Function at 0x4ec2d5
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x24e
push 0
push 0
dec ecx
jne 0x4eb9e4
push ecx
push ebx
push esi
push edi
mov ebx, edx
mov esi, eax
xor eax, eax
push ebp
push 0x4ed485
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebx + 2]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [eax]
cmp eax, 0xff
ja case.0x4eba1e.0
mov al, byte [eax + 0x4eba25]
jmp dword [eax*4 + 0x4ebb25]
mov edx, ebx
mov eax, dword [0x4f8458]
mov eax, dword [eax]
call fcn.004c15fc
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0xa0], eax
xor edi, edi
mov ebx, dword [0x4f8268]
mov eax, dword [ebp - 0xa0]
movzx eax, byte [eax + edi + 1]
mov word [ebx], ax
mov edx, dword [0x4f8414]
mov edx, dword [edx]
xchg edx, eax
call fcn.004b95a4
inc edi
add ebx, 2
cmp edi, 8
jne 0x4ebc3d
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f8378]
mov eax, dword [eax]
call fcn.004aad60
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 0xf2], 0x24
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 1]
mov dword [ebp - 0xf1], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 5]
mov dword [ebp - 0xed], eax
mov eax, dword [0x4f87a0]
mov eax, dword [eax]
mov dword [ebp - 0xe9], eax
mov eax, dword [ebp - 0x9c]
add eax, 9
mov edx, 0x10
call fcn.004dd40c
mov dword [ebp - 0xe5], eax
lea eax, [ebp - 0xf2]
mov edx, 0x11
call fcn.004dd40c
mov dword [ebp - 0xe1], eax
mov dword [ebp - 0xc0], 0x10
lea eax, [ebp - 0xc0]
push eax
push 0x10
mov eax, dword [0x4f85b8]
push eax
mov eax, dword [ebp - 0x9c]
add eax, 9
push eax
push 2
push 2
call fcn.004dcc24
lea ecx, [ebp - 0xf2]
mov eax, dword [0x4f84b0]
mov eax, dword [eax]
mov edx, 0x15
call fcn.004f05fc
cmp byte [esi + 0x310], 0
je 0x4ebd62
mov byte [ebp - 0xc3], 0x32
mov word [ebp - 0xc2], 0
lea ecx, [ebp - 0xc3]
mov eax, dword [0x4f84b0]
mov eax, dword [eax]
mov edx, 3
call fcn.004f05fc
call sub.kernel32.dll_GetTickCount_1
mov dword [esi + 0x314], eax
mov eax, dword [0x4f85e0]
mov eax, dword [eax]
call fcn.004adf1c
mov eax, dword [0x4f821c]
mov eax, dword [eax]
cmp byte [eax + 0x23a], 0
jne 0x4ebd8e
mov eax, dword [0x4f821c]
mov eax, dword [eax]
cmp byte [eax + 0x139], 0
je 0x4ebdd7
call sub.kernel32.dll_GetTickCount_1
xor edx, edx
push edx
push eax
mov eax, dword [0x4f808c]
cdq
cmp edx, dword [esp + 4]
jne 0x4ebdac
cmp eax, dword [esp]
pop edx
pop eax
jae 0x4ebdd7
jmp 0x4ebdb0
pop edx
pop eax
jge 0x4ebdd7
mov byte [ebp - 0xc3], 0x13
mov word [ebp - 0xc2], 0x71
lea ecx, [ebp - 0xc3]
mov eax, dword [0x4f84b0]
mov eax, dword [eax]
mov edx, 3
call fcn.004f05fc
mov eax, dword [0x4f84e0]
mov eax, dword [eax]
call fcn.004deccc
test al, al
je 0x4ebdf8
mov eax, dword [0x4f86b4]
mov eax, dword [eax]
mov edx, 0x4ed49c
call fcn.004d4244
mov eax, dword [0x4f86b4]
mov eax, dword [eax]
call fcn.004d79a4
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
movzx eax, byte [eax + 1]
add eax, 0xfffffff9
cmp eax, 0xf
ja case.0x4eba1e.0
mov al, byte [eax + 0x4ebe35]
jmp dword [eax*4 + 0x4ebe45]
mov eax, dword [0x4f827c]
mov eax, dword [eax]
xor edx, edx
call fcn.0045adcc
jmp case.0x4eba1e.0
mov eax, dword [0x4f827c]
mov eax, dword [eax]
xor edx, edx
call fcn.0045adcc
jmp case.0x4eba1e.0
mov eax, dword [0x4f827c]
mov eax, dword [eax]
xor edx, edx
call fcn.0045adcc
jmp case.0x4eba1e.0
mov eax, dword [0x4f87a8]
mov eax, dword [eax]
xor edx, edx
call fcn.0045adcc
jmp case.0x4eba1e.0
mov eax, dword [0x4f87a8]
mov eax, dword [eax]
xor edx, edx
call fcn.0045adcc
jmp case.0x4eba1e.0
mov eax, dword [0x4f8444]
mov eax, dword [eax]
xor edx, edx
call fcn.0045adcc
jmp case.0x4eba1e.0
mov eax, dword [0x4f8664]
mov eax, dword [eax]
xor edx, edx
call fcn.0045adcc
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f86a4]
mov eax, dword [eax]
call fcn.004e0eb4
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, esi
call fcn.004ea38c
