Function at 0x48afb4
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xa9
push 0
push 0
dec ecx
jne 0x48afbc
push ecx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00405498
xor eax, eax
push ebp
push 0x48ece1
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp byte [eax], 0x2b
jne 0x48b262
mov eax, dword [ebp - 8]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x48b005
mov eax, dword [ebp - 0x50]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x50]
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00405510
push 0
lea eax, [ebp - 0x4b8]
push eax
mov byte [ebp - 0x4bc], 0x2f
lea ecx, [ebp - 0x4bc]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.004742a4
mov edx, dword [ebp - 0x4b8]
lea eax, [ebp - 0x1c]
call fcn.004050b0
mov eax, dword [ebp - 0x18]
mov edx, 0x48ecf8
call fcn.00405440
jne 0x48b060
mov eax, dword [0x4e9720]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed04
call fcn.00405440
jne 0x48b077
mov eax, dword [0x4e9644]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed10
call fcn.00405440
jne 0x48b08e
mov eax, dword [0x4e9644]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed20
call fcn.00405440
jne 0x48b0a5
mov eax, dword [0x4e96f8]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed2c
call fcn.00405440
jne 0x48b0bc
mov eax, dword [0x4e96f8]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed3c
call fcn.00405440
jne 0x48b0d3
mov eax, dword [0x4e99b8]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed48
call fcn.00405440
jne 0x48b0ea
mov eax, dword [0x4e99b8]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed58
call fcn.00405440
jne 0x48b101
mov eax, dword [0x4e96ac]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed64
call fcn.00405440
jne 0x48b118
mov eax, dword [0x4e96ac]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed74
call fcn.00405440
jne 0x48b12f
mov eax, dword [0x4e9398]
mov byte [eax], 1
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed80
call fcn.00405440
jne 0x48b146
mov eax, dword [0x4e9398]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed90
call fcn.00405440
jne 0x48b16a
mov eax, dword [0x4e98e0]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e935c]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed58
call fcn.00405440
jne 0x48b18e
mov eax, dword [0x4e96ac]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e960c]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed64
call fcn.00405440
jne 0x48b1a5
mov eax, dword [0x4e96ac]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x48ed9c
call fcn.00405440
jne 0x48b1c9
mov eax, dword [0x4e9858]
mov byte [eax], 1
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e960c]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov edx, 0x48edac
call fcn.00405440
jne 0x48b1e0
mov eax, dword [0x4e9858]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x48edbc
call fcn.00405440
jne 0x48b1f7
mov eax, dword [0x4e98e0]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov edx, 0x48edcc
call fcn.00405440
jne 0x48b217
mov eax, dword [ebp - 4]
mov byte [eax + 0x488], 0
mov eax, dword [0x4e925c]
inc dword [eax]
mov eax, dword [ebp - 0x18]
mov edx, 0x48eddc
call fcn.00405440
jne 0x48b23f
mov eax, dword [ebp - 4]
call fcn.0048a758
mov eax, dword [ebp - 4]
mov byte [eax + 0x488], 0
mov eax, dword [0x4e925c]
inc dword [eax]
cmp dword [ebp - 0x1c], 0
je case.default.0x48b40d
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.00474160
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.0048ad98
jmp case.default.0x48b40d
mov eax, dword [ebp - 8]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x48b279
mov eax, dword [ebp - 0x54]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x10
jge 0x48b2dd
mov eax, dword [ebp - 8]
cmp byte [eax], 0x3d
jne case.default.0x48b40d
mov eax, dword [ebp - 8]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x48b2a2
mov eax, dword [ebp - 0x58]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x58]
dec ecx
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.00405510
mov eax, dword [ebp - 0x1c]
mov edx, 0x48edec
call fcn.00405440
jne case.default.0x48b40d
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov byte [eax + 0x104], 1
jmp case.default.0x48b40d
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405510
mov eax, dword [ebp - 8]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x48b30a
mov eax, dword [ebp - 0x5c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x5c]
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 8]
call fcn.00405510
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 0xc]
call fcn.00473c34
cmp word [ebp - 0x84], 0x35
je 0x48b35a
cmp word [ebp - 0x84], 0x35
je 0x48b35a
cmp byte [0x4e7424], 0
je 0x48b35a
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00495498
mov eax, dword [0x4e96e8]
cmp dword [eax], 0
jne case.0x48b40d.528
movzx eax, word [ebp - 0x84]
cmp eax, 0x20d
jg 0x48b3f2
je 0x48b845
cmp eax, 0x1fb
jg 0x48b3c9
je 0x48b7bf
cmp eax, 0x1f8
jg 0x48b3b2
je 0x48b467
add eax, 0xffffffce
sub eax, 2
jb case.0x48b40d.528
sub eax, 0x1c3
je 0x48b548
jmp case.default.0x48b40d
sub eax, 0x1f9
je 0x48b484
dec eax
je 0x48b7a2
jmp case.default.0x48b40d
add eax, 0xfffffdf8
cmp eax, 4
ja case.default.0x48b40d
jmp dword [eax*4 + 0x48b3de]
cmp eax, 0x213
jg 0x48b428
je 0x48b621
add eax, 0xfffffdf2
cmp eax, 4
ja case.default.0x48b40d
jmp dword [eax*4 + 0x48b414]
cmp eax, 0x292
jg 0x48b44c
je case.0x48b40d.528
sub eax, 0x214
je 0x48b631
dec eax
je 0x48b656
jmp case.default.0x48b40d
sub eax, 0x322
je case.0x48b40d.528
sub eax, 0x130
je 0x48b87a
jmp case.default.0x48b40d
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48edfc
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffe
je 0x48b4e6
sub eax, 2
jne 0x48b503
push 0x48ee94
mov eax, dword [ebp - 4]
push dword [eax + 0x43c]
push 0x48eea4
push 0x48eec8
lea eax, [ebp - 0x4c0]
mov edx, 4
call fcn.004053ac
mov edx, dword [ebp - 0x4c0]
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
call fcn.004a9378
xor edx, edx
mov eax, dword [0x4f1bf8]
call fcn.004c7a34
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48eee8
call fcn.004a9378
jmp case.0x48b40d.528
lea edx, [ebp - 0x4c8]
mov eax, dword [ebp - 0x88]
call fcn.004096c8
mov ecx, dword [ebp - 0x4c8]
lea eax, [ebp - 0x4c4]
mov edx, 0x48ef08
call fcn.00405330
mov edx, dword [ebp - 0x4c4]
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [ebp - 0x88]
add eax, 5
cmp eax, 4
ja case.default.0x48b55a
jmp dword [eax*4 + 0x48b561]
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48ef4c
call fcn.004a9378
jmp 0x48b612
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48ef64
call fcn.004a9378
jmp 0x48b612
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48efa4
call fcn.004a9378
jmp 0x48b612
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48efd8
call fcn.004a9378
jmp 0x48b612
