Function at 0x6271b0
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x671a7d
mov eax, dword fs:[0]
push eax
sub esp, 0xbc4
mov eax, dword [0x76c12c]
xor eax, esp
mov dword [esp + 0xbc0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x76c12c]
xor eax, esp
push eax
lea eax, [esp + 0xbd8]
mov dword fs:[0], eax
mov edi, ecx
xor ebp, ebp
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], ebp
call fcn.004086c0
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [esi + 0x28], ebp
push esi
seta bl
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test bl, bl
je 0x628197
lea eax, [esp + 0x2c]
mov dword [esp + 0x128], eax
jmp 0x62722b
mov edi, dword [esp + 0x1c]
lea ecx, [esp + 0x24]
push ecx
mov esi, 6
call fcn.004086c0
push eax
call fcn.005cd4a0
mov dword [esp + 0xbe0], ebp
mov eax, dword [esp + 0x28]
dec eax
cmp eax, 8
ja case.0x627255.5
jmp dword [eax*4 + 0x6281c0]
call fcn.0040e9d0
mov eax, dword [eax + 4]
cmp eax, 1
je case.0x627255.5
cmp eax, 2
je case.0x627255.5
lea edx, [esp + 0x98]
push edx
lea eax, [esp + 0x28]
push eax
call fcn.0040c9a0
mov byte [esp + 0xbe0], 1
mov ebx, dword [esp + 0x18]
or ebx, 1
mov ecx, eax
mov dword [esp + 0x18], ebx
call fcn.00554723
cmp eax, 3
jne 0x627312
lea ecx, [esp + 0xe8]
push ecx
lea edx, [esp + 0x28]
push edx
call fcn.0040c9a0
mov dword [esp + 0xbe0], 2
or ebx, 2
push 2
mov ecx, eax
mov dword [esp + 0x1c], ebx
call fcn.0055472c
cmp dword [eax + 8], esi
jne 0x627312
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.0040c9a0
mov dword [esp + 0xbe0], 3
or ebx, 4
push 2
mov ecx, eax
mov dword [esp + 0x1c], ebx
call fcn.0055472c
mov edx, dword [eax]
cmp byte [edx], 1
mov byte [esp + 0x17], 1
je 0x627317
mov byte [esp + 0x17], 0
mov dword [esp + 0xbe0], 2
test bl, 4
je 0x627387
and ebx, 0xfffffffb
mov dword [esp + 0x18], ebx
mov dword [esp + 0xbe0], 2
mov esi, dword [esp + 0xa8]
cmp esi, ebp
je 0x627372
mov edi, dword [esp + 0xac]
cmp esi, edi
je 0x627365
nop
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x627350
mov esi, dword [esp + 0xa8]
push esi
call fcn.0058d051
mov edi, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xac], ebp
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xbe0], 1
test bl, 2
je 0x6273f7
and ebx, 0xfffffffd
mov dword [esp + 0x18], ebx
mov dword [esp + 0xbe0], 1
mov esi, dword [esp + 0xe8]
cmp esi, ebp
je 0x6273e2
mov edi, dword [esp + 0xec]
cmp esi, edi
je 0x6273d5
nop
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x6273c0
mov esi, dword [esp + 0xe8]
push esi
call fcn.0058d051
mov edi, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0xe8], ebp
mov dword [esp + 0xec], ebp
mov dword [esp + 0xf0], ebp
mov dword [esp + 0xbe0], ebp
test bl, 1
je 0x62745f
and ebx, 0xfffffffe
mov dword [esp + 0x18], ebx
mov byte [esp + 0xbe0], 0
mov esi, dword [esp + 0x98]
cmp esi, ebp
je 0x62744a
mov edi, dword [esp + 0x9c]
cmp esi, edi
je 0x62743d
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x627428
mov esi, dword [esp + 0x98]
push esi
call fcn.0058d051
mov edi, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xa0], ebp
cmp byte [esp + 0x17], 0
push ebp
je 0x627479
mov eax, dword [edi + 0x13b8]
mov edx, dword [eax + 0x4c]
lea ecx, [edi + 0x13b8]
call edx
push ebp
mov eax, dword [edi + 0xf30]
mov edx, dword [eax + 0x4c]
lea ecx, [edi + 0xf30]
call edx
mov ecx, edi
call fcn.00624ab0
call fcn.0040b0d0
mov edx, dword [eax]
mov edx, dword [edx + 0xc]
push 0x9f
lea ecx, [esp + 0x130]
push ecx
mov ecx, eax
call edx
mov byte [esp + 0xbe0], 7
lea eax, [esp + 0xb8]
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.0040c9a0
mov byte [esp + 0xbe0], 8
mov esi, 8
or ebx, esi
push ebp
mov ecx, eax
mov dword [esp + 0x1c], ebx
call fcn.0055472c
cmp dword [eax + 8], 3
jne 0x62754b
lea edx, [esp + 0x108]
push edx
lea eax, [esp + 0x28]
push eax
call fcn.0040c9a0
mov dword [esp + 0xbe0], 9
or ebx, 0x10
push ebp
mov ecx, eax
mov dword [esp + 0x1c], ebx
call fcn.0055472c
lea ecx, [esp + 0x1b8]
push ecx
mov ecx, eax
call fcn.00410ef0
mov dword [esp + 0xbe0], 0xa
push 0x6dcc00
or ebx, 0x20
push eax
mov dword [esp + 0x20], ebx
call fcn.00410fb0
add esp, 8
mov byte [esp + 0x17], 1
test al, al
jne 0x627550
mov byte [esp + 0x17], 0
mov dword [esp + 0xbe0], 9
test bl, 0x20
je 0x62759c
and ebx, 0xffffffdf
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x1cc], esi
jb 0x627580
mov edx, dword [esp + 0x1b8]
push edx
call fcn.0058d051
add esp, 4
xor eax, eax
mov dword [esp + 0x1cc], 7
mov dword [esp + 0x1c8], ebp
mov word [esp + 0x1b8], ax
mov dword [esp + 0xbe0], esi
test bl, 0x10
je 0x627603
and ebx, 0xffffffef
mov dword [esp + 0x18], ebx
mov dword [esp + 0xbe0], 8
mov esi, dword [esp + 0x108]
cmp esi, ebp
je 0x6275ee
mov edi, dword [esp + 0x10c]
cmp esi, edi
je 0x6275e5
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x6275d0
mov esi, dword [esp + 0x108]
push esi
call fcn.0058d051
add esp, 4
mov dword [esp + 0x108], ebp
mov dword [esp + 0x10c], ebp
mov dword [esp + 0x110], ebp
mov dword [esp + 0xbe0], 7
test bl, 8
je 0x62766b
and ebx, 0xfffffff7
mov dword [esp + 0x18], ebx
mov byte [esp + 0xbe0], 7
mov esi, dword [esp + 0xb8]
cmp esi, ebp
je 0x627656
mov edi, dword [esp + 0xbc]
cmp esi, edi
je 0x62764d
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x627638
mov esi, dword [esp + 0xb8]
push esi
call fcn.0058d051
add esp, 4
mov dword [esp + 0xb8], ebp
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xc0], ebp
cmp byte [esp + 0x17], 0
je 0x627737
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x28]
push edx
call fcn.0040c9a0
mov byte [esp + 0xbe0], 0xd
push ebp
mov ecx, eax
call fcn.0055472c
lea ecx, [esp + 0x180]
push ecx
mov ecx, eax
call fcn.00410ef0
mov byte [esp + 0xbe0], 0xe
push eax
lea ecx, [esp + 0x130]
call fcn.00401690
mov byte [esp + 0xbe0], 0xd
cmp dword [esp + 0x194], 8
jb 0x6276db
mov edx, dword [esp + 0x180]
push edx
call fcn.0058d051
add esp, 4
xor eax, eax
mov dword [esp + 0x194], 7
mov dword [esp + 0x190], ebp
mov word [esp + 0x180], ax
mov byte [esp + 0xbe0], 7
mov esi, dword [esp + 0x68]
cmp esi, ebp
je 0x62772b
mov edi, dword [esp + 0x6c]
cmp esi, edi
je 0x627722
nop
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x627710
mov esi, dword [esp + 0x68]
push esi
call fcn.0058d051
add esp, 4
mov dword [esp + 0x68], ebp
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x70], ebp
lea ecx, [esp + 0x6d4]
push ecx
call fcn.005e6d40
mov byte [esp + 0xbe0], 0x10
call fcn.0040b0d0
mov esi, eax
call fcn.0040b0d0
mov edx, dword [esi]
mov edx, dword [edx + 0xc]
push ebp
sub esp, 0x1c
mov edi, eax
mov eax, esp
mov dword [esp + 0x80], esp
push 0xb1
push eax
mov ecx, esi
call edx
mov byte [esp + 0xc00], 0x11
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0xbf
push ecx
mov ecx, edi
call edx
mov byte [esp + 0xc1c], 0x12
lea eax, [esp + 0x114]
push eax
lea ecx, [esp + 0x64]
push ecx
call fcn.0040c9a0
mov byte [esp + 0xc1c], 0x13
push 1
mov ecx, eax
call fcn.0055472c
mov edx, dword [eax]
mov eax, dword [edx]
mov ecx, dword [esp + 0x168]
mov ebx, 8
cmp dword [esp + 0x17c], ebx
jae 0x6277e4
lea ecx, [esp + 0x168]
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x78], esp
push eax
push ecx
push edx
call fcn.0055e800
add esp, 0xc
mov byte [esp + 0xc38], 0x14
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov byte [esp + 0xc3c], 0x15
lea ecx, [esp + 0xbb8]
call fcn.005e6870
mov byte [esp + 0xbe0], 0x10
mov esi, dword [esp + 0xd8]
cmp esi, ebp
je 0x62785e
mov edi, dword [esp + 0xdc]
cmp esi, edi
je 0x627855
lea esp, [esp]
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x627840
mov esi, dword [esp + 0xd8]
push esi
call fcn.0058d051
add esp, 4
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0xa4
mov dword [esp + 0xdc], ebp
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], ebp
call edi
push 0xa0
mov si, ax
call edi
push 0x11
and si, ax
call edi
and ax, si
mov ecx, 0x8000
test cx, ax
je 0x6278a5
push ebp
call dword [sym.imp.CrashRpt1300.dll_Ordinal_22]
mov ecx, dword [esp + 0x1c]
push ebp
call fcn.006247b0
mov byte [esp + 0xbe0], 7
lea edx, [esp + 0x6d4]
push edx
call fcn.005e6c20
mov byte [esp + 0xbe0], 0
cmp dword [esp + 0x140], ebx
jb 0x6278e5
mov eax, dword [esp + 0x12c]
push eax
call fcn.0058d051
add esp, 4
xor ecx, ecx
mov dword [esp + 0x140], 7
mov dword [esp + 0x13c], ebp
mov word [esp + 0x12c], cx
jmp case.0x627255.5
push ebp
mov ecx, edi
call fcn.006247b0
jmp case.0x627255.5
push ebp
call fcn.00556c50
add esp, 4
push edi
mov ecx, 0x774574
call fcn.00554475
mov ecx, dword [edi + 0x1f2c]
cmp ecx, ebp
je 0x627937
call dword [sym.imp.QtGui4.dll_public:_bool___thiscall_QWidget::close_void_]
mov edx, dword [edi + 0x13b8]
mov eax, dword [edx + 0x10]
lea ecx, [edi + 0x13b8]
call eax
mov byte [edi + 0x1f36], 1
jmp case.0x627255.5
lea ecx, [esp + 0xf8]
push ecx
lea edx, [esp + 0x28]
push edx
call fcn.0040c9a0
mov byte [esp + 0xbe0], 0x17
mov ebx, dword [esp + 0x18]
or ebx, 0x40
mov ecx, eax
mov dword [esp + 0x18], ebx
call fcn.00554723
cmp eax, 1
jne 0x6279be
lea eax, [esp + 0x118]
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.0040c9a0
mov dword [esp + 0xbe0], 0x18
or ebx, 0x80
push ebp
mov ecx, eax
mov dword [esp + 0x1c], ebx
call fcn.0055472c
mov byte [esp + 0x17], 1
cmp dword [eax + 8], esi
je 0x6279c3
mov byte [esp + 0x17], 0
mov eax, 0x17
mov dword [esp + 0xbe0], eax
test bl, bl
jns 0x627a37
and ebx, 0xffffff7f
mov dword [esp + 0x18], ebx
mov dword [esp + 0xbe0], eax
mov esi, dword [esp + 0x118]
cmp esi, ebp
je 0x627a22
mov edi, dword [esp + 0x11c]
cmp esi, edi
je 0x627a15
lea ebx, [ebx]
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x627a00
mov esi, dword [esp + 0x118]
push esi
call fcn.0058d051
mov edi, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0x118], ebp
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x120], ebp
mov dword [esp + 0xbe0], ebp
test bl, 0x40
je 0x627a9f
and ebx, 0xffffffbf
mov dword [esp + 0x18], ebx
mov byte [esp + 0xbe0], 0
mov esi, dword [esp + 0xf8]
cmp esi, ebp
je 0x627a8a
mov edi, dword [esp + 0xfc]
cmp esi, edi
je 0x627a7d
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x627a68
mov esi, dword [esp + 0xf8]
push esi
call fcn.0058d051
mov edi, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0xf8], ebp
mov dword [esp + 0xfc], ebp
mov dword [esp + 0x100], ebp
cmp byte [esp + 0x17], 0
je case.0x627255.5
lea edx, [esp + 0xc8]
push edx
lea eax, [esp + 0x28]
push eax
call fcn.0040c9a0
mov byte [esp + 0xbe0], 0x1b
push ebp
mov ecx, eax
call fcn.0055472c
mov ecx, dword [eax]
mov bl, byte [ecx]
mov edx, dword [edi + 0x13b8]
mov edx, dword [edx + 0x40]
test bl, bl
sete al
lea ecx, [edi + 0x13b8]
movzx eax, al
push eax
call edx
mov eax, dword [edi + 0x1f28]
cmp eax, ebp
je 0x627b0c
mov ecx, dword [eax + 0x130]
test bl, bl
je 0x627b06
call dword [sym.imp.QtGui4.dll_public:_void___thiscall_QSystemTrayIcon::hide_void_]
jmp 0x627b0c
call dword [sym.imp.QtGui4.dll_public:_void___thiscall_QSystemTrayIcon::show_void_]
mov byte [esp + 0xbe0], 0
mov esi, dword [esp + 0xc8]
cmp esi, ebp
je 0x627b4e
mov edi, dword [esp + 0xcc]
cmp esi, edi
je 0x627b45
lea ebx, [ebx]
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x627b30
mov esi, dword [esp + 0xc8]
push esi
call fcn.0058d051
add esp, 4
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xd0], ebp
jmp case.0x627255.5
lea eax, [esp + 0x1d4]
push eax
call fcn.005e6d40
mov byte [esp + 0xbe0], 0x1d
call fcn.0040b0d0
mov esi, eax
call fcn.0040b0d0
mov edi, eax
call fcn.0040b0d0
mov ecx, dword [esi]
push 5
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x40], esp
push 0xbd
push edx
mov ebp, eax
mov eax, dword [ecx + 0x18]
push esi
call eax
mov byte [esp + 0xc0c], 0x1e
mov ecx, dword [edi]
mov eax, dword [ecx + 0x18]
sub esp, 0x10
mov edx, esp
mov dword [esp + 0xa0], esp
push 0xbf
push edx
push edi
call eax
mov byte [esp + 0xc28], 0x1f
mov ecx, dword [ebp]
mov eax, dword [ecx + 0x18]
sub esp, 0x10
mov edx, esp
mov dword [esp + 0xb8], esp
push 0xbc
push edx
push ebp
call eax
add esp, 0xc
mov byte [esp + 0xc38], 0x20
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx + 0x13b8]
mov eax, dword [edx + 0x34]
add ecx, 0x13b8
call eax
push eax
mov byte [esp + 0xc3c], 0x1d
lea ecx, [esp + 0x6b8]
call fcn.005e6870
mov edi, eax
call fcn.0040e680
cmp dword [esp + 0x6c0], 5
mov esi, eax
jne 0x627c55
mov eax, dword [esp + 0x660]
test eax, eax
je 0x627c55
mov ecx, dword [eax + 0xec]
call dword [sym.imp.QtGui4.dll_public:_bool___thiscall_QAbstractButton::isChecked_void_const]
mov byte [esp + 0x3c], al
jmp 0x627c5a
mov byte [esp + 0x3c], 0
mov edx, dword [esi]
mov eax, dword [esp + 0x3c]
mov edx, dword [edx + 0x44]
push eax
mov ecx, esi
call edx
call fcn.0040e510
mov byte [eax + 0x18c], 0
cmp edi, 1
jne 0x627c81
mov dword [eax + 0x190], edi
jmp 0x627c8b
mov dword [eax + 0x190], 0
mov byte [esp + 0xbe0], 0
lea eax, [esp + 0x1d4]
push eax
call fcn.005e6c20
xor ebp, ebp
jmp case.0x627255.5
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x28]
push edx
call fcn.0040c9a0
mov byte [esp + 0xbe0], 0x21
push 4
lea ecx, [esp + 0x44]
call fcn.00555181
mov byte [esp + 0xbe0], 0x22
push ebp
lea ecx, [esp + 0x54]
call fcn.0055472c
lea ecx, [esp + 0x148]
push ecx
mov ecx, eax
call fcn.00410ef0
mov byte [esp + 0xbe0], 0x23
push 1
lea ecx, [esp + 0x54]
call fcn.0055472c
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x3c], esp
push edx
mov ecx, eax
call fcn.00410ef0
mov byte [esp + 0xbfc], 0x24
push ebp
lea ecx, [esp + 0x60]
call fcn.0055472c
mov byte [esp + 0xbfc], 0x23
mov ecx, eax
call fcn.00555696
push 2
lea ecx, [esp + 0x54]
call fcn.0055472c
mov eax, dword [eax]
fld qword [eax]
call fcn.005923b0
push eax
push 1
lea ecx, [esp + 0x48]
call fcn.0055472c
mov ecx, eax
call fcn.005555e4
push 3
lea ecx, [esp + 0x54]
call fcn.0055472c
mov ecx, dword [eax]
fld qword [ecx]
call fcn.005923b0
push eax
push 2
lea ecx, [esp + 0x48]
call fcn.0055472c
mov ecx, eax
call fcn.005555e4
push 3
lea ecx, [esp + 0x44]
call fcn.0055472c
mov ebx, dword [esp + 0x1c]
mov edx, dword [ebx + 0x13b8]
mov esi, eax
mov eax, dword [edx + 0x34]
lea ecx, [ebx + 0x13b8]
call eax
push eax
mov ecx, esi
call fcn.005555e4
sub esp, 0x1c
mov ecx, esp
lea esi, [esp + 0x5c]
mov dword [esp + 0x3c], esp
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], ebp
xor edx, edx
push 0xffffffffffffffff
push ebp
lea eax, [esp + 0x16c]
push eax
mov word [ecx], dx
call fcn.004018e0
mov byte [esp + 0xbfc], 0x25
call fcn.0040ed50
push ebp
mov byte [esp + 0xc00], 0x23
call fcn.005cbca0
mov esi, eax
cmp esi, ebp
je 0x627e88
push 0xc
call fcn.0058d3f0
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0xbe0], 0x26
cmp eax, ebp
je 0x627e24
mov dword [eax], vtable.EventTSpecificFunctor_class_HomeControl_.0
mov dword [eax + 8], ebx
mov dword [eax + 4], 0x61c200
jmp 0x627e26
xor eax, eax
mov byte [esp + 0xbe0], 0x23
push eax
lea ecx, [esi + 8]
call fcn.005544e5
push 0xc
call fcn.0058d3f0
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0xbe0], 0x27
cmp eax, ebp
je 0x627e63
mov dword [eax], vtable.EventTSpecificFunctor_class_HomeControl_.0
mov dword [eax + 8], ebx
mov dword [eax + 4], 0x61c010
jmp 0x627e65
xor eax, eax
mov byte [esp + 0xbe0], 0x23
push eax
lea ecx, [esi + 0x2c]
call fcn.005544e5
mov edx, dword [ebx + 0x13b8]
mov eax, dword [edx + 0x40]
push ebp
lea ecx, [ebx + 0x13b8]
call eax
mov byte [esp + 0xbe0], 0x22
cmp dword [esp + 0x15c], 8
jb 0x627eaa
mov ecx, dword [esp + 0x148]
push ecx
call fcn.0058d051
add esp, 4
xor edx, edx
mov dword [esp + 0x15c], 7
mov dword [esp + 0x158], ebp
mov word [esp + 0x148], dx
mov byte [esp + 0xbe0], 0x21
mov esi, dword [esp + 0x40]
cmp esi, ebp
je 0x627efb
mov edi, dword [esp + 0x44]
cmp esi, edi
je 0x627ef2
mov edi, edi
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x627ee0
mov esi, dword [esp + 0x40]
push esi
call fcn.0058d051
add esp, 4
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x48], ebp
mov byte [esp + 0xbe0], 0
