Function at 0x4cde1c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x22
push 0
push 0
dec ecx
jne 0x4cde24
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404750
xor eax, eax
push ebp
push 0x4d02de
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 1
mov eax, dword [ebp - 8]
call fcn.00404560
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 8]
mov eax, 0x4d02f8
call fcn.004048a4
test eax, eax
jle 0x4cde7a
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004c7488
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0308
call fcn.004048a4
test eax, eax
jle 0x4cdefb
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4d0318
mov edx, 0x4d0328
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x10]
call fcn.00404560
test eax, eax
jle 0x4d0261
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004cc2a8
mov byte [0x4da4ee], 0
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 7
mov edx, 8
mov eax, dword [ebp - 8]
call fcn.004047c0
mov eax, dword [ebp - 0x10]
call fcn.00404560
cmp eax, 2
jle 0x4d0261
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004cde1c
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0338
call fcn.004048a4
test eax, eax
jle 0x4cdfc7
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4d0318
mov edx, 0x4d0328
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x10]
call fcn.00404560
test eax, eax
jle 0x4d0261
push 0x41
lea ecx, [ebp - 0x40]
mov dx, 0x3a8
mov eax, dword [ebp - 0x10]
call fcn.004b7518
push dword [ebp - 0x40]
push 0x4d0348
push 0x4d0348
push 0x4d0350
lea eax, [ebp - 0x3c]
mov edx, 4
call fcn.00404cb8
mov eax, dword [ebp - 0x3c]
call fcn.00404bd8
mov edx, eax
mov ecx, 0x4d0378
mov eax, dword [0x4d6ac0]
mov eax, dword [eax]
call fcn.0047aa08
dec eax
jne 0x4d0261
mov byte [0x4da4ee], 0
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0xb
mov edx, 0xc
mov eax, dword [ebp - 8]
call fcn.004047c0
mov eax, dword [ebp - 0x10]
call fcn.00404560
cmp eax, 2
jle 0x4d0261
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004cde1c
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0388
call fcn.004048a4
test eax, eax
jle 0x4ce01f
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d03a8
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x10]
call fcn.00404560
cmp eax, 2
jle 0x4d0261
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4d03b8
call fcn.004045ac
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 4]
call fcn.004cde1c
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d03b8
call fcn.004048a4
test eax, eax
jle 0x4ce08f
xor eax, eax
mov dword [0x4da528], eax
xor eax, eax
mov dword [0x4da524], eax
push 0x4da39c
mov ecx, dword [ebp - 0x20]
sub ecx, 5
mov edx, 6
mov eax, dword [ebp - 8]
call fcn.004047c0
mov edx, dword [0x4da39c]
mov eax, 0x4d03c8
call fcn.004048a4
test eax, eax
jle 0x4ce074
mov dword [0x4da528], 1
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c2890
xor edx, edx
xor eax, eax
call fcn.00404244
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d03d4
call fcn.004048a4
test eax, eax
jle 0x4ce0d3
push 0x4da4a0
mov ecx, dword [ebp - 0x20]
sub ecx, 5
mov edx, 6
mov eax, dword [ebp - 8]
call fcn.004047c0
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c215c
xor edx, edx
xor eax, eax
call fcn.00404244
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d03e4
call fcn.004048a4
test eax, eax
jle 0x4ce347
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 6
mov edx, 7
mov eax, dword [ebp - 8]
call fcn.004047c0
mov eax, dword [ebp - 0x14]
mov edx, 0x4d03f4
call fcn.004046ac
jne 0x4ce195
mov eax, dword [0x4d7134]
cmp byte [eax + 9], 0
je 0x4ce159
mov eax, dword [0x4d7134]
mov byte [eax + 9], 0
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0424
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d0444
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4ce2c4
mov eax, dword [0x4d7134]
mov byte [eax + 9], 1
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0444
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d0424
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4ce2c4
mov eax, dword [ebp - 0x14]
mov edx, 0x4d0454
call fcn.004046ac
jne 0x4ce23a
mov eax, dword [0x4d7134]
cmp byte [eax + 0xa], 0
je 0x4ce1ec
mov eax, dword [0x4d7134]
mov byte [eax + 0xa], 0
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0464
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d0474
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4ce223
mov eax, dword [0x4d7134]
mov byte [eax + 0xa], 1
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0474
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d0464
mov eax, dword [ebp - 4]
call fcn.004c3ec4
cmp byte [0x4da4ec], 0
je 0x4ce2c4
call fcn.004b8a9c
jmp 0x4ce2c4
