Function at 0x4951a8
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x27
push 0
push 0
dec ecx
jne 0x4951b0
push ecx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00405478
xor eax, eax
push ebp
push 0x498c42
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp byte [eax], 0x2b
jne 0x495376
mov eax, dword [ebp - 8]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x4951f9
mov eax, dword [ebp - 0x50]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x50]
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.004054f0
push 0
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 0xc0], 0x2f
lea ecx, [ebp - 0xc0]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.00465a94
mov edx, dword [ebp - 0xbc]
lea eax, [ebp - 0x1c]
call fcn.00405090
mov eax, dword [ebp - 0x18]
mov edx, 0x498c58
call fcn.00405420
jne 0x495253
mov byte [0x5f38dc], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x498c64
call fcn.00405420
jne 0x495269
mov byte [0x5f38dd], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x498c70
call fcn.00405420
jne 0x49527f
mov byte [0x5f38dd], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x498c80
call fcn.00405420
jne 0x495295
mov byte [0x5f38de], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x498c8c
call fcn.00405420
jne 0x4952ab
mov byte [0x5f38de], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x498c9c
call fcn.00405420
jne 0x4952c1
mov byte [0x5f38df], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x498ca8
call fcn.00405420
jne 0x4952d7
mov byte [0x5f38df], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x498cb8
call fcn.00405420
jne 0x4952f7
mov byte [0x5f38e0], 1
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f37d8], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x498cc4
call fcn.00405420
jne 0x49530d
mov byte [0x5f38e0], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x498cd4
call fcn.00405420
jne 0x49532c
mov eax, dword [ebp - 4]
mov byte [eax + 0x3d8], 0
inc dword [0x5f38ac]
mov eax, dword [ebp - 0x18]
mov edx, 0x498ce4
call fcn.00405420
jne 0x495353
mov eax, dword [ebp - 4]
call fcn.0049487c
mov eax, dword [ebp - 4]
mov byte [eax + 0x3d8], 0
inc dword [0x5f38ac]
cmp dword [ebp - 0x1c], 0
je case.default.0x495523
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.00465950
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.00494fa0
jmp case.default.0x495523
mov eax, dword [ebp - 8]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x49538d
mov eax, dword [ebp - 0x54]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x10
jge 0x4953ef
mov eax, dword [ebp - 8]
cmp byte [eax], 0x3d
jne case.default.0x495523
mov eax, dword [ebp - 8]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x4953b6
mov eax, dword [ebp - 0x58]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x58]
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.004054f0
mov eax, dword [ebp - 0x1c]
mov edx, 0x498cf4
call fcn.00405420
jne case.default.0x495523
mov eax, dword [0x5f1b38]
mov byte [eax + 0xdc], 1
jmp case.default.0x495523
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.004054f0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x49541c
mov eax, dword [ebp - 0x5c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x5c]
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 8]
call fcn.004054f0
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 0xc]
call fcn.00466618
cmp word [ebp - 0x84], 0x2e
jne 0x495460
movzx eax, word [ebp - 0x82]
mov dword [0x5f3914], eax
movzx eax, word [ebp - 0x80]
mov dword [0x5f3918], eax
cmp dword [0x5f1b38], 0
jne case.0x495523.528
movzx eax, word [ebp - 0x84]
cmp eax, 0x20e
jg 0x495508
je 0x495afe
cmp eax, 0x1fb
jg 0x4954db
je 0x495a62
cmp eax, 0x1f8
jg 0x4954c4
je 0x49557f
add eax, 0xffffffce
sub eax, 2
jb case.0x495523.528
sub eax, 0x1c1
je 0x495b2f
sub eax, 2
je 0x495638
jmp case.default.0x495523
sub eax, 0x1f9
je 0x49559c
dec eax
je 0x495a45
jmp case.default.0x495523
add eax, 0xfffffdf8
cmp eax, 5
ja case.default.0x495523
jmp dword [eax*4 + 0x4954f0]
cmp eax, 0x215
jg 0x495542
je 0x495746
add eax, 0xfffffdf1
cmp eax, 5
ja case.default.0x495523
jmp dword [eax*4 + 0x49552a]
cmp eax, 0x292
jg 0x495566
je case.0x495523.528
sub eax, 0x216
je 0x49591d
dec eax
je 0x49593a
jmp case.default.0x495523
sub eax, 0x304
je case.0x495523.528
sub eax, 0x1e
je case.0x495523.528
jmp case.default.0x495523
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x498d04
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffe
je 0x4955fe
sub eax, 2
jne 0x49561b
push 0x498db8
mov eax, dword [ebp - 4]
push dword [eax + 0x390]
push 0x498dc4
push 0x498df0
lea eax, [ebp - 0xc4]
mov edx, 4
call fcn.0040538c
mov edx, dword [ebp - 0xc4]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
call fcn.004b6bdc
xor edx, edx
mov eax, dword [0x5f18a8]
call fcn.004ada4c
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x498e10
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x498e48
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [ebp - 0x88]
add eax, 5
cmp eax, 4
ja case.default.0x49564a
jmp dword [eax*4 + 0x495651]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x498e90
call fcn.004b6bdc
jmp 0x495702
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x498ea4
call fcn.004b6bdc
jmp 0x495702
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x498ee0
call fcn.004b6bdc
jmp 0x495702
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x498f24
call fcn.004b6bdc
jmp 0x495702
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x498f64
call fcn.004b6bdc
jmp 0x495702
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x498f80
call fcn.004b6bdc
mov eax, dword [0x5f18a8]
call fcn.004ac280
jmp case.0x495523.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00499e54
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x498f9c
call fcn.004b6bdc
mov eax, dword [ebp - 4]
call fcn.00499e00
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4990cc
call fcn.004b6bdc
mov eax, dword [ebp - 4]
call fcn.00499e00
jmp case.0x495523.528
mov ax, word [ebp - 0x88]
mov word [0x5f38a0], ax
mov eax, dword [ebp - 0x88]
shr eax, 0x10
mov word [0x5f38a2], ax
mov ax, word [ebp - 0x82]
mov word [0x5f38a4], ax
mov ax, word [ebp - 0x80]
mov word [0x5f38a6], ax
cmp word [0x5f38a0], 0
jbe 0x4957f8
push 0x4990e4
lea edx, [ebp - 0xcc]
movzx eax, word [0x5f38a0]
call fcn.004096c0
push dword [ebp - 0xcc]
push 0x499100
lea eax, [ebp - 0xc8]
mov edx, 3
call fcn.0040538c
mov edx, dword [ebp - 0xc8]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
