Function at 0x4231e0
Capabilities:
Get disk information
Log keystrokes via polling
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x160
mov dword [ebp + 0x28], ecx
mov ecx, dword [ebp + 0x78]
mov eax, ecx
and eax, 0x10000
mov dword [ebp - 0x40], eax
mov eax, ecx
and eax, 0x20000
mov dword [ebp - 0x4c], eax
mov eax, ecx
and eax, 0x40000
push ebx
xor ebx, ebx
mov dword [ebp - 0x1c], eax
movzx eax, cl
xor ecx, ecx
cmp eax, ebx
sete cl
push esi
push edi
mov dword [ebp], ebx
mov dword [ebp - 8], ecx
xor ecx, ecx
cmp eax, 1
sete cl
xor edx, edx
cmp eax, 2
sete dl
cmp dword [ebp - 8], ebx
mov dword [ebp + 0x20], ecx
mov dword [ebp - 4], edx
jne 0x423246
cmp ecx, ebx
mov byte [ebp + 0x3a], bl
je 0x42324a
mov byte [ebp + 0x3a], 1
mov eax, dword [ebp + 0x74]
add eax, 0xfffffffe
mov dword [ebp - 0x44], eax
mov dword [ebp + 0x1c], eax
push 1
lea eax, [ebp + 0x74]
push eax
push 0x4c42e8
call fcn.00446a34
add esp, 0xc
cmp dword [ebp - 8], ebx
push 0x24
pop edx
push 0x23
pop edi
movzx eax, al
push 0x7c
mov dword [ebp - 0x3c], eax
mov dword [ebp + 0x34], 0x100001
mov dword [ebp + 0x18], 0x100002
mov dword [ebp + 0x24], 0x100003
pop esi
jne 0x4232a7
cmp dword [ebp + 0x20], ebx
je 0x42329f
mov dword [ebp + 0x34], esi
mov dword [ebp + 0x24], edx
jmp 0x4232ad
cmp dword [ebp - 4], ebx
je 0x4232b0
mov dword [ebp], esi
mov dword [ebp + 0x34], edx
mov dword [ebp + 0x24], esi
mov dword [ebp + 0x18], edi
mov eax, dword [ebp + 0x74]
mov cx, word [eax]
cmp cx, 0x2a
mov byte [ebp + 0x47], 0
jne 0x4232cc
mov ecx, dword [ebp + 0x34]
mov dword [ebp - 0x1c], 0x2a
jmp 0x4232de
cmp cx, dx
je 0x4232db
cmp cx, di
je 0x4232db
cmp cx, si
jne 0x4232e9
movzx ecx, cx
inc eax
inc eax
mov dword [ebp], ecx
mov byte [ebp + 0x47], cl
mov dword [ebp + 0x74], eax
cmp word [eax], 0x5b
mov edi, eax
sete byte [ebp + 0x57]
cmp byte [ebp + 0x57], 0
mov dword [ebp + 0x3c], edi
je 0x423359
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea ecx, [edi + eax*2 - 2]
jmp 0x42330e
mov word [ecx], bx
dec ecx
dec ecx
mov ax, word [ecx]
call fcn.00402d55
test al, al
jne 0x423309
cmp word [ecx], 0x5d
jne 0x423323
mov word [ecx], bx
push 2
pop edx
add edi, edx
xor ecx, ecx
jmp 0x42334e
mov eax, ecx
call fcn.00402d55
test al, al
jne 0x42334c
cmp cx, 0x5b
je 0x423343
cmp cx, 0x28
jne 0x423359
mov eax, dword [ebp + 0x1c]
add dword [ebp + 0x1c], edx
mov word [eax], cx
add edi, edx
mov cx, word [edi]
cmp cx, bx
mov dword [ebp + 0x3c], edi
jne 0x42332c
push 1
lea eax, [ebp + 0x74]
push eax
push 0x4c42e8
mov dword [ebp + 0x74], edi
call fcn.00446a34
mov ecx, dword [ebp + 0x74]
movzx eax, al
add esp, 0xc
cmp byte [ebp + 0x57], 0
mov edi, ecx
mov dword [ebp - 0x38], eax
mov dword [ebp + 0x4c], ebx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x60], ebx
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x14], ebx
mov byte [ebp + 0x7b], 0
je 0x42354f
mov esi, dword [ebp + 0x20]
xor eax, eax
mov ax, word [ecx]
xor dl, dl
cmp ax, 0x22
mov dword [ebp + 0x3c], ecx
mov dword [ebp + 0x30], ecx
mov byte [ebp + 0x6b], 0
je 0x4233df
cmp ax, 0x27
je 0x4233df
cmp ax, bx
je 0x423412
push eax
call fcn.004aadc6
add esp, 4
test al, al
jne 0x4233d7
xor esi, esi
add ecx, 2
mov dword [ebp + 0x48], ecx
jmp 0x423412
xor eax, eax
