Function at 0x4b6060
Capabilities:
Check for software breakpoints
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x11
push 0
push 0
dec ecx
jne 0x4b6068
push ecx
push ebx
push esi
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.00405540
xor eax, eax
push ebp
push 0x4b8140
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
cmp byte [eax], 0x2b
jne 0x4b610f
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
call fcn.00405350
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.004055b0
push 0
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 0x28], 0x2f
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0046fbf8
mov edx, dword [ebp - 0x24]
lea eax, [ebp - 8]
call fcn.00405118
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.004ae710
mov eax, dword [0x544aa4]
cmp byte [eax + 4], 0
je case.0x4b6d20.5203
cmp dword [ebp - 8], 0
je case.0x4b6d20.5203
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0040c068
mov edx, eax
mov eax, ebx
call fcn.004be8d4
jmp case.0x4b6d20.5203
mov eax, dword [ebp - 4]
call fcn.00405350
cmp eax, 0x10
jge 0x4b6178
mov eax, dword [ebp - 4]
cmp byte [eax], 0x3d
jne case.0x4b6d20.5203
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
call fcn.00405350
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.004055b0
mov eax, dword [ebp - 8]
mov edx, 0x4b8158
call fcn.0040549c
jne case.0x4b6d20.5203
mov eax, dword [0x544738]
cmp dword [eax], 0
je case.0x4b6d20.5203
mov eax, dword [0x544738]
mov eax, dword [eax]
mov byte [eax + 0x15c], 1
jmp case.0x4b6d20.5203
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.004055b0
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 4]
call fcn.00405350
mov ecx, eax
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 4]
call fcn.004055b0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.0048e2dc
mov eax, dword [0x544738]
cmp dword [eax], 0
jne 0x4b6459
movzx eax, word [ebp - 0x1c]
cmp eax, 0x211
jg 0x4b6268
je 0x4b6368
cmp eax, 0x209
jg 0x4b6237
je 0x4b63b9
cmp eax, 0x1f9
jg 0x4b6217
je 0x4b6323
add eax, 0xffffffce
sub eax, 2
jb 0x4b6459
sub eax, 0x1c3
je 0x4b6332
dec eax
je 0x4b6317
jmp case.0x4b6d20.5203
sub eax, 0x1fa
je 0x4b63d4
dec eax
je 0x4b63dd
sub eax, 0xd
je 0x4b639b
jmp case.0x4b6d20.5203
add eax, 0xfffffdf6
cmp eax, 6
ja case.0x4b6d20.5203
jmp dword [eax*4 + 0x4b624c]
cmp eax, 0x219
jg 0x4b62a6
je 0x4b637a
add eax, 0xfffffdee
cmp eax, 6
ja case.0x4b6d20.5203
jmp dword [eax*4 + 0x4b628a]
cmp eax, 0x7d7
jg 0x4b62d3
je 0x4b6305
sub eax, 0x21a
je 0x4b643a
sub eax, 0x78
je 0x4b6459
sub eax, 0x90
je 0x4b6459
jmp case.0x4b6d20.5203
sub eax, 0x4e22
je 0x4b62f3
dec eax
jne case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bbcec
jmp 0x4b6459
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bd52c
jmp 0x4b6459
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004aeadc
jmp 0x4b6459
mov eax, ebx
call fcn.004aeb04
jmp 0x4b6459
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004aebc8
jmp 0x4b6459
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004aedb0
jmp 0x4b6459
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8584
jmp 0x4b6459
mov eax, ebx
call fcn.004aef9c
jmp 0x4b6459
mov eax, ebx
call fcn.004af05c
jmp 0x4b6459
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8310
jmp 0x4b6459
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b81e8
jmp 0x4b6459
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b81b4
jmp 0x4b6459
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b85ec
jmp 0x4b6459
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004af09c
jmp 0x4b6459
mov eax, ebx
call fcn.004aab84
jmp 0x4b6459
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004af0f8
jmp 0x4b6459
mov eax, ebx
call fcn.004af2ac
jmp 0x4b6459
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004af2e4
jmp 0x4b6459
mov eax, ebx
call fcn.004aab84
jmp 0x4b6459
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004af398
jmp 0x4b6459
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b87f4
jmp 0x4b6459
mov eax, ebx
call fcn.004af3e4
jmp 0x4b6459
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b46bc
jmp 0x4b6459
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b4820
jmp 0x4b6459
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b47cc
jmp 0x4b6459
mov eax, dword [ebp - 0x14]
push eax
cmp dword [ebp - 0x20], 0
sete dl
movzx ecx, word [ebp - 0x1a]
mov eax, ebx
call fcn.004b4a28
jmp 0x4b6459
mov eax, ebx
call fcn.004b0450
mov eax, dword [0x54450c]
cmp byte [eax], 0
je 0x4b64c3
cmp word [ebp - 0x1c], 0x27a
jne case.0x4b6d20.5203
mov eax, dword [ebp - 0x20]
mov dword [ebx + 0x394], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 0x398], eax
mov eax, dword [ebp - 0x18]
mov dword [ebx + 0x39c], eax
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov edx, dword [ebp - 0x2c]
lea eax, [ebx + 0x3a0]
call fcn.004050d4
mov eax, dword [0x544e74]
mov byte [eax], 1
mov dl, 1
mov eax, dword [ebx + 0x334]
call fcn.00435f84
mov word [ebp - 0x1c], 0
jmp case.0x4b6d20.5203
mov si, word [ebp - 0x1c]
movzx eax, si
cmp eax, 0x302
jge 0x4b693c
cmp eax, 0x283
jg 0x4b672f
je 0x4b7730
cmp eax, 0x3c
jge 0x4b65ce
add eax, 0xfffffffb
cmp eax, 0x32
ja case.0x4b6d20.5203
jmp dword [eax*4 + 0x4b6502]
cmp eax, 0x263
jg 0x4b669e
je 0x4b7217
cmp eax, 0xcc
jg 0x4b6647
je 0x4b71a0
cmp eax, 0xc8
jg 0x4b6629
je 0x4b7170
add eax, 0xffffffc4
sub eax, 3
jb case.0x4b64fb.8
add eax, 0xfffffffd
sub eax, 3
jb case.0x4b64fb.8
dec eax
je case.0x4b64fb.8
add eax, 0xffffffe2
sub eax, 6
jb case.0x4b6d20.5206
jmp case.0x4b6d20.5203
sub eax, 0xc9
je 0x4b717f
dec eax
je 0x4b71af
dec eax
je 0x4b7191
jmp case.0x4b6d20.5203
cmp eax, 0x210
jg 0x4b667e
je 0x4b6fea
sub eax, 0xd2
je 0x4b76c1
dec eax
je 0x4b76d0
dec eax
je 0x4b76df
add eax, 0xffffffa8
sub eax, 4
