Function at 0x59dcbc
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x5d8c50
call fcn.00404414
jmp 0x5a2357
mov eax, dword [eax + 0x11c]
push 0x5a2cfc
jmp 0x59f677
mov eax, dword [ebp - 0x18]
mov edx, 0x58d9f0
call fcn.00404820
jne 0x58daa3
call dword [0x5d8c60]
test edx, edx
je 0x58daa3
mov ecx, 0x5a26b4
jmp 0x59df88
mov eax, dword [ebp - 0x18]
mov edx, 0x58da10
call fcn.00404820
jne 0x58dac6
call dword [0x5d8c60]
mov edx, eax
nop
nop
mov ecx, 0x5a268c
jmp 0x59df88
mov eax, dword [ebp - 0x18]
mov edx, 0x58da30
call fcn.00404820
jne 0x58dae9
call dword [0x5d8c64]
mov edx, eax
nop
nop
mov ecx, 0x5a268c
jmp 0x59df88
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2450
jmp 0x59dea9
push ebp
mov ebp, esp
push ecx
mov ecx, 0x58
push 0
push 0
dec ecx
jne 0x59dcc5
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov byte [ebp - 5], cl
mov dword [ebp - 4], edx
mov esi, eax
mov eax, dword [ebp - 4]
call fcn.004048c4
xor eax, eax
push ebp
push 0x5a23fb
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [esi + 0x818]
mov edx, dword [ebp - 4]
call fcn.00404468
cmp byte [ebp - 5], 0
je 0x59dd2d
mov byte [esi + 0x894], 0
mov byte [esi + 0x86d], 0
mov byte [esi + 0x83c], 0
call sub.kernel32.dll_GetTickCount_1
mov dword [esi + 0x840], eax
xor eax, eax
mov dword [esi + 0x870], eax
mov edx, dword [esi + 0x818]
mov eax, 0x5a2414
call fcn.00404a18
test eax, eax
jg 0x59dd55
mov edx, dword [esi + 0x818]
mov eax, 0x5a2420
call fcn.00404a18
test eax, eax
jle 0x59dd86
mov edx, dword [esi + 0x818]
mov eax, 0x5a242c
call fcn.00404a18
dec eax
je 0x59dd86
lea ecx, [ebp - 0x30]
mov edx, dword [esi + 0x818]
mov eax, esi
call fcn.005a80c8
mov edx, dword [ebp - 0x30]
lea eax, [esi + 0x818]
call fcn.00404468
lea edx, [ebp - 0x34]
mov eax, dword [esi + 0x818]
call fcn.00408a54
mov edx, dword [ebp - 0x34]
lea eax, [esi + 0x818]
call fcn.00404468
cmp dword [esi + 0x818], 0
jne 0x59ddb7
mov byte [esi + 0x894], 1
jmp 0x5a239e
push 0xb
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 0x44], 0x3c
mov byte [ebp - 0x43], 0x5b
mov byte [ebp - 0x42], 0x30
mov byte [ebp - 0x41], 0x31
mov byte [ebp - 0x40], 0x32
mov byte [ebp - 0x3f], 0x33
mov byte [ebp - 0x3e], 0x34
mov byte [ebp - 0x3d], 0x35
mov byte [ebp - 0x3c], 0x36
mov byte [ebp - 0x3b], 0x37
mov byte [ebp - 0x3a], 0x38
mov byte [ebp - 0x39], 0x39
lea ecx, [ebp - 0x44]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.00492f78
mov edx, dword [ebp - 4]
mov eax, 0x5a2438
call fcn.00404a18
test eax, eax
jle 0x59de6a
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 4]
call fcn.004932b4
push 0xb
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 0x44], 0x3c
mov byte [ebp - 0x43], 0x5b
mov byte [ebp - 0x42], 0x30
mov byte [ebp - 0x41], 0x31
mov byte [ebp - 0x40], 0x32
mov byte [ebp - 0x3f], 0x33
mov byte [ebp - 0x3e], 0x34
mov byte [ebp - 0x3d], 0x35
mov byte [ebp - 0x3c], 0x36
mov byte [ebp - 0x3b], 0x37
mov byte [ebp - 0x3a], 0x38
mov byte [ebp - 0x39], 0x39
lea ecx, [ebp - 0x44]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
call fcn.00492f78
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
call fcn.00408804
mov edx, dword [ebp - 0x4c]
lea eax, [ebp - 0x18]
call fcn.004044ac
cmp byte [ebp - 5], 0
je 0x59de9f
lea eax, [esi + 0x87c]
mov edx, dword [ebp - 0x18]
call fcn.00404468
lea eax, [esi + 0x880]
call fcn.00404414
mov bl, 1
jmp 0x58da80
call fcn.00404820
je 0x59def0
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2460
call fcn.00404820
je 0x59def0
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2474
call fcn.00404820
je 0x59def0
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2488
call fcn.00404820
je 0x59def0
mov eax, dword [ebp - 0x18]
mov edx, 0x5a249c
call fcn.00404820
jne 0x59df96
mov eax, dword [0x5d39f8]
cmp byte [eax], 0
je 0x59df1d
mov eax, dword [0x5d39f8]
mov byte [eax], 0
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a24ac
call fcn.005b2b94
mov eax, dword [0x5d346c]
mov byte [eax], 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0x18]
mov edx, 0x5a249c
call fcn.00404820
jne 0x59df82
push 0
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 0x58], 0x2c
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00492f78
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 0xc]
call fcn.004044ac
lea eax, [esi + 0x880]
mov edx, dword [ebp - 0x10]
call fcn.00404468
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a36d0
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a24c4
call fcn.00404820
jne 0x59dfe9
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [0x5d3494]
mov byte [eax], 1
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0xc]
call fcn.00408804
mov edx, dword [ebp - 0x60]
mov eax, dword [0x5d3ecc]
call fcn.00404468
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a24d8
call fcn.00404820
jne 0x59e067
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [0x5d39b0]
mov byte [eax], 1
push 0x5a24f0
push dword [ebp - 0xc]
push 0x5a24f0
mov eax, dword [0x5d38c8]
mov edx, 3
call fcn.00404794
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x64]
push eax
mov ecx, 0x5a24fc
mov edx, 0x5a2508
mov eax, dword [ebp - 0x14]
call fcn.004932b4
mov eax, dword [0x5d31d0]
mov edx, dword [ebp - 0xc]
call fcn.00404468
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2514
call fcn.00404820
jne 0x59e085
mov eax, dword [0x5d39b0]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a252c
call fcn.00404820
jne 0x59e0a3
mov eax, dword [0x5d3c10]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2548
call fcn.00404820
jne 0x59e0c1
mov eax, dword [0x5d3c10]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2564
call fcn.00404820
jne 0x59e0df
mov eax, dword [0x5d37f0]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2584
call fcn.00404820
jne 0x59e0fd
mov eax, dword [0x5d37f0]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a25a4
call fcn.00404820
jne 0x59e125
mov eax, dword [0x5d3f50]
cmp byte [eax], 0
je 0x59e11e
mov eax, dword [0x5d33e4]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a25b8
call fcn.00404820
jne 0x59e2a0
xor ebx, ebx
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x68]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0xc]
mov edx, 0x5a25cc
call fcn.00404820
jne 0x59e198
mov eax, dword [0x5d31e0]
mov byte [eax + 0x13], 1
mov eax, dword [0x5d31e0]
mov byte [eax + 0x14], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x15], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x16], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x1b], 0
jmp 0x5a2357
mov eax, dword [ebp - 0xc]
mov edx, 0x5a25dc
call fcn.00404820
jne 0x59e1d9
mov eax, dword [0x5d31e0]
mov byte [eax + 0x13], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x14], 1
mov eax, dword [0x5d31e0]
mov byte [eax + 0x15], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x16], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x1b], 0
jmp 0x5a2357
mov eax, dword [ebp - 0xc]
mov edx, 0x5a25f0
call fcn.00404820
jne 0x59e21a
mov eax, dword [0x5d31e0]
mov byte [eax + 0x13], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x14], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x15], 1
mov eax, dword [0x5d31e0]
mov byte [eax + 0x16], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x1b], 0
jmp 0x5a2357
mov eax, dword [ebp - 0xc]
mov edx, 0x5a2604
call fcn.00404820
jne 0x59e25b
mov eax, dword [0x5d31e0]
mov byte [eax + 0x13], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x14], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x15], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x16], 1
mov eax, dword [0x5d31e0]
mov byte [eax + 0x1b], 0
jmp 0x5a2357
mov eax, dword [ebp - 0xc]
mov edx, 0x5a2614
call fcn.00404820
jne 0x5a2357
mov eax, dword [0x5d31e0]
mov byte [eax + 0x13], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x14], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x15], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x16], 0
mov eax, dword [0x5d31e0]
mov byte [eax + 0x1b], 1
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2628
call fcn.00404820
jne 0x59e2c2
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
call fcn.00481d60
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a263c
call fcn.00404820
jne 0x59e303
mov eax, dword [0x5d3df4]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3ae0]
mov dword [edx], eax
push 0
mov ecx, dword [0x5d3d88]
mov ecx, dword [ecx]
xor edx, edx
mov eax, 0xa
call fcn.0055d66c
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2650
call fcn.00404820
jne 0x59e34e
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x6c]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [0x5d3d88]
mov ecx, dword [ecx]
xor edx, edx
mov eax, 0x11
call fcn.0055d66c
xor ebx, ebx
jmp 0x5a2357
mov edx, dword [ebp - 0x18]
mov eax, 0x5a242c
call fcn.00404a18
dec eax
jne 0x59e453