call fcn.004b6bdc
jmp 0x4958fe
cmp word [0x5f38a4], 0
jbe 0x495852
push 0x499114
lea edx, [ebp - 0xd4]
movzx eax, word [0x5f38a4]
call fcn.004096c0
push dword [ebp - 0xd4]
push 0x499100
lea eax, [ebp - 0xd0]
mov edx, 3
call fcn.0040538c
mov edx, dword [ebp - 0xd0]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
call fcn.004b6bdc
jmp 0x4958fe
cmp word [0x5f38a6], 0
jbe 0x4958a9
push 0x49912c
lea edx, [ebp - 0xdc]
movzx eax, word [0x5f38a6]
call fcn.004096c0
push dword [ebp - 0xdc]
push 0x499140
lea eax, [ebp - 0xd8]
mov edx, 3
call fcn.0040538c
mov edx, dword [ebp - 0xd8]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
call fcn.004b6bdc
jmp 0x4958fe
cmp word [0x5f38a2], 0
jbe 0x4958fe
push 0x499154
lea edx, [ebp - 0xe4]
movzx eax, word [0x5f38a2]
call fcn.004096c0
push dword [ebp - 0xe4]
push 0x499140
lea eax, [ebp - 0xe0]
mov edx, 3
call fcn.0040538c
mov edx, dword [ebp - 0xe0]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
call fcn.004b6bdc
mov eax, dword [0x5f18a8]
cmp byte [eax + 0x164], 0
jne case.0x495523.528
mov eax, dword [ebp - 4]
call fcn.00499e00
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x49916c
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x49919c
call fcn.004b6bdc
jmp case.0x495523.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00499ba8
jmp case.0x495523.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00499ec0
jmp case.0x495523.528
mov byte [0x5f37f8], 0
mov byte [0x5f37f1], 0
mov byte [0x5f37f0], 0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4991ec
call fcn.004b6bdc
mov eax, dword [ebp - 4]
call fcn.0045f8fc
jmp case.0x495523.528
mov eax, dword [ebp - 4]
call fcn.00492908
jmp case.0x495523.528
mov eax, dword [ebp - 0x88]
sub eax, 2
je 0x4959d1
dec eax
je 0x4959ee
dec eax
je 0x495a0b
jmp 0x495a28
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499214
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499238
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499278
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4992a0
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4992e0
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffe
je 0x495a8d
dec eax
jne 0x495aaa
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4992f8
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499320
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499344
call fcn.004b6bdc
jmp case.0x495523.528
mov eax, dword [ebp - 4]
call fcn.00492908
jmp case.0x495523.528
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499368
call fcn.004b6bdc
jmp case.0x495523.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049a0e4
jmp case.default.0x495523
mov eax, dword [0x5f18a8]
call fcn.004ad5e8
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4993a8
call fcn.004b6bdc
mov eax, dword [0x5f189c]
call fcn.0045f8fc
jmp case.default.0x495523
mov eax, dword [0x5f18a8]
call fcn.004ad5e8
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4993cc
call fcn.004b6bdc
mov eax, dword [0x5f189c]
call fcn.0045f8fc
jmp case.default.0x495523
cmp byte [0x5f3800], 0
je 0x495bd9
cmp word [ebp - 0x84], 0x27a
jne case.default.0x495523
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x3b4], edx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0x3b8], edx
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x3bc], edx
lea edx, [ebp - 0xe8]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 4]
add eax, 0x3c0
call fcn.0040504c
mov byte [0x5f3801], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x36c]
mov dl, 1
call fcn.00434e90
jmp case.default.0x495523
cmp word [ebp - 0x84], 0x2e
jne 0x495bfe
movzx eax, word [ebp - 0x82]
mov edx, dword [0x5f391c]
mov dword [edx], eax
movzx eax, word [ebp - 0x80]
mov edx, dword [0x5f3920]
mov dword [edx], eax
movzx eax, word [ebp - 0x84]
cmp eax, 0x290
jg 0x495ec3
je 0x4973c5
cmp eax, 0xd2
jg 0x495d82
je 0x49797e
cmp eax, 0x20
jg 0x495cc6
je case.0x495cdd.34
cmp eax, 0x1f
ja case.0x496066.808
jmp dword [eax*4 + 0x495c46]
cmp eax, 0x32
jg 0x495d1c
je 0x49613b
add eax, 0xffffffdf
cmp eax, 0xd
ja case.0x496066.808
jmp dword [eax*4 + 0x495ce4]
cmp eax, 0x64
jge 0x495d44
sub eax, 0x33
je 0x4960f4
dec eax
je 0x496e92
dec eax
je 0x49700f
dec eax
je 0x4962fc
jmp case.0x496066.808
cmp eax, 0xc9
jg 0x495d6b
je 0x49758f
add eax, 0xffffff9c
sub eax, 5
jb 0x497299
sub eax, 0x5f
je 0x49757f
jmp case.0x496066.808
sub eax, 0xca
je 0x4975af
dec eax
je 0x49759f
jmp case.0x496066.808
cmp eax, 0x27b
jg 0x495e5e
je 0x497957
cmp eax, 0x266
jg 0x495dfd
je 0x4976a0
cmp eax, 0x259
jg 0x495dd8
je 0x4975f3
sub eax, 0xd3
je 0x497998
dec eax
je 0x4979b8
sub eax, 0x13c
je 0x496d2d
sub eax, 0x48
je 0x4975cf
jmp case.0x496066.808
sub eax, 0x262
je 0x49761a
dec eax
je 0x497653
dec eax
je 0x497672
dec eax
je 0x49768c
jmp case.0x496066.808
add eax, 0xfffffd99
cmp eax, 0x12
ja case.0x496066.808
jmp dword [eax*4 + 0x495e12]
add eax, 0xfffffd84
cmp eax, 0x13
ja case.0x496066.808
jmp dword [eax*4 + 0x495e73]
cmp eax, 0x2cc
jg 0x495fd1
je 0x496d10
add eax, 0xfffffd6f
cmp eax, 0x39
ja case.0x496066.808
jmp dword [eax*4 + 0x495ee9]
cmp eax, 0x304
jg 0x49604b
je 0x498955
add eax, 0xfffffd12
cmp eax, 0x15
ja case.0x496066.808
jmp dword [eax*4 + 0x495ff3]
cmp eax, 0x32b
jg 0x496099
je 0x49630c
add eax, 0xfffffce0
cmp eax, 0xa
ja case.0x496066.808
jmp dword [eax*4 + 0x49606d]
cmp eax, 0x450
jg 0x4960cb
je 0x49710c
sub eax, 0x44c
je 0x49717d
dec eax
je 0x4971cd
dec eax
je 0x497259
dec eax
je 0x4971f9
jmp case.0x496066.808
sub eax, 0x451
je 0x4989bb
dec eax
je 0x49627a
sub eax, 0x5e
je 0x4989ed
sub eax, 0x70
je 0x496b9e
jmp case.0x496066.808
mov eax, 0x5f1b28
call fcn.00404ff8
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
mov eax, dword [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x33
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
xor eax, eax
mov dword [0x5f3568], eax
xor eax, eax
mov dword [0x5f356c], eax
lea edx, [ebp - 0x98]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00466768
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x32
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
mov dl, 7
mov eax, dword [0x5f18a0]
call fcn.004a98dc
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x51
mov eax, dword [ebp - 4]
call fcn.00492248
cmp byte [ebp - 0x90], 1
jne 0x4961c8
mov byte [0x5f387c], 1
jmp 0x4961cf
mov byte [0x5f387c], 0
mov byte [0x5f3564], 0
cmp word [0x5f38a0], 0
jbe 0x4961fe
push 0xffffff
mov ecx, 0x8000
mov edx, 0x499410
