Function at 0x4679b0
Capabilities:
Log keystrokes via polling
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov eax, dword [edi + 4]
cmp eax, 0x20c
mov ebx, ecx
jne 0x467a07
mov edx, dword [ebx + 0x5120]
test edx, edx
je 0x467a07
movzx eax, word [edi + 0xa]
test al, 1
je 0x4679f0
call fcn.004d7ce0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test al, 2
je 0x4679f9
call fcn.004d7d20
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [0x63c8f0], 0
jne 0x467a17
cmp eax, 0x200
je 0x4679f9
cmp eax, 0x100
jne 0x467ab0
mov edx, dword [ebx + 0x5120]
test edx, edx
je 0x467ab0
mov eax, dword [edi + 8]
cmp eax, 0xa6
jne 0x467a41
call fcn.004d7ce0
jmp 0x467ab0
cmp eax, 0xa7
jne 0x467a4f
call fcn.004d7d20
jmp 0x467ab0
cmp eax, 0xa8
jne 0x467a69
mov esi, dword [ebx + 0x5120]
mov ecx, dword [esi + 0xa78]
call fcn.004dccd0
jmp 0x467ab0
cmp eax, 0xa9
jne 0x467a83
mov ecx, dword [ebx + 0x5120]
mov eax, dword [ecx + 0xa78]
call fcn.004d7d60
jmp 0x467ab0
cmp eax, 0xaa
jne 0x467a91
call fcn.004d7ce0
jmp 0x467ab0
cmp eax, 0xab
jne 0x467a9f
push 0x8058
jmp 0x467aab
cmp eax, 0xac
jne 0x467ab0
push 0x80da
call fcn.00473390
cmp dword [edi + 4], 0x100
jne 0x467e5a
mov eax, dword [edi + 8]
cmp eax, 0xad
jne 0x467ae9
lea esi, [ebx + 0xed8]
mov ecx, esi
call fcn.0050e2e0
mov edx, eax
neg edx
sbb edx, edx
add edx, 1
mov eax, esi
call fcn.0050e350
jmp 0x467b8c
cmp eax, 0xae
jne 0x467b1c
lea esi, [ebx + 0xed8]
call fcn.0050e610
add eax, 0xfffffff6
mov edx, esi
call fcn.0050e590
call fcn.0050e610
lea esi, [ebx + 0x2148]
mov edi, eax
call fcn.004f8930
mov edi, dword [ebp + 8]
jmp 0x467b8c
cmp eax, 0xaf
jne 0x467b4f
lea esi, [ebx + 0xed8]
call fcn.0050e610
add eax, 0xa
mov edx, esi
call fcn.0050e590
call fcn.0050e610
lea esi, [ebx + 0x2148]
mov edi, eax
call fcn.004f8930
mov edi, dword [ebp + 8]
jmp 0x467b8c
cmp eax, 0xb0
jne 0x467b5f
mov ecx, ebx
call fcn.00465600
jmp 0x467b8c
cmp eax, 0xb1
jne 0x467b6f
mov ecx, ebx
call fcn.004655d0
jmp 0x467b8c
cmp eax, 0xb2
jne 0x467b7f
mov esi, ebx
call fcn.004655b0
jmp 0x467b8c
cmp eax, 0xb3
jne 0x467b8c
push ebx
call fcn.004652e0
cmp dword [edi + 4], 0x100
jne 0x467e5a
call dword [sym.imp.USER32.dll_GetFocus]
push eax
call fcn.00558074
mov edi, eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
cmp eax, 9
je 0x46833f
cmp eax, 0x28
je 0x46833f
test edi, edi
jne 0x467bc7
xor edx, edx
jmp 0x467bca
mov edx, dword [edi + 0x20]
lea esi, [ebx + 0x6ff8]
test esi, esi
jne 0x467bd8
xor ecx, ecx
jmp 0x467bdb
mov ecx, dword [esi + 0x20]
cmp edx, ecx
jne 0x467c46
cmp eax, 0x25
je 0x467bf4
cmp eax, 0x26
jne 0x467c46
mov ecx, esi
call fcn.004045c0
test eax, eax
jne 0x467c46
cmp dword [ebx + 0x7058], 0
jne 0x467c16
lea ecx, [ebx + 0x3af0]
call fcn.0055c225
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebx + 0x5120]
call fcn.004d7fc0
cmp dword [eax], 1
jne 0x467c38
mov eax, dword [eax + 4]
test eax, eax
je 0x467c38
lea ecx, [eax + 0x590]
call fcn.0055c225
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
jne 0x467c4e
xor ecx, ecx
jmp 0x467c51
mov ecx, dword [edi + 0x20]
lea esi, [ebx + 0x6e10]
test esi, esi
jne 0x467c5f
xor eax, eax
jmp 0x467c62
mov eax, dword [esi + 0x20]
cmp ecx, eax
jne 0x467c9a
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 8]
cmp eax, 0x25
je 0x467c81
cmp eax, 0x26
jne 0x467c9a
mov ecx, esi
call fcn.004045c0
test eax, eax
jne 0x467c9a
lea ecx, [ebx + 0x3900]
call fcn.0055c225
