Function at 0x4db850
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x710
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x704]
mov dword [eax + 0x2d4], 1
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x32c]
mov eax, dword [ebp - 0x704]
mov ecx, dword [eax + 0x32c]
mov eax, dword [edx + 0x30]
imul eax, dword [ecx + 0x34]
mov edx, dword [ebp - 0x704]
mov ecx, dword [edx + 0x32c]
imul eax, dword [ecx + 0x38]
cdq
and edx, 7
add eax, edx
sar eax, 3
push eax
call fcn.004dd520
add esp, 4
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x704]
add edx, 0x14
mov eax, dword [ebp - 0x14]
add eax, 0x1c
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov edx, dword [edx + 0xc]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x14]
call fcn.004dd380
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
add ecx, 4
call fcn.00459250
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x704]
mov ecx, dword [eax + 0x32c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x704]
mov ecx, dword [eax + 0x32c]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 4], edx
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 8]
push ecx
call fcn.004c6240
add esp, 8
mov edx, dword [ebp - 0x704]
mov eax, dword [edx + 0x32c]
mov ecx, dword [eax + 0x30]
lea edx, [ecx*4 + 1]
push edx
call fcn.005c01e5
add esp, 4
mov dword [ebp - 0x6fc], eax
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x68c], 0
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x34], 0
call dword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
mov ecx, dword [ebp - 0x704]
mov dword [ecx + 0x318], eax
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d9150
push 0
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d91f0
push 0
push 0x12
mov ecx, dword [ebp - 0x704]
add ecx, 0x10
mov edx, dword [ebp - 0x704]
mov eax, dword [edx + 0x10]
mov edx, dword [eax + 4]
call edx
test eax, eax
je 0x4dba16
cmp dword [0x69aaa4], 3
jg 0x4dba16
push str.Desktop_was_not_initicated_
push 0x26e
push 0x6148b8
push 3
call fcn.00401310
add esp, 0x10
mov eax, dword [ebp - 0x704]
cmp dword [eax + 0x2d4], 0
je 0x4dba40
mov ecx, dword [ebp - 0x704]
cmp dword [ecx + 0x2d0], 1
jge 0x4dba40
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4dba16
mov edx, dword [ebp - 0x704]
cmp dword [edx + 0x2d4], 0
je 0x4dc8a4
mov eax, dword [ebp - 0x690]
push eax
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0x704]
add ecx, 0x28c
call fcn.004dd490
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jne 0x4dbab3
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d8880
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [eax + 4]
call edx
mov eax, dword [ebp - 0x704]
mov ecx, dword [eax + 0x300]
mov dword [ebp - 0x690], ecx
jmp 0x4dba53
cmp dword [ebp - 0x40], 0xffffffff
jne 0x4dbabe
jmp 0x4dc8a4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x704]
cmp dword [edx + 0x2dc], 0
jbe 0x4dbb5c
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x34]
cmp ecx, dword [eax + 0x2dc]
jb 0x4dbb02
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x34]
sub eax, dword [edx + 0x2dc]
mov dword [ebp - 0x708], eax
jmp 0x4dbb1a
mov ecx, dword [ebp - 0x704]
or edx, 0xffffffff
sub edx, dword [ecx + 0x2dc]
add edx, dword [ebp - 0x34]
mov dword [ebp - 0x708], edx
cmp dword [ebp - 0x708], 0xfa0
jbe 0x4dbb5c
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d9150
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d91f0
mov eax, dword [ebp - 0x704]
mov dword [eax + 0x2dc], 0
mov ecx, dword [ebp - 0x704]
add ecx, 0x34
call fcn.00401050
lea ecx, [ebp - 0x680]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x68c], 0
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x704]
mov ecx, dword [eax + 0x32c]
push ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [edx + 0x32c]
mov ecx, dword [eax + 0x10]
call ecx
add esp, 8
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jle 0x4dbbd8
mov edx, dword [ebp - 0x24]
add edx, 0x10
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x68c]
mov ecx, dword [ebp - 0x68c]
add ecx, 1
mov dword [ebp - 0x68c], ecx
cmp eax, 0x62
jg 0x4dbbd4
cmp dword [ebp - 0x38], 2
jne 0x4dbbd6
jmp 0x4dbbd8
jmp 0x4dbb7d
cmp dword [ebp - 0x68c], 6
jle 0x4dbd03
