Function at 0x49463f
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff3dc
push ebx
push esi
push edi
cmp dword [0x5646fc], 0
je 0x49465b
xor eax, eax
jmp 0x495605
mov dword [0x5646fc], 1
cmp dword [0x5646f0], 0
jne 0x494695
push 0x10
call sub.USER32.dll_GetKeyState
movsx edx, ax
and edx, 0x8000
cmp edx, 0x8000
je 0x494695
xor ecx, ecx
mov dword [0x5646fc], ecx
xor eax, eax
jmp 0x495605
xor edx, edx
mov dword [0x5646ec], edx
push 0
lea ecx, [ebp - 0x44]
push ecx
push dword [ebp + 8]
call fcn.005201c7
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4946cc
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x810], 0
je 0x4946cc
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x684], 0
jne 0x4946db
xor ecx, ecx
mov dword [0x5646fc], ecx
xor eax, eax
jmp 0x495605
mov edx, dword [ebp - 0x20]
mov ecx, dword [edx + 0xb6c]
mov dword [ebp - 0x1c], ecx
push dword [ebp - 0x1c]
call fcn.00412773
test eax, eax
jne 0x494701
xor eax, eax
mov dword [0x5646fc], eax
xor eax, eax
jmp 0x495605
mov edx, dword [ebp - 0x20]
mov esi, dword [edx + 0x99c]
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x70c], 1
je 0x49472b
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x70c], 2
jne 0x494737
cmp dword [0x56a184], 1
jne 0x494737
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx + 0x99c]
dec eax
add esi, eax
mov dword [ebp - 4], 2
movzx edx, word [ebp + 0xc]
mov dword [ebp - 0x2c], edx
mov ecx, dword [ebp + 0xc]
shr ecx, 0x10
and cx, 0xffff
movzx eax, cx
mov dword [ebp - 0x28], eax
push 1
lea edx, [ebp - 0x2c]
push edx
mov ecx, dword [ebp - 0x20]
push dword [ecx + 0x810]
mov eax, dword [ebp - 0x20]
push dword [eax]
call sub.USER32.dll_MapWindowPoints
mov edx, dword [ebp - 0x2c]
cmp edx, dword [ebp - 4]
jge 0x494786
xor ecx, ecx
mov dword [0x5646fc], ecx
xor eax, eax
jmp 0x495605
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0x38]
jl 0x49479d
xor ecx, ecx
mov dword [0x5646fc], ecx
xor eax, eax
jmp 0x495605
cmp dword [ebp - 0x28], 0
jge 0x4947b2
xor edx, edx
mov dword [0x5646fc], edx
xor eax, eax
jmp 0x495605
mov edx, dword [ebp - 0x20]
mov ecx, dword [edx + 0x684]
mov ebx, dword [ecx + 0x44]
mov eax, dword [ebp - 0x20]
mov edx, dword [eax + 0x6b4]
mov ecx, dword [ebp - 0x20]
sub edx, dword [ecx + 0x6b8]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
jle 0x4947f0
mov eax, dword [ebp - 0x20]
cmp ebx, dword [eax + 0x684]
je 0x4947f0
mov ebx, dword [ebx + 0x44]
dec dword [ebp - 8]
cmp dword [ebp - 8], 0
jg 0x4947d9
test ebx, ebx
jne 0x494803
xor edx, edx
mov dword [0x5646fc], edx
xor eax, eax
jmp 0x495605
mov edi, dword [ebx + 8]
mov ecx, dword [ebp - 0x38]
sub ecx, esi
dec ecx
mov eax, dword [ebp - 0x20]
cmp ebx, dword [eax + 0x684]
je 0x49489f
sub ecx, esi
mov ebx, dword [ebx + 0x44]
cmp edi, dword [ebx + 8]
je 0x49480c
mov edi, dword [ebx + 8]
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x70c], 3
je 0x494849
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x70c], 2
jne 0x49485e
cmp dword [0x56a184], 2
jne 0x49485e
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x99c]
push ecx
mov ecx, 3
cdq
idiv ecx
pop ecx
sub ecx, eax
mov eax, esi
neg eax
cmp ecx, eax
jge 0x49480c
add ecx, esi