mov eax, dword [ebp - 0x14]
mov edx, 0x4d0484
call fcn.004046ac
jne 0x4ce2c4
mov eax, dword [0x4d7134]
cmp byte [eax + 0xb], 0
je 0x4ce28d
mov eax, dword [0x4d7134]
mov byte [eax + 0xb], 0
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0494
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d04a4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4ce2c4
mov eax, dword [0x4d7134]
mov byte [eax + 0xb], 1
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d04a4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d0494
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d04b4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d04d4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04e4
mov ecx, 0x4d0318
mov edx, 0x4d04f8
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d050c
mov eax, dword [ebp - 4]
call fcn.004c3cb8
cmp byte [0x4da4ec], 0
je 0x4ce324
call fcn.004bdd44
cmp byte [0x4da4ec], 0
je 0x4ce335
mov eax, dword [ebp - 4]
call fcn.004c7da8
call fcn.004bb46c
mov eax, dword [ebp - 4]
call fcn.004c6c28
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0534
call fcn.004048a4
test eax, eax
jle 0x4ce83b
mov byte [ebp - 0x25], 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d0544
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x18]
mov edx, 0x4d0558
call fcn.004046ac
jne 0x4ce392
lea eax, [ebp - 0x18]
mov edx, 0x4d056c
call fcn.00404328
cmp dword [ebp - 0x18], 0
jne 0x4ce3a9
lea eax, [ebp - 0x18]
mov edx, dword [0x4d7134]
mov edx, dword [edx + 0x10]
call fcn.00404328
mov eax, dword [ebp - 0x18]
mov edx, 0x4d056c
call fcn.004046ac
jne 0x4ce3ff
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d057c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0590
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d05a0
mov eax, dword [ebp - 4]
call fcn.004c3cb8
mov byte [0x4da4ee], 0
jmp 0x4d0268
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d05b8
mov eax, dword [ebp - 4]
call fcn.004c432c
cmp dword [ebp - 0x1c], 0
jne 0x4ce42c
lea eax, [ebp - 0x1c]
mov edx, dword [0x4d7134]
mov edx, dword [edx + 0x14]
call fcn.00404328
mov eax, dword [0x4d7134]
mov al, byte [eax + 8]
mov byte [ebp - 0x26], al
xor eax, eax
push ebp
push 0x4ce4d1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4d05c8
push 0x4d05d0
push 0x4d05e4
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x310]
call fcn.004afd2c
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00411360
add esp, 0xc
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00411360
add esp, 0x10
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x38]
call fcn.004159a4
lea eax, [ebp - 0x78]
lea edx, [ebp - 0x38]
call fcn.0041552c
cmp dword [ebp - 0x78], 0
je 0x4ce4c7
push 0x4d05f0
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00411360
add esp, 0xc
lea eax, [ebp - 0x88]
call fcn.00413208
mov byte [ebp - 0x26], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ce4db
mov eax, dword [0x4d7134]
mov al, byte [eax + 8]
cmp al, byte [ebp - 0x26]
je 0x4ce4f7
mov byte [ebp - 0x25], 1
mov eax, dword [0x4d7134]
mov dl, byte [ebp - 0x26]
mov byte [eax + 8], dl
mov eax, dword [ebp - 0x1c]
mov edx, dword [0x4d7134]
mov edx, dword [edx + 0x14]
call fcn.004046ac
je 0x4ce586
mov byte [ebp - 0x25], 1
mov eax, dword [0x4d7134]
add eax, 0x14
mov edx, dword [ebp - 0x1c]
call fcn.004042e4
mov dl, 1
mov eax, dword [0x4a56f4]
call fcn.004a5788
mov ebx, eax
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x94]
mov edx, dword [0x4d7134]
mov edx, dword [edx + 0x14]
mov eax, ebx
call fcn.004a5470
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
xor edx, edx
call fcn.004047c0
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x8c]
call fcn.004089f8
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x4d7134]
add eax, 0x1c
call fcn.004042e4
mov eax, ebx
call fcn.00403440
mov eax, dword [ebp - 0x18]
mov edx, dword [0x4d7134]
mov edx, dword [edx + 0x10]
call fcn.004046ac
je 0x4ce64d
mov byte [ebp - 0x25], 1
mov eax, dword [0x4d7134]
add eax, 0x10
mov edx, dword [ebp - 0x18]
call fcn.004042e4
mov byte [0x4da4f6], 1
mov eax, 0x4da3dc
call fcn.00404290
mov eax, 0x4da3e0
call fcn.00404290
lea eax, [ebp - 0x9c]
mov ecx, 0x4d0604
mov edx, dword [0x4da374]
call fcn.004045ac
mov eax, dword [ebp - 0x9c]
call fcn.00404760
mov edx, eax
lea eax, [ebp - 0x98]
call fcn.00404498
mov eax, dword [ebp - 0x98]
call fcn.004099c8
lea eax, [ebp - 0xa4]
mov ecx, 0x4d0614
mov edx, dword [0x4da374]
call fcn.004045ac
mov eax, dword [ebp - 0xa4]
call fcn.00404760
mov edx, eax
lea eax, [ebp - 0xa0]
call fcn.00404498
mov eax, dword [ebp - 0xa0]
call fcn.004099c8
mov eax, 0x4da4b4
mov edx, 0x4d0624
call fcn.004042e4
cmp byte [ebp - 0x25], 0
je 0x4ce658
call fcn.004bb46c
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 8]
call fcn.004047c0
mov eax, dword [ebp - 0x14]
mov edx, 0x4d0630
call fcn.004046ac
jne 0x4ce816
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d057c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d063c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov eax, dword [ebp - 0x18]
push eax
mov ecx, 0x4d0318
mov edx, 0x4d064c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0660
mov ecx, 0x4d0318
mov edx, 0x4d0670
mov eax, dword [ebp - 4]
call fcn.004c3ec4
cmp byte [0x4da4f6], 0
je 0x4ce7df
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0680
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0690
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06a0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06b0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06c0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06d0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06e0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06f0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0700
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d0710
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d0720
mov eax, dword [ebp - 4]
call fcn.004c64c8
jmp 0x4ce804
mov eax, 0x4da4a0
mov edx, 0x4d0730
call fcn.004042e4
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c215c
xor edx, edx
xor eax, eax
call fcn.00404244
mov edx, 0x4d0748
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov eax, dword [ebp - 0x14]
mov edx, 0x4d0760
call fcn.004046ac
jne 0x4d0261
mov edx, 0x4d0770
mov eax, dword [ebp - 4]
call fcn.004c64c8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0780
call fcn.004048a4
test eax, eax
jle 0x4ce98d
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0590
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d063c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d057c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0680
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0690
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06a0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06b0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06c0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06d0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06e0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06f0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0700
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d0710
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d0790
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d07a8
call fcn.004048a4
test eax, eax
jle 0x4cea14
lea eax, [ebp - 0xa8]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d07b8
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0xa8]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d0544
mov eax, dword [ebp - 4]
call fcn.004c3ec4
lea eax, [ebp - 0xac]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d07cc
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0xac]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d05b8
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d07e0
mov eax, dword [ebp - 4]
call fcn.004cde1c
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d07f4
call fcn.004048a4
test eax, eax
jle 0x4ceb7d
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d07b8
mov eax, dword [ebp - 4]
call fcn.004c432c
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d07cc
mov eax, dword [ebp - 4]
call fcn.004c432c
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d0808
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x18]
call fcn.00404560
cmp eax, 3
jl 0x4cea95
mov eax, dword [ebp - 0x18]
call fcn.00404560
cmp eax, 0x28
jg 0x4cea95
mov edx, dword [ebp - 0x18]
mov eax, 0x4d081c
call fcn.004048a4
dec eax
jge 0x4ceaa7
mov edx, 0x4d0828
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov eax, dword [ebp - 0x1c]
call fcn.00404560
cmp eax, 3
jl 0x4ceac1
mov eax, dword [ebp - 0x1c]
call fcn.00404560
cmp eax, 0x1e
jle 0x4cead3
mov edx, 0x4d0864
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x10]
call fcn.004046ac
je 0x4ceaf2
mov edx, 0x4d089c
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, 0x4d08cc
mov eax, dword [ebp - 4]
call fcn.004c3cb8
mov dl, 1
mov eax, dword [0x4a56f4]
call fcn.004a5788
mov ebx, eax
lea ecx, [ebp - 0xb4]
mov edx, dword [ebp - 0x1c]
mov eax, ebx
call fcn.004a5470
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0xb0]
call fcn.004089f8
mov edx, dword [ebp - 0xb0]
lea eax, [ebp - 0x1c]
call fcn.00404328
mov eax, ebx
call fcn.00403440
push 0x4d08e0
push dword [ebp - 0x18]
push 0x4d0900
push dword [ebp - 0x1c]
mov eax, 0x4da4a0
mov edx, 4
call fcn.00404620
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c215c
