Function at 0x4efbbc
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x4efbc4
push ebx
push esi
push edi
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0xc]
call fcn.00404edc
xor eax, eax
push ebp
push 0x4f0c18
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
cmp dword [ebp - 0xc], 0
je 0x4f0bc5
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0xc]
mov eax, 0x4f0c30
call fcn.004c64d8
mov eax, dword [ebp - 0x20]
mov edx, 0x4f0c3c
call fcn.00404e38
jne 0x4f0bc5
xor eax, eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x19], 1
mov byte [ebp - 0x1a], 1
jmp 0x4f0aa2
lea ecx, [ebp - 4]
lea edx, [ebp - 0xc]
mov eax, 0x4f0c48
call fcn.004c64d8
lea ecx, [ebp - 0x14]
lea edx, [ebp - 4]
mov eax, 0x4f0c54
call fcn.004c64d8
xor eax, eax
push ebp
push 0x4f0a98
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0c60
call fcn.00404e38
jne 0x4efc74
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov byte [ebp - 0x1a], al
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0c70
call fcn.00404e38
jne 0x4efcde
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.004d0920
lea esi, [ebp - 0x30]
mov edi, 0x504738
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edx, dword [0x504738]
mov eax, dword [ebp - 8]
call fcn.00463ed4
mov edx, dword [0x50473c]
mov eax, dword [ebp - 8]
call fcn.00463ef8
mov edx, dword [0x504744]
sub edx, dword [0x50473c]
mov eax, dword [ebp - 8]
call fcn.00463f44
mov edx, dword [0x504740]
sub edx, dword [0x504738]
mov eax, dword [ebp - 8]
call fcn.00463f20
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0c80
call fcn.00404e38
jne 0x4efd04
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
test al, al
je 0x4efd04
mov dl, 2
mov eax, dword [ebp - 8]
call fcn.00450158
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0c94
call fcn.00404e38
jne 0x4efd24
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x684]
mov edx, dword [ebp - 4]
call fcn.004647bc
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0ca4
call fcn.00404e38
jne 0x4efd3e
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 4]
call fcn.00404ad4
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0cb0
call fcn.00404e38
jne 0x4efd5a
mov eax, 0x5046ac
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0cc4
call fcn.00404e38
jne 0x4efd81
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 4]
call fcn.004c5e88
mov edx, dword [ebp - 0x34]
mov eax, 0x50a59c
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0ce0
call fcn.00404e38
jne 0x4efd9d
mov eax, 0x50a534
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0cf4
call fcn.00404e38
jne 0x4efdba
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov byte [0x5021c8], al
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0d04
call fcn.00404e38
jne 0x4efde2
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x4e0]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0d20
call fcn.00404e38
jne 0x4efe0a
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x4e4]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0d38
call fcn.00404e38
jne 0x4efe27
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov byte [0x5021ac], al
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0d54
call fcn.00404e38
jne 0x4efe4f
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x400]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0d6c
call fcn.00404e38
jne 0x4efe6a
push ebp
call fcn.004ef91c
pop ecx
mov dword [0x5046b0], eax
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0d80
call fcn.00404e38
jne 0x4efe86
mov eax, 0x50a54c
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0d98
call fcn.00404e38
jne 0x4efea2
mov eax, 0x50a554
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0db0
call fcn.00404e38
jne 0x4efebd
push ebp
call fcn.004ef91c
pop ecx
mov dword [0x50a558], eax
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0dc8
call fcn.00404e38
jne 0x4efee5
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x39c]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0ddc
call fcn.00404e38
jne 0x4eff0d
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x398]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0df0
call fcn.00404e38
jne 0x4eff35
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x410]
call fcn.0043b7c4
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0e08
call fcn.00404e38
jne 0x4eff5d
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x594]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0e20
call fcn.00404e38
jne 0x4eff85
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x554]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0e34