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f01c
call fcn.004a9378
jmp 0x48b612
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f038
call fcn.004a9378
mov eax, dword [0x4f1bf8]
call fcn.004c617c
jmp case.0x48b40d.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049022c
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f060
call fcn.004a9378
mov eax, dword [ebp - 4]
call fcn.004901d8
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f0f8
call fcn.004a9378
mov eax, dword [ebp - 4]
call fcn.004901d8
jmp case.0x48b40d.528
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0048fe00
jmp case.0x48b40d.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0048fb7c
jmp case.0x48b40d.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00490298
jmp case.0x48b40d.528
mov eax, dword [0x4e9900]
mov byte [eax], 0
mov eax, dword [0x4e9a80]
mov byte [eax], 0
mov eax, dword [0x4e97c8]
mov byte [eax], 0
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f110
call fcn.004a9378
mov eax, dword [ebp - 4]
call fcn.0045b544
jmp case.0x48b40d.528
mov eax, dword [ebp - 4]
call fcn.00488484
jmp case.0x48b40d.528
mov eax, dword [ebp - 0x88]
sub eax, 1
jb 0x48b711
dec eax
je 0x48b72e
dec eax
je 0x48b74b
dec eax
je 0x48b768
jmp 0x48b785
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f12c
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f16c
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f1ac
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f1e8
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f220
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f24c
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffe
je 0x48b7ea
dec eax
jne 0x48b807
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f264
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f284
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f29c
call fcn.004a9378
jmp case.0x48b40d.528
mov eax, dword [ebp - 4]
call fcn.00488484
jmp case.0x48b40d.528
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f2c0
call fcn.004a9378
jmp case.0x48b40d.528
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004904d8
jmp case.default.0x48b40d
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f2ec
call fcn.004a9378
mov eax, dword [ebp - 4]
call fcn.004901d8
jmp case.default.0x48b40d
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f304
call fcn.004a9378
jmp case.default.0x48b40d
mov eax, dword [0x4e9558]
cmp byte [eax], 0
je 0x48b912
cmp word [ebp - 0x84], 0x27a
jne case.default.0x48b40d
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x464], edx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0x468], edx
mov edx, dword [ebp - 0x80]
mov dword [eax + 0x46c], edx
lea edx, [ebp - 0x4cc]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov edx, dword [ebp - 0x4cc]
mov eax, dword [ebp - 4]
add eax, 0x470
call fcn.0040506c
mov eax, dword [0x4e91fc]
mov byte [eax], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x39c]
mov dl, 1
call fcn.00431e8c
jmp case.default.0x48b40d
movzx eax, word [ebp - 0x84]
cmp eax, 0x297
jg 0x48bba2
je 0x48df9d
cmp eax, 0x210
jg 0x48ba91
je 0x48cad0
cmp eax, 0x21
jg 0x48b9c9
je 0x48cba6
add eax, 0xfffffffa
cmp eax, 0x1a
ja case.0x48bd67.773
jmp dword [eax*4 + 0x48b95d]
cmp eax, 0x35
jg 0x48ba33
je 0x48ce45
add eax, 0xffffffde
cmp eax, 0x12
ja case.0x48bd67.773
jmp dword [eax*4 + 0x48b9e7]
cmp eax, 0xca
jg 0x48ba6a
je 0x48d3f7
sub eax, 0x36
je 0x48c177
add eax, 0xffffffd2
sub eax, 5
jb 0x48d0e3
sub eax, 0x5f
je 0x48d3c7
dec eax
je 0x48d3d7
jmp case.0x48bd67.773
sub eax, 0xcb
je 0x48d3e7
sub eax, 7
je 0x48d7aa
dec eax
je 0x48d7c4
dec eax
je 0x48d7de
jmp case.0x48bd67.773
add eax, 0xfffffda8
cmp eax, 0x3e
ja case.0x48bd67.773
jmp dword [eax*4 + 0x48baa6]
cmp eax, 0x2f8
jg 0x48bd48
je 0x48e493
add eax, 0xfffffd68
cmp eax, 0x5f
ja case.0x48bd67.773
jmp dword [eax*4 + 0x48bbc8]
cmp eax, 0x44c
jg 0x48be3a
je 0x48cfc6
add eax, 0xfffffd07
cmp eax, 0x32
ja case.0x48bd67.773
jmp dword [eax*4 + 0x48bd6e]
cmp eax, 0x1f41
jg 0x48be9e
je 0x48e86c
cmp eax, 0x452
jg 0x48be79
je 0x48befb
sub eax, 0x44d
je 0x48d017
dec eax
je 0x48d0a3
dec eax
je 0x48d043
dec eax
je 0x48cf48
jmp case.0x48bd67.773
sub eax, 0x138f
je 0x48c12c
dec eax
je 0x48c18d
dec eax
je 0x48cfb9
dec eax
je case.0x48b956.13
jmp case.0x48bd67.773
cmp eax, 0x232c
jg 0x48bed4
je 0x48ea62
sub eax, 0x1f42
je 0x48ea36
dec eax
je 0x48ea26
dec eax
je 0x48eb09
sub eax, 0x3e5
je 0x48ea4c
jmp case.0x48bd67.773
sub eax, 0xfdff
je case.default.0x48e530
dec eax
je case.default.0x48e530
sub eax, 0xc
je 0x48dccc
dec eax
je 0x48ddc3
jmp case.0x48bd67.773
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
mov dword [ebp - 0x38], eax
lea edx, [ebp - 0x3c]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov eax, dword [0x4e9678]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x88]
je case.default.0x48e530
mov eax, dword [0x4e9678]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x38]
je case.default.0x48e530
mov eax, dword [0x4e9678]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3c]
je case.default.0x48e530
cmp dword [ebp - 0x3c], 1
jne case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f304
call fcn.004a9378
push 0xff
mov ecx, 0xffff
mov edx, 0x48f304
mov eax, dword [0x4f1bf0]
call fcn.004e1460
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x390]
call fcn.0046330c
jmp case.default.0x48b40d
mov eax, dword [0x4e9724]
call fcn.00405018
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
mov eax, dword [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x33
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
mov eax, dword [0x4e9220]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e95f8]
xor edx, edx
mov dword [eax], edx
lea edx, [ebp - 0x98]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00473d90
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x32
mov eax, dword [0x4f1c00]
call fcn.004cf760
mov dl, 7
mov eax, dword [0x4f1bf0]
call fcn.004e1158
push 0
push 0
push 0
xor ecx, ecx
mov edx, 0x51
mov eax, dword [ebp - 4]
call fcn.00487e34
cmp byte [ebp - 0x90], 1
jne 0x48c074
mov eax, dword [0x4e9528]
mov byte [eax], 1
jmp 0x48c07c
mov eax, dword [0x4e9528]
mov byte [eax], 0
mov eax, dword [0x4e923c]
mov byte [eax], 0
mov eax, dword [0x4e9358]
cmp word [eax], 0
jbe 0x48c0ad
push 0xffffff
mov ecx, 0x8000
mov edx, 0x48f33c
mov eax, dword [0x4f1bf0]
call fcn.004e1460
jmp case.default.0x48e530
mov eax, dword [0x4e9314]
cmp word [eax], 0
jbe 0x48c0d6
push 0xffffff
mov ecx, 0x8000
mov edx, 0x48f360
mov eax, dword [0x4f1bf0]
call fcn.004e1460
jmp case.default.0x48e530
mov eax, dword [0x4e9854]
cmp word [eax], 0
jbe 0x48c0ff
push 0xffffff
mov ecx, 0x8000
mov edx, 0x48f380
mov eax, dword [0x4f1bf0]
call fcn.004e1460
jmp case.default.0x48e530
mov eax, dword [0x4e98a4]
cmp word [eax], 0
jbe case.default.0x48e530
push 0xffffff
mov ecx, 0x8000