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esi + 0x818]
call fcn.004046d4
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [esi + 0x818]
call fcn.00404934
mov eax, dword [ebp - 0xc]
call fcn.004937f8
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0xc]
call fcn.00404414
mov eax, dword [esi + 0x818]
call fcn.004046d4
sub eax, 2
jl 0x59e3f4
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 2
mov eax, dword [esi + 0x818]
mov edx, dword [ebp - 0x20]
mov al, byte [eax + edx - 1]
cmp al, 0x39
ja 0x59e3c7
cmp al, 0x30
jae 0x59e3ec
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esi + 0x818]
call fcn.004046d4
mov ecx, eax
sub ecx, dword [ebp - 0x20]
inc ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [esi + 0x818]
call fcn.00404934
jmp 0x59e3f4
inc dword [ebp - 0x20]
dec dword [ebp - 0x2c]
jne 0x59e3b2
mov eax, dword [ebp - 0x24]
test eax, eax
jle 0x59e44c
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 1
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x20]
inc eax
call fcn.00408cf0
mov ecx, dword [ebp - 0x74]
lea eax, [ebp - 0x70]
mov edx, 0x5a2664
call fcn.00404720
mov ecx, dword [ebp - 0x70]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
inc dword [ebp - 0x20]
dec dword [ebp - 0x2c]
jne 0x59e405
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2674
call fcn.00404820
jne 0x59e487
mov eax, dword [0x5d3e24]
cmp dword [eax], 0
je 0x59e480
mov eax, dword [0x5d3e24]
mov eax, dword [eax]
mov byte [eax + 0x59], 1
mov eax, dword [0x5d3e24]
xor edx, edx
mov dword [eax], edx
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a268c
call fcn.00404820
jne 0x59e559
mov eax, dword [0x5d39f8]
cmp byte [eax], 0
je 0x59e4c7
mov eax, dword [0x5d39f8]
mov byte [eax], 0
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a24ac
call fcn.005b2b94
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [0x5d346c]
mov byte [eax], 1
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a26a4
call fcn.00404820
jne 0x59e52b
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x78]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0xc]
call fcn.004932b4
mov ecx, 0x5a26b4
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.005a36d0
mov ebx, eax
jmp 0x5a2357
mov ecx, 0x5a26b4
mov edx, dword [ebp - 0x10]
mov eax, esi
call fcn.005a36d0
mov ebx, eax
test bl, bl
je 0x5a2357
mov eax, dword [0x5d3658]
mov byte [eax], 1
mov eax, dword [0x5d328c]
mov byte [eax], 1
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a26c8
call fcn.00404820
jne 0x59e57d
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov dl, 1
call fcn.00534df0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a26dc
call fcn.00404820
jne 0x59e5a1
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
xor edx, edx
call fcn.00534df0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a26f0
call fcn.00404820
jne 0x59e5bf
mov eax, dword [0x5d3d68]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2704
call fcn.00404820
jne 0x59e5dd
mov eax, dword [0x5d3d68]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2718
call fcn.00404820
jne 0x59e616
mov eax, dword [0x5d3658]
mov byte [eax], 1
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a272c
call fcn.005b2b94
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2744
call fcn.00404820
jne 0x59e64f
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2758
call fcn.005b2b94
mov eax, dword [0x5d3658]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2770
call fcn.00404820
jne 0x59e688
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2784
call fcn.005b2b94
mov eax, dword [0x5d328c]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2798
call fcn.00404820
jne 0x59e6c1
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a27ac
call fcn.005b2b94
mov eax, dword [0x5d328c]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a27c0
call fcn.00404820
jne 0x59e724
mov eax, dword [0x5d37fc]
mov byte [eax], 1
mov eax, dword [0x5d3434]
cmp byte [eax], 0
je 0x59e701
mov eax, dword [0x5d3434]
mov al, byte [eax]
mov edx, dword [0x5d3a10]
mov byte [edx], al
mov eax, dword [0x5d3eb4]
mov byte [eax], 1
mov eax, dword [0x5d3434]
mov byte [eax], 0
mov eax, dword [0x5d3b60]
mov edx, 0x5a27c0
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a27d4
call fcn.00404820
jne 0x59e7c8
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x7c]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0xc]
call fcn.00409584
mov ecx, dword [ebp - 0x80]
mov edx, dword [0x5d32cc]
mov edx, dword [edx]
lea eax, [ebp - 0xc]
call fcn.00404720
mov eax, dword [ebp - 0xc]
call fcn.004092c0
test al, al
je 0x59e788
mov eax, dword [ebp - 0xc]
call fcn.005aab94
jmp 0x59e7c1
push 0xffffff
push 0x5a27e8
push dword [ebp - 0xc]
push 0x5a2800
lea eax, [ebp - 0x84]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0x84]
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
call fcn.005b2b94
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2818
call fcn.00404820
jne 0x59e823
mov eax, dword [0x5d37fc]
mov byte [eax], 0
mov eax, dword [0x5d3eb4]
cmp byte [eax], 0
je 0x59e7f8
mov eax, dword [0x5d3a10]
mov al, byte [eax]
mov edx, dword [0x5d3434]
mov byte [edx], al
mov eax, dword [0x5d3eb4]
mov byte [eax], 0
mov eax, dword [0x5d3b60]
mov edx, 0x5a2818
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a282c
call fcn.00404820
jne 0x59e87f
mov eax, dword [0x5d3434]
mov byte [eax], 1
mov eax, dword [0x5d37fc]
cmp byte [eax], 0
je 0x59e85c
mov eax, dword [0x5d37fc]
mov byte [eax], 0
mov eax, dword [0x5d3dfc]
mov byte [eax], 1
mov eax, dword [0x5d36e4]
mov byte [eax], 1
mov eax, dword [0x5d3b60]
mov edx, 0x5a282c
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2840
call fcn.00404820
je 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2854
call fcn.00404820
jne 0x59e8ed
mov eax, dword [0x5d3434]
mov byte [eax], 0
mov eax, dword [0x5d36e4]
cmp byte [eax], 0
je 0x59e8c2
mov eax, dword [0x5d3dfc]
mov al, byte [eax]
mov edx, dword [0x5d37fc]
mov byte [edx], al
mov eax, dword [0x5d36e4]
mov byte [eax], 0
mov eax, dword [0x5d3b60]
mov edx, 0x5a2854
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2868
call fcn.00404820
jne 0x59e91e
mov bl, 1
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2880
call fcn.005b2b94
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a28c4
call fcn.00404820
jne 0x59e971
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x600]
xor edx, edx
call fcn.00498b18
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a28dc
call fcn.005b2b94
mov eax, dword [0x5d33c8]
mov byte [eax], 0
mov eax, dword [0x5d3cc0]
mov byte [eax], 0
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a28f4
call fcn.00404820
jne 0x59eaef
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
push 0
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 0x58], 0x2c
lea ecx, [ebp - 0x58]
mov edx, dword [0x5d37f8]
mov eax, dword [ebp - 0xc]
call fcn.00492f78
mov edx, dword [ebp - 0x8c]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov eax, dword [0x5d3d40]
mov dword [eax], 0xffffffff
mov eax, dword [0x5d37f8]
cmp dword [eax], 0
je 0x59ea6c
push 0
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 0x58], 0x2c
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00492f78
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 0xc]
call fcn.004044ac
push 0
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 0x58], 0x2c
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.00492f78
mov edx, dword [ebp - 0x94]
lea eax, [ebp - 0xc]
call fcn.004044ac
cmp dword [ebp - 0x10], 0
je 0x59ea6c
cmp dword [ebp - 0x14], 0
je 0x59ea6c
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.00408e98
mov edx, dword [0x5d3d40]
mov dword [edx], eax
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.00408e98
mov edx, dword [0x5d3c30]
mov dword [edx], eax
mov eax, dword [0x5d3d40]
cmp dword [eax], 0xffffffff
jne 0x59ea93
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2908
call fcn.005b2b94
jmp 0x59eae8
push 0xffffff
push 0x5a293c
mov eax, dword [0x5d37f8]
push dword [eax]
push 0x5a24f0
push dword [ebp - 0x10]
push 0x5a24f0
push dword [ebp - 0x14]
push 0x5a294c
lea eax, [ebp - 0x98]
mov edx, 7
call fcn.00404794
mov edx, dword [ebp - 0x98]
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
call fcn.005b2b94
mov eax, dword [0x5d39f8]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2968
call fcn.00404820
jne 0x59eb1b
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
xor edx, edx
call fcn.005cf318
mov eax, dword [0x5d39f8]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2980
call fcn.00404820
jne 0x59eb43
mov edx, dword [0x5d37a0]
mov edx, dword [edx]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
call fcn.0055752c
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2990
call fcn.00404820
jne 0x59ebdd
