Function at 0x432d30
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
sub rsp, 0x2f8
mov rax, qword [0x00522be8]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
mov qword [r11 - 8], rbx
mov qword [r11 - 0x10], rbp
mov qword [r11 - 0x28], r12
mov qword [r11 - 0x30], r13
mov r12d, r8d
mov qword [r11 - 0x38], r14
mov r14, rcx
mov qword [rsp + 0x88], rcx
mov rcx, qword [rcx + 0x10]
neg r12d
mov ebx, r9d
mov r13d, edx
mov r8d, r12d
mov dword [rsp + 0x68], edx
mov dword [rsp + 0x74], r12d
call fcn.00478b00
test eax, eax
je 0x432dae
test ebx, ebx
je 0x432da4
mov edx, dword [rsp + 0x320]
mov rcx, qword [r14 + 0x30]
call fcn.0047b950
mov eax, 1
jmp 0x43443d
mov qword [rsp + 0x2d8], rdi
mov ebp, 1
xor edi, edi
test ebx, ebx
mov qword [rsp + 0x2b8], r15
mov dword [rsp + 0x5c], edi
mov r15d, ebp
mov dword [rsp + 0x78], ebp
je 0x432de4
mov edx, dword [rsp + 0x320]
mov rcx, qword [r14 + 0x30]
call fcn.0047b950
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x2e0], rsi
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rcx, qword [r14 + 0x10]
lea r11, [rsp + 0x30]
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x20], r11
call fcn.004793d0
test rax, rax
mov rsi, rax
je 0x4341c0
movzx eax, word [rsp + 0x30]
cmp ax, 6
je 0x4341c0
cmp ax, 9
jne 0x432eeb
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
mov r12, rdi
cmp rsi, rax
mov rbx, rdi
cmove rax, rdi
cmp rsi, rcx
cmove rcx, rdi
test rax, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x48], rcx
je 0x432e81
mov rcx, rax
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, qword [rsp + 0x48]
mov r12, rax
mov rax, qword [rsp + 0x38]
test rcx, rcx
je 0x432e99
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, qword [rsp + 0x48]
mov rbx, rax
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x432eaa
cmp r12, rsi
cmovne rax, rdi
mov qword [rsp + 0x38], rax
test rcx, rcx
je 0x432eb9
cmp rbx, rsi
je 0x432ed3
mov qword [rsp + 0x48], rdi
test rax, rax
mov r12d, edi
mov dword [rsp + 0x74], edi
cmove r13d, edi
mov word [rsp + 0x30], di
mov dword [rsp + 0x68], r13d
jmp 0x432f46
mov r12d, dword [rsp + 0x74]
test rax, rax
mov word [rsp + 0x30], di
cmove r13d, edi
mov dword [rsp + 0x68], r13d
jmp 0x432f46
cmp ax, 7
je 0x432f02
cmp ax, 8
je 0x432f02
cmp ax, bp
je 0x432f02
cmp ax, 2
jne 0x432f46
xor edx, edx
lea r8, [rsp + 0x58]
xor r9d, r9d
lea ecx, [rdx + 0x68]
mov ebx, edi
mov dword [rsp + 0x5c], edi
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x432f46
mov eax, dword [rsp + 0x58]
cmp eax, ebp
mov dword [rsp + 0x78], eax
je 0x432f46
xor r9d, r9d
xor r8d, r8d
mov edx, ebp
lea ecx, [r9 + 0x69]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
cmovne ebx, ebp
mov dword [rsp + 0x5c], ebx
test r13d, r13d
jle 0x432f5e
mov eax, r13d
imul eax, r13d
add dword [0x005262e8], eax
mov dword [rsp + 0x6c], eax
jmp 0x432f6f
mov eax, r13d
imul eax, r13d
sub dword [0x005262e8], eax
mov dword [rsp + 0x6c], eax
test r12d, r12d
jle 0x432f87
mov ebx, r12d
imul ebx, r12d
add dword [0x005262e4], ebx
mov dword [rsp + 0x70], ebx
jmp 0x432f98
mov eax, r12d
imul eax, r12d
sub dword [0x005262e4], eax
mov dword [rsp + 0x70], eax
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x432fb2
mov dword [0x005262e8], edi
jmp 0x432ff9
mov r9d, dword [0x005262e4]
