Function at 0x4b4aa0
Capabilities:
Check for time delay via gettickcount
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6a9e70
mov eax, dword fs:[0]
push eax
sub esp, 0xc4
mov eax, dword [0x7e2670]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xb0], ecx
push str.CBpaCmd::DlFile
push 1
lea ecx, [ebp - 0x20]
call fcn.004aad40
mov dword [ebp - 4], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x34], 0
xor eax, eax
mov word [ebp - 0x44], ax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], 0
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], 0
mov byte [ebp - 0x45], 1
mov byte [ebp - 0x35], 0
cmp dword [ebp + 0xc], 0
jne 0x4b4b7e
mov edx, dword [ebp - 0xb0]
mov dword [edx + 0x58], 0x205
xor ecx, ecx
jne 0x4b4b51
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0049b930
mov eax, dword [ebp - 0xa0]
jmp 0x4b5940
call fcn.004ab110
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x24], 0
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x25c], 0
jne 0x4b4bb3
push 1
push 6
mov ecx, dword [ebp - 0x40]
call fcn.004a4810
mov edx, dword [ebp - 0xb0]
mov dword [edx + 0x58], eax
jmp 0x4b4bc8
push 0
push 0x22
mov ecx, dword [ebp - 0x40]
call fcn.004a4810
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
mov edx, dword [ebp - 0xb0]
cmp dword [edx + 0x58], 0
je 0x4b4bd9
jmp 0x4b58bf
mov eax, dword [ebp - 0x40]
movzx ecx, byte [eax + 0x56]
test ecx, ecx
je 0x4b4c00
mov edx, dword [ebp - 0x40]
mov eax, dword [edx + 0x60]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x40]
movzx edx, byte [ecx + 0x5e]
xor eax, eax
test edx, edx
setg al
mov byte [ebp - 0x35], al
jmp 0x4b4c07
mov dword [ebp - 0x30], 0x1000
mov ecx, dword [ebp - 0x30]
push ecx
push str.MaxPackSize:_d_r_n
call fcn.0066610b
add esp, 8
movzx edx, byte [ebp - 0x35]
test edx, edx
je 0x4b4c2c
mov dword [ebp - 0xb4], 0x722500
jmp 0x4b4c36
mov dword [ebp - 0xb4], 0x722504
mov eax, dword [ebp - 0xb4]
push eax
push str.Compress:_s_r_n
call fcn.0066610b
add esp, 8
call fcn.006684b5
add eax, 0x20
push eax
call fcn.00668459
add esp, 4
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00576bfc
add esp, 4
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.006665c0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18], eax
push 0x722518
mov edx, dword [ebp + 0xc]
push edx
call fcn.00669fd1
add esp, 8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x4b4cc1
mov eax, dword [ebp - 0xb0]
mov dword [eax + 0x58], 0x204
xor edx, edx
jne 0x4b4cb8
jmp 0x4b58bf
push 2
push 0
mov eax, dword [ebp - 0x10]
push eax
call fcn.00669e99
add esp, 0xc
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00669daa
add esp, 4
mov dword [ebp - 0x14], eax
push 0
push 0
mov edx, dword [ebp - 0x10]
push edx
call fcn.00669e99
add esp, 0xc
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx + 0x5c]
mov eax, dword [edx*4 + 0x7c4208]
push eax
push 0x722550
call fcn.004a4410
add esp, 0xc
mov ecx, dword [ebp - 0x40]
movzx edx, byte [ecx + 0x66]
cmp edx, 1
jne 0x4b4f3e
cmp dword [ebp + 8], 8
je 0x4b4d3b
cmp dword [ebp + 8], 0x10
je 0x4b4d3b
cmp dword [ebp + 8], 0x10000
jne 0x4b4f3e
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 8
je 0x4b4d64
cmp dword [ebp - 0xb8], 0x10
je 0x4b4d7b
cmp dword [ebp - 0xb8], 0x10000
je 0x4b4d92
jmp 0x4b4da9
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x40]
call fcn.004a6de0
mov edx, dword [ebp - 0xb0]
mov dword [edx + 0x58], eax
