Function at 0x46337c
Capabilities:
Check for unmoving mouse cursor
Log keystrokes via polling
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x168
push ebx
xor ebx, ebx
cmp dword [ebp + 0x7c], ebx
push esi
push edi
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x34], ebx
jne 0x46339d
mov eax, dword [ecx + 0x2c]
mov dword [ebp + 0x7c], eax
mov eax, dword [ebp + 0x74]
mov dword [ebp + 0x74], eax
lea eax, [ebp + 0x74]
push eax
call fcn.0042ebab
mov eax, dword [ebp + 0x74]
pop ecx
lea ecx, [ebp + 0x3c]
mov esi, ecx
mov word [ebp + 0x3c], bx
mov edi, eax
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x68], ecx
mov dword [ebp + 0x4c], esi
jmp 0x4633ce
cmp cx, 0x3d
je 0x4633d8
inc eax
inc eax
mov cx, word [eax]
cmp cx, bx
jne 0x4633c6
jmp 0x4633e1
lea esi, [eax + 2]
mov word [eax], bx
mov dword [ebp + 0x4c], esi
push edi
call fcn.0040c744
mov eax, dword [ebp + 0x60]
cmp byte [eax + 0x96], 0
pop ecx
mov dword [ebp + 0x2c], ebx
jne 0x46340f
test byte [eax + 0xb], 0xf
jne 0x46340f
mov ecx, dword [ebp + 0x60]
push 1
push ebx
lea eax, [ebp + 0x2c]
push eax
push edi
call fcn.0043c14d
jmp 0x46341f
mov ecx, dword [ebp + 0x60]
push 1
push ebx
lea eax, [ebp + 0x2c]
push eax
push edi
call fcn.0043b011
lea ecx, [ebp + 0x30]
call fcn.00433c24
mov ecx, dword [ebp + 0x60]
push 1
push ebx
lea eax, [ebp + 0x30]
push eax
push esi
call fcn.0043c245
mov eax, dword [ebp + 0x30]
mov edi, dword [ebp + 0x2c]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov dword [ebp + 0x68], eax
cmp word [edi], 0x40
jne 0x4635e6
push str._DeskTopFresh
push edi
call esi
test eax, eax
jne 0x463542
mov eax, dword [ebp + 0x68]
mov dword [ebp + 0x7c], eax
movzx eax, word [eax]
mov dword [ebp + 0x78], 0xfff80000
jmp 0x463494
cmp ax, 0x2c
je 0x46349b
cmp ax, 0x3b
je 0x46349b
cmp ax, 0x3a
je 0x46349b
cmp ax, 0x23
je 0x46349b
add dword [ebp + 0x7c], 2
mov eax, dword [ebp + 0x7c]
mov ax, word [eax]
cmp ax, bx
jne 0x463472
jmp 0x4634a5
mov eax, dword [ebp + 0x7c]
add dword [ebp + 0x7c], 2
mov word [eax], bx
push dword [ebp + 0x68]
push str.clearicon
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x4634fc
lea ecx, [ebp + 0x74]
call fcn.00433c24
push 0x23
pop ecx
mov esi, str._userprofile_AppDataLocalMicrosoftWindowsExplorer_thumbcache.db
lea edi, [ebp - 0xc4]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x60]
push 1
push ebx
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp - 0xc4]
push eax
movsw word es:[edi], word [esi]
call fcn.0043b011
push 1
push dword [ebp + 0x74]
call fcn.004214a4
pop ecx
pop ecx
lea ecx, [ebp + 0x74]
call fcn.0042eb98
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x7c]
push eax
call fcn.004369c5
cmp dword [ebp + 0x78], 2
pop ecx
pop ecx
jne 0x463531
push ebx
push 0x4a7060
push str.USER32.DLL
push str.UpdatePerUserSystemParameters
call fcn.0042fb47
add esp, 0x10
call dword [0x4a7060]
jmp 0x46353b
cmp dword [ebp + 0x78], ebx
jl 0x46353b
call fcn.0046f4e1
xor esi, esi
jmp 0x464a2e
push str._TaskIcoMenu
push edi
call esi
test eax, eax
jne 0x4635e6
push dword [ebp + 0x68]
push 0x492940
call fcn.0042fb17
test al, al
pop ecx
pop ecx
jne 0x4635a7
push dword [ebp + 0x68]
push 0x496da8
call fcn.0042fb17
test al, al
pop ecx
pop ecx
jne 0x463594
push dword [ebp + 0x68]
push 0x4923cc
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x46353b
cmp byte [0x4a6df4], 0
je 0x4635a7
mov ecx, 0x4a7270
mov byte [0x4a6df4], 0
call fcn.0042f0b2
jmp 0x46353b
cmp byte [0x4aa003], 0
je 0x4635bf
push dword [0x4a6e04]
mov byte [0x4a6df4], 1
jmp 0x4635df
mov eax, dword [0x4a6f34]
cmp eax, ebx
je 0x46353b
cmp dword [eax + 0x18], ebx
je 0x46353b
mov byte [0x4a6df4], 1
push dword [eax + 0x18]
call fcn.0040dc6b
jmp 0x4635f6
mov ax, word [edi]
cmp ax, bx
jne 0x4635fc
push dword [ebp + 0x60]
call fcn.0040e27f
pop ecx
jmp 0x46353b
cmp ax, 0x40
je 0x463615
push dword [ebp + 0x60]
call fcn.0040e27f
cmp dword [ebp + 0x7c], ebx
pop ecx
jne 0x46361a
jmp 0x46353b
cmp dword [ebp + 0x7c], ebx
je 0x463622
mov eax, dword [ebp + 0x7c]
mov eax, dword [eax + 0x74]
jmp 0x463627
mov eax, 0x496134
push eax
lea ecx, [ebp + 0x1c]
call fcn.0043ddc9