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x9c]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [0x5d33c8]
cmp byte [eax], 0
je 0x59eb91
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.0055a548
jmp 0x59ebd6
mov eax, dword [0x5d3838]
cmp byte [eax], 0
je 0x59ebd6
push 0x5a29a0
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0xa0]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0xa0]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x5cc]
mov eax, dword [eax + 0x90]
call fcn.00497644
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a29b0
call fcn.00404820
jne 0x59ec5b
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xa4]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [0x5d3d48]
push dword [eax]
push dword [ebp - 0xc]
push 0x5a29c4
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404794
mov eax, dword [ebp - 0xc]
call fcn.004092c0
test al, al
je 0x5a2357
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a6c10
mov edx, dword [0x5d37a0]
mov edx, dword [edx]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
call fcn.00557694
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a29d4
call fcn.00404820
jne 0x59ece6
call fcn.005c95c0
mov eax, dword [0x5d3cc0]
mov byte [eax], 1
mov eax, dword [0x5d3838]
mov byte [eax], 0
mov eax, dword [0x5d33a8]
mov byte [eax], 0
xor ebx, ebx
mov eax, dword [0x5d3998]
mov byte [eax], 1
mov eax, dword [0x5d338c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x5a2357
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 0
mov eax, dword [0x5d338c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.00419afc
mov edi, eax
cmp byte [edi + 0x38], 0
je 0x59ecd9
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov ecx, edi
mov edx, 0x5a29e8
call fcn.0055a38c
inc dword [ebp - 0x20]
dec dword [ebp - 0x2c]
jne 0x59ecaf
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a29fc
call fcn.00404820
jne 0x59ed74
call fcn.005c95c0
mov eax, dword [0x5d3cc0]
mov byte [eax], 0
xor ebx, ebx
mov eax, dword [0x5d3998]
mov byte [eax], 0
mov eax, dword [0x5d36c8]
mov byte [eax], 0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d39d8]
mov dword [edx], eax
mov eax, dword [0x5d338c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x5a2357
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 0
mov eax, dword [0x5d338c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.00419afc
mov edi, eax
mov byte [edi + 0x39], 0
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov ecx, edi
mov edx, 0x5a2a10
call fcn.0055a38c
inc dword [ebp - 0x20]
dec dword [ebp - 0x2c]
jne 0x59ed3f
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2a24
call fcn.00404820
jne 0x59ef12
mov eax, dword [0x5d3838]
cmp byte [eax], 0
je 0x59eef2
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x5cc]
mov eax, dword [eax + 0x90]
cmp byte [eax + 8], 0
je 0x59eef2
push 0x5a2a38
lea edx, [ebp - 0xac]
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov eax, dword [eax + 0x11c]
call fcn.005c8c80
push dword [ebp - 0xac]
push 0x5a2a4c
lea eax, [ebp - 0xa8]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0xa8]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x5cc]
mov eax, dword [eax + 0x90]
call fcn.00497644
mov bl, 1
mov eax, dword [0x5d36c8]
cmp byte [eax], 0
jne 0x59ee21
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d34e8]
mov dword [edx], eax
mov eax, dword [0x5d36c8]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3cc4]
mov dword [edx], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3a3c]
mov dword [edx], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d34e8]
sub eax, dword [edx]
cmp eax, 0x927c0
jbe 0x59eee0
mov eax, dword [0x5d3b70]
xor edx, edx
mov dword [eax], edx
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3cc4]
mov dword [edx], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3a3c]
mov dword [edx], eax
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2a58
call fcn.005b2b94
mov eax, dword [0x5d3b60]
mov edx, 0x5a2a80
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
mov eax, dword [0x5d3cac]
mov edx, dword [0x5d3b60]
mov edx, dword [edx]
call fcn.00404468
mov edx, dword [0x5d37a0]
mov edx, dword [edx]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
call fcn.00557694
jmp 0x5a2357
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3504]
mov dword [edx], eax
jmp 0x5a2357
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2aa8
call fcn.005b2b94
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2acc
call fcn.00404820
jne 0x59f10a
mov eax, dword [0x5d33c8]
cmp byte [eax], 0
je 0x59f103
mov bl, 1
mov byte [ebp - 0x25], 1
mov eax, dword [0x5d36c8]
cmp byte [eax], 0
jne 0x59ef50
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d34e8]
mov dword [edx], eax
mov eax, dword [0x5d36c8]
mov byte [eax], 1
mov eax, dword [0x5d338c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x59efe0
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 0
mov eax, dword [0x5d338c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.00419afc
mov edi, eax
cmp byte [edi + 0x39], 0
jne 0x59efd8
cmp dword [edi + 4], 0
je 0x59efd8
push 0x5a2ae0
push dword [edi + 4]
push 0x5a2444
mov eax, dword [0x5d3b60]
mov edx, 3
call fcn.00404794
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3cc4]
mov dword [edx], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3a3c]
mov dword [edx], eax
mov byte [ebp - 0x25], 0
jmp 0x59efe0
inc dword [ebp - 0x20]
dec dword [ebp - 0x2c]
jne 0x59ef72
cmp byte [ebp - 0x25], 0
je 0x59f03f
xor ebx, ebx
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov edx, 0x5a2af8
call fcn.0055a548
mov eax, dword [0x5d36c8]
mov byte [eax], 0
mov eax, dword [0x5d338c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x5a2357
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 0
mov eax, dword [0x5d338c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.00419afc
mov byte [eax + 0x39], 0
inc dword [ebp - 0x20]
dec dword [ebp - 0x2c]
jne 0x59f01f
jmp 0x5a2357
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d34e8]
sub eax, dword [edx]
cmp eax, 0x927c0
jbe 0x59f0dc
mov eax, dword [0x5d3b70]
xor edx, edx
mov dword [eax], edx
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3cc4]
mov dword [edx], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3a3c]
mov dword [edx], eax
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2b0c
call fcn.005b2b94
mov eax, dword [0x5d3b60]
mov edx, 0x5a2b38
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
mov eax, dword [0x5d3cac]
mov edx, dword [0x5d3b60]
mov edx, dword [edx]
call fcn.00404468
mov edx, dword [0x5d37a0]
mov edx, dword [edx]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
call fcn.00557694
jmp 0x5a2357
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3630]
mov dword [edx], eax
add ah, byte [ecx + 0x5d31cc]
mov dword [eax], 0xbb8
mov dword [esi + 0x870], 0xffffffff
jmp 0x5a2357
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2b64
call fcn.00404820
jne 0x59f13b
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2b7c
call fcn.005b2b94
mov bl, 1
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2bb0
call fcn.00404820
jne 0x59f23b
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xb0]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 0xc]
call fcn.00408a54
mov edx, dword [ebp - 0xb4]
lea eax, [ebp - 0xc]
call fcn.004044ac
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 0x10]
call fcn.00408a54
mov edx, dword [ebp - 0xb8]
lea eax, [ebp - 0x10]
call fcn.004044ac
cmp dword [ebp - 0xc], 0
je 0x59f234
cmp dword [ebp - 0x10], 0
je 0x59f234
mov eax, dword [0x5d3838]
cmp byte [eax], 0
je 0x59f216
push 0x5a2414
push dword [esi + 0x818]
push 0x5a242c
lea eax, [ebp - 0xbc]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x5cc]
mov eax, dword [eax + 0x90]
call fcn.00497644
jmp 0x59f234
mov eax, dword [0x5d33c8]
cmp byte [eax], 0
je 0x59f234
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
xor ecx, ecx
mov edx, dword [esi + 0x818]
call fcn.005589d8
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2bc4
call fcn.00404820
jne 0x59f37c
xor ebx, ebx
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xc0]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
cmp dword [ebp - 0xc], 0
jne 0x59f29a
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
movzx eax, byte [eax + 0x124]
push eax
mov eax, 7
pop edx
sub eax, edx
lea edx, [ebp - 0xc]
call fcn.00408cf0
jmp 0x59f31f
mov eax, dword [ebp - 0xc]
call fcn.005c4c4c
test al, al
jne 0x59f31f
mov eax, dword [0x5d32c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.005b4df8
mov edi, eax
test edi, edi
je 0x59f300
cmp byte [edi + 0x78], 0
jne 0x59f300
movzx eax, word [edi + 0x122]
push eax
movzx ecx, word [edi + 0x120]
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
movzx edx, word [eax + 0x122]
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