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x70c], 3
je 0x494889
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x70c], 2
jne 0x49489c
cmp dword [0x56a184], 2
jne 0x49489c
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0x99c]
mov edi, 3
cdq
idiv edi
add ecx, eax
mov ebx, dword [ebx + 0x40]
test ebx, ebx
jne 0x4948b1
xor eax, eax
mov dword [0x5646fc], eax
xor eax, eax
jmp 0x495605
mov edi, dword [ebx + 8]
test ebx, ebx
je 0x4955f3
cmp ecx, dword [ebp - 0x28]
jg 0x49559a
lea eax, [esi + ecx]
cmp eax, dword [ebp - 0x28]
jle 0x49559a
push dword [ebp - 0x2c]
push dword [ebp - 4]
push dword [ebx]
push dword [ebp - 0x20]
call fcn.004940d5
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x4955f3
mov edx, dword [ebx]
mov ecx, dword [ebp - 0x10]
cmp byte [edx + ecx], 0x20
je 0x4955f3
mov eax, dword [ebx]
mov edx, dword [ebp - 0x10]
cmp byte [eax + edx], 9
je 0x4955f3
mov edi, ebx
jmp 0x494913
mov edi, dword [edi + 0x44]
mov eax, dword [ebp - 0x20]
cmp edi, dword [eax + 0x684]
je 0x494929
mov edx, dword [edi + 0x44]
mov ecx, dword [edx + 8]
cmp ecx, dword [edi + 8]
je 0x494910
test edi, edi
je 0x4955f3
push 0x3e7
lea eax, [ebp - 0x42c]
push eax
call fcn.0042e3f0
mov dword [ebp - 0xc], edi
jmp 0x4949b4
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x10]
test eax, eax
jle 0x494976
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0xc]
mov esi, dword [edx]
jmp 0x49495f
inc esi
dec dword [ebp - 0x18]
cmp byte [esi], 0x20
jne 0x49496a
cmp dword [ebp - 0x18], 0
jg 0x49495b
cmp byte [esi], 0
jne 0x49497b
mov esi, 0x564700
jmp 0x49497b
mov eax, dword [ebp - 0xc]
mov esi, dword [eax]
lea eax, [ebp - 0x42c]
push eax
call fcn.0054c2d0
pop ecx
push eax
push esi
call fcn.0054c2d0
pop ecx
pop edx
add edx, eax
cmp edx, 0x3b5
ja 0x4949c5
push esi
lea ecx, [ebp - 0x42c]
push ecx
call fcn.0054c1f4
add esp, 8
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x40]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x4949c5
mov ecx, dword [ebp - 0xc]
mov eax, dword [ecx + 8]
cmp eax, dword [edi + 8]
je 0x494947
mov edx, dword [edi]
push edi
mov edi, edx
mov esi, 0x57f5c0
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
cmp ebx, edi
jne 0x4949f8
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x494a10
mov dword [ebp - 0x18], 1
push 0x57f5c0
call fcn.0054c2d0
pop ecx
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov edi, dword [edi + 0x40]
jmp 0x494b07
cmp ebx, edi
jne 0x494a21
xor edx, edx
mov dword [ebp - 0x18], edx
mov eax, dword [edi + 0x10]
test eax, eax
jle 0x494ac2
mov dword [ebp - 0x14], eax
mov esi, dword [edi]
jmp 0x494a37
inc esi
dec dword [ebp - 0x14]
mov al, byte [esi]
cmp al, 0x20
je 0x494a41
cmp al, 9
jne 0x494a47
cmp dword [ebp - 0x14], 0
jg 0x494a33
cmp byte [esi], 0
je 0x494a9e
push 0x57f5c0
call fcn.0054c2d0
pop ecx
push eax
push esi
call fcn.0054c2d0
pop ecx
pop edx
add edx, eax
cmp edx, 0x3b5
ja 0x494b17
push esi
push 0x57f5c0
call fcn.0054c1f4
add esp, 8
cmp dword [ebp - 0x18], 0
je 0x494a8f
push esi
call fcn.0054c2d0
pop ecx
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
cmp ebx, edi
jne 0x494b04
mov ecx, dword [edi + 0x10]
sub ecx, dword [ebp - 0x14]
sub dword [ebp - 0x10], ecx
jmp 0x494b04
push 0x564703
push 0x57f5c0
