Function at 0x46751e
Capabilities:
Check for unmoving mouse cursor
Log keystrokes via polling
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x168
push ebx
xor ebx, ebx
cmp dword [ebp + 0x7c], ebx
push esi
push edi
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x34], ebx
jne 0x46753f
mov eax, dword [ecx + 0x28]
mov dword [ebp + 0x7c], eax
mov eax, dword [ebp + 0x74]
mov dword [ebp + 0x74], eax
lea eax, [ebp + 0x74]
push eax
call fcn.00430961
mov eax, dword [ebp + 0x74]
pop ecx
lea ecx, [ebp + 0x3c]
mov esi, ecx
mov word [ebp + 0x3c], bx
mov edi, eax
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x68], ecx
mov dword [ebp + 0x4c], esi
jmp 0x467570
cmp cx, 0x3d
je 0x46757a
inc eax
inc eax
mov cx, word [eax]
cmp cx, bx
jne 0x467568
jmp 0x467583
lea esi, [eax + 2]
mov word [eax], bx
mov dword [ebp + 0x4c], esi
push edi
call fcn.0040cd10
mov eax, dword [ebp + 0x60]
cmp byte [eax + 0x92], 0
pop ecx
mov dword [ebp + 0x2c], ebx
jne 0x4675b1
test byte [eax + 9], 0xf
jne 0x4675b1
mov ecx, dword [ebp + 0x60]
push 1
push ebx
lea eax, [ebp + 0x2c]
push eax
push edi
call fcn.0043e6fb
jmp 0x4675c1
mov ecx, dword [ebp + 0x60]
push 1
push ebx
lea eax, [ebp + 0x2c]
push eax
push edi
call fcn.0043d5b3
lea ecx, [ebp + 0x30]
call fcn.00435d62
mov ecx, dword [ebp + 0x60]
push 1
push ebx
lea eax, [ebp + 0x30]
push eax
push esi
call fcn.0043e7f3
mov eax, dword [ebp + 0x30]
mov edi, dword [ebp + 0x2c]
mov esi, dword [sym.imp.KERNEL32.DLL_lstrcmpiW]
mov dword [ebp + 0x68], eax
cmp word [edi], 0x40
jne 0x467792
push 0x49d94c
push edi
call esi
test eax, eax
jne 0x4676ee
mov edx, dword [ebp + 0x68]
cmp word [edx], bx
mov dword [ebp + 0x7c], 0xfff80000
mov dword [ebp + 0x78], edx
mov eax, edx
je 0x467646
mov cx, word [eax]
cmp cx, 0x2c
je 0x46763a
cmp cx, 0x3b
je 0x46763a
cmp cx, 0x3a
je 0x46763a
cmp cx, 0x23
je 0x46763a
inc eax
inc eax
cmp word [eax], bx
jne 0x467616
jmp 0x467646
mov word [eax], bx
mov edx, dword [ebp + 0x68]
add eax, 2
mov dword [ebp + 0x78], eax
push edx
push 0x49d940
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x46769b
lea ecx, [ebp + 0x74]
call fcn.00435d62
push 0x23
pop ecx
mov esi, 0x49d8b0
lea edi, [ebp - 0xc4]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x60]
push 1
push ebx
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp - 0xc4]
push eax
movsw word es:[edi], word [esi]
call fcn.0043d5b3
push 1
push dword [ebp + 0x74]
call fcn.00412e6d
pop ecx
pop ecx
lea ecx, [ebp + 0x74]
call fcn.0043092f
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.00438b8e
test byte [ebp + 0x7c], 4
pop ecx
pop ecx
je 0x4676b7
call fcn.00402d29
jmp 0x4676e7
cmp dword [ebp + 0x7c], 2
jne 0x4676dd
push ebx
push 0x4ad068
push 0x49d8a4
push 0x49d884
call fcn.00431911
add esp, 0x10
call dword [0x4ad068]
jmp 0x4676e7
cmp dword [ebp + 0x7c], ebx
jl 0x4676e7
call fcn.00473a6e
xor esi, esi
jmp 0x468bf1
push 0x49d868
push edi
call esi
test eax, eax
jne 0x467792
push dword [ebp + 0x68]
push 0x497f58
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x467753
push dword [ebp + 0x68]
push 0x49c430
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x467740
push dword [ebp + 0x68]
push 0x49796c
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x4676e7
cmp byte [0x4acdf8], 0
je 0x467753
mov ecx, 0x4ad2b0
mov byte [0x4acdf8], 0
call fcn.00430e8d
jmp 0x4676e7
cmp byte [0x4b0003], 0
je 0x46776b
push dword [0x4ace08]
mov byte [0x4acdf8], 1
jmp 0x46778b
mov eax, dword [0x4acf38]
cmp eax, ebx
je 0x4676e7
cmp dword [eax + 0x18], ebx
je 0x4676e7
mov byte [0x4acdf8], 1
push dword [eax + 0x18]
call fcn.0040e35f
jmp 0x4677a2
mov ax, word [edi]
cmp ax, bx
jne 0x4677a8
push dword [ebp + 0x60]
call fcn.0040e9a4
pop ecx
jmp 0x4676e7
cmp ax, 0x40
je 0x4677c1
push dword [ebp + 0x60]
call fcn.0040e9a4
cmp dword [ebp + 0x7c], ebx
pop ecx
jne 0x4677c6
jmp 0x4676e7
cmp dword [ebp + 0x7c], ebx
je 0x4677ce
mov eax, dword [ebp + 0x7c]
mov eax, dword [eax + 0x78]
jmp 0x4677d3
mov eax, 0x4949a4
push eax
lea ecx, [ebp + 0x1c]
call fcn.004403c3
push edi
lea ecx, [ebp + 0x38]
call fcn.004403c3
xor ecx, ecx
mov cx, word [edi]
cmp cx, bx
mov eax, edi
mov dword [ebp + 0x74], eax
