Function at 0x5548da
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x134
push ebx
mov ebx, ecx
mov byte [esp + 0x33], 0
push esi
push edi
mov dword [esp + 0x50], ebx
cmp byte [ebx + 0x64], 0
mov dword [esp + 0x40], 0x4009
je 0x554b81
mov esi, dword [ebx + 0x34]
xor ecx, ecx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], ecx
test esi, esi
je 0x554b81
mov edi, dword [ebp + 0x24]
mov ebx, dword [ebp + 0x10]
jmp 0x55493a
mov edx, dword [esi + 4]
test edx, edx
je 0x55496c
push dword [ebp + 0x20]
mov eax, dword [edx]
lea ecx, [esp + 0x84]
push ecx
mov ecx, dword [ebp + 0x14]
push dword [ecx]
mov ecx, dword [ebp + 0xc]
push dword [ebx]
push dword [ecx]
push edx
call dword [eax + 0x74]
mov ecx, dword [esp + 0x80]
test eax, eax
jns 0x55496c
mov byte [edi], 0
test cx, cx
je 0x554b73
xor edx, edx
mov byte [esp + 0xc8], 0
mov word [esp + 0xb8], dx
lea eax, [esp + 0x80]
cmp cx, 3
jne 0x5549ae
mov eax, dword [esp + 0x88]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xc9], edx
jmp 0x554b42
mov edx, 0x4003
cmp cx, dx
jne 0x5549d8
mov eax, dword [esp + 0x88]
mov eax, dword [eax]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xc9], 0
jmp 0x554b42
mov dword [esp + 0xb4], 0
cmp cx, 0xa
jne 0x554a12
cmp dword [esp + 0x88], 0x80020004
jne 0x554aa8
mov byte [esp + 0xc8], 1
mov dword [esp + 0xc9], 0x80020005
jmp 0x554b42
cmp cx, 9
je 0x554a26
mov edx, 0x4009
cmp cx, dx
jne 0x554aa8
test ecx, 0x4000
je 0x554a39
mov eax, dword [esp + 0x88]
mov edx, dword [eax]
jmp 0x554a40
mov edx, dword [esp + 0x88]
test edx, edx
je 0x554b37
push 0
push 0
lea ecx, [esp + 0xc0]
xor eax, eax
push ecx
lea ecx, [esp + 0xfc]
mov dword [esp + 0xfc], eax
push ecx
push 3
push 0
push 0x5c0a38
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov eax, dword [edx]
push 0
push edx
call dword [eax + 0x18]
mov dword [esp + 0xc9], eax
test eax, eax
js 0x554b2e
mov ecx, dword [esp + 0x80]
lea eax, [esp + 0xb8]
movzx edx, word [eax]
cmp edx, 1
jne 0x554ac0
mov dword [esp + 0xc9], 0x800a005e
jmp 0x554b42
xor ecx, ecx
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], ecx
mov ecx, 0x400c
cmp dx, cx
jne 0x554af2
mov edi, edi
mov eax, dword [eax + 8]
cmp word [eax], cx
je 0x554aea
push 3
push 2
push 0x400
push eax
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
mov dword [esp + 0xc9], eax
test eax, eax
js 0x554b2e
mov eax, dword [esp + 0xd8]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xc9], 0
mov ecx, dword [esp + 0x80]
jmp 0x554b42
mov dword [esp + 0xc9], 0x800a005b
cmp word [esp + 0xb8], 0
mov edx, dword [ebp + 0x18]
mov eax, dword [esp + 0xb4]
mov byte [esp + 0x3b], 1
mov dword [edx], eax
je 0x554b73
lea eax, [esp + 0xb8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [esp + 0x80]
mov esi, dword [esi]
test esi, esi
jne 0x55493a
mov ebx, dword [esp + 0x50]
cmp byte [ebp + 0x28], 0
mov ecx, dword [sym.imp.USER32.dll_GetKeyState]
jne case.0x554bb5.258
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
cmp eax, 0x201
ja case.0x554bb5.258
je 0x55506f
sub eax, 0x100
cmp eax, 5
ja case.0x554bb5.258
jmp dword [eax*4 + 0x5548c2]
mov esi, dword [ebp + 0x10]
mov eax, dword [ebx + 0x2c]
push 0
push dword [esi]
mov edi, dword [eax + 0x2c]
push 0x87
push dword [ebp + 8]
mov dword [esp + 0x5c], edi
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0x50], eax
test al, 4
jne 0x555168
mov ecx, dword [esi]
lea edx, [ecx - 9]
cmp edx, 0x22
ja case.0x554bfc.10
movzx eax, byte [edx + 0x55489e]
jmp dword [eax*4 + 0x55488e]
mov eax, dword [sym.imp.USER32.dll_GetKeyState]
mov esi, dword [edi + 0x28]
push 0x10
call eax
shr eax, 0xf
mov edx, esi
and al, 1
mov ecx, edi
cmp byte [edi + 0x52], 0
mov byte [esp + 0x78], al
sete al
movzx eax, al
push eax
push dword [esp + 0x7c]
push 1
call fcn.0055458c
mov edi, eax
add esp, 0xc
test edi, edi
je case.0x554bfc.10
jmp 0x554c4a
mov ecx, dword [edi + 0xc]
mov dword [esp + 0x74], 0
mov byte [esp + 0x3c], 0
mov eax, dword [ecx + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov eax, dword [eax + 0x3c]
mov dword [esp + 0x74], eax
test eax, eax
jne 0x554caa
lea edx, [esp + 0x58]
mov dword [esp + 0x58], eax
mov eax, dword [ecx]
push edx
push 0x5c33cc
push ecx
call dword [eax]
test eax, eax
js 0x554caa
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x554caa
mov eax, dword [ecx]
lea edx, [esp + 0x74]
push edx
push ecx
mov byte [esp + 0x44], 1
call dword [eax + 0xc]
mov eax, dword [esp + 0x58]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [esp + 0x74], 0
je 0x554d91
mov ecx, dword [edi + 0xc]
mov eax, dword [ecx + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
cmp byte [eax + 0x5e], 0
je 0x554d51
lea edx, [esp + 0x7c]
mov dword [esp + 0x7c], 0
call fcn.00554306
cmp dword [esp + 0x7c], 0
jne 0x554d51
mov eax, dword [edi + 0xc]
mov esi, dword [eax + 0x28]
mov eax, dword [esi + 0x64]
test eax, eax
je 0x554d46
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x554d46
mov esi, dword [esi + 0x68]
