Function at 0x4d7860
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x14
push 0
push 0
dec ecx
jne 0x4d7868
push ebx
push esi
mov dword [ebp - 4], edx
mov esi, eax
mov eax, dword [ebp - 4]
call fcn.004059d4
xor eax, eax
push ebp
push 0x4d9b0d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
cmp byte [eax], 0x2b
jne 0x4d7912
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4d78a0
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 8]
push eax
mov ecx, ebx
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.00405a4c
push 0
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 0x30], 0x2f
lea ecx, [ebp - 0x30]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.00479ab4
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 8]
call fcn.004055dc
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.004d2704
mov eax, dword [0x567764]
cmp byte [eax + 4], 0
je case.0x4d8568.5211
cmp dword [ebp - 8], 0
je case.0x4d8568.5211
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0040c70c
mov edx, eax
mov eax, esi
call fcn.004de788
jmp case.0x4d8568.5211
mov ebx, dword [ebp - 4]
mov eax, ebx
test eax, eax
je 0x4d7920
sub eax, 4
mov eax, dword [eax]
cmp eax, 0x10
jge 0x4d7982
mov eax, dword [ebp - 4]
cmp byte [eax], 0x3d
jne case.0x4d8568.5211
test ebx, ebx
je 0x4d793a
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 8]
push eax
mov ecx, ebx
dec ecx
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.00405a4c
mov eax, dword [ebp - 8]
mov edx, 0x4d9b24
call fcn.0040597c
jne case.0x4d8568.5211
mov eax, dword [0x5673b0]
cmp dword [eax], 0
je case.0x4d8568.5211
mov eax, dword [0x5673b0]
mov eax, dword [eax]
mov byte [eax + 0x180], 1
jmp case.0x4d8568.5211
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x10
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405a4c
test ebx, ebx
je 0x4d79a1
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x14]
push eax
mov ecx, ebx
sub ecx, 0x10
mov edx, 0x11
mov eax, dword [ebp - 4]
call fcn.00405a4c
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x10]
call fcn.0049ee0c
mov eax, dword [0x5673b0]
cmp dword [eax], 0
jne 0x4d7c9d
movzx eax, word [ebp - 0x24]
cmp eax, 0x211
jg 0x4d7a73
je 0x4d7b85
cmp eax, 0x209
jg 0x4d7a42
je 0x4d7be5
cmp eax, 0x1f9
jg 0x4d7a22
je 0x4d7b31
add eax, 0xffffffce
sub eax, 2
jb 0x4d7c9d
sub eax, 0x1c3
je 0x4d7b43
dec eax
je 0x4d7b22
jmp case.0x4d8568.5211
sub eax, 0x1fa
je 0x4d7c03
dec eax
je 0x4d7c12
sub eax, 0xd
je 0x4d7bc1
jmp case.0x4d8568.5211
add eax, 0xfffffdf6
cmp eax, 6
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d7a57]
cmp eax, 0x219
jg 0x4d7ab1
je 0x4d7b9a
add eax, 0xfffffdee
cmp eax, 6
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d7a95]
cmp eax, 0x7d7
jg 0x4d7ade
je 0x4d7b10
sub eax, 0x21a
je 0x4d7c7e
sub eax, 0x78
je 0x4d7c9d
sub eax, 0x90
je 0x4d7c9d
jmp case.0x4d8568.5211
sub eax, 0x4e22
je 0x4d7afe
dec eax
jne case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dbb1c
jmp 0x4d7c9d
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dd3cc
jmp 0x4d7c9d
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d2b08
jmp 0x4d7c9d
mov eax, dword [0x4e3364]
call fcn.004e33c8
jmp 0x4d7c9d
mov edx, dword [ebp - 0x28]
mov eax, dword [0x4e3364]
call fcn.004e348c
jmp 0x4d7c9d
mov edx, dword [ebp - 0x28]
mov eax, dword [0x4e3364]
call fcn.004e3674
jmp 0x4d7c9d
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4e3364]
call fcn.004e3a54
jmp 0x4d7c9d
mov eax, dword [0x4e3364]
call fcn.004e3860
jmp 0x4d7c9d
mov eax, dword [0x4e3364]
call fcn.004e3924
jmp 0x4d7c9d
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3364]
call fcn.004e3af0
jmp 0x4d7c9d
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3364]
call fcn.004e3d74
jmp 0x4d7c9d
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4e3364]
call fcn.004e3abc
jmp 0x4d7c9d
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4e2780]
call fcn.004e2b64
jmp 0x4d7c9d
mov edx, dword [ebp - 0x28]
mov eax, dword [0x4e2780]
call fcn.004e2f38
jmp 0x4d7c9d
mov eax, esi
call fcn.004cea7c
jmp 0x4d7c9d
mov edx, dword [ebp - 0x28]
mov eax, dword [0x4e2780]
call fcn.004e2d84
jmp 0x4d7c9d
mov eax, dword [0x4e3364]
call fcn.004e3968
jmp 0x4d7c9d
mov edx, dword [ebp - 0x28]
mov eax, dword [0x4e3364]
call fcn.004e39a0
jmp 0x4d7c9d
mov eax, esi
call fcn.004cea7c
jmp 0x4d7c9d
mov edx, dword [ebp - 0x28]
mov eax, dword [0x4e2780]
call fcn.004e2f98
jmp 0x4d7c9d
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d9b9c
jmp 0x4d7c9d
mov eax, esi
call fcn.004d2b30
jmp 0x4d7c9d
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e2780]
call fcn.004e27e0
jmp 0x4d7c9d
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4e2780]
call fcn.004e2944
jmp 0x4d7c9d
mov edx, dword [ebp - 0x28]
mov eax, dword [0x4e2780]
call fcn.004e28f0
jmp 0x4d7c9d
mov eax, dword [ebp - 0x14]
push eax
cmp dword [ebp - 0x28], 0
sete dl
movzx ecx, word [ebp - 0x22]
mov eax, esi
call fcn.004d6350
jmp 0x4d7c9d
mov eax, esi
call fcn.004d2c18
mov eax, dword [0x5670e0]
cmp byte [eax], 0
je 0x4d7d07
cmp word [ebp - 0x24], 0x27a
jne case.0x4d8568.5211
mov eax, dword [ebp - 0x28]
mov dword [esi + 0x3f8], eax
mov eax, dword [ebp - 0x24]
