Function at 0x4016e0
Capabilities:
Check for foreground window switch
Check for time delay via gettickcount
Get graphical window text
Hide graphical window
Log keystrokes via polling
Resolve function by parsing pe exports
Set current directory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1388
call fcn.004ab360
push ebx
push ebp
push esi
push edi
mov ebp, edx
mov dword [esp + 0x74], ebp
mov ebx, ecx
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x2d], 0
cmp ebp, 2
jne 0x401728
cmp byte [0x4db43f], 0
mov ebp, 1
mov dword [esp + 0x74], ebp
jne 0x401728
mov byte [0x4db43f], 1
mov byte [esp + 0x2d], 1
cmp dword [0x4dec28], 0
je 0x40176a
cmp dword [0x4dec18], 0
je 0x401750
push dword [0x4dec10]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [0x4dec18], 0
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [0x4dec28], 0
mov dword [0x4dec10], 0
cmp ebx, 0x8000012f
jne 0x40178a
mov ebx, 0xa
mov byte [esp + 0x1a], 1
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x64], 0
jmp 0x4017ac
cmp ebx, 5
setle al
mov byte [esp + 0x1a], al
test al, al
je 0x4017a2
mov dword [esp + 0x64], 0
jmp 0x4017ac
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x64], eax
cmp dword [0x4dc264], 0
je 0x4017ba
call fcn.00403560
cmp dword [0x4deb78], 0
mov esi, 1
mov byte [esp + 0x58], 0
je 0x4017e2
call fcn.00403380
mov ecx, dword [esp + 0x58]
test al, al
movzx ecx, cl
cmovne ecx, esi
mov dword [esp + 0x58], ecx
test ebx, ebx
jle 0x40181c
cmp ebp, 1
jne 0x40181c
inc dword [0x4db784]
cmp byte [0x4db43e], 0
mov byte [esp + 0x2e], 1
jne 0x401821
push 0
push 0xa
push 9
push dword [0x4db780]
call dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
setne byte [0x4db43e]
jmp 0x401821
mov byte [esp + 0x2e], 0
xor esi, esi
mov byte [esp + 0x2f], 0
mov byte [esp + 0x2c], 0
mov dword [esp + 0x14], esi
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x40185c
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [esp + 0x14]
jmp 0x401862
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x401862
call fcn.0046c340
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [esp + 0x14]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
call ebp
cmp dword [esp + 0x5c], 0
mov ebx, eax
jle 0x401920
cmp byte [esp + 0x2c], 0
jne 0x401920
cmp byte [0x4db43f], 0
jne 0x40192d
cmp dword [0x4d89b8], 0
je 0x4018e2
cmp dword [0x4db444], 0
jne 0x4018e2
mov ecx, dword [0x4d89c0]
cmp byte [ecx + 0xec], 0
jne 0x4018d9
cmp byte [ecx + 0xee], 0
jne 0x4018d9
cmp dword [ecx + 0xe0], 0xffffffff
jle 0x4018d9
call ebp
mov ecx, dword [0x4d89c0]
sub eax, dword [ecx + 0xdc]
cmp eax, dword [ecx + 0xe0]
jb 0x4018d9
mov byte [ecx + 0xec], 1
movzx ecx, byte [ecx + 0xec]
jmp 0x4018e4
xor ecx, ecx
xor edx, edx
mov eax, 0x311
test ecx, ecx
cmovne eax, edx
push eax
push edx
push edx
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x401862
call ebp
mov ecx, eax
sub ecx, ebx
cmp ecx, 3
jbe 0x401b9f
mov dword [0x4debc8], eax
jmp 0x401b9f
cmp byte [0x4db43f], 0
je 0x401a8f
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, eax
test esi, esi
je 0x401a8f
push 0
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [0x4de014]
jne 0x401a8f
cmp dword [0x4db77c], 0
je 0x4019b6
push 0x20
lea eax, [esp + 0x19c]
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_GetClassNameW]
call esi
mov ecx, str.32770
lea eax, [esp + 0x198]
nop word [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4019a6
test dx, dx
je 0x4019a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4019a6
add eax, 4
add ecx, 4
test dx, dx
jne 0x401980
xor eax, eax
jmp 0x4019ab
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
jne 0x401a0d
jmp 0x4019bc
mov esi, dword [sym.imp.USER32.dll_GetClassNameW]
call dword [sym.imp.USER32.dll_GetFocus]
test eax, eax
je 0x401a8f
push 0x20
lea ecx, [esp + 0x19c]
push ecx
push eax
call esi
lea eax, [esp + 0x198]
push str.SysTreeView32
push eax
call fcn.0049466a
add esp, 8
test eax, eax
je 0x401a0d
lea eax, [esp + 0x198]
push str.SysListView32
push eax
call fcn.0049466a
add esp, 8
test eax, eax
jne 0x401a8f
call fcn.00403b90
push 0
push 0x1ff
neg eax
push 0
sbb esi, esi
lea eax, [esp + 0x40]
push 0
and esi, 0xfffffcee
push eax
add esi, 0x311
call edi
test eax, eax
lea eax, [esp + 0x34]
jne 0x401a49
push 1
push esi
push 0x20e
jmp 0x401aff
mov edi, dword [esp + 0x44]
push 0
push esi
push 0x20e
push 0
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