mov esi, dword [esp + 0x50]
cmp esi, ebp
je 0x627f3b
mov edi, dword [esp + 0x54]
cmp esi, edi
je 0x627f32
nop
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x627f20
mov esi, dword [esp + 0x50]
push esi
call fcn.0058d051
add esp, 4
mov dword [esp + 0x50], ebp
mov dword [esp + 0x54], ebp
mov dword [esp + 0x58], ebp
jmp case.0x627255.5
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.0040c9a0
mov byte [esp + 0xbe0], 0x2a
lea edx, [esp + 0x19c]
push 0xa
push edx
call fcn.00560cd0
mov byte [esp + 0xbe8], 0x2b
push eax
lea eax, [esp + 0x170]
push str.notification_
push eax
call fcn.00404430
add esp, 0x14
mov byte [esp + 0xbe0], 0x2d
cmp dword [esp + 0x1b0], 8
jb 0x627fb5
mov ecx, dword [esp + 0x19c]
push ecx
call fcn.0058d051
add esp, 4
lea eax, [esp + 0x78]
push eax
lea ecx, [esp + 0x28]
xor edx, edx
mov edi, 7
push ecx
mov dword [esp + 0x1b8], edi
mov dword [esp + 0x1b4], ebp
mov word [esp + 0x1a4], dx
call fcn.0040c9a0
mov esi, eax
mov byte [esp + 0xbe0], 0x2e
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebp
lea eax, [esp + 0x188]
xor edx, edx
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebp
push eax
mov word [ecx], dx
call fcn.004018e0
mov byte [esp + 0xbfc], 0x2f
call fcn.0040ed50
push 2
mov byte [esp + 0xc00], 0x2e
call fcn.005cbca0
mov byte [esp + 0xbe0], 0x2d
mov esi, dword [esp + 0x78]
cmp esi, ebp
je 0x628063
mov edi, dword [esp + 0x7c]
cmp esi, edi
je 0x628055
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x628043
mov esi, dword [esp + 0x78]
push esi
call fcn.0058d051
add esp, 4
mov edi, 7
mov dword [esp + 0x78], ebp
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x80], ebp
mov byte [esp + 0xbe0], 0x2a
cmp dword [esp + 0x178], 8
jb 0x628094
mov ecx, dword [esp + 0x164]
push ecx
call fcn.0058d051
add esp, 4
xor edx, edx
mov dword [esp + 0x178], edi
mov dword [esp + 0x174], ebp
mov word [esp + 0x164], dx
mov byte [esp + 0xbe0], dl
mov esi, dword [esp + 0x88]
cmp esi, ebp
je 0x6280ee
mov edi, dword [esp + 0x8c]
cmp esi, edi
je 0x6280e5
lea esp, [esp]
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x6280d0
mov esi, dword [esp + 0x88]
push esi
call fcn.0058d051
add esp, 4
mov dword [esp + 0x88], ebp
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x90], ebp
jmp case.0x627255.5
mov ecx, dword [esp + 0x24]
cmp ecx, ebp
je case.0x627255.5
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0x2c]
push edx
lea edx, [esp + 0x28]
push edx
call eax
mov eax, dword [esp + 0x24]
cmp eax, ebp
je case.0x627255.5
push eax
call fcn.0058d051
add esp, 4
mov dword [esp + 0xbe0], 0xffffffff
mov esi, dword [esp + 0x2c]
cmp esi, ebp
je 0x62816b
mov edi, dword [esp + 0x30]
cmp esi, edi
je 0x628162
lea ebx, [ebx]
mov ecx, esi
call fcn.00555355
add esi, 0x10
cmp esi, edi
jne 0x628150
mov esi, dword [esp + 0x2c]
push esi
call fcn.0058d051
add esp, 4
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
call fcn.004086c0
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [esi + 0x28]
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp edi, ebp
ja 0x627227
mov ecx, dword [esp + 0xbd8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xbc0]
xor ecx, esp
call fcn.0058cf08
add esp, 0xbd0
ret