Function at 0x4b8618
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2c
push 0
push 0
dec ecx
jne 0x4b8620
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404b34
xor eax, eax
push ebp
push 0x4bc2c2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp byte [eax], 0x2b
jne 0x4b8841
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 8]
call fcn.00404944
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00404ba4
push 0
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 0x7c], 0x2f
lea ecx, [ebp - 0x7c]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.0047c310
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x1c]
call fcn.0040471c
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc2d8
call fcn.00404a90
jne 0x4b86a8
mov byte [0x58da88], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc2e4
call fcn.00404a90
jne 0x4b86be
mov byte [0x58da89], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc2f0
call fcn.00404a90
jne 0x4b86d4
mov byte [0x58da89], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc300
call fcn.00404a90
jne 0x4b86ea
mov byte [0x58da8a], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc30c
call fcn.00404a90
jne 0x4b8700
mov byte [0x58da8a], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc31c
call fcn.00404a90
jne 0x4b8716
mov byte [0x58da8d], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc32c
call fcn.00404a90
jne 0x4b873a
mov byte [0x58da8d], 1
mov byte [0x58da8e], 0
mov byte [0x58da8f], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc338
call fcn.00404a90
jne 0x4b8750
mov byte [0x58da8e], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc348
call fcn.00404a90
jne 0x4b877b
mov byte [0x58da8e], 0
mov byte [0x58da8f], 0
mov byte [0x58da8d], 0
mov byte [0x58da8e], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc354
call fcn.00404a90
jne 0x4b8791
mov byte [0x58da8f], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc364
call fcn.00404a90
jne 0x4b87bc
mov byte [0x58da8e], 0
mov byte [0x58da8f], 0
mov byte [0x58da8d], 0
mov byte [0x58da8f], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc370
call fcn.00404a90
jne 0x4b87dc
mov byte [0x58da8b], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d93c], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc37c
call fcn.00404a90
jne 0x4b87f2
mov byte [0x58da8b], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc38c
call fcn.00404a90
jne 0x4b8811
mov eax, dword [ebp - 4]
mov byte [eax + 0x4dc], 0
inc dword [0x58da58]
mov eax, dword [ebp - 0x18]
mov edx, 0x4bc39c
call fcn.00404a90
jne case.default.0x4b8966
mov eax, dword [ebp - 4]
call fcn.004b7c7c
mov eax, dword [ebp - 4]
mov byte [eax + 0x4dc], 0
inc dword [0x58da58]
jmp case.default.0x4b8966
mov eax, dword [ebp - 8]
call fcn.00404944
cmp eax, 0x10
jge 0x4b889a
mov eax, dword [ebp - 8]
cmp byte [eax], 0x3d
jne case.default.0x4b8966
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 8]
call fcn.00404944
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00404ba4
mov eax, dword [ebp - 0x1c]
mov edx, 0x4bc3ac
call fcn.00404a90
jne case.default.0x4b8966
mov eax, dword [0x58bc58]
mov byte [eax + 0x144], 1
jmp case.default.0x4b8966
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404ba4
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 8]
call fcn.00404944
mov ecx, eax
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 8]
call fcn.00404ba4
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0xc]
call fcn.00513164
cmp dword [0x58bc58], 0
jne 0x4b90fe
movzx eax, word [ebp - 0x60]
cmp eax, 0x210
jg 0x4b8985
je 0x4b90fe
cmp eax, 0x209
jg 0x4b8958
je 0x4b8f6c
cmp eax, 0x1f9
jg 0x4b8938
je 0x4b8afe
add eax, 0xffffffce
sub eax, 2
jb 0x4b90fe
sub eax, 0x1c3
je 0x4b8b97
dec eax
je 0x4b8ae1
jmp case.default.0x4b8966
sub eax, 0x1fa
je 0x4b8ffd
dec eax
je 0x4b901a
sub eax, 0xd
je 0x4b8f22
jmp case.default.0x4b8966
add eax, 0xfffffdf6
cmp eax, 5
ja case.default.0x4b8966
jmp dword [eax*4 + 0x4b896d]
cmp eax, 0x385
jg 0x4b89d6
je 0x4b8a1a
cmp eax, 0x214
jg 0x4b89bd
je 0x4b8c7d
sub eax, 0x211
je 0x4b8cc7
dec eax
je 0x4b8f12
dec eax
je 0x4b8c6d
jmp case.default.0x4b8966
sub eax, 0x215
je 0x4b8ca2
sub eax, 0x7d
je 0x4b90fe
jmp case.default.0x4b8966
cmp eax, 0xafa
jg 0x4b8a03
je 0x4b8cc7
sub eax, 0x38e
je 0x4b8acd
sub eax, 0x28
je 0x4b8a7e
dec eax
je 0x4b8aa5
jmp case.default.0x4b8966
sub eax, 0x2710
je 0x4b90d7
dec eax
je 0x4b90fe
jmp case.default.0x4b8966
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x10]
call fcn.00513218
lea ecx, [ebp - 0x80]
mov edx, 0x4bc3b8
mov eax, dword [0x591998]
call fcn.004aa648
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x58]
call fcn.00404a90
jne 0x4b8a55
mov dl, 1
mov eax, dword [0x58bbe0]
call fcn.004d12ec
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc3cc
call fcn.004e2b8c
mov eax, dword [0x532c8c]
mov eax, dword [eax]
call fcn.0045ee14
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc3ec
call fcn.004e2b8c
mov eax, dword [0x58bbdc]
call fcn.0045b5e8
jmp case.default.0x4b8966
mov eax, dword [ebp - 0x10]
call fcn.00404944
cmp eax, 0xf
jle 0x4b90fe
mov edx, 0x5a614c
mov ecx, 0xf
mov eax, dword [ebp - 0x10]
call fcn.005132b4
jmp 0x4b90fe
mov ecx, dword [ebp - 0x10]
mov dx, word [ebp - 0x5e]
mov eax, dword [ebp - 4]
call fcn.004b8098
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc418
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffe
je 0x4b8b5d
sub eax, 2
jne 0x4b8b7a
push 0x4bc478
mov eax, dword [ebp - 4]
push dword [eax + 0x494]
push 0x4bc484
push 0x4bc4ac
lea eax, [ebp - 0x84]
mov edx, 4
call fcn.00404a04
mov edx, dword [ebp - 0x84]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
call fcn.004e2b8c
xor edx, edx
mov eax, dword [0x58bbe8]
call fcn.004d7cdc
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc4cc
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc4ec
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [ebp - 0x64]
add eax, 5
cmp eax, 4
ja case.default.0x4b8ba6
jmp dword [eax*4 + 0x4b8bad]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc50c
call fcn.004e2b8c
jmp 0x4b8c5e
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc520
call fcn.004e2b8c
jmp 0x4b8c5e
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc558
call fcn.004e2b8c
jmp 0x4b8c5e
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc584
call fcn.004e2b8c
jmp 0x4b8c5e
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc598
call fcn.004e2b8c
jmp 0x4b8c5e
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc5ac
call fcn.004e2b8c
mov eax, dword [0x58bbe8]
call fcn.004d8124
jmp 0x4b90fe
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bd3b0
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc5c8
call fcn.004e2b8c
mov eax, dword [ebp - 4]
call fcn.004bd37c
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc5dc
call fcn.004e2b8c
mov eax, dword [ebp - 4]
call fcn.004bd37c
jmp 0x4b90fe
mov ax, word [ebp - 0x64]
mov word [0x58da48], ax
mov eax, dword [ebp - 0x64]
call fcn.004074ac
mov word [0x58da4a], ax
mov ax, word [ebp - 0x5e]
mov word [0x58da4c], ax
mov ax, word [ebp - 0x5c]
mov word [0x58da4e], ax
