Function at 0x4b6120
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x514
push 0
push 0
dec ecx
jne 0x4b6128
push ebx
push esi
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.004051fc
xor eax, eax
push ebp
push 0x4b8282
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
cmp byte [eax], 0x2b
jne 0x4b61de
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
call fcn.0040500c
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.0040526c
push 0
lea eax, [ebp - 0x2738]
push eax
mov byte [ebp - 0x273c], 0x2f
lea ecx, [ebp - 0x273c]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.00477b90
mov edx, dword [ebp - 0x2738]
lea eax, [ebp - 8]
call fcn.00404dd4
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.004ae7bc
mov eax, dword [0x53ea3c]
cmp byte [eax + 4], 0
je case.0x4b6e4c.5196
cmp dword [ebp - 8], 0
je case.0x4b6e4c.5196
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.004098f4
mov edx, eax
mov eax, ebx
call fcn.004bdc4c
jmp case.0x4b6e4c.5196
mov eax, dword [ebp - 4]
call fcn.0040500c
cmp eax, 0x10
jge 0x4b6247
mov eax, dword [ebp - 4]
cmp byte [eax], 0x3d
jne case.0x4b6e4c.5196
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 4]
call fcn.0040500c
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.0040526c
mov eax, dword [ebp - 8]
mov edx, 0x4b8298
call fcn.00405158
jne case.0x4b6e4c.5196
mov eax, dword [0x53e6d8]
cmp dword [eax], 0
je case.0x4b6e4c.5196
mov eax, dword [0x53e6d8]
mov eax, dword [eax]
mov byte [eax + 0x130], 1
jmp case.0x4b6e4c.5196
xor eax, eax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0040526c
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 4]
call fcn.0040500c
mov ecx, eax
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 4]
call fcn.0040526c
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x10]
call fcn.0048a820
mov eax, dword [0x53eb20]
cmp dword [eax + 0x88], 0
je 0x4b62ff
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x2734]
push eax
mov eax, dword [ebp - 0x14]
call fcn.0040520c
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x53eb20]
mov eax, dword [eax + 0x88]
call eax
test al, al
jne case.0x4b6e4c.5196
cmp dword [ebp - 0x18], 0
jle 0x4b62f1
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x18]
call fcn.00405398
lea eax, [ebp - 0x14]
call fcn.00405264
mov edx, eax
lea eax, [ebp - 0x2733]
mov ecx, dword [ebp - 0x18]
call fcn.0046dc9c
jmp 0x4b62ff
cmp dword [ebp - 0x18], 0
jge 0x4b62ff
lea eax, [ebp - 0x14]
call fcn.00404d3c
mov eax, dword [0x53e6d8]
cmp dword [eax], 0
jne 0x4b659f
movzx eax, word [ebp - 0x20]
cmp eax, 0x211
jg 0x4b63b0
je 0x4b64a2
cmp eax, 0x209
jg 0x4b637f
je 0x4b64f3
cmp eax, 0x1f9
jg 0x4b635f
je 0x4b645d
add eax, 0xffffffce
sub eax, 2
jb 0x4b659f
sub eax, 0x1c3
je 0x4b646c
dec eax
je 0x4b6451
jmp case.0x4b6e4c.5196
sub eax, 0x1fa
je 0x4b650e
dec eax
je 0x4b651a
sub eax, 0xd
je 0x4b64d5
jmp case.0x4b6e4c.5196
add eax, 0xfffffdf6
cmp eax, 6
ja case.0x4b6e4c.5196
jmp dword [eax*4 + 0x4b6394]
cmp eax, 0x219
jg 0x4b63ee
je 0x4b64b4
add eax, 0xfffffdee
cmp eax, 6
ja case.0x4b6e4c.5196
jmp dword [eax*4 + 0x4b63d2]
cmp eax, 0x322
jg 0x4b641b
je 0x4b659f
sub eax, 0x21a
je 0x4b6577
dec eax
je 0x4b6598
sub eax, 0x77
je 0x4b659f
jmp case.0x4b6e4c.5196
sub eax, 0x7d7
je 0x4b643f
sub eax, 0x464b
jne case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bd500
jmp 0x4b659f
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004aeb88
jmp 0x4b659f
mov eax, ebx
call fcn.004aebb0
jmp 0x4b659f
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004aec74
jmp 0x4b659f
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004aee5c
jmp 0x4b659f
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b870c
jmp 0x4b659f
mov eax, ebx
call fcn.004af048
jmp 0x4b659f
mov eax, ebx
call fcn.004af108
jmp 0x4b659f
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8498
jmp 0x4b659f
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8390
jmp 0x4b659f
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b835c
jmp 0x4b659f
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8774
jmp 0x4b659f
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004af148
jmp 0x4b659f
mov eax, ebx
call fcn.004ab014
jmp 0x4b659f
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004af1a4
jmp 0x4b659f
mov eax, ebx
call fcn.004af358
jmp 0x4b659f
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004af390
jmp 0x4b659f
mov eax, ebx
call fcn.004ab014
jmp 0x4b659f
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004af444
jmp 0x4b659f
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b897c
jmp 0x4b659f
mov eax, ebx
call fcn.004af4f4
jmp 0x4b659f
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b481c
jmp 0x4b659f
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b4980
jmp 0x4b659f
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b492c
jmp 0x4b659f
mov eax, dword [ebp - 0x14]
push eax
cmp dword [ebp - 0x24], 0
sete dl
movzx ecx, word [ebp - 0x1e]
mov eax, ebx
call fcn.004b4b88
jmp 0x4b659f
mov eax, ebx
call fcn.004b04d4
jmp 0x4b659f
mov eax, ebx
call fcn.004c05bc
mov eax, dword [0x53e4b4]