call fcn.00404e38
jne 0x4effad
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5f0]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0e4c
call fcn.00404e38
jne 0x4effd5
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x674]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0e60
call fcn.00404e38
jne 0x4efffd
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x380]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0e7c
call fcn.00404e38
jne 0x4f0025
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x58c]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0e98
call fcn.00404e38
jne 0x4f004d
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x590]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0eb0
call fcn.00404e38
jne 0x4f0075
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x570]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0ec8
call fcn.00404e38
jne 0x4f009d
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x574]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0ee4
call fcn.00404e38
jne 0x4f00c5
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x588]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0efc
call fcn.00404e38
jne 0x4f00ed
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x584]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0f18
call fcn.00404e38
jne 0x4f0115
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x57c]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0f2c
call fcn.00404e38
jne 0x4f013d
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x578]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0f44
call fcn.00404e38
jne 0x4f0165
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x580]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0f60
call fcn.00404e38
jne 0x4f018d
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5fc]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0f78
call fcn.00404e38
jne 0x4f01a8
push ebp
call fcn.004ef91c
pop ecx
mov dword [0x5046b4], eax
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0f94
call fcn.00404e38
jne 0x4f01c3
push ebp
call fcn.004ef91c
pop ecx
mov dword [0x50a560], eax
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0fbc
call fcn.00404e38
jne 0x4f01eb
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x368]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0fd4
call fcn.00404e38
jne 0x4f0213
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5a0]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f0ff0
call fcn.00404e38
jne 0x4f023b
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3bc]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f100c
call fcn.00404e38
jne 0x4f0263
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x434]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1028
call fcn.00404e38
jne 0x4f028b
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x450]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1048
call fcn.00404e38
jne 0x4f02b3
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x548]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1068
call fcn.00404e38
jne 0x4f02db
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x518]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1088
call fcn.00404e38
jne 0x4f0303
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x444]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f10a4
call fcn.00404e38
jne 0x4f032b
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x418]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f10c8
call fcn.00404e38
jne 0x4f0353
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x35c]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f10e8
call fcn.00404e38
jne 0x4f037b
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x4d4]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1104
call fcn.00404e38
jne 0x4f03a3
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x648]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f111c
call fcn.00404e38
jne 0x4f03cb
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x654]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1134
call fcn.00404e38
jne 0x4f03f3
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x528]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1150
call fcn.00404e38
jne 0x4f041b
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x52c]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f116c
call fcn.00404e38
jne 0x4f0443
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x530]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f118c