test esi, esi
jne 0x554d08
mov esi, dword [eax + 0x18]
test esi, esi
je 0x554d46
mov esi, dword [esi + 0x30]
test esi, esi
je 0x554d46
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
test eax, eax
je 0x554d40
cmp byte [eax + 0x5e], 0
je 0x554d40
lea edx, [esp + 0x60]
mov dword [esp + 0x60], 0
call fcn.00554306
cmp dword [esp + 0x60], 0
jne 0x554d8b
mov esi, dword [esi]
test esi, esi
jne 0x554d0f
mov ecx, dword [edi + 0xc]
or edx, 0xffffffff
call fcn.00557f86
mov ecx, dword [edi + 0xc]
mov edx, str.CausesValidation
push 0
call fcn.005544c4
test eax, eax
je 0x554e8d
mov eax, dword [edi + 0xc]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax + 0x64]
mov ecx, dword [ecx + 0x80]
call fcn.005542ab
test al, al
je 0x554e8d
mov dl, 1
jmp 0x555ccf
cmp dword [esi + 0xc], 0
je 0x554d46
mov ecx, dword [esp + 0x4c]
mov edx, dword [edi + 0xc]
cmp byte [ecx + 0x52], 0
sete al
movzx eax, al
push eax
push dword [esp + 0x7c]
push 1
call fcn.0055458c
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x554c4a
mov edx, dword [ebp + 0xc]
mov ecx, 0x2c
mov eax, ebx
mov eax, dword [ecx + eax]
mov ecx, dword [eax + 0x2c]
test ecx, ecx
je 0x554fcc
cmp byte [ecx + 0x52], 0
mov edi, dword [ebp + 0x10]
je 0x555189
mov eax, dword [edx]
mov edx, dword [ebp + 8]
mov dword [esp + 0x128], eax
mov eax, dword [edi]
mov dword [esp + 0x12c], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 0
mov eax, dword [eax]
mov dword [esp + 0x124], edx
mov dword [esp + 0x130], eax
mov dword [esp + 0x3c], 0
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x34]
test esi, esi
je 0x55516d
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x554e68
mov eax, dword [ecx]
lea edx, [esp + 0x3c]
push edx
lea edx, [esp + 0x128]
push edx
push ecx
call dword [eax + 0xb0]
mov esi, dword [esi]
test esi, esi
jne 0x554e4b
cmp word [esp + 0x3c], si
je 0x555189
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
mov eax, dword [ebp + 0x10]
mov edx, edi
mov esi, dword [esp + 0x4c]
mov ecx, esi
push dword [eax]
push dword [esp + 0x40]
push dword [esp + 0x7c]
call fcn.00554187
add esp, 0xc
cmp dword [0x58ac24], 0
je 0x554e79
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 3
push 0x128
push dword [esi + 0x3c]
call eax
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
cmp byte [ebx + 0x63], 0
jne 0x555168
test byte [esp + 0x50], 1
jne 0x555168
cmp ecx, 0x25
je 0x554efe
mov byte [esp + 0x3c], 0
cmp ecx, 0x26
jne 0x554f03
mov byte [esp + 0x3c], 1
mov edx, dword [edi + 0x28]
mov ecx, edi
push 1
push dword [esp + 0x40]
push 0
call fcn.0055458c
mov edi, eax
add esp, 0xc
test edi, edi
je 0x555168
mov ecx, dword [edi + 0xc]
mov byte [esp + 0x3c], 0
mov eax, dword [ecx + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x3c]
mov dword [esp + 0x74], esi
test esi, esi
jne 0x554f82
lea edx, [esp + 0x58]
mov dword [esp + 0x58], esi
mov eax, dword [ecx]
push edx
push 0x5c33cc
push ecx
call dword [eax]
test eax, eax
js 0x554f7a
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x554f7a
mov eax, dword [ecx]
lea edx, [esp + 0x74]
push edx
push ecx
mov byte [esp + 0x44], 1
call dword [eax + 0xc]
mov eax, dword [esp + 0x58]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov esi, dword [esp + 0x74]
test esi, esi
je 0x554fcc
mov ecx, dword [edi + 0xc]
mov edx, str.CausesValidation
push 0
call fcn.005544c4
test eax, eax
je 0x554fb4
mov eax, dword [edi + 0xc]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax + 0x64]
mov ecx, dword [ecx + 0x80]
call fcn.005542ab
test al, al
je 0x554fb4
mov dl, 1
jmp 0x555ccf
mov eax, dword [ebp + 0x10]
mov edx, edi
mov ecx, dword [esp + 0x4c]
push dword [eax]
push dword [esp + 0x40]
push esi
call fcn.00554187
add esp, 0xc
mov edx, dword [ebp + 8]
mov esi, dword [sym.imp.USER32.dll_SetFocus]
mov edi, dword [ebp + 0x10]
mov ecx, dword [sym.imp.USER32.dll_GetKeyState]
cmp byte [esp + 0x3b], 0
jne case.0x55594b.523
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
cmp eax, 0x100
ja 0x55579b
je case.0x5557ba.260
dec eax
cmp eax, 0x83
ja case.0x55594b.523
movzx eax, byte [eax + 0x55480a]
jmp dword [eax*4 + 0x5547de]
call dword [sym.imp.USER32.dll_GetFocus]
push 0
push 0
mov esi, eax
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
push 0x87
push esi
call eax
push esi
push dword [edi + 0x3c]
mov dword [esp + 0x58], eax
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
je 0x554fcc
test byte [esp + 0x50], 0x30
je 0x554fcc
push 0
push 0
push 0xf5
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
mov ecx, dword [ebx + 0x2c]
mov edx, str.CausesValidation
push 0
mov eax, dword [ecx + 0x2c]
mov ecx, dword [ecx + 0x24]
mov dword [esp + 0x54], eax
call fcn.005544c4
test eax, eax
je 0x55509e
mov ecx, ebx
call fcn.005542ab
test al, al
je 0x55509e
mov dl, 1
jmp 0x555ccf
mov edi, dword [ebp + 8]
xor esi, esi
push 0xffffffffffffffe0
push edi
call dword [sym.imp.USER32.dll_GetClassWord]
movzx ecx, ax
mov ax, word [0x58ac20]
cmp cx, ax
jne 0x5550bf