mov ax, word [ecx + 2]
push eax
call fcn.004aadc6
add esp, 4
test al, al
jne 0x4233f4
xor esi, esi
push 0xc1
lea eax, [ebp + 0x30]
push ebx
push eax
call fcn.0041a299
add esp, 0xc
mov dword [ebp + 0x48], eax
mov byte [ebp + 0x6b], 1
mov dl, 1
mov dword [ebp + 0x3c], eax
lea ecx, [ebp + 0x48]
call fcn.0040f813
mov edi, dword [ebp + 0x48]
xor ecx, ecx
jmp 0x4234af
mov eax, ecx
call fcn.00402d55
test al, al
je 0x423449
cmp dl, 1
jg 0x4234bb
lea ecx, [ebp + 0x48]
inc dl
call fcn.0040f813
mov edi, dword [ebp + 0x48]
dec edi
dec edi
jmp 0x4234aa
cmp cx, 0x3e
je 0x42350b
cmp cx, 0x3c
je 0x42350b
cmp cx, 0x3d
je 0x42350b
cmp cx, 0x21
je 0x42350b
cmp esi, ebx
je 0x4234a6
cmp dword [ebp + 0x20], ebx
je 0x4234a6
cmp cx, 0x26
je 0x42348c
cmp cx, 0x7c
je 0x42348c
cmp cx, 0x40
jne 0x4234a6
mov ax, word [edi + 2]
call fcn.00402d55
test al, al
je 0x4234a6
mov ax, word [edi - 2]
call fcn.00402d55
test al, al
jne 0x4234ef
test dl, dl
jg 0x4234bb
inc edi
inc edi
mov dword [ebp + 0x48], edi
mov cx, word [edi]
cmp cx, bx
jne 0x423424
cmp byte [ebp + 0x6b], 0
jne 0x42353d
push 0xc1
lea eax, [ebp + 0x30]
push ebx
push eax
call fcn.0041a299
add esp, 0xc
cmp byte [ebp + 0x7b], 0
mov dword [ebp + 0x3c], eax
je 0x42353d
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x14]
call fcn.00444b34
jmp 0x4235a8
lea eax, [edi + 2]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x423505
mov word [edi], bx
mov edi, eax
mov byte [ebp + 0x7b], 5
jmp 0x42350f
mov byte [ebp + 0x7b], 3
jmp 0x42350f
mov byte [ebp + 0x7b], 1
cmp byte [ebp + 0x7b], 1
lea ecx, [edi + 2]
mov dword [ebp + 0x30], ecx
jne 0x4234c1
mov ax, word [ecx]
cmp ax, 0x3e
je 0x423536
cmp ax, 0x3c
je 0x423536
cmp ax, 0x3d
je 0x423536
cmp ax, 0x21
jne 0x4234c1
inc ecx
inc ecx
mov dword [ebp + 0x30], ecx
jmp 0x4234c1
mov eax, dword [ebp + 0x3c]
cmp word [eax], bx
je 0x4235b1
mov word [eax], bx
inc eax
inc eax
mov dword [ebp + 0x3c], eax
jmp 0x4235b1
cmp dword [ebp + 0x20], ebx
je 0x423591
cmp word [ecx], 0x22
jne 0x423591
lea edi, [ecx + 2]
mov ax, word [edi]
cmp ax, bx
je 0x4235b1
inc edi
inc edi
cmp ax, 0x22
je 0x423591
mov ax, word [edi]
cmp ax, bx
jne 0x423565
jmp 0x423591
cmp ax, 0x3e
je 0x42359b
cmp ax, 0x3c
je 0x42359b
cmp ax, 0x3d
je 0x42359b
cmp ax, 0x21
je 0x42359b
inc edi
inc edi
mov ax, word [edi]
cmp ax, bx
jne 0x423577
jmp 0x4235b1
push edi
lea ecx, [ebp + 0x14]
mov byte [ebp + 0x7b], 1
call fcn.0044e03e
mov eax, dword [ebp + 0x14]
mov dword [ebp + 0x5c], eax
mov word [edi], bx
mov eax, dword [ebp]
push 0x4dbd30
mov dword [ebp + 0x30], eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov eax, dword [ebp + 0x74]
cmp word [eax], 0x2a
mov esi, dword [ebp - 0x1c]
jne 0x4235ee
cmp byte [ebp + 0x57], 0
je 0x4235ee
mov ecx, dword [ebp]
cmp dword [ebp + 0x34], ecx
jne 0x4235e0
cmp esi, ebx
je 0x4235ee
mov ecx, dword [ebp + 0x34]
inc eax
push 0x2a
inc eax
mov dword [ebp + 0x30], ecx
pop esi
mov dword [ebp + 0x74], eax
mov edi, dword [ebp + 0x28]
cmp byte [edi + 0x92], 0
jne 0x423697
cmp byte [edi + 9], 0
jne 0x423697
cmp esi, ebx
jne 0x42369b
push 1
push ebx
lea ecx, [ebp + 0x58]
push ecx
push eax
mov ecx, edi
call fcn.00455dfb
mov eax, dword [ebp + 0x58]
push ebx
push ebx
lea ecx, [ebp + 0x58]
push ecx
push eax
