax, 0xffffffdf
cmp eax, 0x11
ja case.0x5917a8.20124
jmp dword [eax*4 + 0x590e3a]
cmp eax, 0x39
jge 0x590eaa
sub eax, 0x34
je 0x595244
dec eax
je 0x595413
dec eax
je 0x594464
dec eax
je 0x59447a
jmp case.0x5917a8.20124
cmp eax, 0x63
jge 0x590eca
add eax, 0xffffffc7
sub eax, 8
jb case.0x591622.20064
dec eax
sub eax, 2
jb case.0x591622.20064
jmp case.0x5917a8.20124
add eax, 0xffffff9d
sub eax, 6
jb 0x5956ac
sub eax, 0x5f
je 0x595b1d
dec eax
je 0x595b2d
jmp case.0x5917a8.20124
cmp eax, 0x27b
jg 0x590fcd
je 0x595f37
cmp eax, 0x264
jg 0x590f64
je 0x595c1b
cmp eax, 0x210
jg 0x590f3d
je 0x5950fb
sub eax, 0xcb
je 0x595b53
sub eax, 7
je 0x595fa7
dec eax
je 0x595fc1
dec eax
je 0x595fdb
jmp case.0x5917a8.20124
sub eax, 0x258
je 0x595b83
dec eax
je 0x595ba7
sub eax, 9
je 0x595bce
dec eax
je 0x595c01
jmp case.0x5917a8.20124
add eax, 0xfffffd9b
cmp eax, 0x14
ja case.0x5917a8.20124
jmp dword [eax*4 + 0x590f79]
add eax, 0xfffffd84
cmp eax, 0x13
ja case.0x5917a8.20124
jmp dword [eax*4 + 0x590fe2]
cmp eax, 0x2ee
jg 0x591148
je 0x596c14
add eax, 0xfffffd6f
cmp eax, 0x3b
ja case.0x5917a8.20124
jmp dword [eax*4 + 0x591058]
cmp eax, 0x320
jg 0x5911c2
je 0x5948a1
add eax, 0xfffffd11
cmp eax, 0x15
ja case.0x5917a8.20124
jmp dword [eax*4 + 0x59116a]
cmp eax, 0x44d
jg 0x59122c
je 0x5955e7
cmp eax, 0x325
jg 0x591201
je 0x595b08
sub eax, 0x321
je 0x5948e3
dec eax
je 0x594442
dec eax
je case.0x590dad.29
dec eax
je 0x595a5f
jmp case.0x5917a8.20124
sub eax, 0x326
je 0x5948a1
dec eax
je 0x5948e3
sub eax, 4
je 0x594490
sub eax, 0x121
je 0x59559d
jmp case.0x5917a8.20124
cmp eax, 0x4b0
jg 0x591260
je 0x597270
sub eax, 0x44e
je 0x59566c
dec eax
je 0x595613
dec eax
je 0x595522
sub eax, 2
je case.default.0x591c2a
jmp case.0x5917a8.20124
sub eax, 0x9c4
je 0x5938a4
sub eax, 0x212
je 0x595590
sub eax, 0x7b3
je 0x5938fd
jmp case.0x5917a8.20124
cmp eax, 0x4e3e
jg 0x591603
je 0x5936b7
cmp eax, 0x1400
jg 0x591485
je 0x595ee0
add eax, 0xffffec73
cmp eax, 0x71
ja case.0x5917a8.20124
jmp dword [eax*4 + 0x5912bd]
cmp eax, 0x1784
jg 0x59153b
je 0x5928c9
cmp eax, 0x1778
jg 0x5914fa
je 0x591f43
cmp eax, 0x1406
jg 0x5914d5
je 0x595f2a
sub eax, 0x1402
je 0x595ef0
dec eax
je 0x595efd
dec eax
je 0x595f10
dec eax
je 0x595f1d
jmp case.0x5917a8.20124
sub eax, 0x1774
je 0x591fdb
dec eax
je 0x59201f
dec eax
je 0x591fce
dec eax
je 0x591f16
jmp case.0x5917a8.20124
add eax, 0xffffe887
cmp eax, 0xa
ja case.0x5917a8.20124
jmp dword [eax*4 + 0x59150f]
cmp eax, 0x23f2
jg 0x5915a9
je 0x5960bf
cmp eax, 0x232b
jg 0x591582
je 0x5936f7
sub eax, 0x1785
je 0x592929
dec eax
je 0x592936
sub eax, 0x7bd
je 0x597421
sub eax, 0x3e6
je 0x5936dd
jmp case.0x5917a8.20124
sub eax, 0x232c
je 0x593805
dec eax
je 0x59383b
sub eax, 2
je 0x593763
dec eax
je 0x59372d
jmp case.0x5917a8.20124
cmp eax, 0x4e32
jg 0x5915e1
je case.0x590dad.23
sub eax, 0x23f5
je 0x5960e0
sub eax, 2
je 0x596101
sub eax, 0x2a2a
je case.default.0x591c2a
dec eax
je 0x59441c
jmp case.0x5917a8.20124
sub eax, 0x4e33
je 0x594432
sub eax, 2
je 0x593a37
sub eax, 3
je 0x593874
jmp case.0x5917a8.20124
cmp eax, 0x4e9a
jg 0x591789
je 0x592573
add eax, 0xffffb1be
cmp eax, 0x57
ja case.0x5917a8.20124
jmp dword [eax*4 + 0x591629]
cmp eax, 0x4ec4
jg 0x59184f
je 0x591eb2
add eax, 0xffffb165
cmp eax, 0x27
ja case.0x5917a8.20124
jmp dword [eax*4 + 0x5917af]
cmp eax, 0x59e0
jg 0x5918bd
je 0x593467
cmp eax, 0x4ecb
jg 0x591890
je 0x591baa
sub eax, 0x4ec6
je 0x591ecb
sub eax, 2
je 0x591919
dec eax
je 0x591a2e
dec eax
je 0x591aec
jmp case.0x5917a8.20124
sub eax, 0x4ecc
je 0x592538
sub eax, 0xb0d
je 0x59340a
sub eax, 2
je 0x59341d
sub eax, 2
je 0x593442
jmp case.0x5917a8.20124
cmp eax, 0x59ed
jg 0x5918f5
je 0x5933ea
sub eax, 0x59e2
je 0x593482
sub eax, 4
je 0x5934cc
sub eax, 2
je 0x59336d
sub eax, 2
je 0x593397
jmp case.0x5917a8.20124
sub eax, 0x59ef
je 0x5933fa
sub eax, 4
je 0x59333e
sub eax, 0xa419
je 0x596573
jmp case.0x5917a8.20124
mov eax, dword [ebp - 0x88]
dec eax
je 0x59192a
dec eax
je 0x591943
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc4]
xor edx, edx
call fcn.0049ad58
jmp case.default.0x591c2a
mov eax, dword [0x5abd1c]
mov byte [eax], 1
mov eax, dword [0x5abe0c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5abb38]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ab49c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ac298]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5aba48]
mov eax, dword [eax]
mov edx, 0x1d0
call fcn.00492fa8
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x591a15
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc4]
mov ecx, 0x1d0
call fcn.00499fc4
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc4]
xor edx, edx
call fcn.004488f0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc4]
mov edx, 0x5f
call fcn.00448930
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbcc]
mov ecx, 0x1e4
call fcn.00499fc4
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbd0]
mov ecx, 0x1e5
call fcn.00499fc4
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc4]
mov dl, 1
call fcn.0049ad58
jmp case.default.0x591c2a
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
cmp dword [ebp - 0x54], 0
je case.default.0x591c2a
push 0
lea eax, [ebp - 0x10c]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x54]
call fcn.0048d194
mov edx, dword [ebp - 0x10c]
lea eax, [ebp - 0x54]
call fcn.00404820
push 0
lea eax, [ebp - 0x110]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x54]
call fcn.0048d194
mov edx, dword [ebp - 0x110]
lea eax, [ebp - 0x54]
call fcn.00404820
cmp dword [ebp - 0x58], 0
je 0x591ab7
mov eax, dword [ebp - 0x58]
call fcn.00409774
mov edx, dword [0x5ab49c]
mov dword [edx], eax
cmp dword [ebp - 0x18], 0
je 0x591acd
mov eax, dword [ebp - 0x18]
call fcn.00409774
mov edx, dword [0x5abb38]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x54]
call fcn.00409774
mov edx, dword [0x5ac298]
mov dword [edx], eax
jmp case.default.0x591c2a
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
cmp dword [ebp - 0x54], 0
je case.default.0x591c2a
push 0
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x54]
call fcn.0048d194
mov edx, dword [ebp - 0x114]
lea eax, [ebp - 0x54]
call fcn.00404820
push 0
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x54]
call fcn.0048d194
mov edx, dword [ebp - 0x118]
lea eax, [ebp - 0x54]
call fcn.00404820
cmp dword [ebp - 0x58], 0
je 0x591b75
mov eax, dword [ebp - 0x58]
call fcn.00409774
mov edx, dword [0x5abe0c]
mov dword [edx], eax
cmp dword [ebp - 0x18], 0
je 0x591b8b
mov eax, dword [ebp - 0x18]
call fcn.00409774
mov edx, dword [0x5abb38]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x54]
call fcn.00409774
mov edx, dword [0x5ac298]
mov dword [edx], eax
jmp case.default.0x591c2a
mov eax, dword [0x5abd1c]
mov dl, byte [ebp - 0x88]
mov byte [eax], dl
mov eax, dword [0x5abd1c]
cmp byte [eax], 5
ja case.default.0x591c2a
mov edx, dword [0x5abd1c]
movzx edx, byte [edx]
add edx, 0x1d0
dec edx
mov eax, dword [0x5aba48]
mov eax, dword [eax]
call fcn.00492fa8
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je case.default.0x591c2a
mov ecx, dword [0x5abd1c]
movzx ecx, byte [ecx]
add ecx, 0x1d0
dec ecx
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc4]
call fcn.00499fc4
mov eax, dword [0x5abd1c]
movzx eax, byte [eax]
dec eax
cmp eax, 4
ja case.default.0x591c2a
jmp dword [eax*4 + 0x591c31]
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbcc]
mov ecx, 0x1e4
call fcn.00499fc4
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbd0]
mov ecx, 0x1e5
call fcn.00499fc4
jmp case.default.0x591c2a
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbcc]
mov ecx, 0x1e6
call fcn.00499fc4
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbd0]
mov ecx, 0x1e7
call fcn.00499fc4
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc8]
mov ecx, 0x1d4
call fcn.00499fc4
jmp case.default.0x591c2a
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbcc]
mov ecx, 0x1e8
call fcn.00499fc4
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbd0]
mov ecx, 0x1e9
call fcn.00499fc4
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc8]
mov ecx, 0x1d6
call fcn.00499fc4
jmp case.default.0x591c2a
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbcc]
mov ecx, 0x1ea
call fcn.00499fc4
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbd0]
mov ecx, 0x1eb
call fcn.00499fc4
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc8]
mov ecx, 0x1d8
call fcn.00499fc4
jmp case.default.0x591c2a
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbcc]
mov ecx, 0x1ea
call fcn.00499fc4
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbd0]
mov ecx, 0x1eb
call fcn.00499fc4
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc8]
mov ecx, 0x1da
call fcn.00499fc4
mov edx, dword [0x5abd1c]
movzx edx, byte [edx]
add edx, 0x1d0
sub edx, 2
mov eax, dword [0x5aba48]
mov eax, dword [eax]
call fcn.00492fa8
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je case.default.0x591c2a
mov ecx, dword [0x5abd1c]
movzx ecx, byte [ecx]
add ecx, 0x1d0
sub ecx, 2
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbc4]
call fcn.00499fc4
jmp case.default.0x591c2a
mov eax, dword [0x5abc14]
call fcn.00404788
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbb4]
mov byte [eax + 0x26c], 1
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x11c]
mov eax, dword [0x5abc14]
call fcn.004047dc
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xbb4]
mov byte [eax + 0x26c], 0
jmp case.default.0x591c2a
cmp dword [ebp - 0x88], 0
jle case.default.0x591c2a
mov eax, dword [0x5b6a14]
cmp byte [eax + 0x54], 0
je case.default.0x591c2a
mov eax, dword [0x5b6a14]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x64], edx
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5b6a14]
mov dword [edx + 0x60], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5b6a14]
mov dword [edx + 0x68], eax
jmp case.default.0x591c2a
mov eax, dword [0x5abf5c]
mov byte [eax], 0
mov eax, dword [0x5abbc8]
mov byte [eax], 0
mov eax, dword [0x5ac028]
mov byte [eax], 0
mov eax, dword [0x5abdf8]
mov byte [eax], 0
mov eax, dword [0x5ac0b0]
mov byte [eax], 0
jmp case.default.0x591c2a
mov eax, dword [0x5abf5c]
mov byte [eax], 1
mov eax, dword [0x5abc90]
mov byte [eax], 0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov ecx, 0x11
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.00589290
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov edx, dword [0x5abd18]
mov ecx, 0x28
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov edx, dword [0x5ac234]
mov ecx, 0x14
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
jmp case.default.0x591c2a
mov eax, dword [0x5abc90]
mov byte [eax], 1
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov edx, dword [0x5ac280]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov edx, dword [0x5ac358]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
jmp case.default.0x591c2a
mov eax, dword [0x5ac250]
mov dx, word [ebp - 0x80]
mov word [eax], dx
mov eax, dword [0x5ac250]
mov dx, word [ebp - 0x7c]
mov word [eax + 2], dx
mov eax, dword [0x5ac250]
mov dx, word [ebp - 0x78]
mov word [eax + 4], dx
jmp case.default.0x591c2a
mov eax, dword [0x5ac340]
mov dx, word [ebp - 0x80]
mov word [eax], dx
mov eax, dword [0x5ac340]
mov dx, word [ebp - 0x7c]
mov word [eax + 2], dx
mov eax, dword [0x5ac340]
mov dx, word [ebp - 0x78]
mov word [eax + 4], dx
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x80]
mov edx, dword [0x5ac2c4]
mov byte [edx], al
jmp case.default.0x591c2a
mov eax, dword [0x5ab9b8]
mov dl, byte [ebp - 0x78]
mov byte [eax], dl
mov eax, dword [ebp - 0x80]
call fcn.00407824
movzx eax, ax
mov edx, dword [0x5ac3b0]
mov dword [edx], eax
movzx eax, word [ebp - 0x80]
mov edx, dword [0x5abf50]
mov dword [edx], eax
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
cmp dword [ebp - 0x120], 0
je 0x592158
push 0
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x124]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x124]
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x58]
call fcn.0048d194
push 0
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x54]
call fcn.0048d194
