Function at 0x765644
Capabilities:
Check for time delay via gettickcount
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x432
push 0
push 0
dec ecx
jne 0x76564c
push ecx
push ebx
push esi
push edi
mov ebx, edx
mov esi, eax
xor eax, eax
push ebp
push 0x766de2
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebx + 2]
movzx eax, byte [eax]
cmp eax, 0x2e
jg 0x765739
je 0x7667ee
add eax, 0xfffffffc
cmp eax, 0x29
ja case.0x7657e2.83
jmp dword [eax*4 + 0x765691]
cmp eax, 0x50
jg 0x7657cb
je case.0x765754.65
add eax, 0xffffffd1
cmp eax, 0x1b
ja case.0x7657e2.83
jmp dword [eax*4 + 0x76575b]
cmp eax, 0x60
jg 0x765811
je 0x766124
add eax, 0xffffffae
cmp eax, 9
ja case.0x7657e2.83
jmp dword [eax*4 + 0x7657e9]
cmp eax, 0xce
jg 0x76582d
je 0x766ca8
sub eax, 0xbc
je 0x765883
dec eax
je 0x765846
jmp case.0x7657e2.83
sub eax, 0xee
je 0x7658fb
sub eax, 0x11
je 0x766a42
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov edx, dword [eax + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
mov eax, dword [ebp - 0xa0]
mov edx, dword [eax + 5]
mov eax, ebx
call fcn.00770cf8
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov edx, dword [0x824010]
mov edx, dword [edx]
movzx eax, byte [eax + 1]
xchg edx, eax
call fcn.00743010
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x82458c]
mov eax, dword [eax]
call fcn.0074b654
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x8243dc]
mov eax, dword [eax]
call fcn.0074cfe8
jmp case.0x7657e2.83
lea eax, [ebx + 2]
movzx edx, byte [eax + 1]
mov eax, dword [0x8245c0]
mov eax, dword [eax]
call fcn.0074763c
jmp case.0x7657e2.83
lea ecx, [ebx + 2]
xor edx, edx
mov eax, dword [0x82410c]
movzx ebx, word [ecx + edx*2 + 1]
mov word [eax], bx
inc edx
add eax, 2
cmp edx, 8
jne 0x7658e5
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov ebx, eax
mov dword [ebp - 0xa8], 0x10
mov eax, dword [0x824280]
push eax
push 0x10
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebx + 9]
mov edx, 2
mov eax, 2
call fcn.006f5ab0
mov byte [ebp - 0xe6], 0x24
mov eax, dword [ebx + 1]
mov dword [ebp - 0xe5], eax
mov eax, dword [ebx + 5]
mov dword [ebp - 0xe1], eax
mov eax, dword [0x824a08]
mov eax, dword [eax]
mov dword [ebp - 0xdd], eax
lea eax, [ebx + 9]
mov edx, 0x10
call fcn.00729128
mov dword [ebp - 0xd9], eax
lea eax, [ebp - 0xe6]
mov edx, 0x11
call fcn.00729128
mov dword [ebp - 0xd5], eax
mov dword [ebp - 0xa4], 0x10
lea ecx, [ebp - 0xe6]
mov eax, dword [0x824878]
mov eax, dword [eax]
mov edx, 0x15
call fcn.0077e5a8
cmp byte [esi + 0xc], 0
je 0x7659c7
mov byte [ebp - 0x3b], 0x32
mov word [ebp - 0x3a], 0
lea ecx, [ebp - 0x3b]
mov eax, dword [0x824878]
mov eax, dword [eax]
mov edx, 3
call fcn.0077e5a8
call sub.KERNEL32.DLL_GetTickCount
mov dword [esi + 0x18], eax
mov eax, dword [0x824084]
mov eax, dword [eax]
call fcn.00713ce0
mov eax, dword [0x824010]
mov eax, dword [eax]
call fcn.0073ea7c
mov eax, dword [0x82417c]
cmp byte [eax], 0
je case.0x7657e2.83
mov eax, dword [0x823ef0]
mov eax, dword [eax]
call fcn.00786844
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov ebx, eax
lea edx, [ebp - 0x20f4]
lea eax, [ebx + 1]
call fcn.006d0258
mov edx, dword [ebp - 0x20f4]
mov eax, dword [0x823ef0]
mov eax, dword [eax]
call fcn.0078abc8
jmp case.0x7657e2.83
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f05c
lea eax, [ebx + 2]
mov ebx, eax
mov eax, dword [ebx + 0x27]
mov dword [esi + 4], eax
lea edx, [ebp - 0x20f8]
lea eax, [ebx + 0x14]