mov eax, dword [0x5f18a0]
call fcn.004a9a10
jmp case.0x498525.0
cmp word [0x5f38a4], 0
jbe 0x496226
push 0xffffff
mov ecx, 0x8000
mov edx, 0x49942c
mov eax, dword [0x5f18a0]
call fcn.004a9a10
jmp case.0x498525.0
cmp word [0x5f38a6], 0
jbe 0x49624e
push 0xffffff
mov ecx, 0x8000
mov edx, 0x499450
mov eax, dword [0x5f18a0]
call fcn.004a9a10
jmp case.0x498525.0
cmp word [0x5f38a2], 0
jbe case.0x498525.0
push 0xffffff
mov ecx, 0x8000
mov edx, 0x499474
mov eax, dword [0x5f18a0]
call fcn.004a9a10
jmp case.0x498525.0
lea edx, [ebp - 0x24]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov eax, dword [0x5f3928]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
mov edx, dword [0x5f392c]
mov dword [edx], eax
movzx eax, word [ebp - 0x24]
movzx edx, word [ebp - 0x22]
shl edx, 0x10
or eax, edx
mov edx, dword [0x5f3930]
mov dword [edx], eax
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049a28c
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00494fa0
jmp case.0x498525.0
mov eax, dword [ebp - 0x88]
mov dword [0x5f36e4], eax
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049a56c
jmp case.0x498525.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049a608
jmp case.0x498525.0
movzx eax, word [ebp - 0x82]
mov dword [0x5f36e8], eax
jmp case.0x498525.0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x49634a
mov eax, dword [ebp - 0x60]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
push 0x40255555
push 0x55555555
call fcn.00466314
cmp eax, dword [ebp - 0x60]
jge 0x4963c1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x496375
mov eax, dword [ebp - 0x64]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.00466314
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x10]
call fcn.004054f0
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004666cc
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0xc0], 0x2f
lea ecx, [ebp - 0xc0]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.00465a94
jmp 0x4963c9
lea eax, [ebp - 0x1c]
call fcn.00404ff8
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0xa
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
cmp dword [ebp - 0x1c], 0
je case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
push 0
lea eax, [ebp - 0xec]
push eax
mov byte [ebp - 0xc0], 0x5c
lea ecx, [ebp - 0xc0]
mov eax, dword [ebp - 0x48]
lea edx, [eax + 0x28]
mov eax, dword [ebp - 0x1c]
call fcn.00465a94
mov edx, dword [ebp - 0xec]
mov eax, dword [ebp - 0x48]
add eax, 0x24
call fcn.0040504c
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00465950
call fcn.0048bca0
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x2c], eax
jmp case.0x498525.0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x496499
mov eax, dword [ebp - 0x68]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
push 0x40255555
push 0x55555555
call fcn.00466314
cmp eax, dword [ebp - 0x68]
jge 0x496510
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x4964c4
mov eax, dword [ebp - 0x6c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.00466314
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x10]
call fcn.004054f0
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004666cc
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0xc0], 0x2f
lea ecx, [ebp - 0xc0]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.00465a94
jmp 0x496518
lea eax, [ebp - 0x1c]
call fcn.00404ff8
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 9
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
cmp dword [ebp - 0x1c], 0
je case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
push 0
lea eax, [ebp - 0xf0]
push eax
mov byte [ebp - 0xc0], 0x5c
lea ecx, [ebp - 0xc0]
mov eax, dword [ebp - 0x48]
lea edx, [eax + 0x28]
mov eax, dword [ebp - 0x1c]
call fcn.00465a94
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x48]
add eax, 0x24
call fcn.0040504c
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00465950
call fcn.0048bca0
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x2c], eax
jmp case.0x498525.0
mov eax, dword [0x5f1b38]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.0x498525.0
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
push 0
push 0
push 0
push 0
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x49662f
mov eax, dword [ebp - 0x70]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
push 0x40255555
push 0x55555555
call fcn.00466314
cmp eax, dword [ebp - 0x70]
jge 0x4966a6
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x49665a
mov eax, dword [ebp - 0x74]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.00466314
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x10]
call fcn.004054f0
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004666cc
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0xc0], 0x2f
lea ecx, [ebp - 0xc0]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.00465a94
jmp 0x4966ae
lea eax, [ebp - 0x1c]
call fcn.00404ff8
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov eax, dword [0x5f1b38]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je 0x4966f7
mov ax, word [ebp - 0x80]
push eax
mov ax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov cx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a11c8
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
cmp dword [ebp - 0x1c], 0
je case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
push 0
lea eax, [ebp - 0xf4]
push eax
mov byte [ebp - 0xc0], 0x5c
lea ecx, [ebp - 0xc0]
mov eax, dword [ebp - 0x48]
lea edx, [eax + 0x28]
mov eax, dword [ebp - 0x1c]
call fcn.00465a94
mov edx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x48]
add eax, 0x24
call fcn.0040504c
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00465950
call fcn.0048bca0
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x2c], eax
jmp case.0x498525.0
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov eax, dword [0x5f1b38]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
jne 0x4967d6
cmp word [ebp - 0x84], 6
je 0x4967d6
cmp word [ebp - 0x84], 7
jne 0x49680b
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
cmp word [ebp - 0x84], 6
jne case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f37dc], eax
jmp case.0x498525.0
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov eax, dword [0x5f1b38]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.0x498525.0
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0xd
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
movzx eax, word [ebp - 0x82]
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x154], eax