cmp byte [eax], 0
je 0x4b660f
cmp word [ebp - 0x20], 0x27a
jne case.0x4b6e4c.5196
mov eax, dword [ebp - 0x24]
mov dword [ebx + 0x390], eax
mov eax, dword [ebp - 0x20]
mov dword [ebx + 0x394], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 0x398], eax
lea edx, [ebp - 0x2740]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov edx, dword [ebp - 0x2740]
lea eax, [ebx + 0x39c]
call fcn.00404d90
mov eax, dword [0x53ee08]
mov byte [eax], 1
mov dl, 1
mov eax, dword [ebx + 0x334]
call fcn.004337a4
mov word [ebp - 0x20], 0
jmp case.0x4b6e4c.5196
mov si, word [ebp - 0x20]
movzx eax, si
cmp eax, 0x2fc
jge 0x4b6a72
cmp eax, 0x27f
jg 0x4b686d
je 0x4b70fb
cmp eax, 0x36
jg 0x4b6718
je 0x4b6fb1
add eax, 0xfffffffb
cmp eax, 0x30
ja case.0x4b6e4c.5196
jmp dword [eax*4 + 0x4b6654]
cmp eax, 0x259
jg 0x4b67e4
je 0x4b730e
cmp eax, 0xcb
jg 0x4b6790
je 0x4b72b1
cmp eax, 0x64
jge 0x4b6768
sub eax, 0x37
je 0x4b6fc3
add eax, 0xfffffffb
sub eax, 3
jb case.0x4b664d.8
add eax, 0xfffffffd
sub eax, 3
jb case.0x4b664d.8
dec eax
je case.0x4b664d.8
jmp case.0x4b6e4c.5196
add eax, 0xffffff9c
sub eax, 6
jb case.0x4b6e4c.5206
sub eax, 0x5e
je 0x4b7290
dec eax
je 0x4b729f
dec eax
je 0x4b72cf
jmp case.0x4b6e4c.5196
cmp eax, 0xd4
jg 0x4b67bd
je 0x4b7854
sub eax, 0xcc
je 0x4b72c0
sub eax, 6
je 0x4b7836
dec eax
je 0x4b7845
jmp case.0x4b6e4c.5196
add eax, 0xfffffed4
sub eax, 4
jb case.0x4b664d.8
sub eax, 0xe0
je 0x4b710a
sub eax, 0x48
je 0x4b72ed
jmp case.0x4b6e4c.5196
add eax, 0xfffffd9e
cmp eax, 0x1c
ja case.0x4b6e4c.5196
jmp dword [eax*4 + 0x4b67f9]
add eax, 0xfffffd80
cmp eax, 0x7b
ja case.0x4b6e4c.5196
jmp dword [eax*4 + 0x4b6882]
cmp eax, 0x1422
jg 0x4b6d7b
je 0x4b7576
cmp eax, 0x1000
jg 0x4b6bf2
je 0x4b7f09
cmp eax, 0x44e
jg 0x4b6b60
je 0x4b71fd
cmp eax, 0x322
jg 0x4b6b0c
je 0x4b6f93
cmp eax, 0x302
jge 0x4b6ae3
add eax, 0xfffffd04
sub eax, 2
jb 0x4b7cdd
je 0x4b6fe7
dec eax
je 0x4b7cbf
dec eax
sub eax, 2
jb 0x4b7c86
jmp case.0x4b6e4c.5196
add eax, 0xfffffcfe
sub eax, 2
jb 0x4b7c95
je 0x4b7cce
sub eax, 0x1c
je 0x4b701a
dec eax
je 0x4b7029
jmp case.0x4b6e4c.5196
cmp eax, 0x327
jg 0x4b6b3e
je 0x4b7029
sub eax, 0x323
je case.0x4b664d.29
dec eax
je 0x4b726f
dec eax
je 0x4b7281
dec eax
je 0x4b701a
jmp case.0x4b6e4c.5196
sub eax, 0x32b
je 0x4b6fd5
sub eax, 0x121
je 0x4b71ca
dec eax
je 0x4b71dc
jmp case.0x4b6e4c.5196
cmp eax, 0xff7
jge 0x4b6bb9
cmp eax, 0x5e0
jg 0x4b6b9b
je 0x4b7a24
sub eax, 0x44f
je 0x4b71eb
dec eax
je 0x4b71ac
dec eax
je 0x4b71be
sub eax, 0x5f
je 0x4b7cf5
jmp case.0x4b6e4c.5196
sub eax, 0xff4
je 0x4b7e70
dec eax
je 0x4b7e7f
dec eax
je 0x4b7e8e
jmp case.0x4b6e4c.5196
add eax, 0xfffff009
cmp eax, 8
ja case.0x4b6e4c.5196
jmp dword [eax*4 + 0x4b6bce]
add eax, 0xffffec3b
cmp eax, 0x5c
ja case.0x4b6e4c.5196
jmp dword [eax*4 + 0x4b6c07]
cmp eax, 0x1447
jg 0x4b6e31
je 0x4b7635
add eax, 0xffffebdd
cmp eax, 0x23
ja case.0x4b6e4c.5196
jmp dword [eax*4 + 0x4b6da1]
cmp eax, 0x145f
jg 0x4b6eab
je 0x4b8206
add eax, 0xffffebb7
cmp eax, 0x15
ja case.0x4b6e4c.5196
jmp dword [eax*4 + 0x4b6e53]
cmp eax, 0x4e25
jg 0x4b6f10
je 0x4b7d3a
cmp eax, 0x2329
jg 0x4b6ef2
je 0x4b7d28
sub eax, 0x1461
je 0x4b8212
dec eax
je 0x4b8232
sub eax, 0x151
je case.0x4b664d.8
sub eax, 0x990
je 0x4b7d07
jmp case.0x4b6e4c.5196
sub eax, 0x232c
je 0x4b7d5b
sub eax, 0x2af5
je 0x4b7d16
dec eax
je 0x4b6f81
jmp case.0x4b6e4c.5196
cmp eax, 0x4e2a
jg 0x4b6f3b
je 0x4b7d6e
sub eax, 0x4e26
je 0x4b7d9a
dec eax
je 0x4b7da6
dec eax
je 0x4b7d49
jmp case.0x4b6e4c.5196
sub eax, 0x4e2b
je 0x4b7d8b
sub eax, 0xafe1
je 0x4b79db
dec eax
je 0x4b7a5d
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004af534
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004af5c0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bd500
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8b30
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004af830
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8e08
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b8f20
jmp case.0x4b6e4c.5196
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b9004
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004af838
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004af848
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004afa18
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004afbac
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004afbe8
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004afde4
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004afeec
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004affd4
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004afff8
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b001c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b00cc
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0138
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b027c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0330
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b03e0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0448
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b04cc