mov dword [esi + 0x3fc], eax
mov eax, dword [ebp - 0x20]
mov dword [esi + 0x400], eax
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov edx, dword [ebp - 0x34]
lea eax, [esi + 0x404]
call fcn.00405598
mov eax, dword [0x566ac0]
mov byte [eax], 1
mov eax, dword [esi + 0x39c]
mov dl, 1
call fcn.00439640
mov word [ebp - 0x24], 0
jmp case.0x4d8568.5211
movzx ebx, word [ebp - 0x24]
movzx eax, bx
cmp eax, 0x320
jg 0x4d8199
je case.0x4d81e7.806
cmp eax, 0x284
jg 0x4d7f84
je 0x4d9091
cmp eax, 0x3c
jge 0x4d7e18
add eax, 0xfffffffb
cmp eax, 0x32
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d7d4c]
cmp eax, 0x264
jg 0x4d7ef3
je 0x4d8b0e
cmp eax, 0xd2
jg 0x4d7e98
je 0x4d9000
cmp eax, 0xc8
jg 0x4d7e73
je 0x4d8a40
add eax, 0xffffffc4
sub eax, 3
jb case.0x4d7d45.8
add eax, 0xfffffffd
sub eax, 3
jb case.0x4d7d45.8
dec eax
je case.0x4d7d45.8
add eax, 0xffffffe2
sub eax, 6
jb case.0x4d8495.5206
jmp case.0x4d8568.5211
sub eax, 0xc9
je 0x4d8a52
dec eax
je 0x4d8a8b
dec eax
je 0x4d8a67
dec eax
je 0x4d8a79
jmp case.0x4d8568.5211
cmp eax, 0x258
jg 0x4d7ed3
je 0x4d8aaf
sub eax, 0xd3
je 0x4d900f
dec eax
je 0x4d901e
add eax, 0xffffffa8
sub eax, 4
jb case.0x4d7d45.8
sub eax, 0xe0
je 0x4d888d
jmp case.0x4d8568.5211
sub eax, 0x259
je 0x4d8aca
sub eax, 9
je 0x4d8ae7
dec eax
je 0x4d8afc
jmp case.0x4d8568.5211
add eax, 0xfffffd9b
cmp eax, 0x1e
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d7f08]
add eax, 0xfffffd7b
cmp eax, 0x7f
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d7f99]
cmp eax, 0x142f
jg 0x4d8476
je 0x4d8bd0
cmp eax, 0x13d2
jg 0x4d82f9
je 0x4d9605
cmp eax, 0xff6
jg 0x4d826e
je 0x4d9635
cmp eax, 0x44c
jg 0x4d821a
je 0x4d8962
add eax, 0xfffffcdf
cmp eax, 0xa
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d81ee]
cmp eax, 0x4b0
jg 0x4d824c
je 0x4d948b
sub eax, 0x44d
je 0x4d8974
dec eax
je 0x4d8995
dec eax
je 0x4d8983
dec eax
je 0x4d8944
jmp case.0x4d8568.5211
sub eax, 0xbd6
je 0x4d8956
sub eax, 0x41e
je 0x4d9617
dec eax
je 0x4d9626
jmp case.0x4d8568.5211
cmp eax, 0x1000
jg 0x4d82b4
je 0x4d96b0
add eax, 0xfffff009
cmp eax, 8
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d8290]
add eax, 0xffffec3b
cmp eax, 0xb
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d82c9]
add eax, 0xffffec2d
cmp eax, 0x59
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d830e]
cmp eax, 0x1458
jg 0x4d853c
je 0x4d9884
add eax, 0xffffebd0
cmp eax, 0x27
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d849c]
cmp eax, 0x1589
jg 0x4d85f8
je 0x4d9aa6
cmp eax, 0x1465
jg 0x4d859f
je 0x4d99a3
add eax, 0xffffeba7
cmp eax, 0xb
ja case.0x4d8568.5211
jmp dword [eax*4 + 0x4d856f]
cmp eax, 0x146d
jg 0x4d85d4
je 0x4d9a50
add eax, 0xffffeb9a
sub eax, 2
jb 0x4d99c6
dec eax
je 0x4d99e1
dec eax
je 0x4d9a01
dec eax
je 0x4d9a13
jmp case.0x4d8568.5211
sub eax, 0x146e
je 0x4d9a73
add eax, 0xfffffee8
sub eax, 2
jb 0x4d9a82
je 0x4d9a94
jmp case.0x4d8568.5211
cmp eax, 0x4e25
jg 0x4d865d
je 0x4d94d3
cmp eax, 0x232c
jg 0x4d863f
je 0x4d94f4
sub eax, 0x158a
je 0x4d9ab8
dec eax
je 0x4d9aca
sub eax, 0x9b8
je 0x4d949d
sub eax, 0x3e6
je 0x4d94be
jmp case.0x4d8568.5211
sub eax, 0x4e21
je 0x4d94ac
dec eax
je 0x4d86d1
dec eax
je 0x4d9503
jmp case.0x4d8568.5211
cmp eax, 0x4e2a
jg 0x4d8688
je 0x4d9515
sub eax, 0x4e26
je 0x4d9541
dec eax
je 0x4d954d
dec eax
je 0x4d94e2
jmp case.0x4d8568.5211
sub eax, 0x4e2b
je 0x4d9532
sub eax, 0xafe1
je 0x4d919a
dec eax
je 0x4d91ff
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d2b70
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e2780]
call fcn.004e2fe4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dd3cc
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d9d50
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d2c00
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4dac
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d9fec
jmp case.0x4d8568.5211
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004da0c0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d2c08
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e427c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e452c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e4b54
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4a28
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e3f04
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e3f94
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e4d88
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4ae840]
call fcn.004af818
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4b90
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4804
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4714
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4870
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4c48
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e458c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4cf8
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e4d78
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d2c18
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4ec4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4fb8