jmp 0x4b4dba
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.004a6ee0
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
jmp 0x4b4dba
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x40]
call fcn.004a6e60
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
jmp 0x4b4dba
mov edx, dword [ebp - 0xb0]
mov dword [edx + 0x58], 0x20b
xor ecx, ecx
jne 0x4b4db6
mov edx, dword [ebp - 0xb0]
cmp dword [edx + 0x58], 0
je 0x4b4dcf
xor ecx, ecx
jne 0x4b4dc6
jmp 0x4b58bf
mov byte [ebp - 0x4d], 0
mov dword [ebp - 0x54], 0
mov edx, 1
test edx, edx
je 0x4b4f35
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
jmp 0x4b4e00
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x4b4e73
lea ecx, [ebp - 0x4d]
push ecx
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x40]
call fcn.004a7370
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
cmp dword [ebp - 0x5c], 0
jne 0x4b4e31
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x58], 0
jne 0x4b4e4b
mov dword [0x7e47e4], 0
jmp 0x4b4e73
mov dword [0x7e47e4], 1
cmp dword [ebp - 0x5c], 1
jne 0x4b4e71
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x58]
mov dword [edx + 0x58], eax
mov dword [0x7e47e4], 0
jmp 0x4b4df7
xor ecx, ecx
jne 0x4b4de7
mov edx, dword [ebp - 0xb0]
cmp dword [edx + 0x58], 0
je 0x4b4e90
xor ecx, ecx
jne 0x4b4e87
jmp 0x4b58bf
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 1
je 0x4b4ead
cmp dword [ebp - 0xbc], 2
je 0x4b4eaf
jmp 0x4b4f02
jmp 0x4b4f18
movzx eax, byte [ebp - 0x4d]
cmp eax, 0x64
jne 0x4b4edd
movzx ecx, byte [ebp - 0x4d]
push ecx
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x5c]
mov ecx, dword [eax*4 + 0x7c4208]
push ecx
push 0x7225fc
call fcn.004a4410
add esp, 0xc
jmp 0x4b4f00
movzx edx, byte [ebp - 0x4d]
push edx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ecx*4 + 0x7c4208]
push edx
push 0x72260c
call fcn.004a4410
add esp, 0xc
jmp 0x4b4f18
mov eax, dword [ebp - 0xb0]
mov dword [eax + 0x58], 0x207
xor edx, edx
jne 0x4b4f0f
jmp 0x4b58bf
movzx eax, byte [ebp - 0x4d]
cmp eax, 0x64
jne 0x4b4f30
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], 0
jmp 0x4b4f35
jmp 0x4b4dda
mov edx, dword [ebp - 0x40]
mov eax, dword [edx + 0x6c]
mov dword [ebp - 0x30], eax
mov ecx, 1
test ecx, ecx
je 0x4b5595
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x30]
push eax
push 1
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.00669b18
add esp, 0x10
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x4b4f8f
mov edx, dword [ebp - 0xb0]
mov dword [edx + 0x58], 0
mov eax, dword [ebp - 0x10]
push eax
call fcn.00669ba2
add esp, 4
mov dword [ebp - 0x10], 0
jmp 0x4b5595
mov ecx, dword [ebp + 8]
mov dword [ebp - 0xc0], ecx
cmp dword [ebp - 0xc0], 0x10000
ja 0x4b4fcf
cmp dword [ebp - 0xc0], 0x10000
je 0x4b52f7
cmp dword [ebp - 0xc0], 8
je 0x4b4fe4
cmp dword [ebp - 0xc0], 0x10
je 0x4b50a9
jmp 0x4b5500
cmp dword [ebp - 0xc0], 0x100000
je 0x4b5232
jmp 0x4b5500
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x68], 0
jmp 0x4b4ffd
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 2
jge 0x4b509c
mov eax, dword [ebp - 0x40]
movzx ecx, byte [eax + 0x56]
test ecx, ecx
je 0x4b501d
mov dl, byte [ebp - 0x35]
mov byte [ebp - 0xc1], dl
jmp 0x4b5024
mov byte [ebp - 0xc1], 1
movzx eax, byte [ebp - 0xc1]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov ecx, dword [ebp - 0x40]
call fcn.004a5b60
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
