Function at 0x4b276c
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, 0x4efe64
mov esi, 0x4efe48
mov edi, 0x4efe4c
cmp dword [0x4d4150], 0
jne 0x4b279d
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x4b279d
xor eax, eax
jmp 0x4b3650
cmp dword [0x4d415c], 0
je 0x4b27ad
xor eax, eax
jmp 0x4b3650
mov dword [0x4d415c], 1
xor edx, edx
mov dword [0x4d414c], edx
push 0
push 0x4efe68
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b7b68
mov dword [0x4efe50], eax
cmp dword [0x4efe50], 0
je 0x4b27eb
mov eax, dword [0x4efe50]
cmp dword [eax + 0x4b8], 0
jne 0x4b27fa
xor edx, edx
mov dword [0x4d415c], edx
xor eax, eax
jmp 0x4b3650
mov edx, dword [0x4efe50]
mov ecx, dword [edx + 0x5b8]
mov dword [0x4efe30], ecx
mov eax, dword [0x4efe50]
cmp byte [eax + 0x4cc], 1
jne 0x4b2847
mov edx, dword [0x4efe50]
cmp dword [edx + 0x51c], 0
je 0x4b2847
mov ecx, dword [0x4efe50]
cmp byte [ecx + 0x4e4], 1
jne 0x4b2847
mov eax, dword [0x4efe68]
add eax, 3
mov dword [0x4efe2c], eax
jmp 0x4b2851
mov dword [0x4efe2c], 2
movzx edx, word [ebp + 0xc]
mov dword [0x4efe78], edx
mov ecx, dword [ebp + 0xc]
shr ecx, 0x10
and cx, 0xffff
movzx eax, cx
mov dword [0x4efe7c], eax
mov edx, dword [0x4efe78]
cmp edx, dword [0x4efe2c]
jge 0x4b288b
xor ecx, ecx
mov dword [0x4d415c], ecx
xor eax, eax
jmp 0x4b3650
mov edx, dword [0x4efe7c]
cmp edx, dword [0x4efe74]
jl 0x4b28a8
xor ecx, ecx
mov dword [0x4d415c], ecx
xor eax, eax
jmp 0x4b3650
cmp dword [0x4efe7c], 0
jge 0x4b28c0
xor edx, edx
mov dword [0x4d415c], edx
xor eax, eax
jmp 0x4b3650
mov edx, dword [0x4efe50]
mov ecx, dword [edx + 0x4b8]
mov eax, dword [ecx + 0x30]
mov dword [esi], eax
mov edx, dword [0x4efe50]
mov ecx, dword [edx + 0x4c4]
mov eax, dword [0x4efe50]
sub ecx, dword [eax + 0x4c8]
mov dword [0x4efe34], ecx
jmp 0x4b290d
mov edx, dword [0x4efe50]
mov ecx, dword [edx + 0x4b8]
cmp ecx, dword [esi]
je 0x4b2916
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
mov dword [esi], edx
dec dword [0x4efe34]
cmp dword [0x4efe34], 0
jg 0x4b28f0
cmp dword [esi], 0
jne 0x4b292a
xor ecx, ecx
mov dword [0x4d415c], ecx
xor eax, eax
jmp 0x4b3650
xor edx, edx
mov dword [0x4efe40], edx
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
mov dword [0x4efe38], eax
mov edx, dword [0x4efe74]
sub edx, dword [0x4efe30]
dec edx
mov dword [0x4efe3c], edx
mov ecx, dword [0x4efe50]
mov eax, dword [ecx + 0x4b8]
cmp eax, dword [esi]
je 0x4b29bd
mov edx, dword [0x4efe30]
sub dword [0x4efe3c], edx
inc dword [0x4efe40]
mov ecx, dword [esi]
mov eax, dword [ecx + 0x30]
mov dword [esi], eax
mov edx, dword [0x4efe30]
neg edx
cmp edx, dword [0x4efe3c]
jle 0x4b29b0