jb case.0x4b64fb.8
jmp case.0x4b6d20.5203
sub eax, 0x258
je 0x4b71cd
dec eax
je 0x4b71e8
sub eax, 9
je 0x4b7205
jmp case.0x4b6d20.5203
add eax, 0xfffffd9c
cmp eax, 0x1e
ja case.0x4b6d20.5203
jmp dword [eax*4 + 0x4b66b3]
add eax, 0xfffffd7c
cmp eax, 0x7d
ja case.0x4b6d20.5203
jmp dword [eax*4 + 0x4b6744]
cmp eax, 0x1429
jg 0x4b6c43
je 0x4b742c
cmp eax, 0x13ce
jg 0x4b6ac6
je 0x4b7ca5
cmp eax, 0xbd6
jg 0x4b6a28
je 0x4b709e
cmp eax, 0x326
jg 0x4b69d0
je 0x4b6efa
cmp eax, 0x322
jg 0x4b69b2
je 0x4b6e73
add eax, 0xfffffcfe
sub eax, 2
jb 0x4b7aec
je 0x4b7b25
sub eax, 0x1c
je 0x4b6efa
dec eax
je 0x4b6f09
jmp case.0x4b6d20.5203
sub eax, 0x323
je case.0x4b64fb.29
dec eax
je 0x4b714f
dec eax
je 0x4b7161
jmp case.0x4b6d20.5203
cmp eax, 0x44e
jg 0x4b6a08
je 0x4b70dd
sub eax, 0x327
je 0x4b6f09
sub eax, 4
je 0x4b6eb5
sub eax, 0x121
je 0x4b70aa
dec eax
je 0x4b70bc
jmp case.0x4b6d20.5203
sub eax, 0x44f
je 0x4b70cb
dec eax
je 0x4b708c
sub eax, 0x60
je 0x4b7b4c
jmp case.0x4b6d20.5203
cmp eax, 0xffd
jg 0x4b6a6e
je 0x4b7d41
add eax, 0xfffff00c
cmp eax, 8
ja case.0x4b6d20.5203
jmp dword [eax*4 + 0x4b6a4a]
cmp eax, 0x13c7
jg 0x4b6aa4
je 0x4b7c38
sub eax, 0xffe
je 0x4b7d50
dec eax
je 0x4b7d5f
dec eax
je 0x4b7d6e
sub eax, 0x3c5
je 0x4b7c29
jmp case.0x4b6d20.5203
sub eax, 0x13c8
je 0x4b7c4a
sub eax, 2
je 0x4b7c59
sub eax, 2
je 0x4b7c74
jmp case.0x4b6d20.5203
add eax, 0xffffec31
cmp eax, 0x59
ja case.0x4b6d20.5203
jmp dword [eax*4 + 0x4b6adb]
cmp eax, 0x1450
jg 0x4b6d01
je 0x4b7ea1
add eax, 0xffffebd6
cmp eax, 0x25
ja case.0x4b6d20.5203
jmp dword [eax*4 + 0x4b6c69]
cmp eax, 0x146b
jg 0x4b6d8f
je 0x4b80aa
add eax, 0xffffebaf
cmp eax, 0x19
ja case.0x4b6d20.5203
jmp dword [eax*4 + 0x4b6d27]
cmp eax, 0x4e25
jg 0x4b6df0
je 0x4b7b91
cmp eax, 0x232c
jg 0x4b6dd6
je 0x4b7bb2
sub eax, 0x146d
je 0x4b80e0
dec eax
je 0x4b8100
sub eax, 0xad5
je 0x4b7b5e
sub eax, 0x3e6
je 0x4b7b7f
jmp case.0x4b6d20.5203
sub eax, 0x4e21
je 0x4b7b6d
dec eax
je 0x4b6e61
dec eax
je 0x4b7bc1
jmp case.0x4b6d20.5203
cmp eax, 0x4e2a
jg 0x4b6e1b
je 0x4b7bd3
sub eax, 0x4e26
je 0x4b7bff
dec eax
je 0x4b7c0b
dec eax
je 0x4b7ba0
jmp case.0x4b6d20.5203
sub eax, 0x4e2b
je 0x4b7bf0
sub eax, 0xafe1
je 0x4b785b
dec eax
je 0x4b78c0
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004af424
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004af4b0
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bd52c
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b89a8
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004af838
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8c80
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8d98
jmp case.0x4b6d20.5203
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b8e6c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004af840
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004af850
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004afa14
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004afba0
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004afbdc
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004afdd4
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004afed8
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004affb8
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004affdc
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0000
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b00b0
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b011c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b01f8
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b02ac
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b035c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b03c4
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b0448
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b0450
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b04c8
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b05b4
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0648
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b070c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b0788
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b0798
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b0860
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b08d8
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0a34
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0cbc
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b0d7c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0d84
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b0e08
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0e0c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b0e9c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0ecc
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b1260
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1300
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1328
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b1360
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b141c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b1444
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1520
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8f58
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9488
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9030
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b90e4
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9180
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9248
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x20]
call fcn.00526fcc
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004ba54c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004ba5b8
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004ba7e0