cmp dword [ebp - 0x58], 0
je 0x59212c
mov eax, dword [ebp - 0x58]
call fcn.00409774
mov edx, dword [0x5ab548]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je 0x592142
mov eax, dword [ebp - 0x54]
call fcn.00409774
mov edx, dword [0x5ac344]
mov dword [edx], eax
cmp dword [ebp - 0x5c], 0
je 0x592158
mov eax, dword [ebp - 0x5c]
call fcn.00409774
mov edx, dword [0x5ab56c]
mov dword [edx], eax
mov eax, dword [0x5aba48]
mov eax, dword [eax]
mov edx, 0x326
call fcn.00492fa8
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x592191
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f8]
mov ecx, 0x326
call fcn.00499fc4
mov eax, dword [0x5ab9c8]
mov byte [eax], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xa44]
mov byte [eax + 0x26c], 1
jmp case.default.0x591c2a
mov eax, dword [0x5abaa4]
mov dl, byte [ebp - 0x78]
mov byte [eax], dl
mov eax, dword [ebp - 0x80]
call fcn.00407824
movzx eax, ax
mov edx, dword [0x5ab410]
mov dword [edx], eax
movzx eax, word [ebp - 0x80]
mov edx, dword [0x5ac05c]
mov dword [edx], eax
lea edx, [ebp - 0x128]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
cmp dword [ebp - 0x128], 0
je 0x592285
push 0
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x12c]
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x58]
call fcn.0048d194
push 0
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x54]
call fcn.0048d194
cmp dword [ebp - 0x58], 0
je 0x592259
mov eax, dword [ebp - 0x58]
call fcn.00409774
mov edx, dword [0x5ab628]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je 0x59226f
mov eax, dword [ebp - 0x54]
call fcn.00409774
mov edx, dword [0x5ab3b8]
mov dword [edx], eax
cmp dword [ebp - 0x5c], 0
je 0x592285
mov eax, dword [ebp - 0x5c]
call fcn.00409774
mov edx, dword [0x5ab650]
mov dword [edx], eax
mov eax, dword [0x5aba48]
mov eax, dword [eax]
mov edx, 0x329
call fcn.00492fa8
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x5922be
mov edx, dword [0x5aba48]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x64c]
mov ecx, 0x329
call fcn.00499fc4
mov eax, dword [0x5abac4]
mov byte [eax], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xa48]
mov byte [eax + 0x26c], 1
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x4ebd
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x130]
call fcn.00409688
lea eax, [ebp - 0x130]
mov edx, 0x597c80
call fcn.00404a50
mov edx, dword [ebp - 0x130]
mov eax, dword [0x5b6a14]
call fcn.0057ed34
jmp case.default.0x591c2a
push 0x597c98
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x138]
call fcn.00409688
push dword [ebp - 0x138]
push 0x597c80
lea eax, [ebp - 0x134]
mov edx, 3
call fcn.00404b08
mov edx, dword [ebp - 0x134]
mov eax, dword [0x5b6a14]
call fcn.0057ed34
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 0x34]
mov eax, dword [ebp - 0x4c]
add eax, 0x34
mov edx, 0x597ca8
call fcn.00404a94
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab44c]
mov dword [edx], eax
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597cbc
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab44c]
mov dword [edx], eax
lea edx, [ebp - 0x13c]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x13c]
mov eax, dword [0x5ab568]
call fcn.004047dc
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.0053780c
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xa04]
xor edx, edx
call fcn.0049ad58
jmp case.default.0x591c2a
call fcn.00506f90
mov eax, dword [0x5abfac]
cmp byte [eax], 0
je 0x592473
mov eax, dword [0x5abfac]
call fcn.00506590
mov eax, dword [0x5abfac]
mov byte [eax], 0
mov eax, dword [0x5abe28]
cmp dword [eax], 0
jle 0x59249b
mov eax, dword [0x5ab848]
mov eax, dword [eax]
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
add dword [edx + 0x84], eax
mov eax, dword [0x5ab848]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.005378d4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab42c]
mov dword [edx], eax
mov eax, dword [0x5abfac]
cmp byte [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5abfac]
call fcn.00506f38
mov eax, dword [0x5abfac]
mov byte [eax], 0
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab42c]
mov dword [edx], eax
mov eax, dword [0x5abfac]
cmp byte [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5abfac]
call fcn.00506590
mov eax, dword [0x5abfac]
mov byte [eax], 0
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab42c]
mov dword [edx], eax
mov eax, dword [0x5abfac]
cmp byte [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5abfac]
mov byte [eax], 0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov ax, word [ebp - 0x7c]
push eax
mov ax, word [ebp - 0x78]
push eax
mov cx, word [ebp - 0x80]
mov dl, byte [ebp - 0x74]
mov eax, dword [ebp - 0x4c]
call fcn.00501e7c
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab42c]
mov dword [edx], eax
mov eax, dword [0x5abfac]
cmp byte [eax], 0
je case.default.0x591c2a
lea eax, [ebp - 0x140]
mov edx, dword [0x5abfac]
call fcn.004049ec
mov eax, dword [ebp - 0x140]
mov edx, dword [0x5abfac]
mov edx, dword [edx + 0x40]
call fcn.00506928
mov eax, dword [0x5abfac]
call fcn.00506f38
mov eax, dword [0x5abfac]
mov byte [eax], 0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.005a1c50
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.005a1cb4
jmp case.default.0x591c2a
mov eax, dword [0x5ab848]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
mov dword [edx + 0x84], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab42c]
mov dword [edx], eax
jmp case.default.0x591c2a
mov eax, dword [0x5ab848]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
mov dword [edx + 0x84], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab42c]
mov dword [edx], eax
jmp case.default.0x591c2a
mov eax, dword [0x5ab8f8]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov eax, 0x6a
call fcn.005024d4
jmp case.default.0x591c2a
mov eax, dword [0x5abdf4]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
mov dword [edx + 0x90], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab42c]
mov dword [edx], eax
jmp case.default.0x591c2a
mov eax, dword [0x5abdf4]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
mov dword [edx + 0x90], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab42c]
mov dword [edx], eax
jmp case.default.0x591c2a
mov eax, dword [0x5abe84]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov eax, 0x6a
call fcn.005024d4
jmp case.default.0x591c2a
mov eax, dword [0x5ab7b4]
cmp dword [eax], 0
jne 0x592770
mov dl, 1
mov eax, dword [0x49cdf0]
call fcn.0049ce80
mov edx, dword [0x5ab7b4]
mov dword [edx], eax
mov eax, dword [0x5ab7b4]
mov eax, dword [eax]
add eax, 0x54
mov edx, dword [0x5b6a48]
mov edx, dword [edx + 0x5cf44]
call fcn.004047dc
mov eax, dword [0x5ab7b4]
mov eax, dword [eax]
add eax, 4
mov edx, dword [0x5b6a48]
mov edx, dword [edx + 0x5cf00]
call fcn.004047dc
mov eax, dword [0x5ab7b4]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.0049d2d4
jmp 0x5927d3
mov eax, dword [0x5b6a48]
mov eax, dword [eax + 0x5cf44]
mov edx, dword [0x5ab7b4]
mov edx, dword [edx]
mov edx, dword [edx + 0x54]
call fcn.00404b94
je 0x5927d3
mov eax, dword [0x5ab7b4]
mov eax, dword [eax]
add eax, 0x54
mov edx, dword [0x5b6a48]
mov edx, dword [edx + 0x5cf44]
call fcn.004047dc
mov eax, dword [0x5ab7b4]
mov eax, dword [eax]
add eax, 4
mov edx, dword [0x5b6a48]
mov edx, dword [edx + 0x5cf00]
call fcn.004047dc
mov eax, dword [0x5ab7b4]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.0049d2d4
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
push 1
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 4]
call fcn.005a06e4
mov dl, 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x354]
call fcn.00436654
mov eax, dword [0x5abb84]
cmp byte [eax], 0
jne case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab44c]
cmp eax, dword [edx]
jbe case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
add eax, 0xbb8
mov edx, dword [0x5ab44c]
mov dword [edx], eax
mov eax, dword [0x5b6a10]
call fcn.0058e608
mov eax, dword [0x5ab3d8]
mov dword [eax], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x848]
mov edx, 0x2a8
call fcn.004488f0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x848]
mov edx, 0x78
call fcn.00448970
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x848]
mov edx, 0x78
call fcn.004489b0
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov eax, dword [0x5ac020]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
call fcn.004b2054
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059e9a8
jmp case.default.0x591c2a
mov eax, dword [0x5ac378]
mov edx, 0x28
call fcn.0040786c
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xb48]
mov dl, 1
call fcn.0049ad58
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059ea78
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xb48]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xb70]
mov dl, 1
call fcn.0049ad58
jmp case.default.0x591c2a
mov eax, dword [0x5ab860]
mov byte [eax], 1
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov edx, dword [0x5ac3dc]
mov ecx, 0x14
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xb4c]
mov dl, 1
call fcn.0049ad58
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059e8d8
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x854]
mov dl, 1
call fcn.0049ad58
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059ebfc
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.00534630
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
xor edx, edx
call fcn.0049ad58
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [0x5abdd4]
call fcn.00506590
mov eax, dword [0x5abdd4]
mov byte [eax], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597cec
call fcn.0051bde4
jmp case.default.0x591c2a
lea edx, [ebp - 0x144]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x144]
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059ecf8
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.00534630
mov eax, dword [0x5ab780]
mov byte [eax], 0
cmp dword [ebp - 0x7c], 1
jne 0x592bf1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x868]
mov dl, 1
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x884]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x888]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x880]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x88c]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x890]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x894]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x870]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x874]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x878]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8b8]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8b0]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8b4]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5ab694]
mov byte [eax], 0
mov eax, dword [0x5abf64]
mov byte [eax], 0
mov eax, dword [0x5ab7c4]
mov byte [eax], 0
mov eax, dword [0x5ac3d4]
mov byte [eax], 0
mov eax, dword [0x5ac3d4]
mov byte [eax + 1], 0
mov eax, dword [0x5ac014]
mov byte [eax], 0
mov eax, dword [0x5ac014]
mov byte [eax + 1], 0
mov eax, dword [0x5ab470]
mov byte [eax], 3
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x87c]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5abc64]
mov byte [eax], 4
mov eax, dword [0x5ac1e8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [0x5ac1e8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x40]
call fcn.0041af1c
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 6
jne 0x592bd9
cmp dword [ebp - 0x7c], 2
jne 0x592c75
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x898]
mov dl, 1
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x898]
xor edx, edx
call fcn.004488f0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x898]
xor edx, edx
call fcn.00448930
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x1a9
call fcn.004488f0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x14
call fcn.00448930
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov dl, 1
call fcn.0049ad58
mov eax, dword [0x5ab438]