mov ecx, edi
mov dword [ebp - 0x48], eax
mov dword [ebp + 0x58], ebx
call fcn.004549e1
cmp dword [ebp + 0x5c], ebx
je 0x42368a
push 1
push ebx
lea eax, [ebp + 0x2c]
push eax
push dword [ebp + 0x5c]
mov ecx, edi
call fcn.00455dfb
mov eax, dword [ebp + 0x2c]
push ebx
push ebx
lea ecx, [ebp + 0x2c]
push ecx
push eax
mov ecx, edi
mov dword [ebp - 0x5c], eax
mov dword [ebp + 0x2c], ebx
call fcn.004549e1
push dword [ebp + 0x58]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
push dword [ebp + 0x2c]
lea ecx, [ebp + 0x58]
mov esi, eax
call fcn.00444a7c
mov eax, dword [ebp + 0x58]
lea eax, [eax + esi*2]
lea ecx, [ebp - 0x5c]
mov dword [ebp + 0x5c], eax
call fcn.0043e48d
lea ecx, [ebp - 0x48]
call fcn.0043e48d
jmp 0x4237d0
cmp esi, ebx
je 0x4236d8
cmp byte [edi + 9], 0
jne 0x4236b5
cmp word [eax], 0x26
je 0x4236b5
lea ecx, [ebp + 0x58]
push ecx
push eax
call fcn.0044d8c9
pop ecx
pop ecx
jmp 0x4236e7
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
call fcn.0041503d
cmp eax, ebx
je 0x4236c8
mov eax, dword [eax]
jmp 0x4236cd
mov eax, 0x4bfa2c
push eax
lea ecx, [ebp + 0x58]
call fcn.0044e03e
jmp 0x4236e7
push 1
push ebx
lea ecx, [ebp + 0x58]
push ecx
push eax
mov ecx, edi
call fcn.00455dfb
cmp dword [ebp + 0x5c], ebx
je 0x4237d0
push dword [ebp + 0x58]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
test esi, esi
mov ebx, eax
je 0x4237a7
mov eax, dword [ebp + 0x5c]
and dword [ebp + 0x10], 0
mov dword [ebp + 0x48], 0x4bfa2c
mov cx, word [eax]
cmp cx, 0x3e
je 0x42372c
cmp cx, 0x3c
je 0x42372c
cmp cx, 0x3d
je 0x42372c
cmp cx, 0x21
jne 0x423730
inc eax
inc eax
jmp 0x423711
mov ecx, dword [ebp + 0x28]
mov edi, eax
sub edi, dword [ebp + 0x5c]
sar edi, 1
cmp byte [ecx + 9], 0
jne 0x423746
cmp word [eax], 0x26
jne 0x423757
lea edx, [ebp + 0x10]
push edx
push eax
call fcn.0041cd9f
test eax, eax
je 0x423757
mov dword [ebp + 0x48], eax
push dword [ebp + 0x48]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov esi, eax
lea eax, [esi + edi]
add eax, ebx
push eax
lea ecx, [ebp + 0x58]
call fcn.00444a55
test edi, edi
je 0x423787
mov eax, dword [ebp + 0x58]
push edi
push dword [ebp + 0x5c]
lea eax, [eax + ebx*2]
push eax
call fcn.00405988
add esp, 0xc
mov eax, dword [ebp + 0x58]
inc esi
push esi
push dword [ebp + 0x48]
add edi, ebx
lea eax, [eax + edi*2]
push eax
call fcn.00405988
add esp, 0xc
lea ecx, [ebp + 0x10]
call fcn.0043e48d
jmp 0x4237c5
mov ecx, dword [ebp + 0x28]
push 1
push 0
lea eax, [ebp + 0x2c]
push eax
push dword [ebp + 0x5c]
call fcn.00455dfb
push dword [ebp + 0x2c]
lea ecx, [ebp + 0x58]
call fcn.00444a7c
mov eax, dword [ebp + 0x58]
lea eax, [eax + ebx*2]
mov dword [ebp + 0x5c], eax
xor ebx, ebx
mov eax, dword [ebp + 0x58]
push 0x4dbd30
mov dword [ebp + 0x74], eax
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
push dword [ebp + 0x74]
call fcn.00410df6
mov esi, dword [sym.imp.KERNEL32.DLL_lstrlenW]
pop ecx
push dword [ebp + 0x74]
call esi
mov edx, dword [ebp + 0x74]
mov edi, dword [ebp + 0x5c]
cmp edi, ebx
lea eax, [edx + eax*2]
mov dword [ebp - 0xc], eax
mov dword [ebp + 0x10], edx
mov dword [ebp + 0x48], edi
jne 0x423817
push edx
call esi
mov edx, dword [ebp + 0x74]
lea edi, [edx + eax*2]
mov dword [ebp + 0x48], edi
cmp edi, ebx
mov ecx, edx