push 1
test eax, eax
jne 0x401a74
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
push 0x1ff
jmp 0x401af9
mov eax, dword [esp + 0x48]
sub eax, edi
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
lea eax, [esp + 0x38]
jle 0x401a3e
push 0x1ff
jmp 0x401afd
cmp dword [0x4d89b8], 0
je 0x401ae8
cmp dword [0x4db444], 0
jne 0x401ae8
mov ecx, dword [0x4d89c0]
cmp byte [ecx + 0xec], 0
jne 0x401adf
cmp byte [ecx + 0xee], 0
jne 0x401adf
cmp dword [ecx + 0xe0], 0xffffffff
jle 0x401adf
call ebp
mov ecx, dword [0x4d89c0]
sub eax, dword [ecx + 0xdc]
cmp eax, dword [ecx + 0xe0]
jb 0x401adf
mov byte [ecx + 0xec], 1
movzx ecx, byte [ecx + 0xec]
jmp 0x401aea
xor ecx, ecx
xor edx, edx
mov eax, 0x311
test ecx, ecx
push 1
cmovne eax, edx
push eax
lea eax, [esp + 0x3c]
push 0
push 0
push eax
call edi
test eax, eax
jne 0x401b9b
call ebp
mov edx, dword [0x4debc8]
mov ecx, eax
sub ecx, ebx
mov ebx, dword [esp + 0x5c]
cmp ecx, 3
cmova edx, eax
mov dword [0x4debc8], edx
test ebx, ebx
jne 0x401b47
cmp byte [esp + 0x2f], bl
jne 0x401b47
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [esp + 0x14]
mov byte [esp + 0x2f], 1
jmp 0x401862
mov esi, dword [esp + 0x14]
test esi, esi
jne 0x401b70
cmp byte [esp + 0x1a], 0
je 0x401b70
test ebx, ebx
jle 0x401b62
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 1
mov dword [esp + 0x14], esi
jmp 0x401862
call ebp
cmp byte [esp + 0x1a], 0
jne 0x4020a4
mov ecx, dword [esp + 0x64]
sub ecx, eax
add ecx, ebx
cmp ecx, 5
jle 0x4020a4
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x401862
mov esi, dword [esp + 0x14]
inc esi
cmp dword [0x4de088], 0
mov dword [esp + 0x14], esi
je 0x401bda
mov edx, dword [esp + 0x38]
lea eax, [esp + 0x114]
mov ecx, dword [esp + 0x34]
push eax
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x48]
push dword [esp + 0x48]
call fcn.004035c0
add esp, 0x10
test al, al
jne 0x401862
mov edx, dword [0x4db778]
mov ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
test edx, edx
je 0x401f5a
test ebx, ebx
je 0x401f5a
cmp ebx, dword [0x4db780]
je 0x401f5a
cmp ecx, 0x414
je 0x401f5a
cmp ecx, 0x402
je 0x401f5a
lea eax, [ecx - 0x100]
cmp eax, 9
ja 0x401f00
call dword [sym.imp.USER32.dll_GetFocus]
mov ebx, eax
test ebx, ebx
je 0x401ef2
mov ecx, ebx
call fcn.0047d0d0
mov esi, eax
test esi, esi
je 0x401ef2
mov ecx, ebx
call fcn.0045f8b0
mov edi, eax
mov dword [esp + 0x28], edi
test edi, edi
je 0x401ef2
mov ecx, dword [edi + 0x74]
test ecx, ecx
je 0x401c81
lea eax, [esp + 0x34]
push eax
push ecx
push esi
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
mov esi, dword [esp + 0x14]
test eax, eax
jne 0x40185c
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x3c]
cmp ecx, 0x100
jne 0x401e9a
cmp byte [edi + 0xb8], 0
je 0x401df0
cmp esi, 0x22
je 0x401cbf
cmp esi, 0x21
je 0x401cbf
cmp esi, 9
je 0x401cbf
cmp esi, 0x25
je 0x401cbf
cmp esi, 0x27
jne 0x401df0
push ebx
mov ecx, edi
call fcn.00401620
mov ebp, eax
mov dword [esp + 0x24], ebp
test ebp, ebp
je 0x401dd2
mov cl, byte [ebp + 4]
cmp cl, 0xf
je 0x401dd2
mov esi, dword [esp + 0x3c]
xor edi, edi
cmp cl, 0x13
jne 0x401d10
mov edi, ebp
cmp esi, 0x25
je 0x401cf8
cmp esi, 0x27
jne 0x401d10
mov ecx, dword [esp + 0x28]
cmp esi, 0x27
push 0
sete al
push 0
movzx eax, al
push eax
push ebp
jmp 0x40184d
cmp esi, 0x25
je 0x401dd6
cmp esi, 0x27
je 0x401dd6
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x401dd2
mov esi, dword [esp + 0x3c]
cmp esi, 9
jne 0x401d5a
cmp byte [ebp + 4], 0xc
jne 0x401d5a
push 0xfffffffffffffff0
push dword [ebp]
call dword [sym.imp.USER32.dll_GetWindowLongW]
test al, 4
jne 0x401dd2
mov esi, dword [esp + 0x3c]
test edi, edi
jne 0x401d84
movzx eax, byte [ebp + 6]
mov ebp, dword [esp + 0x28]
mov ecx, ebp
push eax
call fcn.0046c060
mov edi, eax
test edi, edi
jne 0x401d88
push eax
mov ecx, ebp
call fcn.0046c060
mov edi, eax
test edi, edi
je 0x401dd6
jmp 0x401d88
mov ebp, dword [esp + 0x28]
push dword [edi]
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x401dd2
mov eax, dword [esp + 0x3c]
cmp eax, 0x22
je 0x401dc3
cmp eax, 9
jne 0x401db4
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je 0x401dc3
push 1
push 1
xor al, al
mov ecx, ebp
push eax
push edi
jmp 0x40184d
push 1
push 1
mov al, 1
mov ecx, ebp
push eax
push edi
jmp 0x40184d
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
cmp ecx, 0x100
jne 0x401e9a
mov edi, dword [esp + 0x28]
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, 0x1b