mov edx, 0x48f3a0
mov eax, dword [0x4f1bf0]
call fcn.004e1460
jmp case.default.0x48e530
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00493ea4
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004906b8
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.0048ad98
jmp case.default.0x48e530
mov eax, dword [0x4e9484]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
jmp case.default.0x48e530
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004909c4
jmp case.default.0x48e530
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00490a8c
jmp case.default.0x48e530
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00490b78
jmp case.default.0x48e530
movzx eax, word [ebp - 0x82]
mov edx, dword [0x4e9870]
mov dword [edx], eax
jmp case.default.0x48e530
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x48c1e4
mov eax, dword [ebp - 0x60]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
push 0x40255555
push 0x55555555
call fcn.00474c1c
cmp eax, dword [ebp - 0x60]
jge 0x48c25b
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x48c20f
mov eax, dword [ebp - 0x64]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.00474c1c
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x10]
call fcn.00405510
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.00473cf4
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x4bc], 0x2f
lea ecx, [ebp - 0x4bc]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004742a4
jmp 0x48c263
lea eax, [ebp - 0x1c]
call fcn.00405018
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0xa
mov eax, dword [0x4f1c00]
call fcn.004cf760
cmp dword [ebp - 0x1c], 0
je case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
push 0
lea eax, [ebp - 0x4d0]
push eax
mov byte [ebp - 0x4bc], 0x5c
lea ecx, [ebp - 0x4bc]
mov eax, dword [ebp - 0x48]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.004742a4
mov edx, dword [ebp - 0x4d0]
mov eax, dword [ebp - 0x48]
add eax, 0x30
call fcn.0040506c
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00474160
call fcn.00481520
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x38], eax
jmp case.default.0x48e530
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x48c331
mov eax, dword [ebp - 0x68]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
push 0x40255555
push 0x55555555
call fcn.00474c1c
cmp eax, dword [ebp - 0x68]
jge 0x48c3a8
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x48c35c
mov eax, dword [ebp - 0x6c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.00474c1c
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x10]
call fcn.00405510
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.00473cf4
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x4bc], 0x2f
lea ecx, [ebp - 0x4bc]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004742a4
jmp 0x48c3b0
lea eax, [ebp - 0x1c]
call fcn.00405018
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 9
mov eax, dword [0x4f1c00]
call fcn.004cf760
cmp dword [ebp - 0x1c], 0
je case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
push 0
lea eax, [ebp - 0x4d4]
push eax
mov byte [ebp - 0x4bc], 0x5c
lea ecx, [ebp - 0x4bc]
mov eax, dword [ebp - 0x48]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.004742a4
mov edx, dword [ebp - 0x4d4]
mov eax, dword [ebp - 0x48]
add eax, 0x30
call fcn.0040506c
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00474160
call fcn.00481520
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x38], eax
jmp case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x48e530
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
push 0
push 0
push 0
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x48c4c5
mov eax, dword [ebp - 0x70]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
push 0x40255555
push 0x55555555
call fcn.00474c1c
cmp eax, dword [ebp - 0x70]
jge 0x48c53c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x48c4f0
mov eax, dword [ebp - 0x74]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x14]
push eax
push 0x40255555
push 0x55555555
call fcn.00474c1c
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x10]
call fcn.00405510
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.00473cf4
push 0
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x4bc], 0x2f
lea ecx, [ebp - 0x4bc]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
call fcn.004742a4
jmp 0x48c544
lea eax, [ebp - 0x1c]
call fcn.00405018
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je 0x48c58f
mov ax, word [ebp - 0x80]
push eax
mov ax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
mov cx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ceb10
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004cf760
cmp dword [ebp - 0x1c], 0
je case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
push 0
lea eax, [ebp - 0x4d8]
push eax
mov byte [ebp - 0x4bc], 0x5c
lea ecx, [ebp - 0x4bc]
mov eax, dword [ebp - 0x48]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x1c]
call fcn.004742a4
mov edx, dword [ebp - 0x4d8]
mov eax, dword [ebp - 0x48]
add eax, 0x30
call fcn.0040506c
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.00474160
call fcn.00481520
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x38], eax
jmp case.default.0x48e530
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
jne 0x48c66e
cmp word [ebp - 0x84], 6
je 0x48c66e
cmp word [ebp - 0x84], 7
jne 0x48c6a1
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004cf760
cmp word [ebp - 0x84], 6
jne case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9908]
mov dword [edx], eax
jmp case.default.0x48e530
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x48e530
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
movzx eax, word [ebp - 0x82]
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x180], eax
jmp case.default.0x48e530
mov eax, dword [0x4e9540]
cmp byte [eax + 0x88], 0
je case.default.0x48e530
mov eax, dword [0x4e9540]
mov dx, word [ebp - 0x88]
mov word [eax + 0xc8], dx
jmp case.default.0x48e530
mov eax, dword [ebp - 4]
call fcn.0048a758
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0xa
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, 0xc
mov eax, dword [ebp - 0x48]
call fcn.004d7904
jmp case.default.0x48e530
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, 0xc
mov eax, dword [ebp - 0x48]
call fcn.004d7904
jmp case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x48]
call fcn.004d7904
cmp word [ebp - 0x84], 0xf
jne case.default.0x48e530
cmp dword [ebp - 0x10], 0
je case.default.0x48e530
mov eax, dword [ebp - 0x48]
mov byte [eax + 0x104], 1
jmp case.default.0x48e530
lea edx, [ebp - 0x2c]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x48]
call fcn.004d7904
movzx eax, word [ebp - 0x2c]
mov edx, dword [ebp - 0x48]
mov dword [edx + 0xec], eax
movzx eax, word [ebp - 0x2a]
mov edx, dword [ebp - 0x48]
mov dword [edx + 0xf0], eax