je 0x467815
cmp cx, 0x2e
jne 0x4677fd
mov dword [ebp + 0x50], eax
inc eax
inc eax
mov cx, word [eax]
cmp cx, bx
jne 0x4677f4
cmp dword [ebp + 0x50], ebx
mov dword [ebp + 0x74], eax
je 0x467815
mov eax, dword [ebp + 0x50]
mov dword [ebp + 0x74], eax
cmp word [eax], 0x2e
mov dword [ebp + 0x54], ebx
jne 0x467829
mov word [eax], bx
inc eax
inc eax
mov dword [ebp + 0x74], eax
mov dword [ebp + 0x54], eax
lea eax, [ebp + 0x74]
push eax
call fcn.00430961
cmp dword [ebp + 0x54], ebx
pop ecx
je 0x46784e
mov eax, dword [ebp + 0x74]
mov dword [ebp + 0x54], eax
lea eax, [ebp + 0x74]
push eax
call fcn.00404579
mov eax, dword [ebp + 0x74]
pop ecx
mov word [eax], bx
mov ebx, dword [ebp + 0x78]
test ebx, ebx
mov byte [ebp + 0x5b], 0
mov byte [ebp + 0x74], 0
je 0x4678f7
cmp word [ebx], 0
mov ecx, ebx
je 0x4678f7
push 0x7e
pop esi
xor edx, edx
mov dx, word [ecx]
mov eax, edx
call fcn.0040bc38
test al, al
jne 0x4678f7
cmp dx, 0x2e
je 0x4678e6
cmp dx, 0x24
je 0x4678e6
cmp dx, 0x25
je 0x4678e6
cmp dx, 0x2a
jne 0x46789e
or byte [ebp + 0x74], 4
jmp 0x4678eb
cmp dx, si
jne 0x4678eb
lea eax, [ecx + 2]
cmp word [eax], si
jne 0x4678b3
or byte [ebp + 0x74], 2
mov ecx, eax
jmp 0x4678eb
cmp dx, si
jne 0x4678eb
lea eax, [ecx + 2]
cmp word [eax], 0x2e
jne 0x4678c7
or byte [ebp + 0x74], 8
jmp 0x4678af
cmp dx, si
jne 0x4678eb
lea eax, [ecx + 2]
cmp word [eax], 0x2a
jne 0x4678db
or byte [ebp + 0x74], 0xa
jmp 0x4678af
cmp dx, si
jne 0x4678eb
or byte [ebp + 0x74], 1
jmp 0x4678eb
mov al, byte [ecx]
mov byte [ebp + 0x5b], al
inc ecx
inc ecx
cmp word [ecx], 0
jne 0x467870
and dword [ebp + 0x78], 0
cmp byte [ebp + 0x74], 0
je 0x467913
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
lea eax, [ebp + 0x30]
push eax
call fcn.0044dda1
mov dword [ebp + 0x68], eax
lea ecx, [ebp + 0x20]
call fcn.00435d62
cmp byte [ebp + 0x5b], 0
je 0x46793c
cmp byte [ebp + 0x5b], 0x2e
je 0x46793c
lea eax, [ebp + 0x78]
push eax
push ebx
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00444e35
add esp, 0x10
push edi
lea ecx, [ebp + 0x14]
call fcn.004403c3
mov eax, dword [ebp + 0x14]
xor esi, esi
cmp dword [ebp + 0x54], esi
mov dword [ebp + 0x18], eax
jne 0x467959
mov dword [ebp + 0x54], 0x4949a4
cmp word [edi], 0x40
je 0x4684b1
mov eax, 0x4ad684
push eax
mov dword [ebp + 0x44], esi
mov dword [ebp + 0x64], eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov edi, dword [ebp + 0x60]
mov byte [ebp + 0x7b], 1
mov byte [ebp + 0x7f], 0
mov byte [ebp + 0x77], 0
mov dword [ebp + 0x50], edi
cmp byte [ebp + 0x7f], 0
je 0x467991
mov byte [ebp + 0x77], 1
mov ebx, dword [ebp + 0x18]
push 0x3a
lea eax, [ebp + 0x5c]
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x5c], ebx
call fcn.004754d0
mov eax, dword [ebp + 0x5c]
cmp word [eax], 0x3a
pop ecx
mov byte [ebp + 0x7f], 0
jne 0x4679c6
and word [eax], 0
add eax, 2
cmp word [eax], 0
mov dword [ebp + 0x18], eax
je 0x4679c6
mov byte [ebp + 0x7f], 1
cmp byte [ebp + 0x7b], 0
je 0x4679e7
push ebx
push 0x49b9a0
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x4679e7
mov ebx, dword [ebp + 0x1c]
mov byte [ebp + 0x77], 1
mov dword [ebp + 0x48], ebx
mov esi, dword [edi + 0x28]
push ebx
push 0x495888
mov byte [ebp + 0x7b], 0
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x467a4a
mov edi, dword [edi + 0x24]
mov esi, dword [edi + 0x28]
test esi, esi
mov dword [ebp + 0x50], edi
je 0x467a11
lea eax, [esi + 0x78]
jmp 0x467a25
or dword [ebp + 0x34], 1
push 0x4949a4
lea ecx, [ebp + 0x28]
call fcn.004403c3
lea eax, [ebp + 0x28]
test byte [ebp + 0x34], 1
mov ebx, dword [eax]
mov dword [ebp + 0x48], ebx
je 0x467a3c
and dword [ebp + 0x34], 0xfffffffe
lea ecx, [ebp + 0x28]
call fcn.0043092f
cmp byte [ebp + 0x7f], 0
mov byte [ebp + 0x77], 1
jne 0x46798d
test esi, esi
je 0x467b2a
cmp esi, dword [ebp + 0x44]
je 0x467b2a
cmp byte [ebp + 0x7f], 0
jne 0x467a74
mov eax, dword [esi + 0x78]
push ebx
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcmpiW]
test eax, eax
je 0x467b68
and dword [ebp + 0x5c], 0
cmp dword [esi + 0x80], 0
jle 0x467ab8
xor ebx, ebx
mov eax, dword [esi + 0x7c]
mov edi, dword [ebx + eax + 4]
test edi, edi
je 0x467aa7
mov eax, dword [edi + 0x78]
