Function at 0x4d6880
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1814
call fcn.004fbbc0
mov eax, dword [0x801aa8]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x58c2ec
push 0x58c30c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x4d68b8
call dword [sym.imp.USER32.dll_SetProcessDPIAware]
push 0x58c318
call fcn.004d6780
add esp, 4
push 0x58c31c
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x12f0], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0x1134]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1138], 1
jmp 0x4d6908
mov ecx, dword [ebp - 0x1138]
add ecx, 1
mov dword [ebp - 0x1138], ecx
cmp dword [ebp - 0x1138], 0x2d
jae 0x4d6933
call fcn.00510170
and eax, 0x800000ff
jns 0x4d6924
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1138]
mov byte [ebp + edx - 0x1134], al
jmp 0x4d68f9
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x1134]
test edx, edx
je 0x4d6958
lea eax, [ebp - 0x1134]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d696a
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1734], eax
mov dword [ebp - 0x1730], edx
mov dword [ebp - 0x180c], 0x1d
xor ecx, ecx
mov dword [ebp - 0x6e4], ecx
mov dword [ebp - 0x6e0], ecx
mov dword [ebp - 0x6dc], ecx
mov dword [ebp - 0x6d8], ecx
mov dword [ebp - 0x6d4], ecx
mov dword [ebp - 0x6d0], ecx
mov dword [ebp - 0x6cc], ecx
mov byte [ebp - 0x6c8], cl
mov dword [ebp - 0x113c], 1
jmp 0x4d69c1
mov edx, dword [ebp - 0x113c]
add edx, 1
mov dword [ebp - 0x113c], edx
cmp dword [ebp - 0x113c], 0x1d
jae 0x4d69ec
call fcn.00510170
and eax, 0x800000ff
jns 0x4d69dd
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x113c]
mov byte [ebp + ecx - 0x6e4], al
jmp 0x4d69b2
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x6e4]
test ecx, ecx
je 0x4d6a11
lea edx, [ebp - 0x6e4]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d6a23
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x12f8], eax
mov dword [ebp - 0x12f4], edx
mov dword [ebp - 0x1808], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0x1104]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1140], 1
jmp 0x4d6a5b
mov ecx, dword [ebp - 0x1140]
add ecx, 1
mov dword [ebp - 0x1140], ecx
cmp dword [ebp - 0x1140], 0x2d
jae 0x4d6a86
call fcn.00510170
and eax, 0x800000ff
jns 0x4d6a77
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1140]
mov byte [ebp + edx - 0x1104], al
jmp 0x4d6a4c
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x1104]
test edx, edx
je 0x4d6aab
lea eax, [ebp - 0x1104]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d6abd
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1300], eax
mov dword [ebp - 0x12fc], edx
mov dword [ebp - 0x1804], 0x1d
xor ecx, ecx
mov dword [ebp - 0x6c4], ecx
mov dword [ebp - 0x6c0], ecx
mov dword [ebp - 0x6bc], ecx
mov dword [ebp - 0x6b8], ecx
mov dword [ebp - 0x6b4], ecx
mov dword [ebp - 0x6b0], ecx
mov dword [ebp - 0x6ac], ecx
mov byte [ebp - 0x6a8], cl
mov dword [ebp - 0x1144], 1
jmp 0x4d6b14
mov edx, dword [ebp - 0x1144]
add edx, 1
mov dword [ebp - 0x1144], edx
cmp dword [ebp - 0x1144], 0x1d
jae 0x4d6b3f
call fcn.00510170
and eax, 0x800000ff
jns 0x4d6b30
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x1144]
mov byte [ebp + ecx - 0x6c4], al
jmp 0x4d6b05
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x6c4]
test ecx, ecx
je 0x4d6b64
lea edx, [ebp - 0x6c4]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d6b76
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1308], eax
mov dword [ebp - 0x1304], edx
mov dword [ebp - 0x1800], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0x10d4]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1148], 1
jmp 0x4d6bae
mov ecx, dword [ebp - 0x1148]
add ecx, 1
mov dword [ebp - 0x1148], ecx
cmp dword [ebp - 0x1148], 0x2d
jae 0x4d6bd9
call fcn.00510170
and eax, 0x800000ff
jns 0x4d6bca
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1148]
mov byte [ebp + edx - 0x10d4], al
jmp 0x4d6b9f
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x10d4]
test edx, edx
je 0x4d6bfe
lea eax, [ebp - 0x10d4]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d6c10
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1310], eax
