Function at 0x10009fa3
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
push 0x10
call fcn.1004b13c
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebp - 0x24], 0
push 0x10
call fcn.1004b13c
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
push 0x10
call fcn.1004b13c
add esp, 4
mov dword [ebp - 0x34], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
cmp dword [ebp + 0x10], 0x100
jne 0x1000a34b
cmp dword [ebp + 0x14], 9
jne 0x1000a212
mov eax, str.zyStyle
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000634c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a0d3
push ebx
call fcn.1004b142
add esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 4], eax
push 0xfffffff0
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
nop
nop
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push 0x1000
push 0x80000301
push 0
push dword [ebp - 0x48]
push 2
mov ebx, 0xc4
call fcn.1004c280
add esp, 0x1c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x1000a15f
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0xc4
call fcn.1004c280
add esp, 0x1c
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jne 0x1000a15f
mov eax, 1
jmp 0x1000a164
mov eax, 0
test eax, eax
je 0x1000a20d
push 0x10
xor eax, eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push 0x8000
push 0x80000301
push 0
push dword [ebp - 0x48]
push 2
mov ebx, 0xc4
call fcn.1004c280
add esp, 0x1c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
mov eax, 0
setne al
mov dword [ebp - 8], eax
push 2
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_GetAncestor]
nop
nop
mov dword [ebp - 0x48], eax
push dword [ebp - 8]
push dword [ebp + 0xc]
push dword [ebp - 0x48]
xor eax, eax
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
nop
nop
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1000a20d
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_SetFocus]
nop
nop
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], 1
mov eax, 0
jmp 0x1000ac4d
jmp 0x1000a346
cmp dword [ebp + 0x14], 0xd
jne 0x1000a346
mov eax, str.zyStyle
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000634c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a243
push ebx
call fcn.1004b142
add esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 4], eax
push 0xfffffff0
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
nop
nop
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push 0x1000
push 0x80000301
push 0
push dword [ebp - 0x48]
push 2
mov ebx, 0xc4
call fcn.1004c280
add esp, 0x1c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x1000a2cf
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 4]
push 2
mov ebx, 0xc4
call fcn.1004c280
add esp, 0x1c
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jne 0x1000a2cf
mov eax, 1
jmp 0x1000a2d4
mov eax, 0
test eax, eax
je 0x1000a346
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_GetParent]
nop
nop
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push 1
push 2
mov ebx, 0xa00
call fcn.1004c3a0
add esp, 0x1c
mov dword [ebp - 0x48], eax
push 0
push dword [ebp - 0x48]
push 0x111
push dword [ebp - 0x10]
xor eax, eax
call dword [sym.imp.USER32.dll_SendMessageW]
nop
nop
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], 1
mov eax, 0
jmp 0x1000ac4d
jmp 0x1000ac31
cmp dword [ebp + 0x10], 0x83
jne 0x1000aad1
mov eax, str.vCenter
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.100081d9
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a37f
push ebx
call fcn.1004b142
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x1000aacc
push 0
push 0
push 0x31
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_SendMessageW]
nop
nop
mov dword [ebp - 0x14], eax
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_GetDC]
nop
nop
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x14], 0
jne 0x1000a3d4
push 0x11
xor eax, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
nop
nop
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push dword [ebp - 0x18]
xor eax, eax
call dword [sym.imp.GDI32.dll_SelectObject]
nop
nop
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push 0
push 0x80000301
push 0
push 0x400
push 2
mov ebx, 0xc8
call fcn.1004c260
add esp, 0x1c
push eax
push dword [ebp - 0x20]
push 2
push 0x1005c0bb
push dword [ebp - 0x18]
xor eax, eax
call dword [sym.imp.USER32.dll_DrawTextA]
nop
nop
mov ebx, dword [ebp - 0x20]
add ebx, 0xc
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x20]
add ebx, 4
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
mov ebx, dword [ebp - 0x4c]
fild dword [ebx]
fstp qword [ebp - 0x5c]
fsub qword [ebp - 0x5c]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.10001fa4
mov dword [ebp - 0x24], eax
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
xor eax, eax
call dword [sym.imp.GDI32.dll_SelectObject]
nop
nop
push dword [ebp - 0x18]
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_ReleaseDC]
nop
nop
push dword [ebp - 0x28]
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_GetWindowRect]
nop
nop
mov eax, str.uiCX
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.100081d9
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a4bf
push ebx
call fcn.1004b142