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
cmp eax, dword [0x4efe38]
je 0x4b29b0
dec dword [0x4efe40]
mov edx, dword [0x4efe30]
add dword [0x4efe3c], edx
mov ecx, dword [esi]
mov eax, dword [ecx + 0x2c]
mov dword [esi], eax
jmp 0x4b29bd
mov edx, dword [esi]
mov ecx, dword [edx + 4]
mov dword [0x4efe38], ecx
jmp 0x4b294f
cmp dword [esi], 0
jne 0x4b29d0
xor eax, eax
mov dword [0x4d415c], eax
xor eax, eax
jmp 0x4b3650
mov edx, dword [0x4efe3c]
mov dword [0x4efe44], edx
jmp 0x4b3636
mov ecx, dword [0x4efe44]
cmp ecx, dword [0x4efe7c]
jg 0x4b3609
mov eax, dword [0x4efe44]
add eax, dword [0x4efe30]
cmp eax, dword [0x4efe7c]
jle 0x4b3609
mov edx, dword [0x4efe78]
push edx
mov ecx, dword [0x4efe2c]
push ecx
mov eax, dword [esi]
mov edx, dword [eax]
push edx
mov ecx, dword [0x4efe50]
push ecx
call fcn.004b2218
mov dword [0x4efe58], eax
cmp dword [0x4efe58], 0
jl 0x4b363f
mov eax, dword [esi]
mov edx, dword [eax]
mov ecx, dword [0x4efe58]
cmp byte [edx + ecx], 0x20
je 0x4b363f
mov eax, dword [esi]
mov dword [edi], eax
jmp 0x4b2a5a
mov edx, dword [eax + 0x30]
mov dword [edi], edx
mov ecx, dword [0x4efe50]
mov edx, dword [ecx + 0x4b8]
mov eax, dword [edi]
cmp edx, eax
je 0x4b2a77
mov ecx, dword [eax + 0x30]
mov edx, dword [ecx + 4]
cmp edx, dword [eax + 4]
je 0x4b2a55
cmp dword [edi], 0
je 0x4b363f
mov eax, dword [edi]
mov ecx, dword [eax]
push esi
push edi
mov edi, ecx
mov esi, 0x4efe80
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [edi]
cmp eax, dword [esi]
jne 0x4b2abc
xor edx, edx
mov dword [0x4efe60], edx
jmp 0x4b2adc
mov dword [0x4efe60], 1
push 0x4efe80
call fcn.004bceac
pop ecx
add eax, dword [0x4efe58]
mov dword [0x4efe58], eax
mov ecx, dword [edi]
mov eax, dword [ecx + 0x2c]
mov dword [edi], eax
jmp 0x4b2bd7
cmp eax, dword [esi]
jne 0x4b2af4
xor edx, edx
mov dword [0x4efe60], edx
mov edx, dword [eax + 0xc]
test edx, edx
jle 0x4b2b9f
mov dword [0x4efe5c], edx
mov eax, dword [eax]
mov dword [ebx], eax
jmp 0x4b2b13
inc dword [ebx]
dec dword [0x4efe5c]
mov ecx, dword [ebx]
cmp byte [ecx], 0x20
jne 0x4b2b23
cmp dword [0x4efe5c], 0
jg 0x4b2b0b
mov eax, dword [ebx]
cmp byte [eax], 0
je 0x4b2b70
mov edx, dword [ebx]
push edx
push 0x4efe80
call fcn.004bcdd0
add esp, 8
cmp dword [0x4efe60], 0
je 0x4b2b57
mov ecx, dword [ebx]
push ecx
call fcn.004bceac
pop ecx
add eax, dword [0x4efe58]
mov dword [0x4efe58], eax
mov eax, dword [edi]
cmp eax, dword [esi]
jne 0x4b2bd0
mov edx, dword [edi]
mov ecx, dword [edx + 0xc]
sub ecx, dword [0x4efe5c]
sub dword [0x4efe58], ecx
jmp 0x4b2bd0
push 0x4d4160
push 0x4efe80
call fcn.004bcdd0
add esp, 8
cmp dword [0x4efe60], 0
je 0x4b2b91
inc dword [0x4efe58]
mov eax, dword [edi]