je 0x401e28
cmp esi, 9
je 0x401e28
cmp esi, 0x41
jne 0x401e9a
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call esi
mov ecx, 0x8000
test cx, ax
je 0x401e92
push 0xa5
call esi
mov ecx, 0x8000
test cx, ax
jne 0x401e92
push ebx
mov ecx, edi
call fcn.00401620
mov dword [esp + 0x24], eax
test eax, eax
je 0x401e92
cmp byte [eax + 4], 0xc
jne 0x401e92
mov esi, dword [esp + 0x3c]
cmp esi, 0x1b
je 0x401e86
cmp esi, 0x41
je 0x401e60
cmp byte [eax + 5], 0
jge 0x401e96
push 0x4b40f0
push 1
push 0xc2
jmp 0x401e6f
test byte [eax + 5], 2
jne 0x401e96
push 0xffffffffffffffff
push 0
push 0xb1
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
jmp 0x401862
mov ecx, edi
call fcn.004689d0
jmp 0x401858
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov eax, dword [0x4ddfb8]
test eax, eax
je 0x401ee0
cmp ecx, 0x100
jne 0x401ee0
cmp esi, 0xd
jne 0x401ed5
push 0
push 0
push 0x1116
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
jmp 0x401862
cmp esi, 0x1b
jne 0x401ee0
push 0
push 1
jmp 0x401eb4
mov ebx, dword [esp + 0x34]
mov edx, dword [0x4db778]
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x401f04
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov edx, dword [0x4db778]
mov esi, dword [esp + 0x3c]
xor edi, edi
test edx, edx
jle 0x401f5e
mov ecx, dword [0x4d89c0]
mov byte [ecx + 0xe8], 1
mov eax, dword [esp + 0x38]
mov dword [ecx + 0xe4], eax
lea eax, [esp + 0x34]
push eax
mov eax, dword [0x4db774]
mov eax, dword [eax + edi*4]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jne 0x401faa
mov ecx, dword [0x4d89c0]
inc edi
mov edx, dword [0x4db778]
mov byte [ecx + 0xe8], al
cmp edi, edx
jl 0x401f10
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov esi, dword [esp + 0x3c]
cmp ecx, 0x312
ja 0x402134
je case.0x402146.1026
cmp ecx, 0x100
ja 0x402014
je 0x401fe2
cmp ecx, 0x12
je 0x401fc5
cmp ecx, 0x4b
jne case.0x402146.1027
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
mov dword [0x4db764], 0
mov byte [esp + 0x2c], 1
jmp 0x401862
mov eax, dword [0x4d89c0]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
mov byte [eax + 0xe8], 0
jmp 0x401862
push 0
push 6
mov ecx, 0x4de0d0
call fcn.0041c630
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
jmp 0x401862
cmp ebx, dword [0x4db760]
jne case.0x402146.1027
cmp esi, 0x1b
jne case.0x402146.1027
push 0
push dword [0x4db780]
call dword [sym.imp.USER32.dll_ShowWindow]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
jmp 0x401862
cmp ecx, 0x113
jne case.0x402146.1027
cmp dword [esp + 0x40], 0
jne case.0x402146.1027
cmp ebx, dword [0x4db780]
jne case.0x402146.1027
cmp dword [0x4dc264], 0
je 0x402045
call fcn.00403560
cmp dword [0x4deb78], 0
je 0x402068
call fcn.00403380
mov edx, dword [esp + 0x58]
test al, al
movzx ecx, dl
mov eax, 1
cmovne ecx, eax
mov byte [esp + 0x58], cl
cmp dword [esp + 0x74], 0
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
je 0x401862
mov ebx, dword [esp + 0x5c]
cmp ebx, 1
jl 0x401862
call ebp
cmp byte [esp + 0x1a], 0
jne 0x4020a4
mov ecx, dword [esp + 0x64]
sub ecx, eax
add ecx, ebx
cmp ecx, 5
jg 0x401e77
cmp ebx, 0xffffffff
jle 0x4020b9
xorps xmm0, xmm0
mov dword [0x4debc8], eax
movlpd qword [0x4debb8], xmm0
xor ecx, ecx
mov dword [0x4debcc], eax
cmp byte [esp + 0x2d], cl
movzx eax, byte [0x4db43f]
cmovne eax, ecx
mov byte [0x4db43f], al
cmp byte [esp + 0x2e], cl
je 0x402126
mov eax, dword [0x4db784]
dec eax
mov dword [0x4db784], eax
test ebx, ebx
jle 0x402126
test eax, eax
jne 0x402126
cmp dword [0x4deb78], ecx
jne 0x402126
cmp dword [0x4dc264], ecx
jne 0x402126
cmp byte [0x4db43e], cl
je 0x402126
push 9
push dword [0x4db780]
call dword [sym.imp.USER32.dll_KillTimer]
movzx ecx, byte [0x4db43e]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov byte [0x4db43e], cl
mov edx, dword [esp + 0x58]
mov al, dl
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ecx - 0x400]
cmp eax, 0x15
ja case.0x402146.1027
movzx eax, byte [eax + 0x4032e8]
jmp dword [eax*4 + 0x4032dc]
test ebx, ebx
je case.0x402146.1026
cmp ebx, dword [0x4db780]
jne case.0x402146.1027
xor ebp, ebp
add ecx, 0xfffffbff
mov dword [esp + 0x68], ebp
cmp ecx, 0x14
ja case.0x402175.1027
movzx eax, byte [ecx + 0x403314]
jmp dword [eax*4 + 0x403300]
xor ecx, ecx
test edx, edx
jle 0x4021a1
mov edi, dword [0x4db774]
nop dword [eax + eax]
mov eax, dword [edi + ecx*4]
cmp dword [eax + 4], ebx
je 0x402221
inc ecx
cmp ecx, edx
jl 0x402190
