Function at 0x4945a0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x23
push 0
push 0
dec ecx
jne 0x4945a8
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x495718
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x499e4c], 0
jne 0x494634
xor eax, eax
push ebp
push 0x4945f3
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x495728
push 0
call sub.user32.dll_FindWindowA
mov dword [0x499e4c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4945fd
cmp dword [0x499e4c], 0
jne 0x494634
push 0x30
push 0x495738
push 0x495740
mov eax, dword [0x499e38]
call fcn.0044d9fc
push eax
call sub.user32.dll_MessageBoxA_1
mov eax, dword [0x499e38]
xor edx, edx
mov dword [eax + 0x3d0], edx
jmp 0x4956bd
call fcn.0040a498
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x18]
mov eax, 0x495784
call fcn.0040b0e4
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x14]
mov edx, 0x49579c
call fcn.00404450
mov eax, dword [ebp - 0x14]
call fcn.0048e630
lea ecx, [ebp - 0x20]
mov edx, 0x35
mov eax, 0x84
call fcn.00416bac
lea edx, [ebp - 0x20]
lea ecx, [ebp - 4]
mov eax, dword [0x499e4c]
call fcn.0048defc
lea ecx, [ebp - 0x20]
mov edx, 0x3c
mov eax, 0x94
call fcn.00416bac
lea edx, [ebp - 0x20]
lea ecx, [ebp - 8]
mov eax, dword [0x499e4c]
call fcn.0048defc
push dword [ebp - 4]
push 0x4957b0
push dword [ebp - 8]
push 0x4957bc
lea eax, [ebp - 0x24]
mov edx, 4
call fcn.004044c4
mov eax, dword [ebp - 0x24]
call fcn.0048e630
mov eax, dword [ebp - 4]
mov edx, 0x4957d4
call fcn.00404550
je 0x49470a
mov eax, dword [ebp - 8]
mov edx, 0x4957e4
call fcn.00404550
je 0x49470a
mov eax, dword [ebp - 4]
mov edx, 0x4957f4
call fcn.00404550
je 0x49470a
mov eax, dword [ebp - 8]
mov edx, 0x495804
call fcn.00404550
jne 0x49471e
mov eax, 0x495814
call fcn.0048e630
call fcn.00492b18
call fcn.004936f8
mov eax, dword [0x499e58]
mov edx, 0x495828
call fcn.00404550
jne 0x49493d
lea ecx, [ebp - 0x28]
mov edx, 0x52
mov eax, 0x3e
call fcn.0048e184
mov eax, dword [ebp - 0x28]
mov edx, 0x49583c
call fcn.00404550
jne 0x49493d
lea ecx, [ebp - 0x2c]
mov edx, 0x13a
mov eax, 0x10d
call fcn.0048e184
mov eax, dword [ebp - 0x2c]
mov edx, 0x49584c
call fcn.00404550
jne 0x49493d
mov eax, 0x49585c
call fcn.0048e630
call fcn.004928c0
call fcn.004928c0
call fcn.00492b18
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [0x499e54]
cmp eax, 0xfa0
jbe 0x49493d
xor eax, eax
push ebp
push 0x494933
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xffff
mov ecx, 0x22c
mov edx, 0x154
mov eax, 0x131
call fcn.0048e230
cmp eax, 2
jg 0x4947f6
push 0xffff00
mov ecx, 0x22c
mov edx, 0x154
mov eax, 0x131
call fcn.0048e230
cmp eax, 2
jle 0x49482c
lea ecx, [ebp - 0x20]
mov edx, 0x22c
mov eax, 0x161
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, 0x7d0
call fcn.0048de88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4956bd
xor eax, eax
call fcn.00493dc0
mov eax, 0x495874
call fcn.0048e630
lea ecx, [ebp - 0x30]
mov edx, 0x11f
mov eax, 0x203
call fcn.0048e184
mov eax, dword [ebp - 0x30]
