Function at 0x48a3f0
Capabilities:
Execute anti-debugging instructions
Log keystrokes via polling
Open clipboard
Read clipboard data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2d0
push ebx
push esi
push edi
rdtsc
lea ebx, [0xa254b0]
mov dword [ebx], eax
mov dword [ebx + 4], edx
cmp dword [0xa4efd4], 0x64
jne 0x48a420
mov al, byte [0xa59234]
test al, al
je 0x48a420
call fcn.00551310
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ebx, 0x11
push ebx
call esi
shr eax, 0xf
and eax, 1
push 0x10
mov dword [0xa26334], eax
call esi
shr eax, 0xf
mov edi, 0x12
and eax, 1
push edi
mov dword [0xa26338], eax
call esi
shr eax, 0xf
and eax, 1
mov dword [0xa2633c], eax
mov eax, dword [0xcf9428]
test eax, eax
je 0x48a483
mov eax, dword [0xa23564]
test eax, eax
je 0x48a483
xor eax, eax
mov dword [0xa4efd8], 3
mov dword [0xa23564], eax
mov dword [0xcf9428], eax
mov eax, dword [0xcea2b0]
xor ecx, ecx
cmp eax, ecx
je 0x48a4ac
cmp dword [0xa23564], ecx
je 0x48a4ac
mov dword [0xa23564], ecx
mov dword [0xcea2b0], ecx
mov dword [0xa4efd8], 2
mov al, byte [0xa26070]
cmp al, 1
jne 0x48bd55
mov eax, dword [0xa25c14]
cmp eax, 0x79
jne 0x48a4db
push ecx
push eax
mov eax, dword [0xa2af98]
push 0x101
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x48c9b0
cmp dword [0xcf9674], ecx
je 0x48a524
cmp eax, 0x7a
jne 0x48a524
cmp dword [0x6d6878], 1
jle 0x48a524
cmp dword [0xa262b4], ecx
je 0x48a524
mov ecx, dword [0x62d4c4]
add ecx, 0x40
push ecx
call fcn.00575a50
mov edx, dword [0xa262b4]
push edx
call fcn.004e8fd0
add esp, 8
push 0x6e
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x48c9b0
cmp dword [0xced09c], ecx
je 0x48a5fb
cmp eax, 0x6b
jne 0x48a59c
mov eax, dword [0xced0f8]
mov ecx, dword [0xced0fc]
cmp eax, ecx
jge 0x48c9b0
lea ecx, [ebp - 0x2c]
inc eax
push 0xa
push ecx
push eax
mov dword [0xced0f8], eax
call fcn.0061d6c5
lea edi, [ebp - 0x2c]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
push ecx
lea edx, [ebp - 0x2c]
push edx
mov ecx, 0x69f710
call fcn.004295e0
mov al, byte [0x648701]
push eax
push 0xc
push 0x6486dc
push 0xc
push str.Arial
call fcn.005a7f50
add esp, 0x14
jmp 0x48c9b0
cmp eax, 0x6d
jne 0x48a5d8
mov eax, dword [0xced0f8]
cmp eax, ecx
jle 0x48c9b0
lea ecx, [ebp - 0x24]
dec eax
push 0xa
push ecx
push eax
mov dword [0xced0f8], eax
call fcn.0061d6c5
lea edi, [ebp - 0x24]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
push ecx
lea edx, [ebp - 0x24]
jmp 0x48a570
cmp eax, 0xd
jne 0x48a5fb
call fcn.005137b0
push 1
call fcn.004e9ab0
add esp, 4
mov ecx, 0xced988
call fcn.0052dec0
jmp 0x48c9b0
cmp eax, 0x24
mov ebx, 0xc
jne 0x48ab07
mov eax, dword [0xcf474c]
test eax, eax
jne 0x48c9d5
call fcn.0051bd80
test al, al
jne 0x48c9d5
cmp dword [0x6d69f8], ebx
je 0x48c9d5
mov edx, dword [0xcf8ae4]
xor edi, edi
xor ecx, ecx
cmp edx, edi
sete cl
mov esi, ecx
cmp esi, edi
je 0x48a649
call fcn.005a2270
cmp dword [0xcf8ae4], esi
je 0x48a689
cmp esi, edi
mov dword [0xcf8ae4], esi
jne 0x48a689
cmp dword [0xcf8b38], edi
je 0x48a677
push edi
push edi
push 0xcf8b3c
push 0xcf8b38
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x48a689
push eax
call fcn.004e6ba0
add esp, 4
cmp dword [0xcf8ae4], edi
jne 0x48a6dc