cmp word [0x58da48], 0
jbe 0x4b8d86
cmp word [0x58da48], 1
jne 0x4b8d28
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc5f0
call fcn.004e2b8c
jmp 0x4b8ed3
cmp word [0x58da48], 3
ja 0x4b8ed3
push 0x4bc61c
lea edx, [ebp - 0x8c]
movzx eax, word [0x58da48]
call fcn.00408d74
push dword [ebp - 0x8c]
push 0x4bc634
lea eax, [ebp - 0x88]
mov edx, 3
call fcn.00404a04
mov edx, dword [ebp - 0x88]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
call fcn.004e2b8c
jmp 0x4b8ed3
cmp word [0x58da4c], 0
jbe 0x4b8e19
cmp word [0x58da4c], 1
jne 0x4b8dbb
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc658
call fcn.004e2b8c
jmp 0x4b8ed3
cmp word [0x58da4c], 3
ja 0x4b8ed3
push 0x4bc680
lea edx, [ebp - 0x94]
movzx eax, word [0x58da4c]
call fcn.00408d74
push dword [ebp - 0x94]
push 0x4bc6a0
lea eax, [ebp - 0x90]
mov edx, 3
call fcn.00404a04
mov edx, dword [ebp - 0x90]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
call fcn.004e2b8c
jmp 0x4b8ed3
cmp word [0x58da4e], 0
jbe 0x4b8e7e
cmp word [0x58da4e], 0x64
ja 0x4b8ed3
push 0x4bc6b4
lea edx, [ebp - 0x9c]
movzx eax, word [0x58da4e]
call fcn.00408d74
push dword [ebp - 0x9c]
push 0x4bc6d4
lea eax, [ebp - 0x98]
mov edx, 3
call fcn.00404a04
mov edx, dword [ebp - 0x98]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
call fcn.004e2b8c
jmp 0x4b8ed3
cmp word [0x58da4a], 0
jbe 0x4b8ed3
push 0x4bc6ec
lea edx, [ebp - 0xa4]
movzx eax, word [0x58da4a]
call fcn.00408d74
push dword [ebp - 0xa4]
push 0x4bc6d4
lea eax, [ebp - 0xa0]
mov edx, 3
call fcn.00404a04
mov edx, dword [ebp - 0xa0]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
call fcn.004e2b8c
cmp word [ebp - 0x60], 0xafa
jne 0x4b8ef3
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc704
call fcn.004e2b8c
mov eax, dword [0x58bbe8]
cmp byte [eax + 0x12c], 0
jne 0x4b90fe
mov eax, dword [ebp - 4]
call fcn.004bd37c
jmp 0x4b90fe
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bd12c
jmp 0x4b90fe
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bd41c
jmp 0x4b90fe
mov byte [0x58d95c], 0
mov byte [0x58d955], 0
mov byte [0x58d954], 0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc760
call fcn.004e2b8c
mov eax, dword [ebp - 4]
call fcn.0045b5e8
jmp 0x4b90fe
mov eax, dword [ebp - 4]
call fcn.004b5b6c
jmp 0x4b90fe
mov eax, dword [ebp - 0x64]
sub eax, 2
je 0x4b8f89
dec eax
je 0x4b8fa6
dec eax
je 0x4b8fc3
jmp 0x4b8fe0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc778
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc794
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc794
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc7b0
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc7cc
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffe
je 0x4b9042
dec eax
jne 0x4b905f
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc7e4
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc808
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc82c
call fcn.004e2b8c
jmp 0x4b90fe
mov eax, dword [ebp - 4]
call fcn.004b5b6c
jmp 0x4b90fe
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc850
call fcn.004e2b8c
jmp 0x4b90fe
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bd624
jmp case.default.0x4b8966
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc87c
call fcn.004e2b8c
mov eax, dword [0x58bbdc]
call fcn.0045b5e8
jmp case.default.0x4b8966
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bc88c
call fcn.004e2b8c
mov eax, dword [0x58bbdc]
call fcn.0045b5e8
jmp case.default.0x4b8966
cmp byte [0x58d964], 0
je 0x4b916e
cmp word [ebp - 0x60], 0x27a
jne case.default.0x4b8966
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x4b4], edx
mov edx, dword [ebp - 0x60]
mov dword [eax + 0x4b8], edx
mov edx, dword [ebp - 0x5c]
mov dword [eax + 0x4bc], edx
lea edx, [ebp - 0xa8]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 4]
add eax, 0x4c0
call fcn.004046d8
mov byte [0x58d965], 1
mov dl, 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
call fcn.00430198
jmp case.default.0x4b8966
movzx eax, word [ebp - 0x60]
cmp eax, 0x295
jg 0x4b9443
je 0x4bb821
cmp eax, 0xd2
jg 0x4b92ee
je 0x4bb241
cmp eax, 0x21
jg 0x4b9226
je 0x4ba297
add eax, 0xfffffffb
cmp eax, 0x1b
ja case.0x4bbd60.0
jmp dword [eax*4 + 0x4b91b6]
cmp eax, 0x33
jg 0x4b9288
je 0x4b97b0
add eax, 0xffffffde
cmp eax, 0x10
ja case.0x4bbd60.0
jmp dword [eax*4 + 0x4b9244]
cmp eax, 0x64
jge 0x4b92b0
sub eax, 0x34
je 0x4ba317
dec eax
je 0x4ba5f4
dec eax
je 0x4b9989
dec eax
je 0x4bb0fc
jmp case.0x4bbd60.0
cmp eax, 0xc9
jg 0x4b92d7
je 0x4bae84
add eax, 0xffffff9c
sub eax, 5
jb 0x4baa47
sub eax, 0x5f
je 0x4bae74
jmp case.0x4bbd60.0
sub eax, 0xca
je 0x4baea4
dec eax
je case.0x4b9462.709
jmp case.0x4bbd60.0
cmp eax, 0x280
jg 0x4b93e2
je 0x4bb285
cmp eax, 0x26b
jg 0x4b937d
je 0x4baffb
cmp eax, 0x264
jg 0x4b9358
je 0x4baf55
cmp eax, 0x259
jg 0x4b9341
je 0x4baee5
sub eax, 0xd3
je 0x4bb25b
sub eax, 0x185
je 0x4baec4
jmp case.0x4bbd60.0
sub eax, 0x262
je 0x4baf09
dec eax
je 0x4baf3c
jmp case.0x4bbd60.0
sub eax, 0x265
je 0x4baf6c
dec eax
je 0x4baf80
dec eax
je 0x4baf97
dec eax
je 0x4bafe5
jmp case.0x4bbd60.0
add eax, 0xfffffd94
cmp eax, 0x13
ja case.0x4bbd60.0
jmp dword [eax*4 + 0x4b9392]
add eax, 0xfffffd7e
cmp eax, 0x12
ja case.0x4bbd60.0
jmp dword [eax*4 + 0x4b93f7]
cmp eax, 0x2f4
jg 0x4b95dd
je 0x4bba54
add eax, 0xfffffd6a
cmp eax, 0x5c
ja case.0x4bbd60.0
jmp dword [eax*4 + 0x4b9469]
cmp eax, 0x385
jg 0x4b96df
je 0x4bab4f
add eax, 0xfffffd0b
cmp eax, 0x36
ja case.0x4bbd60.0
jmp dword [eax*4 + 0x4b9603]
cmp eax, 0x271a
jg 0x4b9751
je 0x4b9ef9
cmp eax, 0x4b0
jg 0x4b9720
je 0x4bc21e
sub eax, 0x44c
je 0x4ba8c6
dec eax
je 0x4ba94c
sub eax, 3
je 0x4ba85b
dec eax
je 0x4bc20a
jmp case.0x4bbd60.0
sub eax, 0x18f7
je 0x4bb275
sub eax, 0xaa
je 0x4b99ac
sub eax, 0x258
je case.0x4b91af.30
sub eax, 0xb18
je 0x4b992a
jmp case.0x4bbd60.0
cmp eax, 0x2737
jg 0x4b9783
je 0x4bb794
sub eax, 0x271f
je 0x4ba975
dec eax
je 0x4baa0a
dec eax
je case.0x4b91af.30
dec eax
je 0x4bae94
jmp case.0x4bbd60.0
sub eax, 0x274f
je 0x4bc19e
dec eax
je 0x4bc1b6
sub eax, 0x3e5
je 0x4b993a
sub eax, 0x22ed
je 0x4bb7cf
jmp case.0x4bbd60.0
mov eax, 0x58bc44
call fcn.00404684
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00513218
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
mov eax, dword [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x33
mov eax, dword [0x58bbf0]
call fcn.004ca908
xor ecx, ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.004ac150
jmp case.0x4bbd60.0
xor eax, eax
mov dword [0x58d6d0], eax
xor eax, eax
mov dword [0x58d6d4], eax
lea edx, [ebp - 0x74]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.005132b4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x32
mov eax, dword [0x58bbf0]
call fcn.004ca908
mov dl, 7
mov eax, dword [0x58bbe0]
call fcn.004d12ec
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x51
mov eax, dword [ebp - 4]
call fcn.004b5440
cmp byte [ebp - 0x6c], 1
jne 0x4b9878
mov byte [0x58da04], 1
jmp 0x4b987f
mov byte [0x58da04], 0
mov byte [0x58d6cc], 0
cmp word [0x58da48], 0
jbe 0x4b98ae
push 0xffffff
mov ecx, 0x8000
mov edx, 0x4bc8d4
mov eax, dword [0x58bbe0]
call fcn.004d170c