mov ecx, dword [0x005262e8]
mov eax, r9d
cdq
mov r8d, eax
mov eax, ecx
xor r8d, edx
sub r8d, edx
cdq
xor eax, edx
sub eax, edx
add eax, eax
cmp eax, r8d
cmovl ecx, edi
mov eax, ecx
mov dword [0x005262e8], ecx
lea ecx, [r8 + r8]
cdq
xor eax, edx
sub eax, edx
cmp ecx, eax
cmovl r9d, edi
mov dword [0x005262e4], r9d
lea rdx, [rsp + 0xa0]
mov r8d, 0x100
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x43308f
lea rdx, str.MozillaWindowClass
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x433080
lea rdx, str.NS_AE_WindowClass
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x433080
mov rcx, qword [r14 + 0x10]
lea r8, str.HwndWrapper
lea rdx, [rsp + 0xa0]
call fcn.00478870
test eax, eax
jne 0x433080
cmp word [rsp + 0x30], bp
je 0x433096
lea rdx, str.Chrome_WidgetWin_0
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
jmp 0x43308f
mov rcx, qword [0x00527cb0]
call fcn.0047a550
mov r15d, edi
cmp word [rsp + 0x30], bp
jne 0x43309f
mov r11d, edi
mov dword [rsp + 0x40], edi
jmp 0x4330b6
mov r11d, edi
mov eax, r13d
cdq
xor eax, edx
sub eax, edx
cmp eax, 9
setg r11b
mov dword [rsp + 0x40], r11d
mov r10d, dword [0x005262e0]
mov ebx, edi
mov eax, r12d
cdq
mov r12d, 0x64
xor eax, edx
mov r13d, r12d
sub eax, edx
cmp eax, 9
mov eax, 0x640
setg bl
test r11d, r11d
cmovne r13d, eax
test ebx, ebx
mov dword [rsp + 0x58], ebx
je 0x4330f6
mov r8d, dword [0x005262e4]
mov r14d, eax
jmp 0x433126
test r10d, r10d
mov r14d, r12d
jle 0x43311f
mov r8d, dword [0x005262e4]
mov eax, r8d
cdq
xor eax, edx
sub eax, edx
cmp eax, 0xc8
cmovg r8d, edi
mov dword [0x005262e4], r8d
jmp 0x433126
mov r8d, dword [0x005262e4]
test r11d, r11d
mov r9d, dword [0x005262dc]
jne 0x433152
test r9d, r9d
jle 0x433152
mov ecx, dword [0x005262e8]
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0xc8
cmovg ecx, edi
mov dword [0x005262e8], ecx
test ebx, ebx
je 0x43316f
mov eax, r8d
cdq
xor eax, edx
sub eax, edx
cmp eax, r14d
jle 0x43316f
mov dword [0x005262e0], 5
jmp 0x43317e
test r10d, r10d
jle 0x43317e
sub r10d, ebp
mov dword [0x005262e0], r10d
test r11d, r11d
je 0x43319f
mov eax, dword [0x005262e8]
cdq
xor eax, edx
sub eax, edx
cmp eax, r13d
jle 0x43319f
mov dword [0x005262dc], 5
jmp 0x4331ae
test r9d, r9d
jle 0x4331ae
sub r9d, ebp
mov dword [0x005262dc], r9d
movsxd rax, r15d
mov r15, qword [rsp + 0x88]
movsxd r10, ebx
movsxd r9, r11d
lea rcx, [0x00400000]
mov qword [rsp + 0x60], r10
mov qword [rsp + 0x80], r9
mov qword [rsp + 0x90], rax
nop
nop
mov eax, dword [0x005262e8]
cdq
xor eax, edx
sub eax, edx
cmp eax, r13d
jg 0x433201
mov eax, r8d
cdq
xor eax, edx
sub eax, edx
cmp eax, r14d
jle 0x433fda
movsx rax, word [rsp + 0x30]
mov edx, ebp
cmp eax, 0xc
ja case.0x433223.1
mov ecx, dword [rcx + rax*4 + 0x34480]
lea rax, [0x00400000]
add rcx, rax
jmp rcx
cmp dword [0x005262e8], r13d
jle 0x433244
xor r8d, r8d
mov rcx, rsi
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
jmp 0x433265
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge 0x433265
mov r8d, ebp
mov rcx, rsi
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
cmp r8d, r14d
jle 0x433285
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
jmp 0x4333c5
mov eax, r14d
neg eax
cmp r8d, eax
jge 0x4333c5
mov r8d, ebp
xor edx, edx
mov rcx, rsi