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b04d4
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b054c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0638
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b06cc
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b0790
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b084c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b085c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b0924
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b099c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0b08
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0de0
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b0ea8
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0eb0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b0f38
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b0f3c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b0fd0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b1000
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b13e4
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1484
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b14ac
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b14e4
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b15a0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b15c8
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b16a4
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b90f0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9584
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b91a8
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9244
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b92d0
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b937c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2744]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x2744]
mov edx, dword [ebp - 0x24]
call fcn.005383bc
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2748]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov edx, dword [ebp - 0x2748]
mov ecx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004ba560
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004ba5cc
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004ba7b4
jmp case.0x4b6e4c.5196
movzx ecx, word [ebp - 0x1c]
movzx edx, word [ebp - 0x1e]
mov eax, dword [0x53f170]
mov eax, dword [eax]
call fcn.0050aa94
jmp case.0x4b6e4c.5196
push 0x28
push 0xffff00
mov eax, dword [0x53e9d0]
mov eax, dword [eax]
mov ecx, 0x1e
mov edx, 0x4b82a4
call fcn.00530b60
jmp case.0x4b6e4c.5196
movzx ecx, word [ebp - 0x1c]
movzx edx, word [ebp - 0x1e]
mov eax, dword [0x53f170]
mov eax, dword [eax]
call fcn.0050ab4c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004ba194
jmp case.0x4b6e4c.5196
mov eax, dword [0x53f218]
mov eax, dword [eax]
mov cx, word [0x4b82b4]
mov edx, 0x4b82c0
call fcn.004d5cf0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b16b4
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b1760
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1838
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b1790
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b186c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b18e4
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1960
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9db4
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9794
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9bec
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9c9c
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9b48
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004ba9b4
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004baa88
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004baa38
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b991c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x274c]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov ecx, dword [ebp - 0x274c]
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1990
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1b58
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2750]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov ecx, dword [ebp - 0x2750]
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1b70
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1cdc
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2754]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov ecx, dword [ebp - 0x2754]
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b20d4
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1b58
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1d1c
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1d44
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2758]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov ecx, dword [ebp - 0x2758]
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1990
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b228c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1d84
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1db8
