Function at 0x1004f84
Capabilities:
Open clipboard
Read clipboard data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
mov ecx, dword [ebp + 8]
push ebx
push esi
cmp ecx, 0x12c
push edi
je 0x10051ea
cmp ecx, 0x12d
je 0x100507f
mov eax, 0x12e
cmp ecx, eax
je 0x1005046
jbe 0x100528b
cmp ecx, 0x130
jbe 0x1004feb
cmp ecx, 0x131
jne 0x100528b
push 0
push 0
push 0x1001508
push dword [0x1013d6c]
call fcn.01007140
jmp 0x100528b
lea ebx, [ecx - 0x12f]
cmp dword [0x1013d4c], ebx
je 0x100528b
mov al, bl
and byte [ebp + 9], 0
add al, 0x30
mov byte [ebp + 8], al
lea eax, [ebp + 8]
push eax
push 0x100127c
push str.SciCalc
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
xor eax, eax
cmp dword [0x1013d74], eax
je 0x1005034
cmp dword [0x1013d4c], eax
jne 0x1005034
push eax
call fcn.01005ea4
push 1
mov dword [0x1013d4c], ebx
call fcn.01001c85
jmp 0x100528b
push 0x100129c
push dword [0x1013d48]
call dword [sym.imp.USER32.dll_LoadIconA]
push eax
push 0
push dword [0x1013c70]
push dword [0x1013d6c]
call dword [sym.imp.SHELL32.dll_ShellAboutA]
cmp eax, 0xffffffff
jne 0x100528b
call fcn.01004f65
jmp 0x100528b
push dword [0x1013d6c]
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
jne 0x10050ae
push 0x30
push dword [0x1013c70]
push dword [0x1013c64]
push dword [0x1013d6c]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x100528b
push 1
call dword [sym.imp.USER32.dll_GetClipboardData]
push eax
mov dword [ebp - 8], eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push dword [ebp - 8]
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
and byte [ebp + 8], 0
mov edi, eax
add edi, dword [ebp - 4]
xor esi, esi
cmp dword [0x1013d84], esi
jne 0x10051d6
mov eax, dword [ebp - 4]
cmp eax, edi
jae 0x10051d6
mov bl, byte [eax]
push eax
call dword [sym.imp.USER32.dll_CharNextA]
cmp bl, 0x20
mov dword [ebp - 4], eax
je 0x10050d7
cmp bl, 0xa
je 0x10050d7
cmp bl, 0xd
je 0x10050d7
test bl, bl
je 0x10051d6
mov cl, byte [ebp + 8]
test cl, cl
jne 0x100511d
cmp bl, 0x2d
je 0x1005157
mov eax, dword [0x101301c]
cmp bl, 0x78
je 0x100512c
cmp bl, 0x65
jne 0x1005139
cmp eax, 0xa
jne 0x1005139
mov byte [ebp + 8], 0x78
mov al, 0x75
jmp 0x10051b6
cmp cl, 0x78
jne 0x100515f
cmp bl, 0x2b
jne 0x1005148
cmp eax, 0xa
je 0x10050d7
cmp cl, 0x78
jne 0x100515f
cmp bl, 0x2d
jne 0x100515f
cmp eax, 0xa
jne 0x100515f
mov byte [ebp + 8], 0x2d
mov al, 0x50
jmp 0x10051b6
cmp cl, 0x3a
mov dword [ebp - 0xc], 0x80
je 0x100516e
mov dword [ebp - 0xc], esi
cmp bl, 0x3a
mov byte [ebp + 8], bl
je 0x10050d7
movzx eax, bl
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
add al, byte [ebp - 0xc]
pop ecx
xor ecx, ecx
movzx eax, al
cmp eax, dword [0x10012f0]
je 0x10051aa
mov edx, 0x10012f0
cmp edx, 0x1001508
jge 0x10051aa
add edx, 8
inc ecx
cmp eax, dword [edx]
jne 0x100519a
cmp ecx, 0x43
je 0x10051d6
mov al, byte [ecx*8 + 0x10012f4]
movzx eax, al
or eax, 0x10000
push esi
push eax
push 0x111
push dword [0x1013d6c]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x10050d7
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x100528b
xor edi, edi
cmp dword [0x1013da8], edi
je 0x1005209
push dword [0x101301c]
push 0x1013db8
push 0x1013da0
call fcn.01001fd9
push dword [0x1013da0]
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [0x1013da8], edi
je 0x100522d
cmp dword [0x1013dbc], 0xffffffff
jne 0x1005253
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov cl, byte [ebp + eax - 0x10d]
lea eax, [ebp + eax - 0x10d]
cmp cl, byte [0x1013048]
jne 0x1005253
and byte [eax], 0
lea eax, [ebp - 0x10c]
push eax
push dword [0x1013d70]
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0xffffffffffffffff
push edi
push 0xb1
push dword [0x1013d70]
call esi
push edi
push edi
push 0x300
push dword [0x1013d70]
call esi
pop edi
pop esi
pop ebx
leave
ret 4