Function at 0x50a580
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x32
push 0
push 0
dec ecx
jne 0x50a588
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.004054b0
xor eax, eax
push ebp
push 0x50e6ef
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp byte [eax], 0x2b
jne 0x50a7c3
mov eax, dword [ebp - 8]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x50a5d0
mov eax, dword [ebp - 0x5c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x5c]
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00405528
push 0
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 0xa8], 0x2f
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.004671b8
mov edx, dword [ebp - 0xa4]
lea eax, [ebp - 0x1c]
call fcn.004050c8
mov eax, dword [ebp - 0x18]
mov edx, 0x50e704
call fcn.00405458
jne 0x50a62a
mov byte [0x5692a0], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x50e710
call fcn.00405458
jne 0x50a640
mov byte [0x5692a1], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x50e71c
call fcn.00405458
jne 0x50a656
mov byte [0x5692a1], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x50e72c
call fcn.00405458
jne 0x50a66c
mov byte [0x5692a2], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x50e738
call fcn.00405458
jne 0x50a682
mov byte [0x5692a2], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x50e748
call fcn.00405458
jne 0x50a698
mov byte [0x5692a5], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x50e758
call fcn.00405458
jne 0x50a6bc
mov byte [0x5692a5], 1
mov byte [0x5692a6], 0
mov byte [0x5692a7], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x50e764
call fcn.00405458
jne 0x50a6d2
mov byte [0x5692a6], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x50e774
call fcn.00405458
jne 0x50a6fd
mov byte [0x5692a6], 0
mov byte [0x5692a7], 0
mov byte [0x5692a5], 0
mov byte [0x5692a6], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x50e780
call fcn.00405458
jne 0x50a713
mov byte [0x5692a7], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x50e790
call fcn.00405458
jne 0x50a73e
mov byte [0x5692a6], 0
mov byte [0x5692a7], 0
mov byte [0x5692a5], 0
mov byte [0x5692a7], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x50e79c
call fcn.00405458
jne 0x50a75e
mov byte [0x5692a3], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569154], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x50e7a8
call fcn.00405458
jne 0x50a774
mov byte [0x5692a3], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x50e7b8
call fcn.00405458
jne 0x50a793
mov eax, dword [ebp - 4]
mov byte [eax + 0x544], 0
inc dword [0x569270]
mov eax, dword [ebp - 0x18]
mov edx, 0x50e7c8
call fcn.00405458
jne case.default.0x50a91e
mov eax, dword [ebp - 4]
call fcn.00509bd0
mov eax, dword [ebp - 4]
mov byte [eax + 0x544], 0
inc dword [0x569270]
jmp case.default.0x50a91e
mov eax, dword [ebp - 8]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x50a7da
mov eax, dword [ebp - 0x60]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x10
jge 0x50a83c
mov eax, dword [ebp - 8]
cmp byte [eax], 0x3d
jne case.default.0x50a91e
mov eax, dword [ebp - 8]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x50a803
mov eax, dword [ebp - 0x64]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x64]
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00405528
mov eax, dword [ebp - 0x1c]
mov edx, 0x50e7d8
call fcn.00405458
jne case.default.0x50a91e
mov eax, dword [0x567470]
mov byte [eax + 0x144], 1
jmp case.default.0x50a91e
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405528
mov eax, dword [ebp - 8]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x50a869
mov eax, dword [ebp - 0x68]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x68]
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 8]
call fcn.00405528
lea edx, [ebp - 0x90]
mov eax, dword [ebp - 0xc]
call fcn.004fb44c
cmp dword [0x567470], 0
jne 0x50b0e8
movzx eax, word [ebp - 0x8c]
cmp eax, 0x210
jg 0x50a93d
je 0x50b0e8
cmp eax, 0x209
jg 0x50a910
je 0x50af50
cmp eax, 0x1f9
jg 0x50a8f0
je 0x50aacf
add eax, 0xffffffce
sub eax, 2
jb 0x50b0e8
sub eax, 0x1c3
je 0x50ab6b
dec eax
je 0x50aab2
jmp case.default.0x50a91e
sub eax, 0x1fa
je 0x50afe4
dec eax
je 0x50b001
sub eax, 0xd
je 0x50af06
jmp case.default.0x50a91e
add eax, 0xfffffdf6
cmp eax, 5
ja case.default.0x50a91e
jmp dword [eax*4 + 0x50a925]
cmp eax, 0x385
jg 0x50a98e
je 0x50a9d2
cmp eax, 0x214
jg 0x50a975
je 0x50ac54
sub eax, 0x211
je 0x50ac9e
dec eax
je 0x50aef6
dec eax
je 0x50ac44
jmp case.default.0x50a91e
sub eax, 0x215
je 0x50ac79
sub eax, 0x7d
je 0x50b0e8
jmp case.default.0x50a91e
cmp eax, 0xafa
jg 0x50a9bb
je 0x50ac9e
sub eax, 0x38e
je 0x50aa9b
sub eax, 0x28
je 0x50aa3c
dec eax
je 0x50aa63
jmp case.default.0x50a91e
sub eax, 0x2710
je 0x50b0c1
dec eax
je 0x50b0e8
jmp case.default.0x50a91e
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
lea ecx, [ebp - 0xac]
mov edx, 0x50e7e4
mov eax, dword [0x56d1b0]
call fcn.004ae858
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x58]
call fcn.00405458
jne 0x50aa13
mov dl, 1
mov eax, dword [0x5673f8]
call fcn.004aebec
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e7f8
call fcn.004b94f8
mov eax, dword [0x529f9c]
mov eax, dword [eax]
call fcn.00465090
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e818
call fcn.004b94f8
mov eax, dword [0x5673f4]
call fcn.00460f78
jmp case.default.0x50a91e
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x50aa7a
mov eax, dword [ebp - 0x6c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xf
jle 0x50b0e8
mov edx, 0x581958
mov ecx, 0xf
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
jmp 0x50b0e8
mov ecx, dword [ebp - 0x10]
mov dx, word [ebp - 0x8a]
mov eax, dword [ebp - 4]
call fcn.0050a000
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e844
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [ebp - 0x90]
sub eax, 0xfffffffe
je 0x50ab31
sub eax, 2
jne 0x50ab4e
push 0x50e8a4
mov eax, dword [ebp - 4]
push dword [eax + 0x4fc]
push 0x50e8b0
push 0x50e8d8
lea eax, [ebp - 0xb0]
mov edx, 4
call fcn.004053c4
mov edx, dword [ebp - 0xb0]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
call fcn.004b94f8
xor edx, edx
mov eax, dword [0x567400]
call fcn.004e03d0
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e8f8
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e918
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [ebp - 0x90]
add eax, 5
cmp eax, 4
ja case.default.0x50ab7d
jmp dword [eax*4 + 0x50ab84]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e938
call fcn.004b94f8
jmp 0x50ac35
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e94c
call fcn.004b94f8
jmp 0x50ac35
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e984
call fcn.004b94f8
jmp 0x50ac35
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e9b0
call fcn.004b94f8
jmp 0x50ac35
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e9c4
call fcn.004b94f8
jmp 0x50ac35
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e9d8
call fcn.004b94f8
mov eax, dword [0x567400]
call fcn.004e0818
jmp 0x50b0e8
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0050f7dc
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50e9f4
call fcn.004b94f8
mov eax, dword [ebp - 4]
call fcn.0050f7a8
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ea08
call fcn.004b94f8
mov eax, dword [ebp - 4]
call fcn.0050f7a8
jmp 0x50b0e8
mov ax, word [ebp - 0x90]
mov word [0x569260], ax
mov eax, dword [ebp - 0x90]
shr eax, 0x10
mov word [0x569262], ax