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1e40
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1e64
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1df8
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1e1c
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004ba894
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1e88
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1ec0
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1ef8
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b1f10
jmp case.0x4b6e4c.5196
mov dx, word [ebp - 0x1a]
mov ax, word [ebp - 0x1c]
call fcn.00407ed0
push eax
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bb79c
jmp case.0x4b6e4c.5196
mov dx, word [ebp - 0x1a]
mov ax, word [ebp - 0x1c]
call fcn.00407ed0
push eax
movzx edx, word [ebp - 0x1e]
mov ecx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bb808
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b1f30
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b2004
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x275c]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x275c]
mov edx, dword [ebp - 0x24]
call fcn.005383bc
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2760]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov edx, dword [ebp - 0x2760]
mov ecx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004ba4f4
jmp case.0x4b6e4c.5196
mov eax, dword [0x53ef1c]
mov byte [eax + 8], 0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b20a0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2764]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov ecx, dword [ebp - 0x2764]
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b20d4
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b228c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2768]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov ecx, dword [ebp - 0x2768]
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b22a4
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b2400
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bab7c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b2440
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b2470
jmp case.0x4b6e4c.5196
push 0
push 0
push 0
mov dx, word [ebp - 0x1c]
mov ax, word [ebp - 0x1e]
call fcn.00407ed0
push eax
xor edx, edx
mov ax, word [ebp - 0x1a]
call fcn.00407ed0
push eax
lea edx, [ebp - 0x276c]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x276c]
push eax
movzx edx, si
mov eax, dword [0x53e520]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x24]
call fcn.00511c4c
jmp case.0x4b6e4c.5196
push 0
push 0
push 0
mov dx, word [ebp - 0x1c]
mov ax, word [ebp - 0x1e]
call fcn.00407ed0
push eax
movzx eax, word [ebp - 0x1a]
push eax
lea edx, [ebp - 0x2770]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x2770]
push eax
movzx edx, si
mov eax, dword [0x53e520]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x24]
call fcn.00511c4c
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b2578
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b2590
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b25a0
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bac94
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bb244
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004baea4
jmp case.0x4b6e4c.5196
mov dx, word [ebp - 0x1a]
mov ax, word [ebp - 0x1c]
call fcn.00407ed0
push eax
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bb61c
jmp case.0x4b6e4c.5196
mov dx, word [ebp - 0x1a]
mov ax, word [ebp - 0x1c]
call fcn.00407ed0
push eax
movzx edx, word [ebp - 0x1e]
mov ecx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bb75c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2774]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x2774]
push eax
mov ax, word [ebp - 0x1c]
push eax
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bb848
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b47ec
jmp case.0x4b6e4c.5196
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bb95c
jmp case.0x4b6e4c.5196
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bbb10
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bbd20
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bbd54
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b25b4
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b2658
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b2688
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b26ec
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b2790
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b27f0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b2858
jmp case.0x4b6e4c.5196
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bbdbc
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b2920
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b29c8
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b2a0c
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b2adc
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b2b38
jmp case.0x4b6e4c.5196