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d2c90
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d2d58
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e5050
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e495c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e45f4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d2dc0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e3ff4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d2f1c
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d2fe4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d2fec
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3070
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d3074
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3104
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e5498
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e50c4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e5060
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e5088
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e5168
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e5224
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e53ac
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e5488
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004af52c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004ae89c
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004af604
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004af6b4
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004af750
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004aea34
jmp case.0x4d8568.5211
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x28]
call fcn.00559d3c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x28]
mov eax, esi
call fcn.004da66c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e5ba8
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e5af8
jmp case.0x4d8568.5211
movzx ecx, word [ebp - 0x20]
movzx edx, word [ebp - 0x22]
mov eax, dword [0x567a5c]
mov eax, dword [eax]
call fcn.0052ccc8
jmp case.0x4d8568.5211
push 0x28
push 0xffff00
mov eax, dword [0x567128]
mov eax, dword [eax]
mov ecx, 0x1e
mov edx, 0x4d9b30
call fcn.005528fc
jmp case.0x4d8568.5211
movzx ecx, word [ebp - 0x20]
movzx edx, word [ebp - 0x22]
mov eax, dword [0x567a5c]
mov eax, dword [eax]
call fcn.0052cd94
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004da284
jmp case.0x4d8568.5211
mov eax, dword [0x567b0c]
mov eax, dword [eax]
movzx ecx, word [0x4d9b40]
mov edx, 0x4d9b4c
call fcn.004f9450
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d3134
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d31e0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d32f4
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d3210
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d3328
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d33a0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3408
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004af200
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004aeb4c
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004af018
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004af0e4
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004aef60
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004da81c
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004da8f0
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004da8a0
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004aecf8
jmp case.0x4d8568.5211
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3438
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d360c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov ecx, dword [ebp - 0x44]
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3624
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d3798
jmp case.0x4d8568.5211
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov ecx, dword [ebp - 0x48]
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3c28
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d360c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov ecx, dword [ebp - 0x4c]
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d37d8
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d3848
jmp case.0x4d8568.5211
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov ecx, dword [ebp - 0x50]
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3438
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d3df0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3888
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d3904
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d398c
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d39b0
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d3944
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d3968
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004da6cc
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d39d4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3a0c
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d3a4c
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d3a64
jmp case.0x4d8568.5211
