Function at 0x4d5660
Capabilities:
Check for software breakpoints
Check http status code
Create thread
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x456
push 0
push 0
dec ecx
jne 0x4d5669
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov esi, ecx
mov ebx, edx
mov dword [ebp - 0x198], eax
mov ecx, 0x65
lea eax, [ebp - 0x194]
mov edx, dword [0x4010e4]
call fcn.004064c8
xor eax, eax
push ebp
push 0x4d6582
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004d9cdc
cmp byte [eax + 0x373], 0
je 0x4d572e
push 0x4d6598
call sub.kernel32.dll_GetCurrentThreadId_1
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x2210]
call fcn.0040c3a4
push dword [ebp - 0x2210]
push 0x4d65c4
lea eax, [ebp - 0x220c]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x220c]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
push 0x4d65dc
push ebx
push 0x4d65f8
lea eax, [ebp - 0x2214]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x2214]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
xor eax, eax
mov dword [ebp - 0x1b8], eax
xor edx, edx
push ebp
push 0x4d62e0
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x4d3e34]
call fcn.004d4328
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
je 0x4d5974
lea edx, [ebp - 0x2218]
mov eax, dword [ebp - 0x1b8]
call fcn.004d43cc
mov edx, dword [ebp - 0x2218]
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x198]
call fcn.004d6e60
mov eax, dword [ebp - 0x1b8]
call fcn.004d448c
movzx edx, ax
mov eax, dword [ebp - 0x198]
call fcn.004d6ea0
mov eax, dword [ebp - 0x1b8]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x198]
call fcn.004d6ee0
mov eax, dword [ebp - 0x1b8]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 0x198]
call fcn.004d6eb8
lea edx, [ebp - 0x221c]
mov eax, dword [ebp - 0x1b8]
call fcn.004d4550
mov edx, dword [ebp - 0x221c]
mov eax, dword [ebp - 0x198]
call fcn.004d6e10
mov eax, dword [ebp - 0x1b8]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x198]
call fcn.004d6e38
call fcn.004d9cdc
cmp byte [eax + 0x373], 0
je 0x4d59e6
push 0x4d6604
lea edx, [ebp - 0x2224]
mov eax, dword [ebp - 0x1b8]
call fcn.004d43cc
push dword [ebp - 0x2224]
push 0x4d6620
mov eax, dword [ebp - 0x1b8]
call fcn.004d448c
movzx eax, ax
lea edx, [ebp - 0x2228]
call fcn.0040c1d4
push dword [ebp - 0x2228]
push 0x4d65f8
lea eax, [ebp - 0x2220]
mov edx, 5
call fcn.00405a34
mov eax, dword [ebp - 0x2220]
push eax
mov cl, 0x19
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
push 0x4d662c
mov eax, dword [ebp - 0x1b8]
push dword [eax + 0x18]
push 0x4d65f8
lea eax, [ebp - 0x222c]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x222c]
push eax
mov cl, 0x19
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
push 0x4d664c
lea edx, [ebp - 0x2234]
mov eax, dword [ebp - 0x1b8]
call fcn.004d4550
push dword [ebp - 0x2234]
push 0x4d65f8
lea eax, [ebp - 0x2230]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x2230]
push eax
mov cl, 0x19
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
push 0x4d6668
mov eax, dword [ebp - 0x1b8]
push dword [eax + 0x24]
push 0x4d65f8
lea eax, [ebp - 0x2238]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x2238]
push eax
mov cl, 0x19
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
push 0x4d6688
mov eax, dword [ebp - 0x1b8]
push dword [eax + 0xc]
push 0x4d65f8
lea eax, [ebp - 0x223c]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x223c]
push eax
mov cl, 0x19