movzx eax, word [eax + 0x120]
call fcn.005c420c
and eax, 0xff
lea edx, [ebp - 0xc]
call fcn.00408cf0
jmp 0x59f31f
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
movzx eax, byte [eax + 0x124]
push eax
mov eax, 7
pop edx
sub eax, edx
lea edx, [ebp - 0xc]
call fcn.00408cf0
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.00408e98
mov dword [ebp - 0x20], eax
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
movzx eax, word [eax + 0x122]
push eax
mov eax, dword [ebp - 0x20]
push eax
push 0
push 0
push 0
push 0
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
movzx ecx, word [eax + 0x120]
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov dx, 0xbc2
call fcn.005cc4e8
mov ecx, 0x5a2bd4
xor edx, edx
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2bec
call fcn.00404820
jne 0x59f437
mov eax, dword [0x5d3838]
cmp byte [eax], 0
je 0x59f408
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x5cc]
mov eax, dword [eax + 0x90]
cmp byte [eax + 8], 0
je 0x59f408
push 0x5a2c00
lea edx, [ebp - 0xc8]
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov eax, dword [eax + 0x11c]
call fcn.005c8c80
push dword [ebp - 0xc8]
push 0x5a2a4c
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0xc4]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x5cc]
mov eax, dword [eax + 0x90]
call fcn.00497644
mov bl, 1
mov eax, dword [0x5d3658]
mov byte [eax], 1
mov eax, dword [0x5d328c]
mov byte [eax], 1
mov eax, dword [0x5d3c84]
mov dword [eax], 6
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3504]
mov dword [edx], eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2c14
call fcn.00404820
jne 0x59f455
mov eax, dword [0x5d391c]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2c2c
call fcn.00404820
jne 0x59f473
mov eax, dword [0x5d391c]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2c44
call fcn.00404820
jne 0x59f4fe
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xcc]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0xc]
call fcn.005c4c4c
test al, al
je 0x59f4f7
mov eax, dword [ebp - 0xc]
call fcn.00408e5c
mov edx, dword [0x5d3540]
mov dword [edx], eax
push 0xffffff
push 0x5a2c5c
push dword [ebp - 0xc]
push 0x5a2c78
lea eax, [ebp - 0xd0]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0xd0]
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
call fcn.005b2b94
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2c84
call fcn.00404820
jne 0x59f589
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0xc]
call fcn.005c4c4c
test al, al
je 0x59f582
mov eax, dword [ebp - 0xc]
call fcn.00408e5c
mov edx, dword [0x5d3c84]
mov dword [edx], eax
push 0xffffff
push 0x5a2c9c
push dword [ebp - 0xc]
push 0x5a2c78
lea eax, [ebp - 0xd8]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0xd8]
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
call fcn.005b2b94
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2cb4
call fcn.00404820
jne 0x59f614
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xdc]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0xc]
call fcn.005c4c4c
test al, al
je 0x59f60d
mov eax, dword [ebp - 0xc]
call fcn.00408e5c
mov edx, dword [0x5d3540]
mov dword [edx], eax
push 0xffffff
push 0x5a2ccc
push dword [ebp - 0xc]
push 0x5a2c78
lea eax, [ebp - 0xe0]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0xe0]
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
call fcn.005b2b94
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2ce8
call fcn.00404820
jne 0x59f6ba
mov eax, dword [0x5d3e78]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d33a8]
mov byte [eax], 0
xor ebx, ebx
mov eax, dword [0x5d3768]
mov byte [eax], 0
mov eax, dword [0x5d3e80]
mov byte [eax], 0
mov eax, dword [0x5d38e8]
mov byte [eax], 0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3c0c]
mov dword [edx], eax
lea edx, [ebp - 0xe8]
mov eax, dword [0x5d8440]
test eax, eax
je 0x5a239e
jmp 0x58d890
call fcn.005c8c80
push dword [ebp - 0xe8]
push 0x5a2a4c
lea eax, [ebp - 0xe4]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0xe4]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x5cc]
mov eax, dword [eax + 0x90]
call fcn.00497644
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2d10
call fcn.00404820
jne 0x59f744
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [0x5d346c]
mov byte [eax], 1
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a26a4
call fcn.00404820
jne 0x59f72e
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xec]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0xc]
call fcn.004932b4
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, esi
call fcn.005a446c
xor ebx, ebx
jmp 0x5a2357
mov ecx, 0x5a2450
mov edx, dword [ebp - 0x10]
mov eax, esi
call fcn.005a36d0
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2d24
call fcn.00404820
jne 0x59f7bf
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xf0]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea eax, [esi + 0x880]
mov edx, dword [ebp - 0x10]
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov dword [esi + 0x840], eax
mov dword [esi + 0x844], 0x1f40
mov byte [esi + 0x83c], 1
mov eax, dword [0x5d3eb8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
mov edx, dword [esi + 0x880]
call fcn.00404820
jne 0x5a2357
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2d3c
call fcn.00404820
je 0x59f7e1
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2d50
call fcn.00404820
jne 0x59f8df
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xf4]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [0x5d362c]
mov byte [eax], 0
mov eax, dword [0x5d3bf0]
mov byte [eax], 0
mov eax, dword [0x5d3b98]
mov byte [eax], 0
mov eax, dword [0x5d3bec]
mov byte [eax], 0
mov eax, dword [0x5d3c44]
mov byte [eax], 0
mov edx, dword [ebp - 0xc]
mov eax, 0x5a2d64
call fcn.00404a18
test eax, eax
jle 0x59f8af
push 0
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 0x58], 0x5c
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.00492f78
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x14]
call fcn.004044ac
lea edx, [ebp - 0xf8]
mov eax, dword [ebp - 0x10]
call fcn.00408a54
cmp dword [ebp - 0xf8], 0
je 0x59f8af
push 0x5a2d70
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 0x10]
call fcn.005c875c
push dword [ebp - 0xfc]
push 0x5a2444
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov ecx, 0x5a2d84
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
mov edx, dword [0x5d32e4]
mov edx, dword [edx]
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc]
call fcn.0053453c
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2d9c
call fcn.00404820
jne 0x59fa19
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [0x5d362c]
mov byte [eax], 0
mov eax, dword [0x5d3bf0]
mov byte [eax], 0
mov eax, dword [0x5d3b98]
mov byte [eax], 0
mov eax, dword [0x5d3bec]
mov byte [eax], 0
mov eax, dword [0x5d3c44]
mov byte [eax], 0
mov edx, dword [ebp - 0xc]
mov eax, 0x5a2d64
call fcn.00404a18
test eax, eax
jle 0x59f9c0
push 0
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 0x58], 0x5c
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call fcn.00492f78
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x14]
call fcn.004044ac
lea edx, [ebp - 0x104]
mov eax, dword [ebp - 0x10]
call fcn.00408a54
cmp dword [ebp - 0x104], 0
je 0x59f9c0
push 0x5a2db0
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 0x10]
call fcn.005c875c
push dword [ebp - 0x108]
push 0x5a2444
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
call sub.kernel32.dll_GetTickCount_1
mov dword [esi + 0x840], eax
mov dword [esi + 0x844], 0x4e20
mov byte [esi + 0x83c], 1
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x10c]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a4c5c
mov ecx, 0x5a2dc4
xor edx, edx
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2ddc
call fcn.00404820
jne 0x59fa76
lea ecx, [ebp - 0x110]
lea edx, [ebp - 0xc]
mov eax, dword [esi + 0x818]
call fcn.004936ec
push 0xff0000
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xffffff
mov edx, dword [ebp - 0xc]
call fcn.005b3154
mov eax, dword [0x5d3b60]
mov edx, dword [ebp - 0xc]
call fcn.00404468
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d32d4]
mov dword [edx], eax
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2df0
call fcn.00404820
jne 0x59faba
mov eax, dword [0x5d35bc]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3e20]
mov dword [edx], eax
push 0
push 0
push 0
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x51
call fcn.00533510
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2e04
call fcn.00404820
jne 0x59fc7c
mov ecx, 0x5a2d84
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x114]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
push 0
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 0x58], 0x2c
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0xc]