movzx eax, word [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x24]
push eax
movzx ecx, word [ebp - 0x1e]
movzx edx, word [ebp - 0x1a]
mov eax, ebx
call fcn.004bcda4
jmp case.0x4b6e4c.5196
movzx eax, word [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x24]
push eax
movzx ecx, word [ebp - 0x1a]
movzx edx, word [ebp - 0x1e]
mov eax, ebx
call fcn.004bcda4
jmp case.0x4b6e4c.5196
movzx eax, word [ebp - 0x1e]
push eax
movzx eax, word [ebp - 0x1c]
push eax
movzx edx, word [ebp - 0x1a]
mov ecx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004c0340
jmp case.0x4b6e4c.5196
movzx eax, word [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bbfd8
jmp case.0x4b6e4c.5196
mov eax, dword [0x53ed08]
inc dword [eax]
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bc188
jmp case.0x4b6e4c.5196
movzx edx, word [ebp - 0x1e]
mov eax, ebx
call fcn.004b2c74
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b2c98
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b2cb0
jmp case.0x4b6e4c.5196
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x53ee2c]
mov dword [edx], eax
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b2dd4
jmp case.0x4b6e4c.5196
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x53ee2c]
mov dword [edx], eax
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b2f44
jmp case.0x4b6e4c.5196
mov eax, dword [0x53eeec]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2778]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov edx, dword [ebp - 0x2778]
mov eax, ebx
call fcn.004bc288
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bc328
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bc74c
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b301c
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b3064
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b30b8
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b3134
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b318c
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b31b8
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b31d8
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bcb3c
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bcb9c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b3254
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b328c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b32c4
jmp case.0x4b6e4c.5196
mov eax, dword [0x53f218]
mov eax, dword [eax]
call fcn.004e42ec
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bbd88
jmp case.0x4b6e4c.5196
movzx edx, word [ebp - 0x1e]
mov eax, ebx
call fcn.004bcbfc
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b32d8
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x277c]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov edx, dword [ebp - 0x277c]
mov eax, ebx
call fcn.004bcc88
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bcd18
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004adea0
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b3358
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004adea0
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b34b8
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b35a0
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b3748
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b3838
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b38e8
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b3930
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b3a3c
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b3ac4
jmp case.0x4b6e4c.5196
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x53f218]
mov edx, dword [edx]
mov dword [edx + 0xe00], eax
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b3b3c
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bd374
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004bd3b0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b9f6c
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bbcec
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004ba3d4
jmp case.0x4b6e4c.5196
movzx ecx, word [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b3cec
jmp case.0x4b6e4c.5196
mov eax, dword [0x53f218]
mov eax, dword [eax]
mov cx, word [0x4b82b4]
mov edx, 0x4b82e4
call fcn.004d5cf0
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b3eac
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b4000
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b400c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b43fc
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b4458
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b4524
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b4730
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b4750
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b4760
jmp case.0x4b6e4c.5196
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b4788
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004bbcb8
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b40fc
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b4180
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b41a8