cmp eax, dword [esi]
jne 0x4b2bd0
dec dword [0x4efe58]
jmp 0x4b2bd0
mov edx, dword [edi]
mov ecx, dword [edx]
push ecx
push 0x4efe80
call fcn.004bcdd0
add esp, 8
cmp dword [0x4efe60], 0
je 0x4b2bd0
mov eax, dword [edi]
mov edx, dword [eax]
push edx
call fcn.004bceac
pop ecx
add eax, dword [0x4efe58]
mov dword [0x4efe58], eax
mov ecx, dword [edi]
mov eax, dword [ecx + 0x2c]
mov dword [edi], eax
mov eax, dword [edi]
test eax, eax
je 0x4b2beb
mov edx, dword [eax + 4]
mov ecx, dword [esi]
cmp edx, dword [ecx + 4]
je 0x4b2ae8
cmp dword [0x4efe58], 0
jl 0x4b363f
push 0x4efe80
call fcn.004bceac
pop ecx
cmp eax, dword [0x4efe58]
jle 0x4b363f
mov eax, 0x4efe80
add eax, dword [0x4efe58]
mov dword [ebx], eax
jmp 0x4b2c20
dec dword [ebx]
mov edx, 0x4efe80
mov eax, dword [ebx]
cmp edx, eax
jae 0x4b2c30
cmp byte [eax], 0x20
jne 0x4b2c1e
mov edx, dword [ebx]
cmp byte [edx], 0x20
jne 0x4b2c61
inc dword [ebx]
mov ecx, dword [ebx]
cmp byte [ecx], 0
je 0x4b363f
mov eax, dword [ebx]
push eax
call fcn.004bceac
pop ecx
inc eax
push eax
mov edx, dword [ebx]
push edx
push 0x4efe80
call fcn.004bcce0
add esp, 0xc
jmp 0x4b2c7c
mov ecx, dword [ebx]
push ecx
call fcn.004bceac
pop ecx
inc eax
push eax
mov eax, dword [ebx]
push eax
push 0x4efe80
call fcn.004bcce0
add esp, 0xc
push 0x20
push 0x4efe80
call fcn.004bce0c
add esp, 8
mov edi, eax
mov dword [ebx], edi
test edi, edi
je 0x4b2c96
mov byte [edi], 0
push 0xf
push 0x4efe80
call fcn.004a6178
cmp byte [0x4efe80], 0
je 0x4b363f
push 0x23
push 0x4efe80
call fcn.004bce0c
add esp, 8
test eax, eax
je 0x4b2e53
push 0x2c
push 0x4efe80
call fcn.004bce0c
add esp, 8
mov edi, eax
mov dword [ebx], edi
test edi, edi
je 0x4b2ce0
mov byte [edi], 0
mov dword [ebx], 0x4efe80
jmp 0x4b2d00
cmp al, 0x23
je 0x4b2d08
cmp al, 0x40
je 0x4b2cfe
cmp al, 0x25
je 0x4b2cfe
cmp al, 0x2b
je 0x4b2cfe
xor eax, eax
mov dword [ebx], eax
jmp 0x4b2d08
inc dword [ebx]
mov edx, dword [ebx]
mov al, byte [edx]
test al, al
jne 0x4b2ce8
mov eax, dword [ebx]
test eax, eax
je 0x4b2e53
cmp byte [eax], 0
je 0x4b2e53
cmp byte [eax + 1], 0
je 0x4b2e53
mov dword [ebx], 0x4efe80
jmp 0x4b2d2f
inc dword [ebx]
mov edx, dword [ebx]
mov al, byte [edx]
test al, al
je 0x4b2d3b
cmp al, 0x23
jne 0x4b2d2d
mov edx, dword [ebx]
push edx
call fcn.004bceac
pop ecx
mov dword [0x4efe58], eax
cmp dword [0x4efe58], 0
jle 0x4b2d9f
mov ecx, dword [ebx]
mov eax, dword [0x4efe58]
xor edx, edx
mov dl, byte [ecx + eax - 1]
cmp edx, 0x3a
jge 0x4b2d7a
sub edx, 0x22
je 0x4b2d93
sub edx, 7
je 0x4b2d93
sub edx, 3
je 0x4b2d93
sub edx, 2
je 0x4b2d93
jmp 0x4b2d9f
add edx, 0xffffffc6
sub edx, 2
jb 0x4b2d93
sub edx, 2
je 0x4b2d93
