Function at 0x4259c7
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x574910
mov eax, dword fs:[0]
push eax
sub esp, 0x1a4
mov eax, dword [0x5b4ef4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x124], edx
mov byte [eax], 0
mov esi, dword [edi + 0x1b8]
mov dword [ebp - 0x120], eax
cmp esi, dword [edi + 0x1bc]
je 0x42570b
nop dword [eax]
mov ecx, dword [esi]
lea edx, [ebp - 0x12c]
push edx
mov edx, dword [ebp - 0x124]
push edx
push dword [ebp + 0xc]
mov dword [ebp - 0x12c], 0
mov eax, dword [ecx]
push dword [ebp + 8]
mov eax, dword [eax]
call eax
cmp dword [ebp - 0x12c], 0
mov ecx, eax
je 0x4256fa
cmp dword [ebp + 8], 0x200
jne 0x42573c
add esi, 4
cmp esi, dword [edi + 0x1bc]
jne 0x4256c0
mov edx, dword [ebp - 0x124]
mov ecx, dword [ebp + 8]
cmp ecx, 0x10d
ja 0x425bf6
je 0x425b99
lea eax, [ecx - 5]
cmp eax, 0xfd
ja case.0x4265e2.3
movzx eax, byte [eax + 0x426f24]
jmp dword [eax*4 + 0x426eec]
mov eax, dword [ebp - 0x120]
mov byte [eax], 1
mov eax, ecx
jmp 0x426d58
mov ecx, dword [edi + 0xf0]
test ecx, ecx
je 0x42576f
push 0
push 0
push ecx
mov dword [esp], 0
push 0
push 0
push 0
push 0x10
call fcn.0042d190
mov ecx, dword [edi + 0xf4]
test ecx, ecx
je 0x425792
push 0
push 0
push ecx
mov dword [esp], 0
push 0
push 0
push 0
push 0x13
call fcn.0042d190
mov ecx, dword [edi + 0x104]
test ecx, ecx
je 0x4257b5
push 0
push 0
push ecx
mov dword [esp], 0
push 0
push 0
push 0
push 0x13
call fcn.0042d190
cmp byte [edi + 0x21], 0
jne case.0x4265e2.3
push 0
mov ecx, edi
call fcn.00427440
push 4
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je case.0x4265e2.3
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp case.0x4265e2.3
mov eax, dword [ebp - 0x120]
mov byte [eax], 1
mov eax, 1
jmp 0x426d58
mov ecx, edi
call fcn.004279a0
mov eax, dword [ebp - 0x120]
mov byte [eax], 1
jmp case.0x4265e2.3
mov ecx, dword [edi + 0xe8]
test ecx, ecx
je 0x425832
push 0
push 0
push ecx
mov dword [esp], 0
push 0
push 0
push 0
push 0x26
call fcn.0042d190
mov ecx, dword [edi + 0x1c]
test ecx, ecx
je 0x42583e
mov eax, dword [ecx]
call dword [eax + 0x24]
mov eax, dword [ebp + 0xc]
cmp eax, 2
jne 0x42584a
push 1
jmp 0x42584f
test eax, eax
jne 0x425801
push eax
lea ecx, [edi + 0x208]
call fcn.00460090
mov eax, dword [ebp - 0x120]
mov byte [eax], 1
jmp case.0x4265e2.3
mov eax, dword [edi + 0x104]
test eax, eax
mov ecx, dword [edi + 0xf4]
cmovne ecx, eax
movsx esi, dx
mov eax, edx
mov dword [ebp - 0x130], ecx
shr eax, 0x10
cwde
mov dword [ebp - 0x134], eax
mov dword [edi + 0xfc], esi
mov dword [edi + 0x100], eax
test ecx, ecx
je case.0x4265e2.3
cmp byte [ecx + 0x8f], 0
je case.0x4265e2.3
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov ecx, dword [ebp - 0x134]
sub esp, 8
mov eax, esp
mov byte [edi + 0x113], 0
push ecx
mov dword [esp], 0
push 0
mov dword [eax], esi
mov esi, dword [ebp - 0x124]
push esi
push dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x130]
push 0x13
call fcn.0042d190
mov dword [edi + 0xf4], 0
mov dword [edi + 0x104], 0
jmp case.0x4265e2.3
push edx
push dword [ebp + 0xc]
mov ecx, edi
push 0
call fcn.004272d0
mov esi, dword [ebp - 0x124]
movsx eax, si
mov dword [ebp - 0x18], eax
shr esi, 0x10
movsx eax, si
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [edi + 0xf4], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [edi + 0xfc], eax
mov dword [edi + 0x100], ecx
je case.0x4265e2.3
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x18]
sub esp, 8
mov ecx, esp
mov byte [edi + 0x113], 0
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov ecx, dword [edi + 0xf4]
push ecx
mov dword [esp], 0
push 0
push ecx
push dword [ebp + 0xc]
push 1
call fcn.0042d190
mov dword [edi + 0xf4], 0
jmp case.0x4265e2.3
mov ecx, dword [edi + 0xe8]
test ecx, ecx
je case.0x4265e2.3
mov eax, dword [ebp + 0xc]
push 0
push 0
push ecx
mov dword [esp], 0
push eax
push edx
push eax
push 0xa
call fcn.0042d190
jmp case.0x4265e2.3
mov ecx, dword [edi + 0xe8]
test ecx, ecx
je case.0x4265e2.3
mov eax, dword [ebp + 0xc]
cmp eax, 9
jne 0x425a6c
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
test al, al
je 0x425a49
mov ecx, dword [edi + 0xe8]
mov eax, dword [ecx]
mov eax, dword [eax + 0x9c]
call eax
test al, al
je 0x425a49
push 0
push 0x5b7828
push 0x5b780c
push 0
push dword [edi + 0xe8]
call sub.msvcrt.dll___RTDynamicCast
add esp, 0x14
test eax, eax
je 0x425a49
push 0
push 0x5b7828
push 0x5b780c
push 0
push dword [edi + 0xe8]
call sub.msvcrt.dll___RTDynamicCast
add esp, 0x14
cmp byte [eax + 0x565], 0
jne case.0x4265e2.3
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
mov ecx, edi
setns al
movzx eax, al
push eax
call fcn.004275d0
mov eax, 1
jmp 0x426d58
push 0
push 0
push ecx
mov dword [esp], 0
push eax
push edx
push eax
push 8
mov dword [edi + 0xf8], ecx
call fcn.0042d190
jmp case.0x4265e2.3
mov ecx, dword [edi + 0xf8]
test ecx, ecx
je case.0x4265e2.3
mov eax, dword [ebp + 0xc]
push 0
push 0
push ecx
mov dword [esp], 0
push eax
push edx
push eax
push 9
call fcn.0042d190
mov dword [edi + 0xf8], 0
jmp case.0x4265e2.3
cmp dx, 1
jne case.0x4265e2.3
cmp dword [edi + 0xf4], 0
jne 0x425801
cmp dword [edi + 0x104], 0
jne 0x425801
lea eax, [ebp - 0x140]
xorps xmm0, xmm0
push eax
movlpd qword [ebp - 0x140], xmm0
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x140]
push eax
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x140]
push eax
mov dword [edi + 0xfc], ecx
push ecx
mov ecx, edi
mov dword [edi + 0x100], eax
call fcn.00427810
test eax, eax
je case.0x4265e2.3
mov ecx, dword [ebp - 0x140]
sub esp, 8
mov esi, dword [ebp - 0x124]
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x13c]
push ecx
mov dword [esp], 0
push 0
push esi
push dword [ebp + 0xc]
mov dword [edx + 4], ecx
mov ecx, eax
push 0x28
call fcn.0042d190
mov eax, dword [ebp - 0x120]
mov byte [eax], 1
jmp case.0x4265e2.3
test edx, edx
je 0x425801
push edx
push dword [ebp + 0xc]
lea eax, [ecx + 0x2000]
push eax
push dword [edx]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x426d58
mov esi, dword [edi + 0xe8]
test esi, esi
je case.0x4265e2.3
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x64], 0x32
mov word [ebp - 0x50], ax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x64]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0xf0]
jmp case.0x4265e2.3
cmp ecx, 0x240
ja 0x426433
je 0x426178
lea eax, [ecx - 0x10e]
cmp eax, 0xfc
ja case.0x4265e2.3
movzx eax, byte [eax + 0x42704c]
jmp dword [eax*4 + 0x427024]
cmp dword [edi + 0x104], 0
jne case.0x4265e2.3
cmp byte [edi + 0x112], 0
jne 0x425c88
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x18], eax
mov eax, dword [edi + 0xb4]
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x1c], 3
test eax, eax
jne 0x425c64
mov dword [ebp - 0x14], 0x190
jmp 0x425c77
push 0
push 3
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [edi + 0x112], 1
mov esi, dword [ebp - 0x124]
mov eax, esi
shr eax, 0x10
cwde
push esi
push dword [ebp + 0xc]
movsx ecx, si
mov dword [ebp - 0x14], eax
mov dword [edi + 0x100], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ecx
mov dword [edi + 0xfc], ecx
mov ecx, edi
push eax
call fcn.00427180
test al, al
je case.0x4265e2.3
cmp dword [edi + 0xf4], 0
je 0x425cf9
mov ecx, dword [ebp - 0x18]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
push ecx
mov dword [esp], 0
push 0
push esi
push dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 0xf4]
push 0xe
call fcn.0042d190
jmp case.0x4265e2.3
cmp dword [edi + 0xec], 0
je case.0x4265e2.3
mov ecx, dword [ebp - 0x18]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
push ecx
mov dword [esp], 0
push 0
push esi
push dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 0xec]
push 0xe
call fcn.0042d190
jmp case.0x4265e2.3
cmp dword [edi + 0x104], 0
jne case.0x4265e2.3
cmp byte [edi + 0x21], 0
jne 0x425d52
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetFocus]
mov esi, dword [ebp - 0x124]
mov eax, esi
shr eax, 0x10
cwde
movsx ecx, si
push eax
mov dword [ebp - 0x134], ecx
mov dword [edi + 0xfc], ecx
push ecx
mov ecx, edi
mov dword [ebp - 0x130], eax
mov dword [edi + 0x100], eax
call fcn.00427810
mov dword [ebp - 0x12c], eax
test eax, eax
je case.0x4265e2.3
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx]
call edx
cmp eax, edi
jne case.0x4265e2.3
mov ecx, dword [ebp - 0x12c]
mov dword [edi + 0xf4], ecx
mov eax, dword [ecx]
call dword [eax + 0xb8]
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetCapture]
mov ecx, dword [ebp - 0x134]
sub esp, 8
mov eax, esp
mov byte [edi + 0x113], 1
mov dword [eax], ecx
mov ecx, dword [ebp - 0x130]
push ecx
mov dword [esp], 0
push 0
push esi
push dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x12c]
push 0x12
call fcn.0042d190
jmp case.0x4265e2.3
cmp dword [edi + 0x104], 0
jne case.0x4265e2.3
cmp byte [edi + 0x21], 0
jne 0x425e19
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp + 8]
mov esi, dword [ebp - 0x124]
mov eax, esi
shr eax, 0x10
movsx edx, si
cwde
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], eax
cmp ecx, 0xa4
jne 0x425e49
lea eax, [ebp - 0x18]
push eax
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
push eax
push edx
mov ecx, edi
mov dword [edi + 0xfc], edx
mov dword [edi + 0x100], eax
call fcn.00427810
mov dword [ebp - 0x12c], eax
test eax, eax
je case.0x4265e2.3
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx]
call edx
cmp eax, edi
jne case.0x4265e2.3
mov ecx, dword [ebp - 0x12c]
mov dword [edi + 0xf4], ecx
mov eax, dword [ecx]
call dword [eax + 0xb8]
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x18]
sub esp, 8
mov ecx, esp
mov byte [edi + 0x113], 1
push ecx
mov dword [esp], 0
push 0
push esi
push dword [ebp + 0xc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x12c]
push 0x14
call fcn.0042d190
jmp case.0x4265e2.3
cmp dword [edi + 0x104], 0
jne case.0x4265e2.3
cmp byte [edi + 0x21], 0
jne 0x425eec
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetFocus]
mov esi, dword [ebp - 0x124]
mov eax, esi
shr eax, 0x10
cwde
movsx ecx, si
push eax
mov dword [ebp - 0x134], ecx
mov dword [edi + 0xfc], ecx
push ecx
mov ecx, edi
mov dword [ebp - 0x130], eax
mov dword [edi + 0x100], eax
call fcn.00427810
mov dword [ebp - 0x12c], eax
test eax, eax
je case.0x4265e2.3
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx]
call edx
cmp eax, edi
jne case.0x4265e2.3
mov eax, dword [ebp - 0x12c]
push dword [edi + 0x10]
mov dword [edi + 0xf4], eax
call dword [sym.imp.USER32.dll_SetCapture]
mov ecx, dword [ebp - 0x134]
sub esp, 8
mov eax, esp
mov byte [edi + 0x113], 1
mov dword [eax], ecx
mov ecx, dword [ebp - 0x130]
push ecx
mov dword [esp], 0
push 0
push esi
push dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x12c]
push 0
call fcn.0042d190
jmp case.0x4265e2.3
push edx
push dword [ebp + 0xc]
mov ecx, edi
push 0
call fcn.004272d0
mov esi, dword [ebp - 0x124]
mov eax, esi
shr eax, 0x10
movsx ecx, si
cwde
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x130], eax
mov dword [edi + 0xfc], ecx
mov dword [edi + 0x100], eax
call dword [sym.imp.USER32.dll_ReleaseCapture]
cmp dword [edi + 0xf4], 0
mov byte [edi + 0x113], 0
je case.0x4265e2.3
mov ecx, dword [ebp - 0x134]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0x130]
push ecx
mov dword [esp], 0
push 0
push esi
push dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 0xf4]
push 0x13
call fcn.0042d190
mov dword [edi + 0xf4], 0
jmp case.0x4265e2.3
mov eax, edx
movsx esi, dx
shr eax, 0x10
cwde
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], eax
cmp ecx, 0xa5
jne 0x426044
lea eax, [ebp - 0x18]
push eax
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov dword [edi + 0xfc], esi
mov dword [edi + 0x100], eax
call dword [sym.imp.USER32.dll_ReleaseCapture]
cmp dword [edi + 0xf4], 0
mov byte [edi + 0x113], 0
je case.0x4265e2.3
mov eax, dword [ebp - 0x18]
sub esp, 8
mov esi, dword [ebp - 0x124]
mov ecx, esp
push ecx
mov dword [esp], 0
push 0
push esi
push dword [ebp + 0xc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov ecx, dword [edi + 0xf4]
push 0x15
call fcn.0042d190
jmp case.0x4265e2.3
mov ecx, dword [edi + 0xe8]
test ecx, ecx
je case.0x4265e2.3
mov eax, dword [ebp + 0xc]
push 0
push 0
push ecx
mov dword [esp], 0
push eax
push edx
push eax
push 0x33
call fcn.0042d190
jmp case.0x4265e2.3
movsx eax, dx
mov dword [ebp - 0x18], eax
mov eax, edx
shr eax, 0x10
cwde
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
push eax
mov dword [edi + 0xfc], ecx
push ecx
mov ecx, edi
mov dword [edi + 0x100], eax
call fcn.00427810
mov dword [ebp - 0x134], eax
test eax, eax
je case.0x4265e2.3
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx]
call edx
cmp eax, edi
jne case.0x4265e2.3
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp - 0x124]
push 0
push 0
push ecx
mov ecx, dword [ebp - 0x134]
mov dword [esp], 0
push 0
shr eax, 0x10
push esi
cwde
push eax
push 0x18
call fcn.0042d190
jmp case.0x4265e2.3
test edx, edx
je case.0x4265e2.3
mov eax, dword [ebp - 0x120]
push edx
push dword [ebp + 0xc]
mov byte [eax], 1
lea eax, [ecx + 0x2000]
push eax
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x426d58
mov esi, dword [ebp + 0xc]
xor ecx, ecx
mov eax, esi
mov edx, 0x28
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00571b3c
add esp, 4
mov dword [ebp - 0x120], eax
cmp esi, 1
jb 0x4263f5
mov edx, dword fs:[0x2c]
mov ecx, dword [0x5ba828]
mov edx, dword [edx]
cmp ecx, dword [edx + 8]
jg 0x426d75
jmp 0x4261c8
mov eax, dword [ebp - 0x120]
mov ecx, dword [0x5ba82c]
test ecx, ecx
je 0x4263f5
push 0x28
push eax
push esi
mov esi, dword [ebp - 0x124]
push esi
call ecx
cmp eax, 1
sete al
test al, al
je 0x4263fb
mov ecx, dword [ebp - 0x120]
cmp dword [ecx + 0xc], 0
je 0x4263fb
mov eax, 0x51eb851f
imul dword [ecx]
mov eax, 0x51eb851f
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x120]
imul dword [ecx + 4]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x10]
test al, 2
je 0x4262f6
cmp dword [edi + 0xf4], 0
jne case.0x4265e2.3
cmp byte [edi + 0x21], 0
jne 0x42626a
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
push eax
mov dword [edi + 0xfc], ecx
push ecx
mov ecx, edi
mov dword [edi + 0x100], eax
call fcn.00427810
mov dword [ebp - 0x12c], eax
test eax, eax
je case.0x4265e2.3
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx]
call edx
cmp eax, edi
jne case.0x4265e2.3
mov ecx, dword [ebp - 0x12c]
mov dword [edi + 0x104], ecx
mov eax, dword [ecx]
call dword [eax + 0xb8]
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x18]
sub esp, 8
mov ecx, esp
mov byte [edi + 0x113], 1
push ecx
mov dword [esp], 0
push 0
push esi
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
push 0
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x12c]
push 0x1b
call fcn.0042d190
jmp 0x4263fb
test al, 1
je 0x426382
cmp dword [edi + 0xf4], 0
jne case.0x4265e2.3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cmp dword [edi + 0xfc], ecx
jne 0x426325
cmp dword [edi + 0x100], eax
je case.0x4265e2.3
cmp dword [edi + 0x104], 0
mov dword [edi + 0xfc], ecx
mov dword [edi + 0x100], eax
je case.0x4265e2.3
push esi
push dword [ebp + 0xc]
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
call fcn.00427180
test al, al
je case.0x4265e2.3
mov eax, dword [ebp - 0x18]
sub esp, 8
mov ecx, esp
push ecx
mov dword [esp], 0
push 0
push 0
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
push 0
mov dword [ecx + 4], eax
mov ecx, dword [edi + 0x104]
push 0x1c
call fcn.0042d190
jmp 0x4263fb
test al, 4
je 0x4263fb
push esi
push dword [ebp + 0xc]
mov ecx, edi
push 1
call fcn.004272d0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [edi + 0xfc], eax
mov dword [edi + 0x100], ecx
call dword [sym.imp.USER32.dll_ReleaseCapture]
cmp dword [edi + 0x104], 0
mov byte [edi + 0x113], 0
je case.0x4265e2.3
mov eax, dword [ebp - 0x18]
sub esp, 8
mov ecx, esp
push ecx
mov dword [esp], 0
push 0
push esi
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
push 0
mov dword [ecx + 4], eax
mov ecx, dword [edi + 0x104]
push 0x1d
call fcn.0042d190
mov dword [edi + 0x104], 0
jmp 0x4263fb
mov esi, dword [ebp - 0x124]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x5ba830]
cmp eax, dword [ecx + 8]
jg 0x426dbd
mov eax, dword [0x5ba834]
test eax, eax
je 0x426420
push esi
call eax
push dword [ebp - 0x120]
call fcn.0053228b
add esp, 4
jmp case.0x4265e2.3
cmp ecx, 0x2a1
ja 0x426cc5
je 0x4267f0
lea esi, [ecx - 0x245]
cmp esi, 7
ja case.0x4265e2.3
movzx eax, byte [esi + 0x427154]
jmp dword [eax*4 + 0x42714c]
cmp byte [edi + 0x108], 0
je case.0x4265e2.3
mov ecx, dword [ebp + 0xc]
mov eax, ecx
shr eax, 0x10
test eax, 0x2000
je 0x425801
mov eax, dword fs:[0x2c]
movzx edx, cx
mov dword [ebp - 0x13c], edx
mov ecx, dword [eax]
mov eax, dword [0x5ba838]
mov dword [ebp - 0x130], ecx
cmp eax, dword [ecx + 8]
jg 0x426e05
jmp 0x4264b2
mov edx, dword [ebp - 0x13c]
mov eax, dword [0x5ba83c]
test eax, eax
je case.0x4265e2.3
lea ecx, [ebp - 0x134]
push ecx
push edx
call eax
cmp eax, 1
sete al
test al, al
je case.0x4265e2.3
mov eax, dword [ebp - 0x134]
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
sub eax, 2
je 0x42654e
sub eax, 1
jne case.0x4265e2.3
mov ecx, dword [ebp - 0x130]
mov eax, dword [0x5ba848]
cmp eax, dword [ecx + 8]
jg 0x426e4d
mov eax, dword [0x5ba84c]
test eax, eax
je case.0x4265e2.3
lea ecx, [ebp - 0x1b0]
push ecx
push dword [ebp - 0x13c]
call eax
cmp eax, 1
sete al
test al, al
je case.0x4265e2.3
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x150]
jmp 0x4265a4
mov ecx, dword [ebp - 0x130]
mov eax, dword [0x5ba840]
cmp eax, dword [ecx + 8]
jg 0x426e95
mov eax, dword [0x5ba844]
test eax, eax
je case.0x4265e2.3
lea ecx, [ebp - 0xec]
push ecx
push dword [ebp - 0x13c]
call eax
cmp eax, 1
sete al
test al, al
je case.0x4265e2.3
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x68]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x59c2c0]
lea eax, [ebp - 0x18]
push eax
push dword [edi + 0x10]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x59c118]
movss dword [ebp - 0x13c], xmm0
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp esi, 7
ja case.0x4265e2.3
jmp dword [esi*4 + 0x42715c]
cmp dword [edi + 0xf4], 0
jne 0x425801
cmp byte [edi + 0x21], 0
jne 0x426605
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
push eax
mov dword [edi + 0xfc], ecx
push ecx
mov ecx, edi
mov dword [edi + 0x100], eax
call fcn.00427810
mov esi, eax
mov dword [ebp - 0x130], esi
test esi, esi
je case.0x4265e2.3
mov edx, dword [esi]
mov ecx, esi
mov edx, dword [edx]
call edx
cmp eax, edi
jne case.0x4265e2.3
mov dword [edi + 0x104], esi
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0xb8]
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetCapture]
movss xmm0, dword [ebp - 0x13c]
sub esp, 8
mov eax, dword [ebp - 0x18]
mov ecx, esp
mov esi, dword [ebp - 0x124]
mov byte [edi + 0x113], 1
push ecx
movss dword [esp], xmm0
push 0
push esi
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
push 0
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x130]
push 0x20
call fcn.0042d190
mov eax, dword [edi + 0x104]
test eax, eax
je case.0x4265e2.3
cmp byte [eax + 0x8e], 0
je case.0x4265e2.3
mov eax, dword [ebp - 0x120]
mov byte [eax], 1
jmp case.0x4265e2.3
cmp dword [edi + 0xf4], 0
jne 0x425801
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cmp dword [edi + 0xfc], ecx
jne 0x4266e6
cmp dword [edi + 0x100], eax
je case.0x4265e2.3
cmp dword [edi + 0x104], 0
mov dword [edi + 0xfc], ecx
mov dword [edi + 0x100], eax
je case.0x4265e2.3
mov esi, dword [ebp - 0x124]
lea eax, [ebp - 0x18]
push esi
push dword [ebp + 0xc]
mov ecx, edi
push eax
call fcn.00427180
test al, al
je case.0x4265e2.3
movss xmm0, dword [ebp - 0x13c]
sub esp, 8
mov eax, dword [ebp - 0x18]
mov ecx, esp
push ecx
movss dword [esp], xmm0
push 0
push 0
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
push 0
mov dword [ecx + 4], eax
mov ecx, dword [edi + 0x104]
push 0x21
jmp 0x426691
mov esi, dword [ebp - 0x124]
mov ecx, edi
push esi
push dword [ebp + 0xc]
push 1
call fcn.004272d0
cmp dword [ebp + 8], 0x24a
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [edi + 0xfc], edx
mov dword [edi + 0x100], eax
je 0x42678b
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov edx, dword [ebp - 0x18]
mov byte [edi + 0x113], 0
cmp dword [edi + 0x104], 0
je case.0x4265e2.3
movss xmm0, dword [ebp - 0x13c]
sub esp, 8
mov ecx, esp
push ecx
movss dword [esp], xmm0
push 0
push esi
mov dword [ecx], edx
mov eax, dword [ebp - 0x14]
push 0
mov dword [ecx + 4], eax
mov ecx, dword [edi + 0x104]
push 0x22
call fcn.0042d190
mov eax, dword [edi + 0x104]
test eax, eax
je 0x4267e1
cmp byte [eax + 0x8e], 0
je 0x4267e1
mov eax, dword [ebp - 0x120]
mov byte [eax], 1
mov dword [edi + 0x104], 0
jmp case.0x4265e2.3
movsx eax, dx
shr edx, 0x10
movsx ecx, dx
push ecx
mov dword [ebp - 0x124], ecx
mov ecx, edi
push eax
mov byte [edi + 0x112], 0
mov dword [ebp - 0x134], eax
call fcn.00427810
mov esi, eax
mov dword [ebp - 0x12c], esi
test esi, esi
je case.0x4265e2.3
cmp dword [edi + 0xf0], 0
je 0x42685f
mov ecx, dword [ebp - 0x134]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0x124]
push ecx
mov dword [esp], 0
push 0
push 0
push 0
mov dword [eax + 4], ecx
mov ecx, dword [edi + 0xf0]
push 0x11
call fcn.0042d190
mov eax, dword [esi]
lea ecx, [ebp - 0x40]
push ecx
mov ecx, esi
call dword [eax + 0x40]
mov dword [ebp - 4], 0
cmp dword [ebp - 0x30], 0
jne 0x4268ba
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb case.0x4265e2.3
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4268ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426edd
push edx
push ecx
call fcn.00531d2c
add esp, 8
jmp case.0x4265e2.3
mov ecx, dword [edi + 0xb4]
mov edx, dword [sym.imp.USER32.dll_IsWindowVisible]
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x128], edx
mov dword [ebp - 0x13c], eax
test ecx, ecx
je 0x426ad4
push ecx
call edx
test eax, eax
je 0x426ad4
mov eax, dword [edi + 0x10]
xorps xmm0, xmm0
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], eax
xor eax, eax
mov dword [ebp - 0x118], 0
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
mov dword [ebp - 0xfc], 0
movlpd qword [ebp - 0xf4], xmm0
mov dword [ebp - 0x11c], 0x30
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
push eax
push 0x1000
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00402d80
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
mov dword [ebp - 0xf8], eax
lea eax, [ebp - 0x11c]
push eax
push 0
push 0x435
push dword [edi + 0xb4]
call dword [ebp - 0x13c]
cmp esi, dword [edi + 0xf0]
jne 0x4269ea
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x58]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00402fa0
mov dword [ebp - 0x130], 1
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x4269b3
mov ecx, dword [eax]
cmp dword [ebp - 0x2c], 8
lea esi, [ebp - 0x40]
mov edx, dword [ebp - 0x30]
cmovae esi, dword [ebp - 0x40]
cmp edx, dword [eax + 0x10]
jne 0x4269ea
test edx, edx
je 0x4269e1
sub esi, ecx
nop dword [eax]
mov ax, word [esi + ecx]
cmp ax, word [ecx]
jne 0x4269ea
add ecx, 2
sub edx, 1
jne 0x4269d0
mov byte [ebp - 0x135], 1
jmp 0x4269f1
mov byte [ebp - 0x135], 0
test byte [ebp - 0x130], 1
je 0x426a34
mov edx, dword [ebp - 0x44]
cmp edx, 8
jb 0x426a34
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x426a2a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426ee2
push edx
push ecx
call fcn.00531d2c
add esp, 8
cmp byte [ebp - 0x135], 0
je 0x426a90
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x426a77
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x426a6d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426ee7
push edx
push ecx
call fcn.00531d2c
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
jmp 0x426877
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x426ace
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x426ac4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426edd
push edx
push ecx
call fcn.00531d2c
add esp, 8
mov esi, dword [ebp - 0x12c]
mov dword [edi + 0xc8], 0
mov dword [edi + 0xcc], 0
mov dword [edi + 0xd0], 0
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0xdc], 0
mov dword [edi + 0xe0], 0
mov dword [edi + 0xe4], 0
mov eax, dword [edi + 0x10]
push 0
mov dword [edi + 0xb8], 0x30
mov dword [edi + 0xbc], 1
mov dword [edi + 0xc0], eax
mov dword [edi + 0xc4], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x20]
mov dword [edi + 0xd8], eax
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
mov dword [edi + 0xdc], eax
mov eax, dword [esi]
push 1
push ecx
mov ecx, esi
mov eax, dword [eax + 0x1c]
call eax
movups xmm0, xmmword [eax]
mov eax, dword [edi + 0xb4]
movups xmmword [edi + 0xc8], xmm0
test eax, eax
jne 0x426bf8
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push 0
push dword [edi + 0x10]
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000003
push 0
push str.tooltips_class32
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [edi + 0xb8]
mov dword [edi + 0xb4], eax
push ecx
push 0
push 0x432
push eax
call dword [ebp - 0x13c]
push 0x13
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push dword [edi + 0xb4]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [edi + 0xb4]
push eax
call dword [ebp - 0x128]
test eax, eax
jne 0x426c50
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x5c]
call eax
mov esi, dword [ebp - 0x13c]
push eax
push 0
push 0x418
push dword [edi + 0xb4]
call esi
lea eax, [edi + 0xb8]
push eax
push 0
push 0x436
push dword [edi + 0xb4]
call esi
lea eax, [edi + 0xb8]
push eax
push 1
push 0x411
push dword [edi + 0xb4]
call esi
jmp 0x426c56
mov esi, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x124]
movzx ecx, ax
mov eax, dword [ebp - 0x134]
shl ecx, 0x10
movzx eax, ax
or ecx, eax
push ecx
push 0
push 0x412
push dword [edi + 0xb4]
call esi
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x426cb7
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x426cad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426edd
push edx
push ecx
call fcn.00531d2c
add esp, 8
mov eax, dword [ebp - 0x120]
mov byte [eax], 1
jmp case.0x4265e2.3
cmp ecx, 0x2a3
je 0x426d17
cmp ecx, 0x8001
jne case.0x4265e2.3
mov esi, dword [edi + 0x1dc]
cmp esi, dword [edi + 0x1e0]
je 0x426d09
mov ecx, dword [esi]
test ecx, ecx
je 0x426cfe
mov eax, dword [ecx + 4]
push 1
mov eax, dword [eax + 4]
add eax, 4
add ecx, eax
mov eax, dword [ecx]
call dword [eax]
add esi, 4
cmp esi, dword [edi + 0x1e0]
jne 0x426ce7
mov eax, dword [edi + 0x1dc]
mov dword [edi + 0x1e0], eax
jmp case.0x4265e2.3
mov ecx, dword [edi + 0xb4]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test ecx, ecx
je 0x426d38
lea eax, [edi + 0xb8]
push eax
push 0
push 0x411
push ecx
call esi
cmp byte [edi + 0x112], 0
je 0x426d4f
push 0xffffffffffffffff
push 0
push 0x200
push dword [edi + 0x10]
call esi
mov byte [edi + 0x112], 0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0053325b
mov esp, ebp
pop ebp
ret 0x10
push 0x5ba828
call fcn.00532174
add esp, 4
cmp dword [0x5ba828], 0xffffffff
jne 0x4261c2
push str.GetTouchInputInfo
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x5ba828
mov dword [0x5ba82c], eax
call fcn.0053212a
add esp, 4
jmp 0x4261c2
push 0x5ba830
call fcn.00532174
add esp, 4
cmp dword [0x5ba830], 0xffffffff
jne 0x426414
push str.CloseTouchInputHandle
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x5ba830
mov dword [0x5ba834], eax
call fcn.0053212a
add esp, 4
jmp 0x426414
push 0x5ba838
call fcn.00532174
add esp, 4
cmp dword [0x5ba838], 0xffffffff
jne 0x4264ac
push str.GetPointerType
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x5ba838
mov dword [0x5ba83c], eax
call fcn.0053212a
add esp, 4
jmp 0x4264ac
push 0x5ba848
call fcn.00532174
add esp, 4
cmp dword [0x5ba848], 0xffffffff
jne 0x42650a
push str.GetPointerPenInfo
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x5ba848
mov dword [0x5ba84c], eax
call fcn.0053212a
add esp, 4
jmp 0x42650a
push 0x5ba840
call fcn.00532174
add esp, 4
cmp dword [0x5ba840], 0xffffffff
jne 0x426565
push str.GetPointerTouchInfo
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x5ba840
mov dword [0x5ba844], eax
call fcn.0053212a
add esp, 4
jmp 0x426565
call fcn.0055e070
call fcn.0055e070
call fcn.0055e070
addps xmm0, xmmword [edx]
push 4194320984
push edi
inc edx
add byte [edi + edx*2 + 0x42], cl
add bh, ah
push edi
inc edx
add bl, al
pop edx
inc edx
add byte [ecx + 0x5b], bh
inc edx
add byte [esi], al
pop ecx
inc edx
add dl, bh
pop ebp
inc edx
add byte [edx], bl
pushal
inc edx
add bh, al
pop ecx
inc edx
add byte [ebp - 0x64ffbda6], cl
pop ecx
inc edx
add byte [esi + 0x6d], dl
inc edx
add byte [eax], al
or eax, 0xd0d010d
or eax, 34409741
add ecx, dword [218369293]
or eax, 218959117
or eax, 218959117
add eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959110
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959111
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218695693
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 218959117
or eax, 168627469
or ecx, dword [esi]
nop
mov al, byte [0x50004260]
popal
inc edx
add byte [edi], ah
pop esp
inc edx
add byte [esi], dh
pop ebp
inc edx
add byte [edi + ebx*2 + 0x5ed00042], cl
inc edx
add dl, bh
pop ebp
inc edx
add byte [edx], bl
pushal
inc edx
add ah, cl
pushal
inc edx
add byte [esi + 0x6d], dl
inc edx
add byte [eax], al
or dword [ecx], ecx
add dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
add dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], eax
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [edx], eax
add eax, dword [eax + 151586566]
or dword [ecx], ecx
or byte [edi], cl
pop ds
add byte [edx + 0x64], ah
inc edx
add byte [esi + 0x6d], dl
inc edx
add byte [eax], al
add byte [eax], al
add dword [ecx], eax
add byte [ecx], al
add byte [edi - 385858970], bh
inc edx
add byte [ebp + 0x67], cl
inc edx
add byte [esi + 0x6d], dl
inc edx
add byte [esi + 0x6d], dl
inc edx
add byte [ebp + 0x67], cl
inc edx
add byte [esi + 0x6d], dl
inc edx
add byte [ebp + 0x67], cl
inc edx
add ah, cl
int3