Function at 0x41ac52
Capabilities:
Get disk information
Log keystrokes via polling
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x160
mov dword [ebp + 0x30], ecx
mov ecx, dword [ebp + 0x78]
mov eax, ecx
and eax, 0x10000
mov dword [ebp - 0x4c], eax
mov eax, ecx
and eax, 0x20000
mov dword [ebp - 0x40], eax
mov eax, ecx
and eax, 0x40000
push ebx
xor ebx, ebx
mov dword [ebp - 0xc], eax
movzx eax, cl
xor ecx, ecx
cmp eax, ebx
sete cl
push esi
push edi
mov dword [ebp + 4], ebx
mov dword [ebp - 8], ecx
xor ecx, ecx
cmp eax, 1
sete cl
xor edx, edx
cmp eax, 2
sete dl
cmp dword [ebp - 8], ebx
mov dword [ebp + 0x24], ecx
mov dword [ebp], edx
jne 0x41acb8
cmp ecx, ebx
mov byte [ebp + 0x37], bl
je 0x41acbc
mov byte [ebp + 0x37], 1
mov eax, dword [ebp + 0x74]
add eax, 0xfffffffe
mov dword [ebp - 0x44], eax
mov dword [ebp + 0x1c], eax
push 1
lea eax, [ebp + 0x74]
push eax
push 0x4b2610
call fcn.00441bc4
add esp, 0xc
cmp dword [ebp - 8], ebx
push 0x24
pop edx
push 0x23
pop esi
movzx eax, al
push 0x7c
mov dword [ebp - 0x3c], eax
mov dword [ebp + 0x2c], 0x100001
mov dword [ebp + 0x14], 0x100002
mov dword [ebp + 0x18], 0x100003
pop edi
jne 0x41ad19
cmp dword [ebp + 0x24], ebx
je 0x41ad11
mov dword [ebp + 0x2c], edi
mov dword [ebp + 0x18], edx
jmp 0x41ad1f
cmp dword [ebp], ebx
je 0x41ad22
mov dword [ebp + 4], edi
mov dword [ebp + 0x2c], edx
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x14], esi
mov eax, dword [ebp + 0x74]
mov cx, word [eax]
cmp cx, 0x2a
mov byte [ebp + 0x47], 0
jne 0x41ad3e
mov ecx, dword [ebp + 0x2c]
mov dword [ebp - 0xc], 0x2a
jmp 0x41ad50
cmp cx, dx
je 0x41ad4d
cmp cx, si
je 0x41ad4d
cmp cx, di
jne 0x41ad5b
movzx ecx, cx
inc eax
inc eax
mov dword [ebp + 4], ecx
mov byte [ebp + 0x47], cl
mov dword [ebp + 0x74], eax
cmp word [eax], 0x5b
mov edi, eax
sete byte [ebp + 0x57]
cmp byte [ebp + 0x57], 0
mov dword [ebp + 0x38], edi
je 0x41adcb
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [edi + eax*2 - 2]
jmp 0x41ad80
mov word [ecx], bx
dec ecx
dec ecx
mov ax, word [ecx]
call fcn.0040ea2b
test al, al
jne 0x41ad7b
cmp word [ecx], 0x5d
jne 0x41ad95
mov word [ecx], bx
push 2
pop edx
add edi, edx
xor ecx, ecx
jmp 0x41adc0
mov eax, ecx
call fcn.0040ea2b
test al, al
jne 0x41adbe
cmp cx, 0x5b
je 0x41adb5
cmp cx, 0x28
jne 0x41adcb
mov eax, dword [ebp + 0x1c]
add dword [ebp + 0x1c], edx
mov word [eax], cx
add edi, edx
mov cx, word [edi]
cmp cx, bx
mov dword [ebp + 0x38], edi
jne 0x41ad9e
push 1
lea eax, [ebp + 0x74]
push eax
push 0x4b2610
mov dword [ebp + 0x74], edi
call fcn.00441bc4
mov ecx, dword [ebp + 0x74]
movzx eax, al
add esp, 0xc
cmp byte [ebp + 0x57], 0
mov edi, ecx
mov dword [ebp - 0x38], eax
mov dword [ebp + 0x4c], ebx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x60], ebx
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x20], ebx
mov byte [ebp + 0x7b], 0
je 0x41afc1
mov esi, dword [ebp + 0x24]
xor eax, eax
mov ax, word [ecx]
xor dl, dl
cmp ax, 0x22
mov dword [ebp + 0x38], ecx
mov dword [ebp + 0x3c], ecx
mov byte [ebp + 0x6b], 0
je 0x41ae51
cmp ax, 0x27
je 0x41ae51
cmp ax, bx
je 0x41ae84
push eax
call fcn.0043f865
add esp, 4
test al, al
jne 0x41ae49
xor esi, esi
add ecx, 2
mov dword [ebp + 0x48], ecx
jmp 0x41ae84