sub edx, 0x1f
je 0x4b2d93
sub edx, 0x20
je 0x4b2d93
jmp 0x4b2d9f
mov ecx, dword [ebx]
mov eax, dword [0x4efe58]
mov byte [ecx + eax - 1], 0
mov edx, dword [ebx]
cmp byte [edx], 0
je 0x4b363f
mov ecx, dword [0x4efe50]
add ecx, 4
push ecx
mov eax, dword [ebx]
push eax
call fcn.004bcfe4
add esp, 8
test eax, eax
je 0x4b363f
inc dword [0x4d414c]
mov edx, dword [ebp + 8]
mov dword [0x4d4148], edx
cmp dword [ebp + 0x10], 1
jne 0x4b2e05
mov ecx, dword [ebx]
push ecx
push str._join__s
push 0x4e4b90
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push 0
push 0x4e4b90
mov eax, dword [ebp + 8]
push eax
call fcn.00460104
jmp 0x4b2e41
cmp dword [ebp + 0x10], 2
jne 0x4b2e41
mov edx, dword [ebx]
push edx
call fcn.004bceac
pop ecx
inc eax
push eax
mov ecx, dword [ebx]
push ecx
push 0x4efe80
call fcn.004bcce0
add esp, 0xc
call fcn.00474788
push 1
call fcn.00472938
mov eax, dword [ebp + 0xc]
push eax
push 0x14
mov edx, dword [ebp + 8]
push edx
call fcn.00474314
xor ecx, ecx
mov dword [0x4d415c], ecx
mov eax, 1
jmp 0x4b3650
push 0x2e
push 0x4efe80
call fcn.004bce0c
add esp, 8
test eax, eax
je 0x4b30ea
xor edx, edx
mov dl, byte [0x4efe80]
cmp edx, 0x3c
jg 0x4b2e88
je 0x4b2e94
sub edx, 0x22
je 0x4b2e94
add edx, 0xfffffffb
sub edx, 2
jb 0x4b2e94
jmp 0x4b2eb2
sub edx, 0x5b
je 0x4b2e94
sub edx, 0x20
je 0x4b2e94
jmp 0x4b2eb2
push 0x4efe80
call fcn.004bceac
pop ecx
push eax
push 0x4efe81
push 0x4efe80
call fcn.004bcce0
add esp, 0xc
push 0x4efe80
call fcn.004bceac
pop ecx
mov dword [0x4efe58], eax
cmp dword [0x4efe58], 0
jle 0x4b2f14
mov ecx, dword [0x4efe58]
xor eax, eax
mov al, byte [ecx + 0x4efe7f]
cmp eax, 0x2e
jg 0x4b2ef6
je 0x4b2f07
sub eax, 0x22
je 0x4b2f07
sub eax, 5
je 0x4b2f07
sub eax, 2
je 0x4b2f07
sub eax, 3
je 0x4b2f07
jmp 0x4b2f14
sub eax, 0x3e
je 0x4b2f07
sub eax, 0x1f
je 0x4b2f07
sub eax, 0x20
je 0x4b2f07
jmp 0x4b2f14
mov edx, dword [0x4efe58]
mov byte [edx + 0x4efe7f], 0
cmp byte [0x4efe80], 0
je 0x4b363f
mov dword [0x4efe58], 0x3e7
xor ecx, ecx
mov dword [0x4d414c], ecx
push 0x3a
push 0x4efe80
call fcn.004bce0c
add esp, 8
test eax, eax
je 0x4b2fbf
push 7
push str.http:__
push 0x4efe80
call fcn.004bd07c
add esp, 0xc
test eax, eax
jne 0x4b2f6d
mov dword [0x4efe58], 0xb
jmp 0x4b3077
push 8
push str.https:__
push 0x4efe80
call fcn.004bd07c
add esp, 0xc
test eax, eax
jne 0x4b2f94
mov dword [0x4efe58], 0xc
jmp 0x4b3077
push 6
push str.ftp:__
push 0x4efe80
call fcn.004bd07c
add esp, 0xc
test eax, eax
jne 0x4b363f
mov dword [0x4efe58], 0xa
jmp 0x4b3077
push 4
push str.www.
push 0x4efe80
call fcn.004bd07c
add esp, 0xc
test eax, eax
jne 0x4b2fe3
mov dword [0x4efe58], 8
jmp 0x4b3054
push 4
push str.ftp.