jmp case.0x4b6d20.5203
movzx ecx, word [ebp - 0x18]
movzx edx, word [ebp - 0x1a]
mov eax, dword [0x5451f4]
mov eax, dword [eax]
call fcn.00502e74
jmp case.0x4b6d20.5203
push 0x28
push 0xffff00
mov eax, dword [0x544a40]
mov eax, dword [eax]
mov ecx, 0x1e
mov edx, 0x4b8164
call fcn.0053ac38
jmp case.0x4b6d20.5203
movzx ecx, word [ebp - 0x18]
movzx edx, word [ebp - 0x1a]
mov eax, dword [0x5451f4]
mov eax, dword [eax]
call fcn.00502f2c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004ba158
jmp case.0x4b6d20.5203
mov eax, dword [0x5452a8]
mov eax, dword [eax]
mov cx, word [0x4b8174]
mov edx, 0x4b8180
call fcn.004d5de0
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b1530
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b15dc
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b16f0
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b160c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b1724
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b179c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1818
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9d54
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b969c
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9b68
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9c38
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9ab0
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004ba9e8
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004baabc
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004baa6c
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9848
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1848
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1a14
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov ecx, dword [ebp - 0x3c]
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1a2c
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1b98
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1f90
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1a14
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1bd8
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1c00
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov ecx, dword [ebp - 0x44]
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1848
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b2150
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1c40
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1c74
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1cfc
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1d20
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1cb4
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1cd8
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004ba898
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1d44
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1d7c
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1db4
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b1dcc
jmp case.0x4b6d20.5203
mov dx, word [ebp - 0x16]
mov ax, word [ebp - 0x18]
call fcn.004081a4
push eax
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bb6cc
jmp case.0x4b6d20.5203
mov dx, word [ebp - 0x16]
mov ax, word [ebp - 0x18]
call fcn.004081a4
push eax
movzx edx, word [ebp - 0x1a]
mov ecx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bb738
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1dec
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1ec0
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x20]
call fcn.00526fcc
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov edx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004ba4e0
jmp case.0x4b6d20.5203
mov eax, dword [0x544f9c]
mov byte [eax + 8], 0
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1f5c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov ecx, dword [ebp - 0x50]
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b1f90
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b2150
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b2168
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b22c8
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004babb0
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b2308
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b2338
jmp case.0x4b6d20.5203
push 0
push 0
push 0
mov dx, word [ebp - 0x18]
mov ax, word [ebp - 0x1a]
call fcn.004081a4
push eax
xor edx, edx
mov ax, word [ebp - 0x16]
call fcn.004081a4
push eax
push 0
movzx edx, si
mov eax, dword [0x544574]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.00525d78
jmp case.0x4b6d20.5203
push 0
push 0
push 0
mov dx, word [ebp - 0x18]
mov ax, word [ebp - 0x1a]
call fcn.004081a4
push eax
movzx eax, word [ebp - 0x16]
push eax
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov eax, dword [ebp - 0x58]
push eax
movzx edx, si
mov eax, dword [0x544574]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
call fcn.00525d78
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b2430
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b2448
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b2458
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bacf4
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bb244
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004baec4
jmp case.0x4b6d20.5203
mov dx, word [ebp - 0x16]
mov ax, word [ebp - 0x18]
call fcn.004081a4
push eax
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bb5c8
jmp case.0x4b6d20.5203
mov dx, word [ebp - 0x16]
mov ax, word [ebp - 0x18]
call fcn.004081a4
push eax
movzx edx, word [ebp - 0x1a]
mov ecx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bb688
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov eax, dword [ebp - 0x5c]
push eax