jmp case.0x4bbd60.0
cmp word [0x58da4c], 0
jbe 0x4b98d6
push 0xffffff
mov ecx, 0x8000
mov edx, 0x4bc8fc
mov eax, dword [0x58bbe0]
call fcn.004d170c
jmp case.0x4bbd60.0
cmp word [0x58da4e], 0
jbe 0x4b98fe
push 0xffffff
mov ecx, 0x8000
mov edx, 0x4bc924
mov eax, dword [0x58bbe0]
call fcn.004d170c
jmp case.0x4bbd60.0
cmp word [0x58da4a], 0
jbe case.0x4bbd60.0
push 0xffffff
mov ecx, 0x8000
mov edx, 0x4bc948
mov eax, dword [0x58bbe0]
call fcn.004d170c
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bd7cc
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004b82f8
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x64]
mov dword [0x58d840], eax
test byte [0x58d840], 4
je 0x4b996f
xor ecx, ecx
mov edx, 0x4bc970
mov eax, dword [ebp - 4]
call fcn.004ac150
jmp case.0x4bbd60.0
mov eax, dword [0x58bc50]
mov edx, dword [eax + 0x2ae90]
xor ecx, ecx
mov eax, dword [ebp - 4]
call fcn.004ac150
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bd9fc
jmp case.0x4bbd60.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bda98
jmp case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
mov dword [0x58d844], eax
jmp case.0x4bbd60.0
push 0x412aaaab
call fcn.0047d150
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
cmp ebx, eax
jge 0x4b9a1a
lea eax, [ebp - 0x14]
push eax
push 0x412aaaab
call fcn.0047d150
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ba4
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.00513218
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x7c], 0x2f
lea ecx, [ebp - 0x7c]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.0047c310
jmp 0x4b9a22
lea eax, [ebp - 0x1c]
call fcn.00404684
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0xa
mov eax, dword [0x58bbf0]
call fcn.004ca908
cmp dword [ebp - 0x1c], 0
je case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
push 0
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 0x7c], 0x5c
lea ecx, [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x44]
mov eax, dword [ebp - 0x1c]
call fcn.0047c310
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x4c]
add eax, 0x40
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x40]
mov eax, 0x4bc984
call fcn.00404c88
test eax, eax
jle 0x4b9ad0
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0xff00ff
jmp 0x4b9ada
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c4308
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.0047c090
call fcn.004ac3fc
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x4c], eax
jmp case.0x4bbd60.0
push 0x412aaaab
call fcn.0047d150
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
cmp ebx, eax
jge 0x4b9b5f
lea eax, [ebp - 0x14]
push eax
push 0x412aaaab
call fcn.0047d150
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ba4
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.00513218
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x7c], 0x2f
lea ecx, [ebp - 0x7c]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.0047c310
jmp 0x4b9b67
lea eax, [ebp - 0x1c]
call fcn.00404684
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 9
mov eax, dword [0x58bbf0]
call fcn.004ca908
cmp dword [ebp - 0x1c], 0
je case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
push 0
lea eax, [ebp - 0xb0]
push eax
mov byte [ebp - 0x7c], 0x5c
lea ecx, [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x44]
mov eax, dword [ebp - 0x1c]
call fcn.0047c310
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x4c]
add eax, 0x40
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x40]
mov eax, 0x4bc984
call fcn.00404c88
test eax, eax
jle 0x4b9c15
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0xff00ff
jmp 0x4b9c1f
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c4308
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.0047c090
call fcn.004ac3fc
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x4c], eax
jmp case.0x4bbd60.0
mov eax, dword [0x58bc58]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
push 0
push 0
push 0
push 0
movzx edx, word [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004ca908
jmp case.0x4bbd60.0
push 0x412aaaab
call fcn.0047d150
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
cmp ebx, eax
jge 0x4b9cdd
lea eax, [ebp - 0x14]
push eax
push 0x412aaaab
call fcn.0047d150
inc eax
push eax
mov eax, dword [ebp - 0x10]
call fcn.00404944
mov ecx, eax
mov eax, dword [ebp - 0x10]
pop edx
call fcn.00404ba4
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.00513218
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x7c], 0x2f
lea ecx, [ebp - 0x7c]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.0047c310
jmp 0x4b9ce5
lea eax, [ebp - 0x1c]
call fcn.00404684
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov eax, dword [0x58bc58]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je 0x4b9d25
mov ax, word [ebp - 0x5c]
push eax
mov ax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov cx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004ca008
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
movzx edx, word [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004ca908
cmp dword [ebp - 0x1c], 0
je case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
push 0
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 0x7c], 0x5c
lea ecx, [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x44]
mov eax, dword [ebp - 0x1c]
call fcn.0047c310
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x4c]
add eax, 0x40
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x40]
mov eax, 0x4bc984
call fcn.00404c88
test eax, eax
jle 0x4b9dc2
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0xff00ff
jmp 0x4b9dcc
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c4308
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.0047c090
call fcn.004ac3fc
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x4c], eax
jmp case.0x4bbd60.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov eax, dword [0x58bc58]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
jne 0x4b9e1c
cmp word [ebp - 0x60], 6
je 0x4b9e1c
cmp word [ebp - 0x60], 7
jne 0x4b9e46
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
movzx edx, word [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004ca908
cmp word [ebp - 0x60], 6
jne case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d940], eax
jmp case.0x4bbd60.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov eax, dword [0x58bc58]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0xd
mov eax, dword [0x58bbf0]
call fcn.004ca908
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x1c0], eax
jmp case.0x4bbd60.0
cmp byte [0x58bce4], 0
je case.0x4bbd60.0
mov ax, word [ebp - 0x64]
mov word [0x58bd24], ax
jmp case.0x4bbd60.0
mov eax, dword [ebp - 4]
call fcn.004b7c7c
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0xa
mov eax, dword [0x58bbf0]
call fcn.004ca908
jmp case.0x4bbd60.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov eax, dword [0x58bc58]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, 0xc
mov eax, dword [ebp - 0x4c]
call fcn.0050694c