mov dword [ebp + 8], ebx
je 0x423837
mov ax, word [edx]
jmp 0x42382e
cmp ecx, edi
jae 0x423837
inc ecx
inc ecx
mov ax, word [ecx]
call fcn.00402d55
test al, al
je 0x423825
sub ecx, edx
sar ecx, 1
cmp byte [ebp + 0x7b], 0
mov dword [ebp + 0x5c], ecx
jne 0x423880
cmp dword [ebp - 4], ebx
jne 0x423880
xor ecx, ecx
mov cx, word [edx]
cmp cx, 0x3a
je 0x423880
mov eax, dword [ebp + 0x30]
cmp dword [ebp + 0x18], eax
je 0x423861
cmp dword [ebp + 0x24], eax
jne 0x423872
mov eax, ecx
call fcn.004148c8
test al, al
jne 0x423880
cmp cx, 0x2d
je 0x423880
cmp dword [ebp + 0x20], ebx
je 0x423ced
jmp 0x4240c2
mov dword [ebp + 0x40], edi
cmp word [edx], 0x3a
jne 0x423893
cmp byte [ebp + 0x7b], 0
jne 0x423893
or dword [ebp + 0x30], 0xffffffff
cmp byte [ebp + 0x7b], 1
jne 0x4238b4
lea eax, [edi + 2]
mov cx, word [eax]
cmp cx, 0x3d
je 0x4238b1
cmp word [edi], 0x3c
jne 0x4238ba
cmp cx, 0x3e
jne 0x4238ba
mov dword [ebp + 0x40], eax
cmp byte [ebp + 0x7b], 0
je 0x4238be
add dword [ebp + 0x40], 2
lea ecx, [ebp + 0x40]
call fcn.0040f813
cmp byte [ebp + 0x3a], 0
mov ebx, dword [ebp + 0x40]
je 0x42390c
cmp word [ebx], 0x3f
jne 0x42390c
inc ebx
inc ebx
lea ecx, [ebp + 0x7c]
mov byte [ebp + 0x56], 1
mov dword [ebp + 0x40], ebx
call fcn.0040f813
mov esi, dword [ebp + 0x30]
cmp esi, dword [ebp + 0x34]
je 0x423915
movzx eax, word [edx]
cmp dword [ebp + 0x34], eax
je 0x423900
cmp dword [ebp + 0x18], eax
je 0x423900
cmp dword [ebp + 0x24], eax
jne 0x423912
inc edx
mov esi, eax
inc edx
mov dword [ebp + 8], esi
mov dword [ebp + 0x74], edx
jmp 0x423915
mov byte [ebp + 0x56], 0
jmp 0x4238e6
mov esi, dword [ebp + 0x30]
cmp dword [ebp - 4], 0
je 0x423948
cmp byte [ebp + 0x47], 0
jne 0x423948
cmp esi, dword [ebp + 0x24]
je 0x423948
lea ecx, [ebp + 0x74]
call fcn.0040f813
mov edx, dword [ebp + 0x74]
mov ax, word [edx]
cmp ax, 0x30
jb 0x423940
cmp ax, 0x39
jbe 0x423948
cmp ax, 0x2e
je 0x423948
xor esi, esi
xor eax, eax
cmp dword [ebp - 8], eax
jne 0x42395d
cmp dword [ebp + 8], eax
jne 0x42395d
cmp word [edx], 0x27
jne 0x42395d
mov esi, dword [ebp + 0x34]
cmp dword [ebp + 0x34], esi
jne 0x423a04
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], edx
call fcn.0040f813
lea ecx, [edi - 2]
mov edi, dword [ebp + 0x78]
jmp 0x423987
mov ax, word [ecx]
call fcn.00402d55
test al, al
je 0x42398b
dec ecx
dec ecx
cmp ecx, edi
jae 0x423979
sub ecx, edi
inc ecx
inc ecx
sar ecx, 1
mov esi, ecx
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], ebx
call fcn.0040f813
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp + 0x78]
add ecx, 0xfffffffe
jmp 0x4239b7
mov ax, word [ecx]
call fcn.00402d55
test al, al
je 0x4239bb
dec ecx
dec ecx
cmp ecx, edx
jae 0x4239a9
sub ecx, edx
inc ecx
inc ecx
sar ecx, 1
mov ebx, ecx
cmp esi, ebx
mov eax, esi
jle 0x4239cb
mov eax, ebx
test eax, eax
jle 0x4239ea
cmp dword [ebp - 0x40], 0
push eax
push edx
push edi
je 0x4239e0
call dword [sym.imp.shlwapi.dll_StrCmpNW]
jmp 0x4239e6
call dword [sym.imp.shlwapi.dll_StrCmpNIW]
test eax, eax
jne 0x4239ee
sub esi, ebx
mov eax, esi
cdq
xor ecx, ecx
mov edi, eax
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x50], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], ecx
jmp 0x423e3b
cmp dword [ebp + 0x24], esi
jne 0x423ab3
fldz