push eax
lea ecx, [ebp - 0x34]
mov edx, 0x119
mov eax, 0x172
call fcn.0048e184
mov edx, dword [ebp - 0x34]
pop eax
call fcn.00404550
jne 0x4948a7
lea ecx, [ebp - 0x38]
mov edx, 0x137
mov eax, 0x1fd
call fcn.0048e184
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x3c]
mov edx, 0x119
mov eax, 0x172
call fcn.0048e184
mov edx, dword [ebp - 0x3c]
pop eax
call fcn.00404550
je 0x494929
mov eax, 0x495890
call fcn.0048e630
lea ecx, [ebp - 0x20]
mov edx, 0x11f
mov eax, 0x203
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, 0xc8
call fcn.0048de88
lea ecx, [ebp - 0x20]
mov edx, 0x12e
mov eax, 0x1f7
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
inc dword [0x499e40]
lea edx, [ebp - 0x40]
mov eax, dword [0x499e38]
mov eax, dword [eax + 0x338]
call fcn.004471dc
mov edx, dword [ebp - 0x40]
mov eax, 0x499e8c
call fcn.00404198
call sub.kernel32.dll_GetTickCount_1
mov dword [0x499e54], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49493d
mov eax, dword [0x499e58]
mov edx, 0x495828
call fcn.00404550
jne 0x494d82
lea ecx, [ebp - 0x44]
mov edx, 0x15d
mov eax, 0x6a
call fcn.0048e184
mov eax, dword [ebp - 0x44]
mov edx, 0x4958a4
call fcn.00404550
jne 0x494abc
lea ecx, [ebp - 0x48]
mov edx, 0x68
mov eax, 0x28a
call fcn.0048e184
mov eax, dword [ebp - 0x48]
mov edx, 0x4958b4
call fcn.00404550
jne 0x494abc
lea ecx, [ebp - 0x4c]
mov edx, 0xd0
mov eax, 0x1b3
call fcn.0048e184
mov eax, dword [ebp - 0x4c]
mov edx, 0x4958c4
call fcn.00404550
jne 0x4949e6
lea ecx, [ebp - 0x20]
mov edx, 0x174
mov eax, 0x1f4
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, 0x3e8
call fcn.0048de88
lea ecx, [ebp - 0x50]
mov edx, 0xd0
mov eax, 0x1b3
call fcn.0048e184
mov eax, dword [ebp - 0x50]
mov edx, 0x4958c4
call fcn.00404550
jne 0x494a30
lea ecx, [ebp - 0x20]
mov edx, 0x174
mov eax, 0x1f4
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, 0x3e8
call fcn.0048de88
push 0x4958d4
lea ecx, [ebp - 0x58]
mov edx, 0x199
mov eax, 0x80
call fcn.0048e184
push dword [ebp - 0x58]
lea ecx, [ebp - 0x5c]
mov edx, 0x17e
mov eax, 0xbb
call fcn.0048e184
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x60]
mov edx, 0x178
mov eax, 0xb5
call fcn.0048e184
push dword [ebp - 0x60]
lea eax, [ebp - 0x54]
mov edx, 4
call fcn.004044c4
mov eax, dword [ebp - 0x54]
call fcn.0048e630
lea ecx, [ebp - 0x20]
mov edx, 0x199
mov eax, 0x80
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, 0x4958ec
call fcn.0048e630
mov eax, 0xbb8
call fcn.0048de88
lea ecx, [ebp - 0x64]
mov edx, 0x113
mov eax, 0x47
call fcn.0048e184
mov eax, dword [ebp - 0x64]
mov edx, 0x495914
call fcn.00404550
jne 0x494d82
lea ecx, [ebp - 0x68]
mov edx, 0x6b
mov eax, 0x188
call fcn.0048e184
mov eax, dword [ebp - 0x68]
mov edx, 0x495924
call fcn.00404550
jne 0x494d82
mov eax, 0x495934
call fcn.0048e630
lea ecx, [ebp - 0x6c]
mov edx, 0xd0
mov eax, 0x1b3
call fcn.0048e184
mov eax, dword [ebp - 0x6c]
mov edx, 0x4958c4
call fcn.00404550
jne 0x494b5a
lea ecx, [ebp - 0x20]
mov edx, 0x174
mov eax, 0x1f4