movzx eax, word [ebp - 0x28]
movzx edx, word [ebp - 0x26]
shl edx, 0x10
or eax, edx
mov edx, dword [ebp - 0x48]
mov dword [edx + 0xf4], eax
jmp case.default.0x48e530
lea edx, [ebp - 0x98]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
push 0
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x48]
call fcn.004d7904
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x98]
mov dword [eax + 0xec], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x94]
mov dword [eax + 0xf0], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0xf4], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x8c]
mov dword [eax + 0xfc], edx
jmp case.default.0x48e530
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00474160
push eax
movzx ecx, word [ebp - 0x7e]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00485220
jmp case.default.0x48e530
lea edx, [ebp - 0x44]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.00473d90
movzx eax, word [ebp - 0x7e]
shr eax, 8
and eax, 0xff
push eax
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x44]
push eax
xor ecx, ecx
mov cl, byte [ebp - 0x7e]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004852cc
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00485344
jmp case.default.0x48e530
mov eax, dword [0x4e9900]
mov byte [eax], 0
mov eax, dword [0x4e9a80]
mov byte [eax], 0
mov eax, dword [0x4e97c8]
mov byte [eax], 0
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f3c4
call fcn.004a9378
mov eax, dword [ebp - 4]
call fcn.0045b544
jmp case.default.0x48e530
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x48cb70
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, word [ebp - 0x84]
mov eax, dword [ebp - 0x48]
call fcn.004d7904
mov eax, dword [ebp - 0x48]
mov word [eax + 0x52], 0
jmp case.default.0x48e530
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x20
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x21
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x1b
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x70], edx
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov dl, byte [ebp - 0x82]
mov byte [eax + 0x18], dl
movzx eax, word [ebp - 0x80]
movzx edx, word [ebp - 0x7e]
shl edx, 0x10
or eax, edx
mov edx, dword [0x4e96e8]
mov edx, dword [edx]
mov dword [edx + 0x74], eax
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
lea edx, [eax + 0x3c]
mov ecx, 0x32
mov eax, dword [ebp - 0x10]
call fcn.00473d90
jmp case.default.0x48e530
xor eax, eax
mov al, byte [ebp - 0x82]
mov edx, dword [0x4e91f8]
mov dword [edx], eax
movzx eax, word [ebp - 0x82]
shr eax, 8
and eax, 0xff
mov edx, dword [0x4e95e8]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x80]
mov edx, dword [0x4e9690]
mov dword [edx], eax
movzx eax, word [ebp - 0x80]
shr eax, 8
and eax, 0xff
mov edx, dword [0x4e968c]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x7e]
mov edx, dword [0x4e96f0]
mov dword [edx], eax
movzx eax, word [ebp - 0x7e]
shr eax, 8
and eax, 0xff
mov edx, dword [0x4e96c0]
mov dword [edx], eax
xor eax, eax
mov al, byte [ebp - 0x88]
mov edx, dword [0x4e94d8]
mov dword [edx], eax
jmp case.default.0x48e530
movzx eax, word [ebp - 0x82]
mov edx, dword [0x4e98ec]
mov dword [edx], eax
movzx eax, word [ebp - 0x80]
mov edx, dword [0x4e9814]
mov dword [edx], eax
mov eax, dword [0x4e9814]
cmp dword [eax], 0
jne 0x48cd36
mov eax, dword [0x4e984c]
mov byte [eax], 0
jmp case.default.0x48e530
mov eax, dword [0x4e984c]
mov byte [eax], 1
jmp case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x5a], edx
mov eax, dword [0x4e9228]
cmp byte [eax], 0
je 0x48cdc6
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
cmp eax, 0x7d0
jbe case.default.0x48e530
push 0xff
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x4dc]
call fcn.004097b4
lea eax, [ebp - 0x4dc]
mov edx, 0x48f3fc
call fcn.004052e4
mov edx, dword [ebp - 0x4dc]
mov ecx, 0xffffff
mov eax, dword [0x4f1bf0]
call fcn.004e1460
jmp case.default.0x48e530
push 0xff
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x4e0]
call fcn.004097b4
lea eax, [ebp - 0x4e0]
mov edx, 0x48f3fc
call fcn.004052e4
mov edx, dword [ebp - 0x4e0]
mov ecx, 0xffffff
mov eax, dword [0x4f1bf0]
call fcn.004e1460
jmp case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov dx, word [ebp - 0x82]
mov word [eax + 0x3c], dx
push 0x1e
push 0x28
push 0x8000
xor ecx, ecx
mov edx, 0x48f414
mov eax, dword [0x4f1bf0]
call fcn.004e1388
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x82]
mov word [eax + 0x52], dx
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x80]
mov word [eax + 0x54], dx
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x7e]
mov word [eax + 0x56], dx
jmp case.default.0x48e530
lea edx, [ebp - 0x98]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x48]
jne 0x48cee6
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
cmp dword [eax + 0x38], 0xf9
jne 0x48cefa
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e91d4]
mov dword [edx], eax
jmp 0x48cefa
mov eax, dword [ebp - 0x48]
call fcn.004db68c
test al, al
je 0x48cefa
mov eax, dword [ebp - 0x48]
call fcn.004db6bc
push 0
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
push eax
push 0
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x8c]
mov dx, 0x1f
mov eax, dword [ebp - 0x48]
call fcn.004d7a00
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x82]
mov word [eax + 0x52], dx
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x80]
mov word [eax + 0x56], dx
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
lea edx, [ebp - 0x34]
mov ecx, 8
mov eax, dword [ebp - 0x10]
call fcn.00473d90
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x124], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x128], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x30]
mov dword [eax + 0x12c], edx
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x124]
call fcn.004d666c
jmp case.default.0x48e530
mov eax, dword [ebp - 4]
call fcn.00493e24
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x48]
je 0x48d008
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x82]
mov word [eax + 0x52], dx
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x80]
mov word [eax + 0x56], dx
mov eax, dword [ebp - 0x48]
mov byte [eax + 0x160], 1
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
mov eax, dword [ebp - 0x48]
mov byte [eax + 0x160], 0
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x82]
mov word [eax + 0x52], dx
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x80]
mov word [eax + 0x56], dx
mov eax, dword [ebp - 0x48]
mov byte [eax + 0x161], 1
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x168], 0x7d0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x164], eax
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
mov eax, dword [ebp - 0x48]
mov edx, dword [0x4d68dc]
call fcn.00404378
test al, al
je case.default.0x48e530
mov eax, dword [ebp - 0x48]