lea eax, [ebp + 4]
fstp qword [ebp + 4]
push eax
lea eax, [ebp + 0x74]
fldz
push eax
fstp qword [ebp - 0x10]
call fcn.00451488
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.00451488
fld qword [ebp + 4]
add esp, 0x10
call fcn.004ad598
fld qword [ebp - 0x10]
mov edi, eax
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x50], edx
call fcn.004ad598
cmp byte [ebp + 0x7b], 1
mov ecx, eax
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], edx
jg 0x423e3b
fild qword [ebp + 0x4c]
fld qword [ebp + 4]
fucompp
fnstsw ax
test ah, 0x44
jp 0x423a80
fild qword [ebp + 0x60]
fld qword [ebp - 0x10]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x423e3b
fld qword [ebp + 4]
fcomp qword [ebp - 0x10]
fnstsw ax
test ah, 0x41
jne 0x423a95
xor eax, eax
inc eax
jmp 0x4239ee
fld qword [ebp - 0x10]
fld qword [ebp + 4]
fucompp
fnstsw ax
test ah, 0x44
jp 0x423aab
xor eax, eax
jmp 0x4239ee
or eax, 0xffffffff
jmp 0x4239ee
cmp dword [ebp + 0x18], esi
jne 0x423ada
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.00451370
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.00451370
add esp, 0x10
jmp 0x423e35
cmp dword [ebp + 0x5c], 3
jl 0x4240b9
lea ecx, [ebp + 0x40]
mov byte [ebp + 0x6b], 0
mov byte [ebp + 0x3b], 1
call fcn.0040f813
mov eax, dword [ebp + 0x40]
cmp word [eax], 0x23
jne 0x423b06
inc eax
inc eax
mov dword [ebp + 0x40], eax
mov byte [ebp + 0x6b], 1
mov bl, byte [ebp + 0x20]
fldz
fstp qword [ebp - 0x18]
mov byte [ebp + 0x7b], 0
cmp word [eax], 0x2a
jne 0x423b21
inc eax
inc eax
mov dword [ebp + 0x40], eax
mov byte [ebp + 0x3b], 0
mov dword [ebp + 0xc], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0044a46f
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0044a0e0
mov eax, dword [ebp + 0xc]
add esp, 0x10
cmp word [eax], 0x2e
jne 0x423b61
fld qword [ebp - 0x18]
call fcn.004ad598
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x64], edx
push 3
pop edi
cmp dword [ebp + 0x5c], edi
jl 0x423ca4
cmp dword [ebp + 0x5c], 5
jg 0x423ca4
mov esi, dword [ebp + 0x10]
push edi
push 0x4c42e0
push esi
call dword [sym.imp.shlwapi.dll_StrCmpNIW]
test eax, eax
jne 0x423ca7
cmp dword [ebp + 0x5c], edi
je 0x423bc9
mov ax, word [esi + 6]
xor ecx, ecx
mov cx, word [esi + 8]
mov edx, 0xffdf
and eax, edx
and ecx, edx
cmp dword [ebp + 0x5c], 4
jne 0x423bcf
cmp ax, 0x41
jne 0x423bb7
xor bl, bl
jmp 0x423bc9
cmp ax, 0x42
je 0x423bf9
cmp ax, 0x55
jne 0x423cbd
mov bl, 1
mov byte [ebp + 0x7b], 1
jmp 0x423bf9
cmp dword [ebp + 0x5c], 5
jne 0x423ca7
cmp ax, 0x42
jne 0x423cbd
cmp cx, 0x55
jne 0x423bed
mov bl, 1
jmp 0x423bf9
cmp cx, 0x41
jne 0x423cbd
xor bl, bl
movsx eax, bl
push eax
call fcn.00415188
cmp byte [ebp + 0x7b], 0
mov edi, eax
mov eax, edx
pop ecx
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x50], eax
mov ecx, edi
je 0x423c25
add ecx, 0xfffff
adc eax, 0
shrd ecx, eax, 0x14
shr eax, 0x14
cmp byte [ebp + 0x56], 0
jne 0x424285
xor esi, esi
cmp dword [ebp + 8], esi
jle 0x4242ed
cmp byte [ebp + 0x7b], 0
je 0x423e38
mov dword [ebp - 0x20], eax
and dword [ebp - 0x20], 0x80000000
and eax, 0x7fffffff
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], ecx
fild qword [ebp - 0x64]
mov dword [ebp - 0x24], esi
fild qword [ebp - 0x24]
fchs
faddp st(1)
fcom qword [ebp - 0x18]