jmp case.0x498525.0
cmp byte [0x5f1bc4], 0
je case.0x498525.0
mov ax, word [ebp - 0x88]
mov word [0x5f1c04], ax
jmp case.0x498525.0
mov eax, dword [ebp - 4]
call fcn.0049487c
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0xa
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov eax, dword [0x5f1b38]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, 0xc
mov eax, dword [ebp - 0x48]
call fcn.004c912c
jmp case.0x498525.0
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov eax, dword [0x5f1b38]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, 0xc
mov eax, dword [ebp - 0x48]
call fcn.004c912c
jmp case.0x498525.0
mov eax, dword [0x5f1b38]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x48]
call fcn.004c912c
cmp word [ebp - 0x84], 0xf
jne case.0x498525.0
cmp dword [ebp - 0x10], 0
je case.0x498525.0
mov eax, dword [ebp - 0x48]
mov byte [eax + 0xdc], 1
jmp case.0x498525.0
lea edx, [ebp - 0x2c]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x48]
call fcn.004c912c
movzx eax, word [ebp - 0x2c]
mov edx, dword [ebp - 0x48]
mov dword [edx + 0xc4], eax
movzx eax, word [ebp - 0x2a]
mov edx, dword [ebp - 0x48]
mov dword [edx + 0xc8], eax
movzx eax, word [ebp - 0x28]
movzx edx, word [ebp - 0x26]
shl edx, 0x10
or eax, edx
mov edx, dword [ebp - 0x48]
mov dword [edx + 0xcc], eax
jmp case.0x498525.0
lea edx, [ebp - 0x98]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x48]
call fcn.004c912c
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x98]
mov dword [eax + 0xc4], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x94]
mov dword [eax + 0xc8], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0xcc], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x8c]
mov dword [eax + 0xd4], edx
jmp case.0x498525.0
lea edx, [ebp - 0x2c]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x496bd1
mov eax, dword [ebp - 0x48]
mov byte [eax + 0x134], 1
mov eax, dword [0x5f1b38]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.0x498525.0
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x38], 1
mov eax, dword [ebp - 0x38]
add eax, eax
mov eax, dword [eax*8 + 0x5f18b0]
cmp eax, dword [ebp - 0x88]
jne 0x496c0d
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x15
jne 0x496bf3
cmp dword [ebp - 0x44], 0xffffffff
jne 0x496c3d
inc dword [0x5f1a00]
cmp dword [0x5f1a00], 0x14
jle 0x496c35
mov dword [0x5f1a00], 0x14
mov eax, dword [0x5f1a00]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
add eax, eax
mov edx, dword [ebp - 0x88]
mov dword [eax*8 + 0x5f18b0], edx
movzx eax, word [ebp - 0x82]
mov edx, dword [ebp - 0x44]
add edx, edx
mov dword [edx*8 + 0x5f18b4], eax
movzx eax, word [ebp - 0x80]
mov edx, dword [ebp - 0x44]
add edx, edx
mov dword [edx*8 + 0x5f18b8], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x44]
add edx, edx
mov dword [edx*8 + 0x5f18bc], eax
jmp case.0x498525.0
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00465950
push eax
movzx ecx, word [ebp - 0x7e]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0048fe9c
jmp case.0x498525.0
lea edx, [ebp - 0x40]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.00466768
movzx eax, word [ebp - 0x7e]
shr eax, 8
and eax, 0xff
push eax
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x40]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x7e]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0048ff48
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0048ffb4
jmp case.0x498525.0
movzx eax, word [ebp - 0x80]
push eax
movzx ecx, word [ebp - 0x82]
movzx edx, word [ebp - 0x7e]
mov eax, dword [ebp - 4]
call fcn.0048fffc
jmp case.0x498525.0
mov byte [0x5f37f8], 0
mov byte [0x5f37f1], 0
mov byte [0x5f37f0], 0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499498
call fcn.004b6bdc
mov eax, dword [ebp - 4]
call fcn.0045f8fc
jmp case.0x498525.0
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x496dca
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x48]
call fcn.004c912c
mov eax, dword [ebp - 0x48]
mov word [eax + 0x3c], 0
jmp case.0x498525.0
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x20
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x21
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x1b
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
mov eax, dword [0x5f1b38]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x58], edx
mov eax, dword [0x5f1b38]
mov dl, byte [ebp - 0x82]
mov byte [eax + 0x12], dl
mov eax, dword [0x5f1b38]
lea edx, [eax + 0x30]
mov ecx, 0x28
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov eax, dword [0x567334]
push eax
mov eax, dword [0x5f1b38]
movzx ecx, word [eax + 0x50]
mov eax, dword [0x5f1b38]
movzx eax, word [eax + 0x52]
add ecx, eax
mov eax, dword [0x5f1b38]
movzx eax, byte [eax + 0x54]
add ecx, eax
mov eax, dword [0x5f1b38]
movzx eax, byte [eax + 0x55]
add ecx, eax
mov eax, dword [0x5f1b38]
movzx eax, byte [eax + 0x56]
add ecx, eax
mov eax, dword [0x5f1b38]
movzx eax, byte [eax + 0x57]
add ecx, eax
mov eax, dword [0x5f1b38]
movsx edx, byte [eax + 0x5c]
mov eax, dword [0x5f1b38]
movzx eax, byte [eax + 0x30]
call fcn.0048ba30
jmp case.0x498525.0
xor eax, eax
mov al, byte [ebp - 0x82]
mov dword [0x5f3888], eax
movzx eax, word [ebp - 0x82]
shr eax, 8
and eax, 0xff
mov dword [0x5f3884], eax
xor eax, eax
mov al, byte [ebp - 0x80]
mov dword [0x5f388c], eax
movzx eax, word [ebp - 0x80]
shr eax, 8
and eax, 0xff
mov dword [0x5f3890], eax
xor eax, eax
mov al, byte [ebp - 0x7e]
mov dword [0x5f3894], eax
movzx eax, word [ebp - 0x7e]
shr eax, 8
and eax, 0xff
mov dword [0x5f3898], eax
xor eax, eax
mov al, byte [ebp - 0x88]
mov dword [0x5f389c], eax
jmp case.0x498525.0
movzx eax, word [ebp - 0x82]
mov dword [0x5f36e0], eax
jmp case.0x498525.0
mov eax, dword [0x5f1b38]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x48], edx
push 0xff
push 0
lea edx, [ebp - 0xfc]
movzx eax, word [ebp - 0x82]
call fcn.004096c0
push dword [ebp - 0xfc]
push 0x4994e8
lea eax, [ebp - 0xf8]
mov edx, 3
call fcn.0040538c
mov edx, dword [ebp - 0xf8]
mov ecx, 0xffffff
mov eax, dword [0x5f18a0]
call fcn.004a9a10
jmp case.0x498525.0
mov edx, 0x499500
mov eax, dword [0x5f18a0]
call fcn.004a9998
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x82]
mov word [eax + 0x3c], dx
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x80]
mov word [eax + 0x3e], dx
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x7e]
mov word [eax + 0x40], dx
jmp case.0x498525.0
lea edx, [ebp - 0x98]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