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f87a8]
mov eax, dword [eax]
call fcn.004a667c
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f87a8]
mov eax, dword [eax]
call fcn.004a667c
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f87a8]
mov eax, dword [eax]
call fcn.004a667c
mov edx, ebx
mov eax, dword [0x4f827c]
mov eax, dword [eax]
call fcn.004bd6fc
mov edx, ebx
mov eax, dword [0x4f8444]
mov eax, dword [eax]
call fcn.004c0f9c
mov edx, ebx
mov eax, dword [0x4f8664]
mov eax, dword [eax]
call fcn.004bf8c0
jmp case.0x4eba1e.0
mov eax, dword [0x4f85d4]
mov byte [eax], 1
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f85fc]
mov eax, dword [eax]
call fcn.004a77cc
jmp case.0x4eba1e.0
mov eax, dword [0x4f85fc]
mov eax, dword [eax]
xor edx, edx
call fcn.0045adcc
mov eax, dword [0x4f8344]
mov eax, dword [eax]
cmp byte [eax + 0x57], 0
je case.0x4eba1e.0
mov eax, dword [0x4f8344]
mov eax, dword [eax]
xor edx, edx
call fcn.0045adcc
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f8344]
mov eax, dword [eax]
call fcn.004a9640
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax + 1]
mov edx, dword [0x4f8570]
mov edx, dword [edx]
mov dword [edx + 0x310], eax
lea edx, [ebp - 0x1100]
mov eax, dword [ebp - 0x8c]
add eax, 5
call fcn.00465ab8
mov edx, dword [ebp - 0x1100]
mov eax, dword [0x4f8570]
mov eax, dword [eax]
add eax, 0x314
call fcn.00404ba0
mov eax, dword [0x4f8570]
mov eax, dword [eax]
call fcn.004b7ba4
mov eax, dword [0x4f8570]
mov eax, dword [eax]
mov byte [eax + 0x318], 0
mov eax, dword [0x4f8570]
mov eax, dword [eax]
mov dl, 1
call fcn.0045adcc
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov edx, dword [eax + 5]
push edx
mov edx, dword [eax + 9]
push edx
mov edx, dword [eax + 0xd]
push edx
mov dl, byte [eax + 0x11]
push edx
mov ecx, dword [eax + 1]
mov eax, dword [0x4f8240]
mov eax, dword [eax]
mov dl, 1
call fcn.004e96c0
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp word [eax + 1], 0
jne 0x4ec09c
mov byte [0x4f805c], 1
jmp case.0x4eba1e.0
mov byte [0x4f805c], 0
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x80], eax
mov eax, dword [0x4f857c]
mov eax, dword [eax]
cmp byte [eax + 0x9d], 0
je case.0x4eba1e.0
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x80]
add eax, 3
call fcn.00409cdc
mov eax, dword [ebp - 0x80]
mov ax, word [eax + 0x10]
mov word [ebp - 2], ax
mov eax, dword [ebp - 0x80]
mov ax, word [eax + 0x12]
mov word [ebp - 4], ax
mov eax, dword [0x4f8810]
mov eax, dword [eax]
mov dx, word [ebp - 2]
call fcn.004bce4c
mov edx, dword [0x4f8078]
push edx
mov ecx, eax
mov edx, dword [ebp - 0x18]
mov eax, dword [0x4f8070]
call fcn.004a11c8
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x84], eax
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x84]
add eax, 3
call fcn.00465ab8
cmp dword [ebp - 0x18], 0
jne 0x4ec140
mov eax, dword [0x4f806c]
call fcn.004a1454
jmp case.0x4eba1e.0
lea eax, [ebp - 0x1104]
mov ecx, dword [ebp - 0x18]
mov edx, 0x4ed4b4
call fcn.00404e68
mov edx, dword [ebp - 0x1104]
mov cl, 1
mov eax, dword [0x4f806c]
call fcn.004a1540
mov eax, dword [0x4f857c]
mov eax, dword [eax]
cmp byte [eax + 0x9d], 0
jne case.0x4eba1e.0
mov eax, dword [0x4f806c]
call fcn.004a168c
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x7c], eax
mov esi, dword [ebp - 0x7c]
mov edx, dword [esi + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
mov edx, dword [esi + 5]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ecx, eax
test ebx, ebx
je case.0x4eba1e.0
test ecx, ecx
je 0x4ec1cc
movsx edi, word [ecx + 0x5a]
movsx eax, word [ecx + 0x5e]
mov dword [ebp - 0xc], eax
jmp 0x4ec1d7
movzx edi, word [esi + 9]
movzx eax, word [esi + 0xb]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
movsx edx, word [ebx + 0x5e]
movsx eax, word [ebx + 0x5a]
mov ecx, edi
call fcn.00499d7c
movzx eax, ax
push eax