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebp + 8]
mov edx, dword [edx + 8]
cmp edx, 0x20
je 0x4681c6
cmp edx, 0xd
je 0x4681c6
cmp edx, 0x27
jne 0x467e0f
test edi, edi
jne 0x467cc3
xor ecx, ecx
jmp 0x467cc6
mov ecx, dword [edi + 0x20]
test esi, esi
jne 0x467cce
xor eax, eax
jmp 0x467cd1
mov eax, dword [esi + 0x20]
cmp ecx, eax
jne 0x467cf1
push 0x3ea
push 1
mov ecx, ebx
call fcn.00469120
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
jne 0x467cf9
xor ecx, ecx
jmp 0x467cfc
mov ecx, dword [edi + 0x20]
lea eax, [ebx + 0x6ff8]
test eax, eax
je 0x467d09
mov eax, dword [eax + 0x20]
cmp ecx, eax
je 0x468218
test edi, edi
jne 0x467d19
xor ecx, ecx
jmp 0x467d1c
mov ecx, dword [edi + 0x20]
lea eax, [ebx + 0x3900]
test eax, eax
je 0x467d29
mov eax, dword [eax + 0x20]
cmp ecx, eax
jne 0x467d92
mov edx, dword [ebx + 0x3920]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x14]
push ecx
push 0xb0
push edx
call esi
mov eax, dword [ebx + 0x3920]
push 0
push 0xffffffffffffffff
push 0xc1
push eax
call esi
mov ecx, dword [esp + 0x14]
cmp ecx, eax
jne 0x467e5a
cmp dword [esp + 0x10], ecx
jne 0x467e5a
push 0
push 0
mov ecx, ebx
call fcn.00469d00
push ebx
call fcn.004757a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
jne 0x467d9a
xor ecx, ecx
jmp 0x467d9d
mov ecx, dword [edi + 0x20]
lea eax, [ebx + 0x3af0]
test eax, eax
je 0x467daa
mov eax, dword [eax + 0x20]
cmp ecx, eax
jne 0x467e5a
mov eax, dword [ebx + 0x3b10]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x14]
push edx
push 0xb0
push eax
call esi
mov ecx, dword [ebx + 0x3b10]
push 0
push 0xffffffffffffffff
push 0xc1
push ecx
call esi
mov ecx, dword [esp + 0x14]
cmp ecx, eax
jne 0x467e5a
cmp dword [esp + 0x10], ecx
jne 0x467e5a
push 0
push 0
mov ecx, ebx
call fcn.0046a060
push ebx
call fcn.004757a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edx, 0x70
jne 0x467e38
mov ecx, 0x63c840
call fcn.00402180
push 0xc1c
mov ecx, ebx
call fcn.0046d460
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edx, 0x71
jne 0x467ec9
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge 0x467ea1
push 0x5a5f
mov ecx, ebx
call fcn.0046d6a0
mov esi, dword [ebp + 8]
cmp dword [esi + 4], 0x100
jne 0x46843d
cmp dword [esi + 8], 0x4c
jne 0x46843d
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call edi
test ax, ax
jge 0x468443
push 0x5609
mov ecx, ebx
call fcn.0046d6a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [ebx + 0xe8], 2
jne 0x467e5a
mov eax, dword [ebx + 0x5120]
test eax, eax
je 0x467e5a
push 0xffffffffffffffff
call fcn.004dcd50
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edx, 0x72
jne 0x467f7e
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call esi
test ax, ax
jge 0x467f16
mov eax, dword [ebx + 0x5120]
push 1
call fcn.004de4f0
mov edx, dword [ebx + 0x5120]
mov eax, dword [edx + 0x9b0]
test eax, eax
je 0x467f70
push 1
push 1
push eax
call fcn.00403af0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x10
call esi
test ax, ax
jge 0x467f54
mov eax, dword [ebx + 0x5120]
push 1
call fcn.004de4f0
mov eax, dword [ebx + 0x5120]
mov eax, dword [eax + 0x9b0]
test eax, eax
je 0x467f70
push 1
push 0
push eax
call fcn.00403af0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [ebx + 0xe8], 2
jne 0x467f70
mov ebx, dword [ebx + 0x5120]
test ebx, ebx
je 0x467f70
push 1
mov eax, ebx
call fcn.004dcd50
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edx, 0x73