mov ax, word [ebp - 0x8a]
mov word [0x569264], ax
mov ax, word [ebp - 0x88]
mov word [0x569266], ax
cmp word [0x569260], 0
jbe 0x50ad67
cmp word [0x569260], 1
jne 0x50ad09
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ea1c
call fcn.004b94f8
jmp 0x50aeb4
cmp word [0x569260], 3
ja 0x50aeb4
push 0x50ea48
lea edx, [ebp - 0xb8]
movzx eax, word [0x569260]
call fcn.004099b8
push dword [ebp - 0xb8]
push 0x50ea60
lea eax, [ebp - 0xb4]
mov edx, 3
call fcn.004053c4
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
call fcn.004b94f8
jmp 0x50aeb4
cmp word [0x569264], 0
jbe 0x50adfa
cmp word [0x569264], 1
jne 0x50ad9c
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ea84
call fcn.004b94f8
jmp 0x50aeb4
cmp word [0x569264], 3
ja 0x50aeb4
push 0x50eaac
lea edx, [ebp - 0xc0]
movzx eax, word [0x569264]
call fcn.004099b8
push dword [ebp - 0xc0]
push 0x50eacc
lea eax, [ebp - 0xbc]
mov edx, 3
call fcn.004053c4
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
call fcn.004b94f8
jmp 0x50aeb4
cmp word [0x569266], 0
jbe 0x50ae5f
cmp word [0x569266], 0x64
ja 0x50aeb4
push 0x50eae0
lea edx, [ebp - 0xc8]
movzx eax, word [0x569266]
call fcn.004099b8
push dword [ebp - 0xc8]
push 0x50eb00
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.004053c4
mov edx, dword [ebp - 0xc4]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
call fcn.004b94f8
jmp 0x50aeb4
cmp word [0x569262], 0
jbe 0x50aeb4
push 0x50eb18
lea edx, [ebp - 0xd0]
movzx eax, word [0x569262]
call fcn.004099b8
push dword [ebp - 0xd0]
push 0x50eb00
lea eax, [ebp - 0xcc]
mov edx, 3
call fcn.004053c4
mov edx, dword [ebp - 0xcc]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
call fcn.004b94f8
cmp word [ebp - 0x8c], 0xafa
jne 0x50aed7
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50eb30
call fcn.004b94f8
mov eax, dword [0x567400]
cmp byte [eax + 0x12c], 0
jne 0x50b0e8
mov eax, dword [ebp - 4]
call fcn.0050f7a8
jmp 0x50b0e8
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0050f558
jmp 0x50b0e8
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0050f848
jmp 0x50b0e8
mov byte [0x569174], 0
mov byte [0x56916d], 0
mov byte [0x56916c], 0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50eb8c
call fcn.004b94f8
mov eax, dword [ebp - 4]
call fcn.00460f78
jmp 0x50b0e8
mov eax, dword [ebp - 4]
call fcn.00507a90
jmp 0x50b0e8
mov eax, dword [ebp - 0x90]
sub eax, 2
je 0x50af70
dec eax
je 0x50af8d
dec eax
je 0x50afaa
jmp 0x50afc7
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50eba4
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ebc0
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ebc0
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ebdc
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ebf8
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [ebp - 0x90]
sub eax, 0xfffffffe
je 0x50b02c
dec eax
jne 0x50b049
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ec10
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ec34
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ec58
call fcn.004b94f8
jmp 0x50b0e8
mov eax, dword [ebp - 4]
call fcn.00507a90
jmp 0x50b0e8
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ec7c
call fcn.004b94f8
jmp 0x50b0e8
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0050fa6c
jmp case.default.0x50a91e
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50eca8
call fcn.004b94f8
mov eax, dword [0x5673f4]
call fcn.00460f78
jmp case.default.0x50a91e
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ecb8
call fcn.004b94f8
mov eax, dword [0x5673f4]
call fcn.00460f78
jmp case.default.0x50a91e
cmp byte [0x56917c], 0
je 0x50b164
cmp word [ebp - 0x8c], 0x27a
jne case.default.0x50a91e
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x51c], edx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 0x520], edx
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x524], edx
lea edx, [ebp - 0xd4]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 4]
add eax, 0x528
call fcn.00405084
mov byte [0x56917d], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3cc]
mov dl, 1
call fcn.00436248
jmp case.default.0x50a91e
movzx eax, word [ebp - 0x8c]
cmp eax, 0x295
jg 0x50b43c
je 0x50dc03
cmp eax, 0xd2
jg 0x50b2e7
je 0x50d5a4
cmp eax, 0x21
jg 0x50b21f
je 0x50c46e
add eax, 0xfffffffb
cmp eax, 0x1b
ja case.0x50e169.0
jmp dword [eax*4 + 0x50b1af]
cmp eax, 0x33
jg 0x50b281
je 0x50b7a9
add eax, 0xffffffde
cmp eax, 0x10
ja case.0x50e169.0
jmp dword [eax*4 + 0x50b23d]
cmp eax, 0x64
jge 0x50b2a9
sub eax, 0x34
je 0x50c506
dec eax
je 0x50c804
dec eax
je 0x50b9a9
dec eax
je 0x50d42f
jmp case.0x50e169.0
cmp eax, 0xc9
jg 0x50b2d0
je 0x50d181
add eax, 0xffffff9c
sub eax, 5
jb 0x50ccc0
sub eax, 0x5f
je 0x50d171
jmp case.0x50e169.0
sub eax, 0xca
je 0x50d1a1
dec eax
je case.0x50b45b.709
jmp case.0x50e169.0
cmp eax, 0x280
jg 0x50b3db
je 0x50d5eb
cmp eax, 0x26b
jg 0x50b376
je 0x50d322
cmp eax, 0x264
jg 0x50b351
je 0x50d26d
cmp eax, 0x259
jg 0x50b33a
je 0x50d1e5
sub eax, 0xd3
je 0x50d5be
sub eax, 0x185
je 0x50d1c1
jmp case.0x50e169.0
sub eax, 0x262
je 0x50d20c
dec eax
je 0x50d24b
jmp case.0x50e169.0
sub eax, 0x265
je 0x50d28a
dec eax
je 0x50d29e
dec eax
je 0x50d2bb
dec eax
je 0x50d30c
jmp case.0x50e169.0
add eax, 0xfffffd94
cmp eax, 0x13
ja case.0x50e169.0
jmp dword [eax*4 + 0x50b38b]
add eax, 0xfffffd7e
cmp eax, 0x12
ja case.0x50e169.0
jmp dword [eax*4 + 0x50b3f0]
cmp eax, 0x2f4
jg 0x50b5d6
je 0x50de3f
add eax, 0xfffffd6a
cmp eax, 0x5c
ja case.0x50e169.0
jmp dword [eax*4 + 0x50b462]
cmp eax, 0x385
jg 0x50b6d8
je 0x50cddb
add eax, 0xfffffd0b
cmp eax, 0x36
ja case.0x50e169.0
jmp dword [eax*4 + 0x50b5fc]
cmp eax, 0x271a
jg 0x50b74a
je 0x50c02d
cmp eax, 0x4b0
jg 0x50b719
je 0x50e645
sub eax, 0x44c
je 0x50cb24
dec eax
je 0x50cbb3
sub eax, 3
je 0x50cab0
dec eax
je 0x50e631
jmp case.0x50e169.0
sub eax, 0x18f7
je 0x50d5d8
sub eax, 0xaa
je 0x50b9cf
sub eax, 0x258
je case.0x50b1a8.30
sub eax, 0xb18
je 0x50b944
jmp case.0x50e169.0
cmp eax, 0x2737
jg 0x50b77c
je 0x50db6a
sub eax, 0x271f
je 0x50cbdf
dec eax
je 0x50cc80
dec eax
je case.0x50b1a8.30
dec eax
je 0x50d191
jmp case.0x50e169.0
sub eax, 0x274f
je 0x50e5b6
dec eax
je 0x50e5ce
sub eax, 0x3e5
je 0x50b954
sub eax, 0x22ed
je 0x50dba8
jmp case.0x50e169.0
mov eax, 0x56745c
call fcn.00405030
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
push 0
push 0
mov eax, dword [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x33
mov eax, dword [0x567408]
call fcn.004ee8a0
xor ecx, ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.004fdee8
jmp case.0x50e169.0
xor eax, eax
mov dword [0x568ee8], eax
xor eax, eax
mov dword [0x568eec], eax
lea edx, [ebp - 0xa0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x9c]
push eax
push 0
mov ecx, dword [ebp - 0x90]
mov edx, 0x32
mov eax, dword [0x567408]
call fcn.004ee8a0
mov dl, 7
mov eax, dword [0x5673f8]
call fcn.004aebec
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x51
mov eax, dword [ebp - 4]
call fcn.00507364
cmp byte [ebp - 0x98], 1
jne 0x50b892
mov byte [0x56921c], 1
jmp 0x50b899
mov byte [0x56921c], 0
mov byte [0x568ee4], 0
cmp word [0x569260], 0
jbe 0x50b8c8
push 0xffffff
mov ecx, 0x8000
mov edx, 0x50ed00
mov eax, dword [0x5673f8]
call fcn.004af04c
jmp case.0x50e169.0
cmp word [0x569264], 0
jbe 0x50b8f0
push 0xffffff
mov ecx, 0x8000
mov edx, 0x50ed28
mov eax, dword [0x5673f8]
call fcn.004af04c
jmp case.0x50e169.0
cmp word [0x569266], 0
jbe 0x50b918
push 0xffffff
mov ecx, 0x8000
mov edx, 0x50ed50
mov eax, dword [0x5673f8]