xor eax, eax
mov ax, word [ecx + 2]
push eax
call fcn.0043f865
add esp, 4
test al, al
jne 0x41ae66
xor esi, esi
push 0xc1
lea eax, [ebp + 0x3c]
push ebx
push eax
call fcn.0041a38c
add esp, 0xc
mov dword [ebp + 0x48], eax
mov byte [ebp + 0x6b], 1
mov dl, 1
mov dword [ebp + 0x38], eax
lea ecx, [ebp + 0x48]
call fcn.0040ea44
mov edi, dword [ebp + 0x48]
xor ecx, ecx
jmp 0x41af21
mov eax, ecx
call fcn.0040ea2b
test al, al
je 0x41aebb
cmp dl, 1
jg 0x41af2d
lea ecx, [ebp + 0x48]
inc dl
call fcn.0040ea44
mov edi, dword [ebp + 0x48]
dec edi
dec edi
jmp 0x41af1c
cmp cx, 0x3e
je 0x41af7d
cmp cx, 0x3c
je 0x41af7d
cmp cx, 0x3d
je 0x41af7d
cmp cx, 0x21
je 0x41af7d
cmp esi, ebx
je 0x41af18
cmp dword [ebp + 0x24], ebx
je 0x41af18
cmp cx, 0x26
je 0x41aefe
cmp cx, 0x7c
je 0x41aefe
cmp cx, 0x40
jne 0x41af18
mov ax, word [edi + 2]
call fcn.0040ea2b
test al, al
je 0x41af18
mov ax, word [edi - 2]
call fcn.0040ea2b
test al, al
jne 0x41af61
test dl, dl
jg 0x41af2d
inc edi
inc edi
mov dword [ebp + 0x48], edi
mov cx, word [edi]
cmp cx, bx
jne 0x41ae96
cmp byte [ebp + 0x6b], 0
jne 0x41afaf
push 0xc1
lea eax, [ebp + 0x3c]
push ebx
push eax
call fcn.0041a38c
add esp, 0xc
cmp byte [ebp + 0x7b], 0
mov dword [ebp + 0x38], eax
je 0x41afaf
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x20]
call fcn.0043febe
jmp 0x41b01a
lea eax, [edi + 2]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x41af77
mov word [edi], bx
mov edi, eax
mov byte [ebp + 0x7b], 5
jmp 0x41af81
mov byte [ebp + 0x7b], 3
jmp 0x41af81
mov byte [ebp + 0x7b], 1
cmp byte [ebp + 0x7b], 1
lea ecx, [edi + 2]
mov dword [ebp + 0x3c], ecx
jne 0x41af33
mov ax, word [ecx]
cmp ax, 0x3e
je 0x41afa8
cmp ax, 0x3c
je 0x41afa8
cmp ax, 0x3d
je 0x41afa8
cmp ax, 0x21
jne 0x41af33
inc ecx
inc ecx
mov dword [ebp + 0x3c], ecx
jmp 0x41af33
mov eax, dword [ebp + 0x38]
cmp word [eax], bx
je 0x41b023
mov word [eax], bx
inc eax
inc eax
mov dword [ebp + 0x38], eax
jmp 0x41b023
cmp dword [ebp + 0x24], ebx
je 0x41b003
cmp word [ecx], 0x22
jne 0x41b003
lea edi, [ecx + 2]
mov ax, word [edi]
cmp ax, bx
je 0x41b023
inc edi
inc edi
cmp ax, 0x22
je 0x41b003
mov ax, word [edi]
cmp ax, bx
jne 0x41afd7
jmp 0x41b003
cmp ax, 0x3e
je 0x41b00d
cmp ax, 0x3c
je 0x41b00d
cmp ax, 0x3d
je 0x41b00d
cmp ax, 0x21
je 0x41b00d
inc edi
inc edi
mov ax, word [edi]
cmp ax, bx
jne 0x41afe9
jmp 0x41b023
push edi
lea ecx, [ebp + 0x20]
mov byte [ebp + 0x7b], 1
call fcn.0044845d
mov eax, dword [ebp + 0x20]
mov dword [ebp + 0x5c], eax
mov word [edi], bx
mov eax, dword [ebp + 4]
push 0x4c9c14
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp + 0x74]
cmp word [eax], 0x2a
mov edi, dword [ebp - 0xc]
jne 0x41b060
cmp byte [ebp + 0x57], 0
je 0x41b060
mov ecx, dword [ebp + 4]
cmp dword [ebp + 0x2c], ecx
jne 0x41b052
cmp edi, ebx
je 0x41b060
mov ecx, dword [ebp + 0x2c]
inc eax
push 0x2a
inc eax
mov dword [ebp - 4], ecx
pop edi
mov dword [ebp + 0x74], eax
mov esi, dword [ebp + 0x30]
cmp byte [esi + 0x92], 0
jne 0x41b109
cmp byte [esi + 9], 0
jne 0x41b109
cmp edi, ebx
jne 0x41b10d
push 1
push ebx
lea ecx, [ebp + 0x58]
push ecx
push eax
mov ecx, esi
call fcn.0044ed7d
mov eax, dword [ebp + 0x58]
push ebx
push ebx
lea ecx, [ebp + 0x58]
push ecx
push eax
mov ecx, esi
