Function at 0x4c9e50
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56b93e
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x661850]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x78], ecx
push str.Mon_Aug_10_09:17:16_2015
push 0x51d
push str.CMyHero::UpdateMotionState
push str.GameProcessMyHero.cpp
lea ecx, [ebp - 0xd]
call fcn.004024e0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x440d]
test ecx, ecx
je 0x4c9ec1
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x4408]
add eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x78]
mov dword [ecx + 0x4408], eax
mov edx, dword [ebp - 0x78]
movzx eax, byte [edx + 0x2f20]
test eax, eax
je 0x4c9ee4
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x2f24]
add edx, dword [ebp + 8]
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x2f24], edx
mov ecx, dword [ebp - 0x78]
movzx edx, word [ecx + 0x28c]
add edx, dword [ebp + 8]
mov eax, dword [ebp - 0x78]
mov word [eax + 0x28c], dx
mov ecx, dword [ebp - 0x78]
movzx edx, word [ecx + 0x28c]
mov eax, dword [ebp - 0x78]
movzx ecx, word [eax + 0x28a]
cmp edx, ecx
jl 0x4c9f35
xor edx, edx
mov eax, dword [ebp - 0x78]
mov word [eax + 0x28c], dx
xor ecx, ecx
mov edx, dword [ebp - 0x78]
mov word [edx + 0x28a], cx
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x28e], 0
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x190]
cmp edx, 0x13
jne 0x4c9f66
mov ecx, dword [ebp - 0x78]
call fcn.004523e0
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x150]
sub edx, 1
cmp eax, edx
jb 0x4c9f66
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x29c], 1
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x29c]
test edx, edx
je 0x4c9f92
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x440c], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
jmp 0x4ca9ec
mov ecx, dword [ebp - 0x78]
movzx edx, word [ecx + 0x198]
add edx, dword [ebp + 8]
mov eax, dword [ebp - 0x78]
mov word [eax + 0x198], dx
mov ecx, dword [ebp - 0x78]
movzx edx, word [ecx + 0x2fae]
add edx, dword [ebp + 8]
mov eax, dword [ebp - 0x78]
mov word [eax + 0x2fae], dx
mov ecx, dword [ebp - 0x78]
movzx edx, word [ecx + 0x2fae]
cmp edx, 0x96
jle 0x4ca00c
mov eax, dword [ebp - 0x78]
mov cl, byte [eax + 0x2fac]
add cl, 1
mov edx, dword [ebp - 0x78]
mov byte [edx + 0x2fac], cl
xor eax, eax
mov ecx, dword [ebp - 0x78]
mov word [ecx + 0x2fae], ax
mov edx, dword [ebp - 0x78]
movzx eax, byte [edx + 0x2fac]
cmp eax, 2
jle 0x4ca00c
mov ecx, dword [ebp - 0x78]
mov byte [ecx + 0x2fac], 0
mov edx, dword [ebp + 8]
push edx
movzx eax, byte [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x78]
mov eax, dword [edx + 0x38]
call eax
movzx ecx, al
test ecx, ecx
je 0x4ca04f
mov edx, dword [ebp - 0x78]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x78]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
jmp 0x4ca9ec
mov eax, dword [ebp - 0x78]
movzx ecx, word [eax + 0x198]
mov edx, dword [ebp - 0x78]
movzx eax, word [edx + 0x154]
cmp ecx, eax
jle 0x4ca152
xor ecx, ecx
mov edx, dword [ebp - 0x78]
mov word [edx + 0x198], cx
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x300c]
test ecx, ecx
je 0x4ca0c2
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov ecx, dword [edx + 0x3000]
cmp ecx, dword [eax + 0x3008]
jae 0x4ca0b0
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x3000]
add eax, 1
mov ecx, dword [ebp - 0x78]
mov dword [ecx + 0x3000], eax
jmp 0x4ca0c2
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x3004]
mov dword [edx + 0x3000], ecx
mov ecx, dword [ebp - 0x78]
call fcn.004523e0
mov edx, dword [ebp - 0x78]
cmp eax, dword [edx + 0x150]
jae 0x4ca152
mov ecx, dword [ebp - 0x78]
call fcn.004523e0
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
add eax, 1
push eax
mov ecx, dword [ebp - 0x78]
call fcn.00452390
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x78]
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x190]
cmp edx, 3
je 0x4ca11a
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x190]
cmp ecx, 2
jne 0x4ca152
mov edx, dword [ebp - 0x78]
movzx eax, byte [edx + 0x278]