test eax, eax
je 0x467aa7
push dword [ebp + 0x48]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcmpiW]
test eax, eax
je 0x467b66
inc dword [ebp + 0x5c]
mov eax, dword [ebp + 0x5c]
add ebx, 0x10
cmp eax, dword [esi + 0x80]
jl 0x467a83
mov eax, dword [esi + 0xc4]
xor ebx, ebx
cmp dword [eax], ebx
jle 0x467b02
mov eax, dword [esi + 0xc0]
mov eax, dword [eax]
mov edi, dword [eax + ebx*4]
test edi, edi
je 0x467af7
mov eax, dword [edi + 8]
test eax, eax
je 0x467af7
push dword [ebp + 0x48]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcmpiW]
test eax, eax
jne 0x467af7
cmp byte [ebp + 0x7f], al
je 0x467eb7
cmp dword [edi + 4], 0xf
je 0x467b58
mov eax, dword [esi + 0xc4]
inc ebx
cmp ebx, dword [eax]
jl 0x467ac4
cmp byte [ebp + 0x7f], 0
jne 0x468415
push dword [ebp + 0x48]
lea eax, [esi + 0x160]
push eax
call fcn.0047442b
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x467cc1
mov edi, dword [ebp + 0x50]
cmp byte [ebp + 0x77], 0
jne 0x468415
mov edi, dword [edi + 0x24]
mov dword [ebp + 0x44], esi
xor esi, esi
cmp edi, esi
mov dword [ebp + 0x50], edi
je 0x467fa0
cmp edi, 0x4acf10
jne 0x467987
jmp 0x467fa0
mov eax, dword [edi + 0x1c]
mov edi, dword [eax + 0x150]
jmp 0x467984
mov esi, edi
mov edi, dword [ebp + 0x54]
push edi
push 0x49d858
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x467edd
push edi
push 0x49d850
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x467bb1
mov ecx, dword [esi + 0xf4]
xor edi, edi
push edi
push edi
push dword [ebp + 0x60]
push esi
push dword [ebp + 0x4c]
call fcn.0047b06b
cmp dword [ebp + 0x64], edi
mov esi, eax
jmp 0x467fa3
push edi
push 0x49d848
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x467bdf
mov ecx, dword [esi + 0xf4]
lea eax, [ebp + 0x64]
push eax
push 1
push dword [ebp + 0x60]
push esi
push dword [ebp + 0x4c]
call fcn.0047b06b
jmp 0x468462
push edi
push 0x494c74
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x467c5f
mov eax, dword [esi + 0xf4]
mov edi, dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x60]
mov dword [ebp], eax
mov eax, dword [esi + 0x18]
xor ebx, ebx
mov dword [ebp + 4], eax
mov eax, dword [ebp + 0x64]
cmp eax, ebx
mov dword [ebp - 0x10], 3
mov dword [ebp - 0xc], ebx
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], 1
mov dword [ebp + 0x10], ebx
je 0x467c37
push eax
mov dword [ebp + 0x64], ebx
call edi
lea eax, [ebp - 0x10]
push eax
push esi
push 0x465
push dword [esi + 0x18]
call dword [sym.imp.USER32.DLL_SendMessageW]
cmp dword [ebp + 0x64], ebx
mov esi, eax
je 0x468bd1
push dword [ebp + 0x64]
call edi
jmp 0x468bd1
push edi
push 0x49d844
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x4680fd
push edi
push 0x49d840
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x467c8f
mov esi, dword [esi + 0x18]
xor ebx, ebx
jmp 0x467fda
mov eax, dword [ebp + 0x64]
test eax, eax
mov edi, dword [esi + 0x18]
je 0x467ca4
and dword [ebp + 0x64], 0
push eax
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
push 0
push esi
push dword [ebp + 0x38]
push dword [ebp + 0x54]
push dword [ebp + 0x68]
push edi
push dword [ebp + 0x60]
call fcn.00430c54
add esp, 0x1c
jmp 0x467f9e
mov ebx, dword [ebp + 0x54]
cmp word [ebx], 0
jne 0x467cf3
push dword [ebp + 0x68]
lea ecx, [edi + 4]
call fcn.00440487
mov edi, dword [edi + 0xc]
cmp word [edi], 0
je 0x467f9e
push dword [ebp + 0x68]
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00435749
jmp 0x467f9e
push ebx
push 0x49d838
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x467dae
mov eax, dword [ebp + 0x68]
movzx eax, word [eax]
xor ebx, ebx
push eax
mov dword [ebp + 0x7c], ebx
call fcn.004103b8
add esp, 4
test al, al
jne 0x467d28
cmp dword [ebp + 0x64], ebx
jmp 0x468419
push dword [esi + 0x18]
call dword [sym.imp.USER32.DLL_GetMenu]
mov esi, eax
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438b8e
cmp esi, ebx
pop ecx
pop ecx
je 0x467d65
mov eax, dword [ebp + 0x7c]
neg eax
sbb eax, eax
and eax, 0xfffffffd
add eax, 3
or eax, 0x400
push eax
push dword [edi + 0x14]
push dword [edi + 0x10]
call dword [sym.imp.USER32.DLL_EnableMenuItem]
cmp dword [ebp + 0x7c], ebx
je 0x467d6f
and byte [edi], 0xfe
jmp 0x467d72