mov dl, byte [ebp - 0x78]
mov byte [eax], dl
mov eax, dword [0x5ac03c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ab984]
call fcn.00404788
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov eax, dword [0x5ab984]
mov edx, dword [ebp - 0x10]
call fcn.004047dc
jmp case.default.0x591c2a
mov eax, dword [0x5abb98]
mov dl, byte [ebp - 0x88]
mov byte [eax], dl
mov eax, dword [0x5ab9bc]
mov dl, byte [ebp - 0x7c]
mov byte [eax], dl
mov eax, dword [0x5ab470]
mov dl, byte [ebp - 0x78]
mov byte [eax], dl
mov eax, dword [0x5ab470]
cmp byte [eax], 2
jne 0x592ce1
mov eax, dword [0x5ab7c4]
mov byte [eax], 0
mov eax, dword [0x5ab470]
cmp byte [eax], 0
jne 0x592cf3
mov eax, dword [0x5ab504]
mov byte [eax], 0
mov eax, dword [0x5ab7ac]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ab3d4]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5abf64]
mov byte [eax], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov dl, 1
call fcn.0055eb68
jmp case.default.0x591c2a
mov eax, dword [0x5ab470]
cmp byte [eax], 0
jne 0x592d32
mov eax, dword [0x5ab504]
mov byte [eax], 1
cmp dword [ebp - 0x80], 1
jne 0x592d40
mov eax, dword [0x5ab694]
mov byte [eax], 1
mov eax, dword [0x5ac014]
mov dl, byte [ebp - 0x7c]
mov byte [eax], dl
mov eax, dword [0x5ac014]
mov dl, byte [ebp - 0x78]
mov byte [eax + 1], dl
cmp dword [ebp - 0x88], 0
jne 0x592d68
mov eax, dword [0x5ab780]
mov byte [eax], 2
jmp 0x592d70
mov eax, dword [0x5ab780]
mov byte [eax], 1
mov eax, dword [0x5ac03c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ab7c4]
mov byte [eax], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x868]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x898]
xor edx, edx
call fcn.0049ad58
jmp case.default.0x591c2a
mov eax, dword [0x5abc6c]
xor ecx, ecx
mov edx, 0x90
call fcn.004031c8
mov eax, dword [0x5ab780]
mov byte [eax], 1
jmp case.default.0x591c2a
mov eax, dword [0x5abc6c]
call fcn.00506590
mov eax, dword [0x5abc6c]
add eax, 0x48
call fcn.00506590
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x80]
sub eax, 2
jae case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov eax, dword [0x5ab4e4]
mov dl, byte [ebp - 0x80]
mov byte [eax], dl
mov eax, dword [0x5ab984]
mov edx, dword [ebp - 0x10]
call fcn.004047dc
mov eax, dword [0x5ab4e4]
cmp byte [eax], 0
jne 0x592e5e
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x904]
add eax, 0x80
mov edx, 0x597d08
call fcn.004047dc
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x908]
add eax, 0x80
mov edx, 0x597d1c
call fcn.004047dc
jmp 0x592e96
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x904]
add eax, 0x80
mov edx, 0x597d30
call fcn.004047dc
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x908]
add eax, 0x80
mov edx, 0x597d44
call fcn.004047dc
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x904]
xor edx, edx
call fcn.0044970c
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x908]
xor edx, edx
call fcn.0044970c
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov dl, 1
call fcn.0056197c
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f4]
mov edx, 0x17c
call fcn.004488f0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f4]
mov edx, 0x32
call fcn.00448930
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f4]
mov dl, 1
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.00534630
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x14
call fcn.004488f0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x22
call fcn.00448930
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov dl, 1
call fcn.0049ad58
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x80]
sub eax, 2
jae case.default.0x591c2a
cmp dword [ebp - 0x80], 1
jne 0x592f86
mov eax, dword [0x5ac1b4]
xor ecx, ecx
mov edx, 0xd8
call fcn.004031c8
jmp 0x592f97
mov eax, dword [0x5ab3bc]
xor ecx, ecx
mov edx, 0x1f8
call fcn.004031c8
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f4]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
xor edx, edx
call fcn.0049ad58
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x80]
sub eax, 2
jae case.default.0x591c2a
cmp dword [ebp - 0x80], 1
jne 0x59301c
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
lea eax, [eax + eax*8]
mov edx, dword [0x5ac1b4]
cmp byte [edx + eax*8], 0
je 0x593011
mov eax, dword [ebp - 0x40]
lea eax, [eax + eax*8]
mov edx, dword [0x5ac1b4]
lea eax, [edx + eax*8]
call fcn.00506590
mov eax, dword [ebp - 0x40]
lea eax, [eax + eax*8]
mov edx, dword [0x5ac1b4]
mov byte [edx + eax*8], 0
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jne 0x592fdb
jmp 0x593060
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
lea eax, [eax + eax*8]
mov edx, dword [0x5ab3bc]
cmp byte [edx + eax*8], 0
je 0x593057
mov eax, dword [ebp - 0x40]
lea eax, [eax + eax*8]
mov edx, dword [0x5ab3bc]
lea eax, [edx + eax*8]
call fcn.00506590
mov eax, dword [ebp - 0x40]
lea eax, [eax + eax*8]
mov edx, dword [0x5ab3bc]
mov byte [edx + eax*8], 0
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 7
jne 0x593021
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8f4]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
xor edx, edx
call fcn.0049ad58
jmp case.default.0x591c2a
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
cmp dword [ebp - 0x148], 0
je case.default.0x591c2a
push 0
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x14c]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x14c]
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x58]
call fcn.0048d194
cmp dword [ebp - 0x58], 0
je 0x5930ed
mov eax, dword [ebp - 0x58]
call fcn.00409774
mov edx, dword [0x5abea0]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x54]
call fcn.00409774
mov edx, dword [0x5abbb0]
mov dword [edx], eax
jmp case.default.0x591c2a
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
cmp dword [ebp - 0x150], 0
je case.default.0x591c2a
push 0
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x154]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x154]
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x58]
call fcn.0048d194
cmp dword [ebp - 0x58], 0
je 0x59316c
mov eax, dword [ebp - 0x58]
call fcn.00409774
mov edx, dword [0x5abfc4]
mov dword [edx], eax
cmp dword [ebp - 0x54], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x54]
call fcn.00409774
mov edx, dword [0x5abccc]
mov dword [edx], eax
jmp case.default.0x591c2a
lea eax, [ebp - 0x5c]
call fcn.00404788
cmp dword [ebp - 0x88], 0
jl 0x5931ae
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov dx, word [ebp - 0x88]
mov word [eax + 0x77], dx
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x79], dx
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov dx, word [ebp - 0x7c]
mov word [eax + 0x7b], dx
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov dx, word [ebp - 0x78]
mov word [eax + 0x7d], dx
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
cmp dword [ebp - 0x5c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x5c]
call fcn.004096d8
test eax, eax
jl case.default.0x591c2a
mov eax, dword [ebp - 0x5c]
call fcn.004096d8
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
mov word [edx + 0x7f], ax
jmp case.default.0x591c2a
lea eax, [ebp - 0x60]
call fcn.00404788
cmp dword [ebp - 0x88], 0
jl 0x59323c
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov dx, word [ebp - 0x88]
mov word [eax + 0x77], dx
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x79], dx
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov dx, word [ebp - 0x7c]
mov word [eax + 0x7b], dx
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov dx, word [ebp - 0x78]
mov word [eax + 0x7d], dx
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
cmp dword [ebp - 0x60], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x60]
call fcn.004096d8
test eax, eax
jl case.default.0x591c2a
mov eax, dword [ebp - 0x60]
call fcn.004096d8
mov edx, dword [0x5ac0d0]
mov edx, dword [edx]
mov word [edx + 0x7f], ax
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
xor eax, eax
call fcn.00475b5c
mov edx, dword [0x5ab6bc]
mov byte [edx], al
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c8]
cmp byte [eax + 0x26c], 0
jne case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c8]
mov dl, 1
call fcn.0049ad58
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059e804
jmp case.default.0x591c2a
mov eax, dword [0x5abf88]
mov byte [eax], 0
mov eax, dword [0x5abe34]
mov byte [eax + 8], 0
mov eax, dword [0x5ac070]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac070]
add eax, 8
call fcn.00506590
mov eax, dword [0x5ac070]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
call fcn.005069f0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x800]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ab784]
xor ecx, ecx
mov edx, 0x2fb
call fcn.004031c8
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7ec]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac35c]
xor ecx, ecx
mov edx, 0x288
call fcn.004031c8
jmp case.default.0x591c2a
call fcn.00507104
mov eax, dword [0x5ab420]
cmp byte [eax], 0
je 0x5933b8
mov eax, dword [0x5ab420]
call fcn.00506590
mov eax, dword [0x5ab420]
mov byte [eax], 0
mov eax, dword [0x5ac35c]
xor ecx, ecx
mov edx, 0x288
call fcn.004031c8
mov eax, dword [0x5abcc8]
call fcn.00404788
mov eax, dword [0x5ac068]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ab4e0]
xor edx, edx
mov dword [eax], edx
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059e67c
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059e5e0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059e5ac
jmp case.default.0x591c2a
mov eax, dword [0x5ab420]
cmp byte [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5ab420]
call fcn.005070ac
mov eax, dword [0x5ab420]
mov byte [eax], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ab420]
cmp byte [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5ab420]
call fcn.00506590
mov eax, dword [0x5ab420]
mov byte [eax], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ab420]
cmp byte [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5ab420]
mov byte [eax], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ab420]
cmp byte [eax], 0
je case.default.0x591c2a
lea eax, [ebp - 0x158]
mov edx, dword [0x5ab420]
call fcn.004049ec
mov eax, dword [ebp - 0x158]
mov edx, dword [0x5ab420]
mov edx, dword [edx + 0x40]
call fcn.00506928
mov eax, dword [0x5ab420]
call fcn.005070ac
mov eax, dword [0x5ab420]
mov byte [eax], 0
jmp case.default.0x591c2a
call fcn.00507104
mov eax, dword [0x5ab420]
cmp byte [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5ab420]
call fcn.00506590
mov eax, dword [0x5ab420]
mov byte [eax], 0
jmp case.default.0x591c2a
lea edx, [ebp - 0x15c]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x15c]
mov eax, dword [0x5abe18]
call fcn.004047dc
jmp case.default.0x591c2a
mov eax, dword [0x5abab4]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
cmp dword [ebp - 0x80], 0
jne 0x593585
mov eax, dword [0x5ac2b8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7b4]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7b8]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7bc]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7ac]
mov dl, 1
call fcn.0049ad58
mov eax, dword [ebp - 0x80]
dec eax
sub eax, 5
jae case.default.0x591c2a
mov eax, dword [0x5abbe0]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c0]
mov dl, 1
call fcn.0049ad58
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059b710
jmp case.default.0x591c2a
mov eax, dword [0x5abdac]
mov byte [eax], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x780]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
xor edx, edx
call fcn.00553ef0
mov eax, dword [0x5ac294]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ab95c]
mov dword [eax], 0xffffffff
mov eax, dword [0x5abca4]
call fcn.00506590
mov eax, dword [0x5abe30]
call fcn.00506590
mov eax, dword [0x5abe30]
mov byte [eax], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x780]
mov dl, 1
call fcn.0049ad58
mov edx, dword [0x5ac220]
mov edx, dword [edx]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x780]