mov dword [ebp - 0x48], eax
mov dword [ebp + 0x58], ebx
call fcn.0044dca2
cmp dword [ebp + 0x5c], ebx
je 0x41b0fc
push 1
push ebx
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x5c]
mov ecx, esi
call fcn.0044ed7d
mov eax, dword [ebp + 0x28]
push ebx
push ebx
lea ecx, [ebp + 0x28]
push ecx
push eax
mov ecx, esi
mov dword [ebp - 0x5c], eax
mov dword [ebp + 0x28], ebx
call fcn.0044dca2
push dword [ebp + 0x58]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push dword [ebp + 0x28]
lea ecx, [ebp + 0x58]
mov esi, eax
call fcn.0043fe06
mov eax, dword [ebp + 0x58]
lea eax, [eax + esi*2]
lea ecx, [ebp - 0x5c]
mov dword [ebp + 0x5c], eax
call fcn.00439cfd
lea ecx, [ebp - 0x48]
call fcn.00439cfd
jmp 0x41b254
cmp edi, ebx
je 0x41b14a
cmp byte [esi + 9], 0
jne 0x41b127
cmp word [eax], 0x26
je 0x41b127
lea ecx, [ebp + 0x58]
push ecx
push eax
call fcn.00447b01
pop ecx
pop ecx
jmp 0x41b159
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
call fcn.00413e55
cmp eax, ebx
je 0x41b13a
mov eax, dword [eax]
jmp 0x41b13f
mov eax, 0x4ae9fc
push eax
lea ecx, [ebp + 0x58]
call fcn.0044845d
jmp 0x41b159
push 1
push ebx
lea ecx, [ebp + 0x58]
push ecx
push eax
mov ecx, esi
call fcn.0044ed7d
cmp dword [ebp + 0x5c], ebx
je 0x41b254
push dword [ebp + 0x58]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
xor esi, esi
cmp edi, esi
mov ebx, eax
je 0x41b22c
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x3c], 0x4ae9fc
mov dword [ebp + 0x48], esi
mov cx, word [eax]
cmp cx, 0x3e
je 0x41b19f
cmp cx, 0x3c
je 0x41b19f
cmp cx, 0x3d
je 0x41b19f
cmp cx, 0x21
jne 0x41b1a3
inc eax
inc eax
jmp 0x41b184
mov ecx, dword [ebp + 0x30]
mov edi, eax
sub edi, dword [ebp + 0x5c]
sar edi, 1
cmp byte [ecx + 9], 0
jne 0x41b1ca
cmp word [eax], 0x26
je 0x41b1ca
lea ecx, [ebp + 0x48]
push ecx
push eax
call fcn.00447b01
mov eax, dword [ebp + 0x48]
pop ecx
pop ecx
jmp 0x41b1d9
push 0xffffffffffffffff
push esi
push eax
call fcn.00413e55
cmp eax, esi
je 0x41b1dc
mov eax, dword [eax]
mov dword [ebp + 0x3c], eax
push dword [ebp + 0x3c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
lea eax, [esi + edi]
add eax, ebx
push eax
lea ecx, [ebp + 0x58]
call fcn.0043fddf
test edi, edi
je 0x41b20c
mov eax, dword [ebp + 0x58]
push edi
push dword [ebp + 0x5c]
lea eax, [eax + ebx*2]
push eax
call fcn.0040542c
add esp, 0xc
mov eax, dword [ebp + 0x58]
inc esi
push esi
push dword [ebp + 0x3c]
add edi, ebx
lea eax, [eax + edi*2]
push eax
call fcn.0040542c
add esp, 0xc
lea ecx, [ebp + 0x48]
call fcn.00439cfd
jmp 0x41b249
mov ecx, dword [ebp + 0x30]
push 1
push esi
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x5c]
call fcn.0044ed7d
push dword [ebp + 0x28]
lea ecx, [ebp + 0x58]
call fcn.0043fe06
mov eax, dword [ebp + 0x58]
lea eax, [eax + ebx*2]
mov dword [ebp + 0x5c], eax
xor ebx, ebx
mov eax, dword [ebp + 0x58]
push 0x4c9c14
mov dword [ebp + 0x74], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [ebp + 0x74]
call fcn.0040fed5
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
pop ecx
push dword [ebp + 0x74]
call edi
mov edx, dword [ebp + 0x74]
mov esi, dword [ebp + 0x5c]
cmp esi, ebx
lea eax, [edx + eax*2]
mov dword [ebp - 0x10], eax
mov dword [ebp + 0x3c], edx
mov dword [ebp + 0x48], esi