lea edx, [ebp - 0x680]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x694], eax
mov ecx, dword [ebp - 0x694]
add ecx, 0x10
mov dword [ebp - 0x694], ecx
mov dword [ebp - 0x698], 1
mov dword [ebp - 0x69c], 1
jmp 0x4dbc3a
mov edx, dword [ebp - 0x69c]
add edx, 1
mov dword [ebp - 0x69c], edx
mov eax, dword [ebp - 0x694]
add eax, 0x10
mov dword [ebp - 0x694], eax
mov ecx, dword [ebp - 0x69c]
cmp ecx, dword [ebp - 0x68c]
jge 0x4dbcf7
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 0xc]
add eax, 0x50
mov ecx, dword [ebp - 0x694]
cmp dword [ecx + 4], eax
jle 0x4dbca7
mov edx, dword [ebp - 0x698]
add edx, 1
mov dword [ebp - 0x698], edx
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0x694]
je 0x4dbca2
mov edx, dword [ebp - 0x694]
mov eax, dword [ebp - 0x24]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov edx, dword [edx + 0xc]
mov dword [eax + 0xc], edx
jmp 0x4dbc1c
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x694]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x694]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax]
cmp edx, dword [ecx]
jge 0x4dbcd2
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x694]
mov edx, dword [ecx]
mov dword [eax], edx
mov eax, dword [ebp - 0x694]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax + 8]
cmp edx, dword [ecx + 8]
jle 0x4dbcf2
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x694]
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
jmp 0x4dbc1c
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x68c], eax
push 0x1388
mov ecx, dword [ebp - 0x704]
add ecx, 0x34
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.004dad10
test eax, eax
jg 0x4dbd69
mov ecx, dword [ebp - 0x14]
call fcn.004dacf0
cmp eax, 1
jle 0x4dbd69
mov ecx, dword [ebp - 0x704]
add ecx, 0x34
call fcn.00401060
cmp dword [0x69aaa4], 3
jg 0x4dbd64
mov ecx, dword [ebp - 0x14]
call fcn.004dacf0
push eax
push str.Fatal_error._cant_wait_buffer...ref_d
push 0x2d1
push 0x6148f4
push 3
call fcn.00401310
add esp, 0x14
jmp 0x4dc8a4
mov ecx, dword [ebp - 0x14]
call fcn.004d5020
mov edx, dword [ebp - 0x684]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.00419a70
cmp dword [0x69c184], 0
jne 0x4dbe8a
mov dword [0x69c170], 0x14
push 0x69c170
call dword [sym.imp.USER32.dll_GetCursorInfo]
test eax, eax
je 0x4dbe8a
cmp dword [0x69c174], 1
jne 0x4dbe8a
mov eax, dword [0x69c178]
cmp eax, dword [ebp - 0x30]
je 0x4dbe8a
mov ecx, dword [0x69c178]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.004dc910
add esp, 0xc
test eax, eax
je 0x4dbe8a
push 0xffffffffffffffff
push 3
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x704]
mov ecx, dword [eax + 0x2c8]
push ecx
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d9ea0
push 0x1388
mov edx, dword [ebp - 0x704]
add edx, 0x34
push edx
mov ecx, dword [ebp - 0x14]
call fcn.004dad10
test eax, eax
jg 0x4dbe73
mov ecx, dword [ebp - 0x14]
call fcn.004dacf0
cmp eax, 1
jle 0x4dbe73
mov ecx, dword [ebp - 0x704]
add ecx, 0x34
call fcn.00401060
cmp dword [0x69aaa4], 3
jg 0x4dbe6e
mov ecx, dword [ebp - 0x14]
call fcn.004dacf0
push eax
push str.Fatal_error._cant_wait_buffer_2...ref_d
push 0x2e6
push 0x614934
push 3
call fcn.00401310
add esp, 0x14
jmp 0x4dc8a4
mov ecx, dword [ebp - 0x14]
call fcn.004d5020
mov eax, dword [ebp - 0x684]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00419a70
cmp dword [ebp - 0x68c], 0
jle 0x4dc7b5
lea ecx, [ebp - 0x680]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x14]
call fcn.004dd380
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x690], 0
mov dword [ebp - 0x6a4], 0
jmp 0x4dbed9
mov edx, dword [ebp - 0x6a4]
add edx, 1
mov dword [ebp - 0x6a4], edx
mov eax, dword [ebp - 0x24]
add eax, 0x10
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x6a4]
cmp ecx, dword [ebp - 0x68c]
jge 0x4dc6a2
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov ecx, dword [edx + 8]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov edx, dword [edx + 0xc]
sub edx, dword [eax + 4]
imul ecx, edx
imul ecx, ecx, 3
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x6ac]
cmp ecx, dword [eax + 0x2f8]
jae 0x4dc3bb
mov edx, dword [ebp - 0x24]
mov eax, dword [edx]
add eax, 0xa
cmp eax, dword [ebp - 0x688]
jl 0x4dbfa8
mov ecx, dword [ebp - 0x688]