mov dword [ebp - 0x130c], edx
mov dword [ebp - 0x17fc], 0x1d
xor ecx, ecx
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x6a0], ecx
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x698], ecx
mov dword [ebp - 0x694], ecx
mov dword [ebp - 0x690], ecx
mov dword [ebp - 0x68c], ecx
mov byte [ebp - 0x688], cl
mov dword [ebp - 0x114c], 1
jmp 0x4d6c67
mov edx, dword [ebp - 0x114c]
add edx, 1
mov dword [ebp - 0x114c], edx
cmp dword [ebp - 0x114c], 0x1d
jae 0x4d6c92
call fcn.00510170
and eax, 0x800000ff
jns 0x4d6c83
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x114c]
mov byte [ebp + ecx - 0x6a4], al
jmp 0x4d6c58
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x6a4]
test ecx, ecx
je 0x4d6cb7
lea edx, [ebp - 0x6a4]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d6cc9
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1318], eax
mov dword [ebp - 0x1314], edx
mov dword [ebp - 0x17f8], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0x10a4]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1150], 1
jmp 0x4d6d01
mov ecx, dword [ebp - 0x1150]
add ecx, 1
mov dword [ebp - 0x1150], ecx
cmp dword [ebp - 0x1150], 0x2d
jae 0x4d6d2c
call fcn.00510170
and eax, 0x800000ff
jns 0x4d6d1d
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1150]
mov byte [ebp + edx - 0x10a4], al
jmp 0x4d6cf2
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x10a4]
test edx, edx
je 0x4d6d51
lea eax, [ebp - 0x10a4]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d6d63
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1320], eax
mov dword [ebp - 0x131c], edx
mov dword [ebp - 0x17f4], 0x1d
xor ecx, ecx
mov dword [ebp - 0x684], ecx
mov dword [ebp - 0x680], ecx
mov dword [ebp - 0x67c], ecx
mov dword [ebp - 0x678], ecx
mov dword [ebp - 0x674], ecx
mov dword [ebp - 0x670], ecx
mov dword [ebp - 0x66c], ecx
mov byte [ebp - 0x668], cl
mov dword [ebp - 0x1154], 1
jmp 0x4d6dba
mov edx, dword [ebp - 0x1154]
add edx, 1
mov dword [ebp - 0x1154], edx
cmp dword [ebp - 0x1154], 0x1d
jae 0x4d6de5
call fcn.00510170
and eax, 0x800000ff
jns 0x4d6dd6
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x1154]
mov byte [ebp + ecx - 0x684], al
jmp 0x4d6dab
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x684]
test ecx, ecx
je 0x4d6e0a
lea edx, [ebp - 0x684]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d6e1c
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1328], eax
mov dword [ebp - 0x1324], edx
mov dword [ebp - 0x17f0], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0x1074]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1158], 1
jmp 0x4d6e54
mov ecx, dword [ebp - 0x1158]
add ecx, 1
mov dword [ebp - 0x1158], ecx
cmp dword [ebp - 0x1158], 0x2d
jae 0x4d6e7f
call fcn.00510170
and eax, 0x800000ff
jns 0x4d6e70
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1158]
mov byte [ebp + edx - 0x1074], al
jmp 0x4d6e45
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x1074]
test edx, edx
je 0x4d6ea4
lea eax, [ebp - 0x1074]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d6eb6
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1330], eax
mov dword [ebp - 0x132c], edx
mov dword [ebp - 0x17ec], 0x1d
xor ecx, ecx
mov dword [ebp - 0x664], ecx
mov dword [ebp - 0x660], ecx
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x658], ecx
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x650], ecx
mov dword [ebp - 0x64c], ecx
mov byte [ebp - 0x648], cl
mov dword [ebp - 0x115c], 1
jmp 0x4d6f0d
mov edx, dword [ebp - 0x115c]
add edx, 1
mov dword [ebp - 0x115c], edx
cmp dword [ebp - 0x115c], 0x1d
jae 0x4d6f38
call fcn.00510170
and eax, 0x800000ff
jns 0x4d6f29
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x115c]
mov byte [ebp + ecx - 0x664], al
jmp 0x4d6efe
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x664]
test ecx, ecx
je 0x4d6f5d
lea edx, [ebp - 0x664]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d6f6f
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1338], eax
mov dword [ebp - 0x1334], edx
mov dword [ebp - 0x17e8], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0x1044]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1160], 1