movzx eax, word [ebp - 0x20]
movzx edx, word [ebp - 0x1e]
shl edx, 0x10
or eax, edx
push eax
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004db4fc
jmp case.0x4d8568.5211
movzx eax, word [ebp - 0x20]
movzx edx, word [ebp - 0x1e]
shl edx, 0x10
or eax, edx
push eax
movzx edx, word [ebp - 0x22]
mov ecx, dword [ebp - 0x28]
mov eax, esi
call fcn.004db568
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3a84
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3b5c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov eax, dword [ebp - 0x58]
mov edx, dword [ebp - 0x28]
call fcn.00559d3c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x28]
mov eax, esi
call fcn.004da60c
jmp case.0x4d8568.5211
mov eax, dword [0x566c14]
mov byte [eax + 8], 0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3bf4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov ecx, dword [ebp - 0x60]
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3c28
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d3df0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov ecx, dword [ebp - 0x64]
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3e08
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d3f70
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004da9e4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3fb0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d3fe8
jmp case.0x4d8568.5211
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 0x14]
call fcn.004055dc
lea edx, [ebp - 0x1c]
mov ecx, 8
mov eax, dword [ebp - 0x14]
call fcn.0049ef4c
push 0
push 0
push 0
movzx eax, word [ebp - 0x22]
movzx edx, word [ebp - 0x20]
shl edx, 0x10
or eax, edx
push eax
movzx eax, word [ebp - 0x1e]
or eax, 0
push eax
push 0
lea eax, [ebp - 0x1c]
push eax
movzx edx, word [ebp - 0x24]
mov eax, dword [0x566ba4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
call fcn.00534048
jmp case.0x4d8568.5211
push 0
push 0
push 0
movzx eax, word [ebp - 0x22]
movzx edx, word [ebp - 0x20]
shl edx, 0x10
or eax, edx
push eax
movzx eax, word [ebp - 0x1e]
push eax
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov eax, dword [ebp - 0x6c]
push eax
push 0
movzx edx, bx
mov eax, dword [0x566ba4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
call fcn.00534048
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d40e0
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d40f8
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d4108
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dab28
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004db070
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004dacf8
jmp case.0x4d8568.5211
movzx eax, word [ebp - 0x20]
movzx edx, word [ebp - 0x1e]
shl edx, 0x10
or eax, edx
push eax
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004db3f4
jmp case.0x4d8568.5211
movzx eax, word [ebp - 0x20]
movzx edx, word [ebp - 0x1e]
shl edx, 0x10
or eax, edx
push eax
movzx edx, word [ebp - 0x22]
mov ecx, dword [ebp - 0x28]
mov eax, esi
call fcn.004db4b8
jmp case.0x4d8568.5211
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov eax, dword [ebp - 0x70]
push eax
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004db5ac
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d6320
jmp case.0x4d8568.5211
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004db6bc
jmp case.0x4d8568.5211
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004db870
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004dba80
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004dbab4
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d411c
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d41c0
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d41f0
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d4254
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d42f8
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d435c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d43c4
jmp case.0x4d8568.5211
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004dbbdc
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d448c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d4534
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d4574
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d4644
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d46a0
jmp case.0x4d8568.5211
movzx eax, word [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x28]
push eax
movzx ecx, word [ebp - 0x22]
movzx edx, word [ebp - 0x1e]
mov eax, esi
call fcn.004dcc64
jmp case.0x4d8568.5211
movzx eax, word [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x28]
push eax
movzx ecx, word [ebp - 0x1e]
movzx edx, word [ebp - 0x22]
mov eax, esi
call fcn.004dcc64
jmp case.0x4d8568.5211
movzx eax, word [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x14]
push eax
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004dbe04
jmp case.0x4d8568.5211
mov eax, dword [0x567a84]
inc dword [eax]
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dbfc0
jmp case.0x4d8568.5211
movzx edx, word [ebp - 0x22]
mov eax, esi
call fcn.004d47dc
