Function at 0x43fdb0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x9c
call fcn.005231a0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 8], 9
mov dword [esp + 4], str.Courier_New
mov dword [esp], 1
call fcn.005225e9
sub esp, 0xc
mov dword [0x693dd0], eax
mov dword [esp], 1
call fcn.005225ff
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], 0xffffffff
call fcn.00507a26
sub esp, 8
xor ebx, ebx
mov word [0x693fc8], bx
mov dword [0x693fb4], 0
mov dword [esp + 4], 0
mov dword [esp], 0x401f30
call fcn.004e3da2
sub esp, 8
mov ebx, eax
lea esi, [esi]
mov dword [esp], ebx
call fcn.004e3e93
sub esp, 4
test eax, eax
jne 0x43fe70
call fcn.005232e0
mov dword [esp], 0
call fcn.0050e126
sub esp, 4
mov ebx, eax
call fcn.005232e0
mov dword [esp], 0x684c14
call fcn.00523370
sub esp, 4
call fcn.005232e0
call fcn.005232e0
mov eax, dword [0x694130]
imul eax, dword [0x693dcc]
mov edx, dword [0x69412c]
mov esi, dword [edx + eax*4 + 0xfc]
call fcn.00523210
mov dword [esp + 0xc], eax
mov dword [esp + 8], 7
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.005211c0
sub esp, 0x10
call fcn.00523210
call fcn.005233c0
call fcn.005232b0
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], 0xc80006
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0x1c2
mov dword [esp + 0xc], 0x21c
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x29
call fcn.0050ddd2
sub esp, 0x20
call fcn.00523250
mov dword [esp], 0
call fcn.0050e142
sub esp, 4
test eax, eax
jne 0x440360
mov dword [esp + 0x1c], 0x5000
mov dword [esp + 0x18], 5
mov dword [esp + 0x14], 0x694178
mov dword [esp + 0x10], 5
mov dword [esp + 0xc], 5
mov dword [esp + 8], 0xfffffffe
mov dword [esp + 4], 0xff
mov dword [esp], 0x15e
call fcn.005085cb
sub esp, 0x20
mov dword [esp + 0x10], 0x168
mov dword [esp + 0xc], 0x203
mov dword [esp + 8], 2
mov dword [esp + 4], 2
mov dword [esp], 0x6e
call fcn.00506094
sub esp, 0x14
mov dword [esp + 0x20], 1
mov dword [esp + 0x1c], 0x13
mov dword [esp + 0x18], 0x1000
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x168
mov dword [esp + 0xc], 0x14
mov dword [esp + 8], 0
mov dword [esp + 4], 0x208
mov dword [esp], 0xf0
call fcn.00509534
sub esp, 0x24
mov dword [esp + 0x18], 1
mov eax, dword [0x694130]
imul eax, dword [0x693dcc]
mov edx, dword [0x69412c]
mov eax, dword [edx + eax*4 + 0x138]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0xc8
mov dword [esp + 8], 0x168
mov dword [esp + 4], 0x64
mov dword [esp], 0xf4
call fcn.00506993
sub esp, 0x1c
mov dword [esp + 8], 0x8d
mov dword [esp + 4], 0x8d
mov dword [esp], 0x8d
call fcn.005133f4
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov dword [esp], 0xf4
call fcn.005067d0
sub esp, 0xc
mov dword [esp + 0x18], 0x20000
mov dword [esp + 0x14], str.MEM:
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x50
mov dword [esp + 8], 0x186
mov dword [esp + 4], 0xf
mov dword [esp], 0xf2
call fcn.00506993
sub esp, 0x1c
mov dword [esp + 0x18], 0x20000
mov dword [esp + 0x14], 0x680510
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x50
mov dword [esp + 8], 0x186
mov dword [esp + 4], 0x136
mov dword [esp], 0xf3
call fcn.00506993
sub esp, 0x1c
call fcn.005232e0
call fcn.005232e0
mov dword [esp], str.Enter
call fcn.00523370
sub esp, 4
mov eax, dword [0x694130]
imul eax, dword [0x693dcc]
mov edx, dword [0x69412c]