push edi
lea ecx, [ebp + 0x38]
call fcn.0043ddc9
xor ecx, ecx
mov cx, word [edi]
cmp cx, bx
mov eax, edi
mov dword [ebp + 0x74], eax
je 0x463669
cmp cx, 0x2e
jne 0x463651
mov dword [ebp + 0x50], eax
inc eax
inc eax
mov cx, word [eax]
cmp cx, bx
jne 0x463648
cmp dword [ebp + 0x50], ebx
mov dword [ebp + 0x74], eax
je 0x463669
mov eax, dword [ebp + 0x50]
mov dword [ebp + 0x74], eax
cmp word [eax], 0x2e
mov dword [ebp + 0x54], ebx
jne 0x46367d
mov word [eax], bx
inc eax
inc eax
mov dword [ebp + 0x74], eax
mov dword [ebp + 0x54], eax
lea eax, [ebp + 0x74]
push eax
call fcn.0042ebab
cmp dword [ebp + 0x54], ebx
pop ecx
je 0x4636a2
mov eax, dword [ebp + 0x74]
mov dword [ebp + 0x54], eax
lea eax, [ebp + 0x74]
push eax
call fcn.00404167
mov eax, dword [ebp + 0x74]
pop ecx
mov word [eax], bx
mov ebx, dword [ebp + 0x78]
test ebx, ebx
mov byte [ebp + 0x5b], 0
mov byte [ebp + 0x74], 0
je 0x46374b
cmp word [ebx], 0
mov ecx, ebx
je 0x46374b
push 0x7e
pop esi
xor edx, edx
mov dx, word [ecx]
mov eax, edx
call fcn.00402b47
test al, al
jne 0x46374b
cmp dx, 0x2e
je 0x46373a
cmp dx, 0x24
je 0x46373a
cmp dx, 0x25
je 0x46373a
cmp dx, 0x2a
jne 0x4636f2
or byte [ebp + 0x74], 4
jmp 0x46373f
cmp dx, si
jne 0x46373f
lea eax, [ecx + 2]
cmp word [eax], si
jne 0x463707
or byte [ebp + 0x74], 2
mov ecx, eax
jmp 0x46373f
cmp dx, si
jne 0x46373f
lea eax, [ecx + 2]
cmp word [eax], 0x2e
jne 0x46371b
or byte [ebp + 0x74], 8
jmp 0x463703
cmp dx, si
jne 0x46373f
lea eax, [ecx + 2]
cmp word [eax], 0x2a
jne 0x46372f
or byte [ebp + 0x74], 0xa
jmp 0x463703
cmp dx, si
jne 0x46373f
or byte [ebp + 0x74], 1
jmp 0x46373f
mov al, byte [ecx]
mov byte [ebp + 0x5b], al
inc ecx
inc ecx
cmp word [ecx], 0
jne 0x4636c4
and dword [ebp + 0x78], 0
cmp byte [ebp + 0x74], 0
je 0x463767
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
lea eax, [ebp + 0x30]
push eax
call fcn.0044b158
mov dword [ebp + 0x68], eax
lea ecx, [ebp + 0x20]
call fcn.00433c24
cmp byte [ebp + 0x5b], 0
je 0x463790
cmp byte [ebp + 0x5b], 0x2e
je 0x463790
lea eax, [ebp + 0x78]
push eax
push ebx
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00442784
add esp, 0x10
push edi
lea ecx, [ebp + 0x14]
call fcn.0043ddc9
mov eax, dword [ebp + 0x14]
xor esi, esi
cmp dword [ebp + 0x54], esi
mov dword [ebp + 0x18], eax
jne 0x4637ad
mov dword [ebp + 0x54], 0x496134
cmp word [edi], 0x40
je 0x4642ff
mov eax, 0x4a7658
push eax
mov dword [ebp + 0x44], esi
mov dword [ebp + 0x64], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [ebp + 0x60]
mov byte [ebp + 0x7b], 1
mov byte [ebp + 0x7f], 0
mov byte [ebp + 0x77], 0
mov dword [ebp + 0x50], edi
cmp byte [ebp + 0x7f], 0
je 0x4637e5
mov byte [ebp + 0x77], 1
mov ebx, dword [ebp + 0x18]
push 0x3a
lea eax, [ebp + 0x5c]
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x5c], ebx
call fcn.00433886
mov eax, dword [ebp + 0x5c]
cmp word [eax], 0x3a
pop ecx
mov byte [ebp + 0x7f], 0
jne 0x46381a
and word [eax], 0
add eax, 2
cmp word [eax], 0
mov dword [ebp + 0x18], eax
je 0x46381a
mov byte [ebp + 0x7f], 1
cmp byte [ebp + 0x7b], 0
je 0x46383b
push ebx
push 0x496418
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x46383b
mov ebx, dword [ebp + 0x1c]
mov byte [ebp + 0x77], 1
mov dword [ebp + 0x48], ebx
mov esi, dword [edi + 0x2c]
push ebx
push 0x490680
mov byte [ebp + 0x7b], 0
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x46389e
mov edi, dword [edi + 0x28]
mov esi, dword [edi + 0x2c]
test esi, esi
mov dword [ebp + 0x50], edi
je 0x463865
lea eax, [esi + 0x74]
jmp 0x463879
or dword [ebp + 0x34], 1
push 0x496134
lea ecx, [ebp + 0x28]
call fcn.0043ddc9
lea eax, [ebp + 0x28]
test byte [ebp + 0x34], 1
mov ebx, dword [eax]
mov dword [ebp + 0x48], ebx
je 0x463890
and dword [ebp + 0x34], 0xfffffffe
lea ecx, [ebp + 0x28]
call fcn.0042eb98
cmp byte [ebp + 0x7f], 0
mov byte [ebp + 0x77], 1
jne 0x4637e1
test esi, esi
je 0x463978
cmp esi, dword [ebp + 0x44]
je 0x463978
cmp byte [ebp + 0x7f], 0
jne 0x4638c8
mov eax, dword [esi + 0x74]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x4639b6
and dword [ebp + 0x5c], 0
cmp dword [esi + 0x7c], 0
jle 0x463906
xor ebx, ebx