call fcn.00404e38
jne 0x4f046b
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x4ac]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f11a4
call fcn.00404e38
jne 0x4f0493
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f11c0
call fcn.00404e38
jne 0x4f04bb
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f11d8
call fcn.00404e38
jne 0x4f04e3
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x508]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f11f4
call fcn.00404e38
jne 0x4f050b
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x420]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f121c
call fcn.00404e38
jne 0x4f052b
push ebp
call fcn.004ef91c
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.004f7930
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1230
call fcn.00404e38
jne 0x4f054b
push ebp
call fcn.004ef91c
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.004f7a14
mov eax, dword [ebp - 0x14]
mov edx, 0x4f124c
call fcn.00404e38
jne 0x4f0566
push ebp
call fcn.004ef91c
pop ecx
mov dword [0x504714], eax
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1268
call fcn.00404e38
jne 0x4f0581
push ebp
call fcn.004ef91c
pop ecx
call fcn.004ed46c
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1280
call fcn.00404e38
jne 0x4f059c
push ebp
call fcn.004ef91c
pop ecx
call fcn.004ed4b0
mov eax, dword [ebp - 0x14]
mov edx, 0x4f12a0
call fcn.00404e38
jne 0x4f05b7
push ebp
call fcn.004ef91c
pop ecx
call fcn.004ed508
mov eax, dword [ebp - 0x14]
mov edx, 0x4f12c0
call fcn.00404e38
jne 0x4f05d2
push ebp
call fcn.004ef91c
pop ecx
call fcn.004ed558
mov eax, dword [ebp - 0x14]
mov edx, 0x4f12e0
call fcn.00404e38
jne 0x4f0605
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [0x5021c0]
mov edx, 0x4f12f8
mov eax, dword [ebp - 4]
call fcn.00447e68
mov edx, dword [ebp - 0x38]
mov eax, 0x50a548
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1304
call fcn.00404e38
je 0x4f0623
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1318
call fcn.00404e38
jne 0x4f062b
mov eax, dword [ebp - 4]
call fcn.004ef940
mov eax, dword [ebp - 0x14]
mov edx, 0x4f132c
call fcn.00404e38
jne 0x4f0648
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov byte [0x50a5a0], al
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1344
call fcn.00404e38
jne 0x4f0670
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x610]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1360
call fcn.00404e38
jne 0x4f068c
mov eax, 0x50a56c
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1378
call fcn.00404e38
jne 0x4f06a8
mov eax, 0x504704
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1390
call fcn.00404e38
jne 0x4f06d0
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x4cc]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f13ac
call fcn.00404e38
jne 0x4f06f8
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x618]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f13d0
call fcn.00404e38
jne 0x4f0720
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x60c]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f13f4
call fcn.00404e38
jne 0x4f073c
mov eax, 0x5046d8
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1408
call fcn.00404e38
jne 0x4f0758
mov eax, 0x50a5a4
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1424
call fcn.00404e38
jne 0x4f0780
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5e4]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f143c
call fcn.00404e38
jne 0x4f07a0
push ebp
call fcn.004ef91c
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.004f7aec
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1450
call fcn.00404e38
jne 0x4f07bb
push ebp
call fcn.004ef91c
pop ecx
mov dword [0x504764], eax
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1464
call fcn.00404e38
jne 0x4f07d6
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov byte [ebp - 0x19], al
mov eax, dword [ebp - 0x14]
mov edx, 0x4f147c
call fcn.00404e38
jne 0x4f07fe
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x638]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f149c
call fcn.00404e38
jne 0x4f081a
mov eax, 0x504708
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f14bc
call fcn.00404e38
jne 0x4f0836
mov eax, 0x50a568
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f14d8
call fcn.00404e38
jne 0x4f0858
push ebp
call fcn.004ef91c
pop ecx
mov dword [0x50a578], eax
mov dword [0x50a57c], edx
mov eax, dword [ebp - 0x14]
mov edx, 0x4f14ec
call fcn.00404e38
jne 0x4f087a
push ebp
call fcn.004ef91c
pop ecx
mov dword [0x50a570], eax