call fcn.004af04c
jmp case.0x50e169.0
cmp word [0x569262], 0
jbe case.0x50e169.0
push 0xffffff
mov ecx, 0x8000
mov edx, 0x50ed74
mov eax, dword [0x5673f8]
call fcn.004af04c
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0050fc14
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.0050a260
jmp case.0x50e169.0
mov eax, dword [ebp - 0x90]
mov dword [0x569058], eax
test byte [0x569058], 4
je 0x50b98f
xor ecx, ecx
mov edx, 0x50ed9c
mov eax, dword [ebp - 4]
call fcn.004fdee8
jmp case.0x50e169.0
mov eax, dword [0x567468]
mov edx, dword [eax + 0x2ae90]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.004fdee8
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0050fe44
jmp case.0x50e169.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.0050fee0
jmp case.0x50e169.0
movzx eax, word [ebp - 0x8a]
mov dword [0x56905c], eax
jmp case.0x50e169.0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x50b9f7
mov eax, dword [ebp - 0x70]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
push 0x412aaaab
call fcn.00468050
cmp eax, dword [ebp - 0x70]
jge 0x50ba64
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x50ba1d
mov eax, dword [ebp - 0x74]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x14]
push eax
push 0x412aaaab
call fcn.00468050
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x10]
call fcn.00405528
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004fb500
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0xa8], 0x2f
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004671b8
jmp 0x50ba6c
lea eax, [ebp - 0x1c]
call fcn.00405030
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x90]
mov edx, 0xa
mov eax, dword [0x567408]
call fcn.004ee8a0
cmp dword [ebp - 0x1c], 0
je case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
push 0
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 0xa8], 0x5c
lea ecx, [ebp - 0xa8]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x44]
mov eax, dword [ebp - 0x1c]
call fcn.004671b8
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x4c]
add eax, 0x40
call fcn.00405084
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x40]
mov eax, 0x50edb0
call fcn.0040560c
test eax, eax
jle 0x50bb2f
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0xff00ff
jmp 0x50bb39
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.00516830
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00466f28
call fcn.004fe194
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x4c], eax
jmp case.0x50e169.0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x50bb75
mov eax, dword [ebp - 0x78]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
push 0x412aaaab
call fcn.00468050
cmp eax, dword [ebp - 0x78]
jge 0x50bbe2
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x50bb9b
mov eax, dword [ebp - 0x7c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x14]
push eax
push 0x412aaaab
call fcn.00468050
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x10]
call fcn.00405528
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004fb500
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0xa8], 0x2f
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004671b8
jmp 0x50bbea
lea eax, [ebp - 0x1c]
call fcn.00405030
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x90]
mov edx, 9
mov eax, dword [0x567408]
call fcn.004ee8a0
cmp dword [ebp - 0x1c], 0
je case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
push 0
lea eax, [ebp - 0xdc]
push eax
mov byte [ebp - 0xa8], 0x5c
lea ecx, [ebp - 0xa8]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x44]
mov eax, dword [ebp - 0x1c]
call fcn.004671b8
mov edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x4c]
add eax, 0x40
call fcn.00405084
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x40]
mov eax, 0x50edb0
call fcn.0040560c
test eax, eax
jle 0x50bcad
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0xff00ff
jmp 0x50bcb7
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.00516830
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00466f28
call fcn.004fe194
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x4c], eax
jmp case.0x50e169.0
mov eax, dword [0x567470]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x90]
je case.0x50e169.0
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
push 0
push 0
push 0
push 0
movzx edx, word [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ee8a0
jmp case.0x50e169.0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x50bd3b
mov eax, dword [ebp - 0x80]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
push 0x412aaaab
call fcn.00468050
cmp eax, dword [ebp - 0x80]
jge 0x50bdb7
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x50bd6d
mov eax, dword [ebp - 0x84]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x14]
push eax
push 0x412aaaab
call fcn.00468050
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x10]
call fcn.00405528
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004fb500
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0xa8], 0x2f
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004671b8
jmp 0x50bdbf
lea eax, [ebp - 0x1c]
call fcn.00405030
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
mov eax, dword [0x567470]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x90]
je 0x50be0e
mov ax, word [ebp - 0x88]
push eax
mov ax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov cx, word [ebp - 0x8a]
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004edfa0
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
movzx edx, word [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ee8a0
cmp dword [ebp - 0x1c], 0
je case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
push 0
lea eax, [ebp - 0xe0]
push eax
mov byte [ebp - 0xa8], 0x5c
lea ecx, [ebp - 0xa8]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x44]
mov eax, dword [ebp - 0x1c]
call fcn.004671b8
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x4c]
add eax, 0x40
call fcn.00405084
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x40]
mov eax, 0x50edb0
call fcn.0040560c
test eax, eax
jle 0x50bec3
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0xff00ff
jmp 0x50becd
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.00516830
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00466f28
call fcn.004fe194
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x4c], eax
jmp case.0x50e169.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
mov eax, dword [0x567470]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x90]
jne 0x50bf26
cmp word [ebp - 0x8c], 6
je 0x50bf26
cmp word [ebp - 0x8c], 7
jne 0x50bf5f
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
movzx edx, word [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ee8a0
cmp word [ebp - 0x8c], 6
jne case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569158], eax
jmp case.0x50e169.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
mov eax, dword [0x567470]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x90]
je case.0x50e169.0
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x90]
mov edx, 0xd
mov eax, dword [0x567408]
call fcn.004ee8a0
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
movzx eax, word [ebp - 0x8a]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x1c0], eax
jmp case.0x50e169.0
cmp byte [0x5674fc], 0
je case.0x50e169.0
mov ax, word [ebp - 0x90]
mov word [0x56753c], ax
jmp case.0x50e169.0
mov eax, dword [ebp - 4]