xor eax, eax
mov al, byte [esi + 0x11]
push eax
movsx eax, word [ebx + 0x5a]
push eax
movsx eax, word [ebx + 0x5e]
push eax
push edi
mov eax, dword [ebp - 0xc]
push eax
xor eax, eax
mov al, byte [esi + 0xf]
push eax
mov eax, dword [0x4f87a0]
mov eax, dword [eax]
push eax
mov al, byte [esi + 0x14]
push eax
mov ecx, dword [esi + 5]
mov edx, dword [ebx + 0x414]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e60b4
cmp word [esi + 0x15], 0
jbe 0x4ec245
mov dx, word [esi + 0x15]
mov word [ebx + 0x44a], dx
mov dl, byte [esi + 0x17]
mov byte [ebx + 0x44c], dl
cmp word [esi + 0x18], 0
jbe case.0x4eba1e.0
mov cl, byte [esi + 0x1a]
movzx edx, word [esi + 0x18]
call fcn.004e2394
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x78], eax
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x78]
inc eax
call fcn.00465ab8
lea edx, [ebp - 0x1108]
mov eax, 0x4ed4c4
call fcn.004f172c
mov edx, dword [ebp - 0x1108]
mov eax, dword [ebp - 0x18]
call fcn.00404f68
je case.0x4eba1e.0
mov eax, dword [0x4f8414]
mov eax, dword [eax]
mov eax, dword [eax + 0x3d0]
mov edx, dword [ebp - 0x18]
call fcn.004417f8
mov eax, dword [0x4f87a0]
mov eax, dword [eax]
mov dword [esi + 0x320], eax
mov ecx, dword [0x4f87a0]
mov ecx, dword [ecx]
mov eax, dword [0x4f86b4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
call fcn.004d6f34
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x18]
call fcn.00404b4c
mov eax, dword [ebp - 0x58]
cmp byte [eax + 9], 0
jbe 0x4ec352
mov ebx, dword [ebp - 0x58]
cmp byte [ebx + 8], 3
jne 0x4ec2f9
mov byte [ebx + 8], 2
cmp byte [ebx + 8], 5
jne 0x4ec303
mov byte [ebx + 8], 4
lea eax, [ebp - 0x18]
push eax
xor eax, eax
mov al, byte [ebx + 7]
mov dword [ebp - 0x1120], eax
mov byte [ebp - 0x111c], 0
xor eax, eax
mov al, byte [ebx + 8]
mov dword [ebp - 0x1118], eax
mov byte [ebp - 0x1114], 0
xor eax, eax
mov al, byte [ebx + 9]
mov dword [ebp - 0x1110], eax
mov byte [ebp - 0x110c], 0
lea edx, [ebp - 0x1120]
mov ecx, 2
mov eax, 0x4ed4d4
call fcn.0040a1f4
mov eax, dword [ebp - 0x58]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
je case.0x4eba1e.0
mov edx, dword [ebp - 0x18]
mov eax, ebx
call fcn.004e3904
mov eax, dword [ebp - 0x58]
movzx edx, word [eax + 5]
mov eax, ebx
call fcn.004e3ef0
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 1]
mov edx, dword [0x4f8160]
cmp eax, dword [edx]
jne 0x4ec3be
call sub.kernel32.dll_GetTickCount_1
add eax, 0x1388
mov dword [0x4f808c], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, eax
add edx, 0x1388
mov eax, dword [0x4f8654]
mov eax, dword [eax]
call fcn.004b4758
mov eax, dword [0x4f821c]
mov eax, dword [eax]
cmp byte [eax + 0x139], 0
je case.0x4eba1e.0
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 1]
mov ecx, 0xa
cdq
idiv ecx
test edx, edx
je case.0x4eba1e.0
call sub.kernel32.dll_GetTickCount_1
xor edx, edx
push edx
push eax
mov eax, dword [0x4f821c]
mov eax, dword [eax]
mov eax, dword [eax + 0x23c]
cdq
cmp edx, dword [esp + 4]
jne 0x4ec412
cmp eax, dword [esp]
pop edx
pop eax
jae case.0x4eba1e.0
jmp 0x4ec41a
pop edx
pop eax
jge case.0x4eba1e.0
call fcn.004b31dc
mov ecx, eax
test ecx, ecx
je 0x4ec46f
mov ax, word [ecx + 0x5a]
mov word [ebp - 2], ax
mov ax, word [ecx + 0x5e]
mov word [ebp - 4], ax
movzx eax, word [ebp - 2]
mov edx, dword [0x4f87d0]
mov edx, dword [edx]
sub eax, dword [edx + 0x38438]
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jge 0x4ec46f
movzx eax, word [ebp - 4]
mov edx, dword [0x4f87d0]
mov edx, dword [edx]
sub eax, dword [edx + 0x3843c]
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jge 0x4ec46f
mov ebx, ecx
mov ax, word [ebx + 0x5a]
mov word [ebp - 2], ax
mov ax, word [ebx + 0x5e]
mov word [ebp - 4], ax
lea ecx, [ebp - 4]
lea edx, [ebp - 2]
mov ax, word [ebx + 0x418]
call fcn.00499e10
movzx eax, word [ebp - 2]
mov edx, dword [0x4f87d0]
mov edx, dword [edx]