xor ebp, ebp
mov dword [esp + 0x28], ebp
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, eax
test esi, esi
je 0x403252
push 0
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [0x4de014]
jne 0x403252
push 0x20
lea eax, [esp + 0x19c]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameW]
mov ecx, str.32770
lea eax, [esp + 0x198]
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4031de
test dx, dx
je 0x40221a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4031de
add eax, 4
add ecx, 4
test dx, dx
jne 0x4021f0
xor eax, eax
jmp 0x4031e3
mov edi, eax
mov dword [esp + 0x28], edi
test edi, edi
je case.0x402146.1027
mov eax, dword [esp + 0x40]
mov ecx, esi
movzx ebx, si
xor edx, edx
shr ecx, 0x10
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], ebx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x1c], edx
cmp ebx, 8
jne 0x402263
mov dword [esp + 0x20], ecx
mov ecx, 0x2af8
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
cmp ecx, dword [edi + 0x10]
jae 0x402273
mov eax, dword [edi + 0x18]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*4]
jmp 0x402275
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x24], ecx
lea eax, [ebx - 5]
mov dword [esp + 0x60], edx
mov byte [esp + 0x1b], dl
cmp eax, 4
ja case.default.0x40228f
jmp dword [eax*4 + 0x40332c]
mov esi, dword [edi + 0x2c]
mov dword [esp + 0x30], esi
test esi, esi
je 0x401852
lea edx, [edi + 0x3a]
jmp 0x4022d0
mov esi, dword [edi + 0x24]
mov dword [esp + 0x30], esi
test esi, esi
je 0x401852
lea edx, [edi + 0x38]
jmp 0x4022d0
mov esi, dword [edi + 0x28]
mov dword [esp + 0x30], esi
test esi, esi
je 0x401852
lea edx, [edi + 0x39]
mov dword [esp + 0x60], edx
test edx, edx
je 0x4023a8
cmp byte [edx], 0
jne 0x401852
xor ebx, ebx
jmp 0x4025e5
mov esi, dword [edi + 0x34]
mov dword [esp + 0x30], esi
test esi, esi
je 0x401852
xor ebx, ebx
jmp 0x4025e5
mov esi, dword [edi + 0x30]
mov ebp, dword [edi + 0x68]
mov dword [esp + 0x68], ebp
mov dword [esp + 0x30], esi
test esi, esi
je 0x402331
test ebp, ebp
je 0x401852
push 0
push 0
push 0xffffffffffffffff
push ebp
call dword [sym.imp.SHELL32.dll_DragQueryFileW]
mov dword [esp + 0x20], eax
test eax, eax
jne 0x4023a8
mov esi, dword [esp + 0x14]
test ebp, ebp
je 0x401831
push ebp
call dword [sym.imp.SHELL32.dll_DragFinish]
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi + 0x68], 0
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
jmp 0x401862
mov esi, dword [esp + 0x14]
test ecx, ecx
je 0x401831
mov esi, dword [ecx + 0xc]
mov dword [esp + 0x30], esi
test esi, esi
jne 0x402399
test byte [ecx + 5], 1
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [esp + 0x14]
je 0x40185c
mov ecx, edi
call fcn.00468970
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
jmp 0x401862
test byte [ecx + 5], 4
jne 0x401852
mov byte [esp + 0x1b], 1
xor ebx, ebx
jmp 0x4025e5
test esi, esi
je 0x4023d6
mov ecx, esi
call fcn.0045f880
mov edi, eax
mov dword [esp + 0x28], edi
test edi, edi
jne 0x4023dc
test ebx, ebx
je 0x4023dc
cmp ebx, dword [0x4db780]
jne case.0x402146.1027
jmp 0x4023dc
xor edi, edi
mov dword [esp + 0x28], edi
push dword [esp + 0x40]
mov ecx, 0x4de0d0
call fcn.004016b0
mov esi, dword [esp + 0x14]
mov dword [esp + 0x88], eax
test eax, eax
je 0x401831
mov esi, dword [eax + 8]
test esi, esi
je 0x401852
mov ebx, dword [eax + 0x18]
jmp 0x4025e1
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
cmp esi, dword [0x4dc260]
jae 0x401839
mov eax, dword [0x4dc25c]
mov ebx, dword [eax + esi*4]
mov dword [esp + 0x6c], ebx
mov ecx, dword [ebx + 0x10]
test ecx, ecx
je 0x402462
mov edx, dword [ebx + 4]
call fcn.0040e7b0
mov esi, dword [esp + 0x14]
mov ebx, eax
mov dword [esp + 0x54], ebx
test ebx, ebx
je 0x401845
mov ebx, dword [esp + 0x6c]
mov ecx, dword [ebx + 0x10]
mov cl, byte [ecx]
cmp cl, 1
je 0x402466
cmp cl, 3
je 0x402466
mov dword [esp + 0x54], ebp
push dword [esp + 0x40]
mov ecx, ebx
call fcn.00411450
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
cmp dword [ebx + 0xc], ebp
jne 0x401845
xor eax, eax
cmp byte [ebx + 0x2a], al
cmovne ax, word [esp + 0x40]
mov word [0x4deb90], ax
mov esi, dword [ebx]
mov ebx, dword [ebx + 0x14]
jmp 0x4025dd
cmp byte [0x4deb64], 0
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
jne 0x401845
mov esi, dword [0x4deb58]
test esi, esi
cmove esi, dword [0x4de704]
xor ebx, ebx
jmp 0x4025dd
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov eax, esi