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d4800
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d4818
jmp case.0x4d8568.5211
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x566ad0]
mov dword [edx], eax
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d493c
jmp case.0x4d8568.5211
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x566ad0]
mov dword [edx], eax
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d4aac
jmp case.0x4d8568.5211
mov eax, dword [0x566bb4]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x44]
jmp case.0x4d8568.5211
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov edx, dword [ebp - 0x74]
mov eax, esi
call fcn.004dc0c0
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dc160
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dc598
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d4b84
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d4bcc
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d4c20
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d4c9c
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d4cf4
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d4d20
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d4d40
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dc9ec
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dca54
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d4dc0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d4df4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d4e28
jmp case.0x4d8568.5211
mov eax, dword [0x567b0c]
mov eax, dword [eax]
call fcn.0050a2f0
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004dbae8
jmp case.0x4d8568.5211
movzx edx, word [ebp - 0x22]
mov eax, esi
call fcn.004dcabc
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d4e3c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov edx, dword [ebp - 0x78]
mov eax, esi
call fcn.004dcb48
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dcbd8
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d1ab8
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d4ebc
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d1ab8
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d501c
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d5104
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d52ac
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d539c
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d544c
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d5494
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d55a0
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d5628
jmp case.0x4d8568.5211
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x567b0c]
mov edx, dword [edx]
mov dword [edx + 0xe68], eax
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d56a0
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dd234
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dd270
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4ae840]
call fcn.004af3dc
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004dba4c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004da4d4
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d5840
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004dbb1c
jmp case.0x4d8568.5211
mov eax, dword [0x567b0c]
mov eax, dword [eax]
movzx ecx, word [0x4d9b40]
mov edx, 0x4d9b70
call fcn.004f9450
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d5994
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d5ae8
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d5af4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d5efc
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d5f58
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d6024
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d6264
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d6284
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d6294
jmp case.0x4d8568.5211
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d62bc
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004dba18
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d5be4
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d5c74
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d5c9c
jmp case.0x4d8568.5211
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d5d58
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d6510
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d6628
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d665c
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d66b4
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d66e0
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d6700
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d6834
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d689c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d679c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d67d0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d6820
jmp case.0x4d8568.5211
mov eax, dword [0x567b0c]
mov eax, dword [eax]
call fcn.00518b98
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e5a00
jmp case.0x4d8568.5211