fnstsw ax
test ah, 0x41
jne 0x423c77
xor eax, eax
fstp st(0)
inc eax
jmp 0x423c8e
fld qword [ebp - 0x18]
fld st(1)
fucompp
fnstsw ax
fstp st(0)
test ah, 0x44
jp 0x423c8b
xor eax, eax
jmp 0x423c8e
or eax, 0xffffffff
cdq
mov edi, eax
xor ecx, ecx
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x50], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], esi
jmp 0x423e3b
mov esi, dword [ebp + 0x10]
cmp dword [ebp + 0x5c], edi
jne 0x423cbd
push edi
push 0x4c42d8
push esi
call dword [sym.imp.shlwapi.dll_StrCmpNIW]
test eax, eax
je 0x423d39
mov edx, dword [ebp + 0x74]
cmp word [edx], 0x3a
jne 0x423e5a
mov ax, word [edx + 2]
cmp ax, 0x65
jne 0x423cdf
add edx, 4
mov dword [ebp + 0x74], edx
jmp 0x4240c2
cmp ax, 0x70
jne 0x423d29
add edx, 4
mov dword [ebp + 0x74], edx
xor ebx, ebx
push 0x3f
lea eax, [ebp + 0x78]
push 0x2a
push eax
mov dword [ebp + 0x78], edx
call fcn.0043e9e8
mov eax, dword [ebp + 0x78]
mov ax, word [eax]
neg ax
push ebx
push ebx
push ebx
sbb eax, eax
and eax, 0x101
push eax
push dword [ebp + 0x74]
call fcn.00417f81
add esp, 0x20
mov esi, eax
neg esi
sbb esi, esi
neg esi
jmp 0x4241c7
cmp ax, 0x6b
jne 0x423e5a
add edx, 4
mov dword [ebp + 0x74], edx
mov edx, dword [ebp + 0x40]
xor eax, eax
mov ax, word [edx]
push eax
call fcn.004aadc6
add esp, 4
test al, al
je 0x423d6f
xor ecx, ecx
mov cx, word [edx + 2]
push ecx
call fcn.004aadc6
add esp, 4
test al, al
jne 0x423d6b
or cx, 0x20
cmp cx, 0x78
jne 0x423d6f
mov byte [ebp + 0x6b], 2
xor esi, esi
cmp byte [ebp + 0x6b], 0
jne 0x423d87
push esi
push edx
call fcn.00417e47
cdq
pop ecx
pop ecx
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x64], edx
cmp dword [ebp + 0x64], esi
jl 0x4242ed
jg 0x423d9b
cmp dword [ebp + 0x60], esi
jbe 0x4242ed
cmp dword [ebp + 0x64], esi
jl 0x423dbd
jg 0x423da8
cmp dword [ebp + 0x60], 0x61
jb 0x423dbd
cmp dword [ebp + 0x64], esi
jg 0x423dbd
jl 0x423db5
cmp dword [ebp + 0x60], 0x7a
ja 0x423dbd
add dword [ebp + 0x60], 0xffffffe0
adc dword [ebp + 0x64], 0xffffffff
push dword [ebp + 0x60]
call dword [sym.imp.user32.dll_GetAsyncKeyState]
mov cx, ax
and cx, 0x8000
neg cx
mov word [ebp - 0xb2], si
sbb ecx, ecx
and ecx, dword [ebp + 0x60]
cmp ecx, 0x41
mov eax, ecx
cdq
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x50], edx
mov word [ebp - 0xb4], cx
jl 0x423df7
cmp ecx, 0x5a
jle 0x423e17
cmp ecx, 0x30
jl 0x423e01
cmp ecx, 0x39
jle 0x423e17
push ecx
lea eax, [ebp - 0xb4]
push str.0x_lX
push eax
call dword [sym.imp.user32.dll_wsprintfW]
add esp, 0xc
cmp byte [ebp + 0x56], 0
mov ecx, dword [ebp + 0x28]
lea eax, [ebp - 0xb4]
push eax
jne 0x42428c
push str.PressKey
call fcn.0044414b
mov edi, dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x60]
mov esi, dword [ebp + 0x48]
mov dx, word [esi]
test dx, dx
jne 0x423f96
xor esi, esi
or edi, dword [ebp + 0x50]
je 0x4241c7
jmp 0x423fb4
mov edx, dword [ebp + 0x10]
mov cx, word [edx]
xor ebx, ebx
xor eax, eax
lea edi, [ebp - 0x50]
mov word [ebp - 0x58], cx
mov word [ebp - 0x56], 0x3a
mov word [ebp - 0x54], 0x5c
mov word [ebp - 0x52], bx
stosd dword es:[edi], eax
mov edi, dword [ebp + 0x48]
xor esi, esi
cmp cx, 0x5c
lea eax, [ebp - 0x58]
jne 0x423e9f
cmp edi, ebx
mov eax, edx
je 0x423e9f
xor ecx, ecx
mov cx, word [edi]