sub eax, dword [edx + 0x38438]
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jge case.0x4eba1e.0
movzx eax, word [ebp - 4]
mov edx, dword [0x4f87d0]
mov edx, dword [edx]
sub eax, dword [edx + 0x3843c]
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jge case.0x4eba1e.0
mov edx, dword [0x4f8160]
mov edx, dword [edx]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ecx, eax
test ecx, ecx
je case.0x4eba1e.0
test ecx, ecx
je 0x4ec4fb
cmp ebx, ecx
je case.0x4eba1e.0
mov eax, dword [ebx + 0x414]
mov edx, dword [0x4f87c4]
mov dword [edx], eax
mov byte [0x562a50], 0x15
mov byte [0x562a51], 3
mov eax, dword [ebx + 0x414]
mov dword [0x562a53], eax
cmp byte [ebx + 0x41c], 3
jne 0x4ec535
mov al, byte [0x4ed4e0]
mov byte [0x562a52], al
mov word [0x562a57], 0
call sub.kernel32.dll_GetTickCount_1
mov edx, eax
add edx, 0xc8
mov eax, dword [0x4f821c]
mov eax, dword [eax]
call fcn.004b40ac
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov al, byte [eax + 5]
dec al
je 0x4ec575
sub al, 4
je 0x4ec5a5
jmp case.0x4eba1e.0
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
je case.0x4eba1e.0
mov eax, dword [ebp - 0x5c]
xor edx, edx
mov dl, byte [eax + 6]
mov eax, ebx
call fcn.004e3d9c
jmp case.0x4eba1e.0
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5554
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je case.0x4eba1e.0
mov eax, dword [ebp - 0x5c]
xor ecx, ecx
mov cl, byte [eax + 6]
mov edx, 0x1b
mov eax, dword [ebp - 0x24]
call fcn.004e2c4c
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
add eax, 5
call fcn.00465ab8
lea eax, [ebp - 0x1220]
mov edx, dword [ebp - 0x18]
mov ecx, 0xff
call fcn.00404df8
lea edx, [ebp - 0x1220]
lea eax, [ebp - 0x1e]
mov cl, 1
call fcn.00403500
mov eax, dword [0x4f837c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
call fcn.004c6894
test al, al
jne case.0x4eba1e.0
lea ecx, [ebp - 0x1c]
lea eax, [ebp - 0x18]
mov edx, 0x4ed4ec
call fcn.004658d4
cmp dword [ebp - 0x18], 0
je 0x4ec66b
push dword [ebp - 0x1c]
push 0x4ed4ec
lea edx, [ebp - 0x1224]
mov eax, dword [ebp - 0x18]
call fcn.0049eba8
push dword [ebp - 0x1224]
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00404edc
mov eax, dword [ebp - 0x4c]
movzx edx, word [eax + 3]
cmp edx, 0x12
jg 0x4ec6d5
je 0x4ec740
cmp edx, 0x11
ja case.0x4ec686.2
jmp dword [edx*4 + 0x4ec68d]
sub edx, 0x13
je 0x4ec718
dec edx
je 0x4ec6f4
sub edx, 0x4e
je 0x4ec8a5
sub edx, 3
je 0x4ec8cd
jmp case.0x4ec686.2
mov eax, dword [0x4f83f8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004c5cf8
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
movzx ecx, word [eax + 1]
mov eax, dword [0x4f8158]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004c5074
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
movzx ecx, word [eax + 1]
mov eax, dword [0x4f83f4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004e0b00
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
cmp word [eax + 1], 1
jne 0x4ec784
movzx ecx, word [eax + 1]
mov eax, dword [0x4f82f4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004b28f4
jmp 0x4ec793
mov eax, dword [0x4f8134]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004dda18
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
mov eax, dword [0x4f87b0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004e00c4
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
movzx edx, word [eax + 1]
mov eax, dword [0x4f82d0]
mov eax, dword [eax]
call fcn.004b7240
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
cmp word [eax + 1], 0x63
jne case.0x4ec686.2
mov ecx, dword [0x4f87a0]
mov ecx, dword [ecx]
mov eax, dword [0x4f87e4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004a8ce0
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
mov ax, word [eax + 1]
sub ax, 1
jb 0x4ec83e
je 0x4ec852
dec ax
je 0x4ec878
jmp case.0x4ec686.2