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
jmp 0x4333c5
cmp dword [0x005262e8], r13d
jle 0x4332cf
mov rcx, qword [rsp + 0x38]
xor r8d, r8d
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
jmp 0x4332f2
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge 0x4332f2
mov rcx, qword [rsp + 0x38]
mov r8d, ebp
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
cmp r8d, r14d
jle 0x433314
mov rcx, qword [rsp + 0x48]
xor r8d, r8d
xor edx, edx
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
jmp 0x4333c5
mov eax, r14d
neg eax
cmp r8d, eax
jge 0x4333c5
mov rcx, qword [rsp + 0x48]
mov r8d, ebp
xor edx, edx
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
jmp 0x4333c5
cmp dword [0x005262e8], r13d
jle 0x43335e
xor r8d, r8d
mov rcx, rsi
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
jmp 0x4333c5
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge case.0x433223.1
mov r8d, ebp
mov rcx, rsi
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
jmp 0x4333c5
cmp dword [0x005262e8], r13d
jle 0x4333a2
mov rcx, qword [rsp + 0x38]
xor r8d, r8d
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
jmp 0x4333c5
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge case.0x433223.1
mov rcx, qword [rsp + 0x38]
mov r8d, ebp
call fcn.00432bf0
mov r8d, dword [0x005262e4]
mov edx, eax
test edx, edx
je 0x434423
mov r11d, dword [rsp + 0x40]
mov r9, qword [rsp + 0x80]
movsxd r10, ebx
movsx rax, word [rsp + 0x30]
cmp eax, 0xe
ja case.0x433400.4
mov rcx, rax
lea rax, [0x00400000]
mov edx, dword [rax + rcx*4 + 0x344b4]
add rdx, rax
jmp rdx
cmp r8d, r14d
jle 0x433450
mov eax, r8d
mov r9d, 0xffffffff
mov ecx, 0x800
cdq
mov dword [rsp + 0x20], edi
idiv r14d
test r10, r10
mov ebx, eax
mov eax, 0xfffffff0
cmovne r9d, eax
xor r8d, r8d
xor edx, edx
imul r9d, ebx
call fcn.0047a440
mov r8d, dword [0x005262e4]
imul ebx, r14d
sub r8d, ebx
mov dword [0x005262e4], r8d
jmp 0x4334a1
mov eax, r14d
neg eax
cmp r8d, eax
jge 0x4334a1
mov eax, r8d
mov r9d, 0xffffffff
mov ecx, 0x800
cdq
mov dword [rsp + 0x20], edi
idiv r14d
test r10, r10
mov ebx, eax
mov eax, 0xfffffff0
cmovne r9d, eax
xor r8d, r8d
xor edx, edx
imul r9d, ebx
call fcn.0047a440
mov r8d, dword [0x005262e4]
imul ebx, r14d
sub r8d, ebx
mov dword [0x005262e4], r8d
cmp dword [0x005262e8], r13d
jle 0x4334d6
mov r9d, 0x78
xor r8d, r8d
xor edx, edx
mov ecx, 0x1000
mov dword [rsp + 0x20], edi
call fcn.0047a440
sub dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
jmp case.0x433400.4
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge case.0x433400.4
mov r9d, 0xffffff88
xor r8d, r8d
xor edx, edx
mov ecx, 0x1000
mov dword [rsp + 0x20], edi
call fcn.0047a440
add dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
jmp case.0x433400.4
cmp dword [0x005262e8], r13d
jle 0x433550
lea rcx, [0x00526380]
mov r9d, 0x27
mov r8d, 0x100
mov rdx, rsi
mov qword [rsp + 0x20], 0x14d0001
call fcn.00461a60
sub dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
jmp 0x43358f
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge 0x43358f
lea rcx, [0x00526380]
mov r9d, 0x25
mov r8d, 0x100
mov rdx, rsi
mov qword [rsp + 0x20], 0x14b0001
call fcn.00461a60
add dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
cmp r8d, r14d
jle 0x4335e0
mov rcx, qword [r15 + 0x10]