jmp case.0x4bbd60.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov eax, dword [0x58bc58]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, 0xc
mov eax, dword [ebp - 0x4c]
call fcn.0050694c
jmp case.0x4bbd60.0
mov eax, dword [0x58bc58]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, word [ebp - 0x60]
mov eax, dword [ebp - 0x4c]
call fcn.0050694c
cmp word [ebp - 0x60], 0xf
jne case.0x4bbd60.0
cmp dword [ebp - 0x10], 0
je case.0x4bbd60.0
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x144], 1
jmp case.0x4bbd60.0
lea edx, [ebp - 0x2e]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, word [ebp - 0x60]
mov eax, dword [ebp - 0x4c]
call fcn.0050694c
movzx eax, word [ebp - 0x2e]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x12c], eax
movzx eax, word [ebp - 0x2c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x130], eax
mov dx, word [ebp - 0x28]
mov ax, word [ebp - 0x2a]
call fcn.004074a0
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x134], eax
jmp case.0x4bbd60.0
lea edx, [ebp - 0x74]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, word [ebp - 0x60]
mov eax, dword [ebp - 0x4c]
call fcn.0050694c
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x12c], eax
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x130], eax
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x134], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x13c], eax
jmp case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0047c090
push eax
movzx ecx, word [ebp - 0x5a]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004b1a50
jmp case.0x4bbd60.0
lea edx, [ebp - 0x44]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov ax, word [ebp - 0x5a]
call fcn.004074b0
and eax, 0xff
push eax
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x44]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x5a]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004b1afc
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004b1b64
jmp case.0x4bbd60.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x58bc58]
jne 0x4ba22d
xor ecx, ecx
mov edx, 0x4bc998
mov eax, dword [ebp - 4]
call fcn.004ac150
cmp dword [ebp - 0x4c], 0
je 0x4ba267
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, word [ebp - 0x60]
mov eax, dword [ebp - 0x4c]
call fcn.0050694c
mov eax, dword [ebp - 0x4c]
mov word [eax + 0x66], 0
jmp case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x20
mov eax, dword [0x58bbf0]
call fcn.004ca908
jmp case.0x4bbd60.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x21
mov eax, dword [0x58bbf0]
call fcn.004ca908
jmp case.0x4bbd60.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x1b
mov eax, dword [0x58bbf0]
call fcn.004ca908
jmp case.0x4bbd60.0
mov eax, dword [0x58bc58]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x84], edx
mov eax, dword [0x58bc58]
mov dl, byte [ebp - 0x5e]
mov byte [eax + 0x16], dl
lea ecx, [ebp - 0xe8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004c4e48
mov eax, dword [0x58bc58]
lea esi, [ebp - 0xe8]
lea edi, [eax + 0x50]
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [0x58bc58]
mov eax, dword [eax + 0x6e]
mov edx, dword [0x58bc58]
cmp eax, dword [edx + 0x72]
jae 0x4ba3de
mov eax, dword [0x58bc58]
mov eax, dword [eax + 0x6e]
mov dword [ebp - 0xf4], eax
xor eax, eax
mov dword [ebp - 0xf0], eax
fild qword [ebp - 0xf4]
mov eax, dword [0x58bc58]
mov eax, dword [eax + 0x72]
mov dword [ebp - 0xfc], eax
xor eax, eax
mov dword [ebp - 0xf8], eax
fild qword [ebp - 0xfc]
fdivp st(1)
fmul dword [0x4bc99c]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea ecx, [ebp - 0xec]
mov edx, 1
mov eax, 3
call fcn.0047c1d4
mov edx, dword [ebp - 0xec]
mov eax, 0x5919d8
mov ecx, 0x4bc9a8
call fcn.00404990
jmp 0x4ba3ed
mov eax, 0x5919d8
mov edx, 0x4bc9b4
call fcn.004046d8
mov eax, dword [0x58bc58]
movzx eax, word [eax + 0x76]
mov dword [ebp - 0x104], eax
fild dword [ebp - 0x104]
mov eax, dword [0x58bc58]
movzx eax, word [eax + 0x78]
mov dword [ebp - 0x108], eax
fild dword [ebp - 0x108]
fdivp st(1)
fmul dword [0x4bc99c]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea ecx, [ebp - 0x100]
mov edx, 1
mov eax, 3
call fcn.0047c1d4
mov edx, dword [ebp - 0x100]
mov eax, 0x5919dc
mov ecx, 0x4bc9a8
call fcn.00404990
jmp case.0x4bbd60.0
xor eax, eax
mov al, byte [ebp - 0x5e]
mov dword [0x58da30], eax
mov ax, word [ebp - 0x5e]
call fcn.004074b0
and eax, 0xff
mov dword [0x58da2c], eax
xor eax, eax
mov al, byte [ebp - 0x5c]
mov dword [0x58da34], eax
mov ax, word [ebp - 0x5c]
call fcn.004074b0
and eax, 0xff
mov dword [0x58da38], eax
xor eax, eax
mov al, byte [ebp - 0x5a]
mov dword [0x58da3c], eax
mov ax, word [ebp - 0x5a]
call fcn.004074b0
and eax, 0xff
mov dword [0x58da40], eax
xor eax, eax
mov al, byte [ebp - 0x64]
mov dword [0x58da44], eax
jmp case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
mov dword [0x58d83c], eax
movzx eax, word [ebp - 0x5c]
mov edx, dword [0x532cd8]
mov dword [edx], eax
mov eax, dword [0x532cd8]
cmp dword [eax], 0
jne 0x4ba4e6
mov byte [0x58d839], 0
jmp case.0x4bbd60.0
mov byte [0x58d839], 1
jmp case.0x4bbd60.0
mov eax, dword [0x58bc58]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x6e], edx
mov eax, dword [0x58bc58]
mov eax, dword [eax + 0x6e]
mov edx, dword [0x58bc58]
cmp eax, dword [edx + 0x72]
jae 0x4ba583
mov eax, dword [0x58bc58]
mov eax, dword [eax + 0x6e]
mov dword [ebp - 0xf4], eax
xor eax, eax
mov dword [ebp - 0xf0], eax
fild qword [ebp - 0xf4]
mov eax, dword [0x58bc58]
mov eax, dword [eax + 0x72]
mov dword [ebp - 0xfc], eax
xor eax, eax
mov dword [ebp - 0xf8], eax
fild qword [ebp - 0xfc]
fdivp st(1)
fmul dword [0x4bc99c]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea ecx, [ebp - 0x10c]
mov edx, 1
mov eax, 3
call fcn.0047c1d4
mov edx, dword [ebp - 0x10c]
mov eax, 0x5919d8
mov ecx, 0x4bc9a8
call fcn.00404990
jmp 0x4ba592
mov eax, 0x5919d8
mov edx, 0x4bc9b4
call fcn.004046d8
push 0xff
push 0x4bc9c0
lea edx, [ebp - 0x114]
movzx eax, word [ebp - 0x5e]
call fcn.00408d74
push dword [ebp - 0x114]
push 0x4bc9d0
lea eax, [ebp - 0x110]
mov edx, 3
call fcn.00404a04
mov edx, dword [ebp - 0x110]
mov ecx, 0xffffff
mov eax, dword [0x58bbe0]
call fcn.004d170c
jmp case.0x4bbd60.0
mov edx, 0x4bc9e4
mov eax, dword [0x58bbe0]
call fcn.004d13a8
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
mov eax, dword [ebp - 0x4c]
cmp word [eax + 0x66], 0
jbe 0x4ba636
movzx eax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
movzx edx, word [edx + 0x66]
sub eax, edx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c4850
mov ax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x66], ax
mov ax, word [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x68], ax
mov ax, word [ebp - 0x5a]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x6a], ax
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x48], 0
jne 0x4ba693
cmp byte [0x5a514b], 0
jbe 0x4ba693
lea ecx, [ebp - 0x118]
mov eax, dword [ebp - 0x4c]
movzx edx, word [eax + 0x6c]
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 0x6a]
call fcn.0047d5f0
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x4c]
add eax, 0x48
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x58bc58]