test ax, ax
jne 0x5550cf
mov ax, word [0x58ac1c]
cmp cx, ax
jne 0x5550da
test ax, ax
je 0x5550da
push 0xffffffffffffffeb
push edi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov esi, eax
mov edi, dword [esp + 0x50]
mov edx, dword [ebp + 8]
mov edi, dword [edi + 0x3c]
cmp edi, edx
je 0x55512e
push 0
push 0
push 0x87
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x5569be
push edi
mov dword [esp + 0x5c], eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
mov eax, dword [esp + 0x50]
test eax, 0x2000
je 0x55512b
test al, 0x30
je 0x55512b
push 1
push 1
push 0xf4
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [ebp + 8]
test esi, esi
je 0x554fcf
cmp dword [esi + 0x3c], edx
jne 0x554fcf
mov ecx, dword [esi + 0x2c]
mov edx, str.CanGetFocus
push 0
mov ecx, dword [ecx + 0x24]
call fcn.005544c4
mov esi, dword [sym.imp.USER32.dll_SetFocus]
test eax, eax
je 0x555160
push dword [ebp + 8]
call esi
mov edx, dword [ebp + 8]
jmp 0x554fd5
mov edx, dword [ebp + 8]
mov edi, esi
mov esi, dword [sym.imp.USER32.dll_SetFocus]
jmp 0x554fd8
mov edx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov esi, dword [sym.imp.USER32.dll_SetFocus]
jmp 0x554fde
mov edx, dword [ebp + 8]
mov esi, dword [sym.imp.USER32.dll_SetFocus]
jmp 0x554fd8
call fcn.0055ff80
mov ecx, dword [ebx + 0x2c]
mov esi, eax
mov eax, dword [ecx + 0x2c]
test eax, eax
je case.0x55594b.523
mov eax, dword [eax + 0x18]
cmp eax, dword [ecx + 0x24]
je case.0x55594b.523
cmp byte [esi + 0x119], 0
jne case.0x55594b.523
cmp byte [esi + 0x11a], 0
jne case.0x55594b.523
mov edi, dword [ebp + 8]
lea eax, [esp + 0x114]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [esp + 0x118]
push eax
push edi
call dword [sym.imp.USER32.dll_GetParent]
push eax
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov al, byte [esi + 0x11a]
mov byte [esi + 0x11a], 1
cmp dword [ebx + 0x70], 0
mov byte [esp + 0x57], al
jne 0x5552b4
mov ecx, dword [ebx + 0x2c]
fld qword [0x5bd078]
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 0x40]
mov dword [esp + 0x4c], eax
cmp eax, 0x60
jne 0x55523c
fstp st(0)
fild dword [esp + 0x114]
jmp 0x555257
fild dword [esp + 0x114]
fstp qword [esp + 0x40]
fmul qword [esp + 0x40]
fild dword [esp + 0x4c]
fstp qword [esp + 0x40]
fdiv qword [esp + 0x40]
mov ecx, dword [ecx + 0x24]
sub esp, 8
mov edx, str.PixelsLeft
fstp qword [esp]
call fcn.005540f7
mov ecx, dword [ebx + 0x2c]
fild dword [esp + 0x118]
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 0x40]
mov dword [esp + 0x4c], eax
cmp eax, 0x60
je 0x55529d
fstp qword [esp + 0x68]
fld qword [esp + 0x68]
fmul qword [0x5bd078]
fild dword [esp + 0x4c]
fstp qword [esp + 0x68]
fdiv qword [esp + 0x68]
mov ecx, dword [ecx + 0x24]
sub esp, 8
mov edx, str.PixelsTop
fstp qword [esp]
call fcn.005540f7
mov al, byte [esp + 0x57]
mov byte [esi + 0x11a], al
jmp case.0x55594b.523
call fcn.0055ff80
mov ecx, dword [ebx + 0x2c]
mov esi, eax
mov eax, dword [ecx + 0x2c]
test eax, eax
je 0x555419
mov eax, dword [eax + 0x18]
cmp eax, dword [ecx + 0x24]
je 0x555419
cmp byte [esi + 0x119], 0
jne 0x555419
cmp byte [esi + 0x11a], 0
jne 0x555419
mov edi, dword [ebp + 8]
lea eax, [esp + 0xe0]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [esp + 0xe4]
push eax
push edi
call dword [sym.imp.USER32.dll_GetParent]
push eax
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov al, byte [esi + 0x11a]
mov byte [esi + 0x11a], 1
cmp dword [ebx + 0x70], 0
mov byte [esp + 0x57], al
jne 0x555413
mov ecx, dword [ebx + 0x2c]
fld qword [0x5bd078]
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 0x40]
cmp eax, 0x60
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xe8]
jne 0x555373
sub eax, dword [esp + 0xe0]
fstp st(0)
mov dword [esp + 0x50], eax
fild dword [esp + 0x50]
jmp 0x555396
sub eax, dword [esp + 0xe0]
mov dword [esp + 0x40], eax
fild dword [esp + 0x40]
fstp qword [esp + 0x40]
fmul qword [esp + 0x40]
fild dword [esp + 0x4c]
fstp qword [esp + 0x40]
fdiv qword [esp + 0x40]
mov ecx, dword [ecx + 0x24]
sub esp, 8
mov edx, str.PixelsWidth
fstp qword [esp]
call fcn.005540f7
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 0x40]
cmp eax, 0x60
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xec]
jne 0x5553d3
sub eax, dword [esp + 0xe4]
mov dword [esp + 0x40], eax
fild dword [esp + 0x40]
jmp 0x5553fc
sub eax, dword [esp + 0xe4]
mov dword [esp + 0x40], eax
fild dword [esp + 0x40]
fstp qword [esp + 0x68]
fld qword [esp + 0x68]
fmul qword [0x5bd078]
fild dword [esp + 0x4c]
fstp qword [esp + 0x68]
fdiv qword [esp + 0x68]
mov ecx, dword [ecx + 0x24]
sub esp, 8
mov edx, str.PixelsHeight
fstp qword [esp]
call fcn.005540f7
mov al, byte [esp + 0x57]
mov byte [esi + 0x11a], al
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 0x2c]
test eax, eax
je case.0x55594b.523
mov eax, dword [eax + 0x18]
cmp eax, dword [ecx + 0x24]
je case.0x55594b.523
mov esi, dword [ebx + 0x34]
test esi, esi
je 0x55544d