lea edx, [ebp - 8]
push 2
push edx
push 0xddd
mov dword [ebp - 8], edi
call fcn.004ac410
mov eax, dword [0xa4f274]
add esp, 0xc
cmp eax, edi
push edi
push edi
push edi
push edi
je 0x48a6bb
push 0x6482a8
jmp 0x48a6c0
push 0x64828c
call fcn.004cbc90
mov eax, dword [0xcf8ae4]
add esp, 0x14
cmp eax, edi
mov byte [0xcea32c], 0
je 0x48ab02
call fcn.0051f3e0
cmp dword [0xcf2990], 0xa23
je 0x48a857
cmp dword [0xcf2908], 0xa24
je 0x48a857
cmp dword [0xcf2880], 0xa25
je 0x48a857
push 0xa27
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a857
push 0xa28
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a857
push 0xa29
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a857
push 0xa67
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a857
push 0xa68
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a857
push 0xa69
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a857
push 0xa86
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a857
push 0xa87
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a857
push 0xa88
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a857
lea eax, [ebp - 8]
push 2
push eax
push 0xddd
mov dword [ebp - 8], edi
call fcn.004ac410
mov eax, dword [0xa4f274]
add esp, 0xc
cmp eax, edi
push edi
push edi
push edi
push edi
je 0x48a7f8
push 0x648248
jmp 0x48a7fd
push 0x648204
call fcn.004cbc90
mov eax, dword [0xcf8ae4]
add esp, 0x14
cmp eax, edi
je 0x48aaa1
mov eax, dword [0xcf8b38]
mov dword [0xcf8ae4], edi
cmp eax, edi
je 0x48a835
push edi
push edi
push 0xcf8b3c
push 0xcf8b38
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x48aaa1
push eax
call fcn.004e6ba0
add esp, 4
mov byte [0xcea32c], 0
jmp 0x48ab02
push 0xa86
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a892
push 0xa87
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a892
push 0xa88
call fcn.0051f400
add esp, 4
test al, al
jne 0x48a892
mov dword [0xa26298], edi
jmp 0x48a8f6
mov ecx, dword [0x6d67b0]
mov edx, dword [0x6d67b4]
lea eax, [ebp - 8]
push 2
push eax
push 0xddd
mov dword [0xa2628c], ecx
mov dword [0xa26290], edx
mov dword [ebp - 8], 0xd
call fcn.004ac410
mov eax, dword [0xa4f274]
add esp, 0xc
cmp eax, edi
push edi
push edi
push edi
push edi
je 0x48a8d8
push 0x6481e8
jmp 0x48a8dd
push 0x6481cc
call fcn.004cbc90
add esp, 0x14
mov dword [0xa26298], 1
mov byte [0xcea32c], 1
mov eax, dword [0xcf2990]
mov si, word [0xa560e0]
cmp eax, 0xa67
je 0x48a93d
cmp dword [0xcf2908], 0xa68
je 0x48a93d
cmp dword [0xcf2880], 0xa69
je 0x48a93d
xor ecx, ecx
mov eax, 0x55555556
mov cx, si
imul ecx
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp edx, 0x50
jl 0x48a9e7
xor ecx, ecx
mov eax, 0x55555556
mov cx, si
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 0x50
jge 0x48a95e
call fcn.0051c510
test al, al
je 0x48a9da
xor ecx, ecx
mov eax, 0x55555556
mov cx, word [0xa560e0]
imul ecx
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp edx, 0x64
jge 0x48a9da
mov edx, dword [0x6d67b0]
mov eax, dword [0x6d67b4]
lea ecx, [ebp - 8]
push 2
push ecx
push 0xddd
mov dword [0xa2628c], edx
mov dword [0xa26290], eax
mov dword [ebp - 8], ebx
call fcn.004ac410
mov eax, dword [0xa4f274]
add esp, 0xc
cmp eax, edi
push edi