call fcn.00509bd0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x90]
mov edx, 0xa
mov eax, dword [0x567408]
call fcn.004ee8a0
jmp case.0x50e169.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
mov eax, dword [0x567470]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x90]
je case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x8a]
mov dx, 0xc
mov eax, dword [ebp - 0x4c]
call fcn.004f3e30
jmp case.0x50e169.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
mov eax, dword [0x567470]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x90]
je case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x8a]
mov dx, 0xc
mov eax, dword [ebp - 0x4c]
call fcn.004f3e30
jmp case.0x50e169.0
mov eax, dword [0x567470]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x90]
je case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x8a]
mov dx, word [ebp - 0x8c]
mov eax, dword [ebp - 0x4c]
call fcn.004f3e30
cmp word [ebp - 0x8c], 0xf
jne case.0x50e169.0
cmp dword [ebp - 0x10], 0
je case.0x50e169.0
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x144], 1
jmp case.0x50e169.0
lea edx, [ebp - 0x2e]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x8a]
mov dx, word [ebp - 0x8c]
mov eax, dword [ebp - 0x4c]
call fcn.004f3e30
movzx eax, word [ebp - 0x2e]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x12c], eax
movzx eax, word [ebp - 0x2c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x130], eax
movzx eax, word [ebp - 0x2a]
movzx edx, word [ebp - 0x28]
shl edx, 0x10
or eax, edx
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x134], eax
jmp case.0x50e169.0
lea edx, [ebp - 0xa0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x8a]
mov dx, word [ebp - 0x8c]
mov eax, dword [ebp - 0x4c]
call fcn.004f3e30
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0xa0]
mov dword [eax + 0x12c], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x9c]
mov dword [eax + 0x130], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x98]
mov dword [eax + 0x134], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x94]
mov dword [eax + 0x13c], edx
jmp case.0x50e169.0
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00466f28
push eax
movzx ecx, word [ebp - 0x86]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00503968
jmp case.0x50e169.0
lea edx, [ebp - 0x44]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
movzx eax, word [ebp - 0x86]
shr eax, 8
and eax, 0xff
push eax
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x44]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x86]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00503a14
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00503a7c
jmp case.0x50e169.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x567470]
jne 0x50c3ec
xor ecx, ecx
mov edx, 0x50edc4
mov eax, dword [ebp - 4]
call fcn.004fdee8
cmp dword [ebp - 0x4c], 0
je 0x50c432
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x8a]
mov dx, word [ebp - 0x8c]
mov eax, dword [ebp - 0x4c]
call fcn.004f3e30
mov eax, dword [ebp - 0x4c]
mov word [eax + 0x66], 0
jmp case.0x50e169.0
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x90]
mov edx, 0x20
mov eax, dword [0x567408]
call fcn.004ee8a0
jmp case.0x50e169.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x90]
mov edx, 0x21
mov eax, dword [0x567408]
call fcn.004ee8a0
jmp case.0x50e169.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x90]
mov edx, 0x1b
mov eax, dword [0x567408]
call fcn.004ee8a0
jmp case.0x50e169.0
mov eax, dword [0x567470]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x84], edx
mov eax, dword [0x567470]
mov dl, byte [ebp - 0x8a]
mov byte [eax + 0x16], dl
lea ecx, [ebp - 0x114]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00517370
mov eax, dword [0x567470]
lea esi, [ebp - 0x114]
lea edi, [eax + 0x50]
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [0x567470]
mov eax, dword [eax + 0x6e]
mov edx, dword [0x567470]
cmp eax, dword [edx + 0x72]
jae 0x50c5d3
mov eax, dword [0x567470]
mov eax, dword [eax + 0x6e]
mov dword [ebp - 0x120], eax
xor eax, eax
mov dword [ebp - 0x11c], eax
fild qword [ebp - 0x120]
mov eax, dword [0x567470]
mov eax, dword [eax + 0x72]
mov dword [ebp - 0x128], eax
xor eax, eax
mov dword [ebp - 0x124], eax
fild qword [ebp - 0x128]
fdivp st(1)
fmul dword [0x50edc8]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea ecx, [ebp - 0x118]
mov edx, 1
mov eax, 3
call fcn.0046706c
mov edx, dword [ebp - 0x118]
mov eax, 0x56d1f0
mov ecx, 0x50edd4
call fcn.00405348
jmp 0x50c5e2
mov eax, 0x56d1f0
mov edx, 0x50ede0
call fcn.00405084
mov eax, dword [0x567470]
movzx eax, word [eax + 0x76]
mov dword [ebp - 0x130], eax
fild dword [ebp - 0x130]
mov eax, dword [0x567470]
movzx eax, word [eax + 0x78]
mov dword [ebp - 0x134], eax
fild dword [ebp - 0x134]
fdivp st(1)
fmul dword [0x50edc8]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea ecx, [ebp - 0x12c]
mov edx, 1
mov eax, 3
call fcn.0046706c
mov edx, dword [ebp - 0x12c]
mov eax, 0x56d1f4
mov ecx, 0x50edd4
call fcn.00405348
jmp case.0x50e169.0
xor eax, eax
mov al, byte [ebp - 0x8a]
mov dword [0x569248], eax
movzx eax, word [ebp - 0x8a]
shr eax, 8
and eax, 0xff
mov dword [0x569244], eax
xor eax, eax
mov al, byte [ebp - 0x88]
mov dword [0x56924c], eax
movzx eax, word [ebp - 0x88]
shr eax, 8
and eax, 0xff
mov dword [0x569250], eax
xor eax, eax
mov al, byte [ebp - 0x86]
mov dword [0x569254], eax
movzx eax, word [ebp - 0x86]
shr eax, 8
and eax, 0xff
mov dword [0x569258], eax
xor eax, eax
mov al, byte [ebp - 0x90]
mov dword [0x56925c], eax
jmp case.0x50e169.0
movzx eax, word [ebp - 0x8a]
mov dword [0x569054], eax
movzx eax, word [ebp - 0x88]
mov edx, dword [0x529fe8]
mov dword [edx], eax
mov eax, dword [0x529fe8]
cmp dword [eax], 0
jne 0x50c6f0
mov byte [0x569051], 0
jmp case.0x50e169.0
mov byte [0x569051], 1
jmp case.0x50e169.0
mov eax, dword [0x567470]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x6e], edx
mov eax, dword [0x567470]
mov eax, dword [eax + 0x6e]
mov edx, dword [0x567470]
cmp eax, dword [edx + 0x72]
jae 0x50c790
mov eax, dword [0x567470]
mov eax, dword [eax + 0x6e]
mov dword [ebp - 0x120], eax
xor eax, eax
mov dword [ebp - 0x11c], eax
fild qword [ebp - 0x120]
mov eax, dword [0x567470]
mov eax, dword [eax + 0x72]
mov dword [ebp - 0x128], eax
xor eax, eax
mov dword [ebp - 0x124], eax
fild qword [ebp - 0x128]
fdivp st(1)
fmul dword [0x50edc8]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea ecx, [ebp - 0x138]
mov edx, 1
mov eax, 3
call fcn.0046706c
mov edx, dword [ebp - 0x138]
mov eax, 0x56d1f0
mov ecx, 0x50edd4
call fcn.00405348
jmp 0x50c79f
mov eax, 0x56d1f0
mov edx, 0x50ede0
call fcn.00405084
push 0xff
push 0x50edec
lea edx, [ebp - 0x140]
movzx eax, word [ebp - 0x8a]
call fcn.004099b8
push dword [ebp - 0x140]
push 0x50edfc
lea eax, [ebp - 0x13c]
mov edx, 3
call fcn.004053c4
mov edx, dword [ebp - 0x13c]
mov ecx, 0xffffff
mov eax, dword [0x5673f8]
call fcn.004af04c
jmp case.0x50e169.0
mov edx, 0x50ee10
mov eax, dword [0x5673f8]
call fcn.004aeca8
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
mov eax, dword [ebp - 0x4c]
cmp word [eax + 0x66], 0
jbe 0x50c84c
movzx eax, word [ebp - 0x8a]
mov edx, dword [ebp - 0x4c]
movzx edx, word [edx + 0x66]
sub eax, edx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.00516d78
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x8a]
mov word [eax + 0x66], dx
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x88]
mov word [eax + 0x68], dx
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x86]
mov word [eax + 0x6a], dx
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x48], 0
jne 0x50c8b2
cmp byte [0x580963], 0
jbe 0x50c8b2
lea ecx, [ebp - 0x144]
mov eax, dword [ebp - 0x4c]
movzx edx, word [eax + 0x6c]
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 0x6a]
call fcn.00468548
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x4c]
add eax, 0x48
call fcn.00405084
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x567470]
jne case.0x50e169.0
mov eax, dword [ebp - 4]
call fcn.00503ee8
jmp case.0x50e169.0
lea edx, [ebp - 0xa0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x567470]
jne 0x50c9bd
mov eax, dword [0x567470]
cmp dword [eax + 0x4c], 0xf9
jne 0x50c925
call sub.kernel32.dll_GetTickCount_1
mov dword [0x56914c], eax
cmp byte [0x5810f9], 0
jne 0x50c935
mov byte [0x581910], 1
mov eax, dword [0x567470]
mov edx, dword [ebp - 0x98]
mov dword [eax + 0x138], edx
cmp byte [0x58115d], 1
jne 0x50c97e
mov eax, dword [0x567470]
cmp byte [eax + 0x16], 0
jne 0x50c97e
mov edx, dword [ebp - 0x98]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0
jne 0x50c97e
mov eax, dword [ebp - 0x50]
mov dword [0x5691b0], eax
cmp byte [0x580971], 1
jne 0x50c9d1
mov edx, dword [ebp - 0x98]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x50c9d1
xor eax, eax
mov al, byte [0x580976]
shl eax, 0x1e
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x28], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x2c], eax
jmp 0x50c9d1
mov eax, dword [ebp - 0x4c]
call fcn.004f7c80
test al, al
je 0x50c9d1
mov eax, dword [ebp - 0x4c]
call fcn.004f7cb0
cmp byte [0x580960], 0
je 0x50c9e5
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x567470]
je 0x50ca1a
push 0
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x9c]
push eax
push 0
mov eax, dword [ebp - 0x98]
push eax
mov ecx, dword [ebp - 0x94]
mov dx, 0x1f
mov eax, dword [ebp - 0x4c]
call fcn.004f3ef0
jmp 0x50ca4d
push 0
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x9c]
push eax
push 0
mov eax, dword [ebp - 0x98]
push eax
mov ecx, dword [ebp - 0x94]
mov dx, 0x7987
mov eax, dword [ebp - 0x4c]
call fcn.004f3ef0
mov eax, dword [ebp - 0x4c]
cmp word [eax + 0x66], 0
jbe 0x50ca78
movzx eax, word [ebp - 0x8a]
mov edx, dword [ebp - 0x4c]
movzx edx, word [edx + 0x66]
sub eax, edx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.00516d78
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x8a]
mov word [eax + 0x66], dx
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x88]
mov word [eax + 0x6a], dx
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x567470]
jne case.0x50e169.0
mov eax, dword [ebp - 4]
call fcn.00503ee8
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
movzx eax, word [ebp - 0x8a]
movzx edx, word [ebp - 0x88]
shl edx, 0x10
or eax, edx
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x160], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x164], edx
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x168], edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x160]
call fcn.004f2edc
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x567470]
je 0x50cba4
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x8a]
mov word [eax + 0x66], dx
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x88]
mov word [eax + 0x6a], dx
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x48], 0
jne 0x50cba4
cmp byte [0x580963], 0
jbe 0x50cba4
lea ecx, [ebp - 0x148]
mov eax, dword [ebp - 0x4c]
movzx edx, word [eax + 0x6c]
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 0x6a]
call fcn.00468548
mov edx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x4c]
add eax, 0x48
call fcn.00405084
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x1a0], 1
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x1a0], 0
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
mov eax, dword [ebp - 0x4c]
cmp word [eax + 0x66], 0
jbe 0x50cc27
movzx eax, word [ebp - 0x8a]
mov edx, dword [ebp - 0x4c]
movzx edx, word [edx + 0x66]
sub eax, edx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.00516d78
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x8a]
mov word [eax + 0x66], dx
mov eax, dword [ebp - 0x4c]
mov dx, word [ebp - 0x88]
mov word [eax + 0x6a], dx
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x567470]
jne 0x50cc56
mov eax, dword [ebp - 4]
call fcn.00503ee8
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x1a1], 1
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x1a8], 0x7d0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x1a4], eax
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
mov eax, dword [ebp - 0x4c]
mov edx, dword [0x4f3140]
call fcn.00404390
test al, al
je case.0x50e169.0
mov eax, dword [ebp - 0x4c]
call fcn.004f95a8
jmp case.0x50e169.0
cmp byte [0x5810e6], 1
jne 0x50ccd7
cmp word [ebp - 0x8c], 0x66
je case.default.0x50a91e
cmp byte [0x5810e7], 1
jne 0x50ccee
cmp word [ebp - 0x8c], 0x68
je case.default.0x50a91e
cmp byte [0x5810e8], 1
jne 0x50cd05
cmp word [ebp - 0x8c], 0x65
je case.default.0x50a91e
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
cmp byte [0x5810e2], 1
jne 0x50cd82
cmp word [ebp - 0x8c], 0x67
jne 0x50cd82
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.0050a50c
mov eax, dword [ebp - 0x24]
mov edx, dword [0x567470]
mov edx, dword [edx + 0x44]
call fcn.00405458
je 0x50cd82
push 0x50ee24
push dword [ebp - 0x24]
push 0x50ee30
lea eax, [ebp - 0x150]
mov edx, 0x580fd1
call fcn.00405294
push dword [ebp - 0x150]
lea eax, [ebp - 0x14c]
mov edx, 4
call fcn.004053c4
mov edx, dword [ebp - 0x14c]
mov eax, dword [ebp - 4]
call fcn.00507db8
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5673f8]
call fcn.004aeddc
movzx eax, word [ebp - 0x8a]
shr eax, 8
call fcn.004fe194
push eax
mov al, byte [ebp - 0x8a]
call fcn.004fe194
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5673f8]
call fcn.004af04c
cmp word [ebp - 0x8c], 0x68
jne case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.004c76b0
jmp case.0x50e169.0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
movzx eax, word [ebp - 0x8a]
push eax
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5673f8]
call fcn.004aed20
jmp case.0x50e169.0
cmp byte [0x5810e5], 1
je case.default.0x50a91e
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x50cecc
mov eax, dword [ebp - 0x20]
call fcn.0050a474
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jle 0x50ce92
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x3c]
mov dword [eax + 0xc8], edx
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0xc4], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xd0], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0xd0]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xd4], eax
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov dword [eax + 0xcc], edx
jmp case.0x50e169.0
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
call fcn.004f7d5c
movzx eax, word [ebp - 0x8a]
shr eax, 8
call fcn.004fe194
push eax
mov al, byte [ebp - 0x8a]
call fcn.004fe194
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5673f8]
call fcn.004af04c
jmp case.0x50e169.0
movzx eax, word [ebp - 0x8a]
shr eax, 8
call fcn.004fe194
push eax
mov al, byte [ebp - 0x8a]
call fcn.004fe194
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5673f8]
call fcn.004af04c
jmp case.0x50e169.0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
push 0
lea eax, [ebp - 0x154]
push eax
mov byte [ebp - 0xa8], 0x5c