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x555447
mov eax, dword [ecx]
push ecx
call dword [eax + 0x64]
mov esi, dword [esi]
test esi, esi
jne 0x55543a
mov esi, dword [ebx + 0x34]
test esi, esi
je case.0x55594b.523
mov edi, edi
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x555467
mov eax, dword [ecx]
push ecx
call dword [eax + 0x68]
mov esi, dword [esi]
test esi, esi
jne 0x55545a
jmp case.0x55594b.523
mov eax, dword [ebp + 0x14]
mov edi, dword [ebx + 0x2c]
mov edx, dword [eax]
mov dword [esp + 0x40], edx
cmp dword [edx + 4], 2
jne 0x5554ca
mov eax, dword [edi + 0x2c]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x34]
test esi, esi
je 0x555561
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x5554b8
push dword [edx + 8]
mov eax, dword [ecx]
push ecx
call dword [eax + 0xac]
mov edx, dword [esp + 0x40]
mov esi, dword [esi]
test esi, esi
jne 0x5554a1
mov ebx, dword [ebp + 0x18]
mov dl, 1
mov dword [ebx], esi
jmp 0x555cd2
mov edi, dword [edi + 0x24]
cmp dword [edi + 0x30], 0
je 0x55552c
mov eax, dword [edx + 0x14]
mov ecx, dword [edx + 0x18]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov dword [esp + 0x64], ecx
push eax
mov eax, dword [edi + 0x28]
mov dword [esp + 0x40], 0
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
push dword [eax + 0x3c]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebx + 0x2c]
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x68]
push 0
push eax
lea edx, [esp + 0x6c]
call fcn.00554033
mov eax, dword [esp + 0x48]
add esp, 0xc
test eax, eax
je 0x55552c
mov eax, dword [eax + 0x2c]
mov edi, dword [eax + 0x24]
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x34]
test esi, esi
je 0x555561
mov edi, edi
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x55555b
mov eax, dword [ecx]
push edi
push ecx
call dword [eax + 0xa8]
mov esi, dword [esi]
test esi, esi
jne 0x55554a
mov ebx, dword [ebp + 0x18]
mov dl, 1
mov dword [ebx], 0
jmp 0x555cd2
mov eax, dword [ebx + 0x2c]
mov ebx, dword [ebp + 0x18]
mov eax, dword [eax + 0x2c]
cmp edx, dword [eax + 0x3c]
je 0x555a8e
cmp dword [eax + 0xa0], 0
je 0x555a8e
mov dword [ebx], 0xffffffff
mov dl, 1
jmp 0x555cd2
mov ecx, dword [ebx + 0x2c]
mov dword [ebx + 0x3c], edx
mov edx, str.VisualStyles
push 0xffffffffffffffff
mov ecx, dword [ecx + 0x24]
call fcn.005544c4
test eax, eax
jne case.0x55594b.523
push str.UxTheme.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je case.0x55594b.523
push str.SetWindowTheme
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x5c4be4
push 0x5c4be4
push dword [ebp + 8]
call eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp case.0x55594b.523
mov esi, dword [ebx + 0x34]
mov edi, dword [edi]
mov dword [esp + 0x3c], 0
test esi, esi
je case.0x55594b.523
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x55561e
mov eax, dword [ecx]
lea edx, [esp + 0x3c]
push edx
push edi
push ecx
call dword [eax + 0x1c]
mov esi, dword [esi]
test esi, esi
jne 0x55560b
mov ebx, dword [ebp + 0x18]
cmp word [esp + 0x3c], si
je 0x555a8e
mov dword [ebx], 1
mov dl, 1
jmp 0x555cd2
mov eax, dword [ebx + 0x2c]
mov esi, dword [ebx + 0x34]
movzx ecx, word [edi]
mov edx, dword [eax + 0x2c]
cmp byte [edx + 0x4b], 0
jne 0x555692
test esi, esi
je case.0x55594b.523
test cx, cx
jne 0x55567a
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x55566b
mov eax, dword [ecx]
push ecx
call dword [eax + 0x5c]
mov esi, dword [esi]
test esi, esi
jne 0x55565e
jmp case.0x55594b.523
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x555687
mov eax, dword [ecx]
push ecx
call dword [eax + 0x58]
mov esi, dword [esi]
test esi, esi
jne 0x55567a
jmp case.0x55594b.523
test cx, cx
setne al
mov byte [edx + 0x4f], al
jmp case.0x55594b.523
mov eax, dword [ebp + 0x10]
mov edi, dword [ebx + 0x74]
mov eax, dword [eax]
test eax, eax
je 0x5556af
mov dword [ebx + 0x74], eax
mov esi, dword [ebx + 0x34]
xor eax, eax
mov dword [esp + 0x3c], eax
test esi, esi
je 0x5556d8
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x5556ce
mov eax, dword [ecx]
lea edx, [esp + 0x3c]
push edx
push ecx
call dword [eax + 0x60]
mov esi, dword [esi]
test esi, esi
jne 0x5556bc
mov eax, dword [esp + 0x3c]
mov ecx, dword [ebp + 0x10]
cmp dword [ecx], 0
je 0x5556e3
mov dword [ebx + 0x74], edi
mov ebx, dword [ebp + 0x18]
test ax, ax
je 0x555a8e
mov dword [ebx], 0
mov dl, 1
jmp 0x555cd2
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
test eax, eax
je case.0x55594b.523
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
cmp dword [eax + 0x3c], edx
je 0x55572b
push 0
push 0
push 0x406
push edx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call esi
mov edx, dword [ebp + 8]
push 0
push 0
push 0x407
push edx
call esi
jmp case.0x55594b.523
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
cmp dword [eax + 0x58], 0
je 0x555753
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
test eax, eax
je case.0x55594b.523
push 0
push dword [edi]
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
