Function at 0x4f6760
Capabilities:
Check for time delay via gettickcount
Get memory capacity

Disassembly:
sub esp, 0xa0
push 0x6bf020
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
cmp dword [0x6bf044], 0xff
jle 0x4f678a
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.user32.dll_GetActiveWindow]
push edi
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
shr eax, 0x18
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f67cc
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
shr eax, 0x10
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6804
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
shr eax, 8
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f683d
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6872
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
mov esi, dword [sym.imp.user32.dll_GetCapture]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
shr eax, 0x18
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f68b0
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
shr eax, 0x10
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f68e9
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
shr eax, 8
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6921
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6956
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
mov esi, dword [sym.imp.user32.dll_GetClipboardOwner]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
shr eax, 0x18
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6995
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
shr eax, 0x10
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f69cd
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
shr eax, 8
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6a05
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6a3b
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
mov esi, dword [sym.imp.user32.dll_GetClipboardViewer]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
shr eax, 0x18
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6a79
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
shr eax, 0x10
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6ab1
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
shr eax, 8
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6aea
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6b1f
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
mov edi, dword [sym.imp.kernel32.dll_GetCurrentProcess]
lea esi, [edx + eax]
call edi
mov bl, byte [esi]
shr eax, 0x18
add bl, al
mov byte [esi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6b5d
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea esi, [ecx + edx]
call edi
mov bl, byte [esi]
shr eax, 0x10
add bl, al
mov byte [esi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6b96
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea esi, [eax + ecx]
call edi
mov bl, byte [esi]
shr eax, 8
add bl, al
mov byte [esi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6bce
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea esi, [edx + eax]
call edi
mov bl, byte [esi]
add bl, al
mov byte [esi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6c03
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
mov esi, dword [sym.imp.kernel32.dll_GetCurrentProcessId]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
shr eax, 0x18
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6c42
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
shr eax, 0x10
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6c7a
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
shr eax, 8
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6cb2
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
add bl, al
mov byte [edi], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6ce8
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
mov ebx, dword [sym.imp.kernel32.dll_GetCurrentThread]
lea esi, [eax + ecx]
call ebx
mov cl, byte [esi]
shr eax, 0x18
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6d26
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea esi, [edx + eax]
call ebx
mov cl, byte [esi]
shr eax, 0x10
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6d5e
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea esi, [ecx + edx]
call ebx
mov cl, byte [esi]
shr eax, 8
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6d97
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea esi, [eax + ecx]
call ebx
mov cl, byte [esi]
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6dcc
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
mov esi, dword [sym.imp.kernel32.dll_GetCurrentThreadId]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6e0a
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6e43
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6e7b
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6eb0
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
mov ebp, dword [sym.imp.kernel32.dll_GetTickCount]
lea esi, [ecx + edx]
call ebp
mov cl, byte [esi]
shr eax, 0x18
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6eef
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea esi, [eax + ecx]
call ebp
mov cl, byte [esi]
shr eax, 0x10
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6f27
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea esi, [edx + eax]
call ebp
mov cl, byte [esi]
shr eax, 8
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6f5f
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea esi, [ecx + edx]
call ebp
mov cl, byte [esi]
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6f95
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
mov esi, dword [sym.imp.user32.dll_GetDesktopWindow]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f6fd3
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f700b
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7044
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7079
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
mov esi, dword [sym.imp.user32.dll_GetFocus]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f70b7
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f70f0
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7128
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f715d
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
mov edi, dword [sym.imp.user32.dll_GetInputState]
lea esi, [ecx + edx]
call edi
mov al, byte [esi]
xor ecx, ecx
mov cl, ah
add al, cl
mov byte [esi], al
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f719d
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea esi, [edx + eax]
call edi
mov cl, byte [esi]