call fcn.004dd874
jmp case.default.0x48e530
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
movzx eax, word [ebp - 0x82]
shr eax, 8
call fcn.00481520
push eax
mov al, byte [ebp - 0x82]
call fcn.00481520
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x4f1bf0]
call fcn.004e1460
cmp word [ebp - 0x84], 0x68
jne case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
call fcn.004b8c74
jmp case.default.0x48e530
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
movzx eax, word [ebp - 0x82]
shr eax, 8
call fcn.00481520
push eax
mov al, byte [ebp - 0x82]
call fcn.00481520
mov ecx, eax
mov edx, dword [ebp - 0x20]
mov eax, dword [0x4f1bf0]
call fcn.004e1460
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
call fcn.004db764
jmp case.default.0x48e530
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
push 0
lea eax, [ebp - 0x4e4]
push eax
mov byte [ebp - 0x4bc], 0x5c
lea ecx, [ebp - 0x4bc]
mov eax, dword [ebp - 0x48]
lea edx, [eax + 0x34]
mov eax, dword [ebp - 0x20]
call fcn.004742a4
mov edx, dword [ebp - 0x4e4]
mov eax, dword [ebp - 0x48]
add eax, 0x30
call fcn.0040506c
mov al, byte [ebp - 0x82]
call fcn.00481520
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x38], eax
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je case.default.0x48e530
mov al, byte [ebp - 0x82]
call fcn.00481520
mov edx, dword [ebp - 0x48]
mov dword [edx + 0x38], eax
jmp case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
je case.default.0x48e530
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x1d
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
lea edx, [ebp - 0x98]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00473d90
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ce90c
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x48d2e5
mov ax, word [ebp - 0x80]
push eax
mov ax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
push eax
mov cx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004ceb10
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0x100], edx
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
push eax
push 0
push 0
movzx ecx, word [ebp - 0x82]
mov dx, 0x14
mov eax, dword [ebp - 0x48]
call fcn.004d7904
jmp case.default.0x48e530
movzx eax, word [ebp - 0x82]
push eax
movzx eax, word [ebp - 0x80]
push eax
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov edx, 0x15
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
lea edx, [ebp - 0x24]
mov ecx, 4
mov eax, dword [ebp - 0x10]
call fcn.00473d90
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
movzx eax, word [ebp - 0x82]
push eax
mov ecx, dword [ebp - 0x88]
mov dl, 1
mov eax, dword [0x49fa1c]
call fcn.0049fadc
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov dword [eax + 0xc], edx
movzx eax, word [ebp - 0x24]
mov edx, dword [ebp - 0x4c]
mov dword [edx + 0x1c], eax
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x4f1c10]
call fcn.0049fed8
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4f1c10]
call fcn.0049ff5c
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00490c64
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00491270
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00490d1c
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00490de8
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00490ec8
jmp case.default.0x48e530
lea edx, [ebp - 0x4e8]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov eax, dword [ebp - 0x4e8]
mov edx, dword [ebp - 0x88]
call fcn.004d5748
jmp case.default.0x48e530
lea edx, [ebp - 0x4ec]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov edx, dword [ebp - 0x4ec]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00491640
jmp case.default.0x48e530
movzx eax, word [ebp - 0x80]
push eax
movzx eax, word [ebp - 0x7e]
push eax
lea edx, [ebp - 0x4f0]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov eax, dword [ebp - 0x4f0]
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004916b0
jmp case.default.0x48e530
movzx eax, word [ebp - 0x80]
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004917a4
jmp case.default.0x48e530
movzx ecx, word [ebp - 0x80]
movzx edx, word [ebp - 0x82]
mov eax, dword [0x4f1c24]
call fcn.004a0990
jmp case.default.0x48e530
push 0x1e
push 0x28
push 0x8000
xor ecx, ecx
mov edx, 0x48f424
mov eax, dword [0x4f1bf0]
call fcn.004e1388
jmp case.default.0x48e530
movzx ecx, word [ebp - 0x80]
movzx edx, word [ebp - 0x82]
mov eax, dword [0x4f1c24]
call fcn.004a0ab4
jmp case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x20], edx
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.004043e8
mov eax, dword [0x4e92ac]
mov eax, dword [eax]
sub eax, 0xd
jae 0x48d560
mov eax, dword [0x4e92ac]
mov eax, dword [eax]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x4e9540]
mov ecx, dword [0x4e92ac]
lea edi, [edx + eax*4]
lea esi, [ecx + 4]
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x4e92ac]
mov byte [eax + 4], 0
jmp case.default.0x48e530
mov eax, dword [0x4e92ac]
add eax, 4
call fcn.004d5208
mov eax, dword [0x4e92ac]
mov byte [eax + 4], 0
jmp case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x20], edx
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov si, 0xfff5
call fcn.004043e8
mov eax, dword [0x4e92ac]
mov byte [eax + 4], 0
jmp case.default.0x48e530
mov eax, dword [0x4e92ac]
cmp dword [eax], 0
jge 0x48d5f1
mov eax, dword [0x4e92ac]
mov eax, dword [eax]
inc eax
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov edx, eax
shl eax, 4
add eax, edx
mov edx, dword [0x4e9540]
mov ecx, dword [0x4e92ac]
lea edi, [edx + eax*4]
lea esi, [ecx + 4]
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x4e92ac]
mov byte [eax + 4], 0
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00491818
jmp case.default.0x48e530
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov dx, word [ebp - 0x88]
mov word [eax + 0x62], dx
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov dx, word [ebp - 0x82]
mov word [eax + 0x66], dx
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov dx, word [ebp - 0x80]
mov word [eax + 0x6a], dx
jmp case.default.0x48e530
mov eax, 0x6a
call fcn.004c4298
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov eax, dword [eax + 0x70]
cmp eax, dword [ebp - 0x88]
jge 0x48d6c3
push 0x1e
push 0x28
push 0x8000
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
push dword [eax + 0x70]
mov eax, dword [ebp - 0x88]
pop edx
sub eax, edx
lea edx, [ebp - 0x4f8]
call fcn.004096c8
push dword [ebp - 0x4f8]
push 0x48f43c
mov eax, dword [0x4e939c]
push dword [eax]
push 0x48f448
lea eax, [ebp - 0x4f4]
mov edx, 4
call fcn.004053ac
mov edx, dword [ebp - 0x4f4]
xor ecx, ecx
mov eax, dword [0x4f1bf0]
call fcn.004e1388
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x70], edx
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
mov edx, dword [0x4e96e8]
mov edx, dword [edx]
mov dword [edx + 0x74], eax