call fcn.00425ebc
mov edx, dword [ebp - 0x20f8]
lea eax, [esi + 8]
call fcn.0040a8f4
lea eax, [ebp - 0x20fc]
mov edx, dword [esi + 8]
call fcn.0040b6e8
mov ecx, dword [ebp - 0x20fc]
mov eax, dword [0x82454c]
mov eax, dword [eax]
mov edx, 0x766e04
call fcn.00722c8c
lea eax, [ebp - 0x2100]
push eax
movzx eax, word [ebx + 0x2b]
mov dword [ebp - 0x2110], eax
mov byte [ebp - 0x210c], 0
movzx eax, word [ebx + 0x2d]
mov dword [ebp - 0x2108], eax
mov byte [ebp - 0x2104], 0
lea edx, [ebp - 0x2110]
mov ecx, 1
mov eax, 0x766e1c
call fcn.004260bc
mov edx, dword [ebp - 0x2100]
mov eax, dword [0x823ef0]
mov eax, dword [eax]
call fcn.0078a838
lea edx, [ebp - 0x2118]
lea eax, [ebx + 0x6a]
call fcn.00425ebc
mov edx, dword [ebp - 0x2118]
lea eax, [ebp - 0x2114]
call fcn.0040b6e8
mov edx, dword [ebp - 0x2114]
mov eax, dword [0x823ef0]
mov eax, dword [eax]
call fcn.0078aa4c
mov eax, dword [0x824084]
mov eax, dword [eax]
call fcn.00713d68
lea eax, [ebp - 0x211c]
mov edx, dword [esi + 8]
call fcn.0040b6e8
mov edx, dword [ebp - 0x211c]
mov eax, dword [0x824150]
mov eax, dword [eax]
call fcn.0079e258
lea edx, [ebp - 0x2124]
lea eax, [ebx + 0x6a]
call fcn.00425ebc
mov edx, dword [ebp - 0x2124]
lea eax, [ebp - 0x2120]
call fcn.0040b6e8
mov edx, dword [ebp - 0x2120]
mov eax, dword [0x824638]
mov eax, dword [eax]
call fcn.0073bd48
lea edx, [ebp - 0x212c]
lea eax, [ebx + 0x2f]
call fcn.00425ebc
mov edx, dword [ebp - 0x212c]
lea eax, [ebp - 0x2128]
call fcn.0040b6e8
mov edx, dword [ebp - 0x2128]
mov eax, dword [0x8247a0]
mov eax, dword [eax]
call fcn.00702e28
lea edx, [ebp - 0x2134]
lea eax, [ebx + 0x42]
call fcn.00425ebc
mov edx, dword [ebp - 0x2134]
lea eax, [ebp - 0x2130]
call fcn.0040b6e8
mov edx, dword [ebp - 0x2130]
mov eax, dword [0x824a44]
mov eax, dword [eax]
call fcn.00703a10
lea edx, [ebp - 0x213c]
lea eax, [ebx + 0x55]
call fcn.00425ebc
mov edx, dword [ebp - 0x213c]
lea eax, [ebp - 0x2138]
call fcn.0040b6e8
mov edx, dword [ebp - 0x2138]
mov eax, dword [0x823f20]
mov eax, dword [eax]
call fcn.00702e28
movzx eax, word [ebx + 0x2d]
push eax
lea edx, [ebp - 0x2144]
lea eax, [ebx + 1]
call fcn.00425ebc
mov edx, dword [ebp - 0x2144]
lea eax, [ebp - 0x2140]
call fcn.0040b6e8
mov edx, dword [ebp - 0x2140]
movzx ecx, word [ebx + 0x2b]
mov eax, dword [0x824a50]
mov eax, dword [eax]
call fcn.00705584
push 1
movzx ecx, word [ebx + 0x2d]
movzx edx, word [ebx + 0x2b]
mov eax, dword [0x824a50]
mov eax, dword [eax]
call fcn.007051f8
mov eax, dword [0x823ef0]
mov eax, dword [eax]
call fcn.00788918
mov eax, dword [0x823ef0]
mov eax, dword [eax]
mov dl, 1
call fcn.0078acbc
mov eax, dword [0x82488c]
mov eax, dword [eax]
mov byte [eax + 0x18], 0
mov eax, dword [0x8247e4]
mov eax, dword [eax]
call fcn.00779cc4
jmp case.0x7657e2.83
lea esi, [ebx + 2]
lea edx, [ebp - 4]
lea eax, [esi + 5]
call fcn.006d0258
movzx eax, word [esi + 3]
cmp eax, 0x68
ja case.0x765c99.2
movzx eax, byte [eax + 0x765ca0]
jmp dword [eax*4 + 0x765d09]
movzx eax, word [esi + 1]
sub ax, 2
je 0x765d7d
dec ax
je 0x765d9d
jmp case.0x7657e2.83
push 1
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.0040b610
push eax
push 0x766e28
push 0
call sub.shell32.dll_ShellExecuteW
jmp case.0x7657e2.83
mov eax, dword [0x824560]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.007126d8
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x824180]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.00761430
jmp case.0x7657e2.83