mov eax, dword [0x56783c]
cmp dword [eax + 0x20], 0
je case.0x4d8568.5211
lea edx, [ebp - 0x7c]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov eax, dword [ebp - 0x7c]
call fcn.004059e4
push eax
mov eax, dword [0x56783c]
mov eax, dword [eax + 0x20]
call eax
jmp case.0x4d8568.5211
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d6904
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d6a00
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d6a18
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d6ac4
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.004d6b38
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d6bf4
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d6c04
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d74b4
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d759c
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004d7590
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d739c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov eax, dword [ebp - 0x80]
push eax
movzx ecx, word [ebp - 0x20]
movzx edx, word [ebp - 0x22]
mov eax, esi
call fcn.004d6d64
jmp case.0x4d8568.5211
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov eax, dword [ebp - 0x84]
push eax
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d6f94
jmp case.0x4d8568.5211
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov eax, dword [ebp - 0x88]
push eax
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d70bc
jmp case.0x4d8568.5211
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov eax, dword [ebp - 0x8c]
push eax
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d7198
jmp case.0x4d8568.5211
lea edx, [ebp - 0x90]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov eax, dword [ebp - 0x90]
push eax
movzx ecx, word [ebp - 0x22]
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004d72c0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov edx, dword [ebp - 0x94]
mov eax, esi
call fcn.004d75fc
jmp case.0x4d8568.5211
movzx edx, word [ebp - 0x22]
mov eax, esi
call fcn.004e1440
jmp case.0x4d8568.5211
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.004e1590
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004e1678
jmp case.0x4d8568.5211
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x567370]
mov dword [edx], eax
mov eax, dword [0x566be4]
mov byte [eax], 0
mov eax, dword [0x5677a4]
mov byte [eax], 1
mov eax, esi
call fcn.004c8d3c
jmp case.0x4d8568.5211
mov eax, esi
call fcn.004c8cc8
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d7644
jmp case.0x4d8568.5211
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov ecx, dword [ebp - 0x98]
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d767c
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d77c8
jmp case.0x4d8568.5211
mov eax, dword [0x5672fc]
mov byte [eax], 1
mov eax, dword [0x567b0c]
mov eax, dword [eax]
mov eax, dword [eax + 0xb84]
cmp byte [eax + 0x2f0], 0
je 0x4d995c
mov eax, dword [0x567b0c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x238
call fcn.00448e3c
jmp 0x4d9973
mov eax, dword [0x567b0c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x1db
call fcn.00448e3c
mov eax, dword [0x567b0c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov edx, 0x50
call fcn.00448e70
mov eax, dword [0x567b0c]
mov eax, dword [eax]
mov eax, dword [eax + 0x368]
mov dl, 1
call fcn.0047f9f4
jmp case.0x4d8568.5211
mov eax, dword [0x5672fc]
mov byte [eax], 0
mov eax, dword [0x567354]
add eax, 8
call fcn.0055976c
mov eax, dword [0x567354]
mov byte [eax + 8], 0
jmp case.0x4d8568.5211
mov eax, dword [0x567354]
add eax, 8
call fcn.0055976c
mov eax, dword [0x567354]
mov byte [eax + 8], 0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x9c]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov edx, dword [ebp - 0x9c]
mov eax, esi
call fcn.004e1d44
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004e21f8
jmp case.0x4d8568.5211
mov eax, dword [0x566ba4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x28]
call fcn.00533078
test eax, eax
je case.0x4d8568.5211
movzx edx, word [ebp - 0x22]
mov word [eax + 0x2c8], dx
movzx edx, word [ebp - 0x20]
mov word [eax + 0x2ca], dx
movzx edx, word [ebp - 0x1e]
mov word [eax + 0x2cc], dx
jmp case.0x4d8568.5211
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x14]
call fcn.0049eebc
mov ecx, dword [ebp - 0xa0]
lea edx, [ebp - 0x28]
mov eax, dword [0x4e3ea0]
call fcn.004e5dd0
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, esi
call fcn.004e2018
jmp case.0x4d8568.5211
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x28]
mov eax, dword [0x4b4204]
call fcn.004b4750
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e5830
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e4468
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e5384
jmp case.0x4d8568.5211
lea edx, [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [0x4e3ea0]
call fcn.004e5250
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d9b14
lea eax, [ebp - 0xa0]
mov edx, 0x1c
call fcn.00405568
lea eax, [ebp - 0x2c]
call fcn.00405544
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.00405568
ret