push edi
push edi
push edi
je 0x48a9ba
push 0x6481e8
jmp 0x48a9bf
push 0x6481cc
call fcn.004cbc90
add esp, 0x14
mov dword [0xa26294], 1
mov byte [0xcea32c], 1
jmp 0x48a9e7
mov dword [0xa26294], edi
mov byte [0xcea32c], 0
xor ecx, ecx
mov eax, 0x55555556
mov cx, word [0xa560e0]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 0x50
jl 0x48aaaa
call fcn.0051c510
test al, al
jne 0x48aaaa
cmp dword [0xa26294], edi
jne 0x48ab02
cmp dword [0xa26298], edi
jne 0x48ab02
lea ecx, [ebp - 8]
push 2
push ecx
push 0xddd
mov dword [ebp - 8], edi
call fcn.004ac410
mov eax, dword [0xa4f274]
add esp, 0xc
cmp eax, edi
push edi
push edi
push edi
push edi
je 0x48aa56
push 0x6481a4
jmp 0x48aa5b
push 0x64817c
call fcn.004cbc90
mov eax, dword [0xcf8ae4]
add esp, 0x14
cmp eax, edi
je 0x48aaa1
mov eax, dword [0xcf8b38]
mov dword [0xcf8ae4], edi
cmp eax, edi
je 0x48aa8f
push edi
push edi
push 0xcf8b3c
push 0xcf8b38
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
cmp eax, edi
je 0x48aaa1
push eax
call fcn.004e6ba0
add esp, 4
mov byte [0xcea32c], 0
jmp 0x48ab02
mov edx, dword [0x6d67b0]
mov eax, dword [0x6d67b4]
lea ecx, [ebp - 8]
push 2
push ecx
push 0xddd
mov dword [0xa2628c], edx
mov dword [0xa26290], eax
mov dword [ebp - 8], 0xb
call fcn.004ac410
mov eax, dword [0xa4f274]
add esp, 0xc
cmp eax, edi
push edi
push edi
push edi
push edi
je 0x48aaee
push 0x6481e8
jmp 0x48aaf3
push 0x6481cc
call fcn.004cbc90
add esp, 0x14
mov byte [0xcea32c], 1
mov eax, dword [0xa25c14]
cmp eax, 0x21
jne 0x48ab5c
mov eax, dword [0x647e30]
test eax, eax
je 0x48c9b0
mov edx, dword [0xced040]
xor ecx, ecx
push 0
lea eax, [edx - 5]
mov edx, dword [0xcfa63c]
test eax, eax
setle cl
dec ecx
and eax, ecx
push eax
mov eax, dword [edx + 0x94]
push 5
push 0x15
push eax
push 0xcf9d88
push 0x14
push 0
push 0
push 0
push 0
call fcn.00522440
add esp, 0x2c
jmp 0x48c9b0
cmp eax, 0x22
jne 0x48abb1
mov eax, dword [0x647e30]
test eax, eax
je 0x48c9b0
mov ecx, dword [0xced040]
lea eax, [ecx + 5]
cmp eax, 0x10
jle 0x48ab81
mov eax, 0x10
mov edx, dword [0xcfa63c]
push 0
push eax
push 5
mov eax, dword [edx + 0x94]
push 0x15
push eax
push 0xcf9d88
push 0x14
push 0
push 0
push 0
push 0
call fcn.00522440
add esp, 0x2c
jmp 0x48c9b0
mov ecx, dword [0x647e30]
test ecx, ecx
je 0x48c9b0
mov ecx, dword [0xced06c]
test ecx, ecx
je 0x48abf4
push eax
mov ecx, 0x69f710
call fcn.00429c50
mov cl, byte [0x648701]
push ecx
push ebx
push 0x6486dc
push ebx
push str.Arial
call fcn.005a7f50
add esp, 0x14
jmp 0x48c9b0
mov edx, dword [0xcea308]
mov ebx, 1
cmp edx, ebx
jne 0x48ac13
push eax
mov ecx, 0x6a0058
call fcn.00429c50
jmp 0x48c9b0
mov ecx, dword [0x6a0570]
xor edi, edi
cmp ecx, edi
je 0x48ac2f
push eax
mov ecx, 0x6a0548
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0x6a0508], edi
je 0x48ac47
push eax
mov ecx, 0x6a04e0
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0x6a0660], edi
je 0x48ac5f
push eax
mov ecx, 0x6a0638
call fcn.00429c50
jmp 0x48c9b0
mov ecx, dword [0xcea35c]
cmp ecx, edi
je 0x48ac9d
cmp dword [0xcea3e4], edi
je 0x48ac81
push eax
mov ecx, 0xcea3bc
call fcn.00429c50
jmp 0x48c9b0
cmp ecx, edi
je 0x48ac9d
cmp dword [0xcea454], edi
je 0x48ac9d
push eax
mov ecx, 0xcea420