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, 0x3e8
call fcn.0048de88
lea ecx, [ebp - 0x70]
mov edx, 0x8a
mov eax, 0x2e5
call fcn.0048e184
mov eax, dword [ebp - 0x70]
mov edx, 0x495954
call fcn.00404550
jne 0x494b9a
lea ecx, [ebp - 0x20]
mov edx, 0x8a
mov eax, 0x2e5
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
or eax, 0xffffffff
call fcn.00493fbc
lea ecx, [ebp - 0x74]
mov edx, 0x8a
mov eax, 0x2e5
call fcn.0048e184
mov eax, dword [ebp - 0x74]
mov edx, 0x495954
call fcn.00404550
jne 0x494be2
lea ecx, [ebp - 0x20]
mov edx, 0x8a
mov eax, 0x2e5
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
lea ecx, [ebp - 0x78]
mov edx, 0x75
mov eax, 0x1cd
call fcn.0048e184
mov eax, dword [ebp - 0x78]
mov edx, 0x495924
call fcn.00404550
jne 0x494d82
lea ecx, [ebp - 0x20]
mov edx, 0x75
mov eax, 0x1cd
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, 0x495964
call fcn.0048e630
mov ebx, 0x10
lea ecx, [ebp - 0x7c]
mov edx, 0x136
mov eax, 0x147
call fcn.0048e184
mov eax, dword [ebp - 0x7c]
mov edx, 0x495980
call fcn.00404550
jne 0x494c77
lea ecx, [ebp - 0x80]
mov edx, 0x184
mov eax, 0x23e
call fcn.0048e184
mov eax, dword [ebp - 0x80]
mov edx, 0x495990
call fcn.00404550
je 0x494c84
mov eax, 0x3e8
call fcn.0048de88
dec ebx
jne 0x494c35
lea edx, [ebp - 0x10]
mov eax, dword [0x499e38]
mov eax, dword [eax + 0x3c0]
call fcn.004471dc
lea ecx, [ebp - 0x20]
mov edx, 0x14a
mov eax, 0x276
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, 0x258
call fcn.0048de88
mov eax, dword [ebp - 0x10]
mov edx, 0x4959a0
call fcn.00404550
jne 0x494cee
lea ecx, [ebp - 0x20]
mov edx, 0x120
mov eax, 0x32d
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, dword [ebp - 0x10]
mov edx, 0x4959b0
call fcn.00404550
jne 0x494d1c
lea ecx, [ebp - 0x20]
mov edx, 0x141
mov eax, 0x32d
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, dword [ebp - 0x10]
mov edx, 0x4959c0
call fcn.00404550
jne 0x494d4a
lea ecx, [ebp - 0x20]
mov edx, 0x166
mov eax, 0x32d
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, dword [ebp - 0x10]
mov edx, 0x4959d0
call fcn.00404550
jne 0x494d78
lea ecx, [ebp - 0x20]
mov edx, 0x189
mov eax, 0x32d
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, 0x7d0
call fcn.0048de88
mov eax, dword [0x499e58]
mov edx, 0x495828
call fcn.00404550
je 0x494db9
mov eax, dword [0x499e58]
mov edx, 0x4959e0
call fcn.00404550
je 0x494db9
mov eax, dword [0x499e58]
mov edx, 0x4959f4
call fcn.00404550
jne 0x49504f
lea ecx, [ebp - 0x84]
mov edx, 0xa5
mov eax, 0x107
call fcn.0048e184
mov eax, dword [ebp - 0x84]
mov edx, 0x495a08
call fcn.00404550
jne 0x494e0b
lea ecx, [ebp - 0x88]
mov edx, 0x109
mov eax, 0x34b
call fcn.0048e184
mov eax, dword [ebp - 0x88]
mov edx, 0x495a08
call fcn.00404550
je 0x494f4b
lea ecx, [ebp - 0x8c]
mov edx, 0x51
mov eax, 0x13e
call fcn.0048e184
mov eax, dword [ebp - 0x8c]
mov edx, 0x495a18
call fcn.00404550
jne 0x494e5d
lea ecx, [ebp - 0x90]
mov edx, 0x172
mov eax, 0x41
call fcn.0048e184
mov eax, dword [ebp - 0x90]