mov eax, r8d
mov r8d, 0xffffffff
cdq
lea r9, [rsp + 0x50]
idiv r14d
cmp qword [rsp + 0x60], rdi
mov rdx, rsi
mov ebx, eax
mov eax, 0xfffffff0
cmovne r8d, eax
imul r8d, ebx
call fcn.004787f0
mov r8d, dword [0x005262e4]
imul ebx, r14d
sub r8d, ebx
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov eax, r14d
neg eax
cmp r8d, eax
jge case.0x433400.4
mov rcx, qword [r15 + 0x10]
mov eax, r8d
mov r8d, 0xffffffff
cdq
lea r9, [rsp + 0x50]
idiv r14d
cmp qword [rsp + 0x60], rdi
mov rdx, rsi
mov ebx, eax
mov eax, 0xfffffff0
cmovne r8d, eax
imul r8d, ebx
call fcn.004787f0
mov r8d, dword [0x005262e4]
imul ebx, r14d
sub r8d, ebx
mov dword [0x005262e4], r8d
jmp case.0x433400.4
cmp dword [0x005262e8], r13d
jle 0x433681
test r11d, r11d
mov eax, 3
mov r9, rbp
cmovne r9, rax
mov rax, qword [rsp + 0x38]
lea rcx, [0x00526380]
mov r8d, 0x114
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.00461a60
sub dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
jmp 0x4336c7
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge 0x4336c7
mov eax, r11d
lea rcx, [0x00526380]
mov r8d, 0x114
neg eax
mov rax, qword [rsp + 0x38]
mov rdx, rsi
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.00461a60
add dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
cmp r8d, r14d
jle 0x43370f
mov eax, 3
mov r9, rbp
test ebx, ebx
cmovne r9, rax
mov rax, qword [rsp + 0x48]
lea rcx, [0x00526380]
mov r8d, 0x115
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.00461a60
mov r8d, dword [0x005262e4]
sub r8d, r14d
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov eax, r14d
neg eax
cmp r8d, eax
jge case.0x433400.4
mov eax, ebx
lea rcx, [0x00526380]
mov r8d, 0x115
neg eax
mov rax, qword [rsp + 0x48]
mov rdx, rsi
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.00461a60
mov r8d, dword [0x005262e4]
add r8d, r14d
mov dword [0x005262e4], r8d
jmp case.0x433400.4
cmp dword [0x005262e8], r13d
jle 0x4337a4
test r11d, r11d
mov eax, 3
mov r9, rbp
cmovne r9, rax
mov rax, qword [rsp + 0x38]
lea rcx, [0x00526380]
mov r8d, 0x114
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.004618c0
sub dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
jmp 0x4337ea
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge 0x4337ea
mov eax, r11d
lea rcx, [0x00526380]
mov r8d, 0x114
neg eax
mov rax, qword [rsp + 0x38]
mov rdx, rsi
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.004618c0
add dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
cmp r8d, r14d
jle 0x433832
mov eax, 3
mov r9, rbp
test ebx, ebx
cmovne r9, rax
mov rax, qword [rsp + 0x48]
lea rcx, [0x00526380]
mov r8d, 0x115
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.004618c0
mov r8d, dword [0x005262e4]
sub r8d, r14d
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov eax, r14d
neg eax
cmp r8d, eax
jge case.0x433400.4
mov eax, ebx
lea rcx, [0x00526380]
mov r8d, 0x115
neg eax
mov rax, qword [rsp + 0x48]
mov rdx, rsi
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.004618c0
mov r8d, dword [0x005262e4]
add r8d, r14d
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.USER32.dll_GetParent]
mov ecx, dword [0x005262e8]
cmp ecx, r13d
mov rdx, rax
jle 0x4338ce
mov rcx, qword [rsp + 0x38]
cmp dword [rsp + 0x40], edi
mov eax, 3
mov qword [rsp + 0x20], rcx