jne 0x41b29b
push edx
call edi
mov edx, dword [ebp + 0x74]
lea esi, [edx + eax*2]
mov dword [ebp + 0x48], esi
cmp esi, ebx
mov ecx, edx
mov dword [ebp + 0x10], ebx
je 0x41b2bb
mov ax, word [edx]
jmp 0x41b2b2
cmp ecx, esi
jae 0x41b2bb
inc ecx
inc ecx
mov ax, word [ecx]
call fcn.0040ea2b
test al, al
je 0x41b2a9
sub ecx, edx
sar ecx, 1
cmp byte [ebp + 0x7b], 0
mov dword [ebp + 0x5c], ecx
jne 0x41b2e1
cmp dword [ebp], ebx
jne 0x41b2e1
cmp word [edx], 0x3a
je 0x41b2e1
cmp dword [ebp + 0x24], ebx
je 0x41b74e
jmp 0x41bb23
mov dword [ebp + 0x40], esi
cmp word [edx], 0x3a
jne 0x41b2f4
cmp byte [ebp + 0x7b], 0
jne 0x41b2f4
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0x7b], 1
jne 0x41b315
lea eax, [esi + 2]
mov cx, word [eax]
cmp cx, 0x3d
je 0x41b312
cmp word [esi], 0x3c
jne 0x41b31b
cmp cx, 0x3e
jne 0x41b31b
mov dword [ebp + 0x40], eax
cmp byte [ebp + 0x7b], 0
je 0x41b31f
add dword [ebp + 0x40], 2
lea ecx, [ebp + 0x40]
call fcn.0040ea44
cmp byte [ebp + 0x37], 0
mov ebx, dword [ebp + 0x40]
je 0x41b36d
cmp word [ebx], 0x3f
jne 0x41b36d
inc ebx
inc ebx
lea ecx, [ebp + 0x7c]
mov byte [ebp + 0x56], 1
mov dword [ebp + 0x40], ebx
call fcn.0040ea44
mov edi, dword [ebp - 4]
cmp edi, dword [ebp + 0x2c]
je 0x41b376
movzx eax, word [edx]
cmp dword [ebp + 0x2c], eax
je 0x41b361
cmp dword [ebp + 0x14], eax
je 0x41b361
cmp dword [ebp + 0x18], eax
jne 0x41b373
inc edx
mov edi, eax
inc edx
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x74], edx
jmp 0x41b376
mov byte [ebp + 0x56], 0
jmp 0x41b347
mov edi, dword [ebp - 4]
cmp dword [ebp], 0
je 0x41b3a9
cmp byte [ebp + 0x47], 0
jne 0x41b3a9
cmp edi, dword [ebp + 0x18]
je 0x41b3a9
lea ecx, [ebp + 0x74]
call fcn.0040ea44
mov edx, dword [ebp + 0x74]
mov ax, word [edx]
cmp ax, 0x30
jb 0x41b3a1
cmp ax, 0x39
jbe 0x41b3a9
cmp ax, 0x2e
je 0x41b3a9
xor edi, edi
xor eax, eax
cmp dword [ebp - 8], eax
jne 0x41b3be
cmp dword [ebp + 0x10], eax
jne 0x41b3be
cmp word [edx], 0x27
jne 0x41b3be
mov edi, dword [ebp + 0x2c]
cmp dword [ebp + 0x2c], edi
jne 0x41b465
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], edx
call fcn.0040ea44
mov edi, dword [ebp + 0x78]
lea ecx, [esi - 2]
jmp 0x41b3e8
mov ax, word [ecx]
call fcn.0040ea2b
test al, al
je 0x41b3ec
dec ecx
dec ecx
cmp ecx, edi
jae 0x41b3da
sub ecx, edi
inc ecx
inc ecx
sar ecx, 1
mov esi, ecx
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], ebx
call fcn.0040ea44
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 0x78]
add ecx, 0xfffffffe
jmp 0x41b418
mov ax, word [ecx]
call fcn.0040ea2b
test al, al
je 0x41b41c
dec ecx
dec ecx
cmp ecx, edx
jae 0x41b40a
sub ecx, edx
inc ecx
inc ecx
sar ecx, 1
mov ebx, ecx
cmp esi, ebx
mov eax, esi
jle 0x41b42c
mov eax, ebx
test eax, eax
jle 0x41b44b
cmp dword [ebp - 0x4c], 0
push eax
push edx
push edi
je 0x41b441
call dword [sym.imp.SHLWAPI.dll_StrCmpNW]
jmp 0x41b447
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x41b44f
sub esi, ebx
mov eax, esi
cdq
xor ecx, ecx
mov edi, eax
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x50], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], ecx
jmp 0x41b89c
cmp dword [ebp + 0x18], edi
jne 0x41b514
fldz
lea eax, [ebp + 0xc]
fstp qword [ebp + 0xc]
push eax
lea eax, [ebp + 0x74]