mov eax, dword [ebp - 0x48]
cmp eax, dword [0x5f1b38]
jne 0x4970aa
mov eax, dword [0x5f1b38]
cmp dword [eax + 0x2c], 0xf9
jne 0x4970be
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f37d0], eax
jmp 0x4970be
mov eax, dword [ebp - 0x48]
call fcn.004ccbd8
test al, al
je 0x4970be
mov eax, dword [ebp - 0x48]
call fcn.004ccc08
push 0
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
push eax
push 0
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x8c]
mov dx, 0x1f
mov eax, dword [ebp - 0x48]
call fcn.004c91e8
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x82]
mov word [eax + 0x3c], dx
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x80]
mov word [eax + 0x40], dx
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00466768
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
mov edx, dword [ebp - 0x48]
mov dword [edx + 0xf8], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0xfc], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x30]
mov dword [eax + 0x100], edx
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0xf8]
call fcn.004d3d5c
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
mov eax, dword [ebp - 0x48]
cmp eax, dword [0x5f1b38]
je 0x4971be
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x82]
mov word [eax + 0x3c], dx
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x80]
mov word [eax + 0x40], dx
mov eax, dword [ebp - 0x48]
mov byte [eax + 0x134], 1
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
mov eax, dword [ebp - 0x48]
mov byte [eax + 0x134], 0
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x82]
mov word [eax + 0x3c], dx
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x80]
mov word [eax + 0x40], dx
mov eax, dword [ebp - 0x48]
mov byte [eax + 0x135], 1
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x13c], 0x7d0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x138], eax
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
mov eax, dword [ebp - 0x48]
mov edx, dword [0x4c86d4]
call fcn.0040433c
test al, al
je case.0x498525.0
mov eax, dword [ebp - 0x48]
call fcn.004ce0d8
jmp case.0x498525.0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
movzx eax, word [ebp - 0x82]
shr eax, 8
call fcn.0048bca0
push eax
mov al, byte [ebp - 0x82]
call fcn.0048bca0
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5f18a0]
call fcn.004a9a10
cmp word [ebp - 0x84], 0x68
jne case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.004c5604
jmp case.0x498525.0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
movzx eax, word [ebp - 0x82]
shr eax, 8
call fcn.0048bca0
push eax
mov al, byte [ebp - 0x82]
call fcn.0048bca0
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x5f18a0]
call fcn.004a9a10
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
call fcn.004cccb4
jmp case.0x498525.0
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
push 0
lea eax, [ebp - 0x100]
push eax
mov byte [ebp - 0xc0], 0x5c
lea ecx, [ebp - 0xc0]
mov eax, dword [ebp - 0x48]
lea edx, [eax + 0x28]
mov eax, dword [ebp - 0x20]
call fcn.00465a94
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x48]
add eax, 0x24
call fcn.0040504c
mov al, byte [ebp - 0x82]
call fcn.0048bca0
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x2c], eax
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.0x498525.0
mov al, byte [ebp - 0x82]
call fcn.0048bca0
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x2c], eax
jmp case.0x498525.0
mov eax, dword [0x5f1b38]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.0x498525.0
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x1d
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
lea edx, [ebp - 0x98]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00466768
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a0fb0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x49749b
mov ax, word [ebp - 0x80]
push eax
mov ax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
push eax
mov cx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a11c8
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0xd8], edx
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, 0x14
mov eax, dword [ebp - 0x48]
call fcn.004c912c
jmp case.0x498525.0
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
push 0
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x15
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
lea edx, [ebp - 0x24]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.00466768
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
movzx eax, word [ebp - 0x82]
push eax
mov ecx, dword [ebp - 0x88]
mov dl, 1
mov eax, dword [0x4a72b4]
call fcn.004a7374
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov dword [eax + 0xc], edx
movzx eax, word [ebp - 0x24]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x1c], eax
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x5f1a1c]
call fcn.004a778c
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f1a1c]
call fcn.004a7810
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049a6f0
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049acb4
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049a79c
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049a860
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049a934
jmp case.0x498525.0
lea edx, [ebp - 0x104]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov eax, dword [ebp - 0x104]
mov edx, dword [ebp - 0x88]
call fcn.004d2f2c
jmp case.0x498525.0
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov edx, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049ae58
jmp case.0x498525.0
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov eax, dword [ebp - 0x10c]
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049aec8
jmp case.0x498525.0
movzx eax, word [ebp - 0x80]
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049afd4
jmp case.0x498525.0
movzx ecx, word [ebp - 0x80]
movzx edx, word [ebp - 0x82]
mov eax, dword [0x5f1b34]
call fcn.004d245c
jmp case.0x498525.0
mov edx, 0x499510
mov eax, dword [0x5f18a0]
call fcn.004a9998
jmp case.0x498525.0
movzx ecx, word [ebp - 0x80]
movzx edx, word [ebp - 0x82]
mov eax, dword [0x5f1b34]
call fcn.004d2580
jmp case.0x498525.0
mov eax, dword [0x5f1b38]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x18], edx
mov eax, dword [0x5f1b38]
mov si, 0xfff5
call fcn.004043ac
mov eax, dword [0x5f3740]
sub eax, 0xd
jae 0x4976ff
mov eax, dword [0x5f3740]
mov edx, eax
shl eax, 4
add eax, edx