jne case.0x4bbd60.0
mov eax, dword [ebp - 4]
call fcn.004b1fd0
jmp case.0x4bbd60.0
lea edx, [ebp - 0x74]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x58bc58]
jne 0x4ba78f
mov eax, dword [0x58bc58]
cmp dword [eax + 0x4c], 0xf9
jne 0x4ba700
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d934], eax
cmp byte [0x5a58e1], 0
jne 0x4ba710
mov byte [0x5a60f8], 1
mov eax, dword [0x58bc58]
mov edx, dword [ebp - 0x6c]
mov dword [eax + 0x138], edx
cmp byte [0x5a5945], 1
jne 0x4ba753
mov eax, dword [0x58bc58]
cmp byte [eax + 0x16], 0
jne 0x4ba753
mov edx, dword [ebp - 0x6c]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp byte [eax + 0x12], 0
jne 0x4ba753
mov eax, dword [ebp - 0x50]
mov dword [0x58d998], eax
cmp byte [0x5a5159], 1
jne 0x4ba7a3
mov edx, dword [ebp - 0x6c]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x4ba7a3
xor eax, eax
mov al, byte [0x5a515e]
shl eax, 0x1e
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x28], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x2c], eax
jmp 0x4ba7a3
mov eax, dword [ebp - 0x4c]
call fcn.0050a7d0
test al, al
je 0x4ba7a3
mov eax, dword [ebp - 0x4c]
call fcn.0050a800
cmp byte [0x5a5148], 0
je 0x4ba7b7
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x58bc58]
je 0x4ba7dd
push 0
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x68]
mov dx, 0x1f
mov eax, dword [ebp - 0x4c]
call fcn.00506a0c
jmp 0x4ba801
push 0
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
push 0
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x68]
mov dx, 0x7987
mov eax, dword [ebp - 0x4c]
call fcn.00506a0c
mov eax, dword [ebp - 0x4c]
cmp word [eax + 0x66], 0
jbe 0x4ba829
movzx eax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
movzx edx, word [edx + 0x66]
sub eax, edx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c4850
mov ax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x66], ax
mov ax, word [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x6a], ax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x58bc58]
jne case.0x4bbd60.0
mov eax, dword [ebp - 4]
call fcn.004b1fd0
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
lea edx, [ebp - 0x38]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x160], eax
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x164], eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x168], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x160]
call fcn.00512ab0
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x58bc58]
je 0x4ba93d
mov ax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x66], ax
mov ax, word [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x6a], ax
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x48], 0
jne 0x4ba93d
cmp byte [0x5a514b], 0
jbe 0x4ba93d
lea ecx, [ebp - 0x11c]
mov eax, dword [ebp - 0x4c]
movzx edx, word [eax + 0x6c]
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 0x6a]
call fcn.0047d5f0
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x4c]
add eax, 0x48
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x1a0], 1
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x1a0], 0
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
mov eax, dword [ebp - 0x4c]
cmp word [eax + 0x66], 0
jbe 0x4ba9b7
movzx eax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
movzx edx, word [edx + 0x66]
sub eax, edx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c4850
mov ax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x66], ax
mov ax, word [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov word [edx + 0x6a], ax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x58bc58]
jne 0x4ba9e0
mov eax, dword [ebp - 4]
call fcn.004b1fd0
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0x1a1], 1
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x1a8], 0x7d0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x1a4], eax
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
mov eax, dword [ebp - 0x4c]
mov edx, dword [0x505c5c]
call fcn.00403ac0
test al, al
je case.0x4bbd60.0
mov eax, dword [ebp - 0x4c]
call fcn.0050c0e4
jmp case.0x4bbd60.0
cmp byte [0x5a58ce], 1
jne 0x4baa5b
cmp word [ebp - 0x60], 0x66
je case.default.0x4b8966
cmp byte [0x5a58cf], 1
jne 0x4baa6f
cmp word [ebp - 0x60], 0x68
je case.default.0x4b8966
cmp byte [0x5a58d0], 1
jne 0x4baa83
cmp word [ebp - 0x60], 0x65
je case.default.0x4b8966
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00513218
cmp byte [0x5a58ca], 1
jne 0x4baafd
cmp word [ebp - 0x60], 0x67
jne 0x4baafd
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x20]
call fcn.004b85a4
mov eax, dword [ebp - 0x24]
mov edx, dword [0x58bc58]
mov edx, dword [edx + 0x44]
call fcn.00404a90
je 0x4baafd
push 0x4bc9f8
push dword [ebp - 0x24]
push 0x4bca04
lea eax, [ebp - 0x124]
mov edx, 0x5a57b9
call fcn.004048e8
push dword [ebp - 0x124]
lea eax, [ebp - 0x120]
mov edx, 4
call fcn.00404a04
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 4]
call fcn.004b5e94
mov edx, dword [ebp - 0x20]
mov eax, dword [0x58bbe0]
call fcn.004d14dc
mov ax, word [ebp - 0x5e]
call fcn.004074b0
call fcn.004ac3fc
push eax
mov al, byte [ebp - 0x5e]
call fcn.004ac3fc
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x58bbe0]
call fcn.004d170c
cmp word [ebp - 0x60], 0x68
jne case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.004f07a8
jmp case.0x4bbd60.0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00513218
movzx eax, word [ebp - 0x5e]
push eax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x20]
mov eax, dword [0x58bbe0]
call fcn.004d1420
jmp case.0x4bbd60.0
cmp byte [0x5a58cd], 1
je case.default.0x4b8966
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4bac33
mov eax, dword [ebp - 0x20]
call fcn.004b850c
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffff
jle 0x4babfd
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xc8], eax
mov eax, dword [ebp - 0x4c]
mov byte [eax + 0xc4], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xd0], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0xd0]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0xd4], eax
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov dword [eax + 0xcc], edx
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
call fcn.0050a8ac
mov ax, word [ebp - 0x5e]
call fcn.004074b0
call fcn.004ac3fc
push eax
mov al, byte [ebp - 0x5e]
call fcn.004ac3fc
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x58bbe0]
call fcn.004d170c
jmp case.0x4bbd60.0
mov ax, word [ebp - 0x5e]
call fcn.004074b0
call fcn.004ac3fc
push eax
mov al, byte [ebp - 0x5e]
call fcn.004ac3fc
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x58bbe0]
call fcn.004d170c
jmp case.0x4bbd60.0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
push 0
lea eax, [ebp - 0x128]
push eax
mov byte [ebp - 0x7c], 0x5c
lea ecx, [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 0x44]
mov eax, dword [ebp - 0x20]
call fcn.0047c310
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x4c]
add eax, 0x40
call fcn.004046d8
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 0x40]
mov eax, 0x4bc984
call fcn.00404c88