push 0x409
push edx
call edi
mov eax, dword [ebx + 0x2c]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 0x2c]
cmp dword [eax + 0x3c], ecx
je case.0x55594b.523
mov eax, dword [ebp + 0x10]
push ecx
mov esi, dword [eax]
call dword [sym.imp.USER32.dll_GetParent]
push 0
push esi
push 0x408
push eax
call edi
jmp case.0x55594b.523
cmp eax, 0x200
ja 0x555925
je 0x5558fb
sub eax, 0x101
cmp eax, 4
ja case.0x55594b.523
jmp dword [eax*4 + 0x5547ca]
mov eax, dword [edi]
and eax, 0xff
mov dword [esp + 0x58], eax
je 0x555832
push 0x11
call ecx
movsx esi, ax
mov eax, dword [sym.imp.USER32.dll_GetKeyState]
and esi, 0xbfffffff
push 0x10
call eax
movsx edi, ax
shr edi, 1
or edi, esi
push 0x12
shr edi, 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov esi, dword [ebx + 0x34]
movsx edx, ax
and edx, 0x9fffffff
or edx, edi
shr edx, 0x1d
mov dword [esp + 0x40], edx
test esi, esi
je 0x55582b
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x555825
mov eax, dword [ecx]
push edx
lea edx, [esp + 0x5c]
push edx
push ecx
call dword [eax + 0x24]
mov edx, dword [esp + 0x40]
mov esi, dword [esi]
test esi, esi
jne 0x55580e
mov edi, dword [ebp + 0x10]
mov eax, dword [esp + 0x58]
mov ebx, dword [ebp + 0x18]
mov dword [edi], eax
test eax, eax
jne 0x555a8e
mov dword [ebx], 0
mov dl, 1
jmp 0x555cd2
mov eax, dword [edi]
and eax, 0xff
mov dword [esp + 0x58], eax
je 0x555832
push 0x11
call ecx
movsx esi, ax
push 0x10
and esi, 0xbfffffff
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edi, ax
shr edi, 1
or edi, esi
push 0x12
shr edi, 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov esi, dword [ebx + 0x34]
movsx edx, ax
and edx, 0x9fffffff
or edx, edi
shr edx, 0x1d
mov dword [esp + 0x40], edx
test esi, esi
je 0x55582b
mov edi, edi
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x5558b1
mov eax, dword [ecx]
push edx
lea edx, [esp + 0x5c]
push edx
push ecx
call dword [eax + 0x28]
mov edx, dword [esp + 0x40]
mov esi, dword [esi]
test esi, esi
jne 0x55589a
jmp 0x55582b
mov eax, dword [edi]
and eax, 0xffff
mov dword [esp + 0x3c], eax
je 0x555832
mov esi, dword [ebx + 0x34]
test esi, esi
je 0x555832
mov edi, edi
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x5558ec
mov eax, dword [ecx]
lea edx, [esp + 0x3c]
push edx
push ecx
call dword [eax + 0x2c]
mov esi, dword [esi]
test esi, esi
jne 0x5558da
mov eax, dword [esp + 0x3c]
jmp 0x555832
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
cmp dword [eax + 0xa0], 0
je case.0x55594b.523
mov ecx, ebx
call fcn.00553fb1
mov ebx, dword [ebp + 0x18]
mov dl, 1
mov dword [ebx], 0
jmp 0x555cd2
cmp eax, 0x406
ja 0x555d45
je 0x555cfa
sub eax, 0x201
cmp eax, 0xd
ja case.0x55594b.523
movzx eax, byte [eax + 0x5547ba]
jmp dword [eax*4 + 0x5547a6]
mov byte [ebx + 0x67], 1
jmp case.0x55594b.523
mov eax, dword [ebx]
lea ecx, [esp + 0x90]
push ecx
fldz
push ebx
fstp qword [esp + 0x98]
call dword [eax + 0x14]
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call edi
movsx esi, ax
push 0x10
and esi, 0xbfffffff
call edi
movsx edi, ax
shr edi, 1
or edi, esi
push 0x12
shr edi, 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov esi, dword [ebx + 0x34]
cwde
and eax, 0x9fffffff
mov dword [esp + 0x78], 0
or eax, edi
shr eax, 0x1d
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
test esi, esi
je case.0x55594b.523
jmp 0x5559ca
mov edi, dword [esi + 4]
test edi, edi
je 0x555a76
mov ecx, dword [ebx + 0x2c]
lea eax, [esp + 0x78]
mov edx, dword [edi]
push eax
mov eax, dword [ebp + 0x14]
sub esp, 8
movsx eax, word [eax + 2]
mov dword [esp + 0x4c], eax
fild dword [esp + 0x4c]
mov eax, dword [ebp + 0x14]
fstp qword [esp + 0x4c]
fld qword [esp + 0x4c]
fdiv qword [esp + 0x9c]
movsx eax, word [eax]
fmul qword [ecx + 0x68]
fstp dword [esp + 0x4c]
fld dword [esp + 0x4c]
fstp dword [esp + 4]
mov dword [esp + 0x4c], eax
fild dword [esp + 0x4c]
fstp qword [esp + 0x4c]
fld qword [esp + 0x4c]
fdiv qword [esp + 0x9c]
fmul qword [ecx + 0x60]
xor ecx, ecx
cmp dword [esp + 0x58], 0x207
setne cl
xor eax, eax
dec ecx
and ecx, 4
cmp dword [esp + 0x58], 0x204
fstp dword [esp + 0x4c]
fld dword [esp + 0x4c]
setne al
dec eax
and eax, 2
or ecx, eax
xor eax, eax
cmp dword [esp + 0x58], 0x201
fstp dword [esp]
push dword [esp + 0x5c]
sete al
or ecx, eax
push ecx
push edi
call dword [edx + 0x40]
mov esi, dword [esi]
test esi, esi
jne 0x5559ca
mov ebx, dword [ebp + 0x18]
cmp word [esp + 0x78], si
jne 0x55583f
mov dl, byte [esp + 0x3b]
jmp 0x555cd2
mov eax, dword [ebx]
lea ecx, [esp + 0x68]
push ecx
fldz
push ebx
fstp qword [esp + 0x70]
call dword [eax + 0x14]
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call edi
movsx esi, ax
push 0x10
and esi, 0xbfffffff
call edi
movsx edi, ax
shr edi, 1
or edi, esi
push 0x12
shr edi, 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov esi, dword [ebx + 0x34]
cwde
and eax, 0x9fffffff
mov dword [esp + 0x50], 0
or eax, edi
shr eax, 0x1d