fldz
push eax
fstp qword [ebp - 0x14]
call fcn.00444dcc
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.00444dcc
fld qword [ebp + 0xc]
add esp, 0x10
call fcn.0049ad34
fld qword [ebp - 0x14]
mov edi, eax
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x50], edx
call fcn.0049ad34
cmp byte [ebp + 0x7b], 1
mov ecx, eax
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], edx
jg 0x41b89c
fild qword [ebp + 0x4c]
fld qword [ebp + 0xc]
fucompp
fnstsw ax
test ah, 0x44
jp 0x41b4e1
fild qword [ebp + 0x60]
fld qword [ebp - 0x14]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x41b89c
fld qword [ebp + 0xc]
fcomp qword [ebp - 0x14]
fnstsw ax
test ah, 0x41
jne 0x41b4f6
xor eax, eax
inc eax
jmp 0x41b44f
fld qword [ebp - 0x14]
fld qword [ebp + 0xc]
fucompp
fnstsw ax
test ah, 0x44
jp 0x41b50c
xor eax, eax
jmp 0x41b44f
or eax, 0xffffffff
jmp 0x41b44f
cmp dword [ebp + 0x14], edi
jne 0x41b53b
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.00444a3d
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.00444a3d
add esp, 0x10
jmp 0x41b896
cmp dword [ebp + 0x5c], 3
jl 0x41bb1a
lea ecx, [ebp + 0x40]
mov byte [ebp + 0x6b], 0
mov byte [ebp + 0x36], 1
call fcn.0040ea44
mov eax, dword [ebp + 0x40]
cmp word [eax], 0x23
jne 0x41b567
inc eax
inc eax
mov dword [ebp + 0x40], eax
mov byte [ebp + 0x6b], 1
mov bl, byte [ebp + 0x24]
fldz
fstp qword [ebp - 0x1c]
mov byte [ebp + 0x7b], 0
cmp word [eax], 0x2a
jne 0x41b582
inc eax
inc eax
mov dword [ebp + 0x40], eax
mov byte [ebp + 0x36], 0
mov dword [ebp + 8], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00444dcc
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp + 8], eax
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00444a3d
mov eax, dword [ebp + 8]
add esp, 0x10
cmp word [eax], 0x2e
jne 0x41b5c2
fld qword [ebp - 0x1c]
call fcn.0049ad34
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x64], edx
push 3
pop edi
cmp dword [ebp + 0x5c], edi
jl 0x41b705
cmp dword [ebp + 0x5c], 5
jg 0x41b705
mov esi, dword [ebp + 0x3c]
push edi
push 0x4b2608
push esi
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x41b708
cmp dword [ebp + 0x5c], edi
je 0x41b62a
mov ax, word [esi + 6]
xor ecx, ecx
mov cx, word [esi + 8]
mov edx, 0xffdf
and eax, edx
and ecx, edx
cmp dword [ebp + 0x5c], 4
jne 0x41b630
cmp ax, 0x41
jne 0x41b618
xor bl, bl
jmp 0x41b62a
cmp ax, 0x42
je 0x41b65a
cmp ax, 0x55
jne 0x41b71e
mov bl, 1
mov byte [ebp + 0x7b], 1
jmp 0x41b65a
cmp dword [ebp + 0x5c], 5
jne 0x41b708
cmp ax, 0x42
jne 0x41b71e
cmp cx, 0x55
jne 0x41b64e
mov bl, 1
jmp 0x41b65a
cmp cx, 0x41
jne 0x41b71e
xor bl, bl
movsx eax, bl
push eax
call fcn.00413fa0
cmp byte [ebp + 0x7b], 0
mov edi, eax
mov eax, edx
pop ecx
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x50], eax
mov ecx, edi
je 0x41b686
add ecx, 0xfffff
adc eax, 0
shrd ecx, eax, 0x14
shr eax, 0x14
cmp byte [ebp + 0x56], 0
jne 0x41bce6
xor esi, esi
cmp dword [ebp + 0x10], esi
jle 0x41bd4e
cmp byte [ebp + 0x7b], 0
je 0x41b899
mov dword [ebp - 0x20], eax
and dword [ebp - 0x20], 0x80000000
and eax, 0x7fffffff
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], ecx
fild qword [ebp - 0x64]
mov dword [ebp - 0x24], esi
fild qword [ebp - 0x24]
fchs
faddp st(1)