call fcn.0054c1f4
add esp, 8
cmp dword [ebp - 0x18], 0
je 0x494ab9
inc dword [ebp - 0x10]
cmp ebx, edi
jne 0x494b04
dec dword [ebp - 0x10]
jmp 0x494b04
push 0x57f5c0
call fcn.0054c2d0
pop ecx
mov esi, eax
push dword [edi]
call fcn.0054c2d0
pop ecx
add esi, eax
cmp esi, 0x3b5
ja 0x494b17
push dword [edi]
push 0x57f5c0
call fcn.0054c1f4
add esp, 8
cmp dword [ebp - 0x18], 0
je 0x494b04
push dword [edi]
call fcn.0054c2d0
pop ecx
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov edi, dword [edi + 0x40]
test edi, edi
je 0x494b17
mov eax, dword [edi + 8]
cmp eax, dword [ebx + 8]
je 0x494a18
cmp dword [ebp - 0x10], 0
jl 0x4955f3
push 0x57f5c0
call fcn.0054c2d0
pop ecx
cmp eax, dword [ebp - 0x10]
jle 0x4955f3
mov esi, 0x57f5c0
add esi, dword [ebp - 0x10]
jmp 0x494b40
dec esi
cmp esi, 0x57f5c0
jbe 0x494b52
mov al, byte [esi]
cmp al, 0x20
je 0x494b52
cmp al, 9
jne 0x494b3f
cmp byte [esi], 0x20
je 0x494b5c
cmp byte [esi], 9
jne 0x494b7f
inc esi
cmp byte [esi], 0
je 0x4955f3
push esi
call fcn.0054c2d0
pop ecx
inc eax
push eax
push esi
push 0x57f5c0
call fcn.0054c104
add esp, 0xc
jmp 0x494b96
push esi
call fcn.0054c2d0
pop ecx
inc eax
push eax
push esi
push 0x57f5c0
call fcn.0054c104
add esp, 0xc
mov esi, 0x57f5c0
jmp 0x494bad
mov al, byte [esi]
cmp al, 0x20
je 0x494ba7
cmp al, 9
jne 0x494bac
mov byte [esi], 0
jmp 0x494bb2
inc esi
cmp byte [esi], 0
jne 0x494b9d
push 0xf
push 0x57f5c0
call fcn.0050cc40
cmp byte [0x57f5c0], 0
je 0x4955f3
cmp dword [0x56acb4], 0
je 0x494c99
xor edx, edx
mov dword [ebp - 0x30], edx
push 0x7f8
push 0
lea ecx, [ebp - 0xc24]
push ecx
call fcn.0054c150
add esp, 0xc
lea eax, [ebp - 0x42c]
push eax
push 0x3e7
lea edx, [ebp - 0xbfc]
push edx
call fcn.0042e322
push 0x57f5c0
push 0x3e7
lea ecx, [ebp - 0x815]
push ecx
call fcn.0042e322
lea eax, [ebp - 0xc24]
push eax
lea edx, [ebp - 0x30]
push edx
push 1
push 0x1d
push 0x564706
push 0
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
push dword [ecx + 0xb6c]
call fcn.004fd2f4
test eax, eax
je 0x494c99
cmp dword [ebp + 0x10], 1
jne 0x494c79
lea eax, [ebp - 0xc24]
push eax
lea edx, [ebp - 0x30]
push edx
push 0
push 0x1d
push 0x56470f
push 0
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
push dword [ecx + 0xb6c]
call fcn.004fd2f4
inc dword [0x5646ec]
mov eax, dword [ebp + 8]
mov dword [0x5646e8], eax
xor edx, edx
mov dword [0x5646fc], edx
mov eax, 1
jmp 0x495605
mov esi, 0x57f5c0
jmp 0x494cbf
push dword [ebp - 0x1c]
push esi
call fcn.004ed8ea
test al, al
jne 0x494cbe
push dword [ebp - 0x1c]
push esi
call fcn.004ed8a9
test al, al
jne 0x494cc4
xor esi, esi
jmp 0x494cc4
inc esi
cmp byte [esi], 0
jne 0x494ca0
test esi, esi
je 0x494de4
cmp byte [esi], 0
je 0x494de4
push 0x2c
push esi
call fcn.0054c230
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x494cef
mov eax, dword [ebp - 0x24]
mov byte [eax], 0
test esi, esi
je 0x494de4
cmp byte [esi], 0
je 0x494de4
cmp byte [esi + 1], 0
je 0x494de4
push esi
call fcn.0054c2d0
pop ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jle 0x494d5f
mov edx, dword [ebp - 0x10]
xor ecx, ecx
mov cl, byte [esi + edx - 1]
cmp ecx, 0x3a
jge 0x494d3e
sub ecx, 0x22
je 0x494d57
sub ecx, 7
je 0x494d57
sub ecx, 3
je 0x494d57
sub ecx, 2
je 0x494d57