jne 0x467fa4
mov ebx, dword [ebx + 0x5120]
mov ecx, dword [ebx + 0xa78]
push ecx
push ebx
call fcn.004d53e0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edx, 0x74
jne 0x467fc8
mov esi, dword [ebx + 0x5120]
mov ecx, dword [esi + 0xa78]
call fcn.004dccd0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edx, 0x7a
jne 0x468023
mov eax, dword [ebx + 0xe8]
cmp eax, 2
jne 0x467ffd
mov edx, dword [ebx + 0x5120]
xor eax, eax
cmp dword [0x63c618], eax
push edx
sete al
call fcn.004dcdb0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test eax, eax
jne 0x468015
cmp dword [0x63c618], eax
lea esi, [ebx + 0xb88]
sete al
call fcn.004e9630
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edx, 0x1b
jne 0x4680fc
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge 0x468095
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
test ecx, ecx
je 0x4680ee
mov edx, dword [ecx + 0xa64]
add edx, dword [ecx + 0xa50]
xor esi, esi
test edx, edx
jle 0x4680ee
mov eax, esi
call fcn.004d7d60
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
mov edx, dword [ecx + 0xa64]
add edx, dword [ecx + 0xa50]
add esi, 1
cmp esi, edx
jl 0x468062
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
push 0
mov ecx, ebx
call fcn.0046a060
push 0
push 0
mov ecx, ebx
call fcn.00469d00
cmp dword [ebx + 0xe8], 2
jne 0x4680ee
cmp dword [ebx + 0x5120], 0
je 0x4680ee
add ebx, 0x3900
mov ecx, ebx
call fcn.0055c225
mov eax, dword [ebx + 0x20]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0xffffffffffffffff
push 0
push 0xb1
push eax
call esi
mov ecx, dword [ebx + 0x20]
push 0
push 0
push 0xb7
push ecx
call esi
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp edx, 0x46
jne 0x46812a
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge 0x46812a
cmp dword [ebx + 0xe8], 0
jne 0x46812a
call fcn.00454e70
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebp + 8]
cmp dword [edx + 8], 0x53
jne 0x46815c
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge 0x46815c
cmp dword [ebx + 0xe8], 0
jne 0x46815c
call fcn.00454ed0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp + 8]
cmp dword [eax + 8], 0x46
jne 0x467e5a
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jge 0x467e5a
cmp dword [ebx + 0xe8], 2
jne 0x467e5a
mov eax, dword [ebx + 0x5120]
call fcn.004de220
test eax, eax
mov eax, dword [ebx + 0x5120]
jle 0x4681b1
push 0
call fcn.004de4f0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 1
call fcn.004de4f0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
jne 0x4681ce
xor ecx, ecx
jmp 0x4681d1
mov ecx, dword [edi + 0x20]
test esi, esi
jne 0x4681d9
xor eax, eax
jmp 0x4681dc
mov eax, dword [esi + 0x20]
cmp ecx, eax
jne 0x4681fc
push 0x3ea
push 0
mov ecx, ebx
call fcn.00469120
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
jne 0x468204
xor ecx, ecx
jmp 0x468207
mov ecx, dword [edi + 0x20]
lea eax, [ebx + 0x6ff8]
test eax, eax
je 0x468214
mov eax, dword [eax + 0x20]
cmp ecx, eax
jne 0x468234
push 0x3eb
push 0
mov ecx, ebx
call fcn.00469120
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
jne 0x46823c
xor ecx, ecx
jmp 0x46823f
mov ecx, dword [edi + 0x20]
lea eax, [ebx + 0x3af0]
test eax, eax
je 0x46824c
mov eax, dword [eax + 0x20]
cmp ecx, eax
jne 0x468275
cmp edx, 0xd
jne 0x468275
push 0
push 0
mov ecx, ebx
call fcn.0046a060
mov esi, ebx
call fcn.00475d90
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