mov dword [esp + 0x78], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
test esi, esi
je case.0x55594b.523
mov edi, dword [esi + 4]
test edi, edi
je 0x555ba4
mov ecx, dword [ebx + 0x2c]
lea eax, [esp + 0x50]
mov edx, dword [edi]
push eax
mov eax, dword [ebp + 0x14]
sub esp, 8
movsx eax, word [eax + 2]
mov dword [esp + 0x4c], eax
fild dword [esp + 0x4c]
mov eax, dword [ebp + 0x14]
fstp qword [esp + 0x4c]
fld qword [esp + 0x4c]
fdiv qword [esp + 0x74]
movsx eax, word [eax]
fmul qword [ecx + 0x68]
fstp dword [esp + 0x4c]
fld dword [esp + 0x4c]
fstp dword [esp + 4]
mov dword [esp + 0x4c], eax
fild dword [esp + 0x4c]
fstp qword [esp + 0x4c]
fld qword [esp + 0x4c]
fdiv qword [esp + 0x74]
fmul qword [ecx + 0x60]
xor ecx, ecx
cmp dword [esp + 0x58], 0x208
setne cl
xor eax, eax
dec ecx
and ecx, 4
cmp dword [esp + 0x58], 0x205
fstp dword [esp + 0x4c]
fld dword [esp + 0x4c]
setne al
dec eax
and eax, 2
or ecx, eax
xor eax, eax
cmp dword [esp + 0x58], 0x202
fstp dword [esp]
push dword [esp + 0x84]
sete al
or ecx, eax
push ecx
push edi
call dword [edx + 0x44]
mov esi, dword [esi]
test esi, esi
jne 0x555afb
mov ebx, dword [ebp + 0x18]
cmp word [esp + 0x50], si
je 0x555a8e
mov dword [ebx], esi
mov dl, 1
jmp 0x555cd2
mov eax, dword [ebx]
lea ecx, [esp + 0x58]
push ecx
fldz
push ebx
fstp qword [esp + 0x60]
call dword [eax + 0x14]
mov eax, dword [edi]
lea esi, [ebx + 0x34]
mov ecx, dword [ebp + 0x14]
lea edx, [esp + 0x3c]
mov dword [esp + 0x50], eax
shr eax, 2
mov dword [esp + 0x40], eax
movsx eax, word [ecx]
mov dword [esp + 0x3c], eax
movsx eax, word [ecx + 2]
mov ecx, dword [ebx + 0x2c]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x7c]
push 0
push eax
lea eax, [esp + 0x68]
mov dword [esp + 0x84], esi
push eax
call fcn.00554033
fild dword [esp + 0x48]
add esp, 0xc
fstp qword [esp + 0x68]
fld qword [esp + 0x68]
fdiv qword [esp + 0x58]
fild dword [esp + 0x60]
fstp qword [esp + 0x68]
fld qword [esp + 0x68]
mov ecx, dword [esp + 0x7c]
fdiv qword [esp + 0x58]
cmp ecx, esi
jne 0x555c55
mov eax, dword [ebx + 0x2c]
fld qword [eax + 0x60]
fmulp st(2)
fxch st(1)
fst qword [esp + 0x68]
fld qword [eax + 0x68]
jmp 0x555c65
fld qword [0x5bd050]
fmul st(2), st(0)
fxch st(2)
fst qword [esp + 0x68]
fxch st(1)
mov esi, dword [ecx]
fmulp st(2)
fxch st(1)
fst qword [esp + 0x90]
test esi, esi
je 0x555cc7
mov ebx, dword [esp + 0x40]
mov edi, dword [esi + 4]
test edi, edi
je 0x555cb2
mov eax, dword [esp + 0x50]
sub esp, 8
mov edx, dword [edi]
mov ecx, ebx
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
and ecx, 4
fstp dword [esp + 4]
and eax, 3
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
or ecx, eax
fstp dword [esp]
push ecx
push edi
call dword [edx + 0x54]
jmp 0x555cb6
fstp st(1)
fstp st(0)
mov esi, dword [esi]
fld qword [esp + 0x68]
fld qword [esp + 0x90]
test esi, esi
jne 0x555c7a
fstp st(1)
fstp st(0)
mov dl, byte [esp + 0x3b]
mov ebx, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x1c]
test ecx, ecx
je 0x555cef
mov eax, dword [ecx]
test eax, eax
je 0x555cef
mov eax, dword [eax + 0x44]
cmp eax, dword [ecx + 4]
je 0x555cef
mov dword [ebx], 0
mov dl, 1
pop edi
pop esi
mov al, dl
pop ebx
mov esp, ebp
pop ebp
ret 0x24
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
test eax, eax
je case.0x55594b.523
cmp byte [eax + 0x52], 0
je case.0x55594b.523
cmp byte [eax + 0x53], 0
jne case.0x55594b.523
mov byte [eax + 0x53], 1
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x34]
test esi, esi
je case.0x55594b.523
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x555d3d
mov eax, dword [ecx]
push ecx
call dword [eax + 0x38]
mov esi, dword [esi]
test esi, esi
jne 0x555d30
jmp case.0x55594b.523
cmp eax, 0x409
ja 0x555e87
je 0x555e64
sub eax, 0x407
je 0x555de6
sub eax, 1
jne case.0x55594b.523
mov eax, dword [ebx + 0x2c]
mov ecx, dword [edi]
mov eax, dword [eax + 0x2c]
test eax, eax
je case.0x55594b.523
cmp byte [eax + 0x52], 0
je case.0x55594b.523
cmp byte [eax + 0x53], 0
je case.0x55594b.523
test ecx, ecx
je 0x555da4
push ecx
push dword [eax + 0x3c]
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
jne case.0x55594b.523
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
mov byte [eax + 0x53], 0
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x34]
test esi, esi
je case.0x55594b.523
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x555ddb
mov eax, dword [ecx]
push ecx
call dword [eax + 0x3c]
mov esi, dword [esi]
test esi, esi
jne 0x555dce
jmp case.0x55594b.523
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x555e41
cmp dword [eax + 0x3c], edx
jne 0x555e3a
cmp byte [eax + 0x52], 0
je 0x555e1e
inc dword [eax + 0x58]
mov ecx, dword [ebx + 0x2c]
mov ecx, dword [ecx + 0x2c]
call fcn.00553e2b
mov dl, al
mov eax, dword [ebx + 0x2c]
mov ecx, dword [eax + 0x2c]
dec dword [ecx + 0x58]
test dl, dl
jne case.0x55594b.523
jmp 0x555e41
mov ecx, dword [eax + 0x28]
test ecx, ecx
je 0x555e41
push 0
mov edx, str.hWnd
call fcn.005544c4
test eax, eax
je 0x555e41