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
jmp 0x4d59e6
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x198]
call fcn.004d6e60
xor edx, edx
mov eax, dword [ebp - 0x198]
call fcn.004d6ea0
xor edx, edx
mov eax, dword [ebp - 0x198]
call fcn.004d6ee0
xor edx, edx
mov eax, dword [ebp - 0x198]
call fcn.004d6eb8
xor edx, edx
mov eax, dword [ebp - 0x198]
call fcn.004d6e10
xor edx, edx
mov eax, dword [ebp - 0x198]
call fcn.004d6e38
call fcn.004d9cdc
cmp byte [eax + 0x373], 0
je 0x4d59e6
push 0x4d66b0
mov cl, 0x19
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
mov edx, ebx
mov eax, dword [ebp - 0x198]
call fcn.004d6a14
mov eax, esi
mov edx, 0x4d66d0
call fcn.00405ac0
je 0x4d5a11
mov eax, dword [ebp - 0x198]
add eax, 0x50
mov edx, esi
call fcn.004056d8
mov eax, dword [ebp - 0x198]
call fcn.004d4b38
mov eax, dword [ebp - 0x198]
call fcn.004d4e34
mov eax, dword [ebp - 0x198]
cmp byte [eax + 8], 0
je 0x4d5a3f
mov dword [ebp - 0x19c], 0x800000
jmp 0x4d5a47
xor eax, eax
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x38]
call fcn.004225b0
lea edx, [ebp - 0x2240]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x34]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
cmp dword [ebp - 0x2240], 0
jne 0x4d5a79
xor ebx, ebx
jmp 0x4d5b0f
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x34]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jb 0x4d5b09
inc esi
xor ebx, ebx
lea eax, [ebp - 0x194]
mov dword [ebp - 0x1cc], eax
lea ecx, [ebp - 0x2244]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x34]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2244]
mov dword [ebp - 0x2248], eax
mov eax, dword [ebp - 0x2248]
test eax, eax
je 0x4d5ace
sub eax, 4
mov eax, dword [eax]
test eax, eax
jle 0x4d5afe
cmp ebx, 0x64
jae 0x4d5afe
lea ecx, [ebp - 0x224c]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x34]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x224c]
mov eax, dword [ebp - 0x1cc]
call fcn.004056d8
inc ebx
add dword [ebp - 0x1cc], 4
dec esi
jne 0x4d5a9d
lea ebx, [ebp - 0x194]
call fcn.004d9cdc
cmp byte [eax + 0x373], 0
je 0x4d5bcc
push 0x4d66dc
mov eax, dword [ebp - 0x198]
push dword [eax + 0x40]
push 0x4d65f8
lea eax, [ebp - 0x2250]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x2250]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
push 0x4d66f8
mov eax, dword [ebp - 0x198]
push dword [eax + 0x4c]
push 0x4d65f8
lea eax, [ebp - 0x2254]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x2254]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
push 0x4d6718
mov eax, dword [ebp - 0x198]
push dword [eax + 0x50]
push 0x4d65f8
lea eax, [ebp - 0x2258]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x2258]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
mov eax, dword [ebp - 0x198]
push eax
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x54]
or eax, dword [ebp - 0x19c]
push eax
push ebx
push 0
push 0x4d6730
mov eax, dword [ebp - 0x198]
mov ecx, dword [eax + 0x50]
mov eax, dword [ebp - 0x198]
mov edx, dword [eax + 0x4c]
lea eax, [ebp - 0x225c]
call fcn.004059c0
mov eax, dword [ebp - 0x225c]
call fcn.00405b74
push eax
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x40]
call fcn.00405b74
push eax
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x74]
push eax
call dword [0x6da208]
mov esi, eax
mov eax, dword [ebp - 0x198]
mov dword [eax + 0x78], esi
test esi, esi
jne 0x4d5c47