movzx edx, word [esi + 1]
mov eax, dword [0x8247ec]
mov eax, dword [eax]
call fcn.00757b30
jmp case.0x7657e2.83
movzx edx, word [esi + 1]
mov eax, dword [0x8247ec]
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
call fcn.00757598
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x824330]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.0075faec
jmp case.0x7657e2.83
mov eax, dword [0x823ef0]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
call fcn.006dd834
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x824b18]
mov eax, dword [eax]
call fcn.0072cd28
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x8248c0]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.0074dcb8
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x82455c]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.00764e70
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x824010]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.00742ea0
jmp case.0x7657e2.83
lea eax, [ebp - 0x2148]
push eax
lea edx, [ebp - 8]
mov cx, 0x2c
mov eax, dword [ebp - 4]
call fcn.006d0114
mov edx, dword [ebp - 0x2148]
lea eax, [ebp - 4]
call fcn.0040a898
or edx, 0xffffffff
mov eax, dword [ebp - 8]
call fcn.00424e6c
mov edx, eax
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
lea eax, [ebp - 0x214c]
push eax
lea edx, [ebp - 8]
mov cx, 0x2c
mov eax, dword [ebp - 4]
call fcn.006d0114
mov edx, dword [ebp - 0x214c]
lea eax, [ebp - 4]
call fcn.0040a898
or edx, 0xffffffff
mov eax, dword [ebp - 8]
call fcn.00424e6c
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x2150]
push eax
lea edx, [ebp - 8]
mov cx, 0x2c
mov eax, dword [ebp - 4]
call fcn.006d0114
mov edx, dword [ebp - 0x2150]
lea eax, [ebp - 4]
call fcn.0040a898
or edx, 0xffffffff
mov eax, dword [ebp - 8]
call fcn.00424e6c
mov dword [ebp - 0x20], eax
mov eax, dword [0x824a08]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x20]
push eax
movzx ecx, byte [ebp - 0x14]
movzx edx, word [esi + 1]
dec edx
mov eax, ebx
call fcn.00770d5c
jmp case.0x7657e2.83
movzx edx, byte [esi + 1]
mov eax, dword [0x824010]
mov eax, dword [eax]
call fcn.00743040
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x8248c4]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.007636ac
jmp case.0x7657e2.83
movzx edx, byte [esi + 1]
mov eax, dword [0x824010]
mov eax, dword [eax]
call fcn.00742f20
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x8247d0]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.0074a9d0
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x82473c]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.00746678
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x823ffc]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.00732d3c
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x82454c]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.00721bf0
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x82425c]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.007436c8
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x8247d4]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.0072a8a8
jmp case.0x7657e2.83
movzx ecx, word [esi + 1]
mov eax, dword [0x824448]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.0074a9d0
jmp case.0x7657e2.83
lea eax, [ebp - 0x2154]
push eax
lea edx, [ebp - 8]
mov cx, 0x3a
mov eax, dword [ebp - 4]
call fcn.006d0114
mov edx, dword [ebp - 0x2154]
lea eax, [ebp - 4]
call fcn.0040a898