mov eax, dword [0x4f84e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004deba0
jmp case.0x4eba1e.0
lea eax, [ebp - 0x1228]
mov edx, dword [ebp - 0x1c]
call fcn.004053b4
mov eax, dword [ebp - 0x1228]
call fcn.004053c4
push eax
push 0
call sub.URLMON.DLL_HlinkNavigateString
jmp case.0x4eba1e.0
push 1
mov eax, dword [ebp - 0x1c]
call fcn.0040501c
mov edx, eax
lea eax, [ebp - 0x122c]
call fcn.00404d54
mov edx, dword [ebp - 0x122c]
mov eax, dword [0x4f84b0]
mov eax, dword [eax]
xor ecx, ecx
call fcn.004f076c
jmp case.0x4ec686.2
movzx ecx, word [eax + 1]
mov eax, dword [0x4f8300]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004b8540
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
mov edx, dword [ebp - 0x1c]
mov eax, 0x4ed4f8
call fcn.00405160
dec eax
jne 0x4ec916
mov eax, dword [0x4f8300]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004b81e0
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 3]
push eax
mov eax, dword [ebp - 0x4c]
movzx ecx, word [eax + 1]
mov eax, dword [0x4f85a4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004a7f94
test al, al
je 0x4ec94d
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
mov eax, dword [0x4f85e0]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004ade14
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax + 3]
push eax
mov eax, dword [ebp - 0x4c]
movzx ecx, word [eax + 1]
mov eax, dword [0x4f87e4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004a8938
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x2c], eax
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
add eax, 6
call fcn.00465ab8
lea eax, [ebp - 0x1230]
push eax
lea edx, [ebp - 0x1c]
mov cl, 0x3a
mov eax, dword [ebp - 0x18]
call fcn.00465920
mov edx, dword [ebp - 0x1230]
lea eax, [ebp - 0x18]
call fcn.00404be4
lea edx, [ebp - 0x1234]
mov eax, dword [ebp - 0x18]
call fcn.0049eba8
mov edx, dword [ebp - 0x1234]
lea eax, [ebp - 0x18]
call fcn.00404be4
push dword [ebp - 0x1c]
push 0x4ed50c
push dword [ebp - 0x18]
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00404edc
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
jne 0x4eca38
push 0
mov cx, 0x1c
mov dx, 0x1c
mov ax, 0x1c
call fcn.0046a99c
movzx ecx, ax
mov eax, dword [0x4f87e4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004a8938
jmp 0x4eca79
test ebx, ebx
je 0x4eca79
mov eax, dword [0x4f86e8]
cmp byte [eax], 0
je 0x4eca79
mov edx, dword [ebp - 0x1c]
mov eax, ebx
call fcn.004e3814
test al, al
jne 0x4eca79
push 0
mov cx, 0x1c
mov dx, 0x1c
mov ax, 0x1c
call fcn.0046a99c
movzx ecx, ax
mov eax, dword [0x4f87e4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1c]
call fcn.004a8938
lea eax, [ebp - 0x18]
call fcn.00404b4c
lea eax, [ebp - 0x1c]
call fcn.00404b4c
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
je case.0x4eba1e.0
lea edx, [ebp - 0x1238]
mov eax, dword [ebp - 0x2c]
add eax, 6
call fcn.00465ab8
mov edx, dword [ebp - 0x1238]
mov eax, ebx
call fcn.004e3814
jmp case.0x4eba1e.0
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e4ef0
lea eax, [ebx + 2]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
movzx eax, word [eax + 0x2b]
mov edx, dword [ebp - 0x30]
xor dword [edx + 0x27], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x27]
mov edx, dword [0x4f8160]
mov dword [edx], eax
lea edx, [ebp - 0x123c]
mov eax, dword [ebp - 0x30]
add eax, 0x14
call fcn.00409cdc
mov edx, dword [ebp - 0x123c]
mov eax, dword [0x4f8210]
call fcn.00404ba0
lea edx, [ebp - 0x1240]
mov eax, dword [ebp - 0x30]
add eax, 0x6a
call fcn.00409cdc
mov edx, dword [ebp - 0x1240]
mov eax, dword [0x4f86b4]
mov eax, dword [eax]
mov eax, dword [eax + 0x37c]
call fcn.004417f8
lea edx, [ebp - 0x1244]
mov eax, dword [ebp - 0x30]
add eax, 0x2f
call fcn.00409cdc
mov edx, dword [ebp - 0x1244]
mov eax, dword [0x4f860c]
mov eax, dword [eax]
call fcn.00498bb0
lea edx, [ebp - 0x1248]