jmp case.default.0x48e530
push 0
push 0
push 0
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
push eax
movzx eax, word [ebp - 0x7e]
or eax, 0
push eax
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
push 0
push 0
push 0
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
push eax
movzx eax, word [ebp - 0x7e]
push eax
push 0
movzx edx, word [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [0x4f1c00]
call fcn.004cf760
jmp case.default.0x48e530
mov eax, dword [0x4f1c00]
call fcn.004ca5a0
mov eax, dword [0x4e9558]
mov byte [eax], 1
jmp case.default.0x48e530
mov eax, dword [0x4e9b08]
mov byte [eax], 0
call fcn.004d5480
jmp case.default.0x48e530
mov eax, dword [0x4e9b08]
call fcn.004d5208
mov eax, dword [0x4e9b08]
mov byte [eax], 0
jmp case.default.0x48e530
cmp dword [ebp - 0x10], 0
je case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00491934
jmp case.default.0x48e530
cmp dword [ebp - 0x10], 0
je case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00491a14
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004919a4
jmp case.default.0x48e530
movzx eax, word [ebp - 0x80]
movzx edx, word [ebp - 0x7e]
shl edx, 0x10
or eax, edx
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00491b14
jmp case.default.0x48e530
movzx eax, word [ebp - 0x80]
movzx edx, word [ebp - 0x7e]
shl edx, 0x10
or eax, edx
push eax
movzx edx, word [ebp - 0x82]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00491b8c
jmp case.default.0x48e530
lea edx, [ebp - 0x4fc]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov eax, dword [ebp - 0x4fc]
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00491bf4
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
call fcn.004b2d60
jmp case.default.0x48e530
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00491ce0
jmp case.default.0x48e530
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00491ec8
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004920b4
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004920f4
jmp case.default.0x48e530
mov eax, dword [0x4e9614]
cmp byte [eax], 0
je case.default.0x48e530
cmp dword [ebp - 0x88], 0
jle 0x48d929
lea edx, [ebp - 0x500]
mov eax, dword [ebp - 0x88]
call fcn.004096c8
push dword [ebp - 0x500]
push 0x48f43c
mov eax, dword [0x4e939c]
push dword [eax]
mov eax, dword [0x4e94a4]
mov edx, 3
call fcn.004053ac
jmp case.default.0x48e530
mov ecx, dword [0x4e939c]
mov ecx, dword [ecx]
mov eax, dword [0x4e94a4]
mov edx, 0x48f45c
call fcn.00405330
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x70], edx
mov eax, dword [0x4e9ad4]
mov byte [eax], 0
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
mov eax, dword [0x4e9ad4]
call fcn.004d5208
mov eax, dword [0x4e9ad4]
mov byte [eax], 0
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f46c
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9614]
cmp byte [eax], 0
je case.default.0x48e530
cmp dword [ebp - 0x88], 0
jl 0x48da05
lea edx, [ebp - 0x504]
mov eax, dword [ebp - 0x88]
call fcn.004096c8
push dword [ebp - 0x504]
push 0x48f43c
mov eax, dword [0x4e939c]
push dword [eax]
mov eax, dword [0x4e94a4]
mov edx, 3
call fcn.004053ac
jmp case.default.0x48e530
mov ecx, dword [0x4e939c]
mov ecx, dword [ecx]
mov eax, dword [0x4e94a4]
mov edx, 0x48f45c
call fcn.00405330
jmp case.default.0x48e530
mov eax, dword [0x4e9ad4]
cmp byte [eax], 0
je case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x70], edx
mov eax, dword [0x4e9ad4]
mov dx, word [ebp - 0x82]
mov word [eax + 0x40], dx
mov eax, dword [0x4e9ad4]
mov dx, word [ebp - 0x80]
mov word [eax + 0x42], dx
mov eax, dword [0x4e9ad4]
call fcn.004d5208
mov eax, dword [0x4e9ad4]
mov byte [eax], 0
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
mov eax, dword [0x4e9ad4]
call fcn.004d5208
mov eax, dword [0x4e9ad4]
mov byte [eax], 0
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f484
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
cmp word [ebp - 0x84], 0x2bd
je 0x48db2d
cmp word [ebp - 0x84], 0x2be
jne 0x48db0b
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f4a0
call fcn.004a9378
jmp 0x48db23
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f4d4
call fcn.004a9378
mov eax, dword [0x4e9ad4]
call fcn.004d5208
mov eax, dword [0x4e9ad4]
mov byte [eax], 0
jmp case.default.0x48e530
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004921d0
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
cmp word [ebp - 0x84], 0x2c1
je 0x48dbb3
cmp word [ebp - 0x84], 0x2c3
jne 0x48db96
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f4ec
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f50c
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
call fcn.004b447c
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x70], edx
movzx edx, word [ebp - 0x82]
movzx eax, word [ebp - 0x80]
shl eax, 0x10
or edx, eax
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
call fcn.004b43a8
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
mov eax, dword [ebp - 0x88]
dec eax
je 0x48dc35
dec eax
je 0x48dc52
dec eax
je 0x48dc6f
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f524
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f4ec
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f53c
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
mov eax, dword [0x4e96e8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0x70], edx
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f560
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
mov eax, dword [ebp - 0x88]
dec eax
je 0x48dcf6
dec eax
je 0x48dd13
dec eax
je 0x48dd30
dec eax
je 0x48dd66
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f578
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f598
call fcn.004a9378
jmp case.default.0x48e530
mov edx, dword [0x4e939c]
mov edx, dword [edx]
lea eax, [ebp - 0x508]
mov ecx, 0x48f5ac
call fcn.00405330
mov edx, dword [ebp - 0x508]
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f5bc
call fcn.004a9378
jmp case.default.0x48e530
movzx eax, word [ebp - 0x80]
push eax
movzx ecx, word [ebp - 0x82]
movzx edx, word [ebp - 0x7e]
mov eax, dword [ebp - 4]
call fcn.00493308
jmp case.default.0x48e530
movzx eax, word [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x10]
push eax
movzx ecx, word [ebp - 0x82]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004923e8
jmp case.default.0x48e530
mov eax, dword [0x4e9ab4]
inc dword [eax]
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004925e8
jmp case.default.0x48e530
cmp word [ebp - 0x82], 0
jbe 0x48ddf3
mov eax, dword [0x4e9528]
mov byte [eax], 1
jmp 0x48ddfb
mov eax, dword [0x4e9528]
mov byte [eax], 0
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9210]
mov dword [edx], eax
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9210]
mov dword [edx], eax
mov eax, dword [0x4e9528]
mov byte [eax], 1
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9210]