or byte [edi], 1
lea eax, [edi + 0xc]
push eax
lea ecx, [ebp + 0x7c]
call fcn.00440414
push 0x4991a8
lea ecx, [ebp + 0x7c]
call fcn.00435dd0
test byte [edi], 1
mov eax, 0x497a68
jne 0x467d9a
mov eax, 0x498f40
mov ecx, dword [ebp + 0x60]
push eax
push dword [ebp + 0x7c]
call fcn.0044a781
lea ecx, [ebp + 0x7c]
jmp 0x467ead
push ebx
push 0x49d834
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x467f9e
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x3f
jne 0x467dd0
add dword [ebp + 0x68], 2
lea ecx, [ebp + 0x78]
call fcn.00435d62
lea ecx, [ebp + 0x74]
call fcn.00435d62
lea ecx, [ebp + 0x7c]
call fcn.00435d62
mov ebx, dword [ebp + 0x60]
push 0x2c
push 0x3b
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042c70d
push 0x2c
push 0x3b
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042c70d
push 0x2c
push 0x3b
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042c70d
push dword [edi + 0x10]
mov esi, dword [sym.imp.USER32.DLL_wsprintfW]
lea eax, [ebp - 0xfc]
push 0x497e64
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0xfc]
push eax
push dword [ebp + 0x78]
mov ecx, ebx
call fcn.00435749
movzx eax, word [edi + 2]
push eax
mov ebx, 0x4952f4
lea eax, [ebp - 0xfc]
push ebx
push eax
call esi
mov ecx, dword [ebp + 0x60]
add esp, 0xc
lea eax, [ebp - 0xfc]
push eax
push dword [ebp + 0x74]
call fcn.00435749
push dword [edi + 0x14]
lea eax, [ebp - 0xfc]
push ebx
push eax
call esi
mov ecx, dword [ebp + 0x60]
add esp, 0xc
lea eax, [ebp - 0xfc]
push eax
push dword [ebp + 0x7c]
call fcn.00435749
lea ecx, [ebp + 0x7c]
call fcn.0043092f
lea ecx, [ebp + 0x74]
call fcn.0043092f
lea ecx, [ebp + 0x78]
call fcn.0043092f
jmp 0x467f9e
push dword [ebp + 0x54]
push 0x49d858
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x467fb7
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x23
je 0x467fb7
mov esi, edi
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x23
sete bl
test bl, bl
je 0x467eef
add dword [ebp + 0x68], 2
or dword [ebp + 0x7c], 0xffffffff
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438b8e
test bl, bl
pop ecx
pop ecx
je 0x467f85
cmp dword [ebp + 0x7c], 0
jle 0x467f7a
mov ebx, dword [esi + 0x18]
mov esi, dword [esi + 0xf4]
mov edi, 0x4ad684
push edi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
test esi, esi
je 0x467f71
test ebx, ebx
je 0x467f71
xor edi, edi
call fcn.00433339
push edi
call dword [sym.imp.KERNEL32.DLL_SetLastError]
push edi
push dword [0x4ace04]
push 0x4332cb
push 7
call dword [sym.imp.USER32.DLL_SetWindowsHookExW]
mov dword [0x4ad1f4], eax
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp dword [0x4ad1f4], edi
je 0x467f6a
mov dword [0x4ad1fc], esi
mov dword [0x4ad1f8], ebx
push 0x4ad684
jmp 0x467f72
push edi
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
jmp 0x467f9e
jne 0x467f9e
xor edi, edi
call fcn.00433339
jmp 0x467f9e
cmp dword [ebp + 0x7c], 0
jle 0x467f96
push dword [esi + 0x18]
call dword [sym.imp.USER32.DLL_SetCapture]
jmp 0x467f9e
jne 0x467f9e
call dword [sym.imp.USER32.DLL_ReleaseCapture]
xor esi, esi
cmp dword [ebp + 0x64], esi
je 0x468bd1
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
jmp 0x468bd1
push dword [ebp + 0x54]
push 0x49d840
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x4680e4
mov eax, dword [edi + 0x1c]
mov esi, dword [eax + 0x18]
add ebx, 0x1000
lea eax, [ebp + 0x68]
push eax
call fcn.00430961
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x3f
pop ecx
je 0x46805d
cmp dword [ebp + 0x64], 0
je 0x467ffc
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
or dword [ebp + 0x7c], 0xffffffff
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x68]
push eax
call fcn.00430961
mov eax, dword [ebp + 0x68]
xor bl, bl
cmp word [eax], 0x2a
pop ecx
jne 0x468020
mov bl, byte [eax]
inc eax
inc eax
mov dword [ebp + 0x68], eax
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438b8e
test eax, eax
pop ecx
pop ecx
jle 0x468bcf
test bl, bl
je 0x4685e3
cmp dword [ebp + 0x7c], 0
jl 0x468bcf
xor eax, eax
cmp dword [ebp + 0x7c], eax
setne al
push eax
call dword [sym.imp.USER32.DLL_ShowCursor]
jmp 0x468bcf
lea ecx, [ebp + 0x74]
call fcn.00435d62
lea ecx, [ebp + 0x7c]