mov eax, dword [ebp - 0x30]
add eax, 0x42
call fcn.00409cdc
mov edx, dword [ebp - 0x1248]
mov eax, dword [0x4f87cc]
mov eax, dword [eax]
call fcn.004992f0
lea edx, [ebp - 0x124c]
mov eax, dword [ebp - 0x30]
add eax, 0x55
call fcn.00409cdc
mov edx, dword [ebp - 0x124c]
mov eax, dword [0x4f8150]
mov eax, dword [eax]
call fcn.00498bb0
mov eax, dword [ebp - 0x30]
movzx eax, word [eax + 0x2d]
push eax
lea edx, [ebp - 0x1250]
mov eax, dword [ebp - 0x30]
inc eax
call fcn.00409cdc
mov edx, dword [ebp - 0x1250]
mov eax, dword [ebp - 0x30]
movzx ecx, word [eax + 0x2b]
mov eax, dword [0x4f87d0]
mov eax, dword [eax]
call fcn.004e7150
mov eax, dword [ebp - 0x30]
movzx eax, word [eax + 0x2d]
mov ecx, eax
shl ecx, 3
lea ecx, [ecx + ecx*2]
mov eax, dword [ebp - 0x30]
movzx eax, word [eax + 0x2b]
mov edx, eax
shl edx, 5
mov eax, dword [0x4f8240]
mov eax, dword [eax]
call fcn.004e8c48
mov eax, dword [ebp - 0x30]
movzx ecx, word [eax + 0x2d]
mov eax, dword [ebp - 0x30]
movzx edx, word [eax + 0x2b]
mov eax, dword [0x4f87d0]
mov eax, dword [eax]
call fcn.004e6bdc
mov eax, dword [0x4f8240]
mov eax, dword [eax]
mov eax, dword [eax + 0x48]
xor edx, edx
call fcn.0046abec
mov eax, dword [0x4f87d0]
mov eax, dword [eax]
mov byte [eax + 0x38444], 1
lea eax, [ebp - 0x18]
mov edx, dword [0x4f8210]
mov edx, dword [edx]
call fcn.00404be4
lea eax, [ebp - 0x1254]
push eax
lea edx, [ebp - 0x1c]
mov cl, 0x2c
mov eax, dword [ebp - 0x18]
call fcn.00465920
mov edx, dword [ebp - 0x1254]
lea eax, [ebp - 0x18]
call fcn.00404be4
mov eax, dword [0x4f82f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, dword [ebp - 0x1c]
call fcn.0046f3b4
mov eax, dword [0x4f82f4]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
mov edx, dword [ebp - 0x18]
call fcn.0046f3b4
mov byte [0x4f8064], 0
mov eax, dword [0x4f8378]
mov eax, dword [eax]
xor edx, edx
call fcn.0045adcc
mov eax, dword [0x4f86b4]
mov eax, dword [eax]
mov dl, 1
call fcn.0045adcc
mov eax, dword [0x4f86b4]
mov eax, dword [eax]
mov eax, dword [eax + 0x328]
mov edx, dword [eax]
call dword [edx + 0xc4]
mov eax, dword [0x4f86a4]
mov eax, dword [eax]
mov byte [eax + 0x22], 0
mov eax, dword [0x4f821c]
mov eax, dword [eax]
call fcn.004b39c4
mov eax, dword [0x4f8654]
mov eax, dword [eax]
call fcn.004b4448
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x90], eax
mov esi, dword [ebp - 0x90]
lea eax, [ebp - 0xdd]
xor ecx, ecx
mov edx, 0x15
call fcn.0040365c
mov byte [ebp - 0xdd], 0
xor edi, edi
lea ebx, [ebp - 0xdc]
cmp byte [esi + edi + 0x23], 0
jne 0x4ecd3d
cmp byte [esi + edi + 0x37], 0
je 0x4ecd57
mov al, byte [esi + edi + 0x23]
mov byte [ebx], al
mov al, byte [esi + edi + 0x37]
mov byte [ebx + 0xa], al
inc byte [ebp - 0xdd]
inc edi
inc ebx
cmp edi, 0xa
jne 0x4ecd2f
movzx eax, word [esi + 0x18]
push eax
movzx eax, word [esi + 0x1a]
push eax
movzx eax, word [esi + 0x1c]
push eax
mov ax, word [esi + 0x1f]
push eax
mov ax, word [esi + 0x21]
push eax
mov al, byte [esi + 0x1e]
push eax
lea eax, [ebp - 0xdd]
push eax
lea edx, [ebp - 0x1258]
lea eax, [esi + 5]
call fcn.00409cdc
mov edx, dword [ebp - 0x1258]
mov ecx, dword [esi + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5400
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov dx, word [eax + 6]
push edx
mov dx, word [eax + 8]
push edx
mov cl, byte [eax + 5]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e54fc
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5598
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx + 1]
push eax
movzx eax, word [ebx + 0x18]
push eax
movzx eax, word [ebx + 0x1a]
push eax
movzx eax, word [ebx + 0x1c]
push eax
xor eax, eax
mov al, byte [ebx + 0x1e]
push eax
lea edx, [ebp - 0x125c]
lea eax, [ebx + 5]
call fcn.00409cdc
mov edx, dword [ebp - 0x125c]
mov cl, byte [ebx + 0x1f]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5204
lea edx, [ebp - 0x1260]