mov dword [edx], eax
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffc
je 0x48dea3
dec eax
je 0x48de86
dec eax
je 0x48de69
dec eax
jne case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f5dc
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f608
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f628
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f658
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9210]
mov dword [edx], eax
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9210]
mov dword [edx], eax
mov eax, dword [ebp - 0x88]
add eax, 5
cmp eax, 4
ja case.default.0x48e530
jmp dword [eax*4 + 0x48def8]
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f5dc
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f608
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f674
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f658
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f628
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9210]
mov dword [edx], eax
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9210]
mov dword [edx], eax
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffd
je 0x48e00b
dec eax
je 0x48dfee
dec eax
jne case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f68c
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f608
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f6b8
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9288]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.default.0x48e530
lea edx, [ebp - 0x50c]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov edx, dword [ebp - 0x50c]
mov eax, dword [ebp - 4]
call fcn.004926f0
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9580]
mov dword [edx], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049278c
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9580]
mov dword [edx], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00492c98
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9580]
mov dword [edx], eax
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f6d4
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9580]
mov dword [edx], eax
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f6f0
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9580]
mov dword [edx], eax
lea edx, [ebp - 0x510]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov edx, dword [ebp - 0x510]
mov eax, dword [0x4e994c]
call fcn.0040506c
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
call fcn.004b5ccc
jmp case.default.0x48e530
call fcn.004d5878
mov eax, dword [0x4e957c]
cmp byte [eax], 0
je 0x48e145
mov eax, dword [0x4e957c]
call fcn.004d5208
mov eax, dword [0x4e957c]
mov byte [eax], 0
mov eax, dword [0x4e9af8]
cmp dword [eax], 0
jle 0x48e16a
mov eax, dword [0x4e9af8]
mov eax, dword [eax]
mov edx, dword [0x4e96e8]
mov edx, dword [edx]
add dword [edx + 0x70], eax
mov eax, dword [0x4e9af8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
call fcn.004b5dc0
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e98a0]
mov dword [edx], eax
mov eax, dword [0x4e957c]
cmp byte [eax], 0
je case.default.0x48e530
mov eax, dword [0x4e957c]
call fcn.004d5818
mov eax, dword [0x4e957c]
mov byte [eax], 0
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e98a0]
mov dword [edx], eax
mov eax, dword [0x4e957c]
cmp byte [eax], 0
je case.default.0x48e530
mov eax, dword [0x4e957c]
call fcn.004d5208
mov eax, dword [0x4e957c]
mov byte [eax], 0
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e98a0]
mov dword [edx], eax
mov eax, dword [0x4e957c]
cmp byte [eax], 0
je case.default.0x48e530
mov eax, dword [0x4e957c]
mov byte [eax], 0
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e98a0]
mov dword [edx], eax
mov eax, dword [0x4e957c]
cmp byte [eax], 0
je case.default.0x48e530
lea eax, [ebp - 0x514]
mov edx, dword [0x4e957c]
call fcn.0040527c
mov eax, dword [ebp - 0x514]
mov edx, dword [0x4e957c]
mov edx, dword [edx + 0x3c]
call fcn.004d53ac
mov eax, dword [0x4e957c]
call fcn.004d5818
mov eax, dword [0x4e957c]
mov byte [eax], 0
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004930f8
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.0049315c
jmp case.default.0x48e530
mov eax, dword [0x4e9af8]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
mov edx, dword [0x4e96e8]
mov edx, dword [edx]
mov dword [edx + 0x70], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e98a0]
mov dword [edx], eax
jmp case.default.0x48e530
mov eax, dword [0x4e9af8]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
movzx eax, word [ebp - 0x82]
movzx edx, word [ebp - 0x80]
shl edx, 0x10
or eax, edx
mov edx, dword [0x4e96e8]
mov edx, dword [edx]
mov dword [edx + 0x70], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e98a0]
mov dword [edx], eax
jmp case.default.0x48e530
mov eax, dword [0x4e91c4]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov eax, 0x6a
call fcn.004c4298
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
call fcn.004b5dc0
jmp case.default.0x48e530
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.00492134
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9580]
mov dword [edx], eax
movzx edx, word [ebp - 0x82]
mov eax, dword [ebp - 4]
call fcn.004931c0
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9580]
mov dword [edx], eax
push 0xff
mov ecx, 0xffffff
mov edx, 0x48f718
mov eax, dword [0x4f1bf0]
call fcn.004e1460
mov eax, dword [0x4e9200]
mov dword [eax], 0xffffffff
jmp case.default.0x48e530
lea edx, [ebp - 0x518]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov edx, dword [ebp - 0x518]
mov eax, dword [ebp - 4]
call fcn.004931ec
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00493278
jmp case.default.0x48e530
mov eax, dword [ebp - 4]
call fcn.0048a1e8
jmp case.default.0x48e530
mov eax, dword [ebp - 0x88]
cmp eax, 5
ja case.default.0x48e530
jmp dword [eax*4 + 0x48e3dd]
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f72c
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f750
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f77c
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f7a0
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f7c0
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [ebp - 4]
call fcn.0048a1e8
jmp case.default.0x48e530
mov eax, dword [ebp - 0x88]
dec eax
je 0x48e4aa
dec eax
je 0x48e4c7
dec eax
je 0x48e4e4
dec eax
je 0x48e501
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f7e0
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f7f8
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f814
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f838
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [ebp - 0x88]
add eax, 7
cmp eax, 5
ja case.default.0x48e530
jmp dword [eax*4 + 0x48e537]
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f850
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f878