mov ecx, 0x1fe
call fcn.00499fc4
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x7a8]
mov byte [eax + 0x26c], 1
mov eax, dword [0x5abe80]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5abee0]
mov byte [eax], 1
mov eax, dword [0x5ab95c]
mov dword [eax], 8
mov eax, dword [0x5ab8c8]
mov byte [eax], 0
mov eax, dword [0x5aba78]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov dl, 1
call fcn.00553ef0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.005549f0
jmp case.default.0x591c2a
mov eax, dword [0x5ab5f8]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov eax, dword [0x5abaf8]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov eax, dword [0x5ac33c]
mov edx, dword [ebp - 0x7c]
mov dword [eax], edx
jmp case.default.0x591c2a
mov eax, dword [0x5abd68]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059b5f0
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
lea edx, [ebp - 0x160]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x160]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x164]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x168]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
lea edx, [ebp - 0x16c]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x16c]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
lea edx, [ebp - 0x170]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x170]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
lea edx, [ebp - 0x174]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x174]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059b4e4
jmp case.default.0x591c2a
mov eax, dword [0x5ac070]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac070]
add eax, 8
call fcn.00506590
mov eax, dword [0x5ac070]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.00589290
jmp case.default.0x591c2a
mov eax, dword [0x5ab7c0]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov eax, dword [0x5abef8]
mov edx, dword [ebp - 0x7c]
mov dword [eax], edx
mov eax, dword [0x5ab770]
mov edx, dword [ebp - 0x78]
mov dword [eax], edx
cmp dword [ebp - 0x80], 0xffff
jne 0x5938d9
mov eax, dword [0x5abd78]
xor edx, edx
mov dword [eax], edx
jmp 0x5938e3
mov eax, dword [0x5abd78]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00599c10
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x1389
mov eax, dword [0x5b6a24]
call fcn.004cf95c
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x634]
xor edx, edx
call fcn.0044970c
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov byte [eax + 0xd6d], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xf40], edx
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.0054ec84
mov eax, dword [0x5ac0d0]
cmp dword [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6b8]
mov dl, 1
call fcn.0049ad58
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x13a7
mov eax, dword [ebp - 4]
call fcn.0058c338
mov eax, dword [0x5abb90]
cmp byte [eax], 0
je case.default.0x591c2a
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.005a1e7c
jmp case.default.0x591c2a
lea edx, [ebp - 0x3c]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x138c
mov eax, dword [0x5b6a24]
call fcn.004cf95c
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
cmp dword [ebp - 0x88], 0
jle 0x593a28
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.005898f8
mov eax, 0x597d58
call fcn.00502310
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4c]
jne case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004cf638
mov eax, dword [0x5ac0d0]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ac0d0]
cmp dword [eax], 0
jne case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6b8]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x64c]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ac]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6c0]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x634]
mov dl, 1
call fcn.0044970c
mov eax, dword [0x5abaa4]
mov byte [eax], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov byte [eax + 0xd6d], 0
mov eax, dword [0x5ab628]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ab3b8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5abac4]
mov byte [eax], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0xa48]
mov byte [eax + 0x26c], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6b8]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xf40], edx
mov eax, dword [0x5ab754]
xor ecx, ecx
mov edx, 0x3f0
call fcn.004031c8
mov eax, dword [0x5ac240]
xor ecx, ecx
mov edx, 0xea0
call fcn.004031c8
mov eax, dword [0x5ac358]
xor ecx, ecx
mov edx, 8
call fcn.004031c8
mov eax, dword [0x5ab918]
mov eax, dword [eax]
cmp dword [eax + 8], 0
jle 0x593bd1
mov eax, dword [0x5ab918]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x593bd1
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x40], 0
mov eax, dword [0x5ab918]
mov eax, dword [eax]
mov edx, dword [ebp - 0x40]
call fcn.0041b11c
mov edx, 0x54
call fcn.004027e4
inc dword [ebp - 0x40]
dec dword [ebp - 0x70]
jne 0x593bb0
mov eax, dword [0x5ab918]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [0x5ab57c]
mov eax, dword [eax]
cmp dword [eax + 8], 0
jle 0x593c25
mov eax, dword [0x5ab57c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x593c25
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x40], 0
mov eax, dword [0x5ab57c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x40]
call fcn.0041b11c
mov edx, 0x54
call fcn.004027e4
inc dword [ebp - 0x40]
dec dword [ebp - 0x70]
jne 0x593c04
mov eax, dword [0x5ab57c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [0x5abfd8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6b8]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x64c]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6ac]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6c0]
xor edx, edx
call fcn.0049ad58
mov eax, dword [0x5ac0d0]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x634]
mov dl, 1
call fcn.0044970c
mov eax, dword [0x5ac0d0]
cmp dword [eax], 0
jne case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6b8]
xor edx, edx
call fcn.0049ad58
jmp case.default.0x591c2a
mov eax, dword [0x5ac090]
mov byte [eax], 0
mov eax, dword [0x5abf7c]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5abf7c]
add eax, 8
call fcn.00506698
mov eax, dword [0x5abf7c]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5abcf4]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
mov ecx, 4
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x5b6a10]
call fcn.00589290
jmp case.default.0x591c2a
mov eax, dword [0x5abb44]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
mov eax, dword [0x5ac0f8]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov eax, dword [0x5ab754]
cmp byte [eax + 0x298], 9
jne 0x593d8f
mov eax, dword [0x5ab754]
cmp byte [eax + 0x297], 0x19
jne 0x593d8f
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6c0]
mov dl, 1
call fcn.0049ad58
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6c0]
xor edx, edx
call fcn.0049ad58
jmp case.default.0x591c2a
mov eax, dword [0x5ac090]
cmp byte [eax], 0
je 0x593dbe
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.0051b2a0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059a950
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059ab90
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059aa78
jmp case.default.0x591c2a
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov dl, byte [ebp - 0x88]
mov byte [eax + 0x11], dl
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov dl, byte [ebp - 0x7c]
mov byte [eax + 0x19], dl
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x78]
mov dword [eax + 0x1c], edx
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
lea edx, [eax + 0x3d]
mov ecx, 0x44
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
jmp case.default.0x591c2a
xor eax, eax
mov al, byte [ebp - 0x80]
mov edx, dword [0x5ab7a8]
mov dword [edx], eax
mov ax, word [ebp - 0x80]
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5abf14]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x7c]
mov edx, dword [0x5ac058]
mov dword [edx], eax
mov ax, word [ebp - 0x7c]
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5ac054]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x78]
mov edx, dword [0x5ac0d4]
mov dword [edx], eax
mov ax, word [ebp - 0x78]
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5ac0ac]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x88]
mov edx, dword [0x5abce0]
mov dword [edx], eax
jmp case.default.0x591c2a
mov eax, dword [0x5ac134]
add eax, 8
call fcn.00506698
mov eax, dword [0x5ac134]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac134]
add eax, 8
call fcn.00506590
mov eax, dword [0x5ac134]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac070]
add eax, 8
call fcn.00506590
mov eax, dword [0x5ac070]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac134]
add eax, 8
call fcn.00506698
mov eax, dword [0x5ac134]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x20], edx
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.00403bb0
mov eax, dword [0x5ac134]
mov eax, dword [eax]
sub eax, 0xe
jae 0x593f6d
mov eax, dword [0x5ac134]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov edx, dword [0x5ab754]
mov ecx, dword [0x5ac134]
lea edi, [edx + eax*8]
lea esi, [ecx + 8]
mov ecx, 0x12
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x5ac134]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac134]
add eax, 8
call fcn.00506698
mov eax, dword [0x5ac134]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x20], edx
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.00403bb0
mov eax, dword [0x5ac134]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac134]
cmp dword [eax], 0
jge 0x593ffa
mov eax, dword [0x5ac134]
mov eax, dword [eax]
inc eax
neg eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
lea eax, [eax + eax*8]
mov edx, dword [0x5ab754]
mov ecx, dword [0x5ac134]
lea edi, [edx + eax*8]
lea esi, [ecx + 8]
mov ecx, 0x12
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x5ac134]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5abf74]
mov byte [eax], 0
call fcn.00506b70
jmp case.default.0x591c2a
mov eax, dword [0x5abf74]
call fcn.00506698
mov eax, dword [0x5abf74]
mov byte [eax], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac0d0]
cmp dword [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x63], edx
mov eax, dword [0x5abf70]
cmp byte [eax], 0
je 0x5940bc
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
cmp eax, 0x7d0
jbe case.default.0x591c2a
push 0xff
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x178]
call fcn.00409688
lea eax, [ebp - 0x178]
mov edx, 0x597d74
call fcn.00404a50
mov edx, dword [ebp - 0x178]
mov ecx, 0xffffff
mov eax, dword [0x5b6a14]
call fcn.0057ee70
jmp case.default.0x591c2a
push 0xff
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x17c]
call fcn.00409688
lea eax, [ebp - 0x17c]
mov edx, 0x597d74
call fcn.00404a50
mov edx, dword [ebp - 0x17c]
mov ecx, 0xffffff
mov eax, dword [0x5b6a14]
call fcn.0057ee70
jmp case.default.0x591c2a
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x3d], dx
mov edx, 0x597d90
mov eax, dword [0x5b6a14]
call fcn.0057ecbc
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00599870
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00599794
jmp case.default.0x591c2a
lea edx, [ebp - 0x180]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x180]
mov edx, dword [ebp - 0x88]
call fcn.00506e04
jmp case.default.0x591c2a
lea edx, [ebp - 0x184]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059a464
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059ad84
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059af64
jmp case.default.0x591c2a
mov eax, dword [0x5ac0d0]
cmp dword [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov dx, word [ebp - 0x88]
mov word [eax + 0x6b], dx
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x6f], dx
mov eax, dword [0x5ac0d0]
mov eax, dword [eax]
mov dx, word [ebp - 0x7c]
mov word [eax + 0x73], dx
jmp case.default.0x591c2a