call fcn.004106a0
lea edx, [ebp - 0x2260]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
cmp dword [ebp - 0x2260], 0
je 0x4d5d2b
call fcn.004d9cdc
cmp byte [eax + 0x373], 0
je 0x4d5cc0
push 0x4d6744
lea edx, [ebp - 0x2268]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
push dword [ebp - 0x2268]
push 0x4d65f8
lea eax, [ebp - 0x2264]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x2264]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
lea edx, [ebp - 0x226c]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
lea eax, [ebp - 0x226c]
mov edx, 0x4d6770
call fcn.0040597c
mov eax, dword [ebp - 0x226c]
call fcn.00405b74
mov edi, eax
lea edx, [ebp - 0x2270]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x2270]
mov dword [ebp - 0x2248], eax
mov eax, dword [ebp - 0x2248]
test eax, eax
je 0x4d5d20
sub eax, 4
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x1a0], eax
jmp 0x4d5d57
call fcn.004d9cdc
cmp byte [eax + 0x373], 0
je 0x4d5d4d
push 0x4d677c
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
xor edi, edi
xor eax, eax
mov dword [ebp - 0x1a0], eax
call fcn.004d9cdc
movzx eax, byte [eax + 0x373]
test al, al
je 0x4d5d7c
push 0x4d4800
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x78]
push eax
call dword [0x6da1f8]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x2208], eax
mov dword [ebp - 0x2204], edi
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x2200], eax
mov eax, dword [ebp - 0x198]
mov ebx, dword [eax + 0x3c]
mov eax, dword [ebx + 4]
mov dword [ebp - 0x21fc], eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
mov dword [ebp - 0x21f8], eax
mov bl, 1
lea eax, [ebp - 0x1c8]
push eax
push 0
lea eax, [ebp - 0x2208]
push eax
push 0x4d48d8
push 0
push 0
call sub.kernel32.dll_CreateThread_1
mov esi, eax
test esi, esi
jne 0x4d5e21
call sub.kernel32.dll_GetLastError_1
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x2278]
call fcn.0040c3a4
mov ecx, dword [ebp - 0x2278]
lea eax, [ebp - 0x2274]
mov edx, 0x4d67ac
call fcn.004059c0
mov eax, dword [ebp - 0x2274]
push eax
mov cl, 2
mov dl, 2
mov eax, dword [ebp - 0x198]
call fcn.004cec88
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x58]
add eax, eax
add eax, 0x4b0
push eax
push esi
call sub.kernel32.dll_WaitForSingleObject
cmp eax, 0x102
jne 0x4d5e91
push 0x4d67cc
mov cl, 2
mov dl, 2
mov eax, dword [ebp - 0x198]
call fcn.004cec88
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x78]
test eax, eax
je 0x4d5e7d
push eax
call dword [fcn.006da1ec]
push 0xffffffffffffffff
push esi
call sub.kernel32.dll_WaitForSingleObject
push 0x2ee2
call sub.kernel32.dll_SetLastError
xor ebx, ebx
jmp 0x4d5e91
push 0x4d67fc
mov cl, 2
mov dl, 2
mov eax, dword [ebp - 0x198]
call fcn.004cec88
xor eax, eax
mov dword [ebp - 0x1c4], eax
lea eax, [ebp - 0x1c4]
push eax
push esi
call sub.kernel32.dll_GetExitCodeThread
push esi
call sub.kernel32.dll_CloseHandle_1
cmp dword [ebp - 0x1c4], 0
je 0x4d5eb7
xor ebx, ebx
test bl, bl
jne 0x4d6012
mov eax, dword [ebp - 0x198]
mov edx, dword [ebp - 0x1c4]
mov dword [eax + 0x68], edx
call fcn.004d9cdc
cmp byte [eax + 0x373], 0
je 0x4d5f40
push 0x4d6818
lea edx, [ebp - 0x2280]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x68]
call fcn.0040c1d4
push dword [ebp - 0x2280]
push 0x4d6830
call sub.kernel32.dll_GetCurrentThreadId_1
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x2284]
call fcn.0040c3a4
push dword [ebp - 0x2284]