and eax, 0x3fff
cmp ax, word [0x4dd210]
jae 0x401839
mov eax, dword [eax*4 + 0x4dc268]
shr esi, 0x10
mov dword [esp + 0x80], eax
test si, si
je 0x402526
mov edi, dword [eax + 0x20]
add esi, 0xffff
mov dword [esp + 0x70], edi
test si, si
je 0x402522
nop
mov edi, dword [edi + 8]
add esi, 0xffff
test si, si
jne 0x402510
mov dword [esp + 0x70], edi
test edi, edi
jne 0x402540
lea ecx, [esp + 0x54]
push ecx
mov ecx, eax
call fcn.0040f250
mov edi, eax
mov dword [esp + 0x70], edi
test edi, edi
je 0x401ec0
mov esi, dword [edi]
mov ecx, esi
call fcn.00473080
sub eax, 0
je 0x402553
sub eax, 1
jne 0x40255e
mov eax, dword [esi + 8]
test eax, eax
je 0x40255e
mov cl, byte [eax]
jmp 0x402560
xor cl, cl
mov al, byte [edi + 0x16]
cmp al, byte [edi + 0x17]
jb 0x4025b4
cmp cl, 0xde
je 0x4025b4
cmp cl, 0xca
je 0x4025b4
cmp cl, 0xd8
je 0x4025b4
cmp cl, 0xd9
je 0x4025b4
cmp cl, 0xd4
je 0x4025b4
cmp cl, 0xd5
je 0x4025b4
cmp cl, 0xd6
je 0x4025b4
cmp cl, 0xd7
je 0x4025b4
cmp byte [edi + 0x1a], 0
je 0x40259a
mov byte [edi + 0x1b], 1
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebp
mov esi, dword [esp + 0x14]
mov dword [edi + 0xc], eax
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
jmp 0x401862
mov eax, dword [edi + 4]
test eax, eax
je 0x4025d4
mov al, byte [eax]
cmp al, 2
je 0x4025d4
cmp al, 4
je 0x4025d4
cmp al, 5
jb 0x4025d8
mov eax, dword [0x4db770]
mov dword [esp + 0x54], eax
jmp 0x4025d8
mov dword [esp + 0x54], ebp
mov esi, dword [edi]
mov ebx, dword [edi + 0x10]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x30], esi
mov ecx, esi
call fcn.00473080
sub eax, 0
je 0x4025f6
sub eax, 1
jne 0x402601
mov eax, dword [esi + 8]
test eax, eax
je 0x402601
mov cl, byte [eax]
jmp 0x402603
xor cl, cl
mov edx, dword [0x4db76c]
mov eax, dword [0x4d89bc]
mov byte [esp + 0x84], cl
cmp edx, eax
jl 0x402650
add eax, 2
cmp edx, eax
jge 0x402331
cmp cl, 0xde
je 0x402650
cmp cl, 0xca
je 0x402650
cmp cl, 0xd8
je 0x402650
cmp cl, 0xd9
je 0x402650
cmp cl, 0xd4
je 0x402650
cmp cl, 0xd5
je 0x402650
cmp cl, 0xd6
je 0x402650
cmp cl, 0xd7
jne 0x402331
mov eax, dword [0x4d89c0]
cmp ebx, dword [eax + 0x2c]
jl 0x402331
mov ecx, dword [esp + 0x38]
mov byte [esp + 0x58], 1
cmp ecx, 0x402
je 0x4026c6
cmp ecx, 0x413
jbe 0x402683
cmp ecx, 0x415
jbe 0x40270f
mov eax, dword [0x4deb20]
mov dword [0x4deb24], eax
mov eax, dword [0x4deb88]
mov dword [0x4deb8c], eax
cmp ecx, 0x401
jne 0x4026a8
mov eax, dword [esp + 0x6c]
mov eax, dword [eax + 4]
jmp 0x4026b2
mov eax, dword [esp + 0x80]
mov eax, dword [eax + 0x1c]
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4deb20], eax
call ebp
mov dword [0x4deb88], eax
jmp 0x402715
mov ebp, dword [esp + 0x88]
push 0x104
push dword [ebp]
push 0x4de70c
call fcn.0049ef24
xor eax, eax
add esp, 0xc
mov word [0x4de914], ax
mov eax, dword [ebp + 0x10]
push 0x104
push dword [eax]
push 0x4de916
call fcn.0049ef24
add esp, 0xc
mov dword [0x4de708], ebp
xor eax, eax
mov word [0x4deb1e], ax
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [0x4db768]
cmp byte [edi + 0x17], 0
jne 0x402724
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x402731
mov ecx, edi
call fcn.004013b0
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x402749
test byte [edi + 0x15], 4
je 0x402744
push edi
call fcn.00435af0
mov eax, dword [edi + 8]
jmp 0x402759
cmp al, 2
jne 0x402754
call fcn.00401260
jmp 0x402759
mov eax, 0x4de000
push 0x7f
push eax
lea eax, [esp + 0x1e0]
push eax
call fcn.0049ef24
add esp, 0xc
xor eax, eax
xor dl, dl
mov word [esp + 0x2d6], ax
mov ecx, ebx
push dword [esp + 0x84]
push 1
call fcn.00403990
mov ebx, dword [0x4d89c0]
add esp, 8
call ebp
mov dword [0x4debcc], eax
mov dword [0x4debc8], eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffbff
cmp eax, 0x14
ja case.0x4027b6.1027
movzx eax, byte [eax + 0x403354]
jmp dword [eax*4 + 0x403340]
mov edx, dword [esp + 0x24]
xor eax, eax
mov ebp, dword [esp + 0x28]
mov word [esp + 0xf4], ax
cmp byte [esp + 0x1b], al
je 0x4027d9
mov ecx, dword [edx]
jmp 0x4027dc
mov ecx, dword [ebp + 4]
mov edi, dword [esp + 0x1c]
mov eax, edi
add eax, eax
inc edi
mov dword [esp + 0x1c], edi
mov dword [esp + eax*8 + 0x90], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + eax*8 + 0x98], 1
mov dword [esp + eax*8 + 0x94], 0
lea eax, [ecx - 5]
cmp eax, 4
ja case.default.0x402816
jmp dword [eax*4 + 0x40336c]
mov ecx, dword [esp + 0x20]
lea edi, [ebx + 0x3c]
xor eax, eax