call fcn.00435d62
add dword [ebp + 0x68], 2
push 0x2c
push 0x3b
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438739
mov eax, dword [ebp + 0x68]
add esp, 0x10
cmp word [eax], 0
je 0x4680a6
add dword [ebp + 0x68], 2
push 0x2c
push 0x3b
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438739
add esp, 0x10
push 0x49c0c8
push dword [ebp + 0x74]
mov eax, esi
cdq
push edx
push eax
push dword [ebp + 0x60]
call fcn.0043804c
push 0x4952f4
push dword [ebp + 0x7c]
push ebx
push dword [ebp + 0x60]
call fcn.0043807b
add esp, 0x24
lea ecx, [ebp + 0x7c]
call fcn.0043092f
lea ecx, [ebp + 0x74]
call fcn.0043092f
jmp 0x468499
push dword [ebp + 0x54]
push 0x49d844
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x46826d
mov esi, edi
lea eax, [ebp + 0x68]
push eax
call fcn.00430961
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x3f
pop ecx
jne 0x467fed
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.USER32.DLL_GetCursorPos]
mov eax, dword [ebp + 0x40]
mov dword [ebp + 0x24], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp + 0x28], eax
lea eax, [ebp + 0x24]
push eax
push dword [esi + 0x18]
call dword [sym.imp.USER32.DLL_ScreenToClient]
lea ecx, [ebp + 0x50]
call fcn.00435d62
lea ecx, [ebp + 0x5c]
call fcn.00435d62
lea ecx, [ebp + 0x78]
call fcn.00435d62
lea ecx, [ebp + 0x74]
call fcn.00435d62
lea ecx, [ebp + 0x7c]
call fcn.00435d62
add dword [ebp + 0x68], 2
push 0x2c
pop edi
push edi
push 0x3b
pop esi
push esi
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0042c75a
push edi
push esi
lea eax, [ebp + 0x5c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0042c75a
push edi
push esi
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0042c75a
push edi
push esi
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0042c75a
add esp, 0x40
push edi
push esi
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0042c75a
push dword [ebp + 0x50]
mov ebx, dword [ebp + 0x60]
push dword [ebp + 0x40]
push ebx
call fcn.004380d1
push dword [ebp + 0x5c]
push dword [ebp + 0x44]
push ebx
call fcn.004380d1
push dword [ebp + 0x78]
push dword [ebp + 0x24]
push ebx
call fcn.004380d1
push dword [ebp + 0x74]
push dword [ebp + 0x28]
push ebx
call fcn.004380d1
mov eax, dword [ebp + 0x7c]
add esp, 0x40
cmp word [eax], 0
je 0x468245
mov esi, dword [sym.imp.USER32.DLL_GetAsyncKeyState]
push 1
call esi
xor edi, edi
mov di, ax
push 0x10
shr edi, 0xf
and edi, 1
call esi
neg ax
push 0x11
sbb eax, eax
and eax, 4
or edi, eax
call esi
neg ax
push 2
sbb eax, eax
and eax, 8
or edi, eax
call esi
push dword [ebp + 0x7c]
neg ax
sbb eax, eax
and eax, 0x10
or edi, eax
movzx eax, di
push eax
push ebx
call fcn.004380d1
add esp, 0xc
lea ecx, [ebp + 0x7c]
call fcn.0043092f
lea ecx, [ebp + 0x74]
call fcn.0043092f
lea ecx, [ebp + 0x78]
call fcn.0043092f
lea ecx, [ebp + 0x5c]
call fcn.0043092f
lea ecx, [ebp + 0x50]
jmp 0x467ead
mov ecx, dword [edi + 4]
push 3
pop ebx
cmp ecx, ebx
je 0x46827c
cmp ecx, 1
jne 0x4682af
mov eax, dword [ebp + 0x54]
cmp word [eax], 0
jne 0x4682af
cmp byte [ebp + 0x5b], 0
jne 0x4682af
cmp ecx, ebx
mov eax, 0x1000000
jne 0x468299
test dword [edi + 0x40], eax
jne 0x4682a3
cmp ecx, 1
jne 0x4682af
test dword [edi + 0x58], eax
je 0x4682af
push 0
push dword [ebp + 0x68]
call fcn.0041032c
pop ecx
pop ecx
push dword [ebp + 0x54]
push 0x49d850
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x4682e1
xor ebx, ebx
push ebx
push ebx
push dword [ebp + 0x60]
lea ecx, [edi + 0x34]
push dword [edi + 0x1c]
push dword [ebp + 0x4c]
call fcn.0047b06b
cmp dword [ebp + 0x64], ebx
mov esi, eax
jmp 0x467fa3
push dword [ebp + 0x54]
push 0x49d848
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x468308
lea eax, [ebp + 0x64]
push eax
push 1
push dword [ebp + 0x60]
lea ecx, [edi + 0x34]
push dword [edi + 0x1c]
jmp 0x467bd2
push dword [ebp + 0x54]
push 0x494c74
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x46838e
mov byte [0x4acec0], 1
mov eax, dword [edi + 0x1c]
xor ecx, ecx
cmp eax, ecx
jne 0x468333
cmp dword [ebp + 0x64], ecx
jmp 0x468419
mov edx, dword [ebp + 0x4c]
add edi, 0x34
mov dword [ebp - 0x28], edx
mov edx, dword [ebp + 0x60]
mov dword [ebp - 0x2c], edi