mov edx, 0x495a28
call fcn.00404550
je 0x494f4b
lea ecx, [ebp - 0x94]
mov edx, 0x70
mov eax, 0x184
call fcn.0048e184
mov eax, dword [ebp - 0x94]
mov edx, 0x495a38
call fcn.00404550
jne 0x494eaf
lea ecx, [ebp - 0x98]
mov edx, 0x80
mov eax, 0xbe
call fcn.0048e184
mov eax, dword [ebp - 0x98]
mov edx, 0x495a48
call fcn.00404550
je 0x494f4b
lea ecx, [ebp - 0x9c]
mov edx, 0x8c
mov eax, 0x46
call fcn.0048e184
mov eax, dword [ebp - 0x9c]
mov edx, 0x495a58
call fcn.00404550
jne 0x494efd
lea ecx, [ebp - 0xa0]
mov edx, 0x87
mov eax, 0x131
call fcn.0048e184
mov eax, dword [ebp - 0xa0]
mov edx, 0x495a68
call fcn.00404550
je 0x494f4b
lea ecx, [ebp - 0xa4]
mov edx, 0x181
mov eax, 0x36
call fcn.0048e184
mov eax, dword [ebp - 0xa4]
mov edx, 0x495a78
call fcn.00404550
jne 0x494fa1
lea ecx, [ebp - 0xa8]
mov edx, 0x169
mov eax, 0xc0
call fcn.0048e184
mov eax, dword [ebp - 0xa8]
mov edx, 0x495a88
call fcn.00404550
jne 0x494fa1
mov eax, 0x495a98
call fcn.0048e630
mov eax, dword [0x499e58]
mov edx, 0x495828
call fcn.00404550
jne 0x494f6b
call fcn.004918d8
mov eax, dword [0x499e58]
mov edx, 0x4959e0
call fcn.00404550
jne 0x494f86
mov eax, 0x495ab8
call fcn.00491a44
mov eax, dword [0x499e58]
mov edx, 0x4959f4
call fcn.00404550
jne 0x494fa1
mov eax, 0x495acc
call fcn.00491de8
push 0x495ae0
lea ecx, [ebp - 0xb0]
mov edx, 0x1bf
mov eax, 0x1e9
call fcn.0048e184
push dword [ebp - 0xb0]
push 0x495b00
lea ecx, [ebp - 0xb4]
mov edx, 0x193
mov eax, 0x1bd
call fcn.0048e184
push dword [ebp - 0xb4]
lea eax, [ebp - 0xac]
mov edx, 4
call fcn.004044c4
mov eax, dword [ebp - 0xac]
call fcn.0048e630
lea ecx, [ebp - 0xb8]
mov edx, 0x1d1
mov eax, 0x1ae
call fcn.0048e184
mov eax, dword [ebp - 0xb8]
mov edx, 0x4958b4
call fcn.00404550
jne 0x49504f
lea ecx, [ebp - 0xbc]
mov edx, 0x18a
mov eax, 0x1ec
call fcn.0048e184
mov eax, dword [ebp - 0xbc]
mov edx, 0x495b20
call fcn.00404550
jne 0x49504f
call fcn.00492374
lea ecx, [ebp - 0x20]
mov edx, 0x35
mov eax, 0x26
call fcn.00416bac
lea edx, [ebp - 0x20]
lea ecx, [ebp - 4]
mov eax, dword [0x499e4c]
call fcn.0048defc
lea ecx, [ebp - 0x20]
mov edx, 0x1a
mov eax, 0x9f
call fcn.00416bac
lea edx, [ebp - 0x20]
lea ecx, [ebp - 8]
mov eax, dword [0x499e4c]
call fcn.0048defc
lea ecx, [ebp - 0x20]
mov edx, 0x26
mov eax, 0x33c
call fcn.00416bac
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0xc]
mov eax, dword [0x499e4c]
call fcn.0048defc
push dword [ebp - 4]
push 0x4957b0
push dword [ebp - 8]
push 0x4957b0
push dword [ebp - 0xc]
lea eax, [ebp - 0xc0]
mov edx, 5
call fcn.004044c4
mov eax, dword [ebp - 0xc0]
call fcn.0048e630
mov eax, dword [0x499e38]
mov eax, dword [eax + 0x3a4]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je 0x495130
mov eax, dword [0x499e38]
mov eax, dword [eax + 0x3a4]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je 0x495665
mov eax, dword [0x499e38]
mov eax, dword [eax + 0x3a8]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je 0x495665
mov eax, dword [0x499e58]
call fcn.0048e630
mov eax, dword [0x499e38]