add ecx, 0xa
mov edx, dword [ebp - 0x24]
cmp dword [edx], ecx
jg 0x4dbfa8
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 4]
add ecx, 0xa
cmp ecx, dword [ebp - 0x2c]
jl 0x4dbfa8
mov edx, dword [ebp - 0x2c]
add edx, 0xa
mov eax, dword [ebp - 0x24]
cmp dword [eax + 4], edx
jg 0x4dbfa8
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 8]
add edx, 0xa
cmp edx, dword [ebp - 0x20]
jl 0x4dbfa8
mov eax, dword [ebp - 0x20]
add eax, 0xa
mov ecx, dword [ebp - 0x24]
cmp dword [ecx + 8], eax
jg 0x4dbfa8
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 0xc]
add eax, 0xa
cmp eax, dword [ebp - 0x1c]
jl 0x4dbfa8
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa
mov edx, dword [ebp - 0x24]
cmp dword [edx + 0xc], ecx
jle 0x4dc3bb
mov ecx, dword [ebp - 0x14]
call fcn.004dd3a0
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x704]
mov ecx, dword [eax + 0x32c]
mov edx, dword [ebp - 0x704]
mov eax, dword [edx + 0x32c]
mov ecx, dword [ecx + 0x6c]
imul ecx, dword [eax + 0x74]
add ecx, 0x1f
sar ecx, 5
shl ecx, 2
mov dword [ebp - 0x6b8], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [edx + 0x32c]
cmp dword [eax + 0x70], 0
jle 0x4dc00d
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x32c]
mov eax, dword [edx + 0x70]
mov dword [ebp - 0x70c], eax
jmp 0x4dc024
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x32c]
mov eax, dword [edx + 0x70]
neg eax
mov dword [ebp - 0x70c], eax
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x6b4], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [edx + 0x32c]
mov ecx, dword [eax + 0x24]
mov dword [ebp - 0x6b0], ecx
mov edx, dword [ebp - 0x28]
push edx
lea eax, [ebp - 0x6bc]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x32c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 8]
imul ecx, dword [edx + 0x74]
add ecx, 7
sar ecx, 3
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x32c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
imul ecx, dword [edx + 0x74]
sar ecx, 3
push ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [edx + 0x32c]
mov ecx, dword [eax + 0x74]
push ecx
lea edx, [ebp - 0x6b8]
push edx
call fcn.004e08b0
add esp, 0x24
test eax, eax
jne 0x4dc3bb
cmp dword [ebp - 0x6bc], 0x7d0
jb 0x4dc0e0
mov eax, dword [ebp - 0x6bc]
imul eax, eax, 0xc
cmp eax, dword [ebp - 0x6ac]
jae 0x4dc395
mov dword [ebp - 0x6a8], 1
cmp dword [ebp - 0x68c], 1
jne 0x4dc13d
push 1
push 6
mov ecx, dword [ebp - 0x24]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.004dd2f0
mov edx, dword [ebp - 0x6bc]
add edx, 9
push edx
mov ecx, dword [ebp - 0x14]
call fcn.00419a70
push 0xffffffffffffffff
push 3
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x2c4]
push edx
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d9ea0
jmp 0x4dc1fa
mov eax, dword [ebp - 0x6bc]
add eax, 8
mov dword [ebp - 0x6c0], eax
mov ecx, dword [ebp - 0x6c0]
and ecx, 7
shl ecx, 0x19
or ecx, dword [ebp - 0x6c0]
mov dword [ebp - 0x6c0], ecx
mov edx, dword [ebp - 0x6c0]
or edx, 0x1000000
mov dword [ebp - 0x6c0], edx
cmp dword [ebp - 0x6a4], 0
jne 0x4dc1a3
push 1
push 0x15
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004dd2f0
mov ecx, dword [ebp - 0x6c0]
or ecx, 0x80000000
mov dword [ebp - 0x6c0], ecx
jmp 0x4dc1da
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov cx, word [eax]
mov word [edx - 8], cx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov cx, word [eax + 4]
mov word [edx - 6], cx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov cx, word [eax + 8]
mov word [edx - 4], cx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov cx, word [eax + 0xc]
mov word [edx - 2], cx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x6bc]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x6c0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xc]
add edx, 0xc
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0x10], 0
je 0x4dc393
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x704]
mov edx, dword [eax]
cmp edx, dword [ecx + 0x330]
jg 0x4dc2cf
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x704]
mov edx, dword [eax + 8]
cmp edx, dword [ecx + 0x338]
jl 0x4dc2cf
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax + 0x33c]
cmp edx, dword [ecx + 0xc]
jg 0x4dc26f