call fcn.00492f78
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.00408e98
mov dword [ebp - 0x20], eax
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00408e98
mov dword [ebp - 0x24], eax
mov eax, dword [0x5d32c4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
call fcn.005b4fc4
mov edi, eax
test edi, edi
je 0x5a2357
mov eax, dword [0x5d34c0]
cmp edi, dword [eax]
je 0x5a2357
cmp byte [edi + 0x57], 0
jne 0x5a2357
mov eax, dword [0x5d3d3c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d387c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d3e24]
mov dword [eax], edi
mov eax, dword [0x5d3c38]
mov dword [eax], 1
mov eax, dword [0x5d3854]
mov byte [eax], 1
mov bl, 1
push 1
push 1
movzx ecx, word [edi + 0x122]
movzx edx, word [edi + 0x120]
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
call fcn.005ce468
test eax, eax
jle 0x59fc00
mov eax, dword [0x5d3e24]
xor edx, edx
mov dword [eax], edx
push 0xffffff
push 0x5a2e18
push dword [edi + 0x11c]
push 0x5a2e30
lea eax, [ebp - 0x118]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0x118]
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
call fcn.005b2b94
jmp 0x5a2357
xor ebx, ebx
mov eax, dword [0x5d387c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d3e24]
cmp dword [eax], 0
je 0x5a2357
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3e24]
mov edx, dword [edx]
mov dword [edx + 0x4c], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3e24]
mov edx, dword [edx]
mov dword [edx + 0xf8], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3e24]
mov edx, dword [edx]
mov dword [edx + 0xfc], eax
mov eax, dword [0x5d3e24]
mov eax, dword [eax]
mov byte [eax + 0xe], 0
mov eax, dword [0x5d3d3c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d387c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d3c38]
mov dword [eax], 1
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2e44
call fcn.00404820
jne 0x59fdca
xor ebx, ebx
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0xc]
mov eax, dword [esi + 0x818]
call fcn.004934fc
mov eax, dword [ebp - 0x10]
call fcn.004046d4
cmp eax, 2
jle 0x59fccd
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x10]
call fcn.004046d4
mov ecx, eax
sub ecx, 2
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00404934
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00408e98
mov edx, dword [0x5d39ec]
mov dword [edx], eax
mov eax, dword [0x5d32c4]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.005b4df8
mov edi, eax
test edi, edi
je 0x59fdaa
cmp byte [edi + 0x65], 0
je 0x59fdaa
mov eax, dword [0x5d3d3c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d387c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d3e24]
mov dword [eax], edi
mov eax, dword [0x5d3c38]
mov dword [eax], 1
mov eax, dword [0x5d3854]
mov byte [eax], 1
push 1
push 1
movzx ecx, word [edi + 0x122]
movzx edx, word [edi + 0x120]
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
call fcn.005ce468
test eax, eax
jle 0x59fd9a
mov eax, dword [0x5d3e24]
xor edx, edx
mov dword [eax], edx
push 0xffffff
push 0x5a2e54
push dword [ebp - 0xc]
push 0x5a2e64
lea eax, [ebp - 0x11c]
mov edx, 3
call fcn.00404794
mov edx, dword [ebp - 0x11c]
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
call fcn.005b2b94
jmp 0x5a2357
mov bl, 1
mov eax, dword [0x5d387c]
xor edx, edx
mov dword [eax], edx
jmp 0x5a2357
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2e78
call fcn.005b2b94
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a26b4
call fcn.00404820
je 0x59fde8
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2ea0
call fcn.00404820
jne 0x59fe61
mov eax, dword [0x5d39f8]
cmp byte [eax], 0
je 0x59fe15
mov eax, dword [0x5d39f8]
mov byte [eax], 0
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a24ac
call fcn.005b2b94
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x120]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [0x5d3658]
mov byte [eax], 1
mov eax, dword [0x5d328c]
mov byte [eax], 1
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a36d0
test al, al
jne 0x5a2357
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2eb8
call fcn.00404820
jne 0x59ff5b
mov edx, dword [esi + 0x818]
mov eax, 0x5a2438
call fcn.00404a18
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0x818]
call fcn.004046d4
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [esi + 0x818]
call fcn.00404934
lea edx, [ebp - 0x124]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 0xc]
call fcn.004044ac
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5d3504]
mov dword [edx], eax
mov eax, dword [esi + 0x878]
mov edx, 0x5a2eb8
call fcn.00404820
jne 0x59fef9
mov eax, dword [esi + 0x830]
mov edx, dword [ebp - 0xc]
call fcn.00404820
je 0x59ff54
call sub.kernel32.dll_GetTickCount_1
mov dword [esi + 8], eax
lea eax, [esi + 0x830]
mov edx, dword [ebp - 0xc]
call fcn.00404468
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a5870
test al, al
je 0x5a2357
call sub.kernel32.dll_GetTickCount_1
mov dword [esi + 0x840], eax
mov dword [esi + 0x844], 0x1388
mov byte [esi + 0x83c], 1
mov ecx, 0x5a2bd4
xor edx, edx
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
jmp 0x5a2357
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2ec8
call fcn.00404820
jne 0x59ffbb
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x128]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
push 0x5a2edc
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2eec
call fcn.00404820
jne 0x5a008c
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0xc]
mov eax, dword [esi + 0x818]
call fcn.004934fc
mov dword [ebp - 0x20], 1
mov edx, dword [ebp - 0x10]
mov eax, 0x5a2438
call fcn.00404a18
test eax, eax
jle 0x5a002b
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x12c]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
mov eax, dword [ebp - 0x14]
call fcn.005c4c4c
test al, al
je 0x5a002b
mov eax, dword [ebp - 0x14]
call fcn.00408e5c
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a54b8
test al, al
jne 0x5a0075
push 0
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2efc
call fcn.005b2b94
jmp 0x5a2357
mov ecx, 0x5a2bd4
xor edx, edx
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2f14
call fcn.00404820
jne 0x5a010d
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0xc]
mov eax, dword [esi + 0x818]
call fcn.004934fc
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x134]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a53c4
test al, al
jne 0x5a00f6
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2f28
call fcn.005b2b94
jmp 0x5a2357
mov ecx, 0x5a2bd4
xor edx, edx
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2f40
call fcn.00404820
jne 0x5a0146
mov eax, dword [0x5d3278]
mov byte [eax], 1
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2f54
call fcn.005b2b94
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2f68
call fcn.00404820
jne 0x5a017f
mov eax, dword [0x5d3278]
mov byte [eax], 0
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2f7c
call fcn.005b2b94
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2f94
call fcn.00404820
jne 0x5a01f4
lea ecx, [ebp - 0x138]
lea edx, [ebp - 0xc]
mov eax, dword [esi + 0x818]
call fcn.004934fc
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00408e98
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
mov eax, esi
call fcn.005a4ef4
test al, al
jne 0x5a01dd
push 0
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2fa8
call fcn.005b2b94
jmp 0x5a2357
mov ecx, 0x5a2bd4
xor edx, edx
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2fc4
call fcn.00404820
jne 0x5a07b4
cmp dword [esi + 0x830], 0
jne 0x5a0230
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2fd8
call fcn.005b2b94
jmp 0x5a2357
push 0x5a2ff0
push dword [esi + 0x830]
push 0x5a2444
lea eax, [ebp - 0x13c]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x13c]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a2d70
mov eax, dword [0x5d3778]
push dword [eax]
push 0x5a2444
lea eax, [ebp - 0x140]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x140]
mov edx, 1
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0x10]
call fcn.004937f8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a3000
call fcn.00404820
jne 0x5a0365
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x144]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x144]
mov edx, 2
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x148]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x14c]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x14c]
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a07ad
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a303c
call fcn.00404820
jne 0x5a0465
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x150]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x150]
mov edx, 2