cmp cx, bx
je 0x423e9f
mov esi, ecx
mov word [edi], bx
movsx ecx, byte [ebp + 0x20]
push ebx
push ecx
push eax
call fcn.00410e52
add esp, 0xc
cmp si, bx
je 0x423eb6
mov word [edi], si
cmp byte [ebp + 0x56], 0
jne 0x424298
cmp dword [ebp + 8], ebx
jle 0x4242ac
cmp byte [ebp + 0x3b], 0
je 0x423f59
mov ecx, eax
shrd ecx, edx, 0x14
shr edx, 0x14
mov dword [ebp - 0x28], edx
mov esi, 0x7fffffff
and edx, esi
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], edx
mov edx, dword [ebp + 0xc]
mov ecx, 0x80000000
and dword [ebp - 0x28], ecx
fild qword [ebp - 0x6c]
cmp word [edx], 0x2e
mov dword [ebp - 0x2c], ebx
fild qword [ebp - 0x2c]
fchs
faddp st(1)
jne 0x423f34
and eax, 0xfffff
mov dword [ebp - 0x74], eax
xor eax, eax
mov dword [ebp - 0x30], eax
and eax, esi
and dword [ebp - 0x30], ecx
mov dword [ebp - 0x70], eax
fild qword [ebp - 0x74]
mov dword [ebp - 0x34], ebx
fild qword [ebp - 0x34]
fchs
faddp st(1)
fmul qword [0x4c42b0]
faddp st(1)
fcom qword [ebp - 0x18]
fnstsw ax
test ah, 0x41
jne 0x423f45
fstp st(0)
xor eax, eax
inc eax
jmp 0x423f80
fld qword [ebp - 0x18]
fld st(1)
fucompp
fnstsw ax
fstp st(0)
test ah, 0x44
jp 0x423f7d
xor eax, eax
jmp 0x423f80
cmp dword [ebp + 0x64], ebx
jg 0x423f65
jl 0x423f40
cmp dword [ebp + 0x60], ebx
jb 0x423f40
cmp edx, dword [ebp + 0x64]
jb 0x423f73
ja 0x423f40
cmp eax, dword [ebp + 0x60]
jbe 0x423f76
jmp 0x423f40
cmp eax, dword [ebp + 0x60]
jne 0x423f7d
cmp edx, dword [ebp + 0x64]
je 0x423f55
or eax, 0xffffffff
cdq
mov edi, eax
xor ecx, ecx
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x50], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], ebx
jmp 0x423e3b
push 0x3d
pop ebx
cmp dx, bx
jne 0x423fba
cmp edi, ecx
jne 0x424091
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jne 0x424091
xor esi, esi
inc esi
jmp 0x4241c7
cmp dx, 0x3e
jne 0x423fde
cmp word [esi + 2], bx
jne 0x423fde
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jl 0x424091
jg 0x423fb2
cmp edi, ecx
jb 0x424091
jmp 0x423fb2
cmp dx, 0x3c
jne 0x424017
mov ax, word [esi + 2]
cmp ax, bx
jne 0x424005
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jg 0x424091
jl 0x423fb2
cmp edi, ecx
ja 0x424091
jmp 0x423fb2
cmp ax, 0x3e
jne 0x424017
cmp edi, ecx
jne 0x423fb2
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jmp 0x42408b
cmp dx, 0x21
jne 0x424032
mov ax, word [esi + 2]
cmp ax, bx
je 0x42400b
cmp ax, 0x3e
je 0x423fed
cmp ax, 0x3c
je 0x423fc6
cmp dx, 0x3e
jne 0x42404f
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jl 0x424091
jg 0x423fb2
cmp edi, ecx
jbe 0x424091
jmp 0x423fb2
cmp dx, 0x3c
jne 0x42406c
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x50], eax
jg 0x424091
jl 0x423fb2
cmp edi, ecx
jae 0x424091
jmp 0x423fb2
cmp dx, 0x26
jne 0x424079
or edi, dword [ebp + 0x50]
je 0x424091
jmp 0x424088
cmp dx, 0x7c
jne 0x424098
or edi, dword [ebp + 0x50]
jne 0x423fb2
or ecx, dword [ebp + 0x64]
jne 0x423fb2
xor esi, esi
jmp 0x4241c7
cmp dx, 0x40
jne 0x4242ed
xor eax, eax
or edi, dword [ebp + 0x50]
je 0x4240aa
inc eax
xor esi, esi
or ecx, dword [ebp + 0x64]
je 0x4240b2
inc esi
xor esi, eax
jmp 0x4241c7
cmp dword [ebp - 4], eax
je 0x4242ed
push edx
call fcn.004130a1
pop ecx
push eax