test eax, eax
je 0x4ca152
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x1e0]
add edx, 1
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x1e0], edx
mov ecx, dword [ebp - 0x78]
mov dl, byte [ecx + 0x1ec]
add dl, 1
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x1ec], dl
mov ecx, dword [ebp - 0x78]
movzx edx, word [ecx + 0x1a2]
push edx
mov eax, dword [ebp - 0x78]
movzx ecx, word [eax + 0x1a0]
push ecx
call dword [0x69d478]
mov edx, dword [ebp - 0x78]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x78]
mov edx, dword [eax + 0x2c]
call edx
mov eax, dword [ebp - 0x78]
cmp dword [eax + 0x4408], 0x7d0
jbe 0x4ca1a1
mov ecx, dword [ebp - 0x78]
mov dword [ecx + 0x4408], 0
mov edx, dword [ebp - 0x78]
mov byte [edx + 0x440d], 0
mov eax, dword [ebp - 0x78]
cmp dword [eax + 0x2f24], 0x3e8
jbe 0x4ca1c7
mov ecx, dword [ebp - 0x78]
mov dword [ecx + 0x2f24], 0
mov edx, dword [ebp - 0x78]
mov byte [edx + 0x2f20], 0
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x190]
cmp ecx, 3
jne 0x4ca248
mov edx, dword [ebp - 0x78]
movzx eax, byte [edx + 0x278]
test eax, eax
je 0x4ca248
mov ecx, dword [ebp - 0x78]
call fcn.004523e0
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x150]
sub edx, 1
cmp eax, edx
jb 0x4ca243
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x78]
mov edx, dword [eax + 0x1e0]
sub edx, dword [ecx + 0x1e4]
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x1ed]
sub ecx, 2
cmp edx, ecx
jae 0x4ca243
mov edx, 0x46
mov eax, dword [ebp - 0x78]
mov word [eax + 0x154], dx
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x150]
sub edx, 2
push edx
mov ecx, dword [ebp - 0x78]
call fcn.00452390
jmp 0x4ca327
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x190]
cmp ecx, 2
jne 0x4ca327
mov edx, dword [ebp - 0x78]
movzx eax, byte [edx + 0x278]
test eax, eax
je 0x4ca327
mov ecx, dword [ebp - 0x78]
call fcn.004523e0
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x150]
sub edx, 3
cmp eax, edx
jb 0x4ca2d7
mov ecx, dword [ebp - 0x78]
call fcn.004523e0
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x150]
sub edx, 2
cmp eax, edx
jae 0x4ca2d7
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x78]
mov edx, dword [eax + 0x1e0]
sub edx, dword [ecx + 0x1e4]
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x1ed]
sub ecx, 4
cmp edx, ecx
jae 0x4ca2d5
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x150]
sub eax, 4
push eax
mov ecx, dword [ebp - 0x78]
call fcn.00452390
jmp 0x4ca327
mov ecx, dword [ebp - 0x78]
call fcn.004523e0
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x150]
sub edx, 2
cmp eax, edx
jb 0x4ca318
mov ecx, dword [ebp - 0x78]
call fcn.004523e0
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x150]
sub edx, 1
cmp eax, edx
jae 0x4ca318
mov eax, 0xc8
mov ecx, dword [ebp - 0x78]
mov word [ecx + 0x154], ax
jmp 0x4ca327
mov edx, 0x50
mov eax, dword [ebp - 0x78]
mov word [eax + 0x154], dx
mov ecx, dword [ebp - 0x78]
call fcn.004523e0
mov ecx, dword [ebp - 0x78]
cmp eax, dword [ecx + 0x150]
jb 0x4ca518
mov ecx, dword [ebp - 0x78]
call fcn.0045dd30
mov edx, dword [ebp - 0x78]
movzx eax, byte [edx + 0x190]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x1d
ja case.0x4ca367.1
mov ecx, dword [ebp - 0x7c]
movzx edx, byte [ecx + 0x4caa18]
jmp dword [edx*4 + 0x4caa08]
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x440c], 0
mov ecx, dword [ebp - 0x78]
mov byte [ecx + 0x440d], 0
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x14c]
push eax
mov ecx, dword [ebp - 0x78]
call fcn.00452390
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x2f48]
test edx, edx
jne 0x4ca3be
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x191]
push ecx
push 0
mov edx, dword [ebp - 0x78]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x78]
mov edx, dword [eax + 0x24]
call edx
jmp 0x4ca3d8
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x191]
push ecx
push 0x1d
mov edx, dword [ebp - 0x78]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x78]
mov edx, dword [eax + 0x24]
call edx
jmp 0x4ca518