mov eax, dword [esi + 0x78]
mov edi, dword [ebx + eax + 4]
test edi, edi
je 0x4638f8
mov eax, dword [edi + 0x74]
test eax, eax
je 0x4638f8
push dword [ebp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x4639b4
inc dword [ebp + 0x5c]
mov eax, dword [ebp + 0x5c]
add ebx, 0x10
cmp eax, dword [esi + 0x7c]
jl 0x4638d4
mov eax, dword [esi + 0xbc]
xor ebx, ebx
cmp dword [eax], ebx
jle 0x463950
mov eax, dword [esi + 0xb8]
mov eax, dword [eax]
mov edi, dword [eax + ebx*4]
test edi, edi
je 0x463945
mov eax, dword [edi + 8]
test eax, eax
je 0x463945
push dword [ebp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x463945
cmp byte [ebp + 0x7f], al
je 0x463d05
cmp dword [edi + 4], 0xf
je 0x4639a6
mov eax, dword [esi + 0xbc]
inc ebx
cmp ebx, dword [eax]
jl 0x463912
cmp byte [ebp + 0x7f], 0
jne 0x464263
push dword [ebp + 0x48]
lea eax, [esi + 0x15c]
push eax
call fcn.0046fe63
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x463b0f
mov edi, dword [ebp + 0x50]
cmp byte [ebp + 0x77], 0
jne 0x464263
mov edi, dword [edi + 0x28]
mov dword [ebp + 0x44], esi
xor esi, esi
cmp edi, esi
mov dword [ebp + 0x50], edi
je 0x463dee
cmp edi, 0x4a6f08
jne 0x4637db
jmp 0x463dee
mov eax, dword [edi + 0x1c]
mov edi, dword [eax + 0x14c]
jmp 0x4637d8
mov esi, edi
mov edi, dword [ebp + 0x54]
push edi
push str.MouseCapture
call fcn.0042fb17
test al, al
pop ecx
pop ecx
jne 0x463d2b
push edi
push str.POSTMSG
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x4639ff
mov ecx, dword [esi + 0xf0]
xor edi, edi
push edi
push edi
push dword [ebp + 0x60]
push esi
push dword [ebp + 0x4c]
call fcn.004764f7
cmp dword [ebp + 0x64], edi
mov esi, eax
jmp 0x463df1
push edi
push str.SENDMSG
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x463a2d
mov ecx, dword [esi + 0xf0]
lea eax, [ebp + 0x64]
push eax
push 1
push dword [ebp + 0x60]
push esi
push dword [ebp + 0x4c]
call fcn.004764f7
jmp 0x4642b0
push edi
push 0x48fc24
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x463aad
mov eax, dword [esi + 0xf0]
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x60]
mov dword [ebp], eax
mov eax, dword [esi + 0x18]
xor ebx, ebx
mov dword [ebp + 4], eax
mov eax, dword [ebp + 0x64]
cmp eax, ebx
mov dword [ebp - 0x10], 3
mov dword [ebp - 0xc], ebx
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], 1
mov dword [ebp + 0x10], ebx
je 0x463a85
push eax
mov dword [ebp + 0x64], ebx
call edi
lea eax, [ebp - 0x10]
push eax
push esi
push 0x465
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp + 0x64], ebx
mov esi, eax
je 0x464a0e
push dword [ebp + 0x64]
call edi
jmp 0x464a0e
push edi
push 0x497d0c
call fcn.0042fb17
test al, al
pop ecx
pop ecx
jne 0x463f4b
push edi
push 0x497d08
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x463add
mov esi, dword [esi + 0x18]
xor ebx, ebx
jmp 0x463e28
mov eax, dword [ebp + 0x64]
test eax, eax
mov edi, dword [esi + 0x18]
je 0x463af2
and dword [ebp + 0x64], 0
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push esi
push dword [ebp + 0x38]
push dword [ebp + 0x54]
push dword [ebp + 0x68]
push edi
push dword [ebp + 0x60]
call fcn.0042eebc
add esp, 0x1c
jmp 0x463dec
mov ebx, dword [ebp + 0x54]
cmp word [ebx], 0
jne 0x463b41
push dword [ebp + 0x68]
lea ecx, [edi + 4]
call fcn.0043de8d
mov edi, dword [edi + 0xc]
cmp word [edi], 0
je 0x463dec
push dword [ebp + 0x68]
mov ecx, dword [ebp + 0x60]
push edi
call fcn.004335ed
jmp 0x463dec
push ebx
push 0x497d00
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x463bfc
mov eax, dword [ebp + 0x68]
movzx eax, word [eax]
xor ebx, ebx
push eax
mov dword [ebp + 0x7c], ebx
call fcn.00433834
add esp, 4
test al, al
jne 0x463b76
cmp dword [ebp + 0x64], ebx
jmp 0x464267
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_GetMenu]
mov esi, eax
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004369c5
cmp esi, ebx
pop ecx
pop ecx
je 0x463bb3
mov eax, dword [ebp + 0x7c]
neg eax
sbb eax, eax
and eax, 0xfffffffd
add eax, 3
or eax, 0x400
push eax
push dword [edi + 0x14]
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_EnableMenuItem]
cmp dword [ebp + 0x7c], ebx
je 0x463bbd
and byte [edi], 0xfe