mov dword [esp + 0x20], 0
test ecx, ecx
sete al
lea eax, [eax*2 + 1]
mov dword [ebx + 0x34], eax
mov eax, dword [esp + 0x48]
mov dword [edi], eax
mov eax, dword [esp + 0x4c]
mov dword [edi + 4], eax
test edx, edx
je 0x4028f2
cmp dword [ebx + 0x34], 1
jne 0x402863
push edi
push edx
call fcn.0046cc50
mov edx, dword [esp + 0x24]
movzx eax, byte [edx + 4]
sub eax, 9
je 0x4028dc
sub eax, 1
je 0x4028d1
sub eax, 1
jne 0x4028f2
cmp dword [ebx + 0x34], 1
jne 0x40288e
push eax
push 9
push 0x110a
push dword [edx]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4028ee
mov eax, dword [esp + 0x48]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x11c], eax
lea eax, [esp + 0x118]
push eax
push dword [edx]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x118]
push eax
push 0
push 0x1111
push dword [edx]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4028ee
push 1
push 0xffffffffffffffff
push 0x100c
jmp 0x4028e5
push 0
push 0
push 0x19f
push dword [edx]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x138]
push eax
push dword [ebp + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x138]
sub dword [edi], eax
mov eax, dword [esp + 0x13c]
sub dword [edi + 4], eax
mov ebp, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
mov eax, edx
test ebp, ebp
je 0x402945
shl eax, 4
lea ecx, [esp + 0x90]
add ecx, eax
mov eax, dword [ebp]
mov dword [ecx + 8], 1
mov dword [ecx], eax
mov dword [ecx + 4], 0
jmp 0x40295d
add eax, eax
mov dword [esp + eax*8 + 0x98], 0
mov dword [esp + eax*8 + 0x90], 0x4c602c
mov ecx, dword [esp + 0x20]
lea eax, [edx + 1]
add eax, eax
mov dword [esp + eax*8 + 0x90], ecx
lea ecx, [esp + 0x90]
mov dword [esp + eax*8 + 0x98], 1
mov dword [esp + eax*8 + 0x94], 0
lea eax, [edx + 2]
shl eax, 4
add ecx, eax
xor eax, eax
cmp dword [ebx + 0x34], 3
sete al
mov dword [ecx], eax
lea eax, [edx + 3]
mov dword [ecx + 8], 1
add edx, 4
mov dword [ecx + 4], 0
lea ecx, [esp + 0x90]
shl eax, 4
add ecx, eax
mov dword [esp + 0x1c], edx
mov eax, dword [edi]
mov edi, dword [esp + 0x1c]
cdq
mov dword [ecx], eax
mov eax, edi
mov dword [ecx + 4], edx
mov dword [ecx + 8], 1
lea ecx, [esp + 0x90]
shl eax, 4
add ecx, eax
mov eax, dword [ebx + 0x40]
cdq
inc edi
mov dword [esp + 0x1c], edi
mov dword [ecx + 8], 1
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov ecx, dword [esp + 0x50]
jmp 0x402b22
mov dword [ebx + 0x34], ecx
mov eax, dword [esp + 0x48]
mov dword [ebx + 0x3c], eax
mov eax, dword [esp + 0x4c]
mov dword [ebx + 0x40], eax
lea eax, [esp + 0x148]
push eax
push dword [ebp + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x148]
sub dword [ebx + 0x3c], eax
mov eax, dword [esp + 0x14c]
sub dword [ebx + 0x40], eax
push 0xffffffffffffffec
push dword [ebp + 4]
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xffffffef
push eax
push 0xffffffffffffffec
push dword [ebp + 4]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ecx, dword [esp + 0x68]
mov eax, edi
mov ebp, dword [esp + 0x1c]
lea edi, [esp + 0x90]
shl eax, 4
add edi, eax
call fcn.00461ab0
mov edx, dword [esp + 0x24]
mov dword [edi], eax
lea eax, [ebp + 1]
mov dword [edi + 8], 6
test edx, edx
je 0x402a9f
shl eax, 4
lea ecx, [esp + 0x90]
add ecx, eax
mov eax, dword [edx]
mov dword [ecx + 8], 1
mov dword [ecx], eax
mov dword [ecx + 4], 0
jmp 0x402ab7
add eax, eax
mov dword [esp + eax*8 + 0x98], 0
mov dword [esp + eax*8 + 0x90], 0x4c602c
push dword [ebx + 0x3c]
mov ecx, dword [esp + 0x2c]
lea eax, [ebp + 2]
shl eax, 4
lea edx, [ebp + 3]
lea edi, [esp + 0x94]
mov dword [esp + 0x20], edx
add edi, eax
call fcn.00401680
mov ecx, dword [esp + 0x1c]
cdq
mov dword [edi], eax
mov eax, ecx
mov dword [edi + 8], 1
mov dword [edi + 4], edx
lea edi, [esp + 0x90]
push dword [ebx + 0x40]
shl eax, 4
add edi, eax
inc ecx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x2c]
call fcn.00401680
mov ecx, dword [esp + 0x50]
mov dword [edi + 8], 1
cdq
mov dword [edi], eax
mov dword [edi + 4], edx
mov edi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
cmp byte [esp + 0x1b], 0
je 0x402df5
cmp byte [ebp + 4], 0x17
jne 0x402df5
push 0x10b8
lea eax, [esp + 0x2e4]
push 0
push eax
call fcn.00493930
mov eax, dword [esp + 0x2c]
add esp, 0xc
dec eax
mov dword [esp + 0x2e0], 0xd
mov dword [esp + 0x2e4], eax
lea eax, [esp + 0x2e0]
push eax
push 0
push 0x703
push dword [ebp]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x402e57
cmp word [esp + 0x350], 0
lea ecx, [esp + 0x2f0]