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x440d], 0
mov ecx, dword [ebp - 0x78]
mov byte [ecx + 0x440c], 0
mov edx, dword [ebp - 0x78]
mov byte [edx + 0x278], 0
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x279], 0
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x14c]
push edx
mov ecx, dword [ebp - 0x78]
call fcn.00452390
jmp 0x4ca518
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x440d], 0
mov ecx, dword [ebp - 0x78]
mov byte [ecx + 0x440c], 0
mov edx, dword [ebp - 0x78]
movzx eax, byte [edx + 0x2f20]
test eax, eax
jne 0x4ca45a
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x191]
push edx
push 0
mov eax, dword [ebp - 0x78]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x78]
mov eax, dword [edx + 0x24]
call eax
jmp 0x4ca46c
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x14c]
push edx
mov ecx, dword [ebp - 0x78]
call fcn.00452390
jmp 0x4ca518
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x442c], 1
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x440d]
test edx, edx
jne 0x4ca503
mov eax, dword [ebp - 0x78]
mov byte [eax + 0x440c], 0
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x2f48]
test edx, edx
jne 0x4ca4e7
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x2f20]
test ecx, ecx
je 0x4ca4cb
mov edx, dword [ebp - 0x78]
movzx eax, byte [edx + 0x191]
push eax
push 7
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x78]
mov eax, dword [edx + 0x24]
call eax
jmp 0x4ca4e5
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x191]
push edx
push 0
mov eax, dword [ebp - 0x78]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x78]
mov eax, dword [edx + 0x24]
call eax
jmp 0x4ca501
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x191]
push edx
push 0x1d
mov eax, dword [ebp - 0x78]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x78]
mov eax, dword [edx + 0x24]
call eax
jmp 0x4ca518
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x150]
sub edx, 1
push edx
mov ecx, dword [ebp - 0x78]
call fcn.00452390
mov eax, dword [ebp - 0x78]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x78]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp - 0x78]
movzx edx, byte [ecx + 0x190]
test edx, edx
je 0x4ca555
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x190]
cmp ecx, 0x1d
je 0x4ca555
mov edx, dword [ebp - 0x78]
movzx eax, byte [edx + 0x190]
cmp eax, 7
jne 0x4ca95e
mov ecx, dword [ebp - 0x78]
mov byte [ecx + 0x442c], 1
mov byte [ebp - 0xe], 0
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
shr edx, 8
and edx, 0xff
movzx eax, dl
test eax, eax
je 0x4ca82d
movzx ecx, byte [0x6ad964]
test ecx, ecx
je 0x4ca82d
mov edx, dword [0x7ada48]
push edx
mov eax, dword [0x7ada44]
push eax
mov ecx, 0x6eeef8
call fcn.00495b70
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x15], 0
cmp dword [ebp - 0x14], 0xe
jne 0x4ca5d0
mov ecx, dword [0x7ada48]
push ecx
mov edx, dword [0x7ada44]
push edx
mov ecx, 0x776a70
call fcn.004c1050
mov byte [ebp - 0x15], al
cmp dword [ebp - 0x14], 0xffffffff
je 0x4ca5ec
cmp dword [ebp - 0x14], 0xe
jne 0x4ca828
movzx eax, byte [ebp - 0x15]
test eax, eax
jne 0x4ca828
mov ecx, 0x6f09c4
call fcn.00516820
movzx ecx, al
test ecx, ecx
jne 0x4ca828
movzx edx, byte [0x7a8004]
test edx, edx
je 0x4ca63c
mov eax, dword [0x7ada48]
push eax
mov ecx, dword [0x7ada44]
push ecx
push 0x7a8008
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x4ca63c
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
jmp 0x4ca9ec
mov edx, dword [ebp - 0x78]
movzx eax, byte [edx + 0x5704]
test eax, eax
je 0x4ca687
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, 0x6eeef8
call fcn.00498a10
mov edx, dword [0x7ada48]
push edx
mov eax, dword [0x7ada44]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x4ca687
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
jmp 0x4ca9ec
movzx edx, byte [0x6657b9]
test edx, edx
je 0x4ca6d0
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x6eeef8
call fcn.00498910
mov ecx, dword [0x7ada48]
push ecx
mov edx, dword [0x7ada44]
push edx
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x4ca6d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