fcom qword [ebp - 0x1c]
fnstsw ax
test ah, 0x41
jne 0x41b6d8
xor eax, eax
fstp st(0)
inc eax
jmp 0x41b6ef
fld qword [ebp - 0x1c]
fld st(1)
fucompp
fnstsw ax
fstp st(0)
test ah, 0x44
jp 0x41b6ec
xor eax, eax
jmp 0x41b6ef
or eax, 0xffffffff
cdq
mov edi, eax
xor ecx, ecx
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x50], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], esi
jmp 0x41b89c
mov esi, dword [ebp + 0x3c]
cmp dword [ebp + 0x5c], edi
jne 0x41b71e
push edi
push 0x4b2600
push esi
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
je 0x41b79a
mov edx, dword [ebp + 0x74]
cmp word [edx], 0x3a
jne 0x41b8bb
mov ax, word [edx + 2]
cmp ax, 0x65
jne 0x41b740
add edx, 4
mov dword [ebp + 0x74], edx
jmp 0x41bb23
cmp ax, 0x70
jne 0x41b78a
add edx, 4
mov dword [ebp + 0x74], edx
xor ebx, ebx
push 0x3f
lea eax, [ebp + 0x78]
push 0x2a
push eax
mov dword [ebp + 0x78], edx
call fcn.0043a11e
mov eax, dword [ebp + 0x78]
mov ax, word [eax]
neg ax
push ebx
push ebx
push ebx
sbb eax, eax
and eax, 0x101
push eax
push dword [ebp + 0x74]
call fcn.004171b9
add esp, 0x20
mov esi, eax
neg esi
sbb esi, esi
neg esi
jmp 0x41bc28
cmp ax, 0x6b
jne 0x41b8bb
add edx, 4
mov dword [ebp + 0x74], edx
mov edx, dword [ebp + 0x40]
xor eax, eax
mov ax, word [edx]
push eax
call fcn.0043f865
add esp, 4
test al, al
je 0x41b7d0
xor ecx, ecx
mov cx, word [edx + 2]
push ecx
call fcn.0043f865
add esp, 4
test al, al
jne 0x41b7cc
or cx, 0x20
cmp cx, 0x78
jne 0x41b7d0
mov byte [ebp + 0x6b], 2
xor esi, esi
cmp byte [ebp + 0x6b], 0
jne 0x41b7e8
push esi
push edx
call fcn.00416e7a
cdq
pop ecx
pop ecx
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x64], edx
cmp dword [ebp + 0x64], esi
jl 0x41bd4e
jg 0x41b7fc
cmp dword [ebp + 0x60], esi
jbe 0x41bd4e
cmp dword [ebp + 0x64], esi
jl 0x41b81e
jg 0x41b809
cmp dword [ebp + 0x60], 0x61
jb 0x41b81e
cmp dword [ebp + 0x64], esi
jg 0x41b81e
jl 0x41b816
cmp dword [ebp + 0x60], 0x7a
ja 0x41b81e
add dword [ebp + 0x60], 0xffffffe0
adc dword [ebp + 0x64], 0xffffffff
push dword [ebp + 0x60]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov cx, ax
and cx, 0x8000
neg cx
mov word [ebp - 0xb2], si
sbb ecx, ecx
and ecx, dword [ebp + 0x60]
cmp ecx, 0x41
mov eax, ecx
cdq
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x50], edx
mov word [ebp - 0xb4], cx
jl 0x41b858
cmp ecx, 0x5a
jle 0x41b878
cmp ecx, 0x30
jl 0x41b862
cmp ecx, 0x39
jle 0x41b878
push ecx
lea eax, [ebp - 0xb4]
push str.0x_lX
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp byte [ebp + 0x56], 0
mov ecx, dword [ebp + 0x30]
lea eax, [ebp - 0xb4]
push eax
jne 0x41bced
push str.PressKey
call fcn.0043f62b
mov edi, dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x60]
mov esi, dword [ebp + 0x48]
mov dx, word [esi]
test dx, dx
jne 0x41b9f7
xor esi, esi
or edi, dword [ebp + 0x50]
je 0x41bc28
jmp 0x41ba15
mov edx, dword [ebp + 0x3c]
mov cx, word [edx]
xor ebx, ebx
xor eax, eax
lea edi, [ebp - 0x50]
mov word [ebp - 0x58], cx
mov word [ebp - 0x56], 0x3a
mov word [ebp - 0x54], 0x5c
mov word [ebp - 0x52], bx
stosd dword es:[edi], eax
mov edi, dword [ebp + 0x48]
xor esi, esi
cmp cx, 0x5c
lea eax, [ebp - 0x58]
jne 0x41b900
cmp edi, ebx
mov eax, edx
je 0x41b900
xor ecx, ecx
mov cx, word [edi]