lea eax, [ebp - 0x227c]
mov edx, 4
call fcn.00405a34
mov eax, dword [ebp - 0x227c]
push eax
mov cl, 2
mov dl, 2
mov eax, dword [ebp - 0x198]
call fcn.004cec88
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x68]
cmp eax, 0x2f0d
je 0x4d5f69
cmp eax, 0x2f0c
je 0x4d5f69
cmp eax, 0x2f05
je 0x4d5f69
cmp eax, 0x2f06
jne 0x4d600d
mov dword [ebp - 0x1c0], 4
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1bc]
push eax
push 0x1f
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x70]
push eax
call dword [fcn.006da204]
mov eax, dword [ebp - 0x1bc]
or eax, 0x100
or eax, 0x1000
or eax, 0x2000
or eax, 0x200
mov dword [ebp - 0x1bc], eax
push 4
lea eax, [ebp - 0x1bc]
push eax
push 0x1f
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x70]
push eax
call dword [fcn.006da200]
mov eax, dword [ebp - 0x198]
mov ebx, dword [eax + 0x3c]
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
push eax
mov eax, dword [ebx + 4]
push eax
mov eax, dword [ebp - 0x1a0]
push eax
push edi
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x78]
push eax
call dword [0x6da20c]
cmp eax, 1
sbb eax, eax
inc eax
mov ebx, eax
test bl, bl
jne 0x4d6012
call fcn.004106a0
jmp 0x4d6012
call fcn.004106a0
xor eax, eax
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1a8], 4
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x1a4]
push eax
push 0x20000013
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x78]
push eax
call dword [0x6da218]
cmp eax, 1
sbb ebx, ebx
inc ebx
test bl, bl
jne 0x4d605d
call fcn.004106a0
mov dword [ebp - 0x1ac], 0x2000
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x21cc]
push eax
push 0x14
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x78]
push eax
call dword [0x6da218]
cmp eax, 1
sbb ebx, ebx
inc ebx
test bl, bl
jne 0x4d609d
call fcn.004106a0
mov eax, dword [ebp - 0x198]
mov edx, dword [ebp - 0x1a4]
mov dword [eax + 0x68], edx
mov eax, dword [ebp - 0x198]
add eax, 0x6c
lea edx, [ebp - 0x21cc]
mov ecx, 0x2000
call fcn.00405904
xor eax, eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1a8], 4
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 0x20000005
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x78]
push eax
call dword [0x6da218]
cmp eax, 1
sbb ebx, ebx
inc ebx
test bl, bl
jne 0x4d6118
call fcn.004106a0
xor eax, eax
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], 0x2000
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x21cc]
push eax
push 0x16
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x78]
push eax
call dword [0x6da218]
cmp eax, 1
sbb ebx, ebx
inc ebx
test bl, bl
jne 0x4d6160
call fcn.004106a0
lea eax, [ebp - 0x2288]
lea edx, [ebp - 0x21cc]
mov ecx, 0x2000
call fcn.00405904
mov edx, dword [ebp - 0x2288]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x2c]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x38]
call fcn.004225b0
call fcn.004d9cdc
cmp byte [eax + 0x373], 0
je 0x4d61f0
push 0x4d6848
lea edx, [ebp - 0x2290]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x2c]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
push dword [ebp - 0x2290]
push 0x4d65f8
lea eax, [ebp - 0x228c]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x228c]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x40]
mov edx, 0x4d6874
call fcn.00405ac0
je 0x4d62d6
mov eax, dword [ebp - 0x198]
cmp dword [eax + 0x68], 0xcc
je 0x4d62d6
xor eax, eax
mov dword [ebp - 0x21dc], eax