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7c]
call fcn.004077fc
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059b058
jmp case.default.0x591c2a
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7c]
call fcn.004077fc
push eax
mov ecx, dword [ebp - 0x88]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0059b1cc
jmp case.default.0x591c2a
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059b228
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00599930
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00599a80
jmp case.default.0x591c2a
mov eax, dword [0x5ab73c]
call fcn.00404788
mov eax, dword [0x5ab484]
xor edx, edx
mov dword [eax], edx
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
push 0
push 0
mov eax, dword [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x33
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
lea edx, [ebp - 0xc0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0xc0]
push eax
mov eax, dword [ebp - 0xbc]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x32
mov eax, dword [0x5b6a24]
call fcn.004cf95c
mov dl, 7
mov eax, dword [0x5b6a14]
call fcn.0057ec00
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x51
mov eax, dword [ebp - 4]
call fcn.0058c338
cmp byte [ebp - 0xb8], 1
jne 0x59434d
mov eax, dword [0x5ab3dc]
mov byte [eax], 1
jmp 0x594355
mov eax, dword [0x5ab3dc]
mov byte [eax], 0
mov eax, dword [0x5abf9c]
mov byte [eax], 0
mov eax, dword [0x5ac180]
cmp word [eax], 0
jbe 0x594383
push 0xffffff
mov ecx, 0x8000
mov edx, 0x597da4
mov eax, dword [0x5b6a14]
call fcn.0057ee70
jmp 0x5943f3
mov eax, dword [0x5ac118]
cmp word [eax], 0
jbe 0x5943a9
push 0xffffff
mov ecx, 0x8000
mov edx, 0x597dc4
mov eax, dword [0x5b6a14]
call fcn.0057ee70
jmp 0x5943f3
mov eax, dword [0x5ab988]
cmp word [eax], 0
jbe 0x5943cf
push 0xffffff
mov ecx, 0x8000
mov edx, 0x597de4
mov eax, dword [0x5b6a14]
call fcn.0057ee70
jmp 0x5943f3
mov eax, dword [0x5ab9f4]
cmp word [eax], 0
jbe 0x5943f3
push 0xffffff
mov ecx, 0x8000
mov edx, 0x597e04
mov eax, dword [0x5b6a14]
call fcn.0057ee70
mov eax, dword [ebp - 4]
call fcn.0059f2a4
mov eax, dword [ebp - 4]
call fcn.0059f4b0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x8fc]
mov byte [eax + 0x26c], 1
jmp case.default.0x591c2a
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059ddb4
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059e06c
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00599058
jmp case.default.0x591c2a
mov eax, dword [0x5ac364]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
jmp case.default.0x591c2a
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00599368
jmp case.default.0x591c2a
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00599448
jmp case.default.0x591c2a
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.005995fc
jmp case.default.0x591c2a
mov eax, dword [0x5ab998]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
jmp case.default.0x591c2a
push 0x40255555
push 0x55555555
call fcn.0048d848
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404a48
cmp ebx, eax
jge 0x594525
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.0048d848
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404a48
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ca8
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004a29e0
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
jmp 0x59452d
lea eax, [ebp - 0x1c]
call fcn.00404788
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0xa
mov eax, dword [0x5b6a24]
call fcn.004cf95c
cmp dword [ebp - 0x1c], 0
je case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
push 0
lea eax, [ebp - 0x188]
push eax
mov byte [ebp - 0xc8], 0x5c
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
mov edx, dword [ebp - 0x188]
mov eax, dword [ebp - 0x4c]
add eax, 0x30
call fcn.004047dc
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004a2720
call fcn.00581958
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004a2720
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x3c], al
jmp case.default.0x591c2a
push 0x40255555
push 0x55555555
call fcn.0048d848
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404a48
cmp ebx, eax
jge 0x59465e
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.0048d848
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404a48
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ca8
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004a29e0
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
jmp 0x594666
lea eax, [ebp - 0x1c]
call fcn.00404788
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 9
mov eax, dword [0x5b6a24]
call fcn.004cf95c
cmp dword [ebp - 0x1c], 0
je case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
push 0
lea eax, [ebp - 0x18c]
push eax
mov byte [ebp - 0xc8], 0x5c
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x4c]
add eax, 0x30
call fcn.004047dc
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004a2720
call fcn.00581958
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004a2720
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x3c], al
jmp case.default.0x591c2a
push 0x40255555
push 0x55555555
call fcn.0048d848
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404a48
cmp ebx, eax
jge 0x594797
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.0048d848
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404a48
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ca8
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004a29e0
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
jmp 0x59479f
lea eax, [ebp - 0x1c]
call fcn.00404788
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x5947f0
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x74]
mov dword [eax + 0x30c], edx
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x80]
mov word [eax + 0x310], dx
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x7c]
mov word [eax + 0x312], dx
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x177c
mov eax, dword [0x5b6a24]
call fcn.004cf95c
cmp dword [ebp - 0x1c], 0
je case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
push 0
lea eax, [ebp - 0x190]
push eax
mov byte [ebp - 0xc8], 0x5c
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x4c]
add eax, 0x30
call fcn.004047dc
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004a2720
call fcn.00581958
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004a2720
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x3c], al
jmp case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x591c2a
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
push 0
push 0
push 0
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
push 0x40255555
push 0x55555555
call fcn.0048d848
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404a48
cmp ebx, eax
jge 0x594953
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.0048d848
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404a48
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ca8
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004a29e0
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
jmp 0x59495b
lea eax, [ebp - 0x1c]
call fcn.00404788
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je 0x5949a3
mov ax, word [ebp - 0x7c]
push eax
mov ax, word [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov cx, word [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce8f8
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004cf95c
cmp dword [ebp - 0x1c], 0
je case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
push 0
lea eax, [ebp - 0x194]
push eax
mov byte [ebp - 0xc8], 0x5c
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x4c]
add eax, 0x30
call fcn.004047dc
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004a2720
call fcn.00581958
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.004a2720
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x3c], al
jmp case.default.0x591c2a
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
jne 0x594a8c
cmp word [ebp - 0x84], 6
je 0x594a8c
cmp word [ebp - 0x84], 7
jne 0x594ab9
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004cf95c
cmp word [ebp - 0x84], 6
jne case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5abaa0]
mov dword [edx], eax
jmp case.default.0x591c2a
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x591c2a
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x1b8], edx
jmp case.default.0x591c2a
mov eax, dword [0x5ab3f0]
cmp byte [eax + 0x90], 0
je case.default.0x591c2a
mov eax, dword [0x5ab3f0]
mov dx, word [ebp - 0x88]
mov word [eax + 0xd4], dx
jmp case.default.0x591c2a
mov eax, dword [ebp - 4]
call fcn.0058fcd8
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0xa
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov dx, 0xc
mov eax, dword [ebp - 0x4c]
call fcn.004f7e3c
jmp case.default.0x591c2a
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov dx, 0xc
mov eax, dword [ebp - 0x4c]
call fcn.004f7e3c
jmp case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x4c]
call fcn.004f7e3c
mov eax, dword [ebp - 0x4c]
call fcn.004f80fc
mov eax, dword [ebp - 0x4c]
call fcn.004fcd84
cmp word [ebp - 0x84], 0x3d
jne 0x594e75
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x74]
mov dword [eax + 0x30c], edx
lea edx, [ebp - 0xad]
mov ecx, 0x25
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x8d]
mov word [eax + 0x9a], dx
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x8b]
mov word [eax + 0x9c], dx
mov edx, dword [ebp - 0xad]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x594e75
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x99]
mov dword [eax + 0x30c], edx
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0xa5]
mov word [eax + 0x310], dx
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0xa1]
mov word [eax + 0x312], dx
mov eax, dword [ebp - 0x4c]
mov dl, byte [ebp - 0x9d]
mov byte [eax + 0x314], dl
mov eax, dword [ebp - 0xa5]
push eax
mov eax, dword [ebp - 0xa1]
push eax
mov eax, dword [ebp - 0x9d]
push eax
mov eax, dword [ebp - 0x95]
push eax
mov eax, dword [ebp - 0x91]
push eax
push 0
mov ecx, dword [ebp - 0xad]
mov edx, 0x177c
mov eax, dword [0x5b6a24]
call fcn.004cf95c
lea edx, [ebp - 0x19c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 8]
call fcn.0040959c
push dword [ebp - 0x19c]
push 0x5977f4
lea edx, [ebp - 0x1a0]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0xc]
call fcn.0040959c
push dword [ebp - 0x1a0]
push 0x5977f4
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0xa5]
call fcn.0040959c
push dword [ebp - 0x1a4]
push 0x5977f4
lea edx, [ebp - 0x1a8]
mov eax, dword [ebp - 0xa1]
call fcn.0040959c
push dword [ebp - 0x1a8]
lea eax, [ebp - 0x198]
mov edx, 7
call fcn.00404b08
mov edx, dword [ebp - 0x198]
mov eax, dword [0x5b6a14]
call fcn.0057ecbc
cmp word [ebp - 0x84], 0xf
jne case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x13c], 1
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x4c]
call fcn.004f7e3c
cmp word [ebp - 0x84], 0xf
jne case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x13c], 1
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov dx, 0xe
mov eax, dword [ebp - 0x4c]
call fcn.004f7e3c
cmp word [ebp - 0x84], 0xf
jne case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x13c], 1
jmp case.default.0x591c2a
lea edx, [ebp - 0x2c]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x4c]
call fcn.004f7e3c
movzx eax, word [ebp - 0x2c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x124], eax
movzx eax, word [ebp - 0x2a]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x128], eax
mov dx, word [ebp - 0x26]
mov ax, word [ebp - 0x28]
call fcn.004077fc
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x12c], eax
jmp case.default.0x591c2a
lea edx, [ebp - 0xc0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x4c]
call fcn.004f7e3c
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0xc0]
mov dword [eax + 0x124], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0xbc]
mov dword [eax + 0x128], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0xb8]