cmp cx, bx
je 0x41b900
mov esi, ecx
mov word [edi], bx
movsx ecx, byte [ebp + 0x24]
push ebx
push ecx
push eax
call fcn.0040ff31
add esp, 0xc
cmp si, bx
je 0x41b917
mov word [edi], si
cmp byte [ebp + 0x56], 0
jne 0x41bcf9
cmp dword [ebp + 0x10], ebx
jle 0x41bd0d
cmp byte [ebp + 0x36], 0
je 0x41b9ba
mov ecx, eax
shrd ecx, edx, 0x14
shr edx, 0x14
mov dword [ebp - 0x28], edx
mov esi, 0x7fffffff
and edx, esi
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], edx
mov edx, dword [ebp + 8]
mov ecx, 0x80000000
and dword [ebp - 0x28], ecx
fild qword [ebp - 0x6c]
cmp word [edx], 0x2e
mov dword [ebp - 0x2c], ebx
fild qword [ebp - 0x2c]
fchs
faddp st(1)
jne 0x41b995
and eax, 0xfffff
mov dword [ebp - 0x74], eax
xor eax, eax
mov dword [ebp - 0x30], eax
and eax, esi
and dword [ebp - 0x30], ecx
mov dword [ebp - 0x70], eax
fild qword [ebp - 0x74]
mov dword [ebp - 0x34], ebx
fild qword [ebp - 0x34]
fchs
faddp st(1)
fmul qword [0x4b25d8]
faddp st(1)
fcom qword [ebp - 0x1c]
fnstsw ax
test ah, 0x41
jne 0x41b9a6
fstp st(0)
xor eax, eax
inc eax
jmp 0x41b9e1
fld qword [ebp - 0x1c]
fld st(1)
fucompp
fnstsw ax
fstp st(0)
test ah, 0x44
jp 0x41b9de
xor eax, eax
jmp 0x41b9e1
cmp dword [ebp + 0x64], ebx
jg 0x41b9c6
jl 0x41b9a1
cmp dword [ebp + 0x60], ebx
jb 0x41b9a1
cmp edx, dword [ebp + 0x64]
jb 0x41b9d4
ja 0x41b9a1
cmp eax, dword [ebp + 0x60]
jbe 0x41b9d7
jmp 0x41b9a1
cmp eax, dword [ebp + 0x60]
jne 0x41b9de
cmp edx, dword [ebp + 0x64]
je 0x41b9b6
or eax, 0xffffffff
cdq
mov edi, eax
xor ecx, ecx
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x50], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], ebx
jmp 0x41b89c
push 0x3d
pop ebx
cmp dx, bx
jne 0x41ba1b
cmp edi, ecx
jne 0x41baf2
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jne 0x41baf2
xor esi, esi
inc esi
jmp 0x41bc28
cmp dx, 0x3e
jne 0x41ba3f
cmp word [esi + 2], bx
jne 0x41ba3f
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jl 0x41baf2
jg 0x41ba13
cmp edi, ecx
jb 0x41baf2
jmp 0x41ba13
cmp dx, 0x3c
jne 0x41ba78
mov ax, word [esi + 2]
cmp ax, bx
jne 0x41ba66
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jg 0x41baf2
jl 0x41ba13
cmp edi, ecx
ja 0x41baf2
jmp 0x41ba13
cmp ax, 0x3e
jne 0x41ba78
cmp edi, ecx
jne 0x41ba13
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jmp 0x41baec
cmp dx, 0x21
jne 0x41ba93
mov ax, word [esi + 2]
cmp ax, bx
je 0x41ba6c
cmp ax, 0x3e
je 0x41ba4e
cmp ax, 0x3c
je 0x41ba27
cmp dx, 0x3e
jne 0x41bab0
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jl 0x41baf2
jg 0x41ba13
cmp edi, ecx
jbe 0x41baf2
jmp 0x41ba13
cmp dx, 0x3c
jne 0x41bacd
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jg 0x41baf2
jl 0x41ba13
cmp edi, ecx
jae 0x41baf2
jmp 0x41ba13
cmp dx, 0x26
jne 0x41bada
or edi, dword [ebp + 0x50]
je 0x41baf2
jmp 0x41bae9
cmp dx, 0x7c
jne 0x41baf9
or edi, dword [ebp + 0x50]
jne 0x41ba13
or ecx, dword [ebp + 0x64]
jne 0x41ba13
xor esi, esi
jmp 0x41bc28
cmp dx, 0x40
jne 0x41bd4e
xor eax, eax
or edi, dword [ebp + 0x50]
je 0x41bb0b
inc eax
xor esi, esi
or ecx, dword [ebp + 0x64]
je 0x41bb13
inc esi
xor esi, eax
jmp 0x41bc28
cmp dword [ebp], eax
je 0x41bd4e
push edx
call fcn.00411f27
pop ecx
push eax
mov dword [ebp + 0x74], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp + 0x74]