push eax
call esi
jmp 0x555e41
mov ecx, ebx
call fcn.00556a30
mov esi, dword [ebx + 0x34]
test esi, esi
je case.0x55594b.523
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x555e59
mov eax, dword [ecx]
push ecx
call dword [eax + 0x30]
mov esi, dword [esi]
test esi, esi
jne 0x555e4c
jmp case.0x55594b.523
mov esi, dword [ebx + 0x34]
test esi, esi
je case.0x55594b.523
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x555e7c
mov eax, dword [ecx]
push ecx
call dword [eax + 0x34]
mov esi, dword [esi]
test esi, esi
jne 0x555e6f
jmp case.0x55594b.523
cmp eax, 0x77ea
jne case.0x55594b.523
mov edi, dword [edi]
mov esi, dword [ebx + 0x34]
mov eax, dword [edi + 4]
cmp eax, 0x114
ja 0x556426
je 0x5563ec
sub eax, 0x20
cmp eax, 0xf1
ja case.0x55643b.278
movzx eax, byte [eax + 0x5546b2]
jmp dword [eax*4 + 0x55469a]
mov ecx, dword [ebx + 0x78]
test ecx, ecx
je 0x555f3f
xor eax, eax
cmp ecx, 0x13
setge al
dec eax
and eax, ecx
mov dword [esp + 0x40], eax
jne 0x555f13
test edx, edx
je 0x555f13
push 0xfffffffffffffff4
push edx
call dword [sym.imp.USER32.dll_GetClassLongA]
mov esi, eax
mov eax, dword [0x58ac18]
test eax, eax
jne 0x555f08
push 0x7f00
push eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [0x58ac18], eax
test esi, esi
je 0x555f13
cmp esi, eax
je 0x555f13
push esi
jmp 0x555f24
mov eax, dword [0x58ac2c]
mov ecx, dword [esp + 0x40]
mov eax, dword [eax + ecx*4]
test eax, eax
je 0x555f2a
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, dword [ebp + 0x18]
mov byte [esp + 0x3b], 1
mov dword [eax], 1
mov dword [edi + 0x10], 1
lea eax, [esp + 0x60]
mov dword [esp + 0x60], 0
push eax
mov dword [esp + 0x68], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [esp + 0x60]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebx + 0x2c]
mov ebx, dword [eax + 0x24]
mov dword [esp + 0x40], ebx
mov edx, dword [ebx + 0x30]
test edx, edx
je 0x555fc9
nop
mov ebx, dword [edx + 0xc]
mov ecx, dword [ebx + 0x28]
test ecx, ecx
je 0x555fbf
mov eax, dword [ecx + 0x64]
mov eax, dword [eax + 0x80]
test eax, eax
je 0x555fbf
cmp byte [eax + 0x60], 0
je 0x555fbf
mov esi, dword [ecx + 0x24]
cmp dword [esp + 0x60], esi
jl 0x555fbf
mov eax, dword [ecx + 0x2c]
add eax, esi
cmp dword [esp + 0x60], eax
jg 0x555fbf
mov esi, dword [ecx + 0x28]
cmp dword [esp + 0x64], esi
jl 0x555fbf
mov eax, dword [ecx + 0x30]
add eax, esi
cmp dword [esp + 0x64], eax
jle 0x555fc9
mov edx, dword [edx]
test edx, edx
jne 0x555f7a
mov ebx, dword [esp + 0x40]
push 0
mov edx, str.MousePointer
mov ecx, ebx
call fcn.005544c4
mov esi, eax
test esi, esi
je case.0x55643b.278
cmp esi, 0x63
jne 0x55607b
mov edx, str.MouseIcon
mov byte [esp + 0x3b], 0
mov ecx, ebx
call fcn.005571e9
mov esi, eax
test esi, esi
je case.0x55643b.278
mov ecx, dword [esi]
lea eax, [esp + 0x58]
push eax
push 0x5c3348
push esi
mov dword [esp + 0x64], 0
call dword [ecx]
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x556065
mov dword [esp + 0x3c], 0
lea edx, [esp + 0x3c]
mov eax, dword [ecx]
push edx
push ecx
call dword [eax + 0xc]
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x55605b
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, dword [ebp + 0x18]
mov byte [esp + 0x3b], 1
mov dword [eax], 1
mov dword [edi + 0x10], 1
mov eax, dword [esp + 0x58]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x3b]
mov byte [edi + 0x14], 1
jmp 0x555cd2
cmp esi, 0x13
jl 0x5560b9
mov eax, dword [ebp + 8]
xor esi, esi
test eax, eax
je 0x5560b9
push 0xfffffffffffffff4
push eax
call dword [sym.imp.USER32.dll_GetClassLongA]
mov ebx, eax
mov eax, dword [0x58ac18]
test eax, eax
jne 0x5560ae
push 0x7f00
push eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [0x58ac18], eax
test ebx, ebx
je 0x5560b9
cmp ebx, eax
je 0x5560b9
push ebx
jmp 0x5560c6
mov eax, dword [0x58ac2c]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x5560cc
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov ebx, dword [ebp + 0x18]
mov dl, 1
mov dword [ebx], 1
mov dword [edi + 0x10], 1
mov byte [edi + 0x14], dl
jmp 0x555cd2
test esi, esi
je case.0x55643b.278
mov ebx, dword [esi + 4]
test ebx, ebx
je 0x556107
mov ecx, dword [edi + 8]
mov edx, dword [ebx]
movzx eax, word [ecx]
push eax
movzx eax, word [ecx + 2]
push eax
push ebx
call dword [edx + 0xc]
mov esi, dword [esi]
test esi, esi
jne 0x5560ee
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x3b]
mov byte [edi + 0x14], 1
jmp 0x555cd2
test esi, esi
je case.0x55643b.278
jmp 0x55612a
xor ecx, ecx
mov ebx, ecx
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], ecx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], ecx
mov edx, dword [esi + 4]
test edx, edx
je 0x556175
mov ecx, dword [edx]
lea eax, [esp + 0x100]
push eax
mov eax, dword [edi + 0xc]
push dword [eax]
push edx
call dword [ecx + 0x98]
mov ebx, dword [esp + 0x108]
mov ecx, dword [esp + 0x100]
test cx, cx
je 0x55634c
xor edx, edx
mov byte [esp + 0xac], 0
mov word [esp + 0x9c], dx
lea eax, [esp + 0x100]