lea ecx, [ebp - 0xa8]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x44]
mov eax, dword [ebp - 0x20]
call fcn.004671b8
mov edx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x4c]
add eax, 0x40
call fcn.00405084
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x40]
mov eax, 0x50edb0
call fcn.0040560c
test eax, eax
jle 0x50cf78
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0xff00ff
jmp 0x50cf82
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.00516830
mov al, byte [ebp - 0x8a]
call fcn.004fe194
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x4c], eax
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
mov al, byte [ebp - 0x8a]
call fcn.004fe194
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x4c], eax
jmp case.0x50e169.0
mov eax, dword [0x567470]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x90]
je case.0x50e169.0
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x90]
mov edx, 0x1bf9
mov eax, dword [0x567408]
call fcn.004ee8a0
jmp case.0x50e169.0
lea edx, [ebp - 0xa0]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x50d080
mov ax, word [ebp - 0x88]
push eax
mov ax, word [ebp - 0x86]
test dword [edx - 1], edi
invalid
call dword [eax - 0x75]
test dword [eax - 1], esp
invalid
call dword [eax - 0x75]
test dword [edi + edi*8 - 1], esp
call dword [eax + 0x66]
mov ecx, dword [ebp - 0x8a]
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004edfa0
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x98]
mov dword [eax + 0x140], edx
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x9c]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x8a]
mov dx, 0x14
mov eax, dword [ebp - 0x4c]
call fcn.004f3e30
jmp case.0x50e169.0
movzx eax, word [ebp - 0x8a]
push eax
movzx eax, word [ebp - 0x88]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x90]
mov edx, 0x15
mov eax, dword [0x567408]
call fcn.004ee8a0
jmp case.0x50e169.0
lea edx, [ebp - 0x26]
mov ecx, 2
mov eax, dword [ebp - 0x10]
call fcn.004fb59c
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
movzx eax, word [ebp - 0x8a]
push eax
mov ecx, dword [ebp - 0x90]
mov dl, 1
mov eax, dword [0x4fb8f4]
call fcn.004fb9b4
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor edx, edx
mov dword [eax + 0xc], edx
movzx eax, word [ebp - 0x26]
mov edx, dword [ebp - 0x54]
mov dword [edx + 0x1c], eax
mov edx, dword [ebp - 0x54]
mov eax, dword [0x567440]
call fcn.004fbdbc
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567440]
call fcn.004fbe40
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0050ffc8
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00510548
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00510070
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00510134
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.005102fc
jmp case.0x50e169.0
lea edx, [ebp - 0x158]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov eax, dword [ebp - 0x158]
mov edx, dword [ebp - 0x90]
call fcn.004f1c14
jmp case.0x50e169.0
lea edx, [ebp - 0x15c]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov edx, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00510600
jmp case.0x50e169.0
movzx eax, word [ebp - 0x88]
push eax
movzx eax, word [ebp - 0x86]
push eax
lea edx, [ebp - 0x160]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov eax, dword [ebp - 0x160]
push eax
movzx ecx, word [ebp - 0x8a]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00510670
jmp case.0x50e169.0
movzx eax, word [ebp - 0x88]
push eax
movzx ecx, word [ebp - 0x8a]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00510980
jmp case.0x50e169.0
movzx ecx, word [ebp - 0x88]
movzx edx, word [ebp - 0x8a]
mov eax, dword [0x567468]
call fcn.004e8f84
jmp case.0x50e169.0
mov edx, 0x50ee3c
mov eax, dword [0x5673f8]
call fcn.004aeca8
jmp case.0x50e169.0
movzx ecx, word [ebp - 0x88]
movzx edx, word [ebp - 0x8a]
mov eax, dword [0x567468]
call fcn.004e90a8
jmp case.0x50e169.0
mov eax, dword [0x567470]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x1c], edx
mov eax, dword [0x567470]
mov si, 0xfff5
call fcn.00404400
mov eax, dword [0x5690bc]
sub eax, 0xd
jae 0x50d300
mov eax, dword [0x5690bc]
mov edx, eax
shl eax, 4
add eax, edx
lea edi, [eax*4 + 0x567474]
mov esi, 0x5690c0
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov byte [0x5690c0], 0
jmp case.0x50e169.0
mov eax, 0x5690c0
call fcn.004f16d4
mov byte [0x5690c0], 0
jmp case.0x50e169.0
mov eax, dword [0x567470]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x1c], edx
mov eax, dword [0x567470]
mov si, 0xfff5
call fcn.00404400
mov byte [0x5690c0], 0
jmp case.0x50e169.0
cmp dword [0x5690bc], 0
jge 0x50d37b
mov eax, dword [0x5690bc]
inc eax
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov edx, eax
shl eax, 4
add eax, edx
lea edi, [eax*4 + 0x567474]
mov esi, 0x5690c0
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov byte [0x5690c0], 0
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.005109f0
jmp case.0x50e169.0
mov eax, dword [0x567470]
mov dx, word [ebp - 0x90]
mov word [eax + 0x76], dx
mov eax, dword [0x567470]
movzx eax, word [eax + 0x76]
mov dword [ebp - 0x130], eax
fild dword [ebp - 0x130]
mov eax, dword [0x567470]
movzx eax, word [eax + 0x78]
mov dword [ebp - 0x134], eax
fild dword [ebp - 0x134]
fdivp st(1)
fmul dword [0x50edc8]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea ecx, [ebp - 0x164]
mov edx, 1
mov eax, 3
call fcn.0046706c
mov edx, dword [ebp - 0x164]
mov eax, 0x56d1f4
mov ecx, 0x50edd4
call fcn.00405348
mov eax, dword [0x567470]
mov dx, word [ebp - 0x8a]
mov word [eax + 0x7a], dx
mov eax, dword [0x567470]
mov dx, word [ebp - 0x88]
mov word [eax + 0x7e], dx
jmp case.0x50e169.0
mov eax, dword [ebp - 0x90]
mov dword [0x58194c], eax
movzx eax, word [ebp - 0x8a]
movzx edx, word [ebp - 0x88]
shl edx, 0x10
or eax, edx
mov dword [0x581950], eax
cmp dword [ebp - 0x10], 0
je case.0x50e169.0
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov edx, dword [ebp - 0x168]
mov eax, 0x581954
call fcn.00405084
jmp case.0x50e169.0
mov eax, 0x6a
call fcn.004fab1c
mov eax, dword [0x567470]
mov eax, dword [eax + 0x84]
cmp eax, dword [ebp - 0x90]
jge 0x50d4db
mov eax, dword [0x567470]
push dword [eax + 0x84]
mov eax, dword [ebp - 0x90]
pop edx
sub eax, edx
lea edx, [ebp - 0x16c]
call fcn.004099b8
lea eax, [ebp - 0x16c]
mov edx, 0x50ee54
call fcn.004052fc
mov edx, dword [ebp - 0x16c]
mov eax, dword [0x5673f8]
call fcn.004aeca8
mov eax, dword [0x567470]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x84], edx
jmp case.0x50e169.0
push 0
push 0
push 0
movzx eax, word [ebp - 0x8a]
movzx edx, word [ebp - 0x88]
shl edx, 0x10
or eax, edx
push eax
movzx eax, word [ebp - 0x86]
push eax
push 0
movzx edx, word [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ee8a0
jmp case.0x50e169.0
push 0
push 0
push 0
movzx eax, word [ebp - 0x8a]
movzx edx, word [ebp - 0x88]
shl edx, 0x10
or eax, edx
push eax
movzx eax, word [ebp - 0x86]
push eax
push 0
movzx edx, word [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ee8a0
jmp case.0x50e169.0
mov byte [0x56917c], 1
jmp case.0x50e169.0
mov byte [0x569104], 0
call fcn.004f194c
jmp case.0x50e169.0
mov eax, 0x569104
call fcn.004f16d4
mov byte [0x569104], 0
jmp case.0x50e169.0
cmp dword [ebp - 0x10], 0
je case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00510b08
jmp case.0x50e169.0
cmp dword [ebp - 0x10], 0
je case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00510c5c
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00510bf4
