Function at 0x40edf0
Capabilities:
Check for sandbox username or hostname
Get session user name
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x42ba98
push 0x4179a0
mov eax, dword fs:[0]
push eax
sub esp, 0x84
push ebx
push esi
push edi
mov eax, dword [section..data]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x94], 0
push 0x2c
push 0
lea eax, [ebp - 0x90]
push eax
call fcn.00419530
add esp, 0xc
mov dword [ebp - 0x64], 0
xor eax, eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x30], 0x101
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], eax
push str._LowCache
push dword [ebp + 0x10]
call fcn.0041437f
add esp, 8
test eax, eax
jne 0x40eff0
push 5
push 0x42f1b4
push eax
call dword [sym.imp.mbae_api.dll__MbaeCreateSession_12]
mov esi, eax
mov dword [ebp - 0x1c], esi
test esi, esi
je 0x40ef65
push 0x1000a
call fcn.00412ac8
add esp, 4
mov edi, eax
test edi, edi
jne 0x40eeec
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [ebp - 4], 0xfffffffe
mov eax, esi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x4283c8
push 0xffff
push edi
call fcn.00412a74
add esp, 0xc
push esi
test eax, eax
jle 0x40ef27
mov byte [edi + 0xffff], 0
push edi
push str.WinMain
push 1
mov edx, 0x5f
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40ef3f
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push edi
call fcn.00412a90
add esp, 4
mov dword [ebp - 4], 0xfffffffe
mov eax, esi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push dword [0x42f1b4]
call dword [sym.imp.mbae_api.dll__MbaeStoreIEC_4]
mov esi, eax
mov dword [ebp - 0x1c], esi
test esi, esi
je 0x40efd3
push 0x1000a
call fcn.00412ac8
add esp, 4
mov edi, eax
test edi, edi
je 0x40eeb7
push 0x4283c8
push 0xffff
push edi
call fcn.00412a74
add esp, 0xc
push esi
test eax, eax
jle 0x40ef27
mov byte [edi + 0xffff], 0
push edi
push str.WinMain
push 1
mov edx, 0x64
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40ef3f
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
call fcn.00401de0
mov esi, eax
mov dword [ebp - 0x1c], esi
test esi, esi
je 0x40f057
push 0x1000a
call fcn.00412ac8
add esp, 4
mov edi, eax
test edi, edi
je 0x40eeb7
push 0x4283c8
push 0xffff
push edi
call fcn.00412a74
add esp, 0xc
push esi
test eax, eax
jle 0x40ef27
mov byte [edi + 0xffff], 0
push edi
push str.WinMain
push 1
mov edx, 0x6f
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40ef3f
call fcn.00402090
mov esi, eax
mov dword [ebp - 0x1c], esi
cmp esi, 0x11
jne 0x40f07a
push 0
push str.Warning
push str.Malwarebytes_Anti_Exploit_is_running_in_a_low_priviledged_account._nThe_protection_features_will_remain_enabled_and_active_but_the_user_interface_will_not_be_available.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
test esi, esi
je 0x40f0d7
push 0x1000a
call fcn.00412ac8
add esp, 4
mov edi, eax
test edi, edi
je 0x40eeb7
push 0x4283c8
push 0xffff
push edi
call fcn.00412a74
add esp, 0xc
push esi
test eax, eax
jle 0x40ef27
mov byte [edi + 0xffff], 0
push edi
push str.WinMain
push 1
mov edx, 0x77
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40ef3f
push 0xc
lea eax, [ebp - 0x48]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.PSAPI.DLL_GetModuleInformation]
mov dword [ebp - 0x1c], eax
test eax, eax
jne 0x40f1d0
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
jne 0x40f156
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [ebp - 4], 0xfffffffe
lea eax, [ebx + 0x1e]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x40f191
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0x7b
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f1a9
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
mov dword [ebp - 4], 0xfffffffe
lea eax, [ebx + 0x1e]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp - 0x48]
mov dword [0x42f3d0], eax
call fcn.0040ebf0
mov dword [ebp - 0x1c], eax
call fcn.00402330
mov dword [ebp - 0x1c], eax
call fcn.00402f70
mov edi, eax
mov dword [ebp - 0x1c], edi
test edi, edi
je 0x40f2bb
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
jne 0x40f242
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [ebp - 4], 0xfffffffe
mov eax, edi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x40f27d
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0x89
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f295
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
mov dword [ebp - 4], 0xfffffffe
mov eax, edi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
lea edi, [eax + 0x1e]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], 0
push 0x1000a
call fcn.00412ac8
mov dword [ebp - 0x20], eax
push 0x2000a
call fcn.00412ac8
add esp, 8
mov esi, eax
cmp dword [ebp - 0x20], 0
je 0x40f398
test esi, esi
je 0x40f398
push 0x42f180
push str.GUI___s____Start
push 0xffff
push esi
call fcn.00412a58
add esp, 0x10
test eax, eax
jle 0x40f383
xor eax, eax
mov word [esi + 0x1fffe], ax
push 0xffffffffffffffff
push esi
mov ecx, esi
call fcn.004052b0
inc eax
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x2c]
push eax
call fcn.00413618
add esp, 0x14
test eax, eax
je 0x40f35c
push edi
push esi
push str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.00412f3c
add esp, 0xc
push esi
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
call edi
jmp 0x40f362
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push dword [ebp - 0x28]
push dword [ebp - 0x20]
push str.WinMain
push 4
mov edx, 0x8b
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f3b2
push edi
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
jmp 0x40f3aa
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x40f3c2
push eax
call fcn.00412a90
add esp, 4
test esi, esi
je 0x40f3cf
push esi
call fcn.00412a90
add esp, 4
call fcn.00410e10
mov dword [ebp - 0x1c], eax
test eax, eax
jne 0x40efd3
call fcn.00411030
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x94], 0x30
mov dword [ebp - 0x90], 3
mov dword [ebp - 0x8c], 0x4106b0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x80], eax
push 0x64
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
mov esi, dword [sym.imp.USER32.dll_LoadIconW]
call esi
mov dword [ebp - 0x7c], eax
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], 0x10
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], str.GuiAnti_Exploit
push 0x64
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call esi
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x94]
push eax
mov esi, dword [sym.imp.USER32.dll_RegisterClassExW]
call esi
test ax, ax
jne 0x40f54a
call ebx
add eax, 0x1e
mov dword [ebp + 8], eax
call ebx
lea ebx, [eax + 0x1e]
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
jne 0x40f4d4
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call edi
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f50f
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xa1
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f523
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call edi
push esi
call fcn.00412a90
add esp, 4
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov dword [ebp - 0x6c], str.MainGuiAnti_Exploit
lea eax, [ebp - 0x94]
push eax
call esi
test ax, ax
jne 0x40f5c5
call ebx
add eax, 0x1e
mov dword [ebp + 8], eax
call ebx
lea ebx, [eax + 0x1e]
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
je 0x40f4a2
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f50f
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xa6
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f523
mov eax, dword [ebp + 8]
mov dword [0x433610], eax
push 0
push eax
push 0
push 0
push 0x19a
push 0x1f4
push 0x80010000
push 0x80000000
push 0xc80000
push dword [0x42e1d4]
push str.MainGuiAnti_Exploit
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x43361c], eax
test eax, eax
jne 0x40f66f
call ebx
add eax, 0x1e
mov dword [ebp + 8], eax
call ebx
lea ebx, [eax + 0x1e]
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
je 0x40f4a2
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f50f
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xb4
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f523
call fcn.00409130
mov ebx, eax
mov dword [ebp - 0x1c], ebx
test ebx, ebx
je 0x40f73a
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
jne 0x40f6c5
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call edi
mov dword [ebp - 4], 0xfffffffe
mov eax, ebx
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f700
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xb8
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f714
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call edi
push esi
call fcn.00412a90
add esp, 4
mov dword [ebp - 4], 0xfffffffe
mov eax, ebx
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea eax, [ebp - 0x30]
push eax
push 0x43362c