jmp 0x463bc0
or byte [edi], 1
lea eax, [edi + 0xc]
push eax
lea ecx, [ebp + 0x7c]
call fcn.0043de1a
push 0x493ce4
lea ecx, [ebp + 0x7c]
call fcn.00433c92
test byte [edi], 1
mov eax, 0x492484
jne 0x463be8
mov eax, 0x493ce0
mov ecx, dword [ebp + 0x60]
push eax
push dword [ebp + 0x7c]
call fcn.00447bfb
lea ecx, [ebp + 0x7c]
jmp 0x463cfb
push ebx
push 0x497cfc
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x463dec
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x3f
jne 0x463c1e
add dword [ebp + 0x68], 2
lea ecx, [ebp + 0x78]
call fcn.00433c24
lea ecx, [ebp + 0x74]
call fcn.00433c24
lea ecx, [ebp + 0x7c]
call fcn.00433c24
mov ebx, dword [ebp + 0x60]
push 0x2c
push 0x3b
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042a99b
push 0x2c
push 0x3b
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042a99b
push 0x2c
push 0x3b
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042a99b
push dword [edi + 0x10]
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0xfc]
push str.0x_p
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0xfc]
push eax
push dword [ebp + 0x78]
mov ecx, ebx
call fcn.004335ed
movzx eax, word [edi + 2]
push eax
mov ebx, str.0x_X
lea eax, [ebp - 0xfc]
push ebx
push eax
call esi
mov ecx, dword [ebp + 0x60]
add esp, 0xc
lea eax, [ebp - 0xfc]
push eax
push dword [ebp + 0x74]
call fcn.004335ed
push dword [edi + 0x14]
lea eax, [ebp - 0xfc]
push ebx
push eax
call esi
mov ecx, dword [ebp + 0x60]
add esp, 0xc
lea eax, [ebp - 0xfc]
push eax
push dword [ebp + 0x7c]
call fcn.004335ed
lea ecx, [ebp + 0x7c]
call fcn.0042eb98
lea ecx, [ebp + 0x74]
call fcn.0042eb98
lea ecx, [ebp + 0x78]
call fcn.0042eb98
jmp 0x463dec
push dword [ebp + 0x54]
push str.MouseCapture
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x463e05
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x23
je 0x463e05
mov esi, edi
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x23
sete bl
test bl, bl
je 0x463d3d
add dword [ebp + 0x68], 2
or dword [ebp + 0x7c], 0xffffffff
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004369c5
test bl, bl
pop ecx
pop ecx
je 0x463dd3
cmp dword [ebp + 0x7c], 0
jle 0x463dc8
mov ebx, dword [esi + 0x18]
mov esi, dword [esi + 0xf0]
mov edi, 0x4a7658
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
test esi, esi
je 0x463dbf
test ebx, ebx
je 0x463dbf
xor edi, edi
call fcn.004311e1
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
push edi
push dword [0x4a6e00]
push 0x431173
push 7
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
mov dword [0x4a71e4], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [0x4a71e4], edi
je 0x463db8
mov dword [0x4a71ec], esi
mov dword [0x4a71e8], ebx
push 0x4a7658
jmp 0x463dc0
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x463dec
jne 0x463dec
xor edi, edi
call fcn.004311e1
jmp 0x463dec
cmp dword [ebp + 0x7c], 0
jle 0x463de4
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_SetCapture]
jmp 0x463dec
jne 0x463dec
call dword [sym.imp.USER32.dll_ReleaseCapture]
xor esi, esi
cmp dword [ebp + 0x64], esi
je 0x464a0e
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x464a0e
push dword [ebp + 0x54]
push 0x497d08
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x463f32
mov eax, dword [edi + 0x1c]
mov esi, dword [eax + 0x18]
add ebx, 0x1000
lea eax, [ebp + 0x68]
push eax
call fcn.0042ebab
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x3f
pop ecx
je 0x463eab
cmp dword [ebp + 0x64], 0
je 0x463e4a
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
or dword [ebp + 0x7c], 0xffffffff
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x68]
push eax
call fcn.0042ebab
mov eax, dword [ebp + 0x68]
xor bl, bl
cmp word [eax], 0x2a
pop ecx
jne 0x463e6e
mov bl, byte [eax]
inc eax
inc eax
mov dword [ebp + 0x68], eax
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004369c5
test eax, eax
pop ecx
pop ecx
jle 0x464a0c
test bl, bl
je 0x464431
cmp dword [ebp + 0x7c], 0
jl 0x464a0c
xor eax, eax
cmp dword [ebp + 0x7c], eax
setne al
push eax
call dword [sym.imp.USER32.dll_ShowCursor]
jmp 0x464a0c
lea ecx, [ebp + 0x74]
call fcn.00433c24