xor ebx, ebx
mov bx, word [ecx]
mov edi, eax
mov dword [ebp + 0x78], 0xfffffff8
and ebx, 0xffdf
cmp bx, 0x41
jb 0x41bba9
cmp bx, 0x5a
ja 0x41bba9
cmp word [ecx + 2], 0x3a
jne 0x41bba9
cmp word [ecx + 4], 0
je 0x41bb7c
cmp bx, 0x42
ja 0x41bba9
push ebx
call fcn.00499e9a
neg eax
sbb eax, eax
inc eax
pop ecx
mov dword [ebp + 0x78], eax
je 0x41bba6
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
xor ecx, ecx
mov cl, bl
sub cl, 0x41
mov esi, eax
shr esi, cl
and esi, 1
je 0x41bc28
mov ecx, dword [ebp + 0x74]
cmp word [ecx + 4], 0
je 0x41bc28
jmp 0x41bba9
mov ecx, dword [ebp + 0x74]
test edi, edi
jle 0x41bbc5
xor eax, eax
mov ax, word [ecx + edi*2 - 2]
push eax
call fcn.0040eabc
add esp, 4
test al, al
je 0x41bbc5
mov bl, 1
jmp 0x41bbe5
xor bl, bl
jmp 0x41bbeb
xor eax, eax
lea edx, [ecx + edi*2]
mov ax, word [edx]
push eax
call fcn.0040eabc
add esp, 4
test al, al
je 0x41bbe8
and word [edx], 0
mov ecx, dword [ebp + 0x74]
dec edi
jns 0x41bbc9
xor edi, edi
inc edi
xor esi, esi
cmp edi, esi
je 0x41bc28
cmp dword [ebp - 0x40], esi
je 0x41bc1a
mov ax, word [ecx]
cmp ax, si
je 0x41bc1a
cmp word [ecx + 2], 0x3a
jne 0x41bc1a
cmp dword [ebp + 0x78], esi
jg 0x41bc28
jge 0x41bc1a
push eax
call fcn.00499e9a
test eax, eax
pop ecx
je 0x41bc28
mov ecx, dword [ebp + 0x74]
movsx eax, bl
push eax
push ecx
call fcn.0049a0d4
pop ecx
pop ecx
mov esi, eax
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x41bc36
test esi, esi
sete al
jmp 0x41bc3b
test esi, esi
setne al
mov edx, dword [ebp + 0x1c]
push 2
lea ecx, [eax + 0x30]
pop edi
mov word [edx], cx
add edx, edi
cmp byte [ebp + 0x57], 0
mov dword [ebp + 0x1c], edx
je 0x41bd3d
mov esi, dword [ebp + 0x38]
mov cx, word [esi]
test cx, cx
je 0x41bd12
cmp cx, 0x5b
je 0x41bca9
cmp cx, 0x5d
je 0x41bca9
cmp cx, 0x28
je 0x41bca9
cmp cx, 0x29
je 0x41bca9
cmp cx, 0x26
je 0x41bca9
cmp cx, 0x7c
jne 0x41bc96
mov ax, word [esi + 2]
call fcn.0040ea2b
test al, al
jne 0x41bca9
cmp cx, 0x40
je 0x41bca9
mov eax, ecx
call fcn.0040ea2b
test al, al
je 0x41bcbe
jmp 0x41bcb1
mov word [edx], cx
add edx, edi
mov dword [ebp + 0x1c], edx
add esi, edi
mov cx, word [esi]
test cx, cx
mov dword [ebp + 0x38], esi
jne 0x41bc65
cmp word [esi], 0
je 0x41bd12
lea ecx, [ebp + 0x20]
call fcn.00439cfd
lea ecx, [ebp + 0x28]
call fcn.00439cfd
lea ecx, [ebp + 0x58]
call fcn.00439cfd
mov edi, dword [ebp + 0x38]
xor ebx, ebx
jmp 0x41adcb
push dword [ebp + 0x30]
push eax
push ecx
jmp 0x41bcfe
push dword [ebp + 0x7c]
call fcn.0043f62b
xor esi, esi
jmp 0x41bd53
push dword [ebp + 0x30]
push edx
push eax
push dword [ebp + 0x7c]
call fcn.00411c50
add esp, 0x10
mov esi, eax
jmp 0x41bd53
or esi, 0xffffffff
jmp 0x41bd53
mov eax, dword [ebp - 0x44]
mov word [eax - 6], 0x23
mov word [eax - 4], 0x26
lea ecx, [ebp - 0xf4]
add eax, 0xfffffffe
push ecx
mov ecx, dword [ebp + 0x30]
mov word [eax], 0x3d
and word [edx], 0
push eax
call fcn.0047a9ac
cmp dword [ebp - 0x3c], 0
je 0x41bd09
xor ecx, ecx
test eax, eax
sete cl
mov eax, ecx
jmp 0x41bd09
mov esi, 0x80070057
lea ecx, [ebp + 0x20]
call fcn.00439cfd
lea ecx, [ebp + 0x28]
call fcn.00439cfd
lea ecx, [ebp + 0x58]
call fcn.00439cfd
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 0xc