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax + 0x33c]
cmp edx, dword [ecx + 4]
jl 0x4dc26f
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 4]
mov dword [eax + 0x33c], edx
jmp 0x4dc2a9
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax + 0x334]
cmp edx, dword [ecx + 4]
jl 0x4dc2a9
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax + 0x334]
cmp edx, dword [ecx + 0xc]
jg 0x4dc2a9
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0x334], edx
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x704]
mov edx, dword [eax + 0x33c]
cmp edx, dword [ecx + 0x334]
jl 0x4dc2ca
mov dword [ebp - 0x10], 0
jmp 0x4dc393
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x704]
mov edx, dword [eax + 4]
cmp edx, dword [ecx + 0x334]
jg 0x4dc393
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x704]
mov edx, dword [eax + 0xc]
cmp edx, dword [ecx + 0x33c]
jl 0x4dc393
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax + 0x338]
cmp edx, dword [ecx + 8]
jg 0x4dc339
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax + 0x338]
cmp edx, dword [ecx]
jl 0x4dc339
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
mov dword [eax + 0x338], edx
jmp 0x4dc372
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax + 0x330]
cmp edx, dword [ecx]
jl 0x4dc372
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax + 0x330]
cmp edx, dword [ecx + 8]
jg 0x4dc372
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 8]
mov dword [eax + 0x330], edx
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x704]
mov edx, dword [eax + 0x338]
cmp edx, dword [ecx + 0x330]
jl 0x4dc393
mov dword [ebp - 0x10], 0
jmp 0x4dc3bb
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov dword [ebp - 0x688], ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 4]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x6a8], 0
jne 0x4dc69d
mov ecx, dword [ebp - 0x14]
call fcn.004dd3a0
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x6dc], 0x32
cmp dword [ebp - 0x6ac], 0x4e200
jbe 0x4dc4cd
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x6dc], 0x14
cmp dword [ebp - 0x10], 0
jne 0x4dc437
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x704]
add ecx, 0x330
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov dword [ebp - 0x10], 1
jmp 0x4dc4cd
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x24]
mov eax, dword [ecx + 0x330]
cmp eax, dword [edx]
jle 0x4dc45b
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x24]
mov eax, dword [edx]
mov dword [ecx + 0x330], eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x24]
mov eax, dword [ecx + 0x334]
cmp eax, dword [edx + 4]
jle 0x4dc481
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 4]
mov dword [ecx + 0x334], eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x24]
mov eax, dword [ecx + 0x338]
cmp eax, dword [edx + 8]
jge 0x4dc4a7
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 8]
mov dword [ecx + 0x338], eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x24]
mov eax, dword [ecx + 0x33c]
cmp eax, dword [edx + 0xc]
jge 0x4dc4cd
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 0xc]
mov dword [ecx + 0x33c], eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x32c]
mov eax, dword [edx + 0x6c]
mov dword [ebp - 0x6d8], eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x32c]
mov eax, dword [edx + 0x70]
mov dword [ebp - 0x6d4], eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x32c]
mov eax, dword [edx + 0x74]
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x6cc], 0
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x32c]
mov eax, dword [edx + 0x78]
mov dword [ebp - 0x6c8], eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x32c]
mov eax, dword [edx + 0x24]
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6dc]
push ecx
mov edx, dword [ebp - 0x28]
push edx
lea eax, [ebp - 0x6e0]
push eax
mov ecx, dword [ebp - 0xc]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x6d8]
push ecx
call fcn.004de640
add esp, 0x24
cmp dword [ebp - 0x6e0], 0
jbe 0x4dc69d
cmp dword [ebp - 0x10], 1
jne 0x4dc5ba
cmp dword [ebp - 0x6ac], 0x4e200
jbe 0x4dc5ba
mov edx, dword [ebp - 0x6e0]
imul edx, edx, 0xc
cmp edx, dword [ebp - 0x6ac]
jbe 0x4dc5ba
mov dword [ebp - 0x10], 2