mov edi, dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x24], edx
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0x64]
cmp eax, ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], ecx
je 0x468372
and dword [ebp + 0x64], 0
push eax
call edi
lea eax, [ebp - 0x34]
push eax
push esi
push 0x465
push dword [esi + 0x18]
call dword [sym.imp.USER32.DLL_SendMessageW]
cmp dword [ebp + 0x64], 0
jmp 0x467c4d
mov esi, dword [ebp + 0x54]
push esi
push 0x49d82c
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x46840e
push esi
push 0x49d824
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x46840e
push esi
push 0x49d814
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x46840e
push esi
push 0x49d80c
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x46840e
push esi
push 0x49d804
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x46840e
push esi
push 0x49d7fc
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x46840e
push esi
push 0x495670
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x46842d
mov eax, dword [ebp + 0x4c]
mov dword [ebp + 0x68], eax
mov esi, dword [edi + 0x1c]
test esi, esi
jne 0x46846d
cmp dword [ebp + 0x64], 0
je 0x468749
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
jmp 0x468749
cmp dword [edi + 4], 9
jne 0x46844d
lea eax, [ebp + 0x64]
push eax
push dword [ebp + 0x38]
mov ecx, edi
push esi
push dword [ebp + 0x68]
push dword [ebp + 0x4c]
push dword [ebp + 0x60]
call fcn.0043c3ae
jmp 0x468462
mov eax, dword [edi]
lea ecx, [ebp + 0x64]
push ecx
push dword [ebp + 0x38]
mov ecx, edi
push esi
push dword [ebp + 0x68]
push dword [ebp + 0x60]
call dword [eax + 4]
cmp dword [ebp + 0x64], 0
mov esi, eax
jmp 0x467fa3
mov eax, dword [ebp + 0x64]
test eax, eax
mov ebx, dword [esi + 0x18]
je 0x468482
and dword [ebp + 0x64], 0
push eax
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
push edi
push esi
push dword [ebp + 0x38]
push dword [ebp + 0x54]
push dword [ebp + 0x68]
push ebx
push dword [ebp + 0x60]
call fcn.00430c54
add esp, 0x1c
cmp dword [ebp + 0x64], 0
je 0x468bcf
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
jmp 0x468bcf
push edi
push 0x49d7f4
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x468622
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x3f
jne 0x467ffc
lea ecx, [ebp + 0x5c]
call fcn.00435d62
lea ecx, [ebp + 0x78]
call fcn.00435d62
lea ecx, [ebp + 0x74]
call fcn.00435d62
lea ecx, [ebp + 0x7c]
call fcn.00435d62
mov ebx, dword [ebp + 0x60]
add dword [ebp + 0x68], 2
push 0x2c
pop edi
push edi
push 0x3b
pop esi
push esi
lea eax, [ebp + 0x5c]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042c70d
push edi
push esi
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042c70d
push edi
push esi
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042c70d
push edi
push esi
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042c70d
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.USER32.DLL_GetCursorPos]
push dword [ebp + 0x5c]
push dword [ebp + 0x40]
push ebx
call fcn.004380d1
push dword [ebp + 0x78]
push dword [ebp + 0x44]
push ebx
call fcn.004380d1
push 0
lea eax, [ebp + 0x74]
push eax
push 8
lea eax, [ebp + 0x40]
push eax
push dword [ebp + 0x74]
push ebx
call fcn.00445562
mov eax, dword [ebp + 0x7c]
add esp, 0x30
cmp word [eax], 0
je 0x4685d6
mov esi, dword [sym.imp.USER32.DLL_GetAsyncKeyState]
push 1
call esi
xor edi, edi
mov di, ax
push 0x10
shr edi, 0xf
and edi, 1
call esi
neg ax
push 0x11
sbb eax, eax
and eax, 4
or edi, eax
call esi
neg ax
push 2
sbb eax, eax
and eax, 8
or edi, eax
call esi
push dword [ebp + 0x7c]
neg ax
sbb eax, eax
and eax, 0x10
or edi, eax
movzx eax, di
push eax
push ebx
call fcn.004380d1
add esp, 0xc
lea ecx, [ebp + 0x7c]
call fcn.0043092f
jmp 0x468872
mov eax, dword [ebp + 0x68]
mov ax, word [eax]
call fcn.0042caa2
test al, al
je 0x468bcf
add dword [ebp + 0x68], 2
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438b8e
test eax, eax
pop ecx
pop ecx
jle 0x468bcf
push dword [ebp + 0x74]
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.DLL_SetCursorPos]
jmp 0x468bcf
push edi
push 0x49d7e8
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x46864e