mov eax, dword [edx + eax*4 + 0x104]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
call fcn.005233c0
call fcn.005232b0
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x96
mov dword [esp + 8], 0x1a6
mov dword [esp + 4], 0x7d
mov dword [esp], 0xf5
call fcn.005073b3
sub esp, 0x18
call fcn.00523250
mov dword [esp + 0x14], 0x694178
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0xaf
mov dword [esp + 8], 0x186
mov dword [esp + 4], 0x6e
mov dword [esp], 0xf6
call fcn.0050772e
sub esp, 0x18
mov dword [esp + 4], 1
mov dword [esp], 0xf5
call fcn.005079fb
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0xf6
call fcn.005079fb
sub esp, 8
mov dword [esp + 8], 0xf7
mov dword [esp + 4], 0xd
mov dword [esp], 0x29
call fcn.0050e3ba
sub esp, 0xc
xor ebp, ebp
xor ebx, ebx
mov dword [esp + 0x5c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x44], 0
mov dword [esp + 4], 0x694178
lea eax, [esp + 0x8c]
mov dword [esp], eax
call fcn.00523110
sub esp, 8
cmp ebx, 0xffff
jle 0x44051d
lea esi, [esi]
nop
mov dword [esp], 0x6e
call fcn.005060b1
sub esp, 4
mov dword [esp], eax
call fcn.00513378
sub esp, 4
mov eax, dword [0x693dd0]
mov dword [esp], eax
call fcn.005133dd
sub esp, 4
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.005133f4
sub esp, 0xc
mov dword [esp], eax
call fcn.00513409
sub esp, 4
mov dword [esp + 8], 0xff
mov dword [esp + 4], 0xff
mov dword [esp], 0xff
call fcn.005133f4
sub esp, 0xc
mov dword [esp], eax
call fcn.00513422
sub esp, 4
mov esi, dword [0x693bd8]
mov eax, dword [0x693bd8]
add eax, 0x12
cmp esi, eax
jg 0x440351
xor ebx, ebx
lea esi, [esi]
mov eax, dword [0x694154]
mov eax, dword [eax + esi*4]
mov dword [esp + 0x10], eax
mov dword [esp + 0x38], ebx
fild dword [esp + 0x38]
fstp qword [esp + 8]
fldz
fstp qword [esp]
call fcn.0051343b
fstp st(0)
sub esp, 0x14
add ebx, 0x14
add esi, 1
mov eax, dword [0x693bd8]
add eax, 0x12
cmp eax, esi
jge 0x440318
call fcn.005135be
jmp 0x4413fc
mov dword [esp + 4], 1
mov dword [esp], 0
call fcn.0050e154
sub esp, 8
jmp 0x43ff5a
call fcn.005232e0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.005212e0
sub esp, 8
call fcn.00523210
mov dword [esp], 0x694178
jmp 0x440672
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 8], eax
mov dword [esp + 4], 0x2f
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00520e60
sub esp, 0xc
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 8], eax
mov eax, ebp
cdq
shld edx, ebp, 4
shl eax, 4
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.005209c0
sub esp, 0xc
call fcn.005232b0
mov esi, eax
call fcn.00523210
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x68494c
mov dword [esp + 4], 5
mov dword [esp], esi
call fcn.00520d70
sub esp, 0x10
mov dword [esp], 0x6851c0
call fcn.00523370
sub esp, 4
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
mov dword [esp], 0x684ccc
call fcn.00523370
sub esp, 4
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
call fcn.00523210
mov dword [esp + 4], eax
mov eax, dword [0x694154]
lea eax, [eax + ebp*4]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
add ebp, 1
mov dword [esp + 4], 0x694178
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00523110
sub esp, 8
mov dword [esp + 4], 0x694178
lea eax, [esp + 0x8c]
mov dword [esp], eax
call fcn.00523110
sub esp, 8
add ebx, 1
cmp ebx, 0x10000
je 0x440280