push 0x4efe80
call fcn.004bd07c
add esp, 0xc
test eax, eax
jne 0x4b3007
mov dword [0x4efe58], 8
jmp 0x4b3054
push 0x40
push 0x4efe80
call fcn.004bce0c
add esp, 8
test eax, eax
je 0x4b363f
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x4b3044
push str.mail
push 0x4efe80
call fcn.004bd134
add esp, 8
test eax, eax
je 0x4b363f
inc dword [0x4d414c]
mov dword [0x4efe58], 6
cmp dword [0x4efe58], 8
jne 0x4b3077
push 0x2e
push 0x4efe84
call fcn.004bce0c
add esp, 8
mov dword [ebx], eax
cmp dword [ebx], 0
je 0x4b363f
push 0x4efe80
call fcn.004bceac
pop ecx
cmp eax, dword [0x4efe58]
jb 0x4b363f
inc dword [0x4d414c]
mov eax, dword [ebp + 8]
mov dword [0x4d4148], eax
cmp dword [ebp + 0x10], 1
jne 0x4b30d8
cmp dword [0x4d414c], 2
jne 0x4b30b7
push 0x4efe80
call fcn.00494228
jmp 0x4b30c6
push 0x4e4f77
push 0x4efe80
call fcn.004b1190
xor edx, edx
mov dword [0x4d415c], edx
mov eax, 1
jmp 0x4b3650
xor edx, edx
mov dword [0x4d415c], edx
mov eax, 1
jmp 0x4b3650
mov edx, dword [0x4efe50]
mov al, byte [edx + 0x4cc]
test al, al
je 0x4b3106
cmp al, 1
je 0x4b3106
cmp al, 2
jne 0x4b363f
call fcn.004b2540
push 0x4f032f
push 0x4f0267
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x4b3128
mov byte [0x4f032f], 0
push 0x4f0393
push 0x4f02cb
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x4b3145
mov byte [0x4f0393], 0
mov edx, dword [0x4efe50]
cmp byte [edx + 0x4cc], 1
jne 0x4b33d2
xor ecx, ecx
mov dword [0x4efe58], ecx
mov eax, dword [0x4efe50]
mov edx, dword [eax + 0x4b0]
mov dword [esi], edx
jmp 0x4b32c9
mov eax, dword [esi]
mov edx, dword [eax + 8]
xor ecx, ecx
mov cl, byte [0x4f0267]
cmp edx, ecx
jne 0x4b31c6
push 0x4f0267
mov eax, dword [eax]
push eax
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x4b31c6
mov edx, dword [esi]
mov ecx, dword [edx]
push esi
mov edi, ecx
mov esi, 0x4efe80
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x4b32d2
mov eax, dword [esi]
mov edx, dword [eax + 8]
xor ecx, ecx
mov cl, byte [0x4f02cb]
cmp edx, ecx
jne 0x4b321a
push 0x4f02cb
mov eax, dword [eax]
push eax
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x4b321a
mov edx, dword [esi]
mov ecx, dword [edx]
push esi
mov edi, ecx
mov esi, 0x4efe80
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x4b32d2
mov eax, dword [esi]
mov edx, dword [eax + 8]
xor ecx, ecx
mov cl, byte [0x4f032f]
cmp edx, ecx
jne 0x4b326b
push 0x4f032f
mov eax, dword [eax]
push eax
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x4b326b
mov edx, dword [esi]
mov ecx, dword [edx]
push esi
mov edi, ecx
mov esi, 0x4efe80
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x4b32d2
mov eax, dword [esi]
mov edx, dword [eax + 8]
xor ecx, ecx
mov cl, byte [0x4f0393]
cmp edx, ecx
jne 0x4b32bc
push 0x4f0393
mov eax, dword [eax]
push eax
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x4b32bc
mov edx, dword [esi]
mov ecx, dword [edx]
push esi
mov edi, ecx
mov esi, 0x4efe80
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x4b32d2
mov eax, dword [esi]
mov edx, dword [eax + 0x2c]
mov dword [esi], edx
inc dword [0x4efe58]
cmp dword [esi], 0
jne 0x4b3172
cmp dword [esi], 0
je 0x4b33d2
inc dword [0x4d414c]
mov ecx, dword [ebp + 8]
mov dword [0x4d4148], ecx
cmp dword [ebp + 0x10], 1
jne 0x4b3367