lea edi, [eax*4 + 0x5f1b3c]
mov esi, 0x5f3744
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov byte [0x5f3744], 0
jmp case.0x498525.0
mov eax, 0x5f3744
call fcn.004d29ec
mov byte [0x5f3744], 0
jmp case.0x498525.0
mov eax, dword [0x5f1b38]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x18], edx
mov eax, dword [0x5f1b38]
mov si, 0xfff5
call fcn.004043ac
mov byte [0x5f3744], 0
jmp case.0x498525.0
cmp dword [0x5f3740], 0
jge 0x49777a
mov eax, dword [0x5f3740]
inc eax
neg eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov edx, eax
shl eax, 4
add eax, edx
lea edi, [eax*4 + 0x5f1b3c]
mov esi, 0x5f3744
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov byte [0x5f3744], 0
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049b044
jmp case.0x498525.0
movzx eax, word [ebp - 0x82]
add eax, dword [ebp - 0x88]
movzx edx, word [ebp - 0x80]
add eax, edx
mov dx, word [ebp - 0x7e]
xor dx, 0xaa21
xor dx, 0x1f35
xor dx, 0x3a5f
movzx edx, dx
cmp eax, edx
jne 0x4977ee
mov eax, dword [0x5f1b38]
mov dx, word [ebp - 0x88]
mov word [eax + 0x50], dx
mov eax, dword [0x5f1b38]
mov dl, byte [ebp - 0x82]
mov byte [eax + 0x54], dl
mov eax, dword [0x5f1b38]
mov dl, byte [ebp - 0x80]
mov byte [eax + 0x56], dl
jmp 0x49780b
mov eax, dword [0x5f1b38]
mov word [eax + 0x50], 0x7f
mov eax, dword [0x5f1b38]
mov byte [eax + 0x54], 0x7f
mov eax, dword [0x5f1b38]
mov byte [eax + 0x56], 0x7f
mov eax, dword [0x567334]
push eax
mov eax, dword [0x5f1b38]
movzx ecx, word [eax + 0x50]
mov eax, dword [0x5f1b38]
movzx eax, word [eax + 0x52]
add ecx, eax
mov eax, dword [0x5f1b38]
movzx eax, byte [eax + 0x54]
add ecx, eax
mov eax, dword [0x5f1b38]
movzx eax, byte [eax + 0x55]
add ecx, eax
mov eax, dword [0x5f1b38]
movzx eax, byte [eax + 0x56]
add ecx, eax
mov eax, dword [0x5f1b38]
movzx eax, byte [eax + 0x57]
add ecx, eax
mov eax, dword [0x5f1b38]
movsx edx, byte [eax + 0x5c]
mov eax, dword [0x5f1b38]
movzx eax, byte [eax + 0x30]
call fcn.0048ba30
jmp case.0x498525.0
mov eax, 0x6a
call fcn.004c7f90
mov eax, dword [0x5f1b38]
mov eax, dword [eax + 0x58]
cmp eax, dword [ebp - 0x88]
jge 0x4978c3
mov eax, dword [0x5f1b38]
push dword [eax + 0x58]
mov eax, dword [ebp - 0x88]
pop edx
sub eax, edx
lea edx, [ebp - 0x110]
call fcn.004096c0
lea eax, [ebp - 0x110]
mov edx, 0x499528
call fcn.004052c4
mov edx, dword [ebp - 0x110]
mov eax, dword [0x5f18a0]
call fcn.004a9998
mov eax, dword [0x5f1b38]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x58], edx
jmp case.0x498525.0
push 0
push 0
push 0
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
push eax
push 0
push 0
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
push 0
push 0
push 0
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x5f18b0]
call fcn.004a1cd0
jmp case.0x498525.0
mov byte [0x5f3800], 1
jmp case.0x498525.0
mov byte [0x5f3788], 0
call fcn.004d2c64
jmp case.0x498525.0
mov eax, 0x5f3788
call fcn.004d29ec
mov byte [0x5f3788], 0
jmp case.0x498525.0
cmp dword [ebp - 0x10], 0
je case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049b160
jmp case.0x498525.0
cmp dword [ebp - 0x10], 0
je case.0x498525.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049b238
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049b1d0
jmp case.0x498525.0
movzx eax, word [ebp - 0x80]
movzx edx, word [ebp - 0x7e]
shl edx, 0x10
or eax, edx
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049b388
jmp case.0x498525.0
movzx eax, word [ebp - 0x80]
movzx edx, word [ebp - 0x7e]
shl edx, 0x10
or eax, edx
push eax
movzx edx, word [ebp - 0x82]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049b3f8
jmp case.0x498525.0
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov eax, dword [ebp - 0x114]
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049b458
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
call fcn.004bf7a4
jmp case.0x498525.0
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049b538
jmp case.0x498525.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049b748
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049b95c
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049b99c
jmp case.0x498525.0
cmp byte [0x5f3600], 0
je case.0x498525.0
cmp dword [ebp - 0x88], 0
jle 0x497af6
lea edx, [ebp - 0x118]
mov eax, dword [ebp - 0x88]
call fcn.004096c0
mov edx, dword [ebp - 0x118]
mov eax, 0x5f36d4
mov ecx, 0x49953c
call fcn.00405310
jmp case.0x498525.0
mov eax, 0x5f36d4
mov edx, 0x49954c
call fcn.0040504c
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
mov eax, dword [0x5f1b38]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x58], edx
mov byte [0x5f3644], 0
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
mov eax, 0x5f3644
call fcn.004d29ec
mov byte [0x5f3644], 0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499560
call fcn.004b6bdc
jmp case.0x498525.0
cmp byte [0x5f3600], 0
je case.0x498525.0
cmp dword [ebp - 0x88], 0
jl 0x497bb9
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0x88]
call fcn.004096c0
mov edx, dword [ebp - 0x11c]
mov eax, 0x5f36d4
mov ecx, 0x49953c
call fcn.00405310
jmp case.0x498525.0
mov eax, 0x5f36d4
mov edx, 0x49954c
call fcn.0040504c
jmp case.0x498525.0
cmp byte [0x5f3644], 0
je case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
mov eax, dword [0x5f1b38]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x58], edx
mov ax, word [ebp - 0x82]
mov word [0x5f3684], ax
mov ax, word [ebp - 0x80]
mov word [0x5f3686], ax
mov eax, 0x5f3644
call fcn.004d29ec
mov byte [0x5f3644], 0
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
mov eax, 0x5f3644
call fcn.004d29ec
mov byte [0x5f3644], 0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x49957c
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
cmp word [ebp - 0x84], 0x2bd
je 0x497cce
cmp word [ebp - 0x84], 0x2be
jne 0x497cac
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499598
call fcn.004b6bdc
jmp 0x497cc4
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4995d0
call fcn.004b6bdc
mov eax, 0x5f3644
call fcn.004d29ec
mov byte [0x5f3644], 0
jmp case.0x498525.0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049ba1c
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
cmp word [ebp - 0x84], 0x2c1
je 0x497d53
cmp word [ebp - 0x84], 0x2c3
jne 0x497d36
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4995e8
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499608
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
call fcn.004c0ed8
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