push dword [ebp + 0x60]
push dword [ebp + 0x68]
call fcn.00477c0a
pop ecx
pop ecx
xor ecx, ecx
test eax, eax
setl cl
mov esi, ecx
jmp 0x468bd1
push edi
push 0x49d7dc
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x46869c
mov byte [ebp + 0x5c], 0
lea ecx, [ebp + 0x7c]
mov dword [ebp + 0x78], esi
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x48], esi
mov dword [ebp + 0x50], esi
call fcn.00435d62
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x3a
jne 0x468afb
add dword [ebp + 0x68], 2
lea eax, [ebp + 0x68]
push eax
call fcn.00430961
mov eax, dword [ebp + 0x68]
pop ecx
mov edx, eax
jmp 0x468acb
push edi
push 0x49d7d0
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x4686b3
mov byte [ebp + 0x5c], 1
jmp 0x468663
push edi
push 0x49d7c4
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x4686f1
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp + 0x68]
xor esi, esi
push eax
mov dword [ebp + 0x40], esi
mov dword [ebp + 0x44], esi
call fcn.004045d4
push dword [ebp + 0x68]
push dword [ebp + 0x40]
push 0x4acf10
call fcn.0042d364
add esp, 0x14
jmp 0x468bd1
push edi
push 0x49d7bc
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x4687c1
mov ecx, dword [ebp + 0x68]
xor eax, eax
xor esi, esi
cmp word [ecx], 0x3f
sete al
mov edi, eax
test di, di
je 0x46871f
add dword [ebp + 0x68], 2
mov eax, dword [ebp + 0x68]
push pe_nt_image_headers32
pop ebx
cmp word [eax], bx
jne 0x468730
add dword [ebp + 0x68], 2
mov esi, ebx
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438b8e
cmp dword [ebp + 0x74], 0
pop ecx
pop ecx
jg 0x468753
mov esi, 0x80070057
jmp 0x468bd1
mov edx, dword [ebp + 0x68]
xor ecx, ecx
mov cx, word [edx]
mov eax, ecx
call fcn.0042caa2
test al, al
je 0x468770
cmp cx, bx
je 0x468770
inc edx
inc edx
mov dword [ebp + 0x68], edx
test si, si
je 0x468782
cmp word [edx], bx
je 0x468782
dec edx
dec edx
mov dword [ebp + 0x68], edx
mov word [edx], bx
test di, di
je 0x468793
sub dword [ebp + 0x68], 2
mov eax, dword [ebp + 0x68]
mov word [eax], 0x3f
mov eax, dword [ebp + 0x7c]
test eax, eax
je 0x4687a2
mov eax, dword [eax + 0x15c]
jmp 0x4687a4
xor eax, eax
push eax
xor esi, esi
push esi
push dword [ebp + 0x60]
push dword [ebp + 0x60]
push dword [ebp + 0x68]
push dword [ebp + 0x74]
call fcn.00442d6a
add esp, 0x18
jmp 0x468bd1
push edi
push 0x49d7b4
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x46888a
lea ecx, [ebp + 0x5c]
call fcn.00435d62
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x44], esi
call fcn.00435d62
push 0x3a
push 0x3b
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438739
mov eax, dword [ebp + 0x68]
add esp, 0x10
cmp word [eax], si
je 0x468809
add dword [ebp + 0x68], 2
lea eax, [ebp + 0x68]
push eax
call fcn.00430961
push dword [ebp + 0x68]
call fcn.0040eec0
pop ecx
pop ecx
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x68], eax
call fcn.00435d62
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x74]
push eax
push dword [ebp + 0x68]
mov dword [ebp + 0x7c], esi
call fcn.00473899
mov eax, dword [ebp + 0x7c]
add esp, 0xc
cmp eax, esi
je 0x468864
cmp word [eax], si
je 0x468864
mov word [eax - 2], si
push esi
lea eax, [ebp + 0x5c]
push eax
lea eax, [ebp + 0x44]
push eax
push dword [ebp + 0x7c]
push dword [ebp + 0x74]
call fcn.00405c21
add esp, 0x14
push dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
call fcn.00435749
lea ecx, [ebp + 0x74]
call fcn.0043092f
lea ecx, [ebp + 0x78]
call fcn.0043092f
lea ecx, [ebp + 0x5c]
jmp 0x468bca
push edi
push 0x49d7a8
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x468914
lea eax, [ebp + 0x68]
push eax
call fcn.00430961
mov eax, dword [eax]
mov si, word [eax]
cmp si, 0x3f
pop ecx
jne 0x4688b4
add dword [ebp + 0x68], 2
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438b8e
mov eax, dword [ebp + 0x68]
mov ax, word [eax]
cmp ax, 0x3b
pop ecx
pop ecx
je 0x4688d9
cmp ax, 0x3a
jne 0x4688dd
add dword [ebp + 0x68], 2
cmp si, 0x3f
jne 0x468749
lea ecx, [ebp + 0x7c]
call fcn.00435d62
push 0x3a
push 0x3b
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438739
add esp, 0x10
push dword [ebp + 0x7c]
push dword [ebp + 0x74]