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
movzx eax, bx
mov dword [esp], eax
call fcn.004010a0
sub esp, 4
mov esi, eax
call fcn.00523210
mov dword [esp + 8], eax
mov dword [esp], esi
sar esi, 0x1f
mov dword [esp + 4], esi
call fcn.00520ce0
sub esp, 0xc
call fcn.005232b0
mov esi, eax
call fcn.00523210
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x68494c
mov dword [esp + 4], 2
mov dword [esp], esi
call fcn.00520d70
sub esp, 0x10
mov dword [esp], 0x684c14
call fcn.00523370
sub esp, 4
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x78]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
call fcn.005232e0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 8], eax
mov dword [esp + 4], 0x684c14
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.00521970
sub esp, 0xc
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x88]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.004169c0
sub esp, 4
mov esi, eax
lea eax, [eax - 0x20]
cmp eax, 0x5f
jbe 0x440380
call fcn.005232e0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
mov dword [esp], 0x6849a0
call fcn.00523370
sub esp, 4
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x8c]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00521190
sub esp, 4
cmp eax, 0x30
je 0x4403d0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00521190
sub esp, 4
cmp eax, 0x30
jle 0x44050e
call fcn.005232e0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x7c]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
mov esi, ebp
mov edi, ebp
sar edi, 0x1f
shld edi, ebp, 4
shl esi, 4
mov dword [esp + 0x38], ebx
lea esi, [esi]
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x2f
mov dword [esp + 4], 0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.005211c0
sub esp, 0x10
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
call fcn.005232e0
call fcn.005232e0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00521190
sub esp, 4
mov ebx, eax
call fcn.00523210
mov dword [esp + 0xc], eax
sub ebx, 0x30
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x31
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.005211c0
sub esp, 0x10
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x7c]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], edi
call fcn.005209c0
sub esp, 0xc
call fcn.005232b0
mov ebx, eax
call fcn.00523210
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x68494c
mov dword [esp + 4], 5
mov dword [esp], ebx
call fcn.00520d70
sub esp, 0x10
mov dword [esp], 0x6851c0
call fcn.00523370
sub esp, 4
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
mov dword [esp], 0x684ccc
call fcn.00523370
sub esp, 4
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
call fcn.00523210
mov dword [esp + 4], eax
mov eax, dword [0x694154]
lea eax, [eax + ebp*4]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
add ebp, 1
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00521190
sub esp, 4
add esi, 0x10
adc edi, 0
cmp eax, 0x2f
jg 0x440710
mov ebx, dword [esp + 0x38]
call fcn.005232e0
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x80]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
jmp 0x44050e
mov dword [esp], 0x29
call fcn.0050e4bf
sub esp, 4
cmp eax, 0x15d
jg 0x441437
call fcn.0050e525
sar eax, 0x10
cmp eax, 0xffffff88
je 0x440980
cmp eax, 0x78
jne 0x441437