lea eax, [ebx + 5]
call fcn.00409cdc
mov edx, dword [ebp - 0x1260]
mov eax, dword [0x4f82d0]
mov eax, dword [eax]
mov cl, 1
call fcn.004b6214
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e53c4
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x34], eax
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
movzx eax, word [eax + 7]
mov edx, dword [ebp - 0x34]
xor dword [edx + 1], eax
mov eax, dword [ebp - 0x34]
mov ax, word [eax + 7]
mov edx, dword [ebp - 0x34]
xor word [edx + 9], ax
mov eax, dword [esi + 1]
mov edx, dword [0x4f8160]
cmp eax, dword [edx]
je 0x4eceb7
lea eax, [ebx + 2]
mov edx, 0xb
call fcn.004dcd1c
movzx eax, word [esi + 5]
push eax
movzx eax, word [esi + 7]
push eax
movzx eax, word [esi + 9]
push eax
lea eax, [esi + 0xb]
push eax
lea edx, [ebp - 0x1268]
lea eax, [esi + 0x3e]
call fcn.00465ab8
mov edx, dword [ebp - 0x1268]
lea eax, [ebp - 0x1264]
call fcn.004053b4
mov edx, dword [ebp - 0x1264]
mov ecx, dword [esi + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e4f88
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e51c4
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x48], eax
mov esi, dword [ebp - 0x48]
mov edx, dword [esi + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
je case.0x4eba1e.0
movzx eax, word [esi + 9]
push eax
movzx ecx, word [esi + 7]
movzx edx, word [esi + 5]
mov eax, ebx
call fcn.004e3db4
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x40], eax
mov esi, dword [ebp - 0x40]
mov eax, dword [esi + 1]
mov edx, dword [0x4f8160]
cmp eax, dword [edx]
je 0x4ecf7e
lea eax, [ebx + 2]
mov edx, 0xb
call fcn.004dcd1c
mov edx, dword [esi + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
je case.0x4eba1e.0
movzx eax, word [esi + 9]
push eax
movzx ecx, word [esi + 7]
movzx edx, word [esi + 5]
mov eax, ebx
call fcn.004e3db4
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x44], eax
mov esi, dword [ebp - 0x44]
mov eax, dword [esi + 1]
mov edx, dword [0x4f8160]
cmp eax, dword [edx]
je 0x4ecfd3
lea eax, [ebx + 2]
mov edx, 0xb
call fcn.004dcd1c
mov eax, dword [ebp - 0x44]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
je case.0x4eba1e.0
movzx eax, word [esi + 9]
push eax
movzx ecx, word [esi + 7]
movzx edx, word [esi + 5]
mov eax, ebx
call fcn.004e3e6c
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x44], eax
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
je case.0x4eba1e.0
movzx eax, word [esi + 9]
push eax
movzx ecx, word [esi + 7]
movzx edx, word [esi + 5]
mov eax, ebx
call fcn.004e3edc
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
je 0x4ed076
mov eax, dword [ebp - 0x50]
lea edx, [eax + 5]
mov eax, ebx
call fcn.004e3c00
jmp case.0x4eba1e.0
mov eax, dword [ebp - 0x50]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e52dc
test eax, eax
je 0x4ed0a5
mov edx, dword [ebp - 0x50]
xor ecx, ecx
mov cl, byte [edx + 0x2c]
mov edx, dword [ebp - 0x50]
movzx edx, word [edx + 0x2a]
call fcn.004e2f78
jmp case.0x4eba1e.0
mov eax, dword [ebp - 0x50]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5554
test eax, eax
je case.0x4eba1e.0
mov edx, dword [ebp - 0x50]
cmp word [edx + 0x33], 0
jbe case.0x4eba1e.0
mov edx, dword [ebp - 0x50]
mov cl, byte [edx + 0x35]
mov edx, dword [ebp - 0x50]
movzx edx, word [edx + 0x33]
call fcn.004e2bb8
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
je 0x4ed111
mov edx, dword [ebp - 0x54]
mov eax, ebx
call fcn.004e3880
jmp case.0x4eba1e.0
mov eax, dword [ebp - 0x54]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e52dc
test eax, eax
je 0x4ed134
mov edx, dword [ebp - 0x54]
call fcn.004e3160
jmp case.0x4eba1e.0
mov eax, dword [ebp - 0x54]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5554
test eax, eax
je case.0x4eba1e.0
mov edx, dword [ebp - 0x54]
call fcn.004e2bf8
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0xa4], eax