cmp dword [ebp - 0x68], 0
jne 0x4b5057
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x58], 0
jne 0x4b5071
mov dword [0x7e47e4], 0
jmp 0x4b509c
mov dword [0x7e47e4], 1
cmp dword [ebp - 0x68], 1
jne 0x4b5097
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x64]
mov dword [edx + 0x58], eax
mov dword [0x7e47e4], 0
jmp 0x4b4ff4
xor ecx, ecx
jne 0x4b4fe4
jmp 0x4b550d
mov ecx, dword [ebp - 0xb0]
call fcn.004ab3a0
cmp eax, 8
jne 0x4b516d
mov edx, dword [ebp - 0xb0]
movzx eax, byte [edx + 0x260]
test eax, eax
jne 0x4b516d
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
jmp 0x4b50eb
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 2
jge 0x4b5160
push 0
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.004a5eb0
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
cmp dword [ebp - 0x70], 0
jne 0x4b511e
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x58], 0
jne 0x4b5138
mov dword [0x7e47e4], 0
jmp 0x4b5160
mov dword [0x7e47e4], 1
cmp dword [ebp - 0x70], 1
jne 0x4b515e
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x6c]
mov dword [edx + 0x58], eax
mov dword [0x7e47e4], 0
jmp 0x4b50e2
xor ecx, ecx
jne 0x4b50d2
jmp 0x4b522d
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
jmp 0x4b5186
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 2
jge 0x4b5225
mov eax, dword [ebp - 0x40]
movzx ecx, byte [eax + 0x56]
test ecx, ecx
je 0x4b51a6
mov dl, byte [ebp - 0x35]
mov byte [ebp - 0xc2], dl
jmp 0x4b51ad
mov byte [ebp - 0xc2], 1
movzx eax, byte [ebp - 0xc2]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov ecx, dword [ebp - 0x40]
call fcn.004a5eb0
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
cmp dword [ebp - 0x78], 0
jne 0x4b51e0
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x58], 0
jne 0x4b51fa
mov dword [0x7e47e4], 0
jmp 0x4b5225
mov dword [0x7e47e4], 1
cmp dword [ebp - 0x78], 1
jne 0x4b5220
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x74]
mov dword [edx + 0x58], eax
mov dword [0x7e47e4], 0
jmp 0x4b517d
xor ecx, ecx
jne 0x4b516d
jmp 0x4b550d
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x80], 0
jmp 0x4b524b
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 2
jge 0x4b52ea
mov eax, dword [ebp - 0x40]
movzx ecx, byte [eax + 0x56]
test ecx, ecx
je 0x4b526b
mov dl, byte [ebp - 0x35]
mov byte [ebp - 0xc3], dl
jmp 0x4b5272
mov byte [ebp - 0xc3], 1
movzx eax, byte [ebp - 0xc3]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov ecx, dword [ebp - 0x40]
call fcn.004a6330
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
cmp dword [ebp - 0x80], 0
jne 0x4b52a5
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x58], 0
jne 0x4b52bf
mov dword [0x7e47e4], 0
jmp 0x4b52ea
mov dword [0x7e47e4], 1
cmp dword [ebp - 0x80], 1
jne 0x4b52e5
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x7c]
mov dword [edx + 0x58], eax
mov dword [0x7e47e4], 0
jmp 0x4b5242
xor ecx, ecx
jne 0x4b5232
jmp 0x4b550d
mov ecx, dword [ebp - 0xb0]
call fcn.004ab3a0
cmp eax, 8
jne 0x4b53d9
mov edx, dword [ebp - 0xb0]
movzx eax, byte [edx + 0x260]
test eax, eax
jne 0x4b53d9
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x88], 0
jmp 0x4b5345
mov ecx, dword [ebp - 0x88]
add ecx, 1
mov dword [ebp - 0x88], ecx
cmp dword [ebp - 0x88], 2
jge 0x4b53cc
push 0
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.004a9960
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
cmp dword [ebp - 0x88], 0
jne 0x4b5381
