Function at 0x4f1ab0
Capabilities:
Check for time delay via gettickcount
Get memory capacity

Disassembly:
sub esp, 0xa0
push 0x6b6200
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
cmp dword [0x6b6224], 0xff
jle 0x4f1ada
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.user32.dll_GetActiveWindow]
push edi
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
shr eax, 0x18
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1b1c
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
shr eax, 0x10
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1b54
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
shr eax, 8
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1b8d
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1bc2
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
mov esi, dword [sym.imp.user32.dll_GetCapture]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
shr eax, 0x18
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1c00
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
shr eax, 0x10
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1c39
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
shr eax, 8
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1c71
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1ca6
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
mov esi, dword [sym.imp.user32.dll_GetClipboardOwner]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
shr eax, 0x18
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1ce5
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
shr eax, 0x10
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1d1d
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
shr eax, 8
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1d55
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1d8b
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
mov esi, dword [sym.imp.user32.dll_GetClipboardViewer]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
shr eax, 0x18
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1dc9
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
shr eax, 0x10
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1e01
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
shr eax, 8
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1e3a
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1e6f
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
mov edi, dword [sym.imp.kernel32.dll_GetCurrentProcess]
lea esi, [edx + eax]
call edi
mov bl, byte [esi]
shr eax, 0x18
add bl, al
mov byte [esi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1ead
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea esi, [ecx + edx]
call edi
mov bl, byte [esi]
shr eax, 0x10
add bl, al
mov byte [esi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1ee6
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea esi, [eax + ecx]
call edi
mov bl, byte [esi]
shr eax, 8
add bl, al
mov byte [esi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1f1e
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea esi, [edx + eax]
call edi
mov bl, byte [esi]
add bl, al
mov byte [esi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1f53
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
mov esi, dword [sym.imp.kernel32.dll_GetCurrentProcessId]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
shr eax, 0x18
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1f92
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov bl, byte [edi]
shr eax, 0x10
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f1fca
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov bl, byte [edi]
shr eax, 8
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2002
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov bl, byte [edi]
add bl, al
mov byte [edi], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2038
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
mov ebx, dword [sym.imp.kernel32.dll_GetCurrentThread]
lea esi, [eax + ecx]
call ebx
mov cl, byte [esi]
shr eax, 0x18
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2076
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea esi, [edx + eax]
call ebx
mov cl, byte [esi]
shr eax, 0x10
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f20ae
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea esi, [ecx + edx]
call ebx
mov cl, byte [esi]
shr eax, 8
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f20e7
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea esi, [eax + ecx]
call ebx
mov cl, byte [esi]
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f211c
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
mov esi, dword [sym.imp.kernel32.dll_GetCurrentThreadId]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f215a
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2193
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f21cb
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2200
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
mov ebp, dword [sym.imp.kernel32.dll_GetTickCount]
lea esi, [ecx + edx]
call ebp
mov cl, byte [esi]
shr eax, 0x18
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f223f
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea esi, [eax + ecx]
call ebp
mov cl, byte [esi]
shr eax, 0x10
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2277
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea esi, [edx + eax]
call ebp
mov cl, byte [esi]
shr eax, 8
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f22af
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea esi, [ecx + edx]
call ebp
mov cl, byte [esi]
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f22e5
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
mov esi, dword [sym.imp.user32.dll_GetDesktopWindow]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2323
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f235b
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2394
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f23c9
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
mov esi, dword [sym.imp.user32.dll_GetFocus]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2407
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2440
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2478
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f24ad
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
mov edi, dword [sym.imp.user32.dll_GetInputState]
lea esi, [ecx + edx]
call edi
mov al, byte [esi]
xor ecx, ecx
mov cl, ah
add al, cl
mov byte [esi], al
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f24ed
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea esi, [edx + eax]
call edi
mov cl, byte [esi]
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2522
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
mov esi, dword [sym.imp.user32.dll_GetMessagePos]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2561