xor edx, edx
xor eax, eax
call fcn.00404244
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0914
call fcn.004048a4
test eax, eax
jle 0x4cebce
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d057c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0590
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d05a0
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0924
call fcn.004048a4
test eax, eax
jle 0x4cecd2
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06a0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d0934
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x1c]
call fcn.00404560
cmp eax, 3
jle 0x4d0261
mov eax, dword [0x4d7134]
add eax, 0x14
mov edx, dword [ebp - 0x1c]
call fcn.004042e4
mov dl, 1
mov eax, dword [0x4a56f4]
call fcn.004a5788
mov ebx, eax
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xc0]
mov edx, dword [0x4d7134]
mov edx, dword [edx + 0x14]
mov eax, ebx
call fcn.004a5470
mov eax, dword [ebp - 0xc0]
mov ecx, 0xa
xor edx, edx
call fcn.004047c0
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xb8]
call fcn.004089f8
mov edx, dword [ebp - 0xb8]
mov eax, dword [0x4d7134]
add eax, 0x1c
call fcn.004042e4
mov eax, ebx
call fcn.00403440
push 0
mov ecx, 0x4d0398
mov edx, 0x4d0934
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov eax, dword [0x4d7134]
mov eax, dword [eax + 0x14]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d05b8
mov eax, dword [ebp - 4]
call fcn.004c3ec4
call fcn.004bb46c
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0948
call fcn.004048a4
test eax, eax
jle 0x4cecff
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06a0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d095c
call fcn.004048a4
test eax, eax
jle 0x4cee04
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d0934
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [0x4d7134]
mov eax, dword [eax + 0x10]
mov edx, 0x4d056c
call fcn.004046ac
je 0x4ced55
mov edx, dword [0x4d7134]
mov edx, dword [edx + 0x10]
mov eax, 0x4d0970
call fcn.004048a4
test eax, eax
jle 0x4ced67
mov edx, 0x4d0980
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov eax, dword [ebp - 0x1c]
call fcn.00404560
cmp eax, 6
jge 0x4ced86
mov edx, 0x4d09a4
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov dl, 1
mov eax, dword [0x4a56f4]
call fcn.004a5788
mov ebx, eax
lea ecx, [ebp - 0xc8]
mov edx, dword [ebp - 0x1c]
mov eax, ebx
call fcn.004a5470
mov eax, dword [ebp - 0xc8]
lea edx, [ebp - 0xc4]
call fcn.004089f8
mov edx, dword [ebp - 0xc4]
lea eax, [ebp - 0x1c]
call fcn.00404328
mov eax, ebx
call fcn.00403440
mov eax, 0x4da4a0
mov ecx, dword [ebp - 0x1c]
mov edx, 0x4d09cc
call fcn.004045ac
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c215c
xor edx, edx
xor eax, eax
call fcn.00404244
mov edx, 0x4d09ec
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d06a0
call fcn.004048a4
test eax, eax
jle 0x4cee76
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0690
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06b0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06c0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d06a0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0a04
call fcn.004048a4
test eax, eax
jle 0x4ceec7
push 0x4d0a14
mov ecx, 0x4d0318
mov edx, 0x4d0670
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0680
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d0a40
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0a80
call fcn.004048a4
test eax, eax
jle 0x4cef78
push 0x4d0a90
mov ecx, 0x4d0318
mov edx, 0x4d0670
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06f0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d0700
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06d0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06e0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0710
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d0700
mov eax, dword [ebp - 4]
call fcn.004cde1c
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0abc
call fcn.004048a4
test eax, eax
jle 0x4cf078
push 0x4d0acc
mov ecx, 0x4d0318
mov edx, 0x4d0670
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0af8
mov ecx, 0x4d0318
mov edx, 0x4d06d0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d06d0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06e0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06f0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0700
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06a0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06b0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06c0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0710
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d06f0
call fcn.004048a4
test eax, eax
jle 0x4cf16e
push 0x4d0b08
mov ecx, 0x4d0318
mov edx, 0x4d0670
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d06f0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d0700
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06d0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06a0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0690
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06c0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d06b0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0710
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d0b34
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0700
call fcn.004048a4
test eax, eax
jle 0x4cf208
push 0x4d0434
mov ecx, 0x4d0414
mov edx, 0x4d0700
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0690
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06a0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06b0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d06c0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d0b58
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0b88
call fcn.004048a4
test eax, eax
jle 0x4cf267
push 0x4d0b98
mov ecx, 0x4d0318
mov edx, 0x4d0670
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov eax, 0x4da4a0
mov edx, 0x4d0730
call fcn.004042e4
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c215c
xor edx, edx
xor eax, eax
call fcn.00404244
mov edx, 0x4d0bc0
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0bd8
call fcn.004048a4
test eax, eax
jle 0x4cf294
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0690
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0bec
call fcn.004048a4
test eax, eax
jle 0x4cf2f3
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0690
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov eax, 0x4da4a0
mov edx, 0x4d0c00
call fcn.004042e4
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c215c
xor edx, edx
xor eax, eax
call fcn.00404244
mov edx, 0x4d09ec
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d06d0
call fcn.004048a4
test eax, eax
jle 0x4cf365
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06a0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06b0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d06c0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0690
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0c18
call fcn.004048a4
test eax, eax
jle 0x4cf50c
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4d0414
mov edx, 0x4d04b4
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x10]
mov edx, 0x4d04c4
call fcn.004046ac
jne 0x4cf3f6
push 0x4d04e4
mov ecx, 0x4d0318
mov edx, 0x4d04f8
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d04b4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d04d4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d0c28
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4cf4bf
push 0x4d0c44
mov ecx, 0x4d0318
mov edx, 0x4d04f8
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d04d4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d04b4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov eax, dword [0x4d7134]
mov eax, dword [eax + 0x24]
push eax
mov ecx, 0x4d0318
mov edx, 0x4d0c58
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0c6c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0c7c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0c90
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0ca0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d0cb4
mov eax, dword [ebp - 4]
call fcn.004c3cb8
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d03a8
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x10]
call fcn.00404560
cmp eax, 2
jle 0x4d0261
lea eax, [ebp - 0xcc]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4d03b8
call fcn.004045ac
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 4]
call fcn.004cde1c
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0cd4
call fcn.004048a4
test eax, eax
jle 0x4cf55e
push 0x4d0ce4
mov ecx, 0x4d0318
mov edx, 0x4d0670
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov eax, 0x4da4a0
mov edx, 0x4d0d10
call fcn.004042e4
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c215c
xor edx, edx
xor eax, eax
call fcn.00404244
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0d28
call fcn.004048a4
test eax, eax
jle 0x4cf5ca
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0d3c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d063c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
lea eax, [ebp - 0xd0]
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 8
mov edx, 9
mov eax, dword [ebp - 8]
call fcn.004047c0
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0d4c
call fcn.004048a4
test eax, eax