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.00424e6c
push eax
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00424e6c
push eax
mov eax, dword [0x824a50]
mov eax, dword [eax]
mov ecx, dword [eax + 0x40]
mov eax, dword [0x824a50]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
mov eax, dword [0x8249ac]
mov eax, dword [eax]
call fcn.0073a778
jmp case.0x7657e2.83
movzx eax, word [esi + 1]
sub ax, 1
jb 0x7660ab
je 0x7660c4
dec ax
je 0x7660dd
jmp case.0x7657e2.83
mov eax, dword [0x82454c]
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
mov edx, 0x766e40
call fcn.00722c8c
jmp case.0x7657e2.83
mov eax, dword [0x82454c]
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
mov edx, 0x766e58
call fcn.00722c8c
jmp case.0x7657e2.83
mov eax, dword [0x82454c]
mov eax, dword [eax]
mov ecx, dword [ebp - 4]
mov edx, 0x766e70
call fcn.00722c8c
jmp case.0x7657e2.83
movzx eax, word [esi + 3]
push eax
push 6
movzx ecx, word [esi + 1]
mov eax, dword [0x824a5c]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.00710ea8
mov eax, dword [0x824010]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.0073ead0
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x82454c]
mov eax, dword [eax]
call fcn.00722300
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x82485c]
mov eax, dword [eax]
call fcn.00729898
mov edx, ebx
mov eax, dword [0x824b28]
mov eax, dword [eax]
call fcn.0074533c
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0x84], eax
mov ebx, dword [ebp - 0x84]
lea edx, [ebp - 0x215c]
lea eax, [ebx + 1]
call fcn.00425ebc
mov edx, dword [ebp - 0x215c]
lea eax, [ebp - 0x2158]
call fcn.0040b6e8
mov edx, dword [ebp - 0x2158]
movzx ecx, word [ebx + 0x14]
mov eax, dword [0x823ef0]
mov eax, dword [eax]
call fcn.0078a908
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x824560]
mov eax, dword [eax]
call fcn.007122ec
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0xac], eax
mov edx, dword [0x823f24]
mov edx, dword [edx]
xchg edx, eax
call fcn.0076ef2c
lea edx, [ebp - 0x2164]
mov eax, dword [ebp - 0xac]
add eax, 5
call fcn.00425ebc
mov edx, dword [ebp - 0x2164]
lea eax, [ebp - 0x2160]
call fcn.0040b6e8
mov edx, dword [ebp - 0x2160]
mov eax, dword [0x824010]
mov eax, dword [eax]
mov cl, 1
call fcn.0073ea08
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov edx, dword [eax + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f498
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0x40], eax
mov eax, dword [0x823f24]
mov eax, dword [eax]
mov edx, dword [ebp - 0x40]
call fcn.0076ed54
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f320
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov esi, eax
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
movzx eax, word [esi + 9]
push eax
movzx ecx, word [esi + 7]
movzx edx, word [esi + 5]
mov eax, ebx
call fcn.0077209c
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov edx, dword [eax + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
mov eax, dword [ebp - 0xb8]
movzx edx, word [eax + 5]
mov eax, ebx
call fcn.00772a80
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0x48], eax
mov esi, dword [ebp - 0x48]
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
movzx eax, word [esi + 9]
push eax
movzx ecx, word [esi + 7]
movzx edx, word [esi + 5]
mov eax, ebx
call fcn.00772a08
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov esi, eax
mov edx, dword [eax + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