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f71d2
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
mov esi, dword [sym.imp.user32.dll_GetMessagePos]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7211
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7249
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7281
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f72b7
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
mov esi, dword [sym.imp.user32.dll_GetMessageTime]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f72f5
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f732d
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7366
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f739b
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
mov esi, dword [sym.imp.user32.dll_GetOpenClipboardWindow]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f73d9
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7412
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f744a
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f747f
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
mov esi, dword [sym.imp.kernel32.dll_GetProcessHeap]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f74be
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f74f6
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f752e
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7564
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
mov esi, dword [sym.imp.user32.dll_GetProcessWindowStation]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f75a2
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f75da
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7613
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7648
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
mov edi, dword [sym.imp.user32.dll_GetQueueStatus]
push 0xbf
lea esi, [edx + eax]
call edi
mov cl, byte [esi]
shr eax, 0x18
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f768b
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [0x6bf044]
push 0xbf
lea esi, [ecx + edx]
call edi
mov cl, byte [esi]
shr eax, 0x10
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f76c9
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov eax, dword [0x6bf040]
mov ecx, dword [0x6bf044]
push 0xbf
lea esi, [eax + ecx]
call edi
mov cl, byte [esi]
shr eax, 8
add cl, al
mov byte [esi], cl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7706
push 0x6bf040
call fcn.004f16f0
add esp, 4
mov edx, dword [0x6bf040]
mov eax, dword [0x6bf044]
push 0xbf
lea esi, [edx + eax]
call edi
mov dl, byte [esi]
add dl, al
mov byte [esi], dl
mov ecx, dword [0x6bf044]
inc ecx
mov dword [0x6bf044], ecx
lea ecx, [esp + 0x38]
push ecx
call dword [sym.imp.user32.dll_GetCaretPos]
lea edx, [esp + 0x38]
push 8
push edx
call fcn.004f17d0
add esp, 8
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.user32.dll_GetCursorPos]
lea ecx, [esp + 0x38]
push 8
push ecx
call fcn.004f17d0
add esp, 8
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], 0x20
push edx
call dword [sym.imp.kernel32.dll_GlobalMemoryStatus]
lea eax, [esp + 0x4c]
push 0x20
push eax
call fcn.004f17d0
add esp, 8
call ebx
lea ecx, [esp + 0x28]
lea edx, [esp + 0x20]
push ecx
push edx
lea ecx, [esp + 0x20]
lea edx, [esp + 0x38]
push ecx
push edx
push eax
call dword [sym.imp.kernel32.dll_GetThreadTimes]
lea eax, [esp + 0x30]
push 8
push eax
call fcn.004f17d0
lea ecx, [esp + 0x20]
push 8
push ecx
call fcn.004f17d0
lea edx, [esp + 0x30]
push 8
push edx
call fcn.004f17d0
lea eax, [esp + 0x40]
push 8
push eax
call fcn.004f17d0
add esp, 0x20
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
lea ecx, [esp + 0x28]
mov esi, eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x1c]
push edx
lea ecx, [esp + 0x38]
push eax
push ecx
push esi
call dword [sym.imp.kernel32.dll_GetProcessTimes]
lea edx, [esp + 0x30]
push 8
push edx
call fcn.004f17d0
push 8
lea eax, [esp + 0x24]
push eax
call fcn.004f17d0
lea ecx, [esp + 0x30]
push 8
push ecx
call fcn.004f17d0
lea edx, [esp + 0x40]
push 8
push edx
call fcn.004f17d0
add esp, 0x20
lea eax, [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
push ecx
push esi
call dword [sym.imp.kernel32.dll_GetProcessWorkingSetSize]
mov eax, dword [0x6bf044]
cmp eax, 0xff
jle 0x4f7859
push 0x6bf040
call fcn.004f16f0
mov eax, dword [0x6bf044]
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [esp + 0x10]
shr edx, 0x18
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7892
push 0x6bf040
call fcn.004f16f0
mov eax, dword [0x6bf044]
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [esp + 0x10]
shr edx, 0x10
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f78cb
push 0x6bf040
call fcn.004f16f0
mov eax, dword [0x6bf044]
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [esp + 0x10]
shr edx, 8
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7904
push 0x6bf040
call fcn.004f16f0
mov eax, dword [0x6bf044]
add esp, 4
mov ecx, dword [0x6bf040]
mov dl, byte [esp + 0x10]
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f793a
push 0x6bf040
call fcn.004f16f0
mov eax, dword [0x6bf044]
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [esp + 0x14]
shr edx, 0x18
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f7973
push 0x6bf040
call fcn.004f16f0
mov eax, dword [0x6bf044]
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [esp + 0x14]
shr edx, 0x10
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f79ac
push 0x6bf040
call fcn.004f16f0
mov eax, dword [0x6bf044]
add esp, 4
mov ecx, dword [0x6bf040]
mov edx, dword [esp + 0x14]
shr edx, 8
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6bf044]
inc eax
cmp eax, 0xff
mov dword [0x6bf044], eax
jle 0x4f79e5
push 0x6bf040
call fcn.004f16f0
mov eax, dword [0x6bf044]
add esp, 4
mov ecx, dword [0x6bf040]
mov dl, byte [esp + 0x14]
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov ecx, dword [0x6bf044]
mov eax, dword [0x6adff0]
inc ecx
test eax, eax
mov dword [0x6bf044], ecx
jne 0x4f7a39
lea eax, [esp + 0x6c]
mov dword [esp + 0x6c], 0x44
push eax
call dword [sym.imp.kernel32.dll_GetStartupInfoA]
lea ecx, [esp + 0x6c]
push 0x44
push ecx
call fcn.004f17d0
add esp, 8
mov dword [0x6adff0], 1
lea edx, [esp + 0x44]
push edx
call dword [sym.imp.kernel32.dll_QueryPerformanceCounter]
test eax, eax
je 0x4f7a51
lea eax, [esp + 0x44]
push 8
push eax
jmp 0x4f7a5e
call ebp
lea ecx, [esp + 0x40]
push 4
mov dword [esp + 0x44], eax
push ecx
call fcn.004f17d0
mov eax, dword [0x6adff4]
add esp, 8
inc eax
pop edi
pop esi
pop ebp
cmp eax, 3
mov dword [0x6adff4], eax
pop ebx
jl 0x4f7a84
mov dword [0x6bf04c], 0
push 0x6bf020
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
add esp, 0xa0
ret