cmp cx, 3
jne 0x5561b6
mov edx, ebx
mov dword [esp + 0xad], 0
mov dword [esp + 0x98], edx
jmp 0x556325
mov edx, 0x4003
cmp cx, dx
jne 0x5561d9
mov edx, dword [ebx]
mov dword [esp + 0x98], edx
mov dword [esp + 0xad], 0
jmp 0x556325
xor edx, edx
mov dword [esp + 0x98], edx
cmp cx, 0xa
jne 0x55620c
cmp ebx, 0x80020004
jne 0x55628b
mov byte [esp + 0xac], 1
mov dword [esp + 0xad], 0x80020005
jmp 0x556325
cmp cx, 9
je 0x556219
cmp cx, word [esp + 0x40]
jne 0x55628b
test ecx, 0x4000
je 0x556223
mov ebx, dword [ebx]
test ebx, ebx
je 0x55631a
push 0
push 0
lea ecx, [esp + 0xa4]
xor eax, eax
push ecx
lea ecx, [esp + 0xfc]
mov dword [esp + 0xfc], eax
push ecx
push 3
push 0
push 0x5c0a38
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov eax, dword [ebx]
push 0
push ebx
call dword [eax + 0x18]
mov dword [esp + 0xad], eax
test eax, eax
js 0x556311
mov edx, dword [esp + 0x98]
lea eax, [esp + 0x9c]
movzx ecx, word [eax]
cmp ecx, 1
jne 0x5562a3
mov dword [esp + 0xad], 0x800a005e
jmp 0x556325
xor edx, edx
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], edx
mov dword [esp + 0xdc], edx
mov edx, 0x400c
cmp cx, dx
jne 0x5562d3
mov eax, dword [eax + 8]
cmp word [eax], dx
je 0x5562cb
push 3
push 2
push 0x400
push eax
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
mov dword [esp + 0xad], eax
test eax, eax
js 0x556311
mov edx, dword [esp + 0xd8]
mov dword [esp + 0x98], edx
mov dword [esp + 0xad], 0
jmp 0x556325
mov edx, dword [esp + 0x98]
jmp 0x556325
mov dword [esp + 0xad], 0x800a005b
cmp word [esp + 0x9c], 0
mov ebx, dword [ebp + 0x18]
mov dword [ebx], edx
mov dword [edi + 0x10], edx
mov byte [edi + 0x14], 1
je 0x55634f
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x55634f
mov ebx, dword [ebp + 0x18]
mov esi, dword [esi]
test esi, esi
jne 0x55612a
mov dl, byte [esp + 0x3b]
mov byte [edi + 0x14], 1
jmp 0x555cd2
mov dword [esp + 0x3c], 0
test esi, esi
je case.0x55643b.278
lea esp, [esp]
mov edx, dword [esi + 4]
test edx, edx
je 0x556391
mov ecx, dword [edx]
lea eax, [esp + 0x3c]
push eax
mov eax, dword [edi + 0xc]
push dword [eax]
push edx
call dword [ecx + 0x7c]
mov esi, dword [esi]
test esi, esi
jne 0x55637a
jmp 0x5563ca
mov dword [esp + 0x3c], 0
test esi, esi
je case.0x55643b.278
nop
mov edx, dword [esi + 4]
test edx, edx
je 0x5563c4
mov ecx, dword [edx]
lea eax, [esp + 0x3c]
push eax
mov eax, dword [edi + 0xc]
push dword [eax]
push edx
call dword [ecx + 0x80]
mov esi, dword [esi]
test esi, esi
jne 0x5563aa
cmp word [esp + 0x3c], 0
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x3b]
je 0x556543
mov dword [ebx], 1
mov byte [edi + 0x14], 1
jmp 0x555cd2
test esi, esi
je case.0x55643b.278
lea ebx, [ebx]
mov edx, dword [esi + 4]
test edx, edx
je 0x556410
mov eax, dword [edi + 8]
mov ecx, dword [edx]
push 0xffffffffffffffff
movzx eax, word [eax]
push eax
push edx
call dword [ecx + 0x20]
mov esi, dword [esi]
test esi, esi
jne 0x5563fa
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x3b]
mov byte [edi + 0x14], 1
jmp 0x555cd2
sub eax, 0x115
cmp eax, 0x23
ja case.0x55643b.278
movzx eax, byte [eax + 0x554676]
jmp dword [eax*4 + 0x55465e]
test esi, esi
je case.0x55643b.278
mov edx, dword [esi + 4]
test edx, edx
je 0x556460
mov eax, dword [edi + 8]
mov ecx, dword [edx]
push 0
movzx eax, word [eax]
push eax
push edx
call dword [ecx + 0x20]
mov esi, dword [esi]
test esi, esi
jne 0x55644a
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x3b]
mov byte [edi + 0x14], 1
jmp 0x555cd2
test esi, esi
je case.0x55643b.278
mov edx, dword [esi + 4]
test edx, edx
je 0x556496
mov ecx, dword [edx]
lea eax, [edi + 0x10]
push 0
push eax
mov eax, dword [edi + 8]
push dword [eax]
push edx
call dword [ecx + 0x18]
mov esi, dword [esi]
test esi, esi
jne 0x55647e
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x3b]
mov byte [edi + 0x14], 1
jmp 0x555cd2
test esi, esi
je case.0x55643b.278
lea ebx, [ebx]
mov edx, dword [esi + 4]
test edx, edx
je 0x5564d2
mov ecx, dword [edx]
lea eax, [edi + 0x10]
push 8
push eax
mov eax, dword [edi + 8]
push dword [eax]
push edx
call dword [ecx + 0x18]
mov esi, dword [esi]
test esi, esi
jne 0x5564ba
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x3b]
mov byte [edi + 0x14], 1
jmp 0x555cd2
test esi, esi
je case.0x55643b.278
mov edx, dword [esi + 4]
test edx, edx
je 0x556504
mov ecx, dword [edx]
lea eax, [edi + 0x10]
push 1
push eax
mov eax, dword [edi + 8]
push dword [eax]
push edx
call dword [ecx + 0x18]
mov esi, dword [esi]
test esi, esi
jne 0x5564ec
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x3b]
mov byte [edi + 0x14], 1
jmp 0x555cd2
test esi, esi
je case.0x55643b.278
mov edx, dword [esi + 4]
test edx, edx
je 0x556536
mov ecx, dword [edx]
lea eax, [edi + 0x10]
push 6
push eax
mov eax, dword [edi + 8]
push dword [eax]
push edx
call dword [ecx + 0x18]
mov esi, dword [esi]
test esi, esi
jne 0x55651e
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x3b]
mov byte [edi + 0x14], 1
jmp 0x555cd2