jle 0x4cf6e1
push 0x4d04e4
mov ecx, 0x4d0318
mov edx, 0x4d04f8
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d04b4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d04d4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0d3c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4d0414
mov edx, 0x4d063c
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x10]
mov edx, 0x4d04c4
call fcn.004046ac
jne 0x4cf689
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d063c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d0d5c
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d063c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov dword [0x4d6608], 3
mov edx, 0x4d0d78
mov eax, dword [ebp - 4]
call fcn.004c3cb8
mov eax, 0x4da4a0
mov edx, 0x4d0d10
call fcn.004042e4
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c215c
xor edx, edx
xor eax, eax
call fcn.00404244
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0d98
call fcn.004048a4
test eax, eax
jle 0x4cf7c9
push 0x4d04e4
mov ecx, 0x4d0318
mov edx, 0x4d04f8
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d04b4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d04d4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d063c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4d0414
mov edx, 0x4d0d3c
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x10]
mov edx, 0x4d04c4
call fcn.004046ac
jne 0x4cf7a0
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0d3c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov edx, 0x4d0da8
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, 0x4d0dbc
mov eax, dword [ebp - 4]
call fcn.004c6c5c
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0d3c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0dc8
call fcn.004048a4
test eax, eax
jle 0x4cf869
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4d0414
mov edx, 0x4d0c90
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x10]
mov edx, 0x4d0404
call fcn.004046ac
jne 0x4cf836
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0c6c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0c90
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0c90
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0c6c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0ddc
call fcn.004048a4
test eax, eax
jle 0x4cf909
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4d0414
mov edx, 0x4d0c6c
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0x10]
mov edx, 0x4d0404
call fcn.004046ac
jne 0x4cf8d6
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0c90
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0c6c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0c6c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0c90
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0df0
call fcn.004048a4
test eax, eax
jle 0x4cfb1c
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0c7c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0ca0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
lea eax, [ebp - 0x10]
push eax
mov ecx, 2
mov edx, 0xc
mov eax, dword [ebp - 8]
call fcn.004047c0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4d0e04
call fcn.004045ac
mov edx, dword [ebp - 0xd4]
mov ecx, 0x4d0318
mov eax, dword [ebp - 4]
call fcn.004c432c
lea ecx, [ebp - 0x14]
mov edx, 3
mov eax, dword [ebp - 0x18]
call fcn.00435a18
call sub.kernel32.dll_GetTickCount_1
mov ebx, eax
mov eax, dword [ebp - 0x14]
mov edx, dword [0x4da4b8]
call fcn.004046ac
jne 0x4cf9c6
mov eax, ebx
sub eax, dword [0x4da570]
cmp eax, 0x3e8
jle 0x4cfaf6
mov dword [0x4da570], ebx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, 0x4d0318
mov edx, 0x4d0c58
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov eax, 0x4da4b8
mov edx, dword [ebp - 0x14]
call fcn.004042e4
lea ecx, [ebp - 0x1c]
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.00435a18
mov eax, dword [ebp - 0x1c]
mov edx, 0x4d0e10
call fcn.004046ac
je 0x4cfa2c
mov eax, dword [ebp - 0x1c]
mov edx, 0x4d0e04
call fcn.004046ac
je 0x4cfa2c
mov eax, dword [ebp - 0x1c]
mov edx, 0x4d0e1c
call fcn.004046ac
jne 0x4cfa59
push 0x4d0e28
push dword [ebp - 0x18]
push 0x4d0e40
lea eax, [ebp - 0xd8]
mov edx, 3
call fcn.00404620
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4cfa84
push 0x4d0e28
push dword [ebp - 0x18]
push 0x4d0e74
lea eax, [ebp - 0xdc]
mov edx, 3
call fcn.00404620
mov edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 4]
call fcn.004c3cb8
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xe4]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4d0e98
call fcn.004045ac
mov edx, dword [ebp - 0xe4]
mov ecx, 0x4d0398
mov eax, dword [ebp - 4]
call fcn.004c432c
mov edx, dword [ebp - 0xe0]
lea eax, [ebp - 0x10]
call fcn.00404328