jmp 0x4d6fa7
mov ecx, dword [ebp - 0x1160]
add ecx, 1
mov dword [ebp - 0x1160], ecx
cmp dword [ebp - 0x1160], 0x2d
jae 0x4d6fd2
call fcn.00510170
and eax, 0x800000ff
jns 0x4d6fc3
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1160]
mov byte [ebp + edx - 0x1044], al
jmp 0x4d6f98
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x1044]
test edx, edx
je 0x4d6ff7
lea eax, [ebp - 0x1044]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d7009
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1340], eax
mov dword [ebp - 0x133c], edx
mov dword [ebp - 0x17e4], 0x1d
xor ecx, ecx
mov dword [ebp - 0x644], ecx
mov dword [ebp - 0x640], ecx
mov dword [ebp - 0x63c], ecx
mov dword [ebp - 0x638], ecx
mov dword [ebp - 0x634], ecx
mov dword [ebp - 0x630], ecx
mov dword [ebp - 0x62c], ecx
mov byte [ebp - 0x628], cl
mov dword [ebp - 0x1164], 1
jmp 0x4d7060
mov edx, dword [ebp - 0x1164]
add edx, 1
mov dword [ebp - 0x1164], edx
cmp dword [ebp - 0x1164], 0x1d
jae 0x4d708b
call fcn.00510170
and eax, 0x800000ff
jns 0x4d707c
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x1164]
mov byte [ebp + ecx - 0x644], al
jmp 0x4d7051
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x644]
test ecx, ecx
je 0x4d70b0
lea edx, [ebp - 0x644]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d70c2
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1348], eax
mov dword [ebp - 0x1344], edx
mov dword [ebp - 0x17e0], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0x1014]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1168], 1
jmp 0x4d70fa
mov ecx, dword [ebp - 0x1168]
add ecx, 1
mov dword [ebp - 0x1168], ecx
cmp dword [ebp - 0x1168], 0x2d
jae 0x4d7125
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7116
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1168]
mov byte [ebp + edx - 0x1014], al
jmp 0x4d70eb
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0x1014]
test edx, edx
je 0x4d714a
lea eax, [ebp - 0x1014]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d715c
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1350], eax
mov dword [ebp - 0x134c], edx
mov dword [ebp - 0x17dc], 0x1d
xor ecx, ecx
mov dword [ebp - 0x624], ecx
mov dword [ebp - 0x620], ecx
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x618], ecx
mov dword [ebp - 0x614], ecx
mov dword [ebp - 0x610], ecx
mov dword [ebp - 0x60c], ecx
mov byte [ebp - 0x608], cl
mov dword [ebp - 0x116c], 1
jmp 0x4d71b3
mov edx, dword [ebp - 0x116c]
add edx, 1
mov dword [ebp - 0x116c], edx
cmp dword [ebp - 0x116c], 0x1d
jae 0x4d71de
call fcn.00510170
and eax, 0x800000ff
jns 0x4d71cf
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x116c]
mov byte [ebp + ecx - 0x624], al
jmp 0x4d71a4
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x624]
test ecx, ecx
je 0x4d7203
lea edx, [ebp - 0x624]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d7215
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1358], eax
mov dword [ebp - 0x1354], edx
mov dword [ebp - 0x17d8], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xfe4]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1170], 1
jmp 0x4d724d
mov ecx, dword [ebp - 0x1170]
add ecx, 1
mov dword [ebp - 0x1170], ecx
cmp dword [ebp - 0x1170], 0x2d
jae 0x4d7278
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7269
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1170]
mov byte [ebp + edx - 0xfe4], al
jmp 0x4d723e
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xfe4]
test edx, edx
je 0x4d729d
lea eax, [ebp - 0xfe4]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d72af
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1360], eax
mov dword [ebp - 0x135c], edx
mov dword [ebp - 0x17d4], 0x1d
xor ecx, ecx
mov dword [ebp - 0x604], ecx
mov dword [ebp - 0x600], ecx
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x5f8], ecx
mov dword [ebp - 0x5f4], ecx
mov dword [ebp - 0x5f0], ecx
mov dword [ebp - 0x5ec], ecx
mov byte [ebp - 0x5e8], cl
mov dword [ebp - 0x1174], 1
jmp 0x4d7306
mov edx, dword [ebp - 0x1174]
add edx, 1
mov dword [ebp - 0x1174], edx
cmp dword [ebp - 0x1174], 0x1d