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x154]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
mov ecx, 0x5a2bd4
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a3058
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x158]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x158]
mov edx, 4
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov ecx, 0x5a2bd4
mov edx, 5
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x15c]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x15c]
mov edx, 6
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a07ad
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a306c
call fcn.00404820
jne 0x5a0565
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x160]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x160]
mov edx, 2
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x164]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
mov ecx, 0x5a2bd4
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a3088
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x168]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x168]
mov edx, 4
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov ecx, 0x5a2bd4
mov edx, 5
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x16c]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x16c]
mov edx, 6
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a07ad
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a309c
call fcn.00404820
jne 0x5a0665
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x170]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x170]
mov edx, 2
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x174]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
mov ecx, 0x5a2bd4
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a30b4
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x178]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x178]
mov edx, 4
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov ecx, 0x5a2bd4
mov edx, 5
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x17c]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x17c]
mov edx, 6
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a07ad
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a30c4
call fcn.00404820
jne 0x5a0762
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x180]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x180]
mov edx, 2
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x184]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
mov ecx, 0x5a2bd4
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a30dc
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x188]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x188]
mov edx, 4
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov ecx, 0x5a2bd4
mov edx, 5
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x18c]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x18c]
mov edx, 6
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a07ad
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x5a07ad
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], 1
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x190]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x24]
inc edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
inc dword [ebp - 0x24]
dec dword [ebp - 0x2c]
jne 0x5a0773
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a30ec
call fcn.00404820
jne 0x5a0c8b
cmp dword [esi + 0x830], 0
jne 0x5a07f0
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a2fd8
call fcn.005b2b94
jmp 0x5a2357
push 0x5a2ff0
push dword [esi + 0x830]
push 0x5a2444
lea eax, [ebp - 0x194]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x194]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a2db0
mov eax, dword [0x5d3778]
push dword [eax]
push 0x5a2444
lea eax, [ebp - 0x198]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x198]
mov edx, 1
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0x10]
call fcn.004937f8
mov dword [ebp - 0x20], eax
mov ecx, 0x5a30fc
mov edx, 2
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a3000
call fcn.00404820
jne 0x5a093a
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x19c]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x19c]
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1a0]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x1a4]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x1a4]
mov edx, 4
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a0c84
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a30c4
call fcn.00404820
jne 0x5a0a3a
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x1a8]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x1a8]
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1ac]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
mov ecx, 0x5a2bd4
mov edx, 4
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a30dc
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x1b0]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x1b0]
mov edx, 5
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov ecx, 0x5a2bd4
mov edx, 6
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x1b4]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x1b4]
mov edx, 7
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a0c84
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a309c
call fcn.00404820
jne 0x5a0b3a
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x1b8]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x1b8]
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1bc]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
mov ecx, 0x5a2bd4
mov edx, 4
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a30b4
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x1c0]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x1c0]
mov edx, 5
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov ecx, 0x5a2bd4
mov edx, 6
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x1c4]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x1c4]
mov edx, 7
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a0c84
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a303c
call fcn.00404820
jne 0x5a0c37
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x1c8]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x1c8]
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1cc]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
mov ecx, 0x5a2bd4
mov edx, 4
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a3058
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x1d0]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x1d0]
mov edx, 5
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov ecx, 0x5a2bd4
mov edx, 6
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x1d4]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x1d4]
mov edx, 7
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a0c84
mov eax, dword [ebp - 0x20]
test eax, eax
jle 0x5a0c84
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], 1
push 0x5a3010
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x1d8]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x1d8]
mov edx, dword [ebp - 0x24]
add edx, 2
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
inc dword [ebp - 0x24]
dec dword [ebp - 0x2c]
jne 0x5a0c48
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3114
call fcn.00404820
jne 0x5a0ce7
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1dc]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea edx, [ebp - 0x1e0]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x1e0]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a5b00
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a2604
call fcn.00404820
jne 0x5a0d52
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1e4]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0xc]
call fcn.005c4c4c
test al, al
je 0x5a0d4b
mov eax, dword [0x5d3f2c]
mov edx, 0x5a3120
call fcn.00404468
mov eax, dword [ebp - 0xc]
call fcn.00408e5c
imul edx, eax, 0x3e8
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
call fcn.00551474
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3134
call fcn.00404820
jne 0x5a0d78
mov eax, dword [0x5d3f7c]
mov byte [eax], 1
mov eax, dword [0x5d3bc4]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a314c
call fcn.00404820
jne 0x5a0d9e
mov eax, dword [0x5d3f7c]
mov byte [eax], 0
mov eax, dword [0x5d3bc4]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3164
call fcn.00404820
jne 0x5a0dbc
mov eax, dword [0x5d3dc0]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3178
call fcn.00404820
jne 0x5a0dda
mov eax, dword [0x5d3dc0]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a318c
call fcn.00404820
jne 0x5a0df8
mov eax, dword [0x5d3970]
mov byte [eax], 1
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a31a0
call fcn.00404820