call fcn.0042a8f0
jmp 0x48c9b0
mov ecx, dword [0xcf5480]
mov esi, 2
cmp ecx, esi
jne 0x48ad0c
cmp dword [0xcf57a0], edi
je 0x48acc4
push eax
mov ecx, 0xcf5778
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0xcf5804], edi
je 0x48acdc
push eax
mov ecx, 0xcf57dc
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0xcf5868], edi
je 0x48acf4
push eax
mov ecx, 0xcf5840
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0xcf58cc], edi
je 0x48ad0c
push eax
mov ecx, 0xcf58a4
call fcn.00429c50
jmp 0x48c9b0
mov cl, byte [0xcf55f5]
test cl, cl
je 0x48ad2e
cmp dword [0xcf5930], edi
je 0x48ad2e
push eax
mov ecx, 0xcf5908
call fcn.00429c50
jmp 0x48c9b0
cmp edx, 8
jne 0x48ad43
push eax
mov ecx, 0x6a0058
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0x69fe88], edi
je 0x48ad5b
push eax
mov ecx, 0x69fe60
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0x6a02f8], edi
je 0x48ad7b
cmp dword [0xce8d58], edi
je 0x48ad7b
push eax
mov ecx, 0x6a02d0
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0x6a03ac], edi
je 0x48ad9b
cmp dword [0xce955c], edi
je 0x48ad9b
push eax
mov ecx, 0x6a0378
call fcn.0042a8f0
jmp 0x48c9b0
cmp dword [0x69fe10], edi
je 0x48adbb
cmp dword [0xce8c08], edi
je 0x48adbb
push eax
mov ecx, 0x69fde8
call fcn.00429c50
jmp 0x48c9b0
call fcn.004fdcb0
call fcn.004fd490
cmp dword [eax + 0x538], edi
je 0x48adf8
cmp dword [0xcfa5a4], edi
je 0x48adf8
call fcn.004fdcb0
mov edx, dword [0xa25c14]
push edx
call fcn.004fd490
mov ecx, eax
add ecx, 0x504
call fcn.0042a8f0
jmp 0x48c9b0
mov eax, dword [0xcf8a64]
cmp eax, edi
je 0x48ae87
cmp dword [0x69f888], edi
je 0x48ae22
mov eax, dword [0xa25c14]
mov ecx, 0x69f860
push eax
call fcn.00429c50
jmp 0x48c9b0
cmp eax, edi
je 0x48ae87
cmp dword [0x69f8ec], edi
je 0x48ae44
mov ecx, dword [0xa25c14]
push ecx
mov ecx, 0x69f8c4
call fcn.00429c50
jmp 0x48c9b0
cmp eax, edi
je 0x48ae87
cmp dword [0x69f950], edi
je 0x48ae66
mov edx, dword [0xa25c14]
mov ecx, 0x69f928
push edx
call fcn.00429c50
jmp 0x48c9b0
cmp eax, edi
je 0x48ae87
cmp dword [0x69f9b4], edi
je 0x48ae87
mov eax, dword [0xa25c14]
mov ecx, 0x69f98c
push eax
call fcn.00429c50
jmp 0x48c9b0
mov eax, dword [0xcf8be4]
cmp eax, edi
je 0x48afae
cmp dword [0x69fac0], edi
je 0x48aeb2
mov ecx, dword [0xa25c14]
push ecx
mov ecx, 0x69fa98
call fcn.00429c50
jmp 0x48c9b0
cmp eax, edi
je 0x48afae
cmp dword [0x69fb24], edi
je 0x48aed8
mov edx, dword [0xa25c14]
mov ecx, 0x69fafc
push edx
call fcn.00429c50
jmp 0x48c9b0
cmp eax, edi
je 0x48afae
cmp dword [0x69fb88], edi
je 0x48aefd
mov eax, dword [0xa25c14]
mov ecx, 0x69fb60
push eax
call fcn.00429c50
jmp 0x48c9b0
cmp eax, edi
je 0x48afae
cmp dword [0x69fbec], edi
je 0x48af23
mov ecx, dword [0xa25c14]
push ecx
mov ecx, 0x69fbc4
call fcn.00429c50
jmp 0x48c9b0
cmp eax, edi
je 0x48afae
cmp dword [0x69fc50], edi
je 0x48af49
mov edx, dword [0xa25c14]
mov ecx, 0x69fc28
push edx
call fcn.00429c50
jmp 0x48c9b0
cmp eax, edi
je 0x48afae
cmp dword [0x69fcb4], edi
je 0x48af6a
mov eax, dword [0xa25c14]
mov ecx, 0x69fc8c
push eax
call fcn.00429c50
jmp 0x48c9b0
cmp eax, edi
je 0x48afae
cmp dword [0x69fd18], edi
je 0x48af8c
mov ecx, dword [0xa25c14]
push ecx
mov ecx, 0x69fcf0
call fcn.00429c50