jne 0x46827d
xor ecx, ecx
jmp 0x468280
mov ecx, dword [edi + 0x20]
lea eax, [ebx + 0x3900]
test eax, eax
je 0x46828d
mov eax, dword [eax + 0x20]
cmp ecx, eax
jne 0x467e5a
cmp edx, 0xd
jne 0x467e5a
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x10
mov dword [esp + 0x14], 0
call esi
push 0x12
movsx edi, ax
call esi
movsx ecx, ax
push 0x11
mov dword [esp + 0x18], ecx
call esi
movsx eax, ax
test eax, eax
mov eax, dword [esp + 0x14]
jge 0x4682df
test eax, eax
jl 0x46830d
test edi, edi
jl 0x468303
mov dword [esp + 0x10], 1
jmp 0x468323
test eax, eax
jl 0x4682f5
test edi, edi
jge 0x4682f1
mov dword [esp + 0x10], 2
jmp 0x468323
test eax, eax
jge 0x468323
test edi, edi
jl 0x46831b
mov dword [esp + 0x10], 3
jmp 0x468323
mov dword [esp + 0x10], 4
jmp 0x468323
test edi, edi
jl 0x468323
mov dword [esp + 0x10], 5
jmp 0x468323
mov dword [esp + 0x10], 6
mov edx, dword [esp + 0x10]
push edx
push 0
mov ecx, ebx
call fcn.00469690
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
jne 0x468347
xor ecx, ecx
jmp 0x46834a
mov ecx, dword [edi + 0x20]
lea eax, [ebx + 0x3af0]
test eax, eax
je 0x468357
mov eax, dword [eax + 0x20]
cmp ecx, eax
jne 0x4683d4
mov eax, dword [ebx + 0x7018]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x46838b
lea esi, [ebx + 0x6ff8]
mov ecx, esi
call fcn.0055c225
mov ecx, dword [ebx + 0x7018]
push 0
push 0
push 0x188
push ecx
jmp 0x4683b3
push 0
push 0
mov ecx, ebx
call fcn.00469d40
lea esi, [ebx + 0x6ff8]
mov ecx, esi
call fcn.0055c225
mov edx, dword [ebx + 0x7018]
push 0
push 0
push 0x188
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jge 0x4683c6
push 0
mov ecx, esi
call fcn.004045a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
jne 0x4683dc
xor ecx, ecx
jmp 0x4683df
mov ecx, dword [edi + 0x20]
lea eax, [ebx + 0x3900]
test eax, eax
je 0x4683ec
mov eax, dword [eax + 0x20]
cmp ecx, eax
jne 0x467e5a
mov eax, dword [ebx + 0x6e30]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x46840e
push eax
push eax
mov ecx, ebx
call fcn.00469a30
add ebx, 0x6e10
mov ecx, ebx
call fcn.0055c225
mov ecx, ebx
call fcn.004045c0
test eax, eax
jge 0x46842f
push 0
mov ecx, ebx
call fcn.004045a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
cmp dword [esi + 4], 0x100
jne 0x46877d
cmp dword [esi + 8], 0x52
jne 0x46848f
push 0x11
call edi
test ax, ax
jge 0x46848f
cmp dword [ebx + 0xe8], 2
jne 0x46848f
mov eax, dword [ebx + 0x5120]
test eax, eax
je 0x46848f
cmp dword [eax + 0xa78], 0
jl 0x46848f
push eax
call fcn.004ddfa0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x46877d
cmp dword [esi + 8], 0x4e
jne 0x4684e0
push 0x11
call edi
test ax, ax
jge 0x4684e0
cmp dword [ebx + 0xe8], 2
jne 0x4684e0
cmp dword [ebx + 0x5120], 0
je 0x4684e0
push 0x10
call edi
test ax, ax
jge 0x4684e0
mov ecx, dword [ebx + 0x5120]
push ecx
call fcn.004dd420
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x46877d
cmp dword [esi + 8], 0x57
jne 0x468576
push 0x11
call edi
test ax, ax
jge 0x468534
cmp dword [ebx + 0xe8], 2
jne 0x468534
cmp dword [ebx + 0x5120], 0
je 0x468534
push 0x10
call edi
test ax, ax
jge 0x468534
mov esi, dword [ebx + 0x5120]
call fcn.004d4140
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x11
call edi
test ax, ax
jge 0x468576
cmp dword [ebx + 0xe8], 2
jne 0x468576
mov eax, dword [ebx + 0x5120]
test eax, eax
je 0x468576
cmp dword [eax + 0xa78], 0
jl 0x468576
mov ebx, eax