mov eax, dword [0x693bd8]
test eax, eax
jle 0x4409f0
mov dword [esp], 0x15e
call fcn.00505022
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x115
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov eax, dword [0x693bd8]
sub eax, 1
mov dword [0x693bd8], eax
mov eax, dword [0x693bd8]
mov dword [esp + 4], eax
sar eax, 0x1f
mov dword [esp + 8], eax
mov dword [esp], 0xf0
call fcn.0050631f
sub esp, 0xc
mov eax, dword [0x693bd8]
mov dword [esp], eax
call fcn.00417f70
sub esp, 4
jmp 0x441437
mov eax, dword [0x693bd8]
add eax, 1
cmp eax, dword [0x693f44]
jl 0x4409b0
mov dword [0x693bd8], 0
mov eax, dword [0x693bd8]
mov dword [esp + 4], eax
sar eax, 0x1f
mov dword [esp + 8], eax
jmp 0x440958
mov dword [esp], 0x15e
call fcn.00505022
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x115
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov eax, dword [0x693bd8]
add eax, 1
jmp 0x440943
mov dword [0x693bd8], 0xfee
jmp 0x44099a
mov dword [esp + 4], 3
mov dword [esp], 0x6e
call fcn.005062e4
sub esp, 8
mov ebp, eax
mov dword [esp + 0x40], eax
mov dword [esp + 4], 2
mov dword [esp], 0x6e
call fcn.005062e4
sub esp, 8
mov dword [esp + 0x44], eax
lea eax, [eax - 0x31]
cmp eax, 0x148
ja 0x441453
cmp ebp, 0x16f
ja 0x441453
mov dword [esp + 4], 1
mov dword [esp], 0xf5
call fcn.005079fb
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0xf6
call fcn.005079fb
sub esp, 8
mov dword [esp + 4], 0x694178
mov dword [esp], 0xf6
call fcn.005063c3
sub esp, 8
mov dword [esp], 0xf4
call fcn.00507786
sub esp, 4
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], 0xffffffff
mov dword [esp], 0xf6
call fcn.0050631f
sub esp, 0xc
mov ecx, dword [esp + 0x44]
sub ecx, 0x16
mov eax, 0x30c30c31
imul ecx
sar edx, 2
sar ecx, 0x1f
sub edx, ecx
lea ebp, [edx - 1]
mov dword [esp + 0x44], ebp
mov edx, 0x66666667
mov eax, dword [esp + 0x40]
imul edx
sar edx, 3
mov eax, dword [esp + 0x40]
sar eax, 0x1f
sub edx, eax
mov ecx, edx
shl ecx, 4
mov dword [esp + 0x40], ecx
mov eax, dword [0x693bd8]
lea edx, [ebp + ecx]
shl eax, 4
add eax, edx
mov dword [esp + 0x58], eax
movzx eax, ax
mov dword [esp], eax
call fcn.004010a0
sub esp, 4
mov ebp, eax
mov dword [esp + 0x5c], eax
mov dword [esp + 4], 0x694178
lea eax, [esp + 0x8c]
mov dword [esp], eax
call fcn.00523110
sub esp, 8
mov eax, ebp
sub eax, 0x20
cmp eax, 0x5f
jbe 0x440f49
call fcn.005232e0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
mov dword [esp], 0x6849a0
call fcn.00523370
sub esp, 4
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x8c]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
call fcn.005232e0
call fcn.005232e0
mov dword [esp], 0x67c6a0
call fcn.00523370
sub esp, 4
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 8], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.005209c0
sub esp, 0xc
call fcn.005232b0
mov ebp, eax
call fcn.00523210
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x68494c
mov dword [esp + 4], 5
mov dword [esp], ebp
call fcn.00520d70
sub esp, 0x10
call fcn.00523210
call fcn.005233c0
call fcn.005232b0
mov dword [esp + 4], eax
mov dword [esp], 0xf2
call fcn.005063c3
sub esp, 8
call fcn.00523250
call fcn.005232e0
call fcn.005232e0
mov dword [esp], str.VAL:
call fcn.00523370
sub esp, 4
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov ecx, dword [esp + 0x5c]
mov edx, ecx
sar ecx, 0x1f