jmp case.0x50e169.0
movzx eax, word [ebp - 0x88]
movzx edx, word [ebp - 0x86]
shl edx, 0x10
or eax, edx
push eax
movzx ecx, word [ebp - 0x8a]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00510df0
jmp case.0x50e169.0
movzx eax, word [ebp - 0x88]
movzx edx, word [ebp - 0x86]
shl edx, 0x10
or eax, edx
push eax
movzx edx, word [ebp - 0x8a]
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00510f68
jmp case.0x50e169.0
lea edx, [ebp - 0x170]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov eax, dword [ebp - 0x170]
push eax
movzx ecx, word [ebp - 0x8a]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00511040
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
call fcn.004c1618
jmp case.0x50e169.0
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x8a]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00511120
jmp case.0x50e169.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00511330
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00511544
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00511584
jmp case.0x50e169.0
cmp byte [0x568f74], 0
je case.0x50e169.0
cmp dword [ebp - 0x90], 0
jle 0x50d722
lea edx, [ebp - 0x174]
mov eax, dword [ebp - 0x90]
call fcn.004099b8
mov edx, dword [ebp - 0x174]
mov eax, 0x569048
mov ecx, 0x50ee64
call fcn.00405348
jmp case.0x50e169.0
mov eax, 0x569048
mov edx, 0x50ee74
call fcn.00405084
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
mov eax, dword [0x567470]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x84], edx
mov byte [0x568fb8], 0
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
mov eax, 0x568fb8
call fcn.004f16d4
mov byte [0x568fb8], 0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ee88
call fcn.004b94f8
jmp case.0x50e169.0
cmp byte [0x568f74], 0
je case.0x50e169.0
cmp dword [ebp - 0x90], 0
jl 0x50d7e8
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 0x90]
call fcn.004099b8
mov edx, dword [ebp - 0x178]
mov eax, 0x569048
mov ecx, 0x50ee64
call fcn.00405348
jmp case.0x50e169.0
mov eax, 0x569048
mov edx, 0x50ee74
call fcn.00405084
jmp case.0x50e169.0
cmp byte [0x568fb8], 0
je case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
mov eax, dword [0x567470]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x84], edx
mov ax, word [ebp - 0x8a]
mov word [0x568ff8], ax
mov ax, word [ebp - 0x88]
mov word [0x568ffa], ax
mov eax, 0x568fb8
call fcn.004f16d4
mov byte [0x568fb8], 0
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
mov eax, 0x568fb8
call fcn.004f16d4
mov byte [0x568fb8], 0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50eea4
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
cmp word [ebp - 0x8c], 0x2bd
je 0x50d903
cmp word [ebp - 0x8c], 0x2be
jne 0x50d8e1
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50eec0
call fcn.004b94f8
jmp 0x50d8f9
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50eed4
call fcn.004b94f8
mov eax, 0x568fb8
call fcn.004f16d4
mov byte [0x568fb8], 0
jmp case.0x50e169.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00511604
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
cmp word [ebp - 0x8c], 0x2c1
je 0x50d988
cmp word [ebp - 0x8c], 0x2c3
jne 0x50d96b
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50eee8
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50eefc
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov edx, dword [ebp - 0x90]
call fcn.004c2a60
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
mov eax, dword [0x567470]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x84], edx
movzx edx, word [ebp - 0x8a]
movzx eax, word [ebp - 0x88]
shl eax, 0x10
or edx, eax
mov eax, dword [0x52a298]
mov eax, dword [eax]
call fcn.004c2990
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
mov eax, dword [ebp - 0x90]
dec eax
je 0x50da0e
dec eax
je 0x50da2b
dec eax
je 0x50da48
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ef10
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ef2c
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ef4c
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
mov eax, dword [0x567470]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x84], edx
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ef64
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
mov eax, dword [ebp - 0x90]
dec eax
je 0x50dad0
dec eax
je 0x50daed
dec eax
je 0x50db0a
dec eax
je 0x50db27
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ef7c
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ef7c
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ef7c
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50ef94
call fcn.004b94f8
jmp case.0x50e169.0
movzx eax, word [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x8a]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.00511814
jmp case.0x50e169.0
inc dword [0x569278]
jmp case.0x50e169.0
cmp dword [ebp - 0x90], 0x7d0
jne 0x50db8a
mov byte [0x529a44], 1
jmp 0x50db91
mov byte [0x529a44], 0
mov byte [0x529a48], 1
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00511a04
jmp case.0x50e169.0
cmp dword [ebp - 0x90], 1
jne case.0x50e169.0
mov dword [ebp - 0x90], 1
jmp case.0x50e169.0
cmp word [ebp - 0x8a], 0
jbe 0x50dbd7
mov byte [0x56921c], 1
jmp 0x50dbde
mov byte [0x56921c], 0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x56920c], eax
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x56920c], eax
mov byte [0x56921c], 1
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x56920c], eax
mov eax, dword [ebp - 0x90]
sub eax, 0xfffffffc
je 0x50dc7c
dec eax
je 0x50dc5f
dec eax
je 0x50dc42
dec eax
jne case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50efac
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50efd0
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50eff8
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f010
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x56920c], eax
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x56920c], eax
mov eax, dword [ebp - 0x90]
add eax, 5
cmp eax, 4
ja case.0x50e169.0
jmp dword [eax*4 + 0x50dccb]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f034
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f058
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f084
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f0cc
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f0e4
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x56920c], eax
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x56920c], eax
mov eax, dword [ebp - 0x90]
sub eax, 0xfffffffd
je 0x50ddd8
dec eax
je 0x50ddbb
dec eax
jne case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f110
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f124
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f138
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x569220]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.0x50e169.0
lea edx, [ebp - 0x17c]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 4]
call fcn.00511b28
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569214], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00511bc0
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569214], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00512084
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569214], eax
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f154
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569214], eax
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f170