jmp 0x48c9b0
cmp eax, edi
je 0x48afae
cmp dword [0x69fd7c], edi
je 0x48afae
mov edx, dword [0xa25c14]
mov ecx, 0x69fd54
push edx
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0xcecc84], edi
je 0x48afdf
cmp dword [0xcecd0c], edi
je 0x48afdf
cmp dword [0xcecdb8], edi
je 0x48c9b0
mov eax, dword [0xa25c14]
mov ecx, 0xcecce4
push eax
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0xce94a8], edi
je 0x48affd
mov ecx, dword [0xa25c14]
push ecx
mov ecx, 0xce9480
call fcn.00429c50
jmp 0x48c9b0
call fcn.0051a030
test eax, eax
je 0x48b024
cmp dword [0x69ffa8], edi
je 0x48b024
mov edx, dword [0xa25c14]
mov ecx, 0x69ff80
push edx
call fcn.00429c50
jmp 0x48c9b0
cmp dword [0xcf9b38], edi
je 0x48c9b0
cmp dword [0x6c4a00], edi
jne 0x48c9b0
cmp dword [0x6c4a04], edi
jne 0x48c9b0
mov eax, dword [0xa4f000]
lea edx, [ebp - 4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jne 0x48c9b0
mov eax, dword [0x6a0478]
mov dword [ebp - 8], edi
cmp eax, edi
je 0x48b079
push eax
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 8], eax
mov ecx, dword [0xa25c14]
lea eax, [ecx - 0x1b]
cmp eax, 0x34
ja case.0x48b093.43
xor edx, edx
mov dl, byte [eax + 0x48ca20]
jmp dword [edx*4 + 0x48c9dc]
mov ecx, dword [0x6c4a14]
mov eax, dword [0x6c4a08]
cmp ecx, eax
mov dword [0xcfa664], ebx
je 0x48bd2a
test eax, eax
mov dword [0x6c4a18], ebx
je 0x48bd2a
push ecx
push 0x6a1488
call fcn.00427910
mov edx, dword [0x6c4a14]
add esp, 8
test eax, eax
mov eax, dword [0x6c4a08]
mov ecx, eax
je 0x48b11d
sub ecx, edx
add ecx, 0xfffffffe
test ecx, ecx
jle 0x48b10d
lea esi, [edx + 0x6a148a]
lea edi, [edx + 0x6a1488]
mov edx, ecx
mov ebx, 1
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, 2
mov byte [eax + 0x6a1486], 0
sub eax, esi
mov dword [0x6c4a08], eax
jmp 0x48b150
sub ecx, edx
dec ecx
test ecx, ecx
jle 0x48b143
lea esi, [edx + 0x6a1489]
lea edi, [edx + 0x6a1488]
mov edx, ecx
mov ebx, 1
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
dec eax
mov dword [0x6c4a08], eax
mov byte [eax + 0x6a1488], 0
mov ecx, dword [ebp - 4]
push eax
mov eax, dword [0x62d5a8]
push 0x6a1488
push eax
push ecx
call fcn.0044a1e0
add esp, 0x10
test eax, eax
je 0x48b187
mov edx, dword [0x6c4a08]
mov dword [0x6c4a0c], 0
mov dword [0x6c4a10], edx
jmp 0x48bd2a
mov eax, dword [0x6c4a0c]
test eax, eax
je 0x48bd2a
mov ecx, dword [0x6c4a08]
lea edx, [eax + 0x6a1488]
sub ecx, eax
mov eax, dword [0x62d5a8]
push ecx
mov ecx, dword [ebp - 4]
push edx
push eax
push ecx
call fcn.0044a1e0
add esp, 0x10
test eax, eax
je 0x48b1d1
mov edi, dword [0x6c4a08]
mov edx, dword [0x6c4a0c]
mov eax, edi
sub eax, edx
mov dword [0x6c4a10], eax
jmp 0x48b202
mov edx, dword [0x6c4a0c]
mov ecx, dword [0x62d5a8]
lea eax, [edx + 0x6a1488]
mov edx, dword [ebp - 4]
push eax
push ecx
push edx
call fcn.0044a070
mov edi, dword [0x6c4a08]
mov edx, dword [0x6c4a0c]
add esp, 0xc
mov dword [0x6c4a10], eax
mov ecx, dword [0x6c4a14]
cmp edx, ecx
jle 0x48b218
mov dword [0x6c4a0c], ecx
lea eax, [eax + ecx - 1]
jmp 0x48b227
add eax, edx
cmp eax, ecx
jl 0x48bd2a
cmp eax, edi
jg 0x48b248
dec eax
push eax
push 0x6a1488
call fcn.00427910
add esp, 8
test eax, eax
je 0x48bd2a
dec dword [0x6c4a10]
jmp 0x48bd2a