jae 0x4d7331
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7322
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x1174]
mov byte [ebp + ecx - 0x604], al
jmp 0x4d72f7
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x604]
test ecx, ecx
je 0x4d7356
lea edx, [ebp - 0x604]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d7368
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1368], eax
mov dword [ebp - 0x1364], edx
mov dword [ebp - 0x17d0], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xfb4]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1178], 1
jmp 0x4d73a0
mov ecx, dword [ebp - 0x1178]
add ecx, 1
mov dword [ebp - 0x1178], ecx
cmp dword [ebp - 0x1178], 0x2d
jae 0x4d73cb
call fcn.00510170
and eax, 0x800000ff
jns 0x4d73bc
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1178]
mov byte [ebp + edx - 0xfb4], al
jmp 0x4d7391
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xfb4]
test edx, edx
je 0x4d73f0
lea eax, [ebp - 0xfb4]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d7402
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1370], eax
mov dword [ebp - 0x136c], edx
mov dword [ebp - 0x17cc], 0x1d
xor ecx, ecx
mov dword [ebp - 0x5e4], ecx
mov dword [ebp - 0x5e0], ecx
mov dword [ebp - 0x5dc], ecx
mov dword [ebp - 0x5d8], ecx
mov dword [ebp - 0x5d4], ecx
mov dword [ebp - 0x5d0], ecx
mov dword [ebp - 0x5cc], ecx
mov byte [ebp - 0x5c8], cl
mov dword [ebp - 0x117c], 1
jmp 0x4d7459
mov edx, dword [ebp - 0x117c]
add edx, 1
mov dword [ebp - 0x117c], edx
cmp dword [ebp - 0x117c], 0x1d
jae 0x4d7484
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7475
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x117c]
mov byte [ebp + ecx - 0x5e4], al
jmp 0x4d744a
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x5e4]
test ecx, ecx
je 0x4d74a9
lea edx, [ebp - 0x5e4]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d74bb
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1378], eax
mov dword [ebp - 0x1374], edx
mov dword [ebp - 0x17c8], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xf84]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1180], 1
jmp 0x4d74f3
mov ecx, dword [ebp - 0x1180]
add ecx, 1
mov dword [ebp - 0x1180], ecx
cmp dword [ebp - 0x1180], 0x2d
jae 0x4d751e
call fcn.00510170
and eax, 0x800000ff
jns 0x4d750f
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1180]
mov byte [ebp + edx - 0xf84], al
jmp 0x4d74e4
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xf84]
test edx, edx
je 0x4d7543
lea eax, [ebp - 0xf84]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d7555
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1380], eax
mov dword [ebp - 0x137c], edx
mov dword [ebp - 0x17c4], 0x1d
xor ecx, ecx
mov dword [ebp - 0x5c4], ecx
mov dword [ebp - 0x5c0], ecx
mov dword [ebp - 0x5bc], ecx
mov dword [ebp - 0x5b8], ecx
mov dword [ebp - 0x5b4], ecx
mov dword [ebp - 0x5b0], ecx
mov dword [ebp - 0x5ac], ecx
mov byte [ebp - 0x5a8], cl
mov dword [ebp - 0x1184], 1
jmp 0x4d75ac
mov edx, dword [ebp - 0x1184]
add edx, 1
mov dword [ebp - 0x1184], edx
cmp dword [ebp - 0x1184], 0x1d
jae 0x4d75d7
call fcn.00510170
and eax, 0x800000ff
jns 0x4d75c8
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x1184]
mov byte [ebp + ecx - 0x5c4], al
jmp 0x4d759d
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x5c4]
test ecx, ecx
je 0x4d75fc
lea edx, [ebp - 0x5c4]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d760e
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1388], eax
mov dword [ebp - 0x1384], edx
mov dword [ebp - 0x17c0], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xf54]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1188], 1
jmp 0x4d7646
mov ecx, dword [ebp - 0x1188]
add ecx, 1
mov dword [ebp - 0x1188], ecx
cmp dword [ebp - 0x1188], 0x2d
jae 0x4d7671
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7662
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1188]
mov byte [ebp + edx - 0xf54], al
jmp 0x4d7637
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xf54]
test edx, edx
je 0x4d7696
lea eax, [ebp - 0xf54]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d76a8