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569214], eax
lea edx, [ebp - 0x180]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov edx, dword [ebp - 0x180]
mov eax, 0x568e08
call fcn.00405084
mov eax, dword [0x52a298]
mov eax, dword [eax]
call fcn.004c4510
jmp case.0x50e169.0
call fcn.004f1d44
cmp byte [0x568ffc], 0
je 0x50deff
mov eax, 0x568ffc
call fcn.004f16d4
mov byte [0x568ffc], 0
cmp dword [0x568dfc], 0
jle 0x50df20
mov eax, dword [0x567470]
mov edx, dword [0x568dfc]
add dword [eax + 0x84], edx
xor eax, eax
mov dword [0x568dfc], eax
mov eax, dword [0x52a298]
mov eax, dword [eax]
call fcn.004c4608
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569210], eax
cmp byte [0x568ffc], 0
je case.0x50e169.0
mov eax, 0x568ffc
call fcn.004f1ce4
mov byte [0x568ffc], 0
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569210], eax
cmp byte [0x568ffc], 0
je case.0x50e169.0
mov eax, 0x568ffc
call fcn.004f16d4
mov byte [0x568ffc], 0
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569210], eax
cmp byte [0x568ffc], 0
je case.0x50e169.0
mov byte [0x568ffc], 0
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569210], eax
cmp byte [0x568ffc], 0
je case.0x50e169.0
lea eax, [ebp - 0x184]
mov edx, 0x568ffc
call fcn.00405294
mov eax, dword [ebp - 0x184]
mov edx, dword [0x569038]
call fcn.004f1878
mov eax, 0x568ffc
call fcn.004f1ce4
mov byte [0x568ffc], 0
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0051274c
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.005127ac
jmp case.0x50e169.0
mov eax, dword [ebp - 0x90]
mov dword [0x568dfc], eax
movzx eax, word [ebp - 0x8a]
movzx edx, word [ebp - 0x88]
shl edx, 0x10
or eax, edx
mov edx, dword [0x567470]
mov dword [edx + 0x84], eax
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569210], eax
jmp case.0x50e169.0
mov eax, dword [ebp - 0x90]
mov dword [0x568dfc], eax
movzx eax, word [ebp - 0x8a]
movzx edx, word [ebp - 0x88]
shl edx, 0x10
or eax, edx
mov edx, dword [0x567470]
mov dword [edx + 0x84], eax
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569210], eax
jmp case.0x50e169.0
mov eax, dword [ebp - 0x90]
mov dword [0x568e00], eax
mov eax, 0x6a
call fcn.004fab1c
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
call fcn.004c4608
jmp case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.005115c4
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569214], eax
movzx edx, word [ebp - 0x8a]
mov eax, dword [ebp - 4]
call fcn.0051280c
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x569214], eax
mov dword [0x569184], 0xffffffff
push 0xff
mov ecx, 0xffffff
mov edx, 0x50f1a4
mov eax, dword [0x5673f8]
call fcn.004af04c
jmp case.0x50e169.0
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov edx, dword [ebp - 0x188]
mov eax, dword [ebp - 4]
call fcn.005128b4
jmp case.0x50e169.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00512940
jmp case.0x50e169.0
mov eax, dword [ebp - 4]
call fcn.005095d8
jmp case.0x50e169.0
mov eax, dword [ebp - 0x90]
cmp eax, 5
ja case.0x50e169.0
jmp dword [eax*4 + 0x50e170]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f1c0
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f1e4
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f20c
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f238
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f264
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [ebp - 4]
call fcn.005095d8
jmp case.0x50e169.0
mov eax, dword [ebp - 0x90]
dec eax
je 0x50e23d
dec eax
je 0x50e25a
dec eax
je 0x50e277
dec eax
je 0x50e294
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f1c0
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f280
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f2a0
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f2d4
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [ebp - 0x90]
add eax, 7
cmp eax, 5
ja case.0x50e169.0
jmp dword [eax*4 + 0x50e2ca]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f2f8
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f324
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f354
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f388
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f3b4
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f3dc
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [ebp - 0x90]
sub eax, 0xfffffffc
je 0x50e3ff
dec eax
je 0x50e3e2
dec eax
je 0x50e3c5
dec eax
jne case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f418
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f430
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f450
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f480
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [ebp - 0x90]
sub eax, 0xfffffffd
je 0x50e46b
dec eax
je 0x50e44e
dec eax
jne case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f418
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f4a4
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f4cc
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f4ec
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
mov eax, dword [ebp - 0x90]
sub eax, 0xfffffffd
je 0x50e51a
dec eax
je 0x50e4fd
dec eax
jne case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f504
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f524
call fcn.004b94f8
jmp case.0x50e169.0
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
mov edx, 0x50f53c
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
cmp dword [ebp - 0x10], 0
je case.0x50e169.0
lea edx, [ebp - 0x18c]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov edx, dword [ebp - 0x18c]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
call fcn.004b94f8
jmp case.0x50e169.0
cmp dword [ebp - 0x10], 0
je case.0x50e169.0
lea edx, [ebp - 0x190]
mov eax, dword [ebp - 0x10]
call fcn.004fb500
mov edx, dword [ebp - 0x190]
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov cx, word [0x50e7ec]
call fcn.004b94f8
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
jmp case.0x50e169.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x52a298]
mov edx, dword [edx]
mov dword [edx + 0x780], eax
jmp case.0x50e169.0
mov eax, dword [0x567470]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x90]
je case.0x50e169.0
mov edx, dword [ebp - 0x90]
mov eax, dword [0x567408]
call fcn.004ede34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x50e169.0
movzx eax, word [ebp - 0x8a]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x12c], eax
movzx eax, word [ebp - 0x88]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x130], eax
jmp case.0x50e169.0
mov eax, dword [0x567408]
mov eax, dword [eax + 0xc3be0]
mov dl, 0x2a
call fcn.00432d50
jmp case.0x50e169.0
movzx eax, word [ebp - 0x8a]
mov dword [0x581938], eax
mov eax, dword [ebp - 0x10]
call fcn.00509c04
mov eax, dword [0x52a298]
mov eax, dword [eax]
mov eax, dword [eax + 0x70c]
mov dl, 1
call fcn.0049cdac
mov edx, dword [ebp - 8]
mov eax, 0x50f554
call fcn.0040560c
test eax, eax
jle case.default.0x50a91e
mov edx, dword [ebp - 8]
mov eax, dword [0x5673f8]
call fcn.004aeca8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x50e6f6
lea eax, [ebp - 0x190]
mov edx, 0x17
call fcn.00405054
lea eax, [ebp - 0x12c]
call fcn.00405030
lea eax, [ebp - 0x118]
call fcn.00405030
lea eax, [ebp - 0xe0]
mov edx, 0xe
call fcn.00405054
lea eax, [ebp - 0xa4]
call fcn.00405030
lea eax, [ebp - 0x58]
call fcn.00405030
lea eax, [ebp - 0x24]
mov edx, 8
call fcn.00405054
ret