mov edx, dword [ebx + 0xa78]
push edx
push ebx
call fcn.004d53e0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x46877d
cmp dword [esi + 8], 0x54
jne 0x4685c7
push 0x11
call edi
test ax, ax
jge 0x4685c7
cmp dword [ebx + 0xe8], 2
jne 0x4685c7
mov eax, dword [ebx + 0x5120]
test eax, eax
je 0x4685c7
push 0xffffffffffffffff
push 1
push 0
push 1
push 0
push 0
push 0
push eax
call fcn.004d5b30
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x46877d
cmp dword [esi + 8], 0x45
jne 0x46860e
push 0x11
call edi
test ax, ax
jge 0x46860e
cmp dword [ebx + 0xe8], 2
jne 0x46860e
cmp dword [ebx + 0x5120], 0
je 0x46860e
push ebx
mov ecx, 5
call fcn.00474730
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x46877d
cmp dword [esi + 8], 0x4b
jne 0x468656
push 0x11
call edi
test ax, ax
jge 0x468656
push 2
push 0x5ed878
push 0
add ebx, 0x18f4
push ebx
call fcn.0049f9d0
lea esi, [esp + 0xf]
call fcn.004576f0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x46877d
cmp dword [esi + 8], 0x55
jne 0x468699
push 0x11
call edi
test ax, ax
jge 0x468699
cmp dword [ebx + 0xe8], 2
jne 0x468699
mov eax, dword [ebx + 0x5120]
test eax, eax
je 0x468699
push eax
call fcn.004d96d0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x46877d
cmp dword [esi + 8], 0x49
jne 0x468701
push 0x11
call edi
test ax, ax
jge 0x468701
cmp dword [ebx + 0xe8], 2
jne 0x4686eb
mov eax, dword [ebx + 0x5120]
test eax, eax
je 0x4686eb
cmp dword [eax + 0xa78], 0
jl 0x4686eb
push 0x564d
mov ecx, ebx
call fcn.0046d6a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x46877d
cmp dword [esi + 8], 0xbb
jne 0x46873f
push 0x11
call edi
test ax, ax
jge 0x46873f
push 0x10
call edi
test ax, ax
jl 0x46873f
push 0x5624
mov ecx, ebx
call fcn.0046d6a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x46877d
cmp dword [esi + 8], 0xbd
jne 0x46877d
push 0x11
call edi
test ax, ax
jge 0x46877d
push 0x10
call edi
test ax, ax
jl 0x46877d
push 0x5625
mov ecx, ebx
call fcn.0046d6a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi + 4]
cmp eax, 0x100
jne 0x46884b
cmp dword [esi + 8], 0x75
jne 0x4687a7
cmp dword [ebx + 0xe8], 2
jne 0x4687a7
cmp dword [ebx + 0x5120], 0
jne 0x4680bd
cmp eax, 0x100
jne 0x46884b
cmp dword [esi + 8], 0x76
jne 0x468809
cmp dword [ebx + 0xe8], 2
jne 0x468809
cmp dword [ebx + 0x5120], 0
je 0x468809
add ebx, 0x3af0
mov ecx, ebx
call fcn.0055c225
mov edx, dword [ebx + 0x20]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0xffffffffffffffff
push 0
push 0xb1
push edx
call esi
mov eax, dword [ebx + 0x20]
push 0
push 0
push 0xb7
push eax
call esi
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x100
jne 0x46884b
cmp dword [esi + 8], 0x44
jne 0x46884b
push 0x11
call edi
test ax, ax
jge 0x46884b
cmp dword [ebx + 0xe8], 2
jne 0x46884b
cmp dword [ebx + 0x5120], 0
je 0x46884b
push 0x805a
mov ecx, ebx
call fcn.00473390
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x4689fc
cmp dword [esi + 8], 0x48
jne 0x468893
push 0x11
call edi
test ax, ax
jge 0x468893
cmp dword [ebx + 0xe8], 2
jne 0x468893
cmp dword [ebx + 0x5120], 0
je 0x468893
push 0x5bcc
mov ecx, ebx
call fcn.0046d6a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x4689fc
cmp dword [esi + 8], 0x4f
jne 0x4688c9
push 0x11
call edi
test ax, ax
jge 0x4688c9
push 0x800f
mov ecx, ebx
call fcn.00473390
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x4689fc
cmp dword [esi + 8], 0x53
jne 0x4688ff
push 0x11
call edi
test ax, ax
jge 0x4688ff
push 0x802f
mov ecx, ebx
call fcn.00473390
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x4689fc
cmp dword [esi + 8], 0x47
jne 0x468989
push 0x11
call edi
test ax, ax
jge 0x468989
cmp dword [ebx + 0xe8], 2
jne 0x468989
mov edx, dword [ebx + 0x5120]
test edx, edx
je 0x468989
mov ecx, dword [edx + 0xa78]
call fcn.004da4e0
mov esi, eax
test esi, esi
je 0x4686eb
xor ecx, ecx
cmp dword [esi + 0x1a0], ecx
sete cl
push ecx
mov ecx, esi
call fcn.004f0a30
xor edx, edx
cmp dword [esi + 0x1a0], edx
mov ecx, esi
sete dl
mov edi, edx
call fcn.004f0670
xor eax, eax
cmp dword [esi + 0x1a0], eax
sete al
mov dword [esi + 0x1a0], eax
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x100
jne 0x4689fc
cmp dword [esi + 8], 0x42
jne 0x4689fc
push 0x11
call edi
test ax, ax
jge 0x4689fc
cmp dword [ebx + 0xe8], 2
jne 0x4689fc
mov edx, dword [ebx + 0x5120]
test edx, edx
je 0x4689fc
mov ecx, dword [edx + 0xa78]
call fcn.004da4e0
mov esi, eax
test esi, esi
je 0x4686eb
xor ecx, ecx
cmp dword [esi + 0x1a4], ecx
sete cl
mov edi, ecx
mov ecx, esi
call fcn.004f0940
xor edx, edx
cmp dword [esi + 0x1a4], edx
mov eax, 1
sete dl
mov dword [esi + 0x1a4], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 4], 0x104
jne 0x468ac9
cmp dword [esi + 8], 0xd
jne 0x468ac9
call dword [sym.imp.USER32.dll_GetFocus]
push eax
call fcn.00558074
test eax, eax
jne 0x468a27
xor ecx, ecx
jmp 0x468a2a
mov ecx, dword [eax + 0x20]
lea eax, [ebx + 0x3900]
test eax, eax
je 0x468a37
mov eax, dword [eax + 0x20]
cmp ecx, eax
jne 0x468ac9
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x10
call edi
push 0x12
movsx esi, ax
call edi
push 0x11
movsx edi, ax
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, eax
jl 0x468a87
test edi, edi
jge 0x468ab1
test esi, esi
jl 0x468aac
mov esi, 3
push esi
push 0
mov ecx, ebx
call fcn.00469690
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
test edi, edi
jge 0x468ab1
test esi, esi
jl 0x468ab1
mov esi, 5
push esi
push 0
mov ecx, ebx
call fcn.00469690
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, 6
push esi
push 0
mov ecx, ebx
call fcn.00469690
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esi + 4]
cmp ecx, 0x104
jne 0x468b01
cmp dword [esi + 8], 0x79
jne 0x468b01
mov edi, 2
cmp dword [ebx + 0xe8], edi
jne 0x468b06
push 0x59d9
mov ecx, ebx
call fcn.0046d6a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edi, 2
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x26
jne 0x468b2e
cmp dword [ebx + 0xe8], edi
jne 0x468b2e
mov eax, dword [ebx + 0x5120]
test eax, eax
jne 0x467eb4
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x28
jne 0x468b67
cmp dword [ebx + 0xe8], edi
jne 0x468b67
mov eax, dword [ebx + 0x5120]
test eax, eax
je 0x468b67
push 1
call fcn.004dcd50
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x27
jne 0x468b8f
cmp dword [ebx + 0xe8], edi
jne 0x468b8f
mov edx, dword [ebx + 0x5120]
test edx, edx
jne 0x4679f4
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x25
jne 0x468bc6
cmp dword [ebx + 0xe8], edi
jne 0x468bc6
mov edx, dword [ebx + 0x5120]
test edx, edx
je 0x468bc6
call fcn.004d7ce0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x43
jne 0x468bf2
push 0x59df
mov ecx, ebx
call fcn.0046d6a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x51
jne 0x468c2f
cmp dword [ebx + 0xe8], edi
jne 0x468c2f
cmp dword [ebx + 0x5120], 0
je 0x468c2f
push 0x59de
mov ecx, ebx
call fcn.0046d6a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x31
jne 0x468c76
cmp dword [ebx + 0xe8], edi
jne 0x468c76
mov eax, dword [ebx + 0x5120]
test eax, eax
je 0x468c76
cmp dword [eax + 0xa78], 0
jl 0x468c76
push 0x55f2
mov ecx, ebx
call fcn.0046d6a0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x46
jne 0x468ca5
push 0
push 0
lea ecx, [ebx + 0x4270]
call fcn.0047a8b0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x45
jne 0x468cbd
push 0
push 1
jmp 0x468c8c
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x56
jne 0x468cd4
push 0
push edi
jmp 0x468c8c
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x53
jne 0x468cec
push 0
push 3
jmp 0x468c8c
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x41
jne 0x468d04
push 0
push 4
jmp 0x468c8c
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x54
jne 0x468d1f
push 0
push 5
jmp 0x468c8c
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x48
jne 0x468d36
push 0
push 6
jmp 0x468c8c
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x55
jne 0x468d4d
push 0
push 7
jmp 0x468c8c
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x4d
jne 0x468d75
push 0x805e
mov ecx, ebx
call fcn.00473390
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp ecx, 0x104
jne 0x468d98
cmp dword [esi + 8], 0x44
jne 0x468d98
cmp dword [ebx + 0xe8], edi
jne 0x468d98
cmp dword [ebx + 0x5120], 0
jne 0x4680bd
cmp ecx, 0x201
je 0x468dac
cmp ecx, 0x204
jne 0x468ef2
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x18]
mov edi, dword [sym.imp.USER32.dll_ScreenToClient]
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], edx
mov edx, dword [ebx + 0x2360]
push ecx
push edx
mov dword [esp + 0x2c], eax
call edi
lea eax, [ebx + 0x30d0]
lea edx, [esp + 0x20]
call fcn.0049d8e0
mov dword [esp + 0x1c], eax
lea eax, [ebx + 0x3340]
lea edx, [esp + 0x20]
call fcn.0049d8e0
mov ecx, dword [ebx + 0x5120]
mov dword [esp + 0x18], eax
xor eax, eax
cmp ecx, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
je 0x468e4e
call fcn.004d7fc0
test eax, eax
je 0x468e4e
cmp dword [eax], 1
jne 0x468e4e
mov esi, dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x18]
lea eax, [esp + 0x20]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
mov ecx, dword [esi + 0x90]
push eax
push ecx
call edi
lea eax, [esi + 0x620]
lea edx, [esp + 0x20]
call fcn.0049d8e0
mov esi, dword [ebp + 8]
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x5120]
test eax, eax
je 0x468e9e
cmp dword [eax + 0x9b0], 0
je 0x468e9e
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], ecx
mov eax, dword [eax + 0x9b0]
mov ecx, dword [eax + 0x20]
lea edx, [esp + 0x20]
push edx
push ecx
call edi
mov edx, dword [ebx + 0x5120]
mov eax, dword [edx + 0x9b0]
add eax, 0x80c
lea edx, [esp + 0x20]
call fcn.0049d8e0
mov dword [esp + 0x10], eax
lea eax, [ebx + 0x6ff8]
test eax, eax
je 0x468eab
mov eax, dword [eax + 0x20]
cmp dword [esi], eax
je 0x468ecf
cmp dword [esp + 0x18], 0
jne 0x468ecf
cmp dword [esp + 0x14], 0
jne 0x468ecf
cmp dword [esp + 0x10], 0
jne 0x468ecf
push 0
push 0
mov ecx, ebx
call fcn.0046a060
lea eax, [ebx + 0x6e10]
test eax, eax
je 0x468edc
mov eax, dword [eax + 0x20]
cmp dword [esi], eax
je 0x468ef2
cmp dword [esp + 0x1c], 0
jne 0x468ef2
push 0
push 0
mov ecx, ebx
call fcn.00469d00
push esi
mov ecx, ebx
call fcn.00556359
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4