mov edx, dword [0x62d5a8]
mov eax, dword [ebp - 4]
lea ecx, [edi + 0x6a1487]
xor esi, esi
push ecx
push edx
push eax
call fcn.0044a140
mov ecx, dword [0x6c4a08]
mov dword [0x6c4a10], eax
sub ecx, eax
dec ecx
push ecx
push 0x6a1488
call fcn.00427910
add esp, 0x14
test eax, eax
je 0x48b283
mov esi, ebx
mov edx, dword [0x6c4a08]
jmp 0x48b7a6
cmp dword [0xa26334], edi
je 0x48bd2a
mov eax, dword [0xcfb6ec]
test eax, eax
je 0x48bd2a
push 0
mov ecx, 0xcfb6d0
call fcn.00560f00
jmp 0x48bd2a
cmp dword [0xa26334], edi
je 0x48bd2a
mov eax, dword [0xcfb6ec]
test eax, eax
je 0x48bd2a
push ebx
mov ecx, 0xcfb6d0
call fcn.00560f00
jmp 0x48bd2a
cmp dword [0xa26334], edi
je 0x48bd2a
mov eax, dword [0xcfb6ec]
test eax, eax
je 0x48bd2a
push esi
mov ecx, 0xcfb6d0
call fcn.00560f00
lea eax, [ebp - 0xc]
push 4
push eax
push 0xddf
mov dword [ebp - 0xc], esi
call fcn.004ac410
add esp, 0xc
jmp 0x48bd2a
cmp dword [0xa26334], edi
je 0x48bd2a
mov eax, dword [0xcfb6ec]
test eax, eax
je 0x48bd2a
mov dword [0xcfb790], 0x57
mov byte [0xcfb788], 1
mov dword [0xa233c8], ebx
jmp 0x48bd2a
cmp dword [0xa26334], edi
je 0x48bd2a
mov eax, dword [0xcfb6ec]
test eax, eax
je 0x48bd2a
lea ecx, [ebp - 0xc]
push 4
push ecx
push 0xddf
mov dword [0xcfb790], 0x74
mov byte [0xcfb788], 1
mov dword [ebp - 0xc], esi
call fcn.004ac410
add esp, 0xc
jmp 0x48bd2a
cmp dword [0xcf474c], edi
jne 0x48bd2a
mov eax, dword [0xa26334]
test eax, eax
je 0x48bd2a
mov eax, dword [0x6d67ac]
cmp eax, 0x1068
je 0x48bd2a
cmp eax, 0xbc5
je 0x48bd2a
cmp eax, 0xbc9
je 0x48bd2a
mov ecx, dword [0xcecbb4]
xor edx, edx
test ecx, ecx
sete dl
mov esi, edx
test esi, esi
je 0x48b3f1
call fcn.005a2270
cmp dword [0xcecbb4], esi
je 0x48bd2a
test esi, esi
mov dword [0xcecbb4], esi
jne 0x48bd2a
mov eax, dword [0xcecc08]
test eax, eax
je 0x48b428
push esi
push esi
push 0xcecc0c
push 0xcecc08
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
test eax, eax
je 0x48bd2a
push eax
call fcn.004e6ba0
add esp, 4
jmp 0x48bd2a
cmp dword [0xa26334], edi
je 0x48bd2a
mov ecx, dword [0xcfb0ac]
xor eax, eax
test ecx, ecx
sete al
mov esi, eax
test esi, esi
je 0x48b467
call fcn.005a2270
cmp dword [0xcfb0ac], esi
je 0x48bd2a
test esi, esi
mov dword [0xcfb0ac], esi
jne 0x48bd2a
mov eax, dword [0xcfb100]
test eax, eax
je 0x48b428
push esi
push esi
push 0xcfb104
push 0xcfb100
jmp 0x48b420
cmp dword [0xa26334], edi
je 0x48bd2a
call fcn.004e81f0
jmp 0x48bd2a
mov ecx, dword [0x6c4a08]
mov edx, dword [0x62d5a8]
mov eax, dword [ebp - 4]
push ecx
push 0x6a1488
push edx
push eax
mov dword [0xcfa664], ebx
mov dword [0x6c4a18], ebx
mov dword [0x6c4a14], edi
mov dword [0x6c4a0c], edi
call fcn.0044a1e0
add esp, 0x10
test eax, eax
je 0x48b4fa
mov ecx, dword [0x6c4a08]
mov dword [0x6c4a10], ecx
jmp 0x48bd2a
mov edx, dword [0x62d5a8]
mov eax, dword [ebp - 4]
push 0x6a1488
push edx
push eax
call fcn.0044a070
mov ecx, dword [0x6c4a08]
add esp, 0xc
cmp ecx, eax
mov dword [0x6c4a10], eax
jle 0x48bd2a
jmp 0x48b226
call fcn.005133b0
mov eax, dword [0x6c4a08]
mov ecx, dword [0x62d5a8]
mov edx, dword [ebp - 4]
push eax
push 0x6a1488
push ecx
push edx
mov dword [0xcfa664], ebx
mov dword [0x6c4a18], ebx
mov dword [0x6c4a14], eax