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], ecx
mov dword [esp + 8], eax
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.005209c0
sub esp, 0xc
call fcn.005232b0
mov ebp, eax
call fcn.00523210
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x68494c
mov dword [esp + 4], 3
mov dword [esp], ebp
call fcn.00520d70
sub esp, 0x10
call fcn.00523210
call fcn.005233c0
call fcn.005232b0
mov dword [esp + 4], eax
mov dword [esp], 0xf3
call fcn.005063c3
sub esp, 8
call fcn.00523250
mov dword [esp], 0x6e
call fcn.005060b1
sub esp, 4
mov dword [esp], eax
call fcn.00513378
sub esp, 4
mov eax, dword [0x693dd0]
mov dword [esp], eax
call fcn.005133dd
sub esp, 4
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.005133f4
sub esp, 0xc
mov dword [esp], eax
call fcn.00513409
sub esp, 4
mov dword [esp + 8], 0xff
mov dword [esp + 4], 0xff
mov dword [esp], 0xff
call fcn.005133f4
sub esp, 0xc
mov dword [esp], eax
call fcn.00513422
sub esp, 4
mov ebp, dword [0x693bd8]
mov edx, dword [0x693bd8]
add edx, 0x12
cmp ebp, edx
jg 0x440db7
xor eax, eax
mov dword [esp + 0x50], ebx
mov ebx, ebp
mov ebp, eax
lea esi, [esi]
mov edx, dword [0x694154]
mov edx, dword [edx + ebx*4]
mov dword [esp + 0x10], edx
mov dword [esp + 0x38], ebp
fild dword [esp + 0x38]
fstp qword [esp + 8]
fldz
fstp qword [esp]
call fcn.0051343b
fstp st(0)
sub esp, 0x14
add ebp, 0x14
add ebx, 1
mov edx, dword [0x693bd8]
add edx, 0x12
cmp edx, ebx
jge 0x440d78
mov ebx, dword [esp + 0x50]
mov dword [esp + 8], 0x53
mov dword [esp + 4], 0xf1
mov dword [esp], 0x53
call fcn.005133f4
sub esp, 0xc
mov ebp, eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.005133f4
sub esp, 0xc
fild dword [esp + 0x40]
fmul dword [0x61afb4]
fdiv dword [0x61af4c]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x10], eax
fst qword [esp + 8]
fstp qword [esp + 0x68]
fild dword [esp + 0x44]
fld st(0)
fstp qword [esp + 0x60]
fmul dword [0x61af38]
fadd dword [0x61afb8]
fstp qword [esp]
call fcn.005134b9
fstp st(0)
sub esp, 0x1c
call fcn.005232e0
mov dword [esp + 8], 0x53
mov dword [esp + 4], 0xf1
mov dword [esp], 0x53
call fcn.005133f4
sub esp, 0xc
mov dword [esp + 0x50], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.005133f4
sub esp, 0xc
mov ebp, eax
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00520ce0
sub esp, 0xc
call fcn.005232b0
mov dword [esp + 0x38], eax
call fcn.00523210
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x68494c
mov dword [esp + 4], 2
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
call fcn.00520d70
sub esp, 0x10
call fcn.005233c0
fld qword [esp + 0x60]
fmul dword [0x61afbc]
fadd dword [0x61af24]
fstp qword [esp + 0x38]
call fcn.005232b0
mov edx, dword [esp + 0x50]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x10], eax
fld qword [esp + 0x68]
fstp qword [esp + 8]
fld qword [esp + 0x38]
fstp qword [esp]
call fcn.005134b9
fstp st(0)
sub esp, 0x1c
call fcn.00523250
call fcn.005135be
jmp 0x441453
call fcn.005232e0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00523370
sub esp, 4
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.005212e0
sub esp, 8
call fcn.00523210
mov dword [esp], 0x694178
jmp 0x440b6e
mov dword [esp], 0x6e
call fcn.005060b1
sub esp, 4
mov dword [esp], eax
call fcn.00513378
sub esp, 4
mov eax, dword [0x693dd0]
mov dword [esp], eax