mov eax, dword [0x5f1b38]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x58], edx
movzx edx, word [ebp - 0x82]
movzx eax, word [ebp - 0x80]
shl eax, 0x10
or edx, eax
mov eax, dword [0x568bc8]
mov eax, dword [eax]
call fcn.004c0e08
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
mov eax, dword [ebp - 0x88]
dec eax
je 0x497dd3
dec eax
je 0x497df0
dec eax
je 0x497e0d
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499620
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4995e8
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499638
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
mov eax, dword [0x5f1b38]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x58], edx
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x49965c
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
mov eax, dword [ebp - 0x88]
dec eax
je 0x497e92
dec eax
je 0x497eaf
dec eax
je 0x497ecc
dec eax
je 0x497ee9
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x49967c
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4995e8
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499690
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4996a4
call fcn.004b6bdc
jmp case.0x498525.0
movzx eax, word [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049bc1c
jmp case.0x498525.0
inc dword [0x5f38b4]
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049be08
jmp case.0x498525.0
cmp word [ebp - 0x82], 0
jbe 0x497f57
mov byte [0x5f387c], 1
jmp 0x497f5e
mov byte [0x5f387c], 0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f386c], eax
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f386c], eax
mov byte [0x5f387c], 1
mov eax, dword [0x5f1b38]
mov byte [eax + 0x134], 1
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f386c], eax
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffc
je 0x498008
dec eax
je 0x497feb
dec eax
je 0x497fce
dec eax
jne case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4996c4
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4996dc
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4996fc
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x49972c
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f386c], eax
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f386c], eax
mov eax, dword [ebp - 0x88]
add eax, 5
cmp eax, 4
ja case.0x498525.0
jmp dword [eax*4 + 0x498057]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499744
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499770
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x49979c
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4997b4
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4997d0
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f386c], eax
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f386c], eax
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffd
je 0x498164
dec eax
je 0x498147
dec eax
jne case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4996c4
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4996dc
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4997ec
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x5f1b38]
mov byte [eax + 0x134], 0
mov eax, dword [0x5f3880]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.0x498525.0
mov eax, dword [0x5f1b38]
mov byte [eax + 0x134], 1
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 4]
call fcn.0049bf10
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3874], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049bfa8
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3874], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049c46c
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3874], eax
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499804
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3874], eax
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499820
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3874], eax
lea edx, [ebp - 0x124]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov edx, dword [ebp - 0x124]
mov eax, 0x5f348c
call fcn.0040504c
mov eax, dword [0x568bc8]
mov eax, dword [eax]
call fcn.004c26fc
jmp case.0x498525.0
call fcn.004d305c
cmp byte [0x5f3688], 0
je 0x4982a3
mov eax, 0x5f3688
call fcn.004d29ec
mov byte [0x5f3688], 0
cmp dword [0x5f3480], 0
jle 0x4982c1
mov eax, dword [0x5f1b38]
mov edx, dword [0x5f3480]
add dword [eax + 0x58], edx
xor eax, eax
mov dword [0x5f3480], eax
mov eax, dword [0x568bc8]
mov eax, dword [eax]
call fcn.004c27f0
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3870], eax
cmp byte [0x5f3688], 0
je case.0x498525.0
mov eax, 0x5f3688
call fcn.004d2ffc
mov byte [0x5f3688], 0
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3870], eax
cmp byte [0x5f3688], 0
je case.0x498525.0
mov eax, 0x5f3688
call fcn.004d29ec
mov byte [0x5f3688], 0
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3870], eax
cmp byte [0x5f3688], 0
je case.0x498525.0
mov byte [0x5f3688], 0
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3870], eax
cmp byte [0x5f3688], 0
je case.0x498525.0
lea eax, [ebp - 0x128]
mov edx, 0x5f3688
call fcn.0040525c
mov eax, dword [ebp - 0x128]
mov edx, dword [0x5f36c4]
call fcn.004d2b90
mov eax, 0x5f3688
call fcn.004d2ffc
mov eax, dword [0x5f3738]
cmp eax, dword [0x5f36c4]
jne 0x4983c2
mov eax, 0x5f36fc
mov edx, 0x5f3688
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004038c0
jne 0x4983c2
mov byte [0x5f36f4], 0
mov byte [0x5f36fc], 0
mov byte [0x5f3688], 0
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049c8c4
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049c928
jmp case.0x498525.0
mov eax, dword [ebp - 0x88]
mov dword [0x5f3480], eax
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
mov edx, dword [0x5f1b38]
mov dword [edx + 0x58], eax
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3870], eax
jmp case.0x498525.0
mov eax, dword [ebp - 0x88]
mov dword [0x5f3480], eax
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
mov edx, dword [0x5f1b38]
mov dword [edx + 0x58], eax
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3870], eax
jmp case.0x498525.0
mov eax, dword [ebp - 0x88]
mov dword [0x5f3484], eax
mov eax, 0x6a
call fcn.004c7f90
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
call fcn.004c27f0
jmp case.0x498525.0
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0049b9dc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3874], eax
movzx edx, word [ebp - 0x82]
mov eax, dword [ebp - 4]
call fcn.0049c98c