push 1
push 0
lea eax, [esp + 0x358]
cmove eax, ecx
mov ecx, dword [0x4db768]
push 0xffffffffffffffff
push eax
call fcn.0047b2f0
mov eax, edi
lea ebp, [esp + 0x90]
inc edi
shl eax, 4
mov dword [esp + 0x1c], edi
add ebp, eax
mov edi, dword [0x4db768]
cmp byte [edi + 0x17], 0
jne 0x402bd7
mov edi, dword [edi + 0xc]
test byte [edi + 0x15], 8
je 0x402be4
mov ecx, edi
call fcn.004013b0
mov al, byte [edi + 0x17]
cmp al, 1
jne 0x402dcf
test byte [edi + 0x15], 4
je 0x402bfb
push edi
call fcn.00435af0
mov eax, dword [edi + 8]
mov dword [ebp + 8], 0
mov dword [ebp], eax
jmp 0x402e57
mov dword [ebx + 0x34], 1
cmp ecx, 8
jne 0x402b1e
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x20]
mov dword [ebx + 0x3c], eax
mov eax, edi
add eax, eax
inc edi
mov dword [esp + 0x1c], edi
inc dword [esp + 0x1c]
mov dword [esp + eax*8 + 0x90], ecx
mov ecx, ebp
mov dword [esp + eax*8 + 0x98], 1
mov dword [esp + eax*8 + 0x94], 0
mov eax, edi
shl eax, 4
lea edi, [esp + 0x90]
add edi, eax
mov eax, dword [esp + 0x78]
movzx eax, ax
push eax
call fcn.00401680
mov ecx, dword [esp + 0x1c]
cdq
mov dword [edi], eax
mov eax, ecx
mov dword [edi + 8], 1
inc ecx
mov dword [edi + 4], edx
lea edi, [esp + 0x90]
shl eax, 4
add edi, eax
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x78]
mov ecx, ebp
shr eax, 0x10
push eax
jmp 0x402b04
mov al, byte [edx + 4]
cmp al, 0xa
je 0x402ced
cmp al, 0x19
jne 0x402d7a
mov eax, dword [esp + 0x48]
mov dword [ebx + 0x3c], eax
mov eax, dword [esp + 0x4c]
mov dword [ebx + 0x40], eax
lea eax, [esp + 0x158]
push eax
push dword [ebp + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x158]
sub dword [ebx + 0x3c], eax
mov eax, dword [esp + 0x15c]
sub dword [ebx + 0x40], eax
mov ecx, dword [esp + 0x50]
jmp 0x402d7a
cmp cl, 0x49
jne 0x402d7a
lea eax, [esp + 0xf4]
test ecx, 0x100
je 0x402d0c
mov eax, 0x53
jmp 0x402d19
test ecx, 0x200
je 0x402d28
mov eax, 0x73
mov word [esp + 0xf4], ax
lea eax, [esp + 0xf6]
test ecx, 0x400
je 0x402d37
mov edx, 0x46
jmp 0x402d44
test ecx, 0x800
je 0x402d4a
mov edx, 0x66
mov word [eax], dx
add eax, 2
test ecx, 0x1000
je 0x402d59
mov ecx, 0x43
jmp 0x402d66
test ecx, 0x2000
je 0x402d6c
mov ecx, 0x63
mov word [eax], cx
add eax, 2
xor ecx, ecx
mov word [eax], cx
mov ecx, 0x49
mov dword [esp + 0x50], ecx
mov eax, edi
mov dword [ebx + 0x34], ecx
shl eax, 4
lea edx, [esp + 0x90]
add edx, eax
mov dword [edx + 8], 0
call fcn.00461a90
mov ebp, dword [esp + 0x24]
mov dword [edx], eax
lea eax, [edi + 1]
mov edx, dword [esp + 0x20]
add eax, eax
add edi, 2
mov dword [esp + 0x1c], edi
mov dword [esp + eax*8 + 0x98], 1
mov dword [esp + eax*8 + 0x90], edx
mov dword [esp + eax*8 + 0x94], 0
jmp 0x402b26
cmp al, 2
jne 0x402de4
call fcn.00401260
mov dword [ebp + 8], 0
mov dword [ebp], eax
jmp 0x402e57
mov eax, 0x4de000
mov dword [ebp + 8], 0
mov dword [ebp], eax
jmp 0x402e57
cmp word [esp + 0xf4], 0
je 0x402e22
mov eax, edi
add eax, eax
inc edi
mov dword [esp + 0x1c], edi
lea edi, [esp + 0xf4]
mov dword [esp + eax*8 + 0x98], 0
mov dword [esp + eax*8 + 0x90], edi
cmp ecx, 8
je 0x402e47
cmp ecx, 5
je 0x402e47
mov ecx, dword [0x4db768]
lea eax, [esp + 0xf4]
push 1
push 0
push 0xffffffffffffffff
push eax
call fcn.0047b2f0
jmp 0x402e57
mov ecx, dword [0x4db768]
push 0x18
push 0
push edx
call fcn.00401330
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x60]
mov eax, dword [edi + 4]
mov dword [ebx + 0xc4], eax
add dword [edi + 0x20], 2
mov eax, dword [esp + 0x7c]
mov dword [ebx + 0x50], eax
mov eax, dword [esp + 0x20]
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x44], edi
mov dword [ebx + 0x38], eax
test ebp, ebp
je 0x402f00
mov byte [ebp], 1
mov ebx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x8c]
push eax
push edx
lea eax, [esp + 0x98]
push eax
push 0x4b40f4
lea ecx, [esp + 0x40]
call fcn.00473000
cmp dword [edi + 4], 0
je 0x402f60
test ebp, ebp
je 0x402f14
mov ebx, dword [esp + 0x50]
mov byte [ebp], 0
cmp ebx, 6
jne 0x402f23
cmp dword [esp + 0x8c], 0
jne 0x402f60
mov ecx, esi
call fcn.00473080
test eax, eax
jne 0x402ee7
test esi, esi
jne 0x402f60
mov ecx, edi
call fcn.00468970
mov ecx, edi
call fcn.004618c0
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x40316c
cmp byte [esp + 0x1b], 0
je 0x402e88
mov ebx, dword [esp + 0x24]
or byte [ebx + 5], 4
jmp 0x402e8c
cmp byte [esp + 0x1b], 0
je 0x402f1f
and byte [ebx + 5], 0xfb
mov ebx, dword [esp + 0x50]
cmp ebx, 5
jne 0x402f60