test eax, eax
jle 0x4bacd2
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0xff00ff
jmp 0x4bacdc
mov eax, dword [ebp - 0x4c]
mov dword [eax + 0x3c], 0x70ccc8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
call fcn.004c4308
mov al, byte [ebp - 0x5e]
call fcn.004ac3fc
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x4c], eax
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
mov al, byte [ebp - 0x5e]
call fcn.004ac3fc
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x4c], eax
jmp case.0x4bbd60.0
mov eax, dword [0x58bc58]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x1bf9
mov eax, dword [0x58bbf0]
call fcn.004ca908
jmp case.0x4bbd60.0
lea edx, [ebp - 0x74]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.005132b4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x4badad
mov ax, word [ebp - 0x5c]
push eax
mov ax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
mov cx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004ca008
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x140], eax
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x70]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x5e]
mov dx, 0x14
mov eax, dword [ebp - 0x4c]
call fcn.0050694c
jmp case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
push eax
movzx eax, word [ebp - 0x5c]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x64]
mov edx, 0x15
mov eax, dword [0x58bbf0]
call fcn.004ca908
jmp case.0x4bbd60.0
lea edx, [ebp - 0x26]
mov ecx, 2
mov eax, dword [ebp - 0x10]
call fcn.005132b4
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
movzx eax, word [ebp - 0x5e]
push eax
mov ecx, dword [ebp - 0x64]
mov dl, 1
mov eax, dword [0x4cf1cc]
call fcn.004cf28c
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor edx, edx
mov dword [eax + 0xc], edx
movzx eax, word [ebp - 0x26]
mov edx, dword [ebp - 0x54]
mov dword [edx + 0x1c], eax
mov edx, dword [ebp - 0x54]
mov eax, dword [0x58bc28]
call fcn.004cf694
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bc28]
call fcn.004cf718
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bdb80
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004be100
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bdc28
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bdcec
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bdeb4
jmp case.0x4bbd60.0
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov eax, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x64]
call fcn.00511818
jmp case.0x4bbd60.0
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov edx, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004be1b8
jmp case.0x4bbd60.0
movzx eax, word [ebp - 0x5c]
push eax
movzx eax, word [ebp - 0x5a]
push eax
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov eax, dword [ebp - 0x134]
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004be228
jmp case.0x4bbd60.0
movzx eax, word [ebp - 0x5c]
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004be538
jmp case.0x4bbd60.0
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x5e]
mov eax, dword [0x58bc50]
call fcn.00510578
jmp case.0x4bbd60.0
mov edx, 0x4bca10
mov eax, dword [0x58bbe0]
call fcn.004d13a8
jmp case.0x4bbd60.0
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x5e]
mov eax, dword [0x58bc50]
call fcn.0051069c
jmp case.0x4bbd60.0
mov eax, dword [0x58bc58]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x1c], edx
mov eax, dword [0x58bc58]
mov si, 0xfff5
call fcn.00403b30
mov eax, dword [0x58d8a4]
sub eax, 0xd
jae 0x4bafd9
mov eax, dword [0x58d8a4]
mov edx, eax
shl eax, 4
add eax, edx
lea edi, [eax*4 + 0x58bc5c]
mov esi, 0x58d8a8
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov byte [0x58d8a8], 0
jmp case.0x4bbd60.0
mov eax, 0x58d8a8
call fcn.005112d8
mov byte [0x58d8a8], 0
jmp case.0x4bbd60.0
mov eax, dword [0x58bc58]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x1c], edx
mov eax, dword [0x58bc58]
mov si, 0xfff5
call fcn.00403b30
mov byte [0x58d8a8], 0
jmp case.0x4bbd60.0
cmp dword [0x58d8a4], 0
jge 0x4bb051
mov eax, dword [0x58d8a4]
inc eax
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov edx, eax
shl eax, 4
add eax, edx
lea edi, [eax*4 + 0x58bc5c]
mov esi, 0x58d8a8
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov byte [0x58d8a8], 0
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004be5a8
jmp case.0x4bbd60.0
mov eax, dword [0x58bc58]
mov dx, word [ebp - 0x64]
mov word [eax + 0x76], dx
mov eax, dword [0x58bc58]
movzx eax, word [eax + 0x76]
mov dword [ebp - 0x104], eax
fild dword [ebp - 0x104]
mov eax, dword [0x58bc58]
movzx eax, word [eax + 0x78]
mov dword [ebp - 0x108], eax
fild dword [ebp - 0x108]
fdivp st(1)
fmul dword [0x4bc99c]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea ecx, [ebp - 0x138]
mov edx, 1
mov eax, 3
call fcn.0047c1d4
mov edx, dword [ebp - 0x138]
mov eax, 0x5919dc
mov ecx, 0x4bc9a8
call fcn.00404990
mov eax, dword [0x58bc58]
mov dx, word [ebp - 0x5e]
mov word [eax + 0x7a], dx
mov eax, dword [0x58bc58]
mov dx, word [ebp - 0x5c]
mov word [eax + 0x7e], dx
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x64]
mov dword [0x5a6140], eax
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
mov dword [0x5a6144], eax
cmp dword [ebp - 0x10], 0
je case.0x4bbd60.0
lea edx, [ebp - 0x13c]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov edx, dword [ebp - 0x13c]
mov eax, 0x5a6148
call fcn.004046d8
jmp case.0x4bbd60.0
mov eax, 0x6a
call fcn.005057c8
mov eax, dword [0x58bc58]
mov eax, dword [eax + 0x84]
cmp eax, dword [ebp - 0x64]
jge 0x4bb199
mov eax, dword [0x58bc58]
push dword [eax + 0x84]
mov eax, dword [ebp - 0x64]
pop edx
sub eax, edx
lea edx, [ebp - 0x140]
call fcn.00408d74
lea eax, [ebp - 0x140]
mov edx, 0x4bca28
call fcn.0040494c
mov edx, dword [ebp - 0x140]
mov eax, dword [0x58bbe0]
call fcn.004d13a8
mov eax, dword [0x58bc58]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x84], edx
jmp case.0x4bbd60.0
push 0
push 0
push 0
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
movzx edx, word [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004ca908
jmp case.0x4bbd60.0
push 0
push 0
push 0
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
push eax
movzx eax, word [ebp - 0x5a]
push eax
push 0
movzx edx, word [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004ca908
jmp case.0x4bbd60.0
mov byte [0x58d964], 1
jmp case.0x4bbd60.0
mov byte [0x58d8ec], 0
call fcn.00511550
jmp case.0x4bbd60.0
mov eax, 0x58d8ec
call fcn.005112d8
mov byte [0x58d8ec], 0
jmp case.0x4bbd60.0
cmp dword [ebp - 0x10], 0
je case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004be6c0
jmp case.0x4bbd60.0
cmp dword [ebp - 0x10], 0
je case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004be814
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004be7ac
jmp case.0x4bbd60.0
mov dx, word [ebp - 0x5a]
mov ax, word [ebp - 0x5c]
call fcn.004074a0
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004be9a8
jmp case.0x4bbd60.0
mov dx, word [ebp - 0x5a]
mov ax, word [ebp - 0x5c]
call fcn.004074a0
push eax
movzx edx, word [ebp - 0x5e]