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x58], 0
jne 0x4b539b
mov dword [0x7e47e4], 0
jmp 0x4b53cc
mov dword [0x7e47e4], 1
cmp dword [ebp - 0x88], 1
jne 0x4b53c7
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x84]
mov dword [edx + 0x58], eax
mov dword [0x7e47e4], 0
jmp 0x4b5336
xor ecx, ecx
jne 0x4b5320
jmp 0x4b54fe
mov dword [ebp - 0x8c], 0
jmp 0x4b53f4
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 2
jge 0x4b54fe
mov eax, dword [ebp - 0x40]
movzx ecx, byte [eax + 0x56]
test ecx, ecx
je 0x4b5417
mov dl, byte [ebp - 0x35]
mov byte [ebp - 0xc4], dl
jmp 0x4b5420
mov al, byte [ebp - 0x45]
mov byte [ebp - 0xc4], al
movzx ecx, byte [ebp - 0xc4]
push ecx
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.004a9960
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
mov edx, dword [ebp - 0xb0]
cmp dword [edx + 0x58], 0
jne 0x4b5457
jmp 0x4b54fe
mov eax, dword [ebp - 0x40]
movzx ecx, byte [eax + 0x56]
test ecx, ecx
je 0x4b546d
mov dl, byte [ebp - 0x35]
mov byte [ebp - 0xc5], dl
jmp 0x4b5476
mov al, byte [ebp - 0x45]
mov byte [ebp - 0xc5], al
movzx ecx, byte [ebp - 0xc5]
push ecx
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.004a9960
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
mov edx, dword [ebp - 0xb0]
cmp dword [edx + 0x58], 0
jne 0x4b54a5
jmp 0x4b54fe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
push 0x722650
call fcn.0066610b
add esp, 8
call fcn.006684b5
add eax, 0x20
push eax
call fcn.00668459
add esp, 4
push 0
push 6
mov ecx, dword [ebp - 0x40]
call fcn.004a4810
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
mov edx, dword [ebp - 0xb0]
cmp dword [edx + 0x58], 0
je 0x4b54f9
jmp 0x4b58bf
jmp 0x4b53e5
jmp 0x4b550d
mov eax, dword [ebp - 0xb0]
mov dword [eax + 0x58], 0x20b
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x58], 0
je 0x4b5535
mov edx, dword [ebp - 0x10]
push edx
call fcn.00669ba2
add esp, 4
mov dword [ebp - 0x10], 0
xor ecx, ecx
jne 0x4b552c
jmp 0x4b58bf
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x4c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
imul eax, eax, 0x64
xor edx, edx
div dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov eax, dword [0x7f7e10]
cmp eax, dword [ebp - 0x60]
je 0x4b5584
mov ecx, dword [ebp - 0x60]
mov dword [0x7f7e10], ecx
mov edx, dword [0x7f7e10]
push edx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ecx*4 + 0x7c4208]
push edx
push 0x7226a4
call fcn.004a4410
add esp, 0xc
mov ax, word [ebp - 0x44]
add ax, 1
mov word [ebp - 0x44], ax
jmp 0x4b4f3e
mov ecx, dword [ebp + 8]
mov dword [ebp - 0xcc], ecx
cmp dword [ebp - 0xcc], 0x10000
ja 0x4b55ca
cmp dword [ebp - 0xcc], 0x10000
je 0x4b560e
cmp dword [ebp - 0xcc], 8
je 0x4b55d8
cmp dword [ebp - 0xcc], 0x10
je 0x4b55f3
jmp 0x4b5644
cmp dword [ebp - 0xcc], 0x100000
je 0x4b5629
jmp 0x4b5644
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.004a67b0
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
jmp 0x4b5655
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.004a6840
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
jmp 0x4b5655
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.004a6960
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
jmp 0x4b5655
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x40]
call fcn.004a68d0
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
jmp 0x4b5655
mov edx, dword [ebp - 0xb0]
mov dword [edx + 0x58], 0x20b