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bb77c
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b468c
jmp case.0x4b6d20.5203
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bb88c
jmp case.0x4b6d20.5203
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bba40
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bbc50
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bbc84
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b246c
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b2510
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b2540
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b25a4
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b2648
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b26ac
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b2714
jmp case.0x4b6d20.5203
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bbdac
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b27dc
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b2884
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b28c8
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b2998
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b29f4
jmp case.0x4b6d20.5203
movzx eax, word [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x20]
push eax
movzx ecx, word [ebp - 0x1a]
movzx edx, word [ebp - 0x16]
mov eax, ebx
call fcn.004bcdc8
jmp case.0x4b6d20.5203
movzx eax, word [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x20]
push eax
movzx ecx, word [ebp - 0x16]
movzx edx, word [ebp - 0x1a]
mov eax, ebx
call fcn.004bcdc8
jmp case.0x4b6d20.5203
movzx eax, word [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bbfd4
jmp case.0x4b6d20.5203
mov eax, dword [0x544d70]
inc dword [eax]
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bc190
jmp case.0x4b6d20.5203
movzx edx, word [ebp - 0x1a]
mov eax, ebx
call fcn.004b2b30
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b2b54
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b2b6c
jmp case.0x4b6d20.5203
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x544e94]
mov dword [edx], eax
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b2c90
jmp case.0x4b6d20.5203
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x544e94]
mov dword [edx], eax
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b2e00
jmp case.0x4b6d20.5203
mov eax, dword [0x544f60]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov edx, dword [ebp - 0x60]
mov eax, ebx
call fcn.004bc290
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bc330
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bc754
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b2ed8
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b2f20
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b2f74
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b2ff0
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b3048
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b3074
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b3094
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bcb50
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bcbb8
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b3114
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b314c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b3184
jmp case.0x4b6d20.5203
mov eax, dword [0x5452a8]
mov eax, dword [eax]
call fcn.004e68f0
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bbcb8
jmp case.0x4b6d20.5203
movzx edx, word [ebp - 0x1a]
mov eax, ebx
call fcn.004bcc20
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b3198
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov edx, dword [ebp - 0x64]
mov eax, ebx
call fcn.004bccac
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bcd3c
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004adb1c
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b3218
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004adb1c
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b3378
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b3460
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b3608
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b36f8
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b37a8
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b37f0
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b38fc
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b3984
jmp case.0x4b6d20.5203
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5452a8]
mov edx, dword [edx]
mov dword [edx + 0xe00], eax
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b39fc
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bd398
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bd3d4
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
dec ebp
in al, dx
mov eax, ebx
call fcn.004b9f30
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bbc1c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004ba3a8
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b3bac
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bbcec
jmp case.0x4b6d20.5203
mov eax, dword [0x5452a8]
mov eax, dword [eax]
mov cx, word [0x4b8174]
mov edx, 0x4b81a4
call fcn.004d5de0
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b3d00
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b3e54
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b3e60
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b4268
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b42c4
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b4390
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b45d0
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b45f0
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b4600