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov dword [0x5f3874], eax
push 0xff
mov ecx, 0xffffff
mov edx, 0x499854
mov eax, dword [0x5f18a0]
call fcn.004a9a10
jmp case.0x498525.0
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 4]
call fcn.0049c9c8
jmp case.0x498525.0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049ca54
jmp case.0x498525.0
mov eax, dword [ebp - 4]
call fcn.00494394
jmp case.0x498525.0
mov eax, dword [ebp - 0x88]
cmp eax, 5
ja case.0x498525.0
jmp dword [eax*4 + 0x49852c]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x49986c
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499890
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4998bc
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4998dc
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4998f8
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [ebp - 4]
call fcn.00494394
jmp case.0x498525.0
mov eax, dword [ebp - 0x88]
dec eax
je 0x4985f9
dec eax
je 0x498616
dec eax
je 0x498633
dec eax
je 0x498650
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x49986c
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499918
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499934
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499958
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [ebp - 0x88]
add eax, 7
cmp eax, 5
ja case.0x498525.0
jmp dword [eax*4 + 0x498686]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499970
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499998
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4999c0
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499970
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x4999f4
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499a20
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffc
je 0x4987bb
dec eax
je 0x49879e
dec eax
je 0x498781
dec eax
jne case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499a48
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499a60
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499a74
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499aa0
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffd
je 0x498827
dec eax
je 0x49880a
dec eax
jne case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499a48
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499ac4
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499ae0
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499b00
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffd
je 0x4988d2
dec eax
je 0x4988b5
dec eax
jne 0x4988ef
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499b18
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499b38
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499b50
call fcn.004b6bdc
jmp case.0x498525.0
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
mov edx, 0x499b78
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
cmp dword [ebp - 0x10], 0
je case.0x498525.0
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov edx, dword [ebp - 0x130]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
call fcn.004b6bdc
jmp case.0x498525.0
cmp dword [ebp - 0x10], 0
je case.0x498525.0
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0x10]
call fcn.004666cc
mov edx, dword [ebp - 0x134]
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x498cf8]
call fcn.004b6bdc
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
jmp case.0x498525.0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x838], eax
jmp case.0x498525.0
mov eax, dword [0x5f18b0]
mov eax, dword [eax + 0x5a85c]
cmp byte [eax + 0x255], 0
jne 0x4989e1
mov eax, dword [0x5f18b0]
mov eax, dword [eax + 0x5a85c]
mov dl, 0x2a
call fcn.004319a0
mov byte [0x5f3566], 1
jmp case.0x498525.0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x498a04
mov eax, dword [ebp - 0x78]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x14]
push eax
push 0x40355555
push 0x55555555
call fcn.00466314
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x10]
call fcn.004054f0
lea edx, [ebp - 0x98]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00466768
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x14]
call fcn.004666cc
movzx eax, word [ebp - 0x82]
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x700], eax
xor eax, eax
mov al, byte [ebp - 0x98]
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x708], eax
movzx eax, word [ebp - 0x98]
shr eax, 8
and eax, 0xff
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x724], eax
mov eax, dword [ebp - 0x98]
shr eax, 0x10
and eax, 0xff
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x740], eax
mov eax, dword [ebp - 0x98]
shr eax, 0x10
movzx eax, ax
shr eax, 8
and eax, 0xff
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x75c], eax
xor eax, eax
mov al, byte [ebp - 0x94]
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x778], eax
movzx eax, word [ebp - 0x94]
shr eax, 8
and eax, 0xff
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x794], eax
mov eax, dword [ebp - 0x94]
shr eax, 0x10
and eax, 0xff
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x7b0], eax
mov eax, dword [ebp - 0x94]
shr eax, 0x10
movzx eax, ax
shr eax, 8
and eax, 0xff
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x7cc], eax
xor eax, eax
mov al, byte [ebp - 0x90]
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x7e8], eax
movzx eax, word [ebp - 0x90]
shr eax, 8
and eax, 0xff
mov edx, dword [0x568bc8]
mov edx, dword [edx]
mov dword [edx + 0x804], eax
mov eax, dword [0x568bc8]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x6fc], edx
mov eax, dword [0x568bc8]
mov eax, dword [eax]
mov cx, word [0x499b8c]
xor edx, edx
call fcn.004b6bdc
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x5f189c]
call fcn.004934b4
jmp case.0x498525.0
lea edx, [ebp - 0x13c]
movzx eax, word [ebp - 0x84]
call fcn.004096c0
push dword [ebp - 0x13c]
push 0x499b98
push dword [ebp - 0x10]
lea eax, [ebp - 0x138]
mov edx, 3
call fcn.0040538c
mov edx, dword [ebp - 0x138]
mov eax, dword [0x5f18a0]
call fcn.004a9998
mov edx, dword [ebp - 8]
mov eax, 0x499ba4
call fcn.004055d4
test eax, eax
jle case.default.0x495523
mov edx, dword [ebp - 8]
mov eax, dword [0x5f18a0]
call fcn.004a9998
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x498c49
lea eax, [ebp - 0x13c]
mov edx, 0x1f
call fcn.0040501c
lea eax, [ebp - 0xbc]
call fcn.00404ff8
lea eax, [ebp - 0x7c]
call fcn.00404ff8
lea eax, [ebp - 0x20]
mov edx, 7
call fcn.0040501c
ret