call fcn.005133dd
sub esp, 4
mov dword [esp], 0x29
call fcn.0050e593
sub esp, 4
mov edi, eax
mov dword [esp], 0x29
call fcn.0050e60a
sub esp, 4
add edi, 0x1b8
mov dword [esp + 4], edi
add eax, 0x113
mov dword [esp], eax
call sub.USER32.dll_SetCursorPos
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0xf5
call fcn.005079fb
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0xf6
call fcn.005079fb
sub esp, 8
mov dword [esp + 8], 0xb9
mov dword [esp + 4], 0xfc
mov dword [esp], 0xfd
call fcn.005133f4
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], 2
mov dword [esp], 0xf6
call fcn.005067d0
sub esp, 0xc
mov dword [esp + 8], 0x55
mov dword [esp + 4], 0x98
mov dword [esp], 0xfd
call fcn.005133f4
sub esp, 0xc
mov edi, eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.005133f4
sub esp, 0xc
fild dword [esp + 0x40]
fmul dword [0x61afb4]
fdiv dword [0x61af4c]
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x10], eax
fst qword [esp + 8]
fstp qword [esp + 0x50]
fild dword [esp + 0x44]
fld st(0)
fstp qword [esp + 0x48]
fmul dword [0x61af38]
fadd dword [0x61afb8]
fstp qword [esp]
call fcn.005134b9
fstp st(0)
sub esp, 0x1c
call fcn.005232e0
mov dword [esp + 8], 0x55
mov dword [esp + 4], 0x98
mov dword [esp], 0xfd
call fcn.005133f4
sub esp, 0xc
mov ebp, eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.005133f4
sub esp, 0xc
mov edi, eax
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 8], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00520ce0
sub esp, 0xc
call fcn.005232b0
mov dword [esp + 0x38], eax
call fcn.00523210
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x68494c
mov dword [esp + 4], 2
mov edx, dword [esp + 0x38]
mov dword [esp], edx
call fcn.00520d70
sub esp, 0x10
call fcn.005233c0
fld qword [esp + 0x48]
fmul dword [0x61afbc]
fadd dword [0x61af24]
fstp qword [esp + 0x38]
call fcn.005232b0
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
fld qword [esp + 0x50]
fstp qword [esp + 8]
fld qword [esp + 0x38]
fstp qword [esp]
call fcn.005134b9
fstp st(0)
sub esp, 0x1c
call fcn.00523250
call fcn.005135be
mov dword [esp], 0xf6
call fcn.00507786
sub esp, 4
cmp esi, 0x332d
jne 0x4412f0
call fcn.00511b7b
test eax, eax
je 0x4413e4
call fcn.00511b7b
cmp eax, 0x332d
jne 0x4413e4
jmp 0x44148c
mov dword [esp + 4], 1
mov dword [esp], 0xf5
call fcn.00509741
sub esp, 8
mov ebx, eax
mov dword [esp + 4], 1
mov dword [esp], 0xf5
call fcn.005097e4
sub esp, 8
add ebx, 5
mov dword [esp + 4], ebx
add eax, 0x32
mov dword [esp], eax
call sub.USER32.dll_SetCursorPos
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 2
call sub.USER32.dll_mouse_event
sub esp, 0x14
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 4
call sub.USER32.dll_mouse_event
sub esp, 0x14
call fcn.00511b7b
test eax, eax
je 0x4413e4
call fcn.00511b7b
jmp 0x4413e4
call fcn.00511b7b
test eax, eax
je 0x4413d8
lea esi, [esi]
call fcn.00511b7b
cmp eax, 0x332d
jne 0x4413d8
jmp 0x441321
call fcn.00511b7b
test eax, eax
jne 0x441300
cmp ebx, 0xf5
jne 0x4413d8
call fcn.005232e0
call fcn.005232e0
call fcn.00523210
mov dword [esp + 4], eax
mov dword [esp], 0xf6
call fcn.0050635b
sub esp, 8
call fcn.00523210
mov dword [esp + 4], eax
lea eax, [esp + 0x84]
mov dword [esp], eax
call fcn.00523300
sub esp, 8
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov dword [esp], 0x694178