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2599
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f25d1
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2607
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
mov esi, dword [sym.imp.user32.dll_GetMessageTime]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2645
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f267d
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f26b6
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f26eb
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
mov esi, dword [sym.imp.user32.dll_GetOpenClipboardWindow]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2729
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2762
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f279a
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f27cf
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
mov esi, dword [sym.imp.kernel32.dll_GetProcessHeap]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f280e
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2846
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f287e
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f28b4
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
mov esi, dword [sym.imp.user32.dll_GetProcessWindowStation]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
shr eax, 0x18
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f28f2
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
lea edi, [edx + eax]
call esi
mov cl, byte [edi]
shr eax, 0x10
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f292a
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
lea edi, [ecx + edx]
call esi
mov cl, byte [edi]
shr eax, 8
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2963
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
lea edi, [eax + ecx]
call esi
mov cl, byte [edi]
add cl, al
mov byte [edi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2998
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
mov edi, dword [sym.imp.user32.dll_GetQueueStatus]
push 0xbf
lea esi, [edx + eax]
call edi
mov cl, byte [esi]
shr eax, 0x18
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f29db
push 0x6b6220
call fcn.004eca40
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [0x6b6224]
push 0xbf
lea esi, [ecx + edx]
call edi
mov cl, byte [esi]
shr eax, 0x10
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2a19
push 0x6b6220
call fcn.004eca40
add esp, 4
mov eax, dword [0x6b6220]
mov ecx, dword [0x6b6224]
push 0xbf
lea esi, [eax + ecx]
call edi
mov cl, byte [esi]
shr eax, 8
add cl, al
mov byte [esi], cl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2a56
push 0x6b6220
call fcn.004eca40
add esp, 4
mov edx, dword [0x6b6220]
mov eax, dword [0x6b6224]
push 0xbf
lea esi, [edx + eax]
call edi
mov dl, byte [esi]
add dl, al
mov byte [esi], dl
mov ecx, dword [0x6b6224]
inc ecx
mov dword [0x6b6224], ecx
lea ecx, [esp + 0x38]
push ecx
call dword [sym.imp.user32.dll_GetCaretPos]
lea edx, [esp + 0x38]
push 8
push edx
call fcn.004ecb20
add esp, 8
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.user32.dll_GetCursorPos]
lea ecx, [esp + 0x38]
push 8
push ecx
call fcn.004ecb20
add esp, 8
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], 0x20
push edx
call dword [sym.imp.kernel32.dll_GlobalMemoryStatus]
lea eax, [esp + 0x4c]
push 0x20
push eax
call fcn.004ecb20
add esp, 8
call ebx
lea ecx, [esp + 0x28]
lea edx, [esp + 0x20]
push ecx
push edx
lea ecx, [esp + 0x20]
lea edx, [esp + 0x38]
push ecx
push edx
push eax
call dword [sym.imp.kernel32.dll_GetThreadTimes]
lea eax, [esp + 0x30]
push 8
push eax
call fcn.004ecb20
lea ecx, [esp + 0x20]
push 8
push ecx
call fcn.004ecb20
lea edx, [esp + 0x30]
push 8
push edx
call fcn.004ecb20
lea eax, [esp + 0x40]
push 8
push eax
call fcn.004ecb20
add esp, 0x20
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
lea ecx, [esp + 0x28]
mov esi, eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x1c]
push edx
lea ecx, [esp + 0x38]
push eax
push ecx
push esi
call dword [sym.imp.kernel32.dll_GetProcessTimes]
lea edx, [esp + 0x30]
push 8
push edx
call fcn.004ecb20
push 8
lea eax, [esp + 0x24]
push eax
call fcn.004ecb20
lea ecx, [esp + 0x30]
push 8
push ecx
call fcn.004ecb20
lea edx, [esp + 0x40]
push 8
push edx
call fcn.004ecb20
add esp, 0x20
lea eax, [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
push ecx
push esi
call dword [sym.imp.kernel32.dll_GetProcessWorkingSetSize]
mov eax, dword [0x6b6224]
cmp eax, 0xff
jle 0x4f2ba9
push 0x6b6220
call fcn.004eca40
mov eax, dword [0x6b6224]
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [esp + 0x10]
shr edx, 0x18
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2be2
push 0x6b6220
call fcn.004eca40
mov eax, dword [0x6b6224]
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [esp + 0x10]
shr edx, 0x10
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2c1b
push 0x6b6220
call fcn.004eca40
mov eax, dword [0x6b6224]
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [esp + 0x10]
shr edx, 8
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2c54
push 0x6b6220
call fcn.004eca40
mov eax, dword [0x6b6224]
add esp, 4
mov ecx, dword [0x6b6220]
mov dl, byte [esp + 0x10]
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2c8a
push 0x6b6220
call fcn.004eca40
mov eax, dword [0x6b6224]
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [esp + 0x14]
shr edx, 0x18
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2cc3
push 0x6b6220
call fcn.004eca40
mov eax, dword [0x6b6224]
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [esp + 0x14]
shr edx, 0x10
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2cfc
push 0x6b6220
call fcn.004eca40
mov eax, dword [0x6b6224]
add esp, 4
mov ecx, dword [0x6b6220]
mov edx, dword [esp + 0x14]
shr edx, 8
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov eax, dword [0x6b6224]
inc eax
cmp eax, 0xff
mov dword [0x6b6224], eax
jle 0x4f2d35
push 0x6b6220
call fcn.004eca40
mov eax, dword [0x6b6224]
add esp, 4
mov ecx, dword [0x6b6220]
mov dl, byte [esp + 0x14]
mov bl, byte [ecx + eax]
add bl, dl
mov byte [ecx + eax], bl
mov ecx, dword [0x6b6224]
mov eax, dword [0x6a5c50]
inc ecx
test eax, eax
mov dword [0x6b6224], ecx
jne 0x4f2d89
lea eax, [esp + 0x6c]
mov dword [esp + 0x6c], 0x44
push eax
call dword [sym.imp.kernel32.dll_GetStartupInfoA]
lea ecx, [esp + 0x6c]
push 0x44
push ecx
call fcn.004ecb20
add esp, 8
mov dword [0x6a5c50], 1
lea edx, [esp + 0x44]
push edx
call dword [sym.imp.kernel32.dll_QueryPerformanceCounter]
test eax, eax
je 0x4f2da1
lea eax, [esp + 0x44]
push 8
push eax
jmp 0x4f2dae
call ebp
lea ecx, [esp + 0x40]
push 4
mov dword [esp + 0x44], eax
push ecx
call fcn.004ecb20
mov eax, dword [0x6a5c54]
add esp, 8
inc eax
pop edi
pop esi
pop ebp
cmp eax, 3
mov dword [0x6a5c54], eax
pop ebx
jl 0x4f2dd4
mov dword [0x6b622c], 0
push 0x6b6200
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
add esp, 0xa0
ret