mov dword [ebp + 0x74], eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov ecx, dword [ebp + 0x74]
xor ebx, ebx
mov bx, word [ecx]
mov edi, eax
mov dword [ebp + 0x78], 0xfffffff8
and ebx, 0xffdf
cmp bx, 0x41
jb 0x424148
cmp bx, 0x5a
ja 0x424148
cmp word [ecx + 2], 0x3a
jne 0x424148
cmp word [ecx + 4], 0
je 0x42411b
cmp bx, 0x42
ja 0x424148
push ebx
call fcn.004ac576
neg eax
sbb eax, eax
inc eax
pop ecx
mov dword [ebp + 0x78], eax
je 0x424145
call dword [sym.imp.KERNEL32.DLL_GetLogicalDrives]
xor ecx, ecx
mov cl, bl
sub cl, 0x41
mov esi, eax
shr esi, cl
and esi, 1
je 0x4241c7
mov ecx, dword [ebp + 0x74]
cmp word [ecx + 4], 0
je 0x4241c7
jmp 0x424148
mov ecx, dword [ebp + 0x74]
test edi, edi
jle 0x424164
xor eax, eax
mov ax, word [ecx + edi*2 - 2]
push eax
call fcn.0040f8a0
add esp, 4
test al, al
je 0x424164
mov bl, 1
jmp 0x424184
xor bl, bl
jmp 0x42418a
xor eax, eax
lea edx, [ecx + edi*2]
mov ax, word [edx]
push eax
call fcn.0040f8a0
add esp, 4
test al, al
je 0x424187
and word [edx], 0
mov ecx, dword [ebp + 0x74]
dec edi
jns 0x424168
xor edi, edi
inc edi
xor esi, esi
cmp edi, esi
je 0x4241c7
cmp dword [ebp - 0x4c], esi
je 0x4241b9
mov ax, word [ecx]
cmp ax, si
je 0x4241b9
cmp word [ecx + 2], 0x3a
jne 0x4241b9
cmp dword [ebp + 0x78], esi
jg 0x4241c7
jge 0x4241b9
push eax
call fcn.004ac576
test eax, eax
pop ecx
je 0x4241c7
mov ecx, dword [ebp + 0x74]
movsx eax, bl
push eax
push ecx
call fcn.004ac7b0
pop ecx
pop ecx
mov esi, eax
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x4241d5
test esi, esi
sete al
jmp 0x4241da
test esi, esi
setne al
mov edx, dword [ebp + 0x1c]
push 2
lea ecx, [eax + 0x30]
pop edi
mov word [edx], cx
add edx, edi
cmp byte [ebp + 0x57], 0
mov dword [ebp + 0x1c], edx
je 0x4242dc
mov esi, dword [ebp + 0x3c]
mov cx, word [esi]
test cx, cx
je 0x4242b1
cmp cx, 0x5b
je 0x424248
cmp cx, 0x5d
je 0x424248
cmp cx, 0x28
je 0x424248
cmp cx, 0x29
je 0x424248
cmp cx, 0x26
je 0x424248
cmp cx, 0x7c
jne 0x424235
mov ax, word [esi + 2]
call fcn.00402d55
test al, al
jne 0x424248
cmp cx, 0x40
je 0x424248
mov eax, ecx
call fcn.00402d55
test al, al
je 0x42425d
jmp 0x424250
mov word [edx], cx
add edx, edi
mov dword [ebp + 0x1c], edx
add esi, edi
mov cx, word [esi]
test cx, cx
mov dword [ebp + 0x3c], esi
jne 0x424204
cmp word [esi], 0
je 0x4242b1
lea ecx, [ebp + 0x14]
call fcn.0043e48d
lea ecx, [ebp + 0x2c]
call fcn.0043e48d
lea ecx, [ebp + 0x58]
call fcn.0043e48d
mov edi, dword [ebp + 0x3c]
xor ebx, ebx
jmp 0x423359
push dword [ebp + 0x28]
push eax
push ecx
jmp 0x42429d
push dword [ebp + 0x7c]
call fcn.0044414b
xor esi, esi
jmp 0x4242f2
push dword [ebp + 0x28]
push edx
push eax
push dword [ebp + 0x7c]
call fcn.00412dca
add esp, 0x10
mov esi, eax
jmp 0x4242f2
or esi, 0xffffffff
jmp 0x4242f2
mov eax, dword [ebp - 0x44]
mov word [eax - 6], 0x23
mov word [eax - 4], 0x26
lea ecx, [ebp - 0xf4]
add eax, 0xfffffffe
push ecx
mov ecx, dword [ebp + 0x28]
mov word [eax], 0x3d
and word [edx], 0
push eax
call fcn.0048c753
cmp dword [ebp - 0x3c], 0
je 0x4242a8
xor ecx, ecx
test eax, eax
sete cl
mov eax, ecx
jmp 0x4242a8
mov esi, 0x80070057
lea ecx, [ebp + 0x14]
call fcn.0043e48d
lea ecx, [ebp + 0x2c]
call fcn.0043e48d
lea ecx, [ebp + 0x58]
call fcn.0043e48d
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 0xc