jmp 0x494d5f
add ecx, 0xffffffc6
sub ecx, 2
jb 0x494d57
sub ecx, 2
je 0x494d57
sub ecx, 0x1f
je 0x494d57
sub ecx, 0x20
je 0x494d57
jmp 0x494d5f
mov eax, dword [ebp - 0x10]
mov byte [esi + eax - 1], 0
cmp byte [esi], 0
je 0x4955f3
inc dword [0x5646ec]
mov edx, dword [ebp + 8]
mov dword [0x5646e8], edx
cmp dword [ebp + 0x10], 1
jne 0x494da1
push esi
push 0x564718
push 0x577e2a
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebp - 0x1c]
push 1
push 0x577e2a
call fcn.0042e099
jmp 0x494dd2
cmp dword [ebp + 0x10], 2
jne 0x494dd2
push esi
call fcn.0054c2d0
pop ecx
inc eax
push eax
push esi
push 0x57f5c0
call fcn.0054c104
add esp, 0xc
push 1
call fcn.004cc3da
push dword [ebp + 0xc]
push 0x14
push dword [ebp + 8]
call fcn.004ce6ec
xor ecx, ecx
mov dword [0x5646fc], ecx
mov eax, 1
jmp 0x495605
push 0x57f5c0
call fcn.0054c2d0
pop ecx
cmp eax, 2
jb 0x495091
push 0x2e
push 0x57f5c2
call fcn.0054c230
add esp, 8
test eax, eax
je 0x495091
xor edx, edx
mov dl, byte [0x57f5c0]
cmp edx, 0x3c
jg 0x494e2d
je 0x494e39
sub edx, 0x22
je 0x494e39
add edx, 0xfffffffb
sub edx, 2
jb 0x494e39
jmp 0x494e58
sub edx, 0x5b
je 0x494e39
sub edx, 0x20
je 0x494e39
jmp 0x494e58
push 0x57f5c1
call fcn.0054c2d0
pop ecx
inc eax
push eax
push 0x57f5c1
push 0x57f5c0
call fcn.0054c104
add esp, 0xc
push 0x57f5c0
call fcn.0054c2d0
pop ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jle 0x494ed1
mov ecx, dword [ebp - 0x10]
xor eax, eax
mov al, byte [ecx + 0x57f5bf]
cmp eax, 0x2e
jg 0x494e94
je 0x494ea5
sub eax, 0x22
je 0x494ea5
sub eax, 5
je 0x494ea5
sub eax, 2
je 0x494ea5
sub eax, 3
je 0x494ea5
jmp 0x494ed1
sub eax, 0x3e
je 0x494ea5
sub eax, 0x1f
je 0x494ea5
sub eax, 0x20
je 0x494eb1
jmp 0x494ed1
mov edx, dword [ebp - 0x10]
mov byte [edx + 0x57f5bf], 0
jmp 0x494ed1
push 0x564724
push 0x57f5c0
call fcn.0054c5e4
add esp, 8
test eax, eax
jne 0x494ed1
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0x57f5bf], 0
cmp byte [0x57f5c0], 0
je 0x4955f3
xor eax, eax
mov dword [0x5646ec], eax
push 0x3a
push 0x57f5c0
call fcn.0054c230
add esp, 8
test eax, eax
je 0x494f68
push 7
push 0x564728
push 0x57f5c0
call fcn.0054c52c
add esp, 0xc
test eax, eax
jne 0x494f1c
mov dword [ebp - 0x10], 0xb
jmp 0x495009
push 8
push 0x564731
push 0x57f5c0
call fcn.0054c52c
add esp, 0xc
test eax, eax
jne 0x494f40
mov dword [ebp - 0x10], 0xc
jmp 0x495009
push 6
push 0x56473b
push 0x57f5c0
call fcn.0054c52c
add esp, 0xc
test eax, eax
jne 0x4955f3
mov dword [ebp - 0x10], 0xa
jmp 0x495009
push 4
push 0x564743
push 0x57f5c0
call fcn.0054c52c
add esp, 0xc
test eax, eax
jne 0x494f89
mov dword [ebp - 0x10], 8
jmp 0x494fea
push 4
push 0x564749
push 0x57f5c0
call fcn.0054c52c
add esp, 0xc
test eax, eax
jne 0x494faa
mov dword [ebp - 0x10], 8
jmp 0x494fea
push 0x40
push 0x57f5c0
call fcn.0054c230
add esp, 8
test eax, eax
je 0x4955f3
push 0x10
call sub.USER32.dll_GetKeyState
movsx edx, ax
and edx, 0x8000
cmp edx, 0x8000
jne 0x4955f3
inc dword [0x5646ec]
mov dword [ebp - 0x10], 6
cmp dword [ebp - 0x10], 8
jne 0x495009
push 0x2e
push 0x57f5c4
call fcn.0054c230
add esp, 8
mov esi, eax
test esi, esi
je 0x4955f3
push 0x57f5c0
call fcn.0054c2d0
pop ecx
cmp eax, dword [ebp - 0x10]
jl 0x4955f3
inc dword [0x5646ec]