mov eax, dword [eax + 0x3bc]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je 0x4954db
lea ecx, [ebp - 0xc4]
mov edx, 0x1ac
mov eax, 0x1ca
call fcn.0048e184
mov eax, dword [ebp - 0xc4]
mov edx, 0x4958c4
call fcn.00404550
jne 0x4954db
lea ecx, [ebp - 0xc8]
mov edx, 0x1ac
mov eax, 0x2a6
call fcn.0048e184
mov eax, dword [ebp - 0xc8]
mov edx, 0x4958c4
call fcn.00404550
jne 0x4954db
lea ecx, [ebp - 0xcc]
mov edx, 0xac
mov eax, 0x12c
call fcn.0048e184
mov eax, dword [ebp - 0xcc]
mov edx, 0x4958c4
call fcn.00404550
jne 0x4954db
lea ecx, [ebp - 0xd0]
mov edx, 0xda
mov eax, 0x18e
call fcn.0048e184
mov eax, dword [ebp - 0xd0]
mov edx, 0x495b30
call fcn.00404550
jne 0x4954db
lea ecx, [ebp - 0xd4]
mov edx, 0xce
mov eax, 0x21e
call fcn.0048e184
mov eax, dword [ebp - 0xd4]
mov edx, 0x495b30
call fcn.00404550
jne 0x4954db
lea ecx, [ebp - 0xd8]
mov edx, 0x172
mov eax, 0x168
call fcn.0048e184
mov eax, dword [ebp - 0xd8]
mov edx, 0x495b30
call fcn.00404550
jne 0x4954db
call sub.kernel32.dll_GetTickCount_1
sub eax, 0x3a98
cmp eax, dword [0x499e84]
jbe 0x4954cf
call sub.kernel32.dll_GetTickCount_1
mov dword [0x499e84], eax
inc dword [0x499e88]
mov eax, 0x495b40
call fcn.00408ec0
test al, al
je 0x49529b
push 1
push 0
push 0x495b4c
call sub.winmm.dll_PlaySoundA
jmp 0x4952ac
push 0x40004
push 0
push 0x495b58
call sub.winmm.dll_PlaySoundA
mov eax, dword [0x499e58]
mov edx, 0x4959e0
call fcn.00404550
je 0x4952d2
mov eax, dword [0x499e58]
mov edx, 0x4959f4
call fcn.00404550
jne 0x4954cf
lea ecx, [ebp - 0x20]
mov edx, 0x11d
mov eax, 0x293
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
mov eax, 0x5dc
call fcn.0048de88
lea ecx, [ebp - 0xdc]
mov edx, 0xda
mov eax, 0x18e
call fcn.0048e184
mov eax, dword [ebp - 0xdc]
mov edx, 0x495b30
call fcn.00404550
jne 0x4953e5
lea ecx, [ebp - 0xe0]
mov edx, 0xce
mov eax, 0x21e
call fcn.0048e184
mov eax, dword [ebp - 0xe0]
mov edx, 0x495b30
call fcn.00404550
jne 0x4953e5
lea ecx, [ebp - 0xe4]
mov edx, 0x172
mov eax, 0x168
call fcn.0048e184
mov eax, dword [ebp - 0xe4]
mov edx, 0x495b30
call fcn.00404550
jne 0x4953e5
lea ecx, [ebp - 0xe8]
mov edx, 0x17a
mov eax, 0x274
call fcn.0048e184
mov eax, dword [ebp - 0xe8]
mov edx, 0x495b30
call fcn.00404550
jne 0x4953e5
lea ecx, [ebp - 0xec]
mov edx, 0x1ac
mov eax, 0x28f
call fcn.0048e184
mov eax, dword [ebp - 0xec]
mov edx, 0x4958c4
call fcn.00404550
jne 0x4953e5
lea ecx, [ebp - 0x20]
mov edx, 0x11d
mov eax, 0x293
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
lea ecx, [ebp - 0xf0]
mov edx, 0xda
mov eax, 0x18e
call fcn.0048e184
mov eax, dword [ebp - 0xf0]
mov edx, 0x495b30
call fcn.00404550
jne 0x4954cf
lea ecx, [ebp - 0xf4]
mov edx, 0xce
mov eax, 0x21e
call fcn.0048e184
mov eax, dword [ebp - 0xf4]
mov edx, 0x495b30
call fcn.00404550
jne 0x4954cf
lea ecx, [ebp - 0xf8]
mov edx, 0x172
mov eax, 0x168
call fcn.0048e184
mov eax, dword [ebp - 0xf8]
mov edx, 0x495b30
call fcn.00404550
jne 0x4954cf
lea ecx, [ebp - 0xfc]
mov edx, 0x17a
mov eax, 0x274
call fcn.0048e184