mov eax, dword [ebp - 0x10]
call fcn.00404560
cmp eax, 2
jle 0x4d0261
lea eax, [ebp - 0xe8]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4d03b8
call fcn.004045ac
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 4]
call fcn.004cde1c
jmp 0x4d0261
lea eax, [ebp - 0xec]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4d0ea4
call fcn.004045ac
mov edx, dword [ebp - 0xec]
mov eax, dword [ebp - 4]
call fcn.004cde1c
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0ea4
call fcn.004048a4
test eax, eax
jle 0x4cfe10
mov byte [ebp - 0x25], 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 2
mov edx, 0xb
mov eax, dword [ebp - 8]
call fcn.004047c0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xf0]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4d0e04
call fcn.004045ac
mov edx, dword [ebp - 0xf0]
mov ecx, 0x4d0318
mov eax, dword [ebp - 4]
call fcn.004c432c
lea ecx, [ebp - 0x14]
mov edx, 3
mov eax, dword [ebp - 0x18]
call fcn.00435a18
push 0x4d04e4
mov ecx, 0x4d0318
mov edx, 0x4d04f8
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d04b4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d04d4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov eax, dword [0x4d7134]
mov eax, dword [eax + 0x24]
mov edx, dword [ebp - 0x18]
call fcn.004046ac
je 0x4cfcb5
mov byte [ebp - 0x25], 1
mov eax, dword [0x4d7134]
add eax, 0x24
mov edx, dword [ebp - 0x18]
call fcn.004042e4
lea eax, [ebp - 0xf4]
push eax
mov ecx, 0x4d0398
mov edx, 0x4d0eb8
mov eax, dword [ebp - 4]
call fcn.004c432c
mov eax, dword [ebp - 0xf4]
mov edx, 0x1f90
call fcn.004093f4
mov edx, dword [0x4d7134]
mov dword [edx + 0x28], eax
mov eax, dword [ebp - 0x18]
push eax
mov ecx, 0x4d0318
mov edx, 0x4d0ec8
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4da468
mov eax, dword [0x4d7134]
mov eax, dword [eax + 0x24]
mov ecx, 3
mov edx, 1
call fcn.004047c0
mov al, byte [0x4d0ed0]
push eax
lea eax, [ebp - 0xf8]
push eax
xor ecx, ecx
mov edx, 0x4d0edc
mov eax, dword [0x4da468]
call fcn.0040ef70
mov edx, dword [ebp - 0xf8]
mov eax, 0x4da468
call fcn.004042e4
mov eax, dword [0x4da468]
mov edx, 0x4d0e10
call fcn.004046ac
jne 0x4cfca7
mov eax, 0x4da468
mov edx, dword [0x4da2fc]
call fcn.004042e4
cmp byte [0x4da4ec], 0
je 0x4cfcb5
call fcn.004bdd44
mov eax, 0x4da4b8
call fcn.00404290
lea ecx, [ebp - 0x1c]
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.00435a18
mov eax, dword [ebp - 0x1c]
mov edx, 0x4d0e10
call fcn.004046ac
je 0x4cfcfc
mov eax, dword [ebp - 0x1c]
mov edx, 0x4d0e04
call fcn.004046ac
je 0x4cfcfc
mov eax, dword [ebp - 0x1c]
mov edx, 0x4d0e1c
call fcn.004046ac
jne 0x4cfd3c
cmp byte [0x4da4ec], 0
je 0x4cfd0a
call fcn.004b8a9c
push 0x4d0ee8
mov eax, dword [0x4d7134]
push dword [eax + 0x24]
push 0x4d0f10
lea eax, [ebp - 0xfc]
mov edx, 3
call fcn.00404620
mov edx, dword [ebp - 0xfc]
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4cfd6c
push 0x4d0ee8
mov eax, dword [0x4d7134]
push dword [eax + 0x24]
push 0x4d0f48
lea eax, [ebp - 0x100]
mov edx, 3
call fcn.00404620
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 4]
call fcn.004c3cb8
cmp byte [ebp - 0x25], 0
je 0x4cfd7f
call fcn.004bb46c
mov eax, dword [ebp - 4]
call fcn.004c6c28
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x108]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4d0e98
call fcn.004045ac
mov edx, dword [ebp - 0x108]
mov ecx, 0x4d0398
mov eax, dword [ebp - 4]
call fcn.004c432c
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 0x10]
call fcn.00404328
mov eax, dword [ebp - 0x10]
call fcn.00404560
cmp eax, 2
jle 0x4cfde8
lea eax, [ebp - 0x10c]
mov ecx, dword [ebp - 0x10]
mov edx, 0x4d03b8
call fcn.004045ac
mov edx, dword [ebp - 0x10c]
mov eax, dword [ebp - 4]
call fcn.004cde1c
cmp byte [0x4da4f2], 0
jne 0x4d0261
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c2adc
xor edx, edx
xor eax, eax
call fcn.00404244
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0f74
call fcn.004048a4
test eax, eax
jle 0x4cfecd
lea eax, [ebp - 0x10]
push eax
mov ecx, 2
mov edx, 0xa
mov eax, dword [ebp - 8]
call fcn.004047c0
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.004093f4
mov esi, eax
call sub.kernel32.dll_GetTickCount_1
mov ebx, eax
cmp esi, dword [0x4d6600]
jne 0x4cfe65
mov eax, ebx
sub eax, dword [0x4da56c]
cmp eax, 0x1388
jle 0x4cfec0
mov dword [0x4da56c], ebx
mov dword [0x4d6600], esi
mov eax, dword [0x4d6600]
lea eax, [eax + eax*8]
mov edx, dword [0x4d6e18]
mov eax, dword [edx + eax*4 + 0x14]
lea ecx, [ebp - 0x10]
mov edx, 0x18
call fcn.00435a18
push 0x4d0f88
push dword [ebp - 0x10]
push 0x4d0fb0
lea eax, [ebp - 0x110]
mov edx, 3
call fcn.00404620
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov eax, dword [ebp - 4]
call fcn.004cc524