mov dword [eax + 0x12c], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0xb4]
mov dword [eax + 0x134], edx
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.004a2720
push eax
mov ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00586324
jmp case.default.0x591c2a
lea edx, [ebp - 0x48]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov ax, word [ebp - 0x78]
call fcn.00407840
and eax, 0xff
push eax
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x48]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x78]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.005863d0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00586448
jmp case.default.0x591c2a
mov eax, dword [0x5aba9c]
mov byte [eax], 0
mov eax, dword [0x5abd34]
mov byte [eax], 0
mov eax, dword [0x5ab87c]
mov byte [eax], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597e24
call fcn.0051bde4
mov eax, dword [ebp - 4]
call fcn.0046cebc
jmp case.default.0x591c2a
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x595194
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x4c]
call fcn.004f7e3c
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov dword [eax + 0x53], edx
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x20
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x21
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x1b
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x84], edx
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov dl, byte [ebp - 0x80]
mov byte [eax + 0x19], dl
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7c]
call fcn.004077fc
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
mov dword [edx + 0x88], eax
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
lea edx, [eax + 0x3d]
mov ecx, 0x44
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
jmp case.default.0x591c2a
xor eax, eax
mov al, byte [ebp - 0x80]
mov edx, dword [0x5abf10]
mov dword [edx], eax
mov ax, word [ebp - 0x80]
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5ab52c]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x7c]
mov edx, dword [0x5ab61c]
mov dword [edx], eax
mov ax, word [ebp - 0x7c]
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5ab618]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x78]
mov edx, dword [0x5ab6cc]
mov dword [edx], eax
mov ax, word [ebp - 0x78]
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5ab674]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x88]
mov edx, dword [0x5ac3d0]
mov dword [edx], eax
jmp case.default.0x591c2a
mov eax, dword [0x5aba90]
mov edx, dword [ebp - 0x80]
mov dword [eax], edx
jmp case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x63], edx
mov eax, dword [0x5abf70]
cmp byte [eax], 0
je 0x5953a5
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
cmp eax, 0x7d0
jbe case.default.0x591c2a
push 0xff
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1ac]
call fcn.00409688
lea eax, [ebp - 0x1ac]
mov edx, 0x597e5c
call fcn.00404a50
mov edx, dword [ebp - 0x1ac]
mov ecx, 0xffffff
mov eax, dword [0x5b6a14]
call fcn.0057ee70
jmp case.default.0x591c2a
push 0xff
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1b0]
call fcn.00409688
lea eax, [ebp - 0x1b0]
mov edx, 0x597e5c
call fcn.00404a50
mov edx, dword [ebp - 0x1b0]
mov ecx, 0xffffff
mov eax, dword [0x5b6a14]
call fcn.0057ee70
jmp case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x3d], dx
mov edx, 0x597e74
mov eax, dword [0x5b6a14]
call fcn.0057ecbc
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x53], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x7c]
mov dword [eax + 0x57], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x78]
mov dword [eax + 0x5b], edx
jmp case.default.0x591c2a
mov ax, word [ebp - 0x84]
sub ax, 0x1f
jne case.default.0x591c2a
lea edx, [ebp - 0xc0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4c]
jne 0x5954bc
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
cmp dword [eax + 0x38], 0xf9
jne 0x5954d0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5abee4]
mov dword [edx], eax
jmp 0x5954d0
mov eax, dword [ebp - 0x4c]
call fcn.004fcd34
test al, al
je 0x5954d0
mov eax, dword [ebp - 0x4c]
call fcn.004fcd64
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4c]
je 0x59550b
push 0
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0xc0]
push eax
mov eax, dword [ebp - 0xbc]
push eax
push 0
mov eax, dword [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0xb4]
mov dx, 0x1f
mov eax, dword [ebp - 0x4c]
call fcn.004f7fcc
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x53], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x7c]
mov dword [eax + 0x5b], edx
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x15c], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x160], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x30]
mov dword [eax + 0x164], edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x15c]
call fcn.0050800c
jmp case.default.0x591c2a
mov eax, dword [ebp - 4]
call fcn.0059dd44
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4c]
je 0x5955d8
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x53], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x7c]
mov dword [eax + 0x5b], edx
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x198], 1
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x198], 0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x53], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x7c]
mov dword [eax + 0x5b], edx
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x199], 1
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x1a0], 0x7d0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x19c], eax
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov eax, dword [ebp - 0x4c]
mov edx, dword [0x4f5e10]
call fcn.00403b40
test al, al
je case.default.0x591c2a
mov eax, dword [ebp - 0x4c]
call fcn.00500034
jmp case.default.0x591c2a
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x5957b1
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 4]
call fcn.0059fa84
test al, al
jne case.default.0x591c2a
cmp word [ebp - 0x84], 0x63
jne 0x595769
mov eax, dword [ebp - 0x78]
sub eax, 1
jb 0x595706
je 0x59572b
dec eax
je 0x595751
jmp 0x59578f
mov ax, word [ebp - 0x80]
call fcn.00407840
and eax, 0xff
push eax
push 0x32
xor ecx, ecx
mov cl, byte [ebp - 0x80]
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5b6a14]
call fcn.0057edac
jmp 0x59578f
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov ax, word [ebp - 0x80]
call fcn.00407840
xor ecx, ecx
mov cl, al
xor edx, edx
mov dl, byte [ebp - 0x80]
mov eax, dword [0x5b6a14]
call fcn.005803cc
jmp 0x59578f
mov eax, dword [ebp - 0x20]
push eax
xor edx, edx
mov dl, byte [ebp - 0x80]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [0x5b6a14]
call fcn.00580d54
jmp 0x59578f
mov ax, word [ebp - 0x80]
call fcn.00407840
call fcn.00581958
push eax
mov al, byte [ebp - 0x80]
call fcn.00581958
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5b6a14]
call fcn.0057ee70
cmp word [ebp - 0x84], 0x68
jne case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.0053c030
jmp case.default.0x591c2a
cmp word [ebp - 0x84], 0x67
jne case.default.0x591c2a
mov ax, word [ebp - 0x80]
call fcn.00407840
call fcn.00581958
push eax
mov al, byte [ebp - 0x80]
call fcn.00581958
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5b6a14]
call fcn.0057ee70
jmp case.default.0x591c2a
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x59582b
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 4]
call fcn.0059fa84
test al, al
jne 0x59582b
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
call fcn.004fce78
mov eax, dword [0x5ac314]
cmp byte [eax], 0
jne case.default.0x591c2a
cmp dword [ebp - 0x4c], 0
je 0x595880
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 4]
call fcn.0059fa84
test al, al
jne case.default.0x591c2a
mov ax, word [ebp - 0x80]
call fcn.00407840
call fcn.00581958
push eax
mov al, byte [ebp - 0x80]
call fcn.00581958
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5b6a14]
call fcn.0057ee70
jmp case.default.0x591c2a
mov ax, word [ebp - 0x80]
call fcn.00407840
call fcn.00581958
push eax
mov al, byte [ebp - 0x80]
call fcn.00581958
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5b6a14]
call fcn.0057ee70
jmp case.default.0x591c2a
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
push 0
lea eax, [ebp - 0x1b4]
push eax
mov byte [ebp - 0xc8], 0x5c
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x20]
call fcn.0048d194
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x4c]
add eax, 0x30
call fcn.004047dc
mov al, byte [ebp - 0x80]
call fcn.00581958
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
mov eax, dword [ebp - 0x4c]
mov dl, byte [ebp - 0x80]
mov byte [eax + 0x3c], dl
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.default.0x591c2a
mov al, byte [ebp - 0x80]
call fcn.00581958
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x38], eax
mov eax, dword [ebp - 0x4c]
mov dl, byte [ebp - 0x80]
mov byte [eax + 0x3c], dl
jmp case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x591c2a
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x1d
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
lea edx, [ebp - 0xc0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce780
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x5959f8
mov ax, word [ebp - 0x7c]
push eax
mov ax, word [ebp - 0x78]
push eax
mov eax, dword [ebp - 0xc0]
push eax
mov eax, dword [ebp - 0xbc]
push eax
mov cx, word [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004ce8f8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0xb8]
mov dword [eax + 0x138], edx
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0xc0]
push eax
mov eax, dword [ebp - 0xbc]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x80]
mov dx, 0x14
mov eax, dword [ebp - 0x4c]
call fcn.004f7e3c
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x15
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
lea edx, [ebp - 0x24]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
movzx eax, word [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x88]
mov dl, 1
mov eax, dword [0x4bb944]
call fcn.004bba04
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
xor edx, edx
mov dword [eax + 0xc], edx
movzx eax, word [ebp - 0x24]
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x1c], eax
mov edx, dword [ebp - 0x50]
mov eax, dword [0x5b6a34]
call fcn.004bc254
mov eax, dword [ebp - 0x80]
add eax, 0xfffffff9
sub eax, 8
jb 0x595acc
je 0x595aea
dec eax
je 0x595af9
sub eax, 0x137b
je 0x595adb
jmp case.default.0x591c2a
mov eax, 0x597e84
call fcn.00502310
jmp case.default.0x591c2a
mov eax, 0x597ea4
call fcn.00502310
jmp case.default.0x591c2a
mov eax, 0x597ec0
call fcn.00502310
jmp case.default.0x591c2a
mov eax, 0x597ed8
call fcn.00502310
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5b6a34]
call fcn.004bc2e4
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.005996e8
jmp case.default.0x591c2a
mov eax, dword [0x5abf88]
cmp byte [eax], 0
je 0x595b43
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.0051b360
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059a248
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00599d88
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00599e48
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00599f18
jmp case.default.0x591c2a
lea edx, [ebp - 0x1b8]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x1b8]
mov edx, dword [ebp - 0x88]
call fcn.00506e04
jmp case.default.0x591c2a
lea edx, [ebp - 0x1bc]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059a3f4
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x78]
push eax
lea edx, [ebp - 0x1c0]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x1c0]
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059a4d4
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059a5d8
jmp case.default.0x591c2a
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5b6a48]
call fcn.004b2d6c
jmp case.default.0x591c2a
mov edx, 0x597ef0
mov eax, dword [0x5b6a14]
call fcn.0057ecbc
jmp case.default.0x591c2a