cmp dword [ebp - 0x68c], 1
jne 0x4dc60d
push 0
push 0xf
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004dd2f0
mov ecx, dword [ebp - 0x6e0]
add ecx, 5
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.00419a70
push 0xffffffffffffffff
push 3
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x704]
mov ecx, dword [eax + 0x2c4]
push ecx
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d9ea0
jmp 0x4dc69d
mov edx, dword [ebp - 0x6e0]
add edx, 4
mov dword [ebp - 0x6e4], edx
mov eax, dword [ebp - 0x6e4]
and eax, 7
shl eax, 0x19
or eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6a4], 0
jne 0x4dc661
push 0
push 0x15
mov ecx, dword [ebp - 0x24]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.004dd2f0
mov edx, dword [ebp - 0x6e4]
or edx, 0x80000000
mov dword [ebp - 0x6e4], edx
jmp 0x4dc67c
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x24]
mov dx, word [ecx]
mov word [eax - 8], dx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x24]
mov dx, word [ecx + 4]
mov word [eax - 6], dx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x6e0]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x6e4]
mov dword [ecx - 4], edx
mov eax, dword [ebp - 0xc]
add eax, 8
mov dword [ebp - 0xc], eax
jmp 0x4dbec1
cmp dword [ebp - 0x68c], 1
jle 0x4dc770
mov ecx, dword [ebp - 0x14]
add ecx, 4
call fcn.004158c0
mov ecx, dword [ebp - 0xc]
sub ecx, eax
sub ecx, 8
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.00419a70
mov ecx, dword [ebp - 0x14]
add ecx, 4
call fcn.00459250
sub eax, 4
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x14]
add ecx, 4
call fcn.004158c0
mov dword [ebp - 0x6ec], eax
mov edx, dword [ebp - 0x6ec]
add edx, dword [ebp - 0x6e8]
mov eax, dword [edx]
mov dword [ebp - 0x6f0], eax
mov ecx, dword [ebp - 0x6f0]
and ecx, 0xffffff
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f0]
and edx, 0x1000000
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f8]
add eax, 4
mov ecx, dword [ebp - 0x6e8]
sub ecx, eax
mov dword [ebp - 0x6e8], ecx
mov edx, dword [ebp - 0x6f0]
and edx, 0x80000000
je 0x4dc6f0
push 0xffffffffffffffff
push 3
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x704]
mov edx, dword [ecx + 0x2c4]
push edx
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d9ea0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x6a0], eax
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x304]
cmp dword [ebp - 0x6a0], ecx
jae 0x4dc7b0
mov edx, dword [ebp - 0x6a0]
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x704]
mov ecx, dword [eax + 0x304]
sub ecx, edx
mov dword [ebp - 0x690], ecx
jmp 0x4dc891
cmp dword [ebp - 0x690], 0
jne 0x4dc7d0
mov edx, dword [ebp - 0x704]
mov eax, dword [edx + 0x2fc]
mov dword [ebp - 0x690], eax
mov ecx, dword [ebp - 0x704]
movzx edx, byte [ecx + 0x31e]
test edx, edx
je 0x4dc7fe
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004dd1e0
mov eax, dword [ebp - 0x704]
mov byte [eax + 0x31e], 0
jmp 0x4dc872
cmp dword [ebp - 0x10], 0
je 0x4dc872
mov ecx, dword [ebp - 0x34]
cmp ecx, dword [ebp - 0x18]
jb 0x4dc81a
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x710], edx
jmp 0x4dc829
or eax, 0xffffffff
sub eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x710], eax
cmp dword [ebp - 0x710], 0x12c
jbe 0x4dc872
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004dcf30
test eax, eax
jne 0x4dc85c
mov dword [ebp - 0x10], 0
jmp 0x4dc872
cmp dword [ebp - 0x10], 2
je 0x4dc86b
mov dword [ebp - 0x10], 2
jmp 0x4dc872
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x704]
movzx edx, byte [ecx + 0x31c]
test edx, edx
je 0x4dc891
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d9360
mov ecx, dword [ebp - 0x704]
add ecx, 0x34
call fcn.00401060
jmp 0x4dba40
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x700], eax
mov ecx, dword [ebp - 0x700]
push ecx
call fcn.005bf806
add esp, 4
cmp dword [0x69aaa4], 2
jg 0x4dc8de
push str.screen_capture_exit
push 0x3fd
push str..TShareApePng.cpp
push 2
call fcn.00401310
add esp, 0x10
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 4]
call edx
mov ecx, dword [ebp - 0x704]
sub ecx, 8
call fcn.004d9150
push 0
call dword [sym.imp.USER32.dll_BlockInput]
mov ecx, dword [ebp - 0x704]
call fcn.0040acb0
mov esp, ebp
pop ebp
ret