mov eax, dword [ebp + 8]
mov dword [0x5646e8], eax
cmp dword [ebp + 0x10], 1
jne 0x49505c
cmp dword [0x5646ec], 2
jne 0x495049
push dword [ebp - 0x1c]
push 0x57f5c0
call fcn.004f575f
jmp 0x49507f
push 0
push 0x578211
push 0x57f5c0
call fcn.00517fda
jmp 0x49507f
cmp dword [ebp + 0x10], 2
jne 0x49507f
cmp dword [0x5646ec], 1
jne 0x49507f
push 1
call fcn.004cd94f
push dword [ebp + 0xc]
push 0x1b
push dword [ebp + 8]
call fcn.004ce6ec
xor edx, edx
mov dword [0x5646fc], edx
mov eax, 1
jmp 0x495605
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0x6bc]
test eax, eax
je 0x4950ac
cmp eax, 1
je 0x4950ac
cmp eax, 2
jne 0x4955f3
push dword [ebp - 0x1c]
call fcn.00494349
push 0x57fa6f
push 0x57f9a7
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4950d1
mov byte [0x57fa6f], 0
push 0x57fad3
push 0x57fa0b
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4950ee
mov byte [0x57fad3], 0
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x6bc], 1
jne 0x495275
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x34], 0x57f9a7
mov eax, dword [ebp - 0x34]
cmp byte [eax], 0
je 0x49517f
xor edx, edx
mov dword [ebp - 0x10], edx
xor ebx, ebx
mov eax, dword [ebp - 0x20]
add eax, 0x67c
push eax
push 0
imul edx, esi, 0x64
add edx, 0x57f9a7
push edx
call fcn.0048e640
mov edi, eax
test edi, edi
je 0x495153
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax + 0x674]
test ebx, ebx
je 0x495153
cmp edi, ebx
je 0x495153
mov ebx, dword [ebx + 0x40]
inc dword [ebp - 0x10]
test ebx, ebx
jne 0x495145
test ebx, ebx
je 0x49517f
mov eax, dword [ebx]
mov esi, 0x57f5c0
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x495189
inc esi
add dword [ebp - 0x34], 0x64
cmp esi, 4
jl 0x495109
test ebx, ebx
je 0x495275
inc dword [0x5646ec]
mov eax, dword [ebp + 8]
mov dword [0x5646e8], eax
cmp dword [ebp + 0x10], 1
jne 0x49521c
cmp byte [0x57c634], 0
je 0x495264
mov esi, 0x577e2a
mov edi, 0x57c634
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx]
mov esi, 0x578211
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push dword [ebp - 0x1c]
push 0
push 0
push 1
push 0x578211
push 0x577e2a
push dword [ebp + 8]
call fcn.004b099c
jmp 0x495264
cmp dword [ebp + 0x10], 2
jne 0x49524a
push 1
push 1
push dword [ebp - 0x10]
push 0x8098
push dword [ebp + 8]
call fcn.0042d472
call fcn.004cc53b
push dword [ebp + 0xc]
push 3
push dword [ebp + 8]
call fcn.004ce6ec
jmp 0x495264
cmp dword [ebp + 0x10], 3
jne 0x495264
push 1
push 1
push dword [ebp - 0x10]
push 0x8098
push dword [ebp + 8]
call fcn.0042d472
xor eax, eax
mov dword [0x5646fc], eax
mov eax, 1
jmp 0x495605
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x1c74], 0
je 0x495415
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x34], 0x57f9a7
mov eax, dword [ebp - 0x34]
cmp byte [eax], 0
je 0x4952f2
push dword [ebp - 0x1c]
push 1
imul edx, esi, 0x64
add edx, 0x57f9a7
push edx
call fcn.004d62eb
mov ebx, eax
test ebx, ebx
je 0x4952f0
mov esi, 0x57f5c0
mov edi, ebx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x21
push 0x57f5c0
call fcn.0054c230
add esp, 8
mov esi, eax
test esi, esi
je 0x4952fc
mov byte [esi], 0
jmp 0x4952fc
xor ebx, ebx
inc esi
add dword [ebp - 0x34], 0x64
cmp esi, 4
jl 0x495290
test ebx, ebx
je 0x495415
inc dword [0x5646ec]
mov eax, dword [ebp + 8]
mov dword [0x5646e8], eax
cmp dword [ebp + 0x10], 1
jne 0x4953ea
cmp byte [0x57c738], 0
je 0x495404
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x6bc], 2
jne 0x49536a
mov ecx, dword [ebp - 0x20]
cmp dword [ecx + 0x6c0], 2
jne 0x49536a
mov esi, 0x577e2a
mov edi, 0x57c83c
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x495391
mov esi, 0x577e2a
mov edi, 0x57c738
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, 0x578211
mov edi, ebx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x21
push 0x578211
call fcn.0054c230
add esp, 8
mov esi, eax
test esi, esi
je 0x4953cd
mov byte [esi], 0
push dword [ebp - 0x1c]
push 0
push 0
push 1
push 0x578211
push 0x577e2a
push dword [ebp + 8]
call fcn.004b099c
jmp 0x495404
cmp dword [ebp + 0x10], 2
jne 0x495404
push 2
call fcn.004cc9ba
push dword [ebp + 0xc]
push 7
push dword [ebp + 8]
call fcn.004ce6ec
xor eax, eax
mov dword [0x5646fc], eax
mov eax, 1
jmp 0x495605
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 0x1bfc], 0
je 0x4955f3
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x34], 0x57f9a7
mov eax, dword [ebp - 0x34]
cmp byte [eax], 0
je 0x495492
mov edx, dword [ebp - 0x1c]
mov ebx, dword [edx + 0x1bfc]
test ebx, ebx
je 0x49548e
imul eax, esi, 0x64
add eax, 0x57f9a7
push eax
push dword [ebx]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x495487
mov edx, dword [ebx]
push esi
mov esi, 0x57f5c0
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x49548e
mov ebx, dword [ebx + 0x40]
test ebx, ebx
jne 0x495445
test ebx, ebx
jne 0x49549c
inc esi
add dword [ebp - 0x34], 0x64
cmp esi, 4
jl 0x495430
test ebx, ebx
je 0x4955f3
inc dword [0x5646ec]
mov eax, dword [ebp + 8]
mov dword [0x5646e8], eax
cmp dword [ebp + 0x10], 1
jne 0x495574
cmp byte [0x57c42c], 0
je 0x49558c
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x6bc], 2
jne 0x49550a
mov ecx, dword [ebp - 0x20]
cmp dword [ecx + 0x6c0], 2
jne 0x49550a
mov esi, 0x577e2a
mov edi, 0x57c83c
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x495531
mov esi, 0x577e2a
mov edi, 0x57c42c
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx]
mov esi, 0x578211
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push dword [ebp - 0x1c]
push 0
push 0
push 1
push 0x578211
push 0x577e2a
push dword [ebp + 8]
call fcn.004b099c
jmp 0x49558c
cmp dword [ebp + 0x10], 2
jne 0x49558c
call fcn.004cc4c1
push dword [ebp + 0xc]
push 2
push dword [ebp + 8]
call fcn.004ce6ec
xor eax, eax
mov dword [0x5646fc], eax
mov eax, 1
jmp 0x495605
mov ebx, dword [ebx + 0x40]
test ebx, ebx
je 0x4955f3
add ecx, esi
cmp edi, dword [ebx + 8]
je 0x4955e1
mov edi, dword [ebx + 8]
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x70c], 3
je 0x4955cc
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x70c], 2
jne 0x4955e1
cmp dword [0x56a184], 2
jne 0x4955e1
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x99c]
push ecx
mov ecx, 3
cdq
idiv ecx
pop ecx
add ecx, eax
mov eax, dword [ebp - 0x38]
sub eax, esi
dec eax
cmp ecx, eax
jg 0x4955f3
test ebx, ebx
jne 0x4948bc
xor edx, edx
mov dword [0x5646ec], edx
xor ecx, ecx
mov dword [0x5646fc], ecx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc