Function at 0x13147400
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff9e4
push ebx
push esi
push edi
mov esi, ecx
lea edi, [ebp - 0x105]
mov ecx, 0x40
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 4], dx
mov word [ebp - 2], ax
mov edi, dword [ebp + 8]
xor ebx, ebx
mov eax, edi
mov edx, 0x20a
call fcn.13145d2c
lea eax, [ebp - 0x310]
mov edx, pe_nt_image_headers32
call fcn.13145d2c
movzx eax, word [ebp - 2]
add eax, 0xfffffff8
cmp eax, 0xf3
ja case.0x1314745c.8
mov al, byte [eax + 0x13147463]
jmp dword [eax*4 + 0x13147557]
lea edx, [ebp - 0x61c]
mov eax, 0x1314859c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131485b4
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131485cc
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131485e4
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131485fc
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148608
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314861c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148634
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148638
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314863c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148640
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148644
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148648
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314864c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148650
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148654
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148658
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314865c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148674
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148684
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148698
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131486a8
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131486b8
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131486cc
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131486d4
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131486e8
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148700
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148704
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314871c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148728
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148738
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314874c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314876c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148784
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148798
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131487b4
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131487c0
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131487cc
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131487d8
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131487e4
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131487f0
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131487fc
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148808
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148814
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148820
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314882c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148838
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148844
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148850
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314885c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148868
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148874
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148880
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314888c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148898
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131488a4
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131488b0
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131488bc
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131488c8
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131488d4
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131488e0
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131488f0
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148900
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148914
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148924
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148934
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314894c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148968
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148980
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x1314899c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131489bc
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131489e0
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x131489f0
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148a0c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148a24
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148a3c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148a4c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148a5c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148a70
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148a8c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148aa8
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148ac0
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148adc
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148aec
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148b0c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148b24
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148b40
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.0x1314745c.8
lea edx, [ebp - 0x61c]
mov eax, 0x13148b5c
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
mov eax, edi
call fcn.1314503c
test eax, eax
jbe 0x1314843b
cmp byte [0x1314c0c4], 1
jne 0x1314843b
mov eax, edi
call fcn.1314503c
add eax, eax
push eax
mov edx, edi
mov eax, 0x13148b74
mov ecx, 2
call fcn.13145dec
test eax, eax
jbe 0x1314843b
mov eax, edi
call fcn.1314503c
add eax, eax
push eax
mov eax, 0x13148b78
call fcn.1314503c
mov ecx, eax
add ecx, ecx
mov edx, edi
mov eax, 0x13148b78
call fcn.13145dec
test eax, eax
ja 0x1314843b
mov bl, 1
lea edx, [ebp - 0x61c]
mov eax, 0x13148b88
call fcn.131473d0
push edi
lea esi, [ebp - 0x61c]
mov ecx, 0x82
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
call fcn.13147354
mov byte [ebp - 5], al
mov eax, dword [ebp + 0xc]
push eax
push 0
push pe_nt_image_headers32
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x105]
push eax
movzx eax, word [ebp - 4]
push eax
movzx eax, word [ebp - 2]
push eax
call sub.user32.dll_ToUnicodeEx
mov esi, eax
test esi, esi
jle 0x13148507
push edi
mov esi, 0x1314f640
lea edi, [ebp - 0x210]
mov ecx, 0x42
rep movsd dword es:[edi], dword [esi]
pop edi
mov eax, edi
call fcn.1314503c
test eax, eax
jne 0x131484c6
mov eax, edi
mov edx, 0x20a
call fcn.13145d2c
lea edx, [ebp - 0x310]
mov eax, edi
mov ecx, pe_nt_image_headers32
call fcn.13145d0c
cmp byte [ebp - 5], 0
je 0x131484c0
push edi
call sub.user32.dll_CharLowerW
jmp 0x131484c6
push edi
call sub.user32.dll_CharUpperW
mov eax, dword [ebp - 0x210]
test eax, eax
je 0x131484f6
mov edx, dword [ebp + 0xc]
push edx
push 0
push pe_nt_image_headers32
lea edx, [ebp - 0x310]
push edx
lea edx, [ebp - 0x208]
push edx
mov edx, dword [ebp - 0x20c]
push edx
push eax
call sub.user32.dll_ToUnicodeEx
mov eax, 0x1314f640
mov edx, 0x108
call fcn.13145d2c
jmp 0x13148580
test esi, esi
jge 0x13148580
movzx eax, word [ebp - 2]
mov dword [0x1314f640], eax
movzx eax, word [ebp - 4]
mov dword [0x1314f644], eax
push esi
push edi
lea esi, [ebp - 0x105]
mov edi, 0x1314f648
mov ecx, 0x40
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
lea eax, [ebp - 0x410]
mov edx, pe_nt_image_headers32
call fcn.13145d2c
push 1
push 0x6e
call sub.user32.dll_MapVirtualKeyW
test esi, esi
jge 0x13148580
mov eax, dword [ebp + 0xc]
push eax
push 0
push pe_nt_image_headers32
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x410]
push eax
push 1
push 0x6e
call sub.user32.dll_MapVirtualKeyW
push eax
push 0x6e
call sub.user32.dll_ToUnicodeEx
mov esi, eax
test esi, esi
jl 0x13148550
cmp bl, 1
jne 0x13148591
mov eax, edi
mov edx, 0x20a
call fcn.13145d2c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8