mov r9, rbp
lea rcx, [0x00526380]
cmovne r9, rax
mov r8d, 0x114
call fcn.00461a60
sub dword [0x005262e8], r13d
jmp 0x433907
mov eax, r13d
neg eax
cmp ecx, eax
jge 0x433907
mov eax, dword [rsp + 0x40]
lea rcx, [0x00526380]
mov r8d, 0x114
neg eax
mov rax, qword [rsp + 0x38]
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.00461a60
add dword [0x005262e8], r13d
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.USER32.dll_GetParent]
mov r8d, dword [0x005262e4]
cmp r8d, r14d
mov rsi, rax
jle 0x433964
mov eax, 3
mov r9, rbp
test ebx, ebx
cmovne r9, rax
mov rax, qword [rsp + 0x48]
lea rcx, [0x00526380]
mov r8d, 0x115
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.00461a60
mov r8d, dword [0x005262e4]
sub r8d, r14d
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov eax, r14d
neg eax
cmp r8d, eax
jge case.0x433400.4
mov eax, ebx
lea rcx, [0x00526380]
mov r8d, 0x115
neg eax
mov rax, qword [rsp + 0x48]
mov rdx, rsi
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.00461a60
mov r8d, dword [0x005262e4]
add r8d, r14d
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.USER32.dll_GetParent]
mov ecx, dword [0x005262e8]
cmp ecx, r13d
mov rdx, rax
jle 0x433a00
mov rcx, qword [rsp + 0x38]
cmp dword [rsp + 0x40], edi
mov eax, 3
mov qword [rsp + 0x20], rcx
mov r9, rbp
lea rcx, [0x00526380]
cmovne r9, rax
mov r8d, 0x114
call fcn.004618c0
sub dword [0x005262e8], r13d
jmp 0x433a39
mov eax, r13d
neg eax
cmp ecx, eax
jge 0x433a39
mov eax, dword [rsp + 0x40]
lea rcx, [0x00526380]
mov r8d, 0x114
neg eax
mov rax, qword [rsp + 0x38]
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.004618c0
add dword [0x005262e8], r13d
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.USER32.dll_GetParent]
mov r8d, dword [0x005262e4]
cmp r8d, r14d
mov rsi, rax
jle 0x433a96
mov eax, 3
mov r9, rbp
test ebx, ebx
cmovne r9, rax
mov rax, qword [rsp + 0x48]
lea rcx, [0x00526380]
mov r8d, 0x115
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.004618c0
mov r8d, dword [0x005262e4]
sub r8d, r14d
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov eax, r14d
neg eax
cmp r8d, eax
jge case.0x433400.4
mov eax, ebx
lea rcx, [0x00526380]
mov r8d, 0x115
neg eax
mov rax, qword [rsp + 0x48]
mov rdx, rsi
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.004618c0
mov r8d, dword [0x005262e4]
add r8d, r14d
mov dword [0x005262e4], r8d
jmp case.0x433400.4
cmp dword [0x005262e8], r13d
jle 0x433b21
lea rcx, [0x00526380]
mov r9d, 0x27
mov r8d, 0x100
mov rdx, rsi
mov qword [rsp + 0x20], 0x14d0001
call fcn.00461a60
sub dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
jmp 0x433b60
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge 0x433b60
lea rcx, [0x00526380]
mov r9d, 0x25
mov r8d, 0x100
mov rdx, rsi
mov qword [rsp + 0x20], 0x14b0001
call fcn.00461a60
add dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
cmp r8d, r14d
jle 0x433b9f
lea rcx, [0x00526380]
mov r9d, 0x28
mov r8d, 0x100
mov rdx, rsi
mov qword [rsp + 0x20], 0x1500001
call fcn.00461a60
mov r8d, dword [0x005262e4]
sub r8d, r14d
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov eax, r14d
neg eax
cmp r8d, eax
jge case.0x433400.4
lea rcx, [0x00526380]
mov r9d, 0x26
mov r8d, 0x100
mov rdx, rsi
mov qword [rsp + 0x20], 0x1480001
call fcn.00461a60