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004beb20
jmp case.0x4bbd60.0
lea edx, [ebp - 0x144]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov eax, dword [ebp - 0x144]
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bebf8
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
call fcn.004ea7b4
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004becd8
jmp case.0x4bbd60.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004beee8
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bf0fc
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bf13c
jmp case.0x4bbd60.0
cmp byte [0x58d75c], 0
je case.0x4bbd60.0
cmp dword [ebp - 0x64], 0
jle 0x4bb389
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 0x64]
call fcn.00408d74
mov edx, dword [ebp - 0x148]
mov eax, 0x58d830
mov ecx, 0x4bca38
call fcn.00404990
jmp case.0x4bbd60.0
mov eax, 0x58d830
mov edx, 0x4bca48
call fcn.004046d8
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
mov eax, dword [0x58bc58]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x84], edx
mov byte [0x58d7a0], 0
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
mov eax, 0x58d7a0
call fcn.005112d8
mov byte [0x58d7a0], 0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bca5c
call fcn.004e2b8c
jmp case.0x4bbd60.0
cmp byte [0x58d75c], 0
je case.0x4bbd60.0
cmp dword [ebp - 0x64], 0
jl 0x4bb446
lea edx, [ebp - 0x14c]
mov eax, dword [ebp - 0x64]
call fcn.00408d74
mov edx, dword [ebp - 0x14c]
mov eax, 0x58d830
mov ecx, 0x4bca38
call fcn.00404990
jmp case.0x4bbd60.0
mov eax, 0x58d830
mov edx, 0x4bca48
call fcn.004046d8
jmp case.0x4bbd60.0
cmp byte [0x58d7a0], 0
je case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
mov eax, dword [0x58bc58]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x84], edx
mov ax, word [ebp - 0x5e]
mov word [0x58d7e0], ax
mov ax, word [ebp - 0x5c]
mov word [0x58d7e2], ax
mov eax, 0x58d7a0
call fcn.005112d8
mov byte [0x58d7a0], 0
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
mov eax, 0x58d7a0
call fcn.005112d8
mov byte [0x58d7a0], 0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bca78
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
cmp word [ebp - 0x60], 0x2bd
je 0x4bb552
cmp word [ebp - 0x60], 0x2be
jne 0x4bb530
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bca94
call fcn.004e2b8c
jmp 0x4bb548
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcaa8
call fcn.004e2b8c
mov eax, 0x58d7a0
call fcn.005112d8
mov byte [0x58d7a0], 0
jmp case.0x4bbd60.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bf1bc
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
cmp word [ebp - 0x60], 0x2c1
je 0x4bb5ce
cmp word [ebp - 0x60], 0x2c3
jne 0x4bb5b1
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcabc
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcad0
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x64]
call fcn.004ebbfc
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
mov eax, dword [0x58bc58]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x84], edx
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
mov edx, eax
mov eax, dword [0x532f8c]
mov eax, dword [eax]
call fcn.004ebb2c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
mov eax, dword [ebp - 0x64]
dec eax
je 0x4bb647
dec eax
je 0x4bb664
dec eax
je 0x4bb681
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcae4
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcb00
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcb20
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
mov eax, dword [0x58bc58]
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x84], edx
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcb38
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
mov eax, dword [ebp - 0x64]
dec eax
je 0x4bb703
dec eax
je 0x4bb720
dec eax
je 0x4bb73d
dec eax
je 0x4bb75a
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcb50
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcb50
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcb50
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcb68
call fcn.004e2b8c
jmp case.0x4bbd60.0
movzx eax, word [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x5e]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bf3cc
jmp case.0x4bbd60.0
inc dword [0x58da60]
jmp case.0x4bbd60.0
cmp dword [ebp - 0x64], 0x7d0
jne 0x4bb7b1
mov byte [0x530b20], 1
jmp 0x4bb7b8
mov byte [0x530b20], 0
mov byte [0x530b24], 1
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bf5bc
jmp case.0x4bbd60.0
cmp dword [ebp - 0x64], 1
jne case.0x4bbd60.0
mov dword [ebp - 0x64], 1
jmp case.0x4bbd60.0
cmp word [ebp - 0x5e], 0
jbe 0x4bb7f5
mov byte [0x58da04], 1
jmp 0x4bb7fc
mov byte [0x58da04], 0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f4], eax
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f4], eax
mov byte [0x58da04], 1
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f4], eax
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffc
je 0x4bb897
dec eax
je 0x4bb87a
dec eax
je 0x4bb85d
dec eax
jne case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcb80
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcba4
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcbcc
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcbe4
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f4], eax
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f4], eax
mov eax, dword [ebp - 0x64]
add eax, 5
cmp eax, 4
ja case.0x4bbd60.0
jmp dword [eax*4 + 0x4bb8e3]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcc08
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcc2c
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcc58
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcca0
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bccb8
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f4], eax
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f4], eax
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffd
je 0x4bb9ed
dec eax
je 0x4bb9d0
dec eax
jne case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcce4
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bccf8
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcd0c
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x58da08]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.0x4bbd60.0
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov edx, dword [ebp - 0x150]
mov eax, dword [ebp - 4]
call fcn.004bf6e0
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9fc], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bf778
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9fc], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004bfc2c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9fc], eax
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcd28
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9fc], eax
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcd44
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9fc], eax
lea edx, [ebp - 0x154]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov edx, dword [ebp - 0x154]
mov eax, 0x58d5f0
call fcn.004046d8