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1390], eax
mov dword [ebp - 0x138c], edx
mov dword [ebp - 0x17bc], 0x1d
xor ecx, ecx
mov dword [ebp - 0x5a4], ecx
mov dword [ebp - 0x5a0], ecx
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x598], ecx
mov dword [ebp - 0x594], ecx
mov dword [ebp - 0x590], ecx
mov dword [ebp - 0x58c], ecx
mov byte [ebp - 0x588], cl
mov dword [ebp - 0x118c], 1
jmp 0x4d76ff
mov edx, dword [ebp - 0x118c]
add edx, 1
mov dword [ebp - 0x118c], edx
cmp dword [ebp - 0x118c], 0x1d
jae 0x4d772a
call fcn.00510170
and eax, 0x800000ff
jns 0x4d771b
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x118c]
mov byte [ebp + ecx - 0x5a4], al
jmp 0x4d76f0
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x5a4]
test ecx, ecx
je 0x4d774f
lea edx, [ebp - 0x5a4]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d7761
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1398], eax
mov dword [ebp - 0x1394], edx
mov dword [ebp - 0x17b8], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xf24]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1190], 1
jmp 0x4d7799
mov ecx, dword [ebp - 0x1190]
add ecx, 1
mov dword [ebp - 0x1190], ecx
cmp dword [ebp - 0x1190], 0x2d
jae 0x4d77c4
call fcn.00510170
and eax, 0x800000ff
jns 0x4d77b5
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1190]
mov byte [ebp + edx - 0xf24], al
jmp 0x4d778a
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xf24]
test edx, edx
je 0x4d77e9
lea eax, [ebp - 0xf24]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d77fb
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13a0], eax
mov dword [ebp - 0x139c], edx
mov dword [ebp - 0x17b4], 0x1d
xor ecx, ecx
mov dword [ebp - 0x584], ecx
mov dword [ebp - 0x580], ecx
mov dword [ebp - 0x57c], ecx
mov dword [ebp - 0x578], ecx
mov dword [ebp - 0x574], ecx
mov dword [ebp - 0x570], ecx
mov dword [ebp - 0x56c], ecx
mov byte [ebp - 0x568], cl
mov dword [ebp - 0x1194], 1
jmp 0x4d7852
mov edx, dword [ebp - 0x1194]
add edx, 1
mov dword [ebp - 0x1194], edx
cmp dword [ebp - 0x1194], 0x1d
jae 0x4d787d
call fcn.00510170
and eax, 0x800000ff
jns 0x4d786e
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x1194]
mov byte [ebp + ecx - 0x584], al
jmp 0x4d7843
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x584]
test ecx, ecx
je 0x4d78a2
lea edx, [ebp - 0x584]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d78b4
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13a8], eax
mov dword [ebp - 0x13a4], edx
mov dword [ebp - 0x17b0], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xec4]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x1198], 1
jmp 0x4d78ec
mov ecx, dword [ebp - 0x1198]
add ecx, 1
mov dword [ebp - 0x1198], ecx
cmp dword [ebp - 0x1198], 0x2d
jae 0x4d7917
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7908
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x1198]
mov byte [ebp + edx - 0xec4], al
jmp 0x4d78dd
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xec4]
test edx, edx
je 0x4d793c
lea eax, [ebp - 0xec4]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d794e
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13b0], eax
mov dword [ebp - 0x13ac], edx
mov dword [ebp - 0x17ac], 0x1d
xor ecx, ecx
mov dword [ebp - 0x564], ecx
mov dword [ebp - 0x560], ecx
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x558], ecx
mov dword [ebp - 0x554], ecx
mov dword [ebp - 0x550], ecx
mov dword [ebp - 0x54c], ecx
mov byte [ebp - 0x548], cl
mov dword [ebp - 0x119c], 1
jmp 0x4d79a5
mov edx, dword [ebp - 0x119c]
add edx, 1
mov dword [ebp - 0x119c], edx
cmp dword [ebp - 0x119c], 0x1d
jae 0x4d79d0
call fcn.00510170
and eax, 0x800000ff
jns 0x4d79c1
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x119c]
mov byte [ebp + ecx - 0x564], al
jmp 0x4d7996
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x564]
test ecx, ecx
je 0x4d79f5
lea edx, [ebp - 0x564]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d7a07
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13b8], eax
mov dword [ebp - 0x13b4], edx
mov dword [ebp - 0x17a8], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xef4]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x11a0], 1