jmp case.0x4b6e4c.5196
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b4260
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b4d34
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b4e4c
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b4e80
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b4ed8
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b4f04
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b4f24
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b505c
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b50bc
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b4fbc
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b4ff4
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b5048
jmp case.0x4b6e4c.5196
mov eax, dword [0x53f218]
mov eax, dword [eax]
call fcn.004f27b0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b511c
jmp case.0x4b6e4c.5196
mov eax, dword [0x53eb20]
cmp dword [eax + 0xc8], 0
je case.0x4b6e4c.5196
lea edx, [ebp - 0x2780]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x2780]
call fcn.0040520c
push eax
mov eax, dword [0x53eb20]
mov eax, dword [eax + 0xc8]
call eax
jmp case.0x4b6e4c.5196
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b5214
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b5308
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b5320
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b53cc
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004b5434
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b54ec
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b54fc
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b5d7c
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b5e44
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004b5e38
jmp case.0x4b6e4c.5196
mov ax, word [ebp - 0x1c]
sub ax, 1
jb 0x4b8013
je 0x4b804e
dec ax
je 0x4b8073
dec ax
je 0x4b8098
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2884]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov edx, dword [ebp - 0x2884]
lea eax, [ebp - 0x2880]
mov ecx, 0xff
call fcn.00404fe8
lea edx, [ebp - 0x2880]
mov eax, dword [0x53ebe8]
mov cl, 0x15
call fcn.004034ec
jmp case.0x4b6e4c.5196
mov eax, dword [0x53ebe8]
mov byte [eax], 0
mov eax, dword [0x53f218]
mov eax, dword [eax]
mov cx, word [0x4b82b4]
mov edx, 0x4b82fc
call fcn.004d5cf0
jmp case.0x4b6e4c.5196
mov eax, dword [0x53ebe8]
mov byte [eax], 0
mov eax, dword [0x53f218]
mov eax, dword [eax]
mov cx, word [0x4b82b4]
mov edx, 0x4b831c
call fcn.004d5cf0
jmp case.0x4b6e4c.5196
mov eax, dword [0x53ebe8]
mov byte [eax], 0
mov eax, dword [0x53f218]
mov eax, dword [eax]
mov cx, word [0x4b82b4]
mov edx, 0x4b833c
call fcn.004d5cf0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b5c58
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2888]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x2888]
push eax
movzx ecx, word [ebp - 0x1c]
movzx edx, word [ebp - 0x1e]
mov eax, ebx
call fcn.004b565c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x288c]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x288c]
push eax
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b5898
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2890]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x2890]
push eax
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b59a0
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2894]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x2894]
push eax
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b5a78
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x2898]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov eax, dword [ebp - 0x2898]
push eax
movzx ecx, word [ebp - 0x1e]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004b5b80
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x289c]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov edx, dword [ebp - 0x289c]
mov eax, ebx
call fcn.004b5eac
jmp case.0x4b6e4c.5196
movzx edx, word [ebp - 0x1e]
mov eax, ebx
call fcn.004c00f8
jmp case.0x4b6e4c.5196
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.004c0248
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004c0330
jmp case.0x4b6e4c.5196
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x53e69c]
mov dword [edx], eax
mov eax, dword [0x53ef00]
mov byte [eax], 0
mov eax, dword [0x53ea84]
mov byte [eax], 1
mov eax, ebx
call fcn.004a53bc
jmp case.0x4b6e4c.5196
mov eax, ebx
call fcn.004a5348
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b5ef4
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x28a0]
mov eax, dword [ebp - 0x14]
call fcn.0048a8cc
mov ecx, dword [ebp - 0x28a0]
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b5f2c
jmp case.0x4b6e4c.5196
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004b6088
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b8289
lea eax, [ebp - 0x28a0]
mov edx, 8
call fcn.00404d60
lea eax, [ebp - 0x2780]
mov edx, 0x11
call fcn.00404d60
lea eax, [ebp - 0x2738]
call fcn.00404d3c
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.00404d60
ret