xor ecx, ecx
jne 0x4b5651
mov edx, dword [ebp - 0xb0]
cmp dword [edx + 0x58], 0
je 0x4b566a
xor ecx, ecx
jne 0x4b5661
jmp 0x4b58bf
cmp dword [ebp - 0x2c], 0
jne 0x4b56b1
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x5c]
mov ecx, dword [eax*4 + 0x7c4208]
push ecx
push 0x72271c
call fcn.004a4410
add esp, 8
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x5c]
mov ecx, dword [eax*4 + 0x7c4208]
push ecx
push 0x722728
call fcn.004a4410
add esp, 8
jmp 0x4b58bf
mov byte [ebp - 0x8d], 0
mov dword [ebp - 0x94], 0
mov edx, 1
test edx, edx
je 0x4b58bf
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x9c], 0
jmp 0x4b56f4
mov eax, dword [ebp - 0x9c]
add eax, 1
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x4b5783
lea ecx, [ebp - 0x8d]
push ecx
lea edx, [ebp - 0x94]
push edx
mov ecx, dword [ebp - 0x40]
call fcn.004a7370
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], eax
cmp dword [ebp - 0x9c], 0
jne 0x4b5738
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0x98], eax
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x58], 0
jne 0x4b5752
mov dword [0x7e47e4], 0
jmp 0x4b5783
mov dword [0x7e47e4], 1
cmp dword [ebp - 0x9c], 1
jne 0x4b577e
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x98]
mov dword [edx + 0x58], eax
mov dword [0x7e47e4], 0
jmp 0x4b56e5
xor ecx, ecx
jne 0x4b56cf
mov edx, dword [ebp - 0xb0]
cmp dword [edx + 0x58], 0
je 0x4b57a0
xor ecx, ecx
jne 0x4b5797
jmp 0x4b58bf
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0xd0], edx
cmp dword [ebp - 0xd0], 1
je 0x4b57cc
cmp dword [ebp - 0xd0], 2
je 0x4b57d1
cmp dword [ebp - 0xd0], 3
je 0x4b5830
jmp 0x4b58a7
jmp 0x4b58ba
movzx eax, byte [ebp - 0x8d]
cmp eax, 0x64
jne 0x4b5805
movzx ecx, byte [ebp - 0x8d]
push ecx
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x5c]
mov ecx, dword [eax*4 + 0x7c4208]
push ecx
push 0x72276c
call fcn.004a4410
add esp, 0xc
jmp 0x4b582b
movzx edx, byte [ebp - 0x8d]
push edx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ecx*4 + 0x7c4208]
push edx
push 0x72277c
call fcn.004a4410
add esp, 0xc
jmp 0x4b58ba
movzx eax, byte [ebp - 0x8d]
cmp eax, 0x64
jne 0x4b5864
movzx ecx, byte [ebp - 0x8d]
push ecx
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx + 0x5c]
mov ecx, dword [eax*4 + 0x7c4208]
push ecx
push 0x72278c
call fcn.004a4410
add esp, 0xc
jmp 0x4b588a
movzx edx, byte [ebp - 0x8d]
push edx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ecx*4 + 0x7c4208]
push edx
push 0x72279c
call fcn.004a4410
add esp, 0xc
movzx eax, byte [ebp - 0x8d]
cmp eax, 0x64
jne 0x4b58a5
mov ecx, dword [ebp - 0xb0]
mov dword [ecx + 0x58], 0
jmp 0x4b58bf
jmp 0x4b58ba
mov edx, dword [ebp - 0xb0]
mov dword [edx + 0x58], 0x207
xor ecx, ecx
jne 0x4b58b4
jmp 0x4b58bf
jmp 0x4b56c2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x28], 0
je 0x4b58f0
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xa8], edx
mov eax, dword [ebp - 0xa8]
push eax
call fcn.00576bf1
add esp, 4
mov dword [ebp - 0x28], 0
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx + 0x58]
push edx
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx + 0x5c]
mov eax, dword [edx*4 + 0x7c4208]
push eax
push 0x7227e0
call fcn.004a4410
add esp, 0x10
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ecx + 0x58]
mov dword [ebp - 0xac], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0049b930
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 8