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov dword [ebp - 0x1c], eax
test eax, eax
jne 0x40f7bc
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
add eax, 0x1e
mov dword [ebp + 8], eax
call esi
lea ebx, [eax + 0x1e]
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
je 0x40f4a2
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f50f
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xbc
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f523
mov dword [ebp - 4], 1
call fcn.004052d0
mov ebx, eax
mov dword [ebp - 0x1c], ebx
test ebx, ebx
je 0x40f87f
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
jne 0x40f7fe
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call edi
jmp 0x40f856
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f839
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xc3
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f84d
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call edi
push esi
call fcn.00412a90
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push section..data
call fcn.0041dd90
add esp, 0xc
mov eax, ebx
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
call fcn.0040bb00
mov ebx, eax
mov dword [ebp - 0x1c], ebx
test ebx, ebx
je 0x40f8e6
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
je 0x40f7e8
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f839
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xc8
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f84d
push 0x42f3d8
push dword [0x42f1b4]
call dword [sym.imp.mbae_api.dll__MbaeGetMbaeConfig_8]
mov ebx, eax
mov dword [ebp - 0x1c], ebx
test ebx, ebx
je 0x40f959
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
je 0x40f7e8
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f839
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xcc
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f84d
call fcn.0040c2e0
mov ebx, eax
mov dword [ebp - 0x1c], ebx
test ebx, ebx
je 0x40f9c0
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
je 0x40f7e8
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f839
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xd1
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f84d
call fcn.0040cf50
mov ebx, eax
mov dword [ebp - 0x1c], ebx
test ebx, ebx
je 0x40fa27
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
je 0x40f7e8
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f839
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xd6
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f84d
call fcn.004063d0
mov dword [ebp - 0x1c], eax
call fcn.0040d930
mov ebx, eax
mov dword [ebp - 0x1c], ebx
test ebx, ebx
je 0x40fa96
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
je 0x40f7e8
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40f839
mov byte [esi + 0xffff], 0
push esi
push str.WinMain
push 1
mov edx, 0xdf
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40f84d
call fcn.00411c10
mov dword [ebp - 0x1c], eax
cmp dword [0x42f3f0], 0
je 0x40faaf
call fcn.004120b0
mov dword [ebp - 0x1c], eax
xor esi, esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 4], esi
call fcn.0040fbbd
mov ecx, dword [0x42f3e0]
call fcn.004122a0
mov ecx, dword [0x42f3d8]
call fcn.00411820
cmp dword [0x42f3e0], 0
je 0x40fb09
push str._open
push dword [ebp + 0x10]
call fcn.0041437f
add esp, 8
test eax, eax
jne 0x40fb09
push 1
push dword [0x43361c]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x43361c]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push dword [0x43361c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x42aec4
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov edi, eax
mov dword [ebp - 0x38], edi
mov esi, dword [sym.imp.USER32.dll_IsDialogMessageW]
nop
push 0
push 0
push 0
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x40fd58
mov dword [ebp - 4], 2
lea eax, [ebp - 0x64]
push eax
push edi
push dword [0x43361c]
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x40fba8
lea eax, [ebp - 0x64]
push eax
push dword [0x434874]
call esi
test eax, eax
jne 0x40fba8
lea eax, [ebp - 0x64]
push eax
push dword [0x434884]
call esi
test eax, eax
jne 0x40fba8
lea eax, [ebp - 0x64]
push eax
push dword [0x434878]
call esi
test eax, eax
jne 0x40fba8
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov dword [ebp - 4], 0
jmp 0x40fb30
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10