call dword [sym.imp.USER32.DLL_IsWindow]
jmp 0x4689a3
push edi
push 0x49d7a0
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x4689eb
lea eax, [ebp + 0x68]
push eax
call fcn.00430961
mov eax, dword [eax]
mov si, word [eax]
cmp si, 0x3f
pop ecx
jne 0x468942
add dword [ebp + 0x68], 2
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438b8e
mov eax, dword [ebp + 0x68]
mov ax, word [eax]
cmp ax, 0x3b
pop ecx
pop ecx
je 0x468967
cmp ax, 0x3a
jne 0x46896b
add dword [ebp + 0x68], 2
cmp dword [ebp + 0x74], 0
jle 0x468749
cmp si, 0x3f
jne 0x4689b4
lea ecx, [ebp + 0x7c]
call fcn.00435d62
push 0x3a
push 0x3b
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438739
add esp, 0x10
push dword [ebp + 0x7c]
push dword [ebp + 0x74]
call dword [sym.imp.USER32.DLL_IsWindowEnabled]
push eax
push dword [ebp + 0x60]
call fcn.004380a5
add esp, 0xc
jmp 0x468bc7
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
mov dword [ebp + 0x7c], 0xfffffc18
call fcn.00438b8e
cmp dword [ebp + 0x7c], 0
pop ecx
pop ecx
jl 0x468bcf
xor eax, eax
cmp dword [ebp + 0x7c], eax
setne al
push eax
push dword [ebp + 0x74]
call dword [sym.imp.USER32.DLL_EnableWindow]
jmp 0x468bcf
push edi
push 0x49d794
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x468a51
push edi
push 0x49d788
call fcn.004318e1
test al, al
pop ecx
pop ecx
jne 0x468a51
push edi
push 0x49d780
call fcn.004318e1
test al, al
pop ecx
pop ecx
je 0x468bcf
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004045b4
cmp dword [ebp + 0x74], 0
pop ecx
pop ecx
jle 0x468749
push dword [ebp + 0x68]
push dword [ebp + 0x74]
call fcn.004437a6
pop ecx
pop ecx
jmp 0x468bcf
lea eax, [ebp + 0x68]
push eax
call fcn.00430961
mov eax, dword [eax]
mov si, word [eax]
cmp si, 0x3f
pop ecx
jne 0x468a6a
add dword [ebp + 0x68], 2
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438b8e
mov eax, dword [ebp + 0x68]
mov ax, word [eax]
cmp ax, 0x3b
pop ecx
pop ecx
je 0x468a8f
cmp ax, 0x3a
jne 0x468a93
add dword [ebp + 0x68], 2
cmp dword [ebp + 0x74], 0
jle 0x468749
push esi
push dword [ebp + 0x68]
push dword [ebp + 0x74]
push dword [ebp + 0x60]
call fcn.0044361e
add esp, 0x10
jmp 0x468bcf
cmp cx, 0x2c
je 0x468ad3
cmp cx, 0x3b
je 0x468ad3
cmp cx, 0x3a
je 0x468ad3
inc eax
inc eax
mov dword [ebp + 0x68], eax
mov cx, word [eax]
cmp cx, si
jne 0x468ab4
sub eax, edx
sar eax, 1
push eax
push edx
lea ecx, [ebp + 0x7c]
call fcn.00435e88
mov eax, dword [ebp + 0x68]
cmp word [eax], si
je 0x468aed
add dword [ebp + 0x68], 2
mov ecx, dword [ebp + 0x60]
push 1
lea eax, [ebp + 0x7c]
push eax
call fcn.00402c4d
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438b8e
cmp dword [ebp + 0x78], esi
pop ecx
pop ecx
jne 0x468b1c
lea ecx, [ebp + 0x7c]
call fcn.0043092f
jmp 0x468749
mov eax, dword [ebp + 0x68]
mov ax, word [eax]
cmp ax, 0x3b
je 0x468b2e
cmp ax, 0x3a
jne 0x468b5c
add dword [ebp + 0x68], 2
mov eax, dword [ebp + 0x68]
xor esi, esi
cmp word [eax], 0x23
jne 0x468b46
add dword [ebp + 0x68], 2
mov esi, 0x5000
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00438b8e
test eax, eax
pop ecx
pop ecx
jle 0x468b5c
add dword [ebp + 0x74], esi
push dword [ebp + 0x5c]
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x48]
push eax
push dword [ebp + 0x68]
push dword [ebp + 0x60]
call fcn.00438f67
add esp, 0x14
test eax, eax
jne 0x468b0f
cmp byte [ebp + 0x5c], al
push dword [ebp + 0x50]
push dword [ebp + 0x48]
push dword [ebp + 0x74]
push dword [ebp + 0x78]
jne 0x468b92
call dword [sym.imp.USER32.DLL_PostMessageW]
jmp 0x468b98
call dword [sym.imp.USER32.DLL_SendMessageW]
mov esi, dword [ebp + 0x7c]
cmp word [esi], 0
je 0x468bc7
push eax
lea eax, [ebp - 0x98]
push 0x49b0b0
push eax
call dword [sym.imp.USER32.DLL_wsprintfW]
mov ecx, dword [ebp + 0x60]
add esp, 0xc
lea eax, [ebp - 0x98]
push eax
push esi
call fcn.00435749
lea ecx, [ebp + 0x7c]
call fcn.0043092f
xor esi, esi
lea ecx, [ebp + 0x14]
call fcn.0043092f
lea ecx, [ebp + 0x20]
call fcn.0043092f
lea ecx, [ebp + 0x38]
call fcn.0043092f
lea ecx, [ebp + 0x1c]
call fcn.0043092f
lea ecx, [ebp + 0x30]
call fcn.0043092f
lea ecx, [ebp + 0x2c]
call fcn.0043092f
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 0xc