lea edx, [ebp - 0x21cc]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0x21dc]
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, dword [ebp - 0x1b4]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x4d6264
cmp eax, dword [esp]
pop edx
pop eax
ja 0x4d6268
jmp 0x4d62d6
pop edx
pop eax
jle 0x4d62d6
lea eax, [ebp - 0x21f4]
xor ecx, ecx
mov edx, 0x28
call fcn.00403cb4
mov dword [ebp - 0x21f4], 0x28
lea eax, [ebp - 0x21cc]
mov dword [ebp - 0x21e0], eax
mov dword [ebp - 0x21dc], 0x2000
mov eax, dword [ebp - 0x198]
push eax
push 0
lea eax, [ebp - 0x21f4]
push eax
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x78]
push eax
call dword [0x6da220]
cmp eax, 1
sbb ebx, ebx
inc ebx
test bl, bl
jne 0x4d62c9
call fcn.004106a0
cmp dword [ebp - 0x21dc], 0
jne 0x4d6224
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d6304
mov eax, dword [ebp - 0x198]
call fcn.004d5030
call fcn.004d9cdc
cmp byte [eax + 0x373], 0
je 0x4d6435
push 0x4d6884
lea edx, [ebp - 0x2298]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x68]
call fcn.0040c1d4
push dword [ebp - 0x2298]
push 0x4d65f8
lea eax, [ebp - 0x2294]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x2294]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
push 0x4d68a4
mov eax, dword [ebp - 0x198]
push dword [eax + 0x6c]
push 0x4d65f8
lea eax, [ebp - 0x229c]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x229c]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
push 0x4d68c8
lea edx, [ebp - 0x22a4]
mov eax, dword [ebp - 0x198]
call fcn.004d6924
push dword [ebp - 0x22a4]
push 0x4d65f8
lea eax, [ebp - 0x22a0]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x22a0]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
push 0x4d68e8
call sub.kernel32.dll_GetCurrentThreadId_1
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x22ac]
call fcn.0040c3a4
push dword [ebp - 0x22ac]
push 0x4d6914
lea eax, [ebp - 0x22a8]
mov edx, 3
call fcn.00405a34
mov eax, dword [ebp - 0x22a8]
push eax
mov cl, 2
mov dl, 4
mov eax, dword [ebp - 0x198]
call fcn.004cec88
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x68]
cmp eax, 0xc8
je 0x4d6450
cmp eax, 0x197
jne 0x4d64e6
cmp dword [ebp - 0x1b8], 0
je 0x4d653e
lea edx, [ebp - 0x22b0]
mov eax, dword [ebp - 0x1b8]
call fcn.004d43cc
mov eax, dword [ebp - 0x22b0]
mov edx, 0x4d66d0
call fcn.00405ac0
jne 0x4d653e
mov eax, dword [ebp - 0x1b8]
cmp dword [eax + 0x14], 0
jne 0x4d653e
lea edx, [ebp - 0x22b4]
mov eax, dword [ebp - 0x198]
call fcn.004d5110
mov edx, dword [ebp - 0x22b4]
mov eax, dword [ebp - 0x1b8]
call fcn.004d45e8
mov eax, dword [ebp - 0x1b8]
cmp dword [eax + 0x14], 0
jne 0x4d653e
lea edx, [ebp - 0x22b8]
mov eax, dword [ebp - 0x198]
call fcn.004d5260
mov edx, dword [ebp - 0x22b8]
mov eax, dword [ebp - 0x1b8]
call fcn.004d45e8
jmp 0x4d653e
mov eax, dword [ebp - 0x198]
call fcn.004d4fe8
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x68]
cmp eax, 0x2ee2
je 0x4d650f
cmp eax, 0x2efd
je 0x4d650f
cmp eax, 0x2ee7
jne 0x4d653e
call fcn.004d9cdc
cmp byte [eax + 0x145], 0
je 0x4d653e
call fcn.00407cbc
mov eax, dword [eax + 0x54]
inc eax
mov ecx, 0xc
cdq
idiv ecx
mov ebx, edx
call fcn.00407cbc
mov dword [eax + 0x54], ebx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d6589
lea eax, [ebp - 0x22b8]
mov edx, 0x1c
call fcn.004056a8
lea eax, [ebp - 0x2244]
mov edx, 0xf
call fcn.004056a8
lea eax, [ebp - 0x194]
mov ecx, 0x65
mov edx, dword [0x4010e4]
call fcn.004065b4
ret