mov r8d, dword [0x005262e4]
add r8d, r14d
mov dword [0x005262e4], r8d
jmp case.0x433400.4
cmp dword [0x005262e8], r13d
jle 0x433c2e
test r11d, r11d
mov eax, 3
mov r9, rbp
cmovne r9, rax
mov rax, qword [rsp + 0x38]
lea rcx, [0x00526380]
mov r8d, 0x114
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.00461a60
sub dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
jmp 0x433c74
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge 0x433c74
mov eax, r11d
lea rcx, [0x00526380]
mov r8d, 0x114
neg eax
mov rax, qword [rsp + 0x38]
mov rdx, rsi
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.00461a60
add dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
cmp r8d, r14d
jle 0x433cc5
mov rcx, qword [r15 + 0x10]
mov eax, r8d
mov r8d, 0xffffffff
cdq
lea r9, [rsp + 0x50]
idiv r14d
cmp qword [rsp + 0x60], rdi
mov rdx, rsi
mov ebx, eax
mov eax, 0xfffffff0
cmovne r8d, eax
imul r8d, ebx
call fcn.004787f0
mov r8d, dword [0x005262e4]
imul ebx, r14d
sub r8d, ebx
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov eax, r14d
neg eax
cmp r8d, eax
jge case.0x433400.4
mov rcx, qword [r15 + 0x10]
mov eax, r8d
mov r8d, 0xffffffff
cdq
lea r9, [rsp + 0x50]
idiv r14d
cmp qword [rsp + 0x60], rdi
mov rdx, rsi
mov ebx, eax
mov eax, 0xfffffff0
cmovne r8d, eax
imul r8d, ebx
call fcn.004787f0
mov r8d, dword [0x005262e4]
imul ebx, r14d
sub r8d, ebx
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.USER32.dll_GetParent]
cmp dword [0x005262e8], r13d
mov rdx, rax
jle 0x433d6b
mov rcx, qword [rsp + 0x38]
cmp dword [rsp + 0x40], edi
mov eax, 3
mov qword [rsp + 0x20], rcx
mov r9, rbp
lea rcx, [0x00526380]
cmovne r9, rax
mov r8d, 0x114
call fcn.004618c0
sub dword [0x005262e8], r13d
jmp 0x433da8
mov eax, r13d
neg eax
cmp dword [0x005262e8], eax
jge 0x433da8
mov eax, dword [rsp + 0x40]
lea rcx, [0x00526380]
mov r8d, 0x114
neg eax
mov rax, qword [rsp + 0x38]
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.004618c0
add dword [0x005262e8], r13d
mov r8d, dword [0x005262e4]
cmp r8d, r14d
jle 0x433e00
mov rcx, qword [r15 + 0x10]
mov eax, r8d
mov r8d, 0xffffffff
cdq
lea r9, [rsp + 0x50]
idiv r14d
cmp qword [rsp + 0x60], rdi
mov rdx, rsi
mov ebx, eax
mov eax, 0xfffffff0
cmovne r8d, eax
imul r8d, ebx
call fcn.00478830
mov r8d, dword [0x005262e4]
imul ebx, r14d
sub r8d, ebx
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov eax, r14d
neg eax
cmp r8d, eax
jge case.0x433400.4
mov rcx, qword [r15 + 0x10]
mov eax, r8d
mov r8d, 0xffffffff
cdq
lea r9, [rsp + 0x50]
idiv r14d
cmp qword [rsp + 0x60], rdi
mov rdx, rsi
mov ebx, eax
mov eax, 0xfffffff0
cmovne r8d, eax
imul r8d, ebx
call fcn.00478830
mov r8d, dword [0x005262e4]
imul ebx, r14d
sub r8d, ebx
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov ecx, dword [0x005262e8]
cmp ecx, r13d
jg 0x433e6e
mov eax, r13d
neg eax
cmp ecx, eax
jge 0x433edc
mov eax, dword [0x005262e8]
mov r8d, 0xffffffff
mov ecx, ebp
cdq
idiv r13d
test r9, r9
mov edx, 0x10
cmovne ecx, edx
mov edx, r8d
mov r9d, r8d
imul ax, cx
imul ax, ax, 0x78
movzx eax, ax
shl eax, 0x10
mov ecx, eax
cmp rcx, r8
movzx ecx, word [rsp + 0x54]
cmovbe edx, eax
movzx eax, word [rsp + 0x50]
shl ecx, 0x10
or rcx, rax
cmp rcx, r8
mov r8d, edx
mov edx, 0x20e
cmovbe r9d, ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8d, dword [0x005262e4]