call fcn.005233e0
cmp dword [esp + 0x58], 0x3fff
jle 0x441393
test eax, eax
je 0x44149d
mov dword [esp + 4], 1
mov dword [esp], 0xf5
call fcn.005079fb
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0xf6
call fcn.005079fb
sub esp, 8
mov dword [esp + 4], 0x694178
mov dword [esp], 0xf6
call fcn.005063c3
sub esp, 8
cmp esi, 0x333c
je 0x4415b0
mov dword [esp], 0x1b
call sub.USER32.dll_GetAsyncKeyState
sub esp, 4
test ah, 0x80
jne 0x4415b0
call fcn.0050e2aa
mov esi, eax
call fcn.00511b8a
mov ebx, eax
mov dword [esp], 0x29
call fcn.0050e618
sub esp, 4
test eax, eax
jle 0x441437
mov dword [esp], 0x29
call fcn.0050e618
sub esp, 4
cmp eax, 0x1f3
jle 0x4408c8
call fcn.00511b7b
cmp ebx, 0x6e
setne cl
mov edi, ecx
cmp eax, 0x10003
jne 0x441453
test cl, cl
je 0x440a00
call fcn.00511b7b
cmp eax, 2
jne 0x441467
mov eax, edi
test al, al
je 0x440f98
cmp esi, 0x332d
jne 0x441318
cmp ebx, 0xf7
je 0x441230
call fcn.00511b7b
test eax, eax
jne 0x441212
cmp ebx, 0xf5
jne 0x4413e4
jmp 0x44132d
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00521190
sub esp, 4
mov ebp, eax
test eax, eax
jle 0x441526
xor ebx, ebx
mov eax, dword [esp + 0x58]
lea esi, [eax - 1]
nop
call fcn.005232e0
call fcn.005232e0
call fcn.005232e0
add ebx, 1
call fcn.00523210
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.005211c0
sub esp, 0x10
call fcn.005232b0
mov dword [esp], eax
call fcn.00521300
sub esp, 4
mov edi, eax
call fcn.00523250
mov dword [esp + 4], edi
lea eax, [esi + ebx]
mov dword [esp], eax
call fcn.004015c0
sub esp, 8
cmp ebp, ebx
jne 0x4414c0
mov eax, dword [0x693bd8]
shl eax, 4
mov ebx, eax
mov ebp, dword [0x693bd8]
mov dword [esp + 4], 1
mov dword [esp], 0xf5
call fcn.005079fb
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0xf6
call fcn.005079fb
sub esp, 8
mov dword [esp + 4], 0x694178
mov dword [esp], 0xf6
call fcn.005063c3
sub esp, 8
mov dword [esp], 0xffffffff
call fcn.00507786
sub esp, 4
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], 0xffffffff
mov dword [esp], 0xf6
call fcn.0050631f
sub esp, 0xc
jmp 0x440252
mov dword [esp], 0x29
call fcn.0050e2b2
sub esp, 4
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0050e154
sub esp, 8
mov dword [esp], 1
call fcn.0052261b
sub esp, 4
test eax, eax
jne 0x4416a0
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0xffffffff
call fcn.00507a26
sub esp, 8
mov eax, dword [0x693d24]
test eax, eax
jne 0x4416b8
xor eax, eax
lea esi, [esi]
nop
mov edx, dword [0x694148]
mov dword [edx + eax], 0xff
add eax, 4
cmp eax, 0x24
jne 0x441618
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call fcn.00523470
sub esp, 4
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00523470
sub esp, 4
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00523470
sub esp, 4
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00523470
sub esp, 4
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00523470
sub esp, 4
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.00523470
sub esp, 4
xor eax, eax
add esp, 0x9c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], 1
call fcn.0052262d
sub esp, 4
jmp 0x4415ed
mov eax, dword [0x693b24]
mov dword [esp], eax
call fcn.004e3e93
sub esp, 4
test eax, eax
jne 0x4416e0
mov dword [0x693cd4], 1
jmp 0x441611
mov eax, dword [0x693b24]
mov dword [esp], eax
call fcn.004e3f9b
sub esp, 4
jmp 0x4416cc