jmp 0x4d7a3f
mov ecx, dword [ebp - 0x11a0]
add ecx, 1
mov dword [ebp - 0x11a0], ecx
cmp dword [ebp - 0x11a0], 0x2d
jae 0x4d7a6a
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7a5b
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x11a0]
mov byte [ebp + edx - 0xef4], al
jmp 0x4d7a30
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xef4]
test edx, edx
je 0x4d7a8f
lea eax, [ebp - 0xef4]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d7aa1
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13c0], eax
mov dword [ebp - 0x13bc], edx
mov dword [ebp - 0x17a4], 0x1d
xor ecx, ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov byte [ebp - 0x28], cl
mov dword [ebp - 0x11a4], 1
jmp 0x4d7ae0
mov edx, dword [ebp - 0x11a4]
add edx, 1
mov dword [ebp - 0x11a4], edx
cmp dword [ebp - 0x11a4], 0x1d
jae 0x4d7b08
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7afc
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x11a4]
mov byte [ebp + ecx - 0x44], al
jmp 0x4d7ad1
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x44]
test ecx, ecx
je 0x4d7b27
lea edx, [ebp - 0x44]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d7b39
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13c8], eax
mov dword [ebp - 0x13c4], edx
mov dword [ebp - 0x17a0], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xe94]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x11a8], 1
jmp 0x4d7b71
mov ecx, dword [ebp - 0x11a8]
add ecx, 1
mov dword [ebp - 0x11a8], ecx
cmp dword [ebp - 0x11a8], 0x2d
jae 0x4d7b9c
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7b8d
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x11a8]
mov byte [ebp + edx - 0xe94], al
jmp 0x4d7b62
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xe94]
test edx, edx
je 0x4d7bc1
lea eax, [ebp - 0xe94]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d7bd3
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13d0], eax
mov dword [ebp - 0x13cc], edx
mov dword [ebp - 0x179c], 0x1d
xor ecx, ecx
mov dword [ebp - 0x544], ecx
mov dword [ebp - 0x540], ecx
mov dword [ebp - 0x53c], ecx
mov dword [ebp - 0x538], ecx
mov dword [ebp - 0x534], ecx
mov dword [ebp - 0x530], ecx
mov dword [ebp - 0x52c], ecx
mov byte [ebp - 0x528], cl
mov dword [ebp - 0x11ac], 1
jmp 0x4d7c2a
mov edx, dword [ebp - 0x11ac]
add edx, 1
mov dword [ebp - 0x11ac], edx
cmp dword [ebp - 0x11ac], 0x1d
jae 0x4d7c55
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7c46
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x11ac]
mov byte [ebp + ecx - 0x544], al
jmp 0x4d7c1b
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x544]
test ecx, ecx
je 0x4d7c7a
lea edx, [ebp - 0x544]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d7c8c
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13d8], eax
mov dword [ebp - 0x13d4], edx
mov dword [ebp - 0x1798], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xe64]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x11b0], 1
jmp 0x4d7cc4
mov ecx, dword [ebp - 0x11b0]
add ecx, 1
mov dword [ebp - 0x11b0], ecx
cmp dword [ebp - 0x11b0], 0x2d
jae 0x4d7cef
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7ce0
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x11b0]
mov byte [ebp + edx - 0xe64], al
jmp 0x4d7cb5
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xe64]
test edx, edx
je 0x4d7d14
lea eax, [ebp - 0xe64]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d7d26
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13e0], eax
mov dword [ebp - 0x13dc], edx
mov dword [ebp - 0x1794], 0x1d
xor ecx, ecx
mov dword [ebp - 0x524], ecx
mov dword [ebp - 0x520], ecx
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x518], ecx
mov dword [ebp - 0x514], ecx
mov dword [ebp - 0x510], ecx
mov dword [ebp - 0x50c], ecx
mov byte [ebp - 0x508], cl
mov dword [ebp - 0x11b4], 1
jmp 0x4d7d7d
mov edx, dword [ebp - 0x11b4]
add edx, 1
mov dword [ebp - 0x11b4], edx
cmp dword [ebp - 0x11b4], 0x1d
jae 0x4d7da8
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7d99
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x11b4]