jne 0x5a0e16
mov eax, dword [0x5d3970]
mov byte [eax], 0
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a31b4
call fcn.00404820
jne 0x5a0e59
mov eax, dword [0x5d3b98]
cmp byte [eax], 0
jne 0x5a0e52
mov bl, 1
mov byte [esi + 0x83c], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [esi + 0x840], eax
mov dword [esi + 0x844], 0x4e20
jmp 0x5a2357
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a30fc
call fcn.00404820
jne 0x5a0e9c
mov eax, dword [0x5d3bf0]
cmp byte [eax], 0
jne 0x5a0e95
mov bl, 1
mov byte [esi + 0x83c], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [esi + 0x840], eax
mov dword [esi + 0x844], 0x4e20
jmp 0x5a2357
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a31cc
call fcn.00404820
jne 0x5a0f60
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0x10]
call fcn.004937f8
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x1e8]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov eax, dword [ebp - 0x1e8]
call fcn.005c13c0
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
sub ebx, dword [ebp - 0x24]
call fcn.005c1368
mov dword [ebp - 0x20], eax
test ebx, ebx
jle 0x5a0f0d
cmp ebx, dword [ebp - 0x20]
jle 0x5a0f0d
mov ebx, dword [ebp - 0x20]
test ebx, ebx
jle 0x5a0f59
push 0x5a31e0
push dword [ebp - 0xc]
push 0x5a2444
lea edx, [ebp - 0x1f0]
mov eax, ebx
call fcn.00408cf0
push dword [ebp - 0x1f0]
push 0x5a31f4
lea eax, [ebp - 0x1ec]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x1ec]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3200
call fcn.00404820
jne 0x5a1024
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0x10]
call fcn.004937f8
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x1f4]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov eax, dword [ebp - 0x1f4]
call fcn.005c13c0
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
sub ebx, dword [ebp - 0x24]
call fcn.005c1368
mov dword [ebp - 0x20], eax
test ebx, ebx
jle 0x5a0fd1
cmp ebx, dword [ebp - 0x20]
jle 0x5a0fd1
mov ebx, dword [ebp - 0x20]
test ebx, ebx
jle 0x5a101d
push 0x5a3210
push dword [ebp - 0xc]
push 0x5a2444
lea edx, [ebp - 0x1fc]
mov eax, ebx
call fcn.00408cf0
push dword [ebp - 0x1fc]
push 0x5a31f4
lea eax, [ebp - 0x1f8]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x1f8]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3220
call fcn.00404820
jne 0x5a1080
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x200]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea edx, [ebp - 0x204]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x204]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a6354
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3230
call fcn.00404820
jne 0x5a10dc
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x208]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea edx, [ebp - 0x20c]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x20c]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005aa638
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3240
call fcn.00404820
jne 0x5a11b3
xor ebx, ebx
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x210]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
push 0x5a2ff0
push dword [esi + 0x830]
push 0x5a2444
lea eax, [ebp - 0x214]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x214]
xor edx, edx
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
push 0x5a2d70
mov eax, dword [0x5d31b4]
push dword [eax]
push 0x5a2444
lea eax, [ebp - 0x218]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x218]
mov edx, 1
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
push 0x5a3254
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x21c]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x21c]
mov edx, 2
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3260
call fcn.00404820
jne 0x5a129f
xor ebx, ebx
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x220]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
push 0x5a2ff0
push dword [esi + 0x830]
push 0x5a2444
lea eax, [ebp - 0x224]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x224]
xor edx, edx
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
push 0x5a2db0
mov eax, dword [0x5d31b4]
push dword [eax]
push 0x5a2444
lea eax, [ebp - 0x228]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x228]
mov edx, 1
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
mov ecx, 0x5a3270
mov edx, 2
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
push 0x5a3254
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x22c]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x22c]
mov edx, 3
mov eax, dword [esi + 0x860]
mov edi, dword [eax]
call dword [edi + 0x60]
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3270
call fcn.00404820
jne 0x5a12e2
mov eax, dword [0x5d362c]
cmp byte [eax], 0
jne 0x5a12db
mov bl, 1
mov byte [esi + 0x83c], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [esi + 0x840], eax
mov dword [esi + 0x844], 0x4e20
jmp 0x5a2357
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3288
call fcn.00404820
jne 0x5a133e
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x230]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a5ce8
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3294
call fcn.00404820
jne 0x5a13c6
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a32a4
call fcn.00404820
jne 0x5a13c6
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea edx, [ebp - 0x238]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x238]
lea eax, [ebp - 0xc]
call fcn.004044ac
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x23c]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a5eb4
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a32b0
call fcn.00404820
jne 0x5a1406
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x240]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a5e50
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a32c0
call fcn.00404820
je 0x5a1428
mov eax, dword [ebp - 0x18]
mov edx, 0x5a32d4
call fcn.00404820
jne 0x5a1598
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
push 0x5a2ff0
push dword [esi + 0x830]
push 0x5a2444
lea eax, [ebp - 0x244]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x244]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov eax, dword [ebp - 0x18]
mov edx, 0x5a32c0
call fcn.00404820
jne 0x5a14c0
push 0x5a2d70
mov eax, dword [0x5d3734]
push dword [eax]
push 0x5a2444
lea eax, [ebp - 0x248]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x248]
mov edx, 1
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a14f7
push 0x5a2d70
mov eax, dword [0x5d3e74]
push dword [eax]
push 0x5a2444
lea eax, [ebp - 0x24c]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x24c]
mov edx, 1
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a32e8
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x250]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x250]
mov edx, 2
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a3000
call fcn.00404820
jne 0x5a1591
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x254]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x258]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x258]
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a32f4
call fcn.00404820
je 0x5a15ba
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3304
call fcn.00404820
jne 0x5a173f
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
push 0x5a2ff0
push dword [esi + 0x830]
push 0x5a2444
lea eax, [ebp - 0x25c]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x25c]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov eax, dword [ebp - 0x18]
mov edx, 0x5a32f4
call fcn.00404820
jne 0x5a1652
push 0x5a2db0
mov eax, dword [0x5d3734]
push dword [eax]
push 0x5a2444
lea eax, [ebp - 0x260]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x260]
mov edx, 1
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a1689
push 0x5a2db0
mov eax, dword [0x5d3e74]
push dword [eax]
push 0x5a2444
lea eax, [ebp - 0x264]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x264]
mov edx, 1
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov ecx, 0x5a31b4
mov edx, 2
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
push 0x5a32e8
push dword [ebp - 0xc]
push 0x5a2444
lea eax, [ebp - 0x268]
mov edx, 3
call fcn.00404794
mov ecx, dword [ebp - 0x268]
mov edx, 3
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a3000
call fcn.00404820
jne 0x5a1738
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x26c]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
push 0x5a301c
push dword [ebp - 0xc]
push 0x5a302c
push dword [ebp - 0x14]
push 0x5a2444
lea eax, [ebp - 0x270]
mov edx, 5
call fcn.00404794
mov ecx, dword [ebp - 0x270]
mov edx, 4
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3314
call fcn.00404820
jne 0x5a179b