mov dword [0x005262e8], edi
cmp r8d, r14d
jle 0x433f2a
mov rcx, qword [r15 + 0x10]
mov eax, r8d
mov r8d, 0xffffffff
cdq
lea r9, [rsp + 0x50]
idiv r14d
cmp qword [rsp + 0x60], rdi
mov rdx, rsi
mov ebx, eax
mov eax, 0xfffffff0
cmovne r8d, eax
imul r8d, ebx
call fcn.004787f0
mov r8d, dword [0x005262e4]
imul ebx, r14d
sub r8d, ebx
mov dword [0x005262e4], r8d
jmp case.0x433400.4
mov eax, r14d
neg eax
cmp r8d, eax
jge case.0x433400.4
mov rcx, qword [r15 + 0x10]
mov eax, r8d
mov r8d, 0xffffffff
cdq
lea r9, [rsp + 0x50]
idiv r14d
cmp qword [rsp + 0x60], rdi
mov rdx, rsi
mov ebx, eax
mov eax, 0xfffffff0
cmovne r8d, eax
imul r8d, ebx
call fcn.004787f0
mov r8d, dword [0x005262e4]
imul ebx, r14d
sub r8d, ebx
mov dword [0x005262e4], r8d
cmp qword [rsp + 0x90], rdi
movsxd rbx, dword [rsp + 0x58]
movsxd r11, dword [rsp + 0x40]
mov r10, rbx
mov r9, r11
lea rcx, [0x00400000]
je 0x4331e0
mov rcx, qword [0x00527cb0]
mov edx, 0x102
call fcn.0047a720
mov r8d, dword [0x005262e4]
mov ebx, dword [rsp + 0x58]
mov r11d, dword [rsp + 0x40]
mov r10, qword [rsp + 0x60]
mov r9, qword [rsp + 0x80]
lea rcx, [0x00400000]
jmp 0x4331e0
cmp word [rsp + 0x30], bp
jne 0x4341c7
xor r12w, r12w
cmp r8d, 0x64
mov dword [0x005262e8], edi
jle 0x43401c
lea ecx, [r8 - 0x65]
mov eax, 0x51eb851f
mul ecx
shr edx, 5
add edx, ebp
mov ecx, edx
mov r12d, edx
imul ecx, ecx, 0xffffff9c
add r8d, ecx
imul r12w, r12w, 0xff88
mov dword [0x005262e4], r8d
cmp r8d, 0xffffff9c
jge 0x43404f
mov ecx, 0xffffff9b
mov eax, 0x51eb851f
sub ecx, r8d
mul ecx
shr edx, 5
add edx, ebp
mov eax, edx
mov ecx, edx
imul eax, eax, 0x64
imul cx, cx, 0x78
add r8d, eax
mov dword [0x005262e4], r8d
add r12w, cx
test r12w, r12w
je 0x434121
mov eax, dword [0x005262d8]
test bpl, al
jne 0x43407d
or eax, ebp
mov ecx, 0x17
mov dword [0x005262d8], eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x005262d4], eax
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov edx, 8
mov ebx, edi
test ax, ax
lea ecx, [rdx + 8]
cmovne ebx, edx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4340a6
or ebx, 4
mov ecx, ebp
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4340c1
cmp dword [0x005262d4], edi
setne dil
add edi, ebp
or ebx, edi
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x4340e0
mov eax, dword [0x005262d4]
neg eax
sbb ecx, ecx
add ecx, 2
or ebx, ecx
movsx eax, word [rsp + 0x54]
movsx r9d, r12w
mov r8d, 0x20a
shl eax, 0x10
shl r9d, 0x10
mov rdx, rsi
movsxd rcx, eax
movsx rax, word [rsp + 0x50]
or rcx, rax
mov eax, ebx
mov qword [rsp + 0x20], rcx
lea rcx, [0x00526380]
or r9, rax
call fcn.00461a60
mov edi, dword [0x005262e8]
mov eax, edi
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x64
jle 0x434186
nop
cmp edi, 0x64
jle 0x434145
sub edi, 0x64
mov eax, 0x27
mov dword [0x005262e8], edi
jmp 0x434153
add edi, 0x64
mov eax, 0x25
mov dword [0x005262e8], edi
lea rcx, [0x00526380]
mov r9d, eax
mov r8d, 0x100
mov rdx, rsi
mov qword [rsp + 0x20], 0x14d0001
call fcn.00461a60
mov edi, dword [0x005262e8]
mov eax, edi
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x64
jg 0x434130
cmp dword [rsp + 0x5c], 0
je 0x4341c0
xor edx, edx
lea r8, [rsp + 0x5c]
xor r9d, r9d
lea ecx, [rdx + 0x68]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x4341c0