mov byte [ebp + ecx - 0x524], al
jmp 0x4d7d6e
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x524]
test ecx, ecx
je 0x4d7dcd
lea edx, [ebp - 0x524]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d7ddf
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13e8], eax
mov dword [ebp - 0x13e4], edx
mov dword [ebp - 0x1790], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xe34]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x11b8], 1
jmp 0x4d7e17
mov ecx, dword [ebp - 0x11b8]
add ecx, 1
mov dword [ebp - 0x11b8], ecx
cmp dword [ebp - 0x11b8], 0x2d
jae 0x4d7e42
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7e33
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x11b8]
mov byte [ebp + edx - 0xe34], al
jmp 0x4d7e08
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xe34]
test edx, edx
je 0x4d7e67
lea eax, [ebp - 0xe34]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d7e79
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13f0], eax
mov dword [ebp - 0x13ec], edx
mov dword [ebp - 0x178c], 0x1d
xor ecx, ecx
mov dword [ebp - 0x504], ecx
mov dword [ebp - 0x500], ecx
mov dword [ebp - 0x4fc], ecx
mov dword [ebp - 0x4f8], ecx
mov dword [ebp - 0x4f4], ecx
mov dword [ebp - 0x4f0], ecx
mov dword [ebp - 0x4ec], ecx
mov byte [ebp - 0x4e8], cl
mov dword [ebp - 0x11bc], 1
jmp 0x4d7ed0
mov edx, dword [ebp - 0x11bc]
add edx, 1
mov dword [ebp - 0x11bc], edx
cmp dword [ebp - 0x11bc], 0x1d
jae 0x4d7efb
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7eec
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x11bc]
mov byte [ebp + ecx - 0x504], al
jmp 0x4d7ec1
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x504]
test ecx, ecx
je 0x4d7f20
lea edx, [ebp - 0x504]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d7f32
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x13f8], eax
mov dword [ebp - 0x13f4], edx
mov dword [ebp - 0x1788], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xe04]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x11c0], 1
jmp 0x4d7f6a
mov ecx, dword [ebp - 0x11c0]
add ecx, 1
mov dword [ebp - 0x11c0], ecx
cmp dword [ebp - 0x11c0], 0x2d
jae 0x4d7f95
call fcn.00510170
and eax, 0x800000ff
jns 0x4d7f86
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x11c0]
mov byte [ebp + edx - 0xe04], al
jmp 0x4d7f5b
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xe04]
test edx, edx
je 0x4d7fba
lea eax, [ebp - 0xe04]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d7fcc
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1400], eax
mov dword [ebp - 0x13fc], edx
mov dword [ebp - 0x1784], 0x1d
xor ecx, ecx
mov dword [ebp - 0x4e4], ecx
mov dword [ebp - 0x4e0], ecx
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x4d8], ecx
mov dword [ebp - 0x4d4], ecx
mov dword [ebp - 0x4d0], ecx
mov dword [ebp - 0x4cc], ecx
mov byte [ebp - 0x4c8], cl
mov dword [ebp - 0x11c4], 1
jmp 0x4d8023
mov edx, dword [ebp - 0x11c4]
add edx, 1
mov dword [ebp - 0x11c4], edx
cmp dword [ebp - 0x11c4], 0x1d
jae 0x4d804e
call fcn.00510170
and eax, 0x800000ff
jns 0x4d803f
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x11c4]
mov byte [ebp + ecx - 0x4e4], al
jmp 0x4d8014
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x4e4]
test ecx, ecx
je 0x4d8073
lea edx, [ebp - 0x4e4]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d8085
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1408], eax
mov dword [ebp - 0x1404], edx
mov dword [ebp - 0x1780], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xdd4]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x11c8], 1
jmp 0x4d80bd
mov ecx, dword [ebp - 0x11c8]
add ecx, 1
mov dword [ebp - 0x11c8], ecx
cmp dword [ebp - 0x11c8], 0x2d
jae 0x4d80e8
call fcn.00510170
and eax, 0x800000ff
jns 0x4d80d9
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x11c8]
mov byte [ebp + edx - 0xdd4], al
jmp 0x4d80ae
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xdd4]
test edx, edx
je 0x4d810d
lea eax, [ebp - 0xdd4]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d811f
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1410], eax
mov dword [ebp - 0x140c], edx
mov dword [ebp - 0x177c], 0x1d