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x274]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea edx, [ebp - 0x278]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x278]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a5f88
mov ebx, eax
jmp 0x5a2357
mov edx, dword [ebp - 0x18]
mov eax, 0x5a3320
call fcn.00404a18
dec eax
jne 0x5a183f
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esi + 0x818]
call fcn.004046d4
mov ecx, eax
sub ecx, 4
mov edx, 5
mov eax, dword [esi + 0x818]
call fcn.00404934
mov byte [ebp - 0x26], 1
mov edx, dword [ebp - 0x10]
mov eax, 0x5a3330
call fcn.00404a18
test eax, eax
jle 0x5a17ec
mov byte [ebp - 0x26], 0
cmp byte [ebp - 0x26], 0
je 0x5a1807
mov edx, dword [ebp - 0x10]
mov eax, 0x5a3340
call fcn.00404a18
test eax, eax
jle 0x5a1807
mov byte [ebp - 0x26], 0
cmp byte [ebp - 0x26], 0
je 0x5a1829
lea edx, [ebp - 0x27c]
mov eax, dword [ebp - 0x10]
call fcn.005c875c
mov edx, dword [ebp - 0x27c]
lea eax, [ebp - 0x10]
call fcn.004044ac
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, esi
call fcn.005a65f4
mov ebx, eax
jmp 0x5a2357
mov edx, dword [ebp - 0x18]
mov eax, 0x5a3350
call fcn.00404a18
dec eax
jne 0x5a18a5
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esi + 0x818]
call fcn.004046d4
mov ecx, eax
sub ecx, 2
mov edx, 3
mov eax, dword [esi + 0x818]
call fcn.00404934
lea edx, [ebp - 0x280]
mov eax, dword [ebp - 0x10]
call fcn.005c875c
mov edx, dword [ebp - 0x280]
lea eax, [ebp - 0x10]
call fcn.004044ac
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, esi
call fcn.005a66d4
mov ebx, eax
jmp 0x5a2357
mov edx, dword [ebp - 0x18]
mov eax, 0x5a335c
call fcn.00404a18
dec eax
jne 0x5a19b1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esi + 0x818]
call fcn.004046d4
mov ecx, eax
sub ecx, 4
mov edx, 5
mov eax, dword [esi + 0x818]
call fcn.00404934
cmp byte [esi + 0x820], 0
je 0x5a19aa
mov edx, dword [ebp - 0xc]
mov eax, 0x5a336c
call fcn.00404a18
dec eax
jne 0x5a1987
mov edx, dword [ebp - 0xc]
mov eax, 0x5a2414
call fcn.00404a18
test eax, eax
jg 0x5a1920
mov edx, dword [ebp - 0xc]
mov eax, 0x5a2420
call fcn.00404a18
test eax, eax
jle 0x5a193e
lea ecx, [ebp - 0x284]
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a80c8
mov edx, dword [ebp - 0x284]
lea eax, [ebp - 0xc]
call fcn.004044ac
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x288]
push eax
mov ecx, 0x5a24fc
mov edx, 0x5a2508
mov eax, dword [ebp - 0xc]
call fcn.004932b4
cmp byte [ebp + 8], 0
je 0x5a1974
mov ecx, 2
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a7498
mov ebx, eax
jmp 0x5a1999
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a7498
mov ebx, eax
jmp 0x5a1999
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
mov cl, 1
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a9dbc
jmp 0x5a2357
xor ebx, ebx
jmp 0x5a2357
mov edx, dword [ebp - 0x18]
mov eax, 0x5a337c
call fcn.00404a18
dec eax
jne 0x5a1a11
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esi + 0x818]
call fcn.004046d4
mov ecx, eax
sub ecx, 4
mov edx, 5
mov eax, dword [esi + 0x818]
call fcn.00404934
cmp byte [esi + 0x820], 0
jne 0x5a1a0a
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
mov cl, 1
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a9dbc
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a338c
call fcn.00404820
jne 0x5a1a33
mov edx, 1
mov eax, esi
call fcn.005a6a08
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a339c
call fcn.00404820
jne 0x5a1a71
xor ebx, ebx
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x28c]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0xc]
call fcn.005c1c6c
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a33b0
call fcn.00404820
jne 0x5a1aaf
xor ebx, ebx
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x290]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0xc]
call fcn.005c1d08
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a33c4
call fcn.00404820
jne 0x5a1aca
xor ebx, ebx
call fcn.005c1c3c
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a33dc
call fcn.00404820
jne 0x5a1b13
xor eax, eax
mov dword [esi + 0x82c], eax
mov byte [esi + 0x895], 1
lea eax, [esi + 0x888]
call fcn.00404414
xor eax, eax
mov dword [esi + 0x874], eax
mov dl, 1
mov eax, esi
call fcn.005aab08
xor ebx, ebx
mov eax, dword [0x5d340c]
mov byte [eax], 1
jmp 0x58d870
mov eax, dword [ebp - 0x18]
mov edx, 0x5a33f4
call fcn.00404820
jne 0x5a1b57
mov byte [esi + 0x895], 0
lea eax, [esi + 0x888]
call fcn.00404414
xor edx, edx
mov eax, esi
call fcn.005aab08
mov eax, dword [esi + 0x868]
mov edx, dword [eax]
call dword [edx + 0x44]
xor eax, eax
mov dword [esi + 0x874], eax
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a340c
call fcn.00404820
jne 0x5a1bc1
mov eax, dword [ebp - 0x1c]
mov edx, 0x5a341c
call fcn.00404820
jne 0x5a1bc1
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x294]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea eax, [esi + 0x880]
mov edx, dword [ebp - 0xc]
call fcn.00404468
mov eax, dword [ebp - 0xc]
call fcn.00408e5c
mov dword [ebp - 0x20], eax
call sub.kernel32.dll_GetTickCount_1
add eax, dword [ebp - 0x20]
mov dword [esi + 0x898], eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a342c
call fcn.00404820
jne 0x5a1c42
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x298]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea edx, [ebp - 0x29c]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x29c]
lea eax, [ebp - 0xc]
call fcn.004044ac
lea eax, [esi + 0x880]
mov edx, dword [ebp - 0xc]
call fcn.00404468
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a77dc
mov ecx, 0x5a2bd4
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a343c
call fcn.00404820
jne 0x5a1cee
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x2a0]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [ebp - 0x10]
call fcn.004932b4
push 0
lea eax, [ebp - 0x2a4]
push eax
mov byte [ebp - 0x58], 0x2c
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x14]
call fcn.00492f78
mov edx, dword [ebp - 0x2a4]
lea eax, [ebp - 0x14]
call fcn.004044ac
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.00408e98
mov dword [ebp - 0x20], eax
or edx, 0xffffffff
mov eax, dword [ebp - 0x14]
call fcn.00408e98
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
push 1
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a7ab0
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a3450
call fcn.00404820
jne 0x5a1d8f
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x2a8]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov eax, dword [ebp - 0xc]
call fcn.005c4c4c
test al, al
je 0x5a1d88
mov eax, dword [ebp - 0xc]
call fcn.00408e5c
mov dword [ebp - 0x20], eax
mov eax, dword [0x5d34c0]
mov eax, dword [eax]
mov eax, dword [eax + 0xcc]
cmp eax, dword [ebp - 0x20]
jle 0x5a1d6d
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.00534d80
mov ecx, 0x5a2bd4
xor edx, edx
mov eax, dword [esi + 0x860]
mov ebx, dword [eax]
call dword [ebx + 0x60]
jmp 0x5a1d88
push 0xffffff
mov eax, dword [0x5d3f60]
mov eax, dword [eax]
mov ecx, 0xff
mov edx, 0x5a3464
call fcn.005b2b94
xor ebx, ebx
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a347c
call fcn.00404820
jne 0x5a1deb
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x2ac]
push eax
mov ecx, 0x5a2444
mov edx, 0x5a2438
mov eax, dword [esi + 0x818]
call fcn.004932b4
lea edx, [ebp - 0x2b0]
mov eax, dword [ebp - 0xc]
call fcn.005c875c
mov edx, dword [ebp - 0x2b0]
lea eax, [ebp - 0xc]
call fcn.004044ac
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a86a4
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a348c
call fcn.00404820
jne 0x5a1e52
inc dword [esi + 0x810]
mov eax, dword [esi + 0x810]
mov edx, dword [esi + 0x834]
mov dword [esi + eax*4 + 0x10], edx
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x2b4]
push eax
mov ecx, 0x5a24fc
mov edx, 0x5a2508
mov eax, dword [esi + 0x818]
call fcn.004932b4
mov al, byte [esi + 0x820]
mov byte [esi + 0x821], al
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.005a7498
mov ebx, eax
jmp 0x5a2357
mov eax, dword [ebp - 0x18]
mov edx, 0x5a349c
call fcn.00404820
jne 0x5a1ee9
test bl, bl
jne 0x5a2368
cmp byte [ebp - 5], 0
je 0x5a2368
mov byte [esi + 0x894], 1
mov eax, dword [esi + 0x860]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x5a239e
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6d8]
cmp byte [eax + 0x40], 0
jne 0x5a239e
mov eax, dword [0x5d37a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x6d8]
mov dl, 1
call fcn.004381ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5a2402
lea eax, [ebp - 0x2c8]
mov edx, 0x64
call fcn.00404438
lea eax, [ebp - 0x138]
mov edx, 0x38
call fcn.00404438
lea eax, [ebp - 0x54]
mov edx, 4
call fcn.00404438
lea eax, [ebp - 0x38]
mov edx, 3
call fcn.00404438
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.00404438
lea eax, [ebp - 4]
call fcn.00404414
ret