Function at 0x4931c0
Capabilities:
Hide graphical window
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d2504
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x220
mov eax, dword [0x644904]
push ebx
push esi
push edi
push 0x5fdce4
push 0x5fdcd8
push 0x5fdf50
mov dword [ebp - 0x10], eax
call dword [sym.imp.tengine.dll_void___cdecl_TDU_Log_char_const__]
add esp, 0xc
call dword [sym.imp.winmm.dll_timeGetTime]
push eax
call dword [sym.imp.msvcr71.dll_srand]
mov eax, dword [sym.imp.tengine.dll_struct_tClass_tNode::m_classtNode]
mov esi, dword [sym.imp.tengine.dll_public:_void___thiscall_tKernel::ReisgerClass_struct_tClass__]
add esp, 4
push eax
mov ecx, 0x645478
call esi
push 0x63ec30
mov ecx, 0x645478
call esi
push 0x63e158
mov ecx, 0x645478
call esi
push 0x643324
mov ecx, 0x645478
call esi
push 0x63ec0c
mov ecx, 0x645478
call esi
push 0x63ebf0
mov ecx, 0x645478
call esi
push 0x63e19c
mov ecx, 0x645478
call esi
push 0x63ea60
mov ecx, 0x645478
call esi
push 0x64334c
mov ecx, 0x645478
call esi
push 0x63e44c
mov ecx, 0x645478
call esi
push 0x6431dc
mov ecx, 0x645478
call esi
push 0x643204
mov ecx, 0x645478
call esi
push 0x63eafc
mov ecx, 0x645478
call esi
push 0x63e8e8
mov ecx, 0x645478
call esi
push 0x6429f0
mov ecx, 0x645478
call esi
push 0x63e1e4
mov ecx, 0x645478
call esi
push 0x63e498
mov ecx, 0x645478
call esi
push 0x64293c
mov ecx, 0x645478
call esi
push 0x642970
mov ecx, 0x645478
call esi
push 0x6429a0
mov ecx, 0x645478
call esi
push 0x63ec60
mov ecx, 0x645478
call esi
push 0x63e214
mov ecx, 0x645478
call esi
push 0x63ead8
mov ecx, 0x645478
call esi
push 0x64288c
mov ecx, 0x645478
call esi
push 0x63eb20
mov ecx, 0x645478
call esi
push 0x6432dc
mov ecx, 0x645478
call esi
mov ecx, dword [sym.imp.tengine.dll_struct_tClass_tTimeSystem::m_classtTimeSystem]
push ecx
mov ecx, 0x645478
call esi
push 0x63e978
mov ecx, 0x645478
call esi
push 0x63ea1c
mov ecx, 0x645478
call esi
push 0x642918
mov ecx, 0x645478
call esi
push 0x643300
mov ecx, 0x645478
call esi
push 0x63ea84
mov ecx, 0x645478
call esi
push 0x63ec88
mov ecx, 0x645478
call esi
push 0x6432b4
mov ecx, 0x645478
call esi
push 0x63ee24
mov ecx, 0x645478
call esi
push 0x642860
mov ecx, 0x645478
call esi
push 0x6431b4
mov ecx, 0x645478
call esi
push 0x6429c4
mov ecx, 0x645478
call esi
push 0x63e470
mov ecx, 0x645478
call esi
push 0x63eaac
mov ecx, 0x645478
call esi
push 0x63e8bc
mov ecx, 0x645478
call esi
push 0x643238
mov ecx, 0x645478
call esi
mov esi, dword [sym.imp.tengine.dll_public:_int___thiscall_tKernel::LoadPlugin_char_const___void__]
push 0x645478
push 0x5fdf44
mov ecx, 0x645478
call esi
push 0x645478
push 0x5fdf34
mov ecx, 0x645478
call esi
push 0xc4
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 4], ebx
je 0x49345f
mov ecx, eax
call fcn.0054e750
jmp 0x493461
xor eax, eax
or edi, 0xffffffff
push 0x3d4
mov dword [ebp - 4], edi
mov dword [0x645814], eax
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 1
je 0x493493
mov ecx, eax
call fcn.0048c000
jmp 0x493495
xor eax, eax
push 0x264
mov dword [ebp - 4], edi
mov dword [0x645818], eax
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 2
je 0x4934c4
mov ecx, eax
call fcn.00425d10
jmp 0x4934c6
xor eax, eax
push 0x5c
mov dword [ebp - 4], edi
mov dword [0x645810], eax
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 3
je 0x4934f2
mov ecx, eax
call fcn.00446130
jmp 0x4934f4
xor eax, eax
push 0x30
mov dword [ebp - 4], edi
mov dword [0x645824], eax
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 4
je 0x493520
mov ecx, eax
call fcn.0040ab30
jmp 0x493522
xor eax, eax
push 0xc
mov dword [ebp - 4], edi
mov dword [0x64581c], eax
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 5
je 0x49354e
mov ecx, eax
call fcn.0051ea10
jmp 0x493550
xor eax, eax
push 0x10
mov dword [ebp - 4], edi
mov dword [0x645820], eax
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 6
je 0x49357c
mov ecx, eax
call fcn.00536730
jmp 0x49357e
xor eax, eax
mov dword [ebp - 4], edi
mov dword [0x645808], eax
call fcn.00492ef0
mov esi, dword [sym.imp.tengine.dll_public_virtual:_class_tNode____thiscall_tKernel::NewNode_char_const___char_const___char_const__]
push 0x5fdf2c
push 0x5fdc3c
push 0x5fdf1c
mov ecx, 0x645478
call esi
push 0x5fdf14
push 0x5fdc3c
push 0x5fdf08
mov ecx, 0x645478
mov dword [0x645878], eax
call esi
push 0x5fdf00
push 0x5fdc3c
push 0x5fdef4
mov ecx, 0x645478
mov dword [0x64585c], eax
call esi
push 0x5fdef0
push 0x5fdc3c
push 0x5fdedc
mov ecx, 0x645478
mov dword [0x645828], eax
call esi
push 0x5fded8
push 0x5fdc3c
push 0x5fdec8
mov ecx, 0x645478
mov dword [0x645874], eax
call esi
push 0x5fdec0
push 0x5fdc3c
push 0x5fdeb0
mov ecx, 0x645478
mov dword [0x645854], eax
call esi
push 0x5fdea4
push 0x5fdc3c
push 0x5fde94
mov ecx, 0x645478
mov dword [0x645834], eax
call esi
push 0x5fde90
push 0x5fdc3c
push 0x5fde80
mov ecx, 0x645478
mov dword [0x64584c], eax
call esi
push 0x5fde7c
push 0x5fdc3c
push 0x5fde70
mov ecx, 0x645478
mov dword [0x645860], eax
call esi
push 0x5fde6c
push 0x5fdc3c
push 0x5fde5c
mov ecx, 0x645478
mov dword [0x645858], eax
call esi
push 0x5fde50
push 0x5fdc3c
push 0x5fde40
mov ecx, 0x645478
mov dword [0x645864], eax
call esi
push 0x5fde34
push 0x5fdc3c
push 0x5fde28
mov ecx, 0x645478
mov dword [0x645838], eax
call esi
push 0x5fdc40
push 0x5fdc3c
push 0x5fdc30
mov ecx, 0x645478
mov dword [0x64583c], eax
call esi
push 0x5fde20
push 0x5fdc3c
push 0x5fde14
mov ecx, 0x645478
mov dword [0x645840], eax
call esi
push 0x5fde0c
push 0x5fdc3c
push 0x5fddfc
mov ecx, 0x645478
mov dword [0x645844], eax
call esi
push 0x5fddf4
push 0x5fdc3c
push 0x5fdde4
mov ecx, 0x645478
mov dword [0x645848], eax
call esi
push 0x5fdddc
push 0x5fdc3c
push 0x5fddcc
mov ecx, 0x645478
mov dword [0x64582c], eax
call esi
push 0x5fdc28
push 0x5fdc3c
push 0x5fdc18
mov ecx, 0x645478
mov dword [0x645830], eax
call esi
push 0x5fddc4
push 0x5fdc3c
push 0x5fddb4
mov ecx, 0x645478
mov dword [0x64587c], eax
call esi
push 0x5fdda8
push 0x5fdc3c
push 0x5fdd94
mov ecx, 0x645478
mov dword [0x645880], eax
call esi
push 0x5fdd88
push 0x5fdc3c
push 0x5fdd74
mov ecx, 0x645478
mov dword [0x645868], eax
call esi
push 0x5ecc80
push 0x5fdc3c
push 0x5fdd68
mov ecx, 0x645478
mov dword [0x64586c], eax
call esi
push 0x5fdd60
push 0x5fdc3c
push 0x5fdd50
mov ecx, 0x645478
mov dword [0x645870], eax
call esi
mov edx, dword [eax]
push ebx
mov ecx, eax
call dword [edx + 0x10]
mov ecx, dword [0x645864]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x10]
mov ecx, dword [0x64582c]
mov edx, dword [ecx]
push ebx
call dword [edx + 0x10]
mov eax, dword [0x645854]
mov esi, dword [eax]
call fcn.00491570
mov ecx, dword [0x645854]
push eax
push 0x645468
call dword [esi + 0x38]
mov ecx, dword [0x645848]
mov edx, dword [ecx]
push ebx
call dword [edx + 0x10]
mov ecx, dword [0x645860]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x10]
mov ecx, dword [0x64585c]
mov edx, dword [ecx]
push ebx
call dword [edx + 0x10]
mov ecx, dword [0x645828]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x10]
mov ecx, dword [0x64584c]
mov edx, dword [ecx]
push ebx
call dword [edx + 0x10]
mov ecx, dword [0x645834]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x10]
mov ecx, dword [0x645850]
cmp ecx, ebx
je 0x49388c
mov edx, dword [ecx]
push ebx
call dword [edx + 0x10]
mov ecx, dword [0x645858]
cmp ecx, ebx
je 0x49389c
mov eax, dword [ecx]
push ebx
call dword [eax + 0x10]
mov ecx, dword [0x645878]
mov edx, dword [ecx]
push ebx
call dword [edx + 0x10]
mov ecx, dword [0x645874]
mov eax, dword [ecx]
push 0x645468
call dword [eax + 0x10]
mov ecx, dword [0x64583c]
mov edx, dword [ecx]
push ebx
call dword [edx + 0x10]
mov ecx, dword [0x645840]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x10]
mov ecx, dword [0x645844]
mov edx, dword [ecx]
push 0x64546c
call dword [edx + 0x10]
mov ecx, dword [0x645830]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x10]
mov ecx, dword [0x645838]
mov edx, dword [ecx]
push ebx
call dword [edx + 0x10]
mov ecx, dword [0x64587c]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x10]
mov ecx, dword [0x645880]
mov edx, dword [ecx]
push ebx
call dword [edx + 0x10]
mov ecx, dword [0x645868]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x10]
mov ecx, dword [0x64586c]
mov edx, dword [ecx]
push ebx
call dword [edx + 0x10]
mov ecx, dword [0x645870]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x10]
push 8
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 7
je 0x493958
mov ecx, eax
call fcn.005b6fc0
jmp 0x49395a
xor eax, eax
mov ecx, dword [0x645860]
mov dword [0x6457c0], eax
mov edx, dword [ecx]
push 0x82
mov dword [ebp - 4], edi
call dword [edx + pe_nt_image_headers32]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x10]
mov ecx, dword [0x6457c0]
push eax
call fcn.005b6ff0
push 8
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 8
je 0x4939a9
mov ecx, eax
call fcn.00597ba0
jmp 0x4939ab
xor eax, eax
mov ecx, dword [0x645860]
mov dword [0x6457b8], eax
mov eax, dword [ecx]
push 0x7f
mov dword [ebp - 4], edi
call dword [eax + pe_nt_image_headers32]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x10]
mov ecx, dword [0x6457b8]
push eax
call fcn.005b6ff0
push 8
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 9
je 0x4939f7
mov ecx, eax
call fcn.005b7e70
jmp 0x4939f9
xor eax, eax
mov ecx, dword [0x645860]
mov dword [0x6457bc], eax
mov eax, dword [ecx]
push 0x80
mov dword [ebp - 4], edi
call dword [eax + pe_nt_image_headers32]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x10]
mov ecx, dword [0x6457bc]
push eax
call fcn.005b6ff0
mov ecx, dword [0x645860]
mov eax, dword [ecx]
push 0xb9
call dword [eax + pe_nt_image_headers32]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x10]
push eax
call fcn.0059b080
mov ecx, dword [0x645860]
mov eax, dword [ecx]
add esp, 4
push 0xbb
call dword [eax + pe_nt_image_headers32]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x10]
push eax
call fcn.005b8100
push 0x48
call fcn.005c8833
add esp, 8
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 0xa
je 0x493a85
mov ecx, eax
call fcn.00500990
jmp 0x493a87
xor eax, eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x21c], esp
push 0x5fdd44
mov dword [ebp - 4], edi
mov dword [0x6457c8], eax
call dword [sym.imp.msvcp71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const__]
mov ecx, dword [0x6457c8]
call fcn.00500730
push 0x1c
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 0xb
je 0x493ad4
mov ecx, eax
call fcn.00516e30
jmp 0x493ad6
xor eax, eax
push 0x80
mov ecx, eax
mov dword [ebp - 4], edi
mov dword [0x6457cc], eax
call fcn.00516100
push 0x48
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 0xc
je 0x493b0e
mov ecx, eax
call fcn.0046bbc0
jmp 0x493b10
xor eax, eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x21c], esp
push 0x5fdd34
mov dword [ebp - 4], edi
mov dword [0x6457d0], eax
call dword [sym.imp.msvcp71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const__]
mov ecx, dword [0x6457d0]
call fcn.0046adf0
call fcn.00576af0
push pe_nt_image_headers32
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x21c], eax
cmp eax, ebx
mov dword [ebp - 4], 0xd
je 0x493b60
mov ecx, eax
call fcn.00493e00
mov ecx, dword [0x645adc]
mov dword [ebp - 4], edi
call fcn.00493e30
xor eax, eax
cmp word [0x6458c0], bx
mov word [ebp - 0x218], bx
mov ecx, 0x81
lea edi, [ebp - 0x216]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
jne 0x493bbd
call fcn.004929e0
mov ecx, eax
lea esi, [ecx + 1]
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x493ba0
push 0x104
push 0x6458c0
sub ecx, esi
push ecx
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
push 0x6458c0
push ebx
call fcn.0048cf40
add esp, 4
push eax
push 0x5fdd28
lea eax, [ebp - 0x218]
push 0x104
push eax
call dword [sym.imp.msvcr71.dll_int___cdecl_swprintf_wchar_t___unsigned_int__wchar_t_const__]
mov edx, dword [0x645468]
lea ecx, [ebp - 0x218]
push ecx
push edx
call dword [sym.imp.tengine.dll_int___cdecl_TD_SetWindowTextW_struct_HWND_____wchar_t_const__]
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x22c]
push ecx
lea edx, [ebp - 0x224]
push edx
push 0x5fdd18
push 0x5fdce4
call dword [sym.imp.msvcr71.dll_sscanf]
mov ecx, dword [ebp - 0x228]
xor eax, eax
mov ah, byte [ebp - 0x224]
and ecx, 0xff
add esp, 0x30
push ebx
push 0x5fdd04
mov al, byte [ebp - 0x22c]
shl eax, 8
or eax, ecx
mov ecx, dword [0x645864]
mov dword [0x645470], eax
mov edx, dword [ecx]
call dword [edx + 0x58]
cmp eax, 5
mov dword [ebp - 0x220], eax
mov esi, 0x1e
jl 0x493c6b
cmp eax, 0x96
jle 0x493c71
mov dword [ebp - 0x220], esi
mov ecx, dword [0x645864]
mov eax, dword [ecx]
push ebx
push 0x5fdcf0
call dword [eax + 0x58]
cmp eax, 5
mov dword [ebp - 0x21c], eax
jl 0x493c94
cmp eax, 0x96
jle 0x493c9a
mov dword [ebp - 0x21c], esi
mov esi, dword [sym.imp.KERNEL32.DLL_CreateEventA]
push ebx
push ebx
push ebx
push ebx
call esi
mov edi, dword [sym.imp.KERNEL32.DLL_ResetEvent]
push eax
mov dword [0x6457ec], eax
call edi
fild dword [ebp - 0x220]
mov ecx, dword [0x6457ec]
push 0x11
fdivr dword [0x5f3658]
push ebx
push ecx
push 1
call fcn.005c8914
mov ebx, dword [sym.imp.winmm.dll_timeSetEvent]
push eax
call ebx
push 0
push 0
push 0
push 0
mov dword [0x6457e4], eax
call esi
push eax
mov dword [0x6457f0], eax
call edi
fild dword [ebp - 0x21c]
mov edx, dword [0x6457f0]
push 0x11
fdivr dword [0x5f3658]
push 0
push edx
push 1
call fcn.005c8914
push eax
call ebx
mov dword [0x6457e8], eax
call dword [sym.imp.user32.dll_GetForegroundWindow]
mov ecx, dword [0x645468]
cmp ecx, eax
je 0x493db1
mov edi, dword [sym.imp.user32.dll_GetWindowThreadProcessId]
push 0
push ecx
call edi
mov esi, eax
mov eax, dword [0x645468]
push 0
push eax
call edi
mov edi, eax
cmp esi, edi
je 0x493d75
mov ebx, dword [sym.imp.user32.dll_AttachThreadInput]
push 1
push edi
push esi
call ebx
mov ecx, dword [0x645468]
push ecx
call dword [sym.imp.user32.dll_SetForegroundWindow]
push 0
push edi
push esi
mov dword [ebp - 0x21c], eax
call ebx
mov eax, dword [ebp - 0x21c]
jmp 0x493d82
mov edx, dword [0x645468]
push edx
call dword [sym.imp.user32.dll_SetForegroundWindow]
test eax, eax
jne 0x493db1
mov esi, dword [sym.imp.user32.dll_SetWindowPos]
push 3
push eax
push eax
push eax
push eax
mov eax, dword [0x645468]
push 0xffffffffffffffff
push eax
call esi
mov ecx, dword [0x645468]
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push ecx
call esi
mov edx, dword [0x645468]
push edx
call dword [sym.imp.user32.dll_IsIconic]
test eax, eax
je 0x493dcc
mov eax, dword [0x645468]
push 9
push eax
jmp 0x493dd5
mov ecx, dword [0x645468]
push 5
push ecx
call dword [sym.imp.user32.dll_ShowWindow]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.005c8895
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret