Function at 0x11176060
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov eax, dword [0x11279148]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov esi, ecx
cmp dword [esi + 0x240], 0
mov edi, edx
mov dword [ebp - 0x74], edi
je 0x11176b11
mov eax, dword [esi + 0x6c]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x11176b11
cmp byte [esi + 0x7d4], al
jne 0x11176b11
push ebx
mov byte [ebp - 0x62], al
mov byte [ebp - 0x61], al
test edi, edi
je 0x111761f5
mov edx, dword [esi + 0x1ec]
mov eax, edi
mov edi, dword [eax]
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 4]
mov eax, dword [eax + 0xc]
sub ecx, edi
sub eax, ebx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], eax
test edx, edx
je 0x111760fa
imul eax, ecx
cmp eax, edx
jl 0x111760f7
push 0xa3
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, dword [ebp - 0x54]
test ax, ax
mov eax, dword [ebp - 0x58]
jns 0x111760fa
mov byte [ebp - 0x61], 1
jmp 0x111760fa
mov eax, dword [ebp - 0x58]
cmp dword [ebp + 8], 0
jne 0x11176208
mov edx, dword [esi + 0x74c]
test edx, edx
jne 0x111761a4
cmp byte [esi + 0x731], dl
je 0x1117611f
cmp byte [ebp - 0x61], dl
je 0x1117612c
cmp dword [esi + 0x14c], 0
je 0x11176211
test edx, edx
jne 0x111761a4
mov eax, dword [esi + 0x700]
test eax, eax
je 0x11176145
mov ecx, dword [eax + 0x20]
mov dword [esi + 0x760], ecx
jmp 0x11176155
call dword [sym.imp.KERNEL32.dll_GetTickCount]
dec eax
or eax, 1
mov dword [esi + 0x760], eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x54]
add eax, ebx
push eax
add ecx, edi
push ecx
push ebx
push edi
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x74], ecx
call dword [sym.imp.GDI32.dll_CreateRectRgn]
mov edx, dword [ebp - 0x74]
mov dword [esi + 0x754], ebx
mov dword [esi + 0x74c], eax
mov eax, dword [ebp - 0x50]
pop ebx
mov dword [esi + 0x750], edi
pop edi
mov dword [esi + 0x758], edx
mov dword [esi + 0x75c], eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret
cmp edi, dword [esi + 0x750]
jge 0x111761b2
mov dword [esi + 0x750], edi
cmp ebx, dword [esi + 0x754]
jge 0x111761c0
mov dword [esi + 0x754], ebx
add edi, ecx
cmp edi, dword [esi + 0x758]
jle 0x111761d0
mov dword [esi + 0x758], edi
add ebx, eax
cmp ebx, dword [esi + 0x75c]
jle 0x11176b10
mov dword [esi + 0x75c], ebx
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret
mov eax, 0x4000
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x62], 1
cmp dword [esi + 0x14c], 0
jne 0x11176226
fld qword [esi + 0x150]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x1117698e
mov edx, dword [esi + 0x6c]
lea ecx, [ebp - 0x3c]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
cmp dword [ebp - 0x34], 0
je 0x1117698e
cmp dword [ebp - 0x30], 0
je 0x1117698e
push 0
mov ecx, esi
call fcn.11174ed0
mov ecx, dword [esi + 0x714]
add ecx, dword [esi + 0x720]
add esp, 4
sub edi, ecx
mov ecx, dword [esi + 0x718]
add ecx, dword [esi + 0x724]
mov dword [ebp - 0x6c], eax
sub ebx, ecx
cmp dword [ebp + 8], 0
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x60], ebx
jne 0x111762b1
cdq
idiv dword [ebp - 0x34]
cmp edi, eax
jl 0x1117628f
sub edi, eax
mov dword [ebp - 0x50], edi
mov ecx, dword [ebp - 0x54]
lea edx, [ecx + eax*2]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x54], edx
cdq
idiv dword [ebp - 0x30]
cmp ebx, eax
jl 0x111762a8
sub ebx, eax
mov dword [ebp - 0x60], ebx
mov ecx, dword [ebp - 0x58]
lea edx, [ecx + eax*2]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x6c]
mov ecx, eax
sub ecx, edi
cmp dword [ebp - 0x54], ecx
jle 0x111762c0
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x68]
sub ecx, ebx
cmp dword [ebp - 0x58], ecx
jle 0x111762cd
mov dword [ebp - 0x58], ecx
cmp dword [esi + 0x14c], 0
fld qword [0x111fb330]
je 0x111762ef
mov ecx, dword [ebp - 0x34]
imul ecx, edi
cdq
sub eax, edx
sar eax, 1
add eax, ecx
cdq
idiv dword [ebp - 0x6c]
jmp 0x111762ff
fild dword [ebp - 0x50]
fmul qword [esi + 0x150]
fadd st(1)
call fcn.111d9130
cmp dword [esi + 0x14c], 0
mov dword [ebp - 0x5c], eax
je 0x11176321
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x68]
imul ecx, ebx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
cdq
idiv dword [ebp - 0x68]
jmp 0x11176331
fild dword [ebp - 0x60]
fmul qword [esi + 0x150]
fadd st(1)
call fcn.111d9130
cmp dword [esi + 0x14c], 0
mov dword [ebp - 0x70], eax
je 0x11176354
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x6c]
cdq
sub eax, edx
sar eax, 1
add eax, ecx
cdq
idiv dword [ebp - 0x6c]
jmp 0x11176364
fild dword [ebp - 0x54]
fmul qword [esi + 0x150]
fadd st(1)
call fcn.111d9130
cmp dword [esi + 0x14c], 0
mov dword [ebp - 0x60], eax
je 0x11176389
mov ecx, dword [ebp - 0x30]
fstp st(0)
imul ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x68]
cdq
sub eax, edx
sar eax, 1
add eax, ecx
cdq
idiv dword [ebp - 0x68]
jmp 0x11176399
fild dword [ebp - 0x58]
fmul qword [esi + 0x150]
faddp st(1)
call fcn.111d9130
mov ecx, dword [esi + 0x724]
add ecx, dword [esi + 0x718]
mov dword [ebp - 0x50], eax
mov eax, dword [esi + 0x720]
add eax, dword [esi + 0x714]
add dword [ebp - 0x70], ecx
add dword [ebp - 0x5c], eax
add edi, eax
add ebx, ecx
cmp dword [ebp + 8], 0
je 0x111763d1
mov edx, dword [ebp + 8]
mov eax, dword [esi + 0x240]
push edx
push eax
jmp 0x111763e3
cmp dword [esi + 0x6fc], 2
jl 0x111763e9
mov ecx, dword [esi + 0x240]
push 4
push ecx
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
cmp dword [esi + 0x6fc], 3
jl 0x11176770
cmp dword [esi + 0x720], 0
jne 0x11176770
cmp dword [esi + 0x724], 0
jne 0x11176770
cmp dword [esi + 0x714], 0
jne 0x11176770
cmp dword [esi + 0x718], 0
jne 0x11176770
fld qword [esi + 0x150]
mov edi, dword [sym.imp.USER32.dll_GetScrollPos]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x1117644e
mov edx, dword [esi + 0x6c]
push 0
push edx
call edi
mov dword [ebp - 0x54], eax
jmp 0x11176455
mov dword [ebp - 0x54], 0
fld qword [esi + 0x150]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x11176475
mov eax, dword [esi + 0x6c]
push 1
push eax
call edi
mov ebx, eax
mov dword [ebp - 0x58], eax
jmp 0x1117647a
xor ebx, ebx
mov dword [ebp - 0x58], ebx
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x5c]
add edx, ecx
push edx
mov edx, dword [ebp - 0x60]
add edx, eax
push edx
push ecx
push eax
call dword [sym.imp.GDI32.dll_CreateRectRgn]
mov edi, eax
mov eax, dword [esi + 0x240]
push 0
push eax
mov dword [ebp - 0x70], edi
call dword [sym.imp.GDI32.dll_GetClipRgn]
mov ecx, dword [esi + 0x724]
mov edx, dword [esi + 0x720]
add edx, dword [ebp - 0x54]
add ecx, ebx
add ecx, dword [esi + 0x718]
add edx, dword [esi + 0x714]
neg ecx
push ecx
neg edx
push edx
push edi
call dword [sym.imp.GDI32.dll_OffsetRgn]
lea eax, [ebp - 0x4c]
push eax
push edi
call dword [sym.imp.GDI32.dll_GetRgnBox]
mov ecx, dword [esi + 0x240]
push edi
push ecx
call dword [sym.imp.GDI32.dll_SelectClipRgn]
cmp dword [esi + 0x14c], 0
mov ebx, dword [esi + 0x720]
mov edi, dword [esi + 0x714]
je 0x1117651d
mov eax, dword [ebp - 0x6c]
fld qword [0x111fb330]
lea ecx, [edi + ebx]
imul ecx, dword [ebp - 0x34]
cdq
sub eax, edx
sar eax, 1
add eax, ecx
cdq
idiv dword [ebp - 0x6c]
jmp 0x1117653e
mov dword [ebp - 0x50], edi
fild dword [ebp - 0x50]
mov dword [ebp - 0x5c], ebx
fmul qword [esi + 0x150]
fiadd dword [ebp - 0x5c]
fld qword [0x111fb330]
fadd st(1), st(0)
fxch st(1)
call fcn.111d9130
sub edi, eax
mov eax, dword [esi + 0x14c]
add edi, ebx
mov ebx, dword [esi + 0x724]
mov dword [ebp - 0x60], edi
mov edi, dword [esi + 0x718]
test eax, eax
je 0x11176574
mov eax, dword [ebp - 0x68]
lea ecx, [edi + ebx]
imul ecx, dword [ebp - 0x30]
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov ecx, dword [ebp - 0x68]
cdq
idiv ecx
jmp 0x11176590
mov dword [ebp - 0x50], edi
fild dword [ebp - 0x50]
mov dword [ebp - 0x5c], ebx
fmul qword [esi + 0x150]
fiadd dword [ebp - 0x5c]
fadd st(1)
call fcn.111d9130
mov ecx, dword [ebp - 0x68]
fld qword [esi + 0x150]
sub edi, eax
fldz
add edi, ebx
fld st(0)
mov dword [ebp - 0x5c], edi
fucomp st(2)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x11176606
cmp dword [esi + 0x14c], 0
je 0x111765cc
mov edi, dword [ebp - 0x6c]
mov ebx, edi
imul ebx, dword [ebp - 0x34]
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, ebx
cdq
idiv edi
jmp 0x111765df
fild dword [ebp - 0x6c]
fmul qword [esi + 0x150]
fadd st(2)
call fcn.111d9130
mov ecx, dword [ebp - 0x68]
cmp dword [esi + 0x14c], 0
mov dword [ebp - 0x50], eax
je 0x11176601
mov edi, ecx
imul edi, dword [ebp - 0x30]
fstp st(1)
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, edi
cdq
idiv ecx
jmp 0x1117666c
fild dword [ebp - 0x68]
jmp 0x1117665a
cmp dword [esi + 0x14c], 0
je 0x1117662a
mov ebx, dword [esi + 0xdc]
imul ebx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x6c]
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, ebx
cdq
idiv edi
jmp 0x11176640
fild dword [esi + 0xdc]
fmul qword [esi + 0x150]
fadd st(2)
call fcn.111d9130
mov ecx, dword [ebp - 0x68]
cmp dword [esi + 0x14c], 0
mov dword [ebp - 0x50], eax
je 0x11176654
mov edi, dword [esi + 0xe0]
jmp 0x111765ed
fild dword [esi + 0xe0]
fmul qword [esi + 0x150]
faddp st(2)
fxch st(1)
call fcn.111d9130
mov ecx, dword [ebp - 0x68]
fld qword [esi + 0x150]
mov edi, eax
fucompp
fnstsw ax
test ah, 0x44
jnp 0x11176682
mov eax, dword [ebp - 0x6c]
jmp 0x1117668e
mov eax, dword [esi + 0xdc]
mov ecx, dword [esi + 0xe0]
mov edx, dword [esi + 0x244]
push 0xcc0020
push ecx
mov ecx, dword [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x50]
push 0
push 0
push edx
mov edx, dword [ebp - 0x60]
push edi
push eax
mov eax, dword [esi + 0x240]
push ecx
push edx
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
test eax, eax
jne 0x111766d2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.StretchBlt2_failed__e_d_n
call fcn.111bd7b0
add esp, 8
mov ecx, dword [esi + 0x240]
push 0
push ecx
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov edx, dword [ebp - 0x70]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp byte [ebp - 0x62], 0
je 0x11176ad3
mov ecx, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x58]
lea eax, [ebx + ecx]
cmp edi, eax
jge 0x11176730
mov eax, dword [ebp - 0x54]
mov edx, dword [esi + 0x244]
sub ecx, dword [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
push 0x42
add eax, dword [ebp - 0x34]
push 0
push 0
push edx
push ecx
mov ecx, dword [esi + 0x240]
push eax
push edi
push 0
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x54]
add edx, eax
cmp dword [ebp - 0x50], edx
jge 0x11176ad3
sub ebx, dword [ebp - 0x38]
mov edx, dword [esi + 0x244]
sub eax, dword [ebp - 0x3c]
push 0x42
push 0
push 0
push edx
add ebx, ecx
mov ecx, dword [esi + 0x240]
push ebx
push eax
mov eax, dword [ebp - 0x50]
push 0
push eax
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x11176ad3
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x54]
mov ecx, dword [esi + 0x244]
push 0xcc0020
push edx
mov edx, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x60]
push ebx
push edi
mov edi, dword [sym.imp.GDI32.dll_StretchBlt]
push ecx
mov ecx, dword [ebp - 0x70]
push edx
mov edx, dword [ebp - 0x5c]
push eax
mov eax, dword [esi + 0x240]
push ecx
push edx
push eax
call edi
mov edx, dword [esi + 0x240]
lea ecx, [ebp - 0x44]
push ecx
push edx
mov dword [ebp - 0x78], eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
fld qword [esi + 0x150]
fldz
fld st(0)
fucomp st(2)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x111767d6
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x54], eax
jmp 0x111767df
mov ecx, dword [esi + 0xdc]
mov dword [ebp - 0x54], ecx
fld qword [esi + 0x150]
fld st(1)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x111767f8
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x58], edx
jmp 0x11176801
mov eax, dword [esi + 0xe0]
mov dword [ebp - 0x58], eax
fld qword [esi + 0x150]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
fld st(1)
mov ebx, dword [ebp - 0x34]
fucompp
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x70], edx
fnstsw ax
test ah, 0x44
jnp 0x11176834
fild dword [ebp - 0x6c]
fmul qword [esi + 0x150]
call fcn.111d9130
mov dword [ebp - 0x60], eax
jmp 0x11176837
mov dword [ebp - 0x60], ebx
fld qword [esi + 0x150]
fld st(1)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x11176858
fild dword [ebp - 0x68]
fmul qword [esi + 0x150]
call fcn.111d9130
jmp 0x1117685b
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x78], 0
mov dword [ebp - 0x50], eax
jne 0x111768a3
mov ecx, dword [ebp - 0x58]
fstp st(0)
mov edx, dword [ebp - 0x54]
push 0xcc0020
push ecx
mov ecx, dword [esi + 0x718]
push edx
mov edx, dword [ebp - 0x60]
push ecx
mov ecx, dword [esi + 0x714]
push ecx
mov ecx, dword [esi + 0x244]
push ecx
mov ecx, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x40]
push edx
mov edx, dword [esi + 0x240]
push eax
push ecx
push edx
call edi
fldz
mov ebx, dword [ebp - 0x34]
cmp byte [ebp - 0x62], 0
je 0x11176ad1
fld qword [esi + 0x150]
mov edi, dword [sym.imp.USER32.dll_GetScrollPos]
fld st(1)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x111768d8
mov eax, dword [esi + 0x6c]
fstp st(0)
push 0
push eax
call edi
fldz
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x54], eax
jmp 0x111768df
mov dword [ebp - 0x54], 0