lea ecx, [ebp + 0x7c]
call fcn.00433c24
add dword [ebp + 0x68], 2
push 0x2c
push 0x3b
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0043654b
mov eax, dword [ebp + 0x68]
add esp, 0x10
cmp word [eax], 0
je 0x463ef4
add dword [ebp + 0x68], 2
push 0x2c
push 0x3b
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0043654b
add esp, 0x10
push str.0x_I64X
push dword [ebp + 0x74]
mov eax, esi
cdq
push edx
push eax
push dword [ebp + 0x60]
call fcn.00435e5e
push str.0x_X
push dword [ebp + 0x7c]
push ebx
push dword [ebp + 0x60]
call fcn.00435e8d
add esp, 0x24
lea ecx, [ebp + 0x7c]
call fcn.0042eb98
lea ecx, [ebp + 0x74]
call fcn.0042eb98
jmp 0x4642e7
push dword [ebp + 0x54]
push 0x497d0c
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x4640bb
mov esi, edi
lea eax, [ebp + 0x68]
push eax
call fcn.0042ebab
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x3f
pop ecx
jne 0x463e3b
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp + 0x40]
mov dword [ebp + 0x24], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp + 0x28], eax
lea eax, [ebp + 0x24]
push eax
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_ScreenToClient]
lea ecx, [ebp + 0x50]
call fcn.00433c24
lea ecx, [ebp + 0x5c]
call fcn.00433c24
lea ecx, [ebp + 0x78]
call fcn.00433c24
lea ecx, [ebp + 0x74]
call fcn.00433c24
lea ecx, [ebp + 0x7c]
call fcn.00433c24
add dword [ebp + 0x68], 2
push 0x2c
pop edi
push edi
push 0x3b
pop esi
push esi
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0042a9e8
push edi
push esi
lea eax, [ebp + 0x5c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0042a9e8
push edi
push esi
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0042a9e8
push edi
push esi
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0042a9e8
add esp, 0x40
push edi
push esi
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0042a9e8
push dword [ebp + 0x50]
mov ebx, dword [ebp + 0x60]
push dword [ebp + 0x40]
push ebx
call fcn.00435ee3
push dword [ebp + 0x5c]
push dword [ebp + 0x44]
push ebx
call fcn.00435ee3
push dword [ebp + 0x78]
push dword [ebp + 0x24]
push ebx
call fcn.00435ee3
push dword [ebp + 0x74]
push dword [ebp + 0x28]
push ebx
call fcn.00435ee3
mov eax, dword [ebp + 0x7c]
add esp, 0x40
cmp word [eax], 0
je 0x464093
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 1
call esi
xor edi, edi
mov di, ax
push 0x10
shr edi, 0xf
and edi, 1
call esi
neg ax
push 0x11
sbb eax, eax
and eax, 4
or edi, eax
call esi
neg ax
push 2
sbb eax, eax
and eax, 8
or edi, eax
call esi
push dword [ebp + 0x7c]
neg ax
sbb eax, eax
and eax, 0x10
or edi, eax
movzx eax, di
push eax
push ebx
call fcn.00435ee3
add esp, 0xc
lea ecx, [ebp + 0x7c]
call fcn.0042eb98
lea ecx, [ebp + 0x74]
call fcn.0042eb98
lea ecx, [ebp + 0x78]
call fcn.0042eb98
lea ecx, [ebp + 0x5c]
call fcn.0042eb98
lea ecx, [ebp + 0x50]
jmp 0x463cfb
mov ecx, dword [edi + 4]
push 3
pop ebx
cmp ecx, ebx
je 0x4640ca
cmp ecx, 1
jne 0x4640fd
mov eax, dword [ebp + 0x54]
cmp word [eax], 0
jne 0x4640fd
cmp byte [ebp + 0x5b], 0
jne 0x4640fd
cmp ecx, ebx
mov eax, 0x1000000
jne 0x4640e7
test dword [edi + 0x40], eax
jne 0x4640f1
cmp ecx, 1
jne 0x4640fd
test dword [edi + 0x58], eax
je 0x4640fd
push 0
push dword [ebp + 0x68]
call fcn.00410413
pop ecx
pop ecx
push dword [ebp + 0x54]
push str.POSTMSG
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x46412f
xor ebx, ebx
push ebx
push ebx
push dword [ebp + 0x60]
lea ecx, [edi + 0x34]
push dword [edi + 0x1c]
push dword [ebp + 0x4c]
call fcn.004764f7
cmp dword [ebp + 0x64], ebx
mov esi, eax
jmp 0x463df1
push dword [ebp + 0x54]
push str.SENDMSG
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x464156
lea eax, [ebp + 0x64]
push eax
push 1
push dword [ebp + 0x60]
lea ecx, [edi + 0x34]
push dword [edi + 0x1c]
jmp 0x463a20
push dword [ebp + 0x54]
push 0x48fc24
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x4641dc
mov byte [0x4a6ebc], 1
mov eax, dword [edi + 0x1c]
xor ecx, ecx
cmp eax, ecx
jne 0x464181
cmp dword [ebp + 0x64], ecx
jmp 0x464267
mov edx, dword [ebp + 0x4c]
add edi, 0x34
mov dword [ebp - 0x28], edx
mov edx, dword [ebp + 0x60]