xor ecx, ecx
mov dword [ebp - 0x4c4], ecx
mov dword [ebp - 0x4c0], ecx
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x4b8], ecx
mov dword [ebp - 0x4b4], ecx
mov dword [ebp - 0x4b0], ecx
mov dword [ebp - 0x4ac], ecx
mov byte [ebp - 0x4a8], cl
mov dword [ebp - 0x11cc], 1
jmp 0x4d8176
mov edx, dword [ebp - 0x11cc]
add edx, 1
mov dword [ebp - 0x11cc], edx
cmp dword [ebp - 0x11cc], 0x1d
jae 0x4d81a1
call fcn.00510170
and eax, 0x800000ff
jns 0x4d8192
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x11cc]
mov byte [ebp + ecx - 0x4c4], al
jmp 0x4d8167
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x4c4]
test ecx, ecx
je 0x4d81c6
lea edx, [ebp - 0x4c4]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d81d8
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1418], eax
mov dword [ebp - 0x1414], edx
mov dword [ebp - 0x1778], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xda4]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x11d0], 1
jmp 0x4d8210
mov ecx, dword [ebp - 0x11d0]
add ecx, 1
mov dword [ebp - 0x11d0], ecx
cmp dword [ebp - 0x11d0], 0x2d
jae 0x4d823b
call fcn.00510170
and eax, 0x800000ff
jns 0x4d822c
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x11d0]
mov byte [ebp + edx - 0xda4], al
jmp 0x4d8201
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xda4]
test edx, edx
je 0x4d8260
lea eax, [ebp - 0xda4]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d8272
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1420], eax
mov dword [ebp - 0x141c], edx
mov dword [ebp - 0x1774], 0x1d
xor ecx, ecx
mov dword [ebp - 0x4a4], ecx
mov dword [ebp - 0x4a0], ecx
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x498], ecx
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x490], ecx
mov dword [ebp - 0x48c], ecx
mov byte [ebp - 0x488], cl
mov dword [ebp - 0x11d4], 1
jmp 0x4d82c9
mov edx, dword [ebp - 0x11d4]
add edx, 1
mov dword [ebp - 0x11d4], edx
cmp dword [ebp - 0x11d4], 0x1d
jae 0x4d82f4
call fcn.00510170
and eax, 0x800000ff
jns 0x4d82e5
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x11d4]
mov byte [ebp + ecx - 0x4a4], al
jmp 0x4d82ba
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x4a4]
test ecx, ecx
je 0x4d8319
lea edx, [ebp - 0x4a4]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d832b
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1428], eax
mov dword [ebp - 0x1424], edx
mov dword [ebp - 0x1770], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xd74]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x11d8], 1
jmp 0x4d8363
mov ecx, dword [ebp - 0x11d8]
add ecx, 1
mov dword [ebp - 0x11d8], ecx
cmp dword [ebp - 0x11d8], 0x2d
jae 0x4d838e
call fcn.00510170
and eax, 0x800000ff
jns 0x4d837f
dec eax
or eax, 0xffffff00
inc eax
mov edx, dword [ebp - 0x11d8]
mov byte [ebp + edx - 0xd74], al
jmp 0x4d8354
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xd74]
test edx, edx
je 0x4d83b3
lea eax, [ebp - 0xd74]
push eax
call fcn.004caaf0
add esp, 4
jmp 0x4d83c5
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1430], eax
mov dword [ebp - 0x142c], edx
mov dword [ebp - 0x176c], 0x1d
xor ecx, ecx
mov dword [ebp - 0x484], ecx
mov dword [ebp - 0x480], ecx
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x478], ecx
mov dword [ebp - 0x474], ecx
mov dword [ebp - 0x470], ecx
mov dword [ebp - 0x46c], ecx
mov byte [ebp - 0x468], cl
mov dword [ebp - 0x11dc], 1
jmp 0x4d841c
mov edx, dword [ebp - 0x11dc]
add edx, 1
mov dword [ebp - 0x11dc], edx
cmp dword [ebp - 0x11dc], 0x1d
jae 0x4d8447
call fcn.00510170
and eax, 0x800000ff
jns 0x4d8438
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x11dc]
mov byte [ebp + ecx - 0x484], al
jmp 0x4d840d
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0x484]
test ecx, ecx
je 0x4d846c
lea edx, [ebp - 0x484]
push edx
call fcn.004caaf0
add esp, 4
jmp 0x4d847e
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x1438], eax
mov dword [ebp - 0x1434], edx
mov dword [ebp - 0x1768], 0x2d
push 0x2d
push 0
lea eax, [ebp - 0xd44]
push eax
call fcn.004fdef0
add esp, 0xc
mov dword [ebp - 0x11e0], 1
jmp 0x4d84b6
cmp dword [ebp - 0x11e0], 0x2d
jae 0x4d84e1