fld qword [esi + 0x150]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x111768fd
mov ecx, dword [esi + 0x6c]
push 1
push ecx
call edi
mov ebx, dword [ebp - 0x34]
mov edi, eax
jmp 0x111768ff
xor edi, edi
mov edx, dword [ebp - 0x30]
lea eax, [edi + edx]
add eax, dword [esi + 0x724]
cmp dword [ebp - 0x50], eax
jge 0x11176945
mov ecx, dword [esi + 0x244]
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x38]
push 0x42
push 0
push 0
push ecx
mov ecx, dword [ebp - 0x50]
add ecx, dword [ebp - 0x70]
push edx
add eax, ebx
push eax
mov eax, dword [ebp - 0x5c]
push ecx
mov ecx, dword [esi + 0x240]
push eax
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x54]
add edx, ebx
add edx, dword [esi + 0x720]
cmp dword [ebp - 0x60], edx
jge 0x11176ad3
sub edi, dword [ebp - 0x38]
mov eax, dword [esi + 0x244]
add edi, dword [ebp - 0x30]
sub ebx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x60]
add edx, dword [ebp - 0x5c]
push 0x42
push 0
push 0
push eax
push edi
push ebx
push ecx
mov ecx, dword [esi + 0x240]
push edx
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x11176ad3
cmp byte [ebp - 0x61], 0
je 0x11176aa4
mov ecx, dword [esi + 0x1e4]
sub ecx, dword [esi + 0x1e8]
mov edx, dword [ebp - 0x54]
neg ecx
sbb ecx, ecx
lea eax, [edx + edi - 1]
and ecx, 0xfe01
add ecx, 0xff
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x58]
push ecx
lea eax, [eax + ebx - 1]
push 1
push 0
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], ebx
call dword [sym.imp.GDI32.dll_CreatePen]
push 0xffffff
push 1
push 0
mov dword [ebp - 0x5c], eax
call dword [sym.imp.GDI32.dll_CreatePen]
push 0xa1
mov dword [ebp - 0x60], eax
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, dword [esi + 0x240]
xor edx, edx
test ax, ax
mov eax, dword [ebp - 0x5c]
setns dl
push eax
push ecx
dec edx
and edx, 0xc8
add edx, 0x32
mov dword [ebp - 0x50], edx
call dword [sym.imp.GDI32.dll_SelectObject]
push 5
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x78], eax
mov eax, dword [esi + 0x240]
push edx
push eax
call dword [sym.imp.GDI32.dll_Polyline]
mov ecx, dword [ebp - 0x50]
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x60]
mov eax, dword [esi + 0x240]
push edx
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esi + 0x240]
push 5
lea ecx, [ebp - 0x2c]
push ecx
push edx
call dword [sym.imp.GDI32.dll_Polyline]
mov eax, dword [ebp - 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x78]
mov edx, dword [esi + 0x240]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x5c]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [esi + 0x244]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x54]
push 0xcc0020
push ebx
push edi
push edx
mov edx, dword [esi + 0x240]
push eax
push ecx
push ebx
push edi
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [esi + 4]
inc dword [eax + 0x20]
jmp 0x11176ad3
fstp st(0)
cmp byte [esi + 0x298], 0
je 0x11176afe
mov eax, dword [esi + 0x2a4]
test eax, eax
je 0x11176afe
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [esi + 0x2a4]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov esi, dword [esi + 4]
cmp dword [esi + 0xc], 0
je 0x11176b10
cmp dword [ebp - 0x74], 0
je 0x11176b10
inc dword [esi + 0x14]
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.111d9022
mov esp, ebp
pop ebp
ret