movzx eax, word [esi + 9]
push eax
movzx ecx, word [esi + 7]
movzx edx, word [esi + 5]
mov eax, ebx
call fcn.00770dd4
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
mov eax, dword [ebp - 0x4c]
lea edx, [eax + 5]
mov eax, ebx
call fcn.00770de8
jmp case.0x7657e2.83
lea esi, [ebx + 2]
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
mov eax, dword [0x824a08]
mov eax, dword [eax]
push eax
mov eax, dword [esi + 8]
push eax
movzx ecx, byte [esi + 7]
movzx edx, word [esi + 5]
dec edx
mov eax, ebx
call fcn.00770d5c
jmp case.0x7657e2.83
lea edi, [ebx + 2]
lea eax, [ebp - 4]
call fcn.0040a470
cmp byte [edi + 9], 0
jbe 0x76643a
mov ebx, edi
cmp byte [ebx + 8], 3
jne 0x7663e4
mov byte [ebx + 8], 2
cmp byte [ebx + 8], 5
jne 0x7663ee
mov byte [ebx + 8], 4
lea eax, [ebp - 4]
push eax
movzx eax, byte [ebx + 7]
mov dword [ebp - 0x217c], eax
mov byte [ebp - 0x2178], 0
movzx eax, byte [ebx + 8]
mov dword [ebp - 0x2174], eax
mov byte [ebp - 0x2170], 0
movzx eax, byte [ebx + 9]
mov dword [ebp - 0x216c], eax
mov byte [ebp - 0x2168], 0
lea edx, [ebp - 0x217c]
mov ecx, 2
mov eax, 0x766e90
call fcn.004260bc
mov edx, dword [edi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0077294c
movzx edx, word [edi + 5]
mov eax, ebx
call fcn.00772998
mov eax, dword [edi + 1]
cdq
push edx
push eax
mov eax, dword [esi + 4]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x76647c
cmp eax, dword [esp]
pop edx
pop eax
jne 0x7664ab
mov eax, dword [0x824a08]
mov eax, dword [eax]
add eax, 0x1f4
mov dword [0x823b6c], eax
mov eax, dword [0x824a08]
mov eax, dword [eax]
add eax, 0x64
mov edx, dword [0x8247e4]
mov edx, dword [edx]
mov dword [edx + 0x30], eax
jmp case.0x7657e2.83
mov eax, dword [0x824084]
mov eax, dword [eax]
cmp byte [eax + 0x133], 0
je case.0x7657e2.83
call sub.KERNEL32.DLL_GetTickCount
xor edx, edx
push edx
push eax
mov eax, dword [0x824084]
mov eax, dword [eax]
mov eax, dword [eax + 0x238]
cdq
cmp edx, dword [esp + 4]
jne 0x7664e9
cmp eax, dword [esp]
pop edx
pop eax
jae case.0x7657e2.83
jmp 0x7664f1
pop edx
pop eax
jge case.0x7657e2.83
call fcn.00713560
mov ecx, eax
test ecx, ecx
je 0x766540
movzx eax, word [ecx + 0x20]
mov word [ebp - 0xc], ax
movzx eax, word [ecx + 0x24]
mov word [ebp - 0xe], ax
movzx eax, word [ebp - 0xc]
mov edx, dword [0x824a50]
mov edx, dword [edx]
sub eax, dword [edx + 0x3c]
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jge 0x766540
movzx eax, word [ebp - 0xe]
mov edx, dword [0x824a50]
mov edx, dword [edx]
sub eax, dword [edx + 0x40]
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jge 0x766540
mov ebx, ecx
movzx eax, word [ebx + 0x20]
mov word [ebp - 0xc], ax
movzx eax, word [ebx + 0x24]
mov word [ebp - 0xe], ax
lea ecx, [ebp - 0xe]
lea edx, [ebp - 0xc]
movzx eax, word [ebx + 0xac]
call fcn.006fa3b8
movzx eax, word [ebp - 0xc]
mov edx, dword [0x824a50]
mov edx, dword [edx]
sub eax, dword [edx + 0x3c]
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jge case.0x7657e2.83
movzx eax, word [ebp - 0xe]
mov edx, dword [0x824a50]
mov edx, dword [edx]
sub eax, dword [edx + 0x40]
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jge case.0x7657e2.83
mov edx, dword [esi + 4]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ecx, eax
test ecx, ecx
je case.0x7657e2.83
test ecx, ecx
je 0x7665c1
cmp ebx, ecx
je case.0x7657e2.83
mov eax, dword [ebx + 0x1c]
mov edx, dword [0x824a40]
mov dword [edx], eax
mov eax, 0x64
call fcn.00406f6c
cmp eax, 0x14
jge 0x7665f9
mov byte [ebp - 0x3b], 0x13
mov word [ebp - 0x3a], 0x71
lea ecx, [ebp - 0x3b]
mov eax, dword [0x824878]
mov eax, dword [eax]
mov edx, 3
call fcn.0077e5a8
mov eax, dword [0x824a48]
mov byte [eax], 0x15
mov eax, dword [0x824a48]
mov byte [eax + 1], 3
mov eax, dword [ebx + 0x1c]
mov edx, dword [0x824a48]
mov dword [edx + 3], eax
mov eax, dword [ebx + 0x1c]
call fcn.006fa39c
test al, al
jne 0x76662d
mov eax, dword [0x824a48]
mov byte [eax + 2], 1
jmp 0x766636
mov eax, dword [0x824a48]
mov byte [eax + 2], 4
mov eax, dword [0x824a48]
mov word [eax + 7], 0
call sub.KERNEL32.DLL_GetTickCount
mov edx, eax
add edx, 0x3e8
mov eax, dword [0x824084]
mov eax, dword [eax]
call fcn.0071479c
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0x68], eax
mov esi, dword [ebp - 0x68]
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
mov edx, dword [esi + 5]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ecx, eax
test ebx, ebx
je case.0x7657e2.83
test ecx, ecx
je 0x7666a1
mov edi, dword [ecx + 0x20]
mov eax, dword [ecx + 0x24]
mov dword [ebp - 0x1c], eax
jmp 0x7666ac
movzx edi, word [esi + 9]
movzx eax, word [esi + 0xb]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov edx, dword [ebx + 0x24]
mov eax, dword [ebx + 0x20]
mov ecx, edi
call fcn.006fa318
movzx eax, ax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
movzx eax, byte [esi + 0x11]
push eax
mov eax, dword [ebx + 0x20]
push eax
mov eax, dword [ebx + 0x24]
push eax
push edi
mov eax, dword [ebp - 0x1c]
push eax
movzx eax, byte [esi + 0xf]
push eax
mov eax, dword [0x824a08]
mov eax, dword [eax]
push eax
movzx eax, byte [esi + 0x14]
push eax
mov ecx, dword [esi + 5]
mov edx, dword [ebx + 0x1c]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076efec
mov dword [ebp - 0x38], eax
cmp word [esi + 0x15], 0
jbe 0x76671c
movzx eax, word [esi + 0x15]
mov word [ebx + 0xde], ax
movzx eax, byte [esi + 0x17]
mov byte [ebx + 0xe0], al
cmp word [esi + 0x18], 0
jbe case.0x7657e2.83
movzx ecx, byte [esi + 0x1a]
movzx edx, word [esi + 0x18]
mov eax, dword [ebp - 0x38]
call fcn.0077398c
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x78]
lea eax, [ebp - 0xd1]
xor ecx, ecx
mov edx, 0x15
call fcn.00407aac
mov byte [ebp - 0xd1], 0
xor edx, edx
lea eax, [ebp - 0xd0]
cmp byte [ebx + edx + 0x23], 0
jne 0x766774
cmp byte [ebx + edx + 0x37], 0
je 0x766790
movzx ecx, byte [ebx + edx + 0x23]
mov byte [eax], cl
movzx ecx, byte [ebx + edx + 0x37]
mov byte [eax + 0xa], cl
inc byte [ebp - 0xd1]
inc edx
inc eax
cmp edx, 0xa
jne 0x766766
movzx eax, word [ebx + 0x18]
push eax
movzx eax, word [ebx + 0x1a]
push eax
movzx eax, word [ebx + 0x1c]
push eax
movzx eax, word [ebx + 0x1f]
push eax
movzx eax, word [ebx + 0x21]
push eax
movzx eax, byte [ebx + 0x1e]
push eax
lea eax, [ebp - 0xd1]
push eax
lea edx, [ebp - 0x2184]
lea eax, [ebx + 5]
call fcn.00425ebc
mov edx, dword [ebp - 0x2184]
lea eax, [ebp - 0x2180]
call fcn.0040b6e8
mov edx, dword [ebp - 0x2180]
mov ecx, dword [ebx + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076ee18
jmp case.0x7657e2.83
lea esi, [ebx + 2]
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je 0x766814
mov edx, esi
mov eax, ebx
call fcn.00770fec
jmp case.0x7657e2.83
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076fb9c
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x76683b
mov edx, esi
mov eax, dword [ebp - 0x30]
call fcn.00772ae4
jmp case.0x7657e2.83
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076fa40
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je case.0x7657e2.83
mov edx, esi
mov eax, dword [ebp - 0x34]
call fcn.00773e04
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
movzx edx, word [eax + 6]
push edx
movzx edx, word [eax + 8]
push edx
movzx ecx, byte [eax + 5]
mov edx, dword [eax + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.00770970
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f3e4
jmp case.0x7657e2.83
lea esi, [ebx + 2]
movzx eax, byte [esi + 5]
dec al
je 0x7668c8
sub al, 4
je 0x7668f1
jmp case.0x7657e2.83
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
movzx edx, byte [esi + 6]
mov eax, ebx
call fcn.00772acc
jmp case.0x7657e2.83
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076fa40
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je case.0x7657e2.83
movzx ecx, byte [esi + 6]
mov edx, 0x1b
mov eax, dword [ebp - 0x2c]
call fcn.00774224
jmp case.0x7657e2.83
lea esi, [ebx + 2]
lea edx, [ebp - 4]
lea eax, [esi + 6]
call fcn.006d0258
lea eax, [ebp - 0x2188]
push eax
lea edx, [ebp - 8]
mov cx, 0x3a
mov eax, dword [ebp - 4]
call fcn.006d0114
mov edx, dword [ebp - 0x2188]
lea eax, [ebp - 4]
call fcn.0040a898
push dword [ebp - 8]
push 0x766eb4
push dword [ebp - 4]
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040b904
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
jne 0x7669ab
push 0
push 6
mov cx, 0x1c
mov dx, 0x1c
mov ax, 0x1c
call fcn.00710c20
movzx ecx, ax
mov eax, dword [0x824a5c]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.00710ea8
jmp 0x7669f1
test ebx, ebx
je 0x7669f1
mov eax, dword [0x824a5c]
mov eax, dword [eax]
cmp byte [eax + 0x2b], 0
je 0x7669f1
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.007727f0
test al, al
jne 0x7669f1
push 0
push 6
mov cx, 0x1c
mov dx, 0x1c
mov ax, 0x1c
call fcn.00710c20
movzx ecx, ax
mov eax, dword [0x824a5c]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.00710ea8
lea eax, [ebp - 4]
call fcn.0040a470
lea eax, [ebp - 8]
call fcn.0040a470
jmp case.0x7657e2.83
lea esi, [ebx + 2]
mov edx, dword [esi + 1]
mov eax, dword [0x823f24]
mov eax, dword [eax]
call fcn.0076f7dc
mov ebx, eax
test ebx, ebx
je case.0x7657e2.83
lea edx, [ebp - 0x218c]
lea eax, [esi + 6]
call fcn.006d0258
mov edx, dword [ebp - 0x218c]
mov eax, ebx
call fcn.007727f0
jmp case.0x7657e2.83
mov eax, dword [0x824728]
mov byte [eax], 1
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x8245d0]
mov eax, dword [eax]
call fcn.007357c0
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x824a70]
mov eax, dword [eax]
call fcn.0072a1b0
jmp case.0x7657e2.83
mov eax, dword [0x824a70]
mov eax, dword [eax]
xor edx, edx
call fcn.0072a4b8
mov eax, dword [0x8245d0]
mov eax, dword [eax]
call fcn.007357b8
test al, al
je case.0x7657e2.83
mov eax, dword [0x8245d0]
mov eax, dword [eax]
xor edx, edx
call fcn.00735d00
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov ebx, eax
lea edx, [ebp - 4]
lea eax, [ebx + 1]
call fcn.006d0258
mov eax, dword [ebp - 4]
mov edx, 0x766ec8
call fcn.0040b9b4
je case.0x7657e2.83
mov eax, dword [0x823ef0]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.0078a88c
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x8c]
inc eax
call fcn.006d0258
mov ecx, dword [0x824a08]
mov ecx, dword [ecx]
mov eax, dword [0x824a5c]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
call fcn.00711198
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x824244]
mov eax, dword [eax]
call fcn.00736edc
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x82437c]
mov eax, dword [eax]
call fcn.00739900
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x824638]
mov eax, dword [eax]
call fcn.0073b8ac
jmp case.0x7657e2.83
push 0
push 2
call sub.KERNEL32.DLL_GetTickCount
xor edx, edx
push edx
push eax
mov eax, dword [esi + 0x18]
cdq
sub dword [esp], eax
sbb dword [esp + 4], edx
pop eax
pop edx
call fcn.0040c5ac
test edx, edx
jge 0x766b78
neg eax
adc edx, 0
neg edx
mov dword [esi + 0x14], eax
jmp case.0x7657e2.83
lea edx, [ebx + 2]
mov eax, dword [0x8249c0]
mov eax, dword [eax]
call fcn.007448f0
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov dword [ebp - 0x6c], eax
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x6c]
add eax, 3
call fcn.006d0258
cmp byte [0x823b68], 0
je case.0x7657e2.83
cmp dword [ebp - 4], 0
jne 0x766bcc
mov eax, dword [0x8245f0]
mov eax, dword [eax]
call fcn.005dd7ec
jmp case.0x7657e2.83
lea eax, [ebp - 0x2190]
mov ecx, dword [ebp - 4]
mov edx, 0x766edc
call fcn.0040b87c
mov edx, dword [ebp - 0x2190]
mov eax, dword [0x8245f0]
mov eax, dword [eax]
mov cl, 1
call fcn.005dd8f0
mov eax, dword [0x824698]
mov eax, dword [eax]
cmp byte [eax + 0xbd], 0
jne case.0x7657e2.83
mov eax, dword [0x8245f0]
mov eax, dword [eax]
call fcn.005ddaa4
jmp case.0x7657e2.83
lea eax, [ebx + 2]
mov ebx, eax
mov eax, dword [0x824698]
mov eax, dword [eax]
cmp byte [eax + 0xbd], 0
je case.0x7657e2.83
cmp byte [0x823b69], 0
je case.0x7657e2.83
lea edx, [ebp - 0x2194]
lea eax, [ebx + 3]
call fcn.00425ebc
mov edx, dword [ebp - 0x2194]
lea eax, [ebp - 4]
call fcn.0040b6e8
movzx eax, word [ebx + 0x10]
mov word [ebp - 0xc], ax
movzx eax, word [ebx + 0x12]
mov word [ebp - 0xe], ax
mov eax, dword [0x824a50]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
movzx edx, word [ebp - 0xc]
call fcn.005ddc2c
mov dword [ebp - 0x20], eax
mov eax, dword [0x823f84]
mov eax, dword [eax]
push eax
mov eax, dword [0x82459c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 4]
call fcn.005dd3cc
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x8241b0]
mov eax, dword [eax]
call fcn.00749ce8
jmp case.0x7657e2.83
mov edx, ebx
mov eax, dword [0x824588]
mov eax, dword [eax]
call fcn.0074f580
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x766dec
lea eax, [ebp - 0x2194]
call fcn.0040a494
lea eax, [ebp - 0x2190]
mov edx, 3
call fcn.0040a4d0
lea eax, [ebp - 0x2184]
call fcn.0040a494
lea eax, [ebp - 0x2180]
call fcn.0040a470
lea eax, [ebp - 0x2164]
call fcn.0040a494
lea eax, [ebp - 0x2160]
call fcn.0040a470
lea eax, [ebp - 0x215c]
call fcn.0040a494
lea eax, [ebp - 0x2158]
mov edx, 5
call fcn.0040a4d0
lea eax, [ebp - 0x2144]
call fcn.0040a494
lea eax, [ebp - 0x2140]
call fcn.0040a470
lea eax, [ebp - 0x213c]
call fcn.0040a494
lea eax, [ebp - 0x2138]
call fcn.0040a470
lea eax, [ebp - 0x2134]
call fcn.0040a494
lea eax, [ebp - 0x2130]
call fcn.0040a470
lea eax, [ebp - 0x212c]
call fcn.0040a494
lea eax, [ebp - 0x2128]
call fcn.0040a470
lea eax, [ebp - 0x2124]
call fcn.0040a494
lea eax, [ebp - 0x2120]
mov edx, 2
call fcn.0040a4d0
lea eax, [ebp - 0x2118]
call fcn.0040a494
lea eax, [ebp - 0x2114]
call fcn.0040a470
lea eax, [ebp - 0x2100]
mov edx, 2
call fcn.0040a4d0
lea eax, [ebp - 0x20f8]
call fcn.0040a494
lea eax, [ebp - 0x20f4]
call fcn.0040a470
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a4d0
ret