call fcn.0044a1e0
add esp, 0x10
test eax, eax
jne 0x48bd2a
mov eax, dword [0x6c4a08]
mov edx, dword [0x62d5a8]
lea ecx, [eax + 0x6a1487]
mov eax, dword [ebp - 4]
push ecx
push edx
push eax
call fcn.0044a140
mov ecx, dword [0x6c4a08]
xor esi, esi
sub ecx, eax
mov dword [0x6c4a10], eax
dec ecx
push ecx
push 0x6a1488
call fcn.00427910
add esp, 0x14
test eax, eax
je 0x48b283
mov edx, dword [0x6c4a08]
mov esi, ebx
jmp 0x48b7a6
push edi
push 0xffffffffffffffff
mov ecx, 0xcfeb20
call fcn.00566b60
cmp eax, ebx
je 0x48bd2a
mov eax, dword [0x6c4a14]
mov dword [0xcfa664], ebx
add eax, 0xfffffffe
mov dword [0x6c4a18], ebx
push eax
push 0x6a1488
call fcn.00427910
add esp, 8
test eax, eax
je 0x48b5f6
dec dword [0x6c4a14]
mov eax, dword [0x6c4a14]
dec eax
mov dword [0x6c4a14], eax
jns 0x48b60d
mov dword [0x6c4a14], 0
mov ecx, dword [0x6c4a08]
mov edx, dword [0x62d5a8]
mov eax, dword [ebp - 4]
push ecx
push 0x6a1488
push edx
push eax
call fcn.0044a1e0
add esp, 0x10
test eax, eax
je 0x48b63f
mov dword [0x6c4a0c], 0
jmp 0x48bd2a
mov eax, dword [0x6c4a14]
mov ecx, dword [0x6c4a0c]
cmp ecx, eax
jle 0x48bd2a
mov ecx, dword [0x6c4a08]
mov dword [0x6c4a0c], eax
sub ecx, eax
lea edx, [eax + 0x6a1488]
mov eax, dword [0x62d5a8]
push ecx
mov ecx, dword [ebp - 4]
push edx
push eax
push ecx
call fcn.0044a1e0
add esp, 0x10
test eax, eax
je 0x48b68c
mov eax, dword [0x6c4a08]
mov ecx, dword [0x6c4a0c]
sub eax, ecx
jmp 0x48b6ac
mov edx, dword [0x6c4a0c]
mov ecx, dword [0x62d5a8]
lea eax, [edx + 0x6a1488]
mov edx, dword [ebp - 4]
push eax
push ecx
push edx
call fcn.0044a070
add esp, 0xc
mov ecx, dword [0x6c4a0c]
mov dword [0x6c4a10], eax
lea edx, [eax + ecx - 1]
push edx
jmp 0x48b228
push edi
push ebx
mov ecx, 0xcfeb20
call fcn.00566b60
cmp eax, ebx
je 0x48bd2a
mov eax, dword [0x6c4a14]
mov ecx, dword [0x6c4a08]
cmp eax, ecx
mov dword [0xcfa664], ebx
je 0x48bd2a
push eax
push 0x6a1488
mov dword [0x6c4a18], ebx
call fcn.00427910
add esp, 8
test eax, eax
je 0x48b70c
inc dword [0x6c4a14]
mov edx, dword [0x6c4a14]
mov eax, dword [0x6c4a08]
mov ecx, dword [0x62d5a8]
inc edx
mov dword [0x6c4a14], edx
mov edx, dword [ebp - 4]
push eax
push 0x6a1488
push ecx
push edx
call fcn.0044a1e0
add esp, 0x10
test eax, eax
je 0x48b74a
mov dword [0x6c4a0c], 0
jmp 0x48bd2a
mov eax, dword [0x6c4a10]
mov ecx, dword [0x6c4a0c]
lea edx, [eax + ecx]
mov eax, dword [0x6c4a14]
cmp eax, edx
jle 0x48bd2a
mov ecx, dword [0x62d5a8]
mov edx, dword [ebp - 4]
lea eax, [eax + 0x6a1487]
xor esi, esi
push eax
push ecx
push edx
call fcn.0044a140
mov ecx, dword [0x6c4a14]
mov dword [0x6c4a10], eax
sub ecx, eax
dec ecx
push ecx
push 0x6a1488
call fcn.00427910
add esp, 0x14
test eax, eax
je 0x48b7a0
mov esi, ebx
mov edx, dword [0x6c4a14]
sub edx, dword [0x6c4a10]
add edx, esi
mov dword [0x6c4a0c], edx
test esi, esi
jmp 0x48b237
push 0xfffffffffffffffe
push edi
mov ecx, 0xcfeb20
call fcn.00566b60
cmp eax, ebx
je 0x48bd2a
mov eax, dword [0xa26338]
mov dword [0xcfa664], ebx
test eax, eax
je 0x48b863
mov eax, dword [0xa26280]
dec eax
mov dword [0xa26280], eax
jns 0x48b7f8
add eax, 0xb
mov dword [0xa26280], eax
cmp eax, dword [0x6c4a24]
jne 0x48b810
dec eax
mov dword [0xa26280], eax
jns 0x48b810