mov dword [ebp - 0x2c], edi
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x24], edx
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0x64]
cmp eax, ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], ecx
je 0x4641c0
and dword [ebp + 0x64], 0
push eax
call edi
lea eax, [ebp - 0x34]
push eax
push esi
push 0x465
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp + 0x64], 0
jmp 0x463a9b
mov esi, dword [ebp + 0x54]
push esi
push str.bkcolor
call fcn.0042fb17
test al, al
pop ecx
pop ecx
jne 0x46425c
push esi
push 0x497cec
call fcn.0042fb17
test al, al
pop ecx
pop ecx
jne 0x46425c
push esi
push 0x497cdc
call fcn.0042fb17
test al, al
pop ecx
pop ecx
jne 0x46425c
push esi
push str.font
call fcn.0042fb17
test al, al
pop ecx
pop ecx
jne 0x46425c
push esi
push str.trans
call fcn.0042fb17
test al, al
pop ecx
pop ecx
jne 0x46425c
push esi
push str.style
call fcn.0042fb17
test al, al
pop ecx
pop ecx
jne 0x46425c
push esi
push 0x490470
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x46427b
mov eax, dword [ebp + 0x4c]
mov dword [ebp + 0x68], eax
mov esi, dword [edi + 0x1c]
test esi, esi
jne 0x4642bb
cmp dword [ebp + 0x64], 0
je 0x464597
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x464597
cmp dword [edi + 4], 9
jne 0x46429b
lea eax, [ebp + 0x64]
push eax
push dword [ebp + 0x38]
mov ecx, edi
push esi
push dword [ebp + 0x68]
push dword [ebp + 0x4c]
push dword [ebp + 0x60]
call fcn.00439e0c
jmp 0x4642b0
mov eax, dword [edi]
lea ecx, [ebp + 0x64]
push ecx
push dword [ebp + 0x38]
mov ecx, edi
push esi
push dword [ebp + 0x68]
push dword [ebp + 0x60]
call dword [eax + 4]
cmp dword [ebp + 0x64], 0
mov esi, eax
jmp 0x463df1
mov eax, dword [ebp + 0x64]
test eax, eax
mov ebx, dword [esi + 0x18]
je 0x4642d0
and dword [ebp + 0x64], 0
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
push esi
push dword [ebp + 0x38]
push dword [ebp + 0x54]
push dword [ebp + 0x68]
push ebx
push dword [ebp + 0x60]
call fcn.0042eebc
add esp, 0x1c
cmp dword [ebp + 0x64], 0
je 0x464a0c
push dword [ebp + 0x64]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x464a0c
push edi
push 0x497cbc
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x464470
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x3f
jne 0x463e4a
lea ecx, [ebp + 0x5c]
call fcn.00433c24
lea ecx, [ebp + 0x78]
call fcn.00433c24
lea ecx, [ebp + 0x74]
call fcn.00433c24
lea ecx, [ebp + 0x7c]
call fcn.00433c24
mov ebx, dword [ebp + 0x60]
add dword [ebp + 0x68], 2
push 0x2c
pop edi
push edi
push 0x3b
pop esi
push esi
lea eax, [ebp + 0x5c]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042a99b
push edi
push esi
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042a99b
push edi
push esi
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042a99b
push edi
push esi
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
mov ecx, ebx
call fcn.0042a99b
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp + 0x5c]
push dword [ebp + 0x40]
push ebx
call fcn.00435ee3
push dword [ebp + 0x78]
push dword [ebp + 0x44]
push ebx
call fcn.00435ee3
push 0
lea eax, [ebp + 0x74]
push eax
push 8
lea eax, [ebp + 0x40]
push eax
push dword [ebp + 0x74]
push ebx
call fcn.00442eae
mov eax, dword [ebp + 0x7c]
add esp, 0x30
cmp word [eax], 0
je 0x464424
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 1
call esi
xor edi, edi
mov di, ax
push 0x10
shr edi, 0xf
and edi, 1
call esi
neg ax
push 0x11
sbb eax, eax
and eax, 4
or edi, eax
call esi
neg ax
push 2
sbb eax, eax
and eax, 8
or edi, eax
call esi
push dword [ebp + 0x7c]
neg ax
sbb eax, eax
and eax, 0x10
or edi, eax
movzx eax, di
push eax
push ebx
call fcn.00435ee3
add esp, 0xc
lea ecx, [ebp + 0x7c]
call fcn.0042eb98
jmp 0x4646c0
mov eax, dword [ebp + 0x68]
mov ax, word [eax]
call fcn.004338c8
test al, al
je 0x464a0c
add dword [ebp + 0x68], 2
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004369c5
test eax, eax
pop ecx
pop ecx
jle 0x464a0c
push dword [ebp + 0x74]
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x464a0c
push edi
push str._EATEKEYS
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x46449c
push dword [ebp + 0x60]
push dword [ebp + 0x68]
call fcn.0047316f
pop ecx
pop ecx
xor ecx, ecx
test eax, eax
setl cl
mov esi, ecx
jmp 0x464a0e
push edi
push str._POSTMSG
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x4644ea
mov byte [ebp + 0x5c], 0
lea ecx, [ebp + 0x7c]
mov dword [ebp + 0x78], esi
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x48], esi
mov dword [ebp + 0x50], esi
call fcn.00433c24
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x3a
jne 0x464938
add dword [ebp + 0x68], 2
lea eax, [ebp + 0x68]
push eax
call fcn.0042ebab
mov eax, dword [ebp + 0x68]
pop ecx
mov edx, eax
jmp 0x464908
push edi
push str._SENDMSG
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x464501
mov byte [ebp + 0x5c], 1
jmp 0x4644b1
push edi
push str._percent
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x46453f
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp + 0x68]
xor esi, esi
push eax
mov dword [ebp + 0x40], esi
mov dword [ebp + 0x44], esi
call fcn.004041c2
push dword [ebp + 0x68]
push dword [ebp + 0x40]
push 0x4a6f08
call fcn.0042b5dd
add esp, 0x14
jmp 0x464a0e
push edi
push str._POS
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x46460f
mov ecx, dword [ebp + 0x68]
xor eax, eax
xor esi, esi
cmp word [ecx], 0x3f
sete al
mov edi, eax
test di, di
je 0x46456d
add dword [ebp + 0x68], 2
mov eax, dword [ebp + 0x68]
push 0x40
pop ebx
cmp word [eax], bx
jne 0x46457e
add dword [ebp + 0x68], 2
mov esi, ebx
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004369c5
cmp dword [ebp + 0x74], 0
pop ecx
pop ecx
jg 0x4645a1
mov esi, 0x80070057
jmp 0x464a0e
mov edx, dword [ebp + 0x68]
xor ecx, ecx
mov cx, word [edx]
mov eax, ecx
call fcn.004338c8
test al, al
je 0x4645be
cmp cx, bx
je 0x4645be
inc edx
inc edx
mov dword [ebp + 0x68], edx
test si, si
je 0x4645d0
cmp word [edx], bx
je 0x4645d0
dec edx
dec edx
mov dword [ebp + 0x68], edx
mov word [edx], bx
test di, di
je 0x4645e1
sub dword [ebp + 0x68], 2
mov eax, dword [ebp + 0x68]
mov word [eax], 0x3f
mov eax, dword [ebp + 0x7c]
test eax, eax
je 0x4645f0
mov eax, dword [eax + 0x158]
jmp 0x4645f2
xor eax, eax
push eax
xor esi, esi
push esi
push dword [ebp + 0x60]
push dword [ebp + 0x60]
push dword [ebp + 0x68]
push dword [ebp + 0x74]
call fcn.004406f2
add esp, 0x18
jmp 0x464a0e
push edi
push str._RMENU
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x4646d8
lea ecx, [ebp + 0x5c]
call fcn.00433c24
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x44], esi
call fcn.00433c24
push 0x3a
push 0x3b
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0043654b
mov eax, dword [ebp + 0x68]
add esp, 0x10
cmp word [eax], si
je 0x464657
add dword [ebp + 0x68], 2
lea eax, [ebp + 0x68]
push eax
call fcn.0042ebab
push dword [ebp + 0x68]
call fcn.0040ec9c
pop ecx
pop ecx
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x68], eax
call fcn.00433c24
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x74]
push eax
push dword [ebp + 0x68]
mov dword [ebp + 0x7c], esi
call fcn.0046f35f
mov eax, dword [ebp + 0x7c]
add esp, 0xc
cmp eax, esi
je 0x4646b2
cmp word [eax], si
je 0x4646b2
mov word [eax - 2], si
push esi
lea eax, [ebp + 0x5c]
push eax
lea eax, [ebp + 0x44]
push eax
push dword [ebp + 0x7c]
push dword [ebp + 0x74]
call fcn.00405789
add esp, 0x14
push dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
call fcn.004335ed
lea ecx, [ebp + 0x74]
call fcn.0042eb98
lea ecx, [ebp + 0x78]
call fcn.0042eb98
lea ecx, [ebp + 0x5c]
jmp 0x464a07
push edi
push str._IsWindow
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x464762
lea eax, [ebp + 0x68]
push eax
call fcn.0042ebab
mov eax, dword [eax]
mov si, word [eax]
cmp si, 0x3f
pop ecx
jne 0x464702
add dword [ebp + 0x68], 2
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004369c5
mov eax, dword [ebp + 0x68]
mov ax, word [eax]
cmp ax, 0x3b
pop ecx
pop ecx
je 0x464727
cmp ax, 0x3a
jne 0x46472b
add dword [ebp + 0x68], 2
cmp si, 0x3f
jne 0x464597
lea ecx, [ebp + 0x7c]
call fcn.00433c24
push 0x3a
push 0x3b
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0043654b
add esp, 0x10
push dword [ebp + 0x7c]
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_IsWindow]
jmp 0x4647f1
push edi
push str._Enable
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x464839
lea eax, [ebp + 0x68]
push eax
call fcn.0042ebab
mov eax, dword [eax]
mov si, word [eax]
cmp si, 0x3f
pop ecx
jne 0x464790
add dword [ebp + 0x68], 2
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004369c5
mov eax, dword [ebp + 0x68]
mov ax, word [eax]
cmp ax, 0x3b
pop ecx
pop ecx
je 0x4647b5
cmp ax, 0x3a
jne 0x4647b9
add dword [ebp + 0x68], 2
cmp dword [ebp + 0x74], 0
jle 0x464597
cmp si, 0x3f
jne 0x464802
lea ecx, [ebp + 0x7c]
call fcn.00433c24
push 0x3a
push 0x3b
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0043654b
add esp, 0x10
push dword [ebp + 0x7c]
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_IsWindowEnabled]
push eax
push dword [ebp + 0x60]
call fcn.00435eb7
add esp, 0xc
jmp 0x464a04
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp + 0x68]
push eax
mov dword [ebp + 0x7c], 0xfffffc18
call fcn.004369c5
cmp dword [ebp + 0x7c], 0
pop ecx
pop ecx
jl 0x464a0c
xor eax, eax
cmp dword [ebp + 0x7c], eax
setne al
push eax
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x464a0c
push edi
push str._Visable
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x4648ad
lea eax, [ebp + 0x68]
push eax
call fcn.0042ebab
mov eax, dword [eax]
mov si, word [eax]
cmp si, 0x3f
pop ecx
jne 0x464863
add dword [ebp + 0x68], 2
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004369c5
mov eax, dword [ebp + 0x68]
mov ax, word [eax]
cmp ax, 0x3b
pop ecx
pop ecx
je 0x464888
cmp ax, 0x3a
jne 0x46488c
add dword [ebp + 0x68], 2
cmp dword [ebp + 0x74], 0
jle 0x464597
push esi
push dword [ebp + 0x68]
push dword [ebp + 0x74]
push dword [ebp + 0x60]
call fcn.00440fa6
add esp, 0x10
jmp 0x464a0c
push edi
push str._style
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x464a0c
or dword [ebp + 0x74], 0xffffffff
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004041a2
cmp dword [ebp + 0x74], 0
pop ecx
pop ecx
jle 0x464597
push dword [ebp + 0x68]
push dword [ebp + 0x74]
call fcn.0044112e
pop ecx
pop ecx
jmp 0x464a0c
cmp cx, 0x2c
je 0x464910
cmp cx, 0x3b
je 0x464910
cmp cx, 0x3a
je 0x464910
inc eax
inc eax
mov dword [ebp + 0x68], eax
mov cx, word [eax]
cmp cx, si
jne 0x4648f1
sub eax, edx
sar eax, 1
push eax
push edx
lea ecx, [ebp + 0x7c]
call fcn.00433d4a
mov eax, dword [ebp + 0x68]
cmp word [eax], si
je 0x46492a
add dword [ebp + 0x68], 2
mov ecx, dword [ebp + 0x60]
push 1
lea eax, [ebp + 0x7c]
push eax
call fcn.00402c07
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004369c5
cmp dword [ebp + 0x78], esi
pop ecx
pop ecx
jne 0x464959
lea ecx, [ebp + 0x7c]
call fcn.0042eb98
jmp 0x464597
mov eax, dword [ebp + 0x68]
mov ax, word [eax]
cmp ax, 0x3b
je 0x46496b
cmp ax, 0x3a
jne 0x464999
add dword [ebp + 0x68], 2
mov eax, dword [ebp + 0x68]
xor esi, esi
cmp word [eax], 0x23
jne 0x464983
add dword [ebp + 0x68], 2
mov esi, 0x5000
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004369c5
test eax, eax
pop ecx
pop ecx
jle 0x464999
add dword [ebp + 0x74], esi
push dword [ebp + 0x5c]
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x48]
push eax
push dword [ebp + 0x68]
push dword [ebp + 0x60]
call fcn.00436d9e
add esp, 0x14
test eax, eax
jne 0x46494c
cmp byte [ebp + 0x5c], al
push dword [ebp + 0x50]
push dword [ebp + 0x48]
push dword [ebp + 0x74]
push dword [ebp + 0x78]
jne 0x4649cf
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4649d5
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [ebp + 0x7c]
cmp word [esi], 0
je 0x464a04
push eax
lea eax, [ebp - 0x98]
push 0x495b38
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [ebp + 0x60]
add esp, 0xc
lea eax, [ebp - 0x98]
push eax
push esi
call fcn.004335ed
lea ecx, [ebp + 0x7c]
call fcn.0042eb98
xor esi, esi
lea ecx, [ebp + 0x14]
call fcn.0042eb98
lea ecx, [ebp + 0x20]
call fcn.0042eb98
lea ecx, [ebp + 0x38]
call fcn.0042eb98
lea ecx, [ebp + 0x1c]
call fcn.0042eb98
lea ecx, [ebp + 0x30]
call fcn.0042eb98
lea ecx, [ebp + 0x2c]
call fcn.0042eb98
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 0xc