mov dword [0x50a574], edx
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1500
call fcn.00404e38
jne 0x4f0895
push ebp
call fcn.004ef91c
pop ecx
mov dword [0x50a5a8], eax
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1518
call fcn.00404e38
jne 0x4f08b1
mov eax, 0x5046dc
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f152c
call fcn.00404e38
jne 0x4f08cd
mov eax, 0x50a584
mov edx, dword [ebp - 4]
call fcn.00404a90
mov eax, dword [ebp - 0x14]
mov edx, 0x4f154c
call fcn.00404e38
jne 0x4f08ff
lea ecx, [ebp - 0x3c]
mov edx, dword [ebp - 4]
mov eax, 0x4f155c
call fcn.004d02fc
mov edx, dword [ebp - 0x3c]
mov eax, 0x504724
mov ecx, dword [0x4070f4]
call fcn.004062e8
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1568
call fcn.00404e38
jne 0x4f0931
lea ecx, [ebp - 0x40]
mov edx, dword [ebp - 4]
mov eax, 0x4f157c
call fcn.004d02fc
mov edx, dword [ebp - 0x40]
mov eax, 0x50a538
mov ecx, dword [0x4070f4]
call fcn.004062e8
mov eax, dword [ebp - 0x14]
mov edx, 0x4f1588
call fcn.00404e38
jne 0x4f0963
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 4]
mov eax, 0x4f157c
call fcn.004d02fc
mov edx, dword [ebp - 0x44]
mov eax, 0x50a540
mov ecx, dword [0x4070f4]
call fcn.004062e8
mov eax, dword [ebp - 0x14]
mov edx, 0x4f15a0
call fcn.00404e38
jne 0x4f098b
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5e8]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f15bc
call fcn.00404e38
jne 0x4f09b3
push ebp
xor eax, eax
call fcn.004ef898
pop ecx
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5c8]
call fcn.0045c174
mov eax, dword [ebp - 0x14]
mov edx, 0x4f15d4
call fcn.00404e38
jne 0x4f09c9
push ebp
call fcn.004efa28
pop ecx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3b4]
mov eax, dword [eax + 0x208]
call fcn.0041e8d8
mov esi, eax
dec esi
test esi, esi
jl 0x4f0a8e
inc esi
xor ebx, ebx
push 0x4f15e8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3b4]
mov eax, dword [eax + 0x208]
mov edx, ebx
call fcn.00491cb0
push dword [eax + 0xc]
push 0x4f15fc
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.00404db4
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
call fcn.00404e38
jne 0x4f0a86
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3b4]
mov eax, dword [eax + 0x208]
mov edx, dword [ebp - 0x18]
call fcn.00491d44
mov edi, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3b4]
mov eax, dword [eax + 0x208]
mov edx, ebx
call fcn.00491cb0
mov edx, eax
mov eax, edi
mov ecx, dword [eax]
call dword [ecx + 8]
push ebp
call fcn.004ef91c
pop ecx
mov edx, eax
mov eax, edi
call fcn.00491c08
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3b4]
mov eax, dword [eax + 0x208]
mov edx, ebx
call fcn.0041ec70
inc ebx
dec esi
jne 0x4f09eb
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4f0aa2
cmp dword [ebp - 0xc], 0
ja 0x4efc2b
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x610]
cmp byte [eax + 0x38], 0
jne 0x4f0ae3
mov dword [0x50a578], 0
mov dword [0x50a57c], 0
mov dword [0x50a570], 0
mov dword [0x50a574], 0
cmp byte [ebp - 0x19], 0
je 0x4f0aff
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x480]
mov edx, dword [0x504764]
call fcn.00463f44
jmp 0x4f0b1b
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x480]
call fcn.00464cb4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x47c]
call fcn.00464cb4
mov eax, dword [ebp - 0x10]
call fcn.004ed2e8
cmp dword [0x5046b0], 0
jle 0x4f0b40
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x410]
mov edx, dword [0x5046b0]
call fcn.00463f20
cmp dword [0x5046b4], 0
jle 0x4f0b5d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3b0]
mov edx, dword [0x5046b4]
call fcn.00463f44
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x518]
mov al, byte [eax + 0x38]
mov edx, dword [0x504694]
mov byte [edx + 0x68], al
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5e4]
cmp byte [eax + 0x38], 0
je 0x4f0ba5
call fcn.0047dea0
test al, al
jne 0x4f0ba5
push 0x11
call sub.user32.dll_GetAsyncKeyState
movsx eax, ax
test ah, 0x80
jne 0x4f0ba5
call fcn.0047e184
xor eax, eax
call fcn.00404980
mov eax, dword [ebp - 8]
call fcn.004f8c08
mov eax, dword [ebp - 8]
call fcn.004f8fbc
cmp byte [ebp - 0x1a], 0
je 0x4f0bc3
mov eax, dword [ebp - 8]
call fcn.004ede4c
mov bl, 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4f0c1f
lea eax, [ebp - 0x48]
call fcn.00404a3c
lea eax, [ebp - 0x44]
mov edx, dword [0x4070f4]
mov ecx, 3
call fcn.00405570
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00404a60
lea eax, [ebp - 0x20]
call fcn.00404a3c
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404a60
lea eax, [ebp - 4]
call fcn.00404a3c
ret