jmp case.0x4b6d20.5203
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b4628
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004bbbe8
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b3f50
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b3fe0
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b4008
jmp case.0x4b6d20.5203
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b40c4
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b4be4
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b4cfc
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b4d30
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b4d88
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b4db4
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b4dd4
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b4f10
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b4f78
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b4e70
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b4ea8
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b4efc
jmp case.0x4b6d20.5203
mov eax, dword [0x5452a8]
mov eax, dword [eax]
call fcn.004f512c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b4fe0
jmp case.0x4b6d20.5203
mov eax, dword [0x544b8c]
cmp dword [eax + 0x20], 0
je case.0x4b6d20.5203
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov eax, dword [ebp - 0x68]
call fcn.00405550
push eax
mov eax, dword [0x544b8c]
mov eax, dword [eax + 0x20]
call eax
jmp case.0x4b6d20.5203
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b50d8
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b51d4
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b51ec
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b5298
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b530c
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b53c4
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b53d4
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b5ca0
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b5d8c
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004b5d80
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b5b78
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov eax, dword [ebp - 0x6c]
push eax
movzx ecx, word [ebp - 0x18]
movzx edx, word [ebp - 0x1a]
mov eax, ebx
call fcn.004b5534
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov eax, dword [ebp - 0x70]
push eax
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b5770
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov eax, dword [ebp - 0x74]
push eax
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b5898
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov eax, dword [ebp - 0x78]
push eax
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b5974
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x7c]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov eax, dword [ebp - 0x7c]
push eax
movzx ecx, word [ebp - 0x1a]
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004b5a9c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov edx, dword [ebp - 0x80]
mov eax, ebx
call fcn.004b5dec
jmp case.0x4b6d20.5203
movzx edx, word [ebp - 0x1a]
mov eax, ebx
call fcn.004c15e8
jmp case.0x4b6d20.5203
mov edx, dword [ebp - 0x20]
mov eax, ebx
call fcn.004c1738
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004c1820
jmp case.0x4b6d20.5203
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x5446f0]
mov dword [edx], eax
mov eax, dword [0x544f78]
mov byte [eax], 0
mov eax, dword [0x544ae8]
mov byte [eax], 1
mov eax, ebx
call fcn.004a4c18
jmp case.0x4b6d20.5203
mov eax, ebx
call fcn.004a4ba4
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b5e34
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov ecx, dword [ebp - 0x84]
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b5e6c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004b5fc8
jmp case.0x4b6d20.5203
mov eax, dword [0x5446a8]
mov byte [eax], 1
mov eax, dword [0x5452a8]
mov eax, dword [eax]
mov eax, dword [eax + 0xb1c]
cmp byte [eax + 0x2a8], 0
je 0x4b7ff9
mov eax, dword [0x5452a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x238
call fcn.0043d7f8
jmp 0x4b8010
mov eax, dword [0x5452a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x1db
call fcn.0043d7f8
mov eax, dword [0x5452a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x50
call fcn.0043d81c
mov eax, dword [0x5452a8]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov dl, 1
call fcn.00473e94
jmp case.0x4b6d20.5203
mov eax, dword [0x5446a8]
mov byte [eax], 0
mov eax, dword [0x5446e0]
add eax, 8
call fcn.005269ec
mov eax, dword [0x5446e0]
mov byte [eax + 8], 0
jmp case.0x4b6d20.5203
mov eax, dword [0x5446e0]
add eax, 8
call fcn.005269ec
mov eax, dword [0x5446e0]
mov byte [eax + 8], 0
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov edx, dword [ebp - 0x88]
mov eax, ebx
call fcn.004c1f6c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004c2528
jmp case.0x4b6d20.5203
mov eax, dword [0x544574]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.00524ecc
test eax, eax
je case.0x4b6d20.5203
mov dx, word [ebp - 0x1a]
mov word [eax + 0x2a0], dx
mov dx, word [ebp - 0x18]
mov word [eax + 0x2a2], dx
mov dx, word [ebp - 0x16]
mov word [eax + 0x2a4], dx
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 0x14]
call fcn.0048e388
mov ecx, dword [ebp - 0x8c]
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.004c223c
jmp case.0x4b6d20.5203
lea edx, [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004c2348
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b8147
lea eax, [ebp - 0x8c]
mov edx, 0x19
call fcn.004050a4
lea eax, [ebp - 0x24]
call fcn.00405080
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.004050a4
ret