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x80]
mov eax, dword [0x5b6a48]
call fcn.004b2e9c
jmp case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x20], edx
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.00403bb0
mov eax, dword [0x5ac070]
mov eax, dword [eax]
sub eax, 0xe
jae 0x595ca8
mov eax, dword [0x5ac070]
mov eax, dword [eax]
lea eax, [eax + eax*8]
mov edx, dword [0x5ab3f0]
mov ecx, dword [0x5ac070]
lea edi, [edx + eax*8]
lea esi, [ecx + 8]
mov ecx, 0x12
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x5ac070]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac070]
add eax, 8
call fcn.00506590
mov eax, dword [0x5ac070]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x20], edx
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.00403bb0
mov eax, dword [0x5ac070]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov eax, dword [0x5ac070]
cmp dword [eax], 0
jge 0x595d35
mov eax, dword [0x5ac070]
mov eax, dword [eax]
inc eax
neg eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
lea eax, [eax + eax*8]
mov edx, dword [0x5ab3f0]
mov ecx, dword [0x5ac070]
lea edi, [edx + eax*8]
lea esi, [ecx + 8]
mov ecx, 0x12
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x5ac070]
mov byte [eax + 8], 0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059a658
jmp case.default.0x591c2a
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov dx, word [ebp - 0x88]
mov word [eax + 0x6b], dx
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x6f], dx
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov dx, word [ebp - 0x7c]
mov word [eax + 0x73], dx
jmp case.default.0x591c2a
mov eax, 0x6a
call fcn.005024d4
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov eax, dword [eax + 0x84]
cmp eax, dword [ebp - 0x88]
jge 0x595dff
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
push dword [eax + 0x84]
mov eax, dword [ebp - 0x88]
pop edx
sub eax, edx
lea edx, [ebp - 0x1c8]
call fcn.0040959c
push dword [ebp - 0x1c8]
push 0x5977f4
mov eax, dword [0x5ac214]
push dword [eax]
push 0x597f04
lea eax, [ebp - 0x1c4]
mov edx, 4
call fcn.00404b08
mov edx, dword [ebp - 0x1c4]
mov eax, dword [0x5b6a14]
call fcn.0057ecbc
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x84], edx
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
mov dword [edx + 0x88], eax
jmp case.default.0x591c2a
push 0
push 0
push 0
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
push eax
xor edx, edx
mov ax, word [ebp - 0x78]
call fcn.004077fc
push eax
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
push 0
push 0
push 0
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
push eax
mov eax, dword [ebp - 0x78]
push eax
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5b6a24]
call fcn.004cf95c
jmp case.default.0x591c2a
mov eax, dword [0x5b6a24]
call fcn.004ca0d0
mov eax, dword [0x5ab428]
mov byte [eax], 1
jmp case.default.0x591c2a
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0058eee4
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0058efb0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0058f01c
jmp case.default.0x591c2a
mov eax, dword [ebp - 4]
call fcn.0058f0d8
jmp case.default.0x591c2a
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0058f0f0
jmp case.default.0x591c2a
mov eax, dword [ebp - 4]
call fcn.0058f25c
jmp case.default.0x591c2a
mov eax, dword [ebp - 4]
call fcn.0058f344
jmp case.default.0x591c2a
mov eax, dword [ebp - 4]
call fcn.0058f330
jmp case.default.0x591c2a
mov eax, dword [0x5abe30]
mov byte [eax], 0
mov eax, dword [0x5ac018]
cmp byte [eax], 0xc8
je 0x595f86
mov eax, dword [0x5abd20]
cmp byte [eax], 0
je 0x595f86
mov eax, dword [0x5ac018]
movzx eax, byte [eax]
lea eax, [eax + eax*8]
mov edx, dword [0x5ac178]
mov ecx, dword [0x5abd20]
lea edi, [edx + eax*8]
mov esi, ecx
mov ecx, 0x12
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x5abd20]
mov byte [eax], 0
mov eax, dword [0x5ac018]
mov byte [eax], 0xc8
call fcn.005069f0
jmp case.default.0x591c2a
mov eax, dword [0x5abe30]
call fcn.00506590
mov eax, dword [0x5abe30]
mov byte [eax], 0
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059b2f8
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059b920
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059b3f0
jmp case.default.0x591c2a
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7c]
call fcn.004077fc
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059bb38
jmp case.default.0x591c2a
mov dx, word [ebp - 0x78]
mov ax, word [ebp - 0x7c]
call fcn.004077fc
push eax
mov ecx, dword [ebp - 0x88]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0059bcb0
lea edx, [ebp - 0x1cc]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
cmp dword [ebp - 0x1cc], 0
je case.default.0x591c2a
lea edx, [ebp - 0x1d0]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x1d0]
call fcn.004096d8
test eax, eax
jle case.default.0x591c2a
lea edx, [ebp - 0x1d4]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x1d4]
call fcn.004096d8
mov edx, dword [0x5ab9b0]
mov word [edx], ax
jmp case.default.0x591c2a
lea edx, [ebp - 0x1d8]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov eax, dword [ebp - 0x1d8]
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059bd0c
jmp case.default.0x591c2a
lea edx, [ebp - 0x1dc]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 4]
call fcn.0059ae7c
jmp case.default.0x591c2a
lea edx, [ebp - 0x1e0]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x1e0]
mov eax, dword [ebp - 4]
call fcn.0059aef0
jmp case.default.0x591c2a
mov eax, dword [0x5ab8f4]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.00534630
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059bdf8
jmp case.default.0x591c2a
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059bfe0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059c1cc
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059c20c
jmp case.default.0x591c2a
mov eax, dword [0x5ab570]
cmp byte [eax], 0
je case.default.0x591c2a
cmp dword [ebp - 0x88], 0
jle 0x5961c8
lea edx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x88]
call fcn.0040959c
push dword [ebp - 0x1e4]
push 0x5977f4
mov eax, dword [0x5ac214]
push dword [eax]
mov eax, dword [0x5ac39c]
mov edx, 3
call fcn.00404b08
jmp case.default.0x591c2a
mov ecx, dword [0x5ac214]
mov ecx, dword [ecx]
mov eax, dword [0x5ac39c]
mov edx, 0x597f14
call fcn.00404a94
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x84], edx
mov eax, dword [0x5abdd4]
mov byte [eax], 0
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [0x5abdd4]
call fcn.00506590
mov eax, dword [0x5abdd4]
mov byte [eax], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597f24
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ab570]
cmp byte [eax], 0
je case.default.0x591c2a
cmp dword [ebp - 0x88], 0
jl 0x5962a7
lea edx, [ebp - 0x1e8]
mov eax, dword [ebp - 0x88]
call fcn.0040959c
push dword [ebp - 0x1e8]
push 0x5977f4
mov eax, dword [0x5ac214]
push dword [eax]
mov eax, dword [0x5ac39c]
mov edx, 3
call fcn.00404b08
jmp case.default.0x591c2a
mov ecx, dword [0x5ac214]
mov ecx, dword [ecx]
mov eax, dword [0x5ac39c]
mov edx, 0x597f14
call fcn.00404a94
jmp case.default.0x591c2a
mov eax, dword [0x5abdd4]
cmp byte [eax], 0
je case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x84], edx
mov eax, dword [0x5abdd4]
mov dx, word [ebp - 0x80]
mov word [eax + 0x44], dx
mov eax, dword [0x5abdd4]
mov dx, word [ebp - 0x7c]
mov word [eax + 0x46], dx
mov eax, dword [0x5abdd4]
call fcn.00506590
mov eax, dword [0x5abdd4]
mov byte [eax], 0
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [0x5abdd4]
call fcn.00506590
mov eax, dword [0x5abdd4]
mov byte [eax], 0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597f40
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
cmp word [ebp - 0x84], 0x2bd
je 0x5963cf
cmp word [ebp - 0x84], 0x2be
jne 0x5963ad
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597f5c
call fcn.0051bde4
jmp 0x5963c5
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597f8c
call fcn.0051bde4
mov eax, dword [0x5abdd4]
call fcn.00506590
mov eax, dword [0x5abdd4]
mov byte [eax], 0
jmp case.default.0x591c2a
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059c28c
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
cmp word [ebp - 0x84], 0x2c1
je 0x596455
cmp word [ebp - 0x84], 0x2c3
jne 0x596438
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597fa4
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597fc4
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
call fcn.00535b98
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x84], edx
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
mov edx, eax
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.00535ab4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [ebp - 0x88]
dec eax
je 0x5964d9
dec eax
je 0x5964f6
dec eax
je 0x596513
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597fdc
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597fa4
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597ff4
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [0x5ab6c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x84], edx
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598018
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [ebp - 0x88]
dec eax
je 0x59659d
dec eax
je 0x5965ba
dec eax
je 0x5965d7
dec eax
je 0x59660d
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598038
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x597fa4
call fcn.0051bde4
jmp case.default.0x591c2a
mov edx, dword [0x5ac214]
mov edx, dword [edx]
lea eax, [ebp - 0x1ec]
mov ecx, 0x59804c
call fcn.00404a94
mov edx, dword [ebp - 0x1ec]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x59805c
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 4]
call fcn.0059d320
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059c4c4
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059c6c4
jmp case.default.0x591c2a
cmp dword [ebp - 0x80], 0
jle 0x59667f
mov eax, dword [0x5ab3dc]
mov byte [eax], 1
jmp 0x596687
mov eax, dword [0x5ab3dc]
mov byte [eax], 0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5abf3c]
mov dword [edx], eax
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5abf3c]
mov dword [edx], eax
mov eax, dword [0x5ab3dc]
mov byte [eax], 1
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5abf3c]
mov dword [edx], eax
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffc
je 0x59672f
dec eax
je 0x596712
dec eax
je 0x5966f5
dec eax
jne case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x59807c
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598094
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5980b4
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5980e4
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5abf3c]
mov dword [edx], eax
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5abf3c]
mov dword [edx], eax
mov eax, dword [ebp - 0x88]
add eax, 5
cmp eax, 4
ja case.default.0x591c2a
jmp dword [eax*4 + 0x596784]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x59807c
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598094
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5980fc
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5980e4
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598114
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5abf3c]
mov dword [edx], eax
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5abf3c]
mov dword [edx], eax
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffd
je 0x596897
dec eax
je 0x59687a
dec eax
jne case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x59807c
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598094
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598144
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac024]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.default.0x591c2a
lea edx, [ebp - 0x1f0]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x1f0]
mov eax, dword [ebp - 4]
call fcn.0059c7cc
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab44c]