jmp 0x4ca9ec
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, 0x6eeef8
call fcn.00498b30
mov edx, dword [0x7ada48]
push edx
mov eax, dword [0x7ada44]
push eax
lea ecx, [ebp - 0x4c]
push ecx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x4ca70d
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
jmp 0x4ca9ec
lea edx, [ebp - 0x4c]
push edx
mov ecx, 0x6eeef8
call fcn.00498c30
mov eax, dword [0x7ada48]
push eax
mov ecx, dword [0x7ada44]
push ecx
lea edx, [ebp - 0x4c]
push edx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x4ca74a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
jmp 0x4ca9ec
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x6eeef8
call fcn.00498d10
mov ecx, dword [0x7ada48]
push ecx
mov edx, dword [0x7ada44]
push edx
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x4ca788
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
jmp 0x4ca9ec
movzx ecx, word [0x6658dc]
sub ecx, 0x82
cmp dword [0x7ada48], ecx
jge 0x4ca828
movzx edx, byte [0x6eef44]
test edx, edx
jne 0x4ca828
cmp dword [0x7bc21c], 0
je 0x4ca80a
mov eax, dword [0x7bc21c]
movzx ecx, word [eax + 0x1a8]
mov dword [ebp - 0x54], ecx
mov edx, dword [0x7bc21c]
movzx eax, word [edx + 0x1aa]
mov dword [ebp - 0x50], eax
lea ecx, [ebp - 0x54]
push ecx
mov edx, dword [0x7bc21c]
movzx eax, byte [edx + 0x29c]
push eax
mov ecx, dword [0x7bc21c]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [0x7ada48]
push eax
mov ecx, dword [0x7ada44]
push ecx
mov ecx, dword [ebp - 0x78]
call fcn.004cbb90
mov byte [ebp - 0xe], al
jmp 0x4ca828
push 0
push 0
push 0xffffffffffffffff
mov edx, dword [0x7ada48]
push edx
mov eax, dword [0x7ada44]
push eax
mov ecx, dword [ebp - 0x78]
call fcn.004cbb90
mov byte [ebp - 0xe], al
jmp 0x4ca915
push 2
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
shr ecx, 8
and ecx, 0xff
movzx edx, cl
test edx, edx
je 0x4ca915
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, 0x69ec08
call fcn.004edfb0
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebp - 0x58], 0
jle 0x4ca915
movzx edx, word [0x6658dc]
cmp dword [ebp - 0x58], edx
jge 0x4ca915
cmp dword [ebp - 0x5c], 0
jle 0x4ca915
movzx eax, word [0x6658d8]
cmp dword [ebp - 0x5c], eax
jge 0x4ca915
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
shr ecx, 8
and ecx, 0xff
movzx edx, cl
test edx, edx
jne 0x4ca915
mov eax, dword [0x7ada48]
push eax
mov ecx, dword [0x7ada44]
push ecx
mov ecx, 0x6eeef8
call fcn.00495b70
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffff
je 0x4ca8dc
cmp dword [ebp - 0x60], 0xe
jne 0x4ca915
movzx edx, word [0x6658dc]
sub edx, 0x82
cmp dword [0x7ada48], edx
jge 0x4ca915
movzx eax, byte [0x6eef44]
test eax, eax
jne 0x4ca915
mov ecx, dword [0x7ada48]
push ecx
mov edx, dword [0x7ada44]
push edx
mov ecx, dword [ebp - 0x78]
call fcn.004cc990
mov byte [ebp - 0xe], al
movzx eax, byte [ebp - 0xe]
test eax, eax
jne 0x4ca95e
movzx ecx, byte [0x7d62b1]
test ecx, ecx
je 0x4ca93f
movzx edx, byte [0x7d62b2]
test edx, edx
je 0x4ca93f
mov ecx, 0x7d27e8
call fcn.00444e40
jmp 0x4ca95e
movzx eax, byte [0x7d8067]
test eax, eax
je 0x4ca956
mov ecx, 0x7d27e8
call fcn.00445de0
jmp 0x4ca95e
mov ecx, dword [ebp - 0x78]
call fcn.004ce8e0
mov ecx, dword [ebp - 0x78]
cmp dword [ecx + 0x2f54], 0
jne 0x4ca9dd
push 0x3e8
push 1
call fcn.0053e280
add esp, 8
cmp eax, 1
jne 0x4ca9dd
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x68], edx
push 0x1e0a
push 1
call fcn.0053e280
add esp, 8
mov dword [ebp - 0x6c], eax
push 0x5a20
push 0x1e0f
call fcn.0053e280
add esp, 8
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x70], eax
jmp 0x4ca9bc
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
mov edx, dword [ebp - 0x70]
cmp edx, dword [ebp - 0x64]
jge 0x4ca9dd
push 0xff
push 0
call fcn.0053e280
add esp, 8
mov ecx, dword [ebp - 0x68]
add ecx, dword [ebp - 0x70]
mov byte [ecx], al
jmp 0x4ca9b3
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd]
call fcn.00402620
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0054514c
mov esp, ebp
pop ebp
ret 8