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x1000a528
mov eax, str.uiCX
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000634c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a4f0
push ebx
call fcn.1004b142
add esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov eax, str.uiCY
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000634c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a51d
push ebx
call fcn.1004b142
add esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x30], eax
jmp 0x1000a6b4
push dword [ebp - 0x34]
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_GetClientRect]
nop
nop
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 0xc]
call fcn.1000ac79
mov ebx, dword [ebp - 0x28]
add ebx, 8
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x34]
add ebx, 8
mov dword [ebp - 0x50], ebx
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x50]
fild dword [ebx]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
mov ebx, dword [ebp - 0x54]
fild dword [ebx]
fstp qword [ebp - 0x64]
fsub qword [ebp - 0x64]
fstp qword [ebp - 0x6c]
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
mov ebx, dword [ebp - 0x4c]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fsub qword [ebp - 0x7c]
fsub qword [ebp - 0x6c]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
fdiv qword [0x1005c015]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.10001fa4
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
add ebx, 0xc
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x28]
add ebx, 4
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x34]
add ebx, 0xc
mov dword [ebp - 0x50], ebx
mov ebx, dword [ebp - 0x34]
add ebx, 4
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x50]
fild dword [ebx]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
mov ebx, dword [ebp - 0x54]
fild dword [ebx]
fstp qword [ebp - 0x64]
fsub qword [ebp - 0x64]
fstp qword [ebp - 0x6c]
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
mov ebx, dword [ebp - 0x4c]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fsub qword [ebp - 0x7c]
fsub qword [ebp - 0x6c]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
fdiv qword [0x1005c015]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.10001fa4
mov dword [ebp - 0x30], eax
push dword [ebp - 0x2c]
mov eax, str.uiCX
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000726d
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a68d
push ebx
call fcn.1004b142
add esp, 4
push dword [ebp - 0x30]
mov eax, str.uiCY
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000726d
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a6b4
push ebx
call fcn.1004b142
add esp, 4
mov ebx, dword [ebp - 0x28]
add ebx, 0xc
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x28]
add ebx, 4
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
mov ebx, dword [ebp - 0x4c]
fild dword [ebx]
fstp qword [ebp - 0x5c]
fsub qword [ebp - 0x5c]
fild dword [ebp - 0x24]
fstp qword [ebp - 0x64]
fsub qword [ebp - 0x64]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
fdiv qword [0x1005c015]
fstp qword [ebp - 0x74]
fld qword [ebp - 0x74]
call fcn.10001fa4
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fchs
fstp qword [ebp - 0x58]
mov ebx, dword [ebp - 0x28]
add ebx, 4
mov dword [ebp - 0x5c], ebx
mov ebx, dword [ebp - 0x5c]
fild dword [ebx]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
fchs
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
call fcn.10001fa4
push eax
fld qword [ebp - 0x58]
call fcn.10001fa4
push eax
push dword [ebp - 0x28]
xor eax, eax
call dword [sym.imp.USER32.dll_OffsetRect]
nop
nop
mov eax, str.rectNCTop
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.100081d9
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a792
push ebx
call fcn.1004b142
add esp, 4
cmp dword [ebp - 0x4c], 0
jne 0x1000a7e1
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push 0x10
call fcn.10002bfb
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x3c]
mov eax, str.rectNCTop
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000726d
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a7dc
push ebx
call fcn.1004b142
add esp, 4
jmp 0x1000a80e
mov eax, str.rectNCTop
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000634c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a808
push ebx
call fcn.1004b142
add esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], eax
mov eax, str.rectNCBottom
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.100081d9
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a835
push ebx
call fcn.1004b142
add esp, 4
cmp dword [ebp - 0x4c], 0
jne 0x1000a884
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push 0x10
call fcn.10002bfb
mov dword [ebp - 0x40], eax
push dword [ebp - 0x40]
mov eax, str.rectNCBottom
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000726d
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a87f
push ebx
call fcn.1004b142
add esp, 4
jmp 0x1000a8b1
mov eax, str.rectNCBottom
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000634c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000a8ab
push ebx
call fcn.1004b142
add esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x3c], 0
je 0x1000a8ec
mov ebx, dword [ebp - 0x28]
add ebx, 0xc
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
cmp dword [ebx], 0
jle 0x1000a8ec
mov ebx, dword [ebp - 0x28]
add ebx, 8
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x54]
cmp dword [ebx], 0
jle 0x1000a8ec
mov eax, 1
jmp 0x1000a8f1
mov eax, 0
test eax, eax
je 0x1000a93f
push 0x10
push dword [ebp - 0x28]
push dword [ebp - 0x3c]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
fild dword [ebp - 0x38]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 0x24]
fstp qword [ebp - 0x54]
fadd qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
call fcn.10001fa4
push eax
push 0
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
push dword [ebp - 0x3c]
call fcn.1000acd2
cmp dword [ebp - 0x40], 0
je 0x1000a97a
mov ebx, dword [ebp - 0x28]
add ebx, 0xc
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
cmp dword [ebx], 0
jle 0x1000a97a
mov ebx, dword [ebp - 0x28]
add ebx, 8
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x54]
cmp dword [ebx], 0
jle 0x1000a97a
mov eax, 1
jmp 0x1000a97f
mov eax, 0
test eax, eax
je 0x1000a9cd
push 0x10
push dword [ebp - 0x28]
push dword [ebp - 0x40]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
fild dword [ebp - 0x38]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 0x24]
fstp qword [ebp - 0x54]
fadd qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
push dword [ebp - 0x30]
push 0
fld qword [ebp - 0x5c]
call fcn.10001fa4
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x40]
call fcn.1000acd2
push 4
push dword [ebp + 0x18]
call fcn.10003132
mov dword [ebp - 0x50], eax
fild dword [ebp - 0x50]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [ebp - 0x38]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
fld qword [ebp - 0x60]
call fcn.10001fa4
push eax
push 4
push dword [ebp + 0x18]
call fcn.10003153
push 0xc
push dword [ebp + 0x18]
call fcn.10003132
mov dword [ebp - 0x50], eax
fild dword [ebp - 0x50]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [ebp - 0x38]
fstp qword [ebp - 0x58]
fsub qword [ebp - 0x58]
fstp qword [ebp - 0x60]
fld qword [ebp - 0x60]
call fcn.10001fa4
push eax
push 0xc
push dword [ebp + 0x18]
call fcn.10003153
push 0
push dword [ebp + 0x18]
call fcn.10003132
mov dword [ebp - 0x50], eax
fild dword [ebp - 0x50]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [ebp - 0x2c]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
fld qword [ebp - 0x60]
call fcn.10001fa4
push eax
push 0
push dword [ebp + 0x18]
call fcn.10003153
push 8
push dword [ebp + 0x18]
call fcn.10003132
mov dword [ebp - 0x50], eax
fild dword [ebp - 0x50]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [ebp - 0x30]
fstp qword [ebp - 0x58]
fsub qword [ebp - 0x58]
fstp qword [ebp - 0x60]
fld qword [ebp - 0x60]
call fcn.10001fa4
push eax
push 8
push dword [ebp + 0x18]
call fcn.10003153
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], 1
mov eax, 0
jmp 0x1000ac4d
jmp 0x1000ac31
cmp dword [ebp + 0x10], 0x85
jne 0x1000ac1c
mov eax, str.vCenter
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.100081d9
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000ab05
push ebx
call fcn.1004b142
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x1000ac17
mov eax, str.rectNCTop
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000634c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000ab36
push ebx
call fcn.1004b142
add esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], eax
mov eax, str.rectNCBottom
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 8]
call fcn.1000634c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000ab63
push ebx
call fcn.1004b142
add esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x3c], 0
je 0x1000ab84
cmp dword [ebp - 0x40], 0
je 0x1000ab84
mov eax, 1
jmp 0x1000ab89
mov eax, 0
test eax, eax
je 0x1000ac17
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_DefWindowProcW]
nop
nop
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_GetWindowDC]
nop
nop
mov dword [ebp - 0x18], eax
push 5
xor eax, eax
call dword [sym.imp.USER32.dll_GetSysColor]
nop
nop
push eax
xor eax, eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
nop
nop
mov dword [ebp - 0x44], eax
push dword [ebp - 0x44]
push dword [ebp - 0x3c]
push dword [ebp - 0x18]
xor eax, eax
call dword [sym.imp.USER32.dll_FillRect]
nop
nop
push dword [ebp - 0x44]
push dword [ebp - 0x40]
push dword [ebp - 0x18]
xor eax, eax
call dword [sym.imp.USER32.dll_FillRect]
nop
nop
push dword [ebp - 0x44]
xor eax, eax
call dword [sym.imp.GDI32.dll_DeleteObject]
nop
nop
push dword [ebp - 0x18]
push dword [ebp + 0xc]
xor eax, eax
call dword [sym.imp.USER32.dll_ReleaseDC]
nop
nop
jmp 0x1000ac31
cmp dword [ebp + 0x10], 0x82
jne 0x1000ac31
push dword [ebp + 8]
call fcn.1000adcd
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.10009b1e
jmp 0x1000ac4d
push eax
mov ebx, dword [ebp - 0x20]
push ebx
call fcn.1004b142
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
call fcn.1004b142
add esp, 4
mov ebx, dword [ebp - 0x34]
push ebx
call fcn.1004b142
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x18