mov eax, dword [esp + 0xa0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push dword [esp + 0x68]
call dword [sym.imp.SHELL32.dll_DragFinish]
push 0xffffffffffffffec
push dword [edi + 4]
mov dword [edi + 0x68], 0
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x10
push eax
push 0xffffffffffffffec
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ecx, edi
call fcn.004618c0
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x40316c
mov edi, dword [esp + 0x28]
test edi, edi
je 0x402f94
mov eax, dword [edi + 4]
mov dword [ebx + 0xc4], eax
mov dword [ebx + 0x34], 1
add dword [edi + 0x20], 2
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x44], edi
mov ecx, 0x4de0d0
mov dword [esp + 0x170], 0
mov dword [esp + 0x168], 0x4de70c
call fcn.0044aec0
inc eax
mov dword [esp + 0x180], 1
push 0
mov dword [esp + 0x17c], eax
lea ecx, [esp + 0x34]
push 3
lea eax, [esp + 0x170]
mov dword [esp + 0x184], 0
push eax
push str.Menu
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x198], 0x4de916
call fcn.00473000
test edi, edi
je 0x40316c
mov ecx, edi
call fcn.004618c0
jmp 0x40316c
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x54]
mov dword [ebx + 0xc4], eax
mov al, byte [ecx + 0x21]
mov byte [ebx + 0xf6], al
call fcn.004113c0
jmp 0x40316c
call dword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
je 0x403065
mov esi, dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
push 0xd
call esi
test eax, eax
jne 0x40305e
push 0xf
call esi
test eax, eax
jne 0x40305e
mov eax, 2
jmp 0x403067
mov eax, 1
jmp 0x403067
xor eax, eax
mov ecx, dword [0x4db768]
push 0x18
push 0
push eax
mov dword [ebx + 0x38], eax
call fcn.00401330
mov eax, dword [ebx + 0x38]
mov ecx, dword [0x4de01c]
mov dword [esp + 0x130], 1
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], 0
mov byte [0x4deb64], 1
cmp ecx, dword [0x4de020]
jne 0x4030ba
call fcn.00405473
mov ecx, dword [0x4de01c]
cmp ecx, dword [0x4de018]
jb 0x4030cf
mov eax, dword [0x4de700]
mov dword [ecx], eax
mov ecx, dword [0x4de01c]
add ecx, 0xc
mov dword [0x4de01c], ecx
mov dword [ecx], 0
mov dword [ecx + 4], 0x4b40fc
mov dword [ecx + 8], 0
mov ecx, dword [0x4deb58]
test ecx, ecx
je 0x403101
call fcn.00401500
mov ecx, dword [0x4deb58]
cmp dword [esp + 0x3c], 0
jne 0x403124
xor eax, eax
test ecx, ecx
mov ecx, 0x4deb38
sete al
push eax
push 1
lea eax, [esp + 0x130]
push eax
call fcn.00473150
sub dword [0x4de01c], 0xc
mov byte [0x4deb64], 0
jmp 0x40316c
mov edx, dword [esp + 0x80]
mov al, byte [edx + 0x10]
cmp al, 0x9c
jb 0x40314d
cmp al, 0x9f
ja 0x40314d
mov eax, dword [esp + 0x40]
mov dword [ebx + 0x38], eax
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x54]
mov dword [ebx + 0xc4], eax
push ecx
mov al, byte [ecx + 0x18]
mov ecx, edx
mov byte [ebx + 0xf6], al
call fcn.0040f670
lea ecx, [esp + 0x1d8]
call fcn.00403aa0
cmp dword [esp + 0x74], 0
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
je 0x401862
call ebp
cmp byte [esp + 0x1a], 0
mov edx, dword [esp + 0x5c]
jne 0x4031ab
mov ecx, dword [esp + 0x64]
sub ecx, eax
add ecx, edx
cmp ecx, 5
jg 0x401862
cmp edx, 0xffffffff
jle 0x4031c0
xorps xmm0, xmm0
mov dword [0x4debc8], eax
movlpd qword [0x4debb8], xmm0
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
mov dword [0x4debcc], eax
mov byte [esp + 0x2c], 1
mov byte [esp + 0x1a], 1
jmp 0x401862
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403252
mov ecx, dword [0x4d89c0]
mov byte [ecx + 0xe8], 1
mov eax, dword [esp + 0x38]
mov dword [ecx + 0xe4], eax
lea eax, [esp + 0x34]
push eax
push esi
call dword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
je 0x403243
cmp dword [0x4db77c], 0
je 0x403222
push 0x4db558
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov eax, dword [0x4d89c0]
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
mov byte [eax + 0xe8], 0
jmp 0x401862
mov ecx, dword [0x4d89c0]
mov byte [ecx + 0xe8], 0
jmp 0x403258
mov ecx, dword [0x4d89c0]
mov eax, dword [0x4db554]
test eax, eax
je 0x403291
lea ecx, [esp + 0x34]
push ecx
push eax
push dword [0x4db780]
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
test eax, eax
jne 0x401862
mov ecx, dword [0x4d89c0]
mov byte [ecx + 0xe8], 1
mov eax, dword [esp + 0x38]
mov dword [ecx + 0xe4], eax
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [0x4d89c0]
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov esi, dword [esp + 0x14]
mov byte [eax + 0xe8], 0
jmp 0x401862