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f8a8
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f850
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f8dc
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f908
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffc
je 0x48e66c
dec eax
je 0x48e64f
dec eax
je 0x48e632
dec eax
jne case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f930
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f948
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f95c
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f984
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffd
je 0x48e6d8
dec eax
je 0x48e6bb
dec eax
jne case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f9a8
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f9bc
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f9e4
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48f9fc
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffd
je 0x48e783
dec eax
je 0x48e766
dec eax
jne 0x48e7a0
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48fa14
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48fa34
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48fa4c
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48fa74
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
cmp dword [ebp - 0x10], 0
je case.default.0x48e530
lea edx, [ebp - 0x51c]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov edx, dword [ebp - 0x51c]
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
call fcn.004a9378
jmp case.default.0x48e530
cmp dword [ebp - 0x10], 0
je case.default.0x48e530
lea edx, [ebp - 0x520]
mov eax, dword [ebp - 0x10]
call fcn.00473cf4
mov edx, dword [ebp - 0x520]
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
call fcn.004a9378
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
jmp case.default.0x48e530
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x97c], eax
jmp case.default.0x48e530
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x48e883
mov eax, dword [ebp - 0x78]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x14]
push eax
push 0x40355555
push 0x55555555
call fcn.00474c1c
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x10]
call fcn.00405510
lea edx, [ebp - 0x98]
mov ecx, 0x10
mov eax, dword [ebp - 0x10]
call fcn.00473d90
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.00473cf4
movzx eax, word [ebp - 0x82]
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x844], eax
xor eax, eax
mov al, byte [ebp - 0x98]
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x84c], eax
movzx eax, word [ebp - 0x98]
shr eax, 8
and eax, 0xff
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x868], eax
mov eax, dword [ebp - 0x98]
shr eax, 0x10
and eax, 0xff
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x884], eax
mov eax, dword [ebp - 0x98]
shr eax, 0x10
movzx eax, ax
shr eax, 8
and eax, 0xff
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x8a0], eax
xor eax, eax
mov al, byte [ebp - 0x94]
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x8bc], eax
movzx eax, word [ebp - 0x94]
shr eax, 8
and eax, 0xff
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x8d8], eax
mov eax, dword [ebp - 0x94]
shr eax, 0x10
and eax, 0xff
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x8f4], eax
mov eax, dword [ebp - 0x94]
shr eax, 0x10
movzx eax, ax
shr eax, 8
and eax, 0xff
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x910], eax
xor eax, eax
mov al, byte [ebp - 0x90]
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x92c], eax
movzx eax, word [ebp - 0x90]
shr eax, 8
and eax, 0xff
mov edx, dword [0x4e9afc]
mov edx, dword [edx]
mov dword [edx + 0x948], eax
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x83c], edx
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48fa88]
xor edx, edx
call fcn.004a9378
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004891e4
jmp case.default.0x48e530
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00493ce0
jmp case.default.0x48e530
lea edx, [ebp - 0x88]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00493d38
jmp case.default.0x48e530
lea edx, [ebp - 0x88]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00491500
jmp case.default.0x48e530
mov eax, dword [ebp - 0x88]
sub eax, 0xfffffffd
je 0x48eacf
dec eax
je 0x48eab2
dec eax
jne 0x48eaec
push 0x48fa94
mov eax, dword [0x4e9874]
push dword [eax]
push 0x48faa8
lea eax, [ebp - 0x524]
mov edx, 3
call fcn.004053ac
mov edx, dword [ebp - 0x524]
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48fabc
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48fadc
call fcn.004a9378
jmp case.default.0x48e530
mov eax, dword [0x4e9afc]
mov eax, dword [eax]
mov cx, word [0x48edf0]
mov edx, 0x48fb04
call fcn.004a9378
jmp case.default.0x48e530
lea edx, [ebp - 0x88]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00492174
jmp case.default.0x48e530
mov eax, dword [0x4e96e8]
cmp dword [eax], 0
je case.default.0x48b40d
lea edx, [ebp - 0x52c]
movzx eax, word [ebp - 0x84]
call fcn.004096c8
mov ecx, dword [ebp - 0x52c]
lea eax, [ebp - 0x528]
mov edx, 0x48fb24
call fcn.00405330
mov edx, dword [ebp - 0x528]
mov eax, dword [0x4f1c00]
mov eax, dword [eax + 0x5a858]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x534]
mov eax, dword [ebp - 0x88]
call fcn.004096c8
mov ecx, dword [ebp - 0x534]
lea eax, [ebp - 0x530]
mov edx, 0x48fb34
call fcn.00405330
mov edx, dword [ebp - 0x530]
mov eax, dword [0x4f1c00]
mov eax, dword [eax + 0x5a858]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x53c]
movzx eax, word [ebp - 0x82]
call fcn.004096c8
mov ecx, dword [ebp - 0x53c]
lea eax, [ebp - 0x538]
mov edx, 0x48fb44
call fcn.00405330
mov edx, dword [ebp - 0x538]
mov eax, dword [0x4f1c00]
mov eax, dword [eax + 0x5a858]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x544]
movzx eax, word [ebp - 0x80]
call fcn.004096c8
mov ecx, dword [ebp - 0x544]
lea eax, [ebp - 0x540]
mov edx, 0x48fb54
call fcn.00405330
mov edx, dword [ebp - 0x540]
mov eax, dword [0x4f1c00]
mov eax, dword [eax + 0x5a858]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x54c]
movzx eax, word [ebp - 0x7e]
call fcn.004096c8
mov ecx, dword [ebp - 0x54c]
lea eax, [ebp - 0x548]
mov edx, 0x48fb64
call fcn.00405330
mov edx, dword [ebp - 0x548]
mov eax, dword [0x4f1c00]
mov eax, dword [eax + 0x5a858]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 8]
mov eax, 0x48fb78
call fcn.004055f4
test eax, eax
jle case.default.0x48b40d
push 0x1e
push 0x28
push 0x8000
xor ecx, ecx
mov edx, dword [ebp - 8]
mov eax, dword [0x4f1bf0]
call fcn.004e1388
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48ece8
lea eax, [ebp - 0x54c]
mov edx, 0x24
call fcn.0040503c
lea eax, [ebp - 0x4b8]
call fcn.00405018
lea eax, [ebp - 0x7c]
call fcn.00405018
lea eax, [ebp - 0x20]
mov edx, 7
call fcn.0040503c
ret