cmp byte [0x4e732a], 0
je 0x4b33c0
push esi
mov esi, 0x4efe80
mov edi, 0x4e732a
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
mov eax, dword [esi]
mov edx, dword [eax]
push esi
mov edi, edx
mov esi, 0x4e4f77
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
push 1
push 0x4e4f77
push 0x4efe80
mov eax, dword [ebp + 8]
push eax
call fcn.00460104
jmp 0x4b33c0
cmp dword [ebp + 0x10], 2
jne 0x4b33a1
call fcn.00474788
push 1
push 1
mov edx, dword [0x4efe58]
push edx
push 0x425
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040b668
call fcn.00472a18
mov eax, dword [ebp + 0xc]
push eax
push 3
mov edx, dword [ebp + 8]
push edx
call fcn.00474314
jmp 0x4b33c0
cmp dword [ebp + 0x10], 3
jne 0x4b33c0
push 1
push 1
mov ecx, dword [0x4efe58]
push ecx
push 0x425
mov eax, dword [ebp + 8]
push eax
call fcn.0040b668
xor edx, edx
mov dword [0x4d415c], edx
mov eax, 1
jmp 0x4b3650
mov edx, dword [0x4d15a8]
mov dword [0x4efe54], edx
jmp 0x4b3537
cmp dword [eax + 0x29c], 0
je 0x4b3526
cmp byte [0x4f0267], 0
je 0x4b343f
push 0x4f0267
mov ecx, dword [0x4efe54]
push ecx
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x4b343f
mov eax, dword [0x4efe54]
mov esi, 0x4efe80
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4b3544
cmp byte [0x4f02cb], 0
je 0x4b348e
push 0x4f02cb
mov eax, dword [0x4efe54]
push eax
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x4b348e
mov edx, dword [0x4efe54]
mov esi, 0x4efe80
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4b3544
cmp byte [0x4f032f], 0
je 0x4b34da
push 0x4f032f
mov eax, dword [0x4efe54]
push eax
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x4b34da
mov edx, dword [0x4efe54]
mov esi, 0x4efe80
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4b3544
cmp byte [0x4f0393], 0
je 0x4b3526
push 0x4f0393
mov eax, dword [0x4efe54]
push eax
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x4b3526
mov edx, dword [0x4efe54]
mov esi, 0x4efe80
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4b3544
mov eax, dword [0x4efe54]
mov edx, dword [eax + 0x2a8]
mov dword [0x4efe54], edx
mov eax, dword [0x4efe54]
test eax, eax
jne 0x4b33e3
cmp dword [0x4efe54], 0
je 0x4b363f
inc dword [0x4d414c]
mov edx, dword [ebp + 8]
mov dword [0x4d4148], edx
cmp dword [ebp + 0x10], 1
jne 0x4b35da
cmp byte [0x4e742a], 0
je 0x4b35fb
mov esi, 0x4efe80
mov edi, 0x4e742a
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x4efe54]
mov esi, 0x4e4f77
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 1
push 0x4e4f77
push 0x4efe80
mov eax, dword [ebp + 8]
push eax
call fcn.00460104
jmp 0x4b35fb
cmp dword [ebp + 0x10], 2
jne 0x4b35fb
call fcn.00474788
push 0
call fcn.00472dc0
mov edx, dword [ebp + 0xc]
push edx
push 7
mov ecx, dword [ebp + 8]
push ecx
call fcn.00474314
xor eax, eax
mov dword [0x4d415c], eax
mov eax, 1
jmp 0x4b3650
mov edx, dword [0x4efe30]
add dword [0x4efe44], edx
mov ecx, dword [0x4efe74]
sub ecx, dword [0x4efe30]
dec ecx
cmp ecx, dword [0x4efe44]
jl 0x4b363f
mov eax, dword [esi]
mov edx, dword [eax + 0x2c]
mov dword [esi], edx
cmp dword [esi], 0
je 0x4b363f
cmp dword [esi], 0
jne 0x4b29e1
xor ecx, ecx
mov dword [0x4d414c], ecx
xor eax, eax
mov dword [0x4d415c], eax
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 0xc