mov eax, dword [ebp - 0xfc]
mov edx, 0x495b30
call fcn.00404550
jne 0x4954cf
lea ecx, [ebp - 0x100]
mov edx, 0x1ac
mov eax, 0x28f
call fcn.0048e184
mov eax, dword [ebp - 0x100]
mov edx, 0x4958c4
call fcn.00404550
jne 0x4954cf
lea ecx, [ebp - 0x20]
mov edx, 0x11d
mov eax, 0x21a
call fcn.00416bac
lea edx, [ebp - 0x20]
mov eax, dword [0x499e4c]
call fcn.0048e038
cmp dword [0x499e88], 0xd
jmp 0x4956bd
xor eax, eax
mov dword [0x499e88], eax
call fcn.00494358
mov ebx, eax
mov esi, ebx
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [0x499e48]
xor edx, edx
push edx
push eax
imul eax, dword [0x499e44], 0x3c
imul eax, eax, 0x3e8
cdq
cmp edx, dword [esp + 4]
jne 0x495517
cmp eax, dword [esp]
pop edx
pop eax
jae 0x49553a
jmp 0x49551b
pop edx
pop eax
jge 0x49553a
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [0x499e54]
cmp eax, 0x2710
jbe 0x49553a
call sub.kernel32.dll_GetTickCount_1
mov dword [0x499e48], eax
or esi, 0xffffffff
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [0x499e48]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x108]
call fcn.00408964
push dword [ebp - 0x108]
push 0x495b70
cmp esi, 1
sbb eax, eax
inc eax
lea ecx, [ebp - 0x10c]
xor edx, edx
call fcn.00408bb0
push dword [ebp - 0x10c]
push 0x495b84
lea edx, [ebp - 0x110]
mov eax, dword [0x499e40]
call fcn.00408878
push dword [ebp - 0x110]
lea eax, [ebp - 0x104]
mov edx, 5
call fcn.004044c4
mov eax, dword [ebp - 0x104]
call fcn.0048e630
call fcn.004928c0
call fcn.004928c0
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [0x499e54]
cmp eax, 0x2710
ja 0x4955ce
test ebx, ebx
je 0x4955d5
mov eax, esi
call fcn.00493fbc
call fcn.00492b18
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [0x499e54]
cmp eax, 0x1b58
jbe 0x495665
xor eax, eax
push ebp
push 0x49565b
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0049315c
cmp eax, 1
sbb eax, eax
inc eax
cmp al, 1
jne 0x495651
call sub.kernel32.dll_GetTickCount_1
sub eax, dword [0x499e54]
cmp eax, 0x2710
jbe 0x495647
inc dword [0x499e40]
lea edx, [ebp - 0x114]
mov eax, dword [0x499e38]
mov eax, dword [eax + 0x338]
call fcn.004471dc
mov edx, dword [ebp - 0x114]
mov eax, 0x499e8c
call fcn.00404198
call sub.kernel32.dll_GetTickCount_1
mov dword [0x499e54], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495665
lea ecx, [ebp - 0x118]
mov edx, 0x4e
mov eax, 0x88
call fcn.0048e184
mov eax, dword [ebp - 0x118]
mov edx, 0x495b9c
call fcn.00404550
jne 0x4956bd
lea ecx, [ebp - 0x11c]
mov edx, 0x50
mov eax, 0x36d
call fcn.0048e184
mov eax, dword [ebp - 0x11c]
mov edx, 0x495b9c
call fcn.00404550
jne 0x4956bd
call fcn.00492b18
call fcn.004928c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49571f
lea eax, [ebp - 0x11c]
mov edx, 2
call fcn.00404168
lea eax, [ebp - 0x114]
call fcn.00404144
lea eax, [ebp - 0x110]
mov edx, 0x34
call fcn.00404168
lea eax, [ebp - 0x40]
call fcn.00404144
lea eax, [ebp - 0x3c]
mov edx, 7
call fcn.00404168
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.00404168
ret