mov eax, dword [rsp + 0x78]
cmp dword [rsp + 0x5c], eax
je 0x4341c0
xor r9d, r9d
xor r8d, r8d
mov edx, eax
lea ecx, [r9 + 0x69]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, ebp
jmp 0x434425
cmp word [rsp + 0x30], 4
jne 0x43423a
mov eax, dword [rsp + 0x74]
test eax, eax
je 0x4341f9
test eax, eax
jns 0x4341e5
mov r8d, dword [rsp + 0x70]
neg r8d
jmp 0x4341ea
mov r8d, dword [rsp + 0x70]
mov rcx, qword [r15 + 0x10]
xor r9d, r9d
mov rdx, rsi
call fcn.004786f0
mov eax, dword [rsp + 0x68]
test eax, eax
je 0x434186
test eax, eax
jns 0x434221
mov r8d, dword [rsp + 0x6c]
mov rcx, qword [r15 + 0x10]
mov r9d, ebp
neg r8d
mov rdx, rsi
call fcn.004786f0
jmp 0x434186
mov r8d, dword [rsp + 0x6c]
mov rcx, qword [r15 + 0x10]
mov r9d, ebp
mov rdx, rsi
call fcn.004786f0
jmp 0x434186
mov eax, dword [rsp + 0x68]
mov r14d, dword [rsp + 0x58]
mov r13d, edi
cdq
mov ebx, r12d
lea rcx, [rsp + 0xa0]
xor eax, edx
sub eax, edx
lea rdx, str.Chrome_WidgetWin_0
cmp eax, 9
mov eax, 0x640
setg r13b
test r13d, r13d
cmovne ebx, eax
test r14d, r14d
cmovne r12d, eax
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
cmove r13d, edi
mov edi, 3
nop
nop
nop
mov eax, dword [0x005262e8]
cdq
xor eax, edx
sub eax, edx
cmp eax, ebx
jg 0x4342b3
mov eax, dword [0x005262e4]
cdq
xor eax, edx
sub eax, edx
cmp eax, r12d
jle 0x434186
cmp dword [0x005262e8], ebx
mov ecx, ebp
jle 0x4342ce
xor r8d, r8d
mov edx, ebp
mov rcx, rsi
call fcn.00432bf0
mov ecx, eax
jmp 0x4342e9
mov eax, ebx
neg eax
cmp dword [0x005262e8], eax
jge 0x4342e9
mov r8d, ebp
mov edx, ebp
mov rcx, rsi
call fcn.00432bf0
mov ecx, eax
cmp dword [0x005262e4], r12d
jle 0x434303
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.00432bf0
mov ecx, eax
jmp 0x43431f
mov eax, r12d
neg eax
cmp dword [0x005262e4], eax
jge 0x43431f
mov r8d, ebp
xor edx, edx
mov rcx, rsi
call fcn.00432bf0
mov ecx, eax
test ecx, ecx
je 0x434423
cmp dword [0x005262e8], ebx
jle 0x434360
mov rax, qword [rsp + 0x38]
mov r9, rbp
test r13d, r13d
lea rcx, [0x00526380]
mov r8d, 0x114
mov rdx, rsi
cmovne r9, rdi
mov qword [rsp + 0x20], rax
call fcn.00461a60
sub dword [0x005262e8], ebx
jmp 0x43439d
mov eax, ebx
neg eax
cmp dword [0x005262e8], eax
jge 0x43439d
mov eax, r13d
lea rcx, [0x00526380]
mov r8d, 0x114
neg eax
mov rax, qword [rsp + 0x38]
mov rdx, rsi
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.00461a60
add dword [0x005262e8], ebx
cmp dword [0x005262e4], r12d
jle 0x4343db
mov rax, qword [rsp + 0x48]
mov r9, rbp
test r14d, r14d
lea rcx, [0x00526380]
mov r8d, 0x115
mov rdx, rsi
cmovne r9, rdi
mov qword [rsp + 0x20], rax
call fcn.00461a60
sub dword [0x005262e4], r12d
jmp 0x434290
mov eax, r12d
neg eax
cmp dword [0x005262e4], eax
jge 0x434290
mov eax, r14d
lea rcx, [0x00526380]
mov r8d, 0x115
neg eax
mov rax, qword [rsp + 0x48]
mov rdx, rsi
sbb r9, r9
mov qword [rsp + 0x20], rax
and r9d, 2
call fcn.00461a60
add dword [0x005262e4], r12d
jmp 0x434290
xor eax, eax
mov rsi, qword [rsp + 0x2e0]
mov rdi, qword [rsp + 0x2d8]
mov r15, qword [rsp + 0x2b8]
mov r14, qword [rsp + 0x2c0]
mov r13, qword [rsp + 0x2c8]
mov r12, qword [rsp + 0x2d0]
mov rbp, qword [rsp + 0x2e8]
mov rbx, qword [rsp + 0x2f0]
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.004a7100
add rsp, 0x2f8
ret