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0fd8
call fcn.004048a4
test eax, eax
jle 0x4cff11
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d0ca0
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d0c7c
mov eax, dword [ebp - 4]
call fcn.004c3ec4
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0fe8
call fcn.004048a4
test eax, eax
jle 0x4cff82
push 0x41
mov ecx, 0x4d0378
mov edx, 0x4d0ff0
mov eax, dword [0x4d6ac0]
mov eax, dword [eax]
call fcn.0047aa08
dec eax
jne 0x4d0261
mov byte [0x4da4ee], 0
mov eax, 0x4da4a0
mov ecx, dword [ebp - 8]
mov edx, 0x4d1030
call fcn.004045ac
push 0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4c215c
xor edx, edx
xor eax, eax
call fcn.00404244
mov edx, 0x4d1040
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d1058
call fcn.004048a4
test eax, eax
jle 0x4cffd0
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d04b4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d04d4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004cd048
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d1068
call fcn.004048a4
test eax, eax
jle 0x4d003d
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d04b4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d04d4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
cmp dword [0x4d6600], 0
jge 0x4d002a
mov edx, 0x4d1078
mov eax, dword [ebp - 4]
call fcn.004c3cb8
jmp 0x4d0261
mov edx, dword [0x4d6600]
mov eax, dword [ebp - 4]
call fcn.004ccf18
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d10a0
call fcn.004048a4
test eax, eax
jle 0x4d0089
push 0x4d0404
mov ecx, 0x4d0414
mov edx, 0x4d04b4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
push 0x4d04c4
mov ecx, 0x4d0414
mov edx, 0x4d04d4
mov eax, dword [ebp - 4]
call fcn.004c3ec4
mov eax, dword [ebp - 4]
call fcn.004cc524
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d10b0
call fcn.004048a4
test eax, eax
jle 0x4d00a7
mov eax, dword [ebp - 4]
call fcn.0046b620
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d10c0
call fcn.004048a4
test eax, eax
jle 0x4d00c7
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004cd3f0
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d10d0
call fcn.004048a4
test eax, eax
jle 0x4d00e7
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004c4758
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d10e4
call fcn.004048a4
test eax, eax
jle 0x4d0107
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004cd3dc
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d10f8
call fcn.004048a4
test eax, eax
jle 0x4d0136
call sub.user32.dll_ReleaseCapture
push 0
mov ecx, 0xf012
mov edx, 0x112
mov eax, dword [ebp - 4]
call fcn.0044fccc
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d1108
call fcn.004048a4
test eax, eax
jle 0x4d0156
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004c73fc
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d111c
call fcn.004048a4
test eax, eax
jle 0x4d0179
mov edx, 0x4d112c
mov eax, dword [ebp - 4]
call fcn.004c64c8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d0760
call fcn.004048a4
test eax, eax
jle 0x4d019c
mov edx, 0x4d0770
mov eax, dword [ebp - 4]
call fcn.004c64c8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d113c
call fcn.004048a4
test eax, eax
jle 0x4d01b7
call fcn.004b8a9c
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d114c
call fcn.004048a4
test eax, eax
jle 0x4d01f2
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 7
mov edx, 8
mov eax, dword [ebp - 8]
call fcn.004047c0
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 4]
call fcn.004c70b4
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d115c
call fcn.004048a4
test eax, eax
jle 0x4d0212
mov edx, 0x4d0dbc
mov eax, dword [ebp - 4]
call fcn.004c6c5c
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d116c
call fcn.004048a4
test eax, eax
jle 0x4d022d
mov eax, dword [ebp - 4]
call fcn.004c8520
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d117c
call fcn.004048a4
test eax, eax
jle 0x4d0248
mov eax, dword [ebp - 4]
call fcn.004c7da8
jmp 0x4d0261
mov edx, dword [ebp - 8]
mov eax, 0x4d116c
call fcn.004048a4
test eax, eax
jle 0x4d0261
mov eax, dword [ebp - 4]
call fcn.004c8520
mov byte [0x4da4ee], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d02e5
lea eax, [ebp - 0x114]
mov edx, 0x23
call fcn.004042b4
lea eax, [ebp - 0x88]
call fcn.00411358
lea eax, [ebp - 0x78]
call fcn.00405f58
lea eax, [ebp - 0x74]
mov edx, dword [0x4010f4]
mov ecx, 3
call fcn.004050cc
lea eax, [ebp - 0x44]
call fcn.00404290
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.004049c4
lea eax, [ebp - 0x38]
call fcn.00411358
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.004042b4
lea eax, [ebp - 8]
call fcn.00404290
ret