mov ebx, dword [ebp - 0xa4]
mov eax, dword [0x4f87a0]
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x126c]
lea eax, [ebx + 1]
call fcn.00409cdc
mov edx, dword [ebp - 0x126c]
mov cx, word [ebx + 0x14]
mov eax, dword [0x4f8668]
mov eax, dword [eax]
call fcn.004d8404
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f81cc]
mov eax, dword [eax]
call fcn.004af828
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f8658]
mov eax, dword [eax]
call fcn.004c3248
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f8124]
mov eax, dword [eax]
call fcn.004b0e50
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f80f0]
mov eax, dword [eax]
call fcn.004ad14c
jmp case.0x4eba1e.0
mov byte [ebp - 0x10fb], 0x2f
mov eax, dword [0x562a78]
mov dword [ebp - 0x10fa], eax
mov eax, dword [0x562a7c]
mov dword [ebp - 0x10f6], eax
lea eax, [ebp - 0x1270]
mov edx, dword [0x562a74]
call fcn.00404d54
mov edx, dword [ebp - 0x1270]
lea eax, [ebp - 0x10f2]
call fcn.00465a30
lea eax, [ebp - 0x10f2]
call fcn.00465af0
movzx eax, ax
add eax, 9
lea ecx, [ebp - 0x10fb]
mov edx, dword [0x4f84b0]
mov edx, dword [edx]
xchg edx, eax
call fcn.004f05fc
jmp case.0x4eba1e.0
cmp byte [esi + 0x31c], 0
je 0x4ed28e
lea eax, [ebx + 2]
mov dword [ebp - 0x78], eax
lea edx, [ebp - 0x1274]
mov eax, dword [ebp - 0x78]
inc eax
call fcn.00465ab8
mov edx, dword [ebp - 0x1274]
mov eax, dword [0x4f86b4]
mov eax, dword [eax]
call fcn.004d525c
mov al, byte [esi + 0x31c]
xor al, 1
mov byte [esi + 0x31c], al
push 0
push 2
call sub.kernel32.dll_GetTickCount_1
xor edx, edx
push edx
push eax
mov eax, dword [esi + 0x314]
cdq
sub dword [esp], eax
sbb dword [esp + 4], edx
pop eax
pop edx
test edx, edx
jge 0x4ed2b6
neg eax
adc edx, 0
neg edx
call fcn.004059f8
mov dword [esi + 0x318], eax
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0xac], eax
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0xac]
inc eax
call fcn.00465ab8
mov ecx, dword [0x4f87a0]
mov ecx, dword [ecx]
mov eax, dword [0x4f87e4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
call fcn.004a8ce0
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f8310]
mov eax, dword [eax]
call fcn.004c286c
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f8208]
mov eax, dword [eax]
call fcn.004c1e70
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
test ebx, ebx
je case.0x4eba1e.0
mov eax, dword [0x4f87a0]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax + 8]
push eax
mov eax, dword [ebp - 0xb0]
mov cl, byte [eax + 7]
mov eax, dword [ebp - 0xb0]
movzx edx, word [eax + 5]
dec edx
mov eax, ebx
call fcn.004e33dc
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax + 1]
mov edx, dword [0x4f8160]
cmp eax, dword [edx]
jne case.0x4eba1e.0
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax + 1]
mov eax, dword [0x4f814c]
mov eax, dword [eax]
call fcn.004e5174
mov ebx, eax
mov eax, dword [ebp - 0xb4]
mov al, byte [eax + 5]
mov byte [ebx + 0x449], al
jmp case.0x4eba1e.0
lea eax, [ebx + 2]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov al, byte [eax + 1]
dec al
jne case.0x4eba1e.0
mov eax, dword [ebp - 0xb8]
mov edx, dword [eax + 2]
mov eax, dword [0x4f8240]
mov eax, dword [eax]
mov ecx, 4
call fcn.004e9b2c
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f82f4]
mov eax, dword [eax]
call fcn.004b1c54
jmp case.0x4eba1e.0
mov edx, ebx
mov eax, dword [0x4f8754]
mov eax, dword [eax]
call fcn.004b2da0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ed48c
lea eax, [ebp - 0x1274]
mov edx, 4
call fcn.00404b70
lea eax, [ebp - 0x1264]
call fcn.00405268
lea eax, [ebp - 0x1260]
mov edx, 0xe
call fcn.00404b70
lea eax, [ebp - 0x1228]
call fcn.00405268
lea eax, [ebp - 0x1224]
call fcn.00404b4c
lea eax, [ebp - 0x1108]
mov edx, 3
call fcn.00404b70
lea eax, [ebp - 0xc8]
call fcn.00405268
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00404b70
ret