mov dword [edx], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059c868
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab44c]
mov dword [edx], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059cd1c
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab44c]
mov dword [edx], eax
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x59815c
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab44c]
mov dword [edx], eax
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598178
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab44c]
mov dword [edx], eax
lea edx, [ebp - 0x1f4]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x1f4]
mov eax, dword [0x5abb34]
call fcn.004047dc
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.00537718
jmp case.default.0x591c2a
call fcn.00507150
mov eax, dword [0x5ab448]
cmp byte [eax], 0
je 0x5969d1
mov eax, dword [0x5ab448]
call fcn.00506590
mov eax, dword [0x5ab448]
mov byte [eax], 0
mov eax, dword [0x5abe28]
cmp dword [eax], 0
jle 0x5969f9
mov eax, dword [0x5abe28]
mov eax, dword [eax]
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
add dword [edx + 0x84], eax
mov eax, dword [0x5abe28]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.005378f4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab9f0]
mov dword [edx], eax
mov eax, dword [0x5ab448]
cmp byte [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5ab448]
call fcn.00506ee0
mov eax, dword [0x5ab448]
mov byte [eax], 0
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab9f0]
mov dword [edx], eax
mov eax, dword [0x5ab448]
cmp byte [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5ab448]
call fcn.00506590
mov eax, dword [0x5ab448]
mov byte [eax], 0
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab9f0]
mov dword [edx], eax
mov eax, dword [0x5ab448]
cmp byte [eax], 0
je case.default.0x591c2a
mov eax, dword [0x5ab448]
mov byte [eax], 0
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab9f0]
mov dword [edx], eax
mov eax, dword [0x5ab448]
cmp byte [eax], 0
je case.default.0x591c2a
lea eax, [ebp - 0x1f8]
mov edx, dword [0x5ab448]
call fcn.004049ec
mov eax, dword [ebp - 0x1f8]
mov edx, dword [0x5ab448]
mov edx, dword [edx + 0x40]
call fcn.00506928
mov eax, dword [0x5ab448]
call fcn.00506ee0
mov eax, dword [0x5ab448]
mov byte [eax], 0
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059d110
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059d174
jmp case.default.0x591c2a
mov eax, dword [0x5abe28]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
mov dword [edx + 0x84], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab9f0]
mov dword [edx], eax
jmp case.default.0x591c2a
mov eax, dword [0x5abe28]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov dx, word [ebp - 0x7c]
mov ax, word [ebp - 0x80]
call fcn.004077fc
mov edx, dword [0x5ab6c4]
mov edx, dword [edx]
mov dword [edx + 0x84], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab9f0]
mov dword [edx], eax
jmp case.default.0x591c2a
mov eax, dword [0x5abecc]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov eax, 0x6a
call fcn.005024d4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
call fcn.005378f4
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0059c24c
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab44c]
mov dword [edx], eax
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
call fcn.0059d1d8
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ab44c]
mov dword [edx], eax
push 0xff
mov ecx, 0xffffff
mov edx, 0x5981a0
mov eax, dword [0x5b6a14]
call fcn.0057ee70
mov eax, dword [0x5abf18]
mov dword [eax], 0xffffffff
jmp case.default.0x591c2a
lea edx, [ebp - 0x1fc]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x1fc]
mov eax, dword [ebp - 4]
call fcn.0059d218
jmp case.default.0x591c2a
mov eax, dword [0x5ac158]
mov dl, byte [ebp - 0x88]
mov byte [eax], dl
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059d2a4
jmp case.default.0x591c2a
mov eax, dword [ebp - 4]
call fcn.0058f74c
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x88]
cmp eax, 5
ja case.default.0x591c2a
jmp dword [eax*4 + 0x596c75]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5981b8
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5981d8
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598204
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598220
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598240
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [ebp - 4]
call fcn.0058f74c
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x88]
dec eax
je 0x596d42
dec eax
je 0x596d5f
dec eax
je 0x596d7c
dec eax
je 0x596d99
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x59825c
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598274
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598290
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5982b4
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x88]
add eax, 7
cmp eax, 5
ja case.default.0x591c2a
jmp dword [eax*4 + 0x596dcf]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5982cc
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5982f4
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598324
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5982cc
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598358
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598384
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffc
je 0x596f04
dec eax
je 0x596ee7
dec eax
je 0x596eca
dec eax
jne case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5983ac
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5983c4
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5983d8
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598400
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffd
je 0x596f70
dec eax
je 0x596f53
dec eax
jne case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598424
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598438
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598460
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598478
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffd
je 0x59701b
dec eax
je 0x596ffe
dec eax
jne 0x597038
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x598490
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5984b0
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5984c8
call fcn.0051bde4
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, 0x5984f0
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x1c]
mov eax, 0x59850c
call fcn.00404d8c
test eax, eax
jle 0x5971ef
push 0
lea eax, [ebp - 0x200]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
mov edx, dword [ebp - 0x200]
lea eax, [ebp - 0x1c]
call fcn.00404820
push 0
lea eax, [ebp - 0x204]
push eax
mov byte [ebp - 0xc8], 0x2f
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 0x1c]
call fcn.0048d194
mov edx, dword [ebp - 0x204]
lea eax, [ebp - 0x1c]
call fcn.00404820
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x598510]
mov edx, dword [ebp - 0x18]
call fcn.0051bde4
dec eax
jne 0x59717c
cmp dword [ebp - 0x6c], 0
je case.default.0x591c2a
push 0
push 0
mov eax, dword [0x5b6a10]
mov eax, dword [eax + 0x3ec]
push eax
lea eax, [ebp - 0x88]
push eax
xor ecx, ecx
xor edx, edx
mov ax, 0x4ec5
call fcn.004946d0
lea edx, [ebp - 0x208]
lea eax, [ebp - 0x88]
call fcn.004949d8
lea eax, [ebp - 0x208]
push eax
lea edx, [ebp - 0x20c]
mov eax, dword [ebp - 0x6c]
call fcn.004a2b68
mov edx, dword [ebp - 0x20c]
pop eax
call fcn.00404a50
mov edx, dword [ebp - 0x208]
mov eax, dword [ebp - 4]
call fcn.0058c260
jmp case.default.0x591c2a
cmp dword [ebp - 0x1c], 0
je case.default.0x591c2a
push 0
push 0
mov eax, dword [0x5b6a10]
mov eax, dword [eax + 0x3ec]
push eax
lea eax, [ebp - 0x88]
push eax
xor ecx, ecx
xor edx, edx
mov ax, 0x4ec5
call fcn.004946d0
lea edx, [ebp - 0x210]
lea eax, [ebp - 0x88]
call fcn.004949d8
lea eax, [ebp - 0x210]
push eax
lea edx, [ebp - 0x214]
mov eax, dword [ebp - 0x1c]
call fcn.004a2b68
mov edx, dword [ebp - 0x214]
pop eax
call fcn.00404a50
mov edx, dword [ebp - 0x210]
mov eax, dword [ebp - 4]
call fcn.0058c260
jmp case.default.0x591c2a
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
mov edx, dword [ebp - 0x1c]
call fcn.0051bde4
jmp case.default.0x591c2a
cmp dword [ebp - 0x10], 0
je case.default.0x591c2a
lea edx, [ebp - 0x218]
mov eax, dword [ebp - 0x10]
call fcn.004a29e0
mov edx, dword [ebp - 0x218]
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x5977bc]
call fcn.0051bde4
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
jmp case.default.0x591c2a
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1088], eax
jmp case.default.0x591c2a
lea eax, [ebp - 0x14]
push eax
push 0x40355555
push 0x55555555
call fcn.0048d848
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404a48
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ca8
lea edx, [ebp - 0xc0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.004a2aa0
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004a29e0
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x80]
mov dword [eax + 0xf50], edx
xor eax, eax
mov al, byte [ebp - 0xc0]
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0xf58], eax
mov ax, word [ebp - 0xc0]
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0xf74], eax
mov eax, dword [ebp - 0xc0]
call fcn.00407824
and eax, 0xff
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0xf90], eax
mov eax, dword [ebp - 0xc0]
call fcn.00407824
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0xfac], eax
xor eax, eax
mov al, byte [ebp - 0xbc]
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0xfc8], eax
mov ax, word [ebp - 0xbc]
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0xfe4], eax
mov eax, dword [ebp - 0xbc]
call fcn.00407824
and eax, 0xff
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1000], eax
mov eax, dword [ebp - 0xbc]
call fcn.00407824
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x101c], eax
xor eax, eax
mov al, byte [ebp - 0xb8]
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1038], eax
mov ax, word [ebp - 0xb8]
call fcn.00407840
and eax, 0xff
mov edx, dword [0x5ac3a0]
mov edx, dword [edx]
mov dword [edx + 0x1054], eax
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xf48], edx
mov eax, dword [0x5ac3a0]
mov eax, dword [eax]
mov cx, word [0x598514]
xor edx, edx
call fcn.0051bde4
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0058d990
jmp case.default.0x591c2a
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0059dc40
jmp case.default.0x591c2a
mov eax, dword [0x5ab6c4]
cmp dword [eax], 0
je case.default.0x591c2a
mov eax, 0x598520
call fcn.005819bc
lea edx, [ebp - 0x220]
movzx eax, word [ebp - 0x84]
call fcn.0040959c
mov ecx, dword [ebp - 0x220]
lea eax, [ebp - 0x21c]
mov edx, 0x598534
call fcn.00404a94
mov eax, dword [ebp - 0x21c]
call fcn.005819bc
lea edx, [ebp - 0x228]
mov eax, dword [ebp - 0x88]
call fcn.0040959c
mov ecx, dword [ebp - 0x228]
lea eax, [ebp - 0x224]
mov edx, 0x598544
call fcn.00404a94
mov eax, dword [ebp - 0x224]
call fcn.005819bc
lea edx, [ebp - 0x230]
mov eax, dword [ebp - 0x80]
call fcn.0040959c
mov ecx, dword [ebp - 0x230]
lea eax, [ebp - 0x22c]
mov edx, 0x598554
call fcn.00404a94
mov eax, dword [ebp - 0x22c]
call fcn.005819bc
lea edx, [ebp - 0x238]
mov eax, dword [ebp - 0x7c]
call fcn.0040959c
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x234]
mov edx, 0x598564
call fcn.00404a94
mov eax, dword [ebp - 0x234]
call fcn.005819bc
lea edx, [ebp - 0x240]
mov eax, dword [ebp - 0x78]
call fcn.0040959c
mov ecx, dword [ebp - 0x240]
lea eax, [ebp - 0x23c]
mov edx, 0x598574
call fcn.00404a94
mov eax, dword [ebp - 0x23c]
call fcn.005819bc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x59759a
lea eax, [ebp - 0x240]
mov edx, 0x5e
call fcn.004047ac
lea eax, [ebp - 0xc4]
call fcn.00404788
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.004047ac
lea eax, [ebp - 0x6c]
call fcn.00404788
lea eax, [ebp - 0x64]
mov edx, 5
call fcn.004047ac
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004047ac
ret