mov eax, dword [0x532f8c]
mov eax, dword [eax]
call fcn.004ed69c
jmp case.0x4bbd60.0
call fcn.00511948
cmp byte [0x58d7e4], 0
je 0x4bbb14
mov eax, 0x58d7e4
call fcn.005112d8
mov byte [0x58d7e4], 0
cmp dword [0x58d5e4], 0
jle 0x4bbb35
mov eax, dword [0x58bc58]
mov edx, dword [0x58d5e4]
add dword [eax + 0x84], edx
xor eax, eax
mov dword [0x58d5e4], eax
mov eax, dword [0x532f8c]
mov eax, dword [eax]
call fcn.004ed794
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f8], eax
cmp byte [0x58d7e4], 0
je case.0x4bbd60.0
mov eax, 0x58d7e4
call fcn.005118e8
mov byte [0x58d7e4], 0
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f8], eax
cmp byte [0x58d7e4], 0
je case.0x4bbd60.0
mov eax, 0x58d7e4
call fcn.005112d8
mov byte [0x58d7e4], 0
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f8], eax
cmp byte [0x58d7e4], 0
je case.0x4bbd60.0
mov byte [0x58d7e4], 0
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f8], eax
cmp byte [0x58d7e4], 0
je case.0x4bbd60.0
lea eax, [ebp - 0x158]
mov edx, 0x58d7e4
call fcn.004048e8
mov eax, dword [ebp - 0x158]
mov edx, dword [0x58d820]
call fcn.0051147c
mov eax, 0x58d7e4
call fcn.005118e8
mov byte [0x58d7e4], 0
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004c02c8
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004c0328
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x64]
mov dword [0x58d5e4], eax
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
mov edx, dword [0x58bc58]
mov dword [edx + 0x84], eax
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f8], eax
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x64]
mov dword [0x58d5e4], eax
mov dx, word [ebp - 0x5c]
mov ax, word [ebp - 0x5e]
call fcn.004074a0
mov edx, dword [0x58bc58]
mov dword [edx + 0x84], eax
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9f8], eax
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x64]
mov dword [0x58d5e8], eax
mov eax, 0x6a
call fcn.005057c8
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
call fcn.004ed794
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004bf17c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9fc], eax
movzx edx, word [ebp - 0x5e]
mov eax, dword [ebp - 4]
call fcn.004c0388
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x58d9fc], eax
mov dword [0x58d96c], 0xffffffff
push 0xff
mov ecx, 0xffffff
mov edx, 0x4bcd78
mov eax, dword [0x58bbe0]
call fcn.004d170c
jmp case.0x4bbd60.0
lea edx, [ebp - 0x15c]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov edx, dword [ebp - 0x15c]
mov eax, dword [ebp - 4]
call fcn.004c0430
jmp case.0x4bbd60.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004c04bc
jmp case.0x4bbd60.0
mov eax, dword [ebp - 4]
call fcn.004b7684
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x64]
cmp eax, 5
ja case.0x4bbd60.0
jmp dword [eax*4 + 0x4bbd67]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcd94
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcdb8
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcde0
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bce0c
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bce38
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [ebp - 4]
call fcn.004b7684
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x64]
dec eax
je 0x4bbe31
dec eax
je 0x4bbe4e
dec eax
je 0x4bbe6b
dec eax
je 0x4bbe88
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcd94
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bce54
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bce74
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcea8
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x64]
add eax, 7
cmp eax, 5
ja case.0x4bbd60.0
jmp dword [eax*4 + 0x4bbebb]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcecc
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcef8
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcf28
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcf5c
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcf88
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcfb0
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffc
je 0x4bbfed
dec eax
je 0x4bbfd0
dec eax
je 0x4bbfb3
dec eax
jne case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcfec
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bd004
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bd024
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bd054
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffd
je 0x4bc056
dec eax
je 0x4bc039
dec eax
jne case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bcfec
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bd078
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bd0a0
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bd0c0
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
mov eax, dword [ebp - 0x64]
sub eax, 0xfffffffd
je 0x4bc102
dec eax
je 0x4bc0e5
dec eax
jne case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bd0d8
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bd0f8
call fcn.004e2b8c
jmp case.0x4bbd60.0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
mov edx, 0x4bd110
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
cmp dword [ebp - 0x10], 0
je case.0x4bbd60.0
lea edx, [ebp - 0x160]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov edx, dword [ebp - 0x160]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
call fcn.004e2b8c
jmp case.0x4bbd60.0
cmp dword [ebp - 0x10], 0
je case.0x4bbd60.0
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x10]
call fcn.00513218
mov edx, dword [ebp - 0x164]
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov cx, word [0x4bc3c0]
call fcn.004e2b8c
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
jmp case.0x4bbd60.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x532f8c]
mov edx, dword [edx]
mov dword [edx + 0x718], eax
jmp case.0x4bbd60.0
mov eax, dword [0x58bc58]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x64]
je case.0x4bbd60.0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x58bbf0]
call fcn.004c9e9c
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x12c], eax
movzx eax, word [ebp - 0x5c]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x130], eax
jmp case.0x4bbd60.0
mov eax, dword [0x58bbf0]
mov eax, dword [eax + 0x62584]
mov dl, 0x2a
call fcn.00435d1c
jmp case.0x4bbd60.0
movzx eax, word [ebp - 0x5e]
mov dword [0x5a612c], eax
mov eax, dword [ebp - 0x10]
call fcn.004b7cb0
mov eax, dword [0x532f8c]
mov eax, dword [eax]
mov eax, dword [eax + 0x6a4]
mov dl, 1
call fcn.004903fc
mov edx, dword [ebp - 8]
mov eax, 0x4bd128
call fcn.00404c88
test eax, eax
jle case.default.0x4b8966
mov edx, dword [ebp - 8]
mov eax, dword [0x58bbe0]
call fcn.004d13a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bc2c9
lea eax, [ebp - 0x164]
mov edx, 0x17
call fcn.004046a8
lea eax, [ebp - 0x100]
call fcn.00404684
lea eax, [ebp - 0xec]
call fcn.00404684
lea eax, [ebp - 0xb4]
mov edx, 0xe
call fcn.004046a8
lea eax, [ebp - 0x78]
call fcn.00404684
lea eax, [ebp - 0x58]
call fcn.00404684
lea eax, [ebp - 0x24]
mov edx, 8
call fcn.004046a8
ret