add eax, 0xb
mov dword [0xa26280], eax
lea eax, [eax + eax*4]
or ecx, 0xffffffff
lea edx, [eax*4 + 0x6a0728]
xor eax, eax
mov edi, edx
mov dword [0x6c4a14], eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [0x6c4a08], ecx
je 0x48bd2a
push edx
add ecx, esi
push 0x642e50
push 0x6a1488
mov dword [0x6c4a08], ecx
mov dword [0x6c4a14], ecx
call fcn.006133d6
mov ecx, dword [0x6c4a08]
add esp, 0xc
jmp 0x48ba0b
mov eax, dword [0x6a1bc0]
test eax, eax
je 0x48bd2a
mov eax, dword [0x6a1480]
test eax, eax
jne 0x48b942
mov edi, dword [0x6a1bac]
mov dword [0x6a1480], ebx
mov esi, dword [edi]
cmp esi, edi
je 0x48b8a6
mov eax, esi
mov esi, dword [esi]
push eax
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x6a1ba8
call fcn.00452590
cmp esi, edi
jne 0x48b88f
mov eax, dword [0x6a1bbc]
mov edi, dword [eax]
cmp edi, eax
je 0x48b907
mov esi, dword [0x6a1bac]
push 0xc
mov ebx, dword [esi + 4]
call fcn.00613321
add esp, 4
mov ecx, esi
test esi, esi
jne 0x48b8cc
mov ecx, eax
test ebx, ebx
mov dword [eax], ecx
jne 0x48b8d4
mov ebx, eax
mov dword [eax + 4], ebx
mov dword [esi + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
lea ecx, [edi + 8]
add eax, 8
push ecx
push eax
call fcn.0045cd40
mov ecx, dword [0x6a1bb0]
mov eax, dword [0x6a1bbc]
add esp, 8
inc ecx
mov dword [0x6a1bb0], ecx
mov edi, dword [edi]
cmp edi, eax
jne 0x48b8b1
mov esi, dword [0x6a1bac]
mov dword [ebp - 0x18], 0x68ef6c
push 0xc
mov edi, dword [esi + 4]
call fcn.00613321
add esp, 4
mov ecx, esi
test esi, esi
jne 0x48b929
mov ecx, eax
test edi, edi
mov dword [eax], ecx
jne 0x48b931
mov edi, eax
mov dword [eax + 4], edi
mov dword [esi + 4], eax
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x18]
push ecx
mov dword [edx], eax
jmp 0x48b975
mov esi, dword [0x6a1bac]
push 0xc
mov edi, dword [esi + 4]
call fcn.00613321
add esp, 4
mov ecx, esi
test esi, esi
jne 0x48b95d
mov ecx, eax
test edi, edi
mov dword [eax], ecx
jne 0x48b965
mov edi, eax
mov dword [eax + 4], edi
mov dword [esi + 4], eax
mov edx, dword [eax + 4]
push 0x6a1bd8
mov dword [edx], eax
add eax, 8
push eax
call fcn.0045cd40
mov eax, dword [0x6a1bb0]
add esp, 8
inc eax
lea edx, [ebp - 0x1c]
mov dword [0x6a1bb0], eax
mov eax, dword [0x6a1bac]
push 0
push edx
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [0x6a1bd8], ecx
mov eax, dword [eax]
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], eax
call fcn.004525d0
mov eax, dword [eax]
push eax
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [ecx], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
call fcn.006066eb
mov esi, dword [0x6a1bb0]
add esp, 4
dec esi
mov ecx, 0x19
mov dword [0x6a1bb0], esi
mov esi, dword [0x6a1bd8]
mov edi, 0x6a1488
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov edi, 0x6a1488
or ecx, 0xffffffff
mov byte [0x6a14ec], 0
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [0x6c4a08], ecx
mov dword [0x6c4a14], ecx
mov eax, dword [0x62d5a8]
push ecx
mov ecx, dword [ebp - 4]
push 0x6a1488
push eax
push ecx
mov dword [0x6c4a0c], 0
call fcn.0044a1e0
add esp, 0x10
test eax, eax
je 0x48ba40
mov eax, dword [0x6c4a08]
mov dword [0x6c4a10], eax
jmp 0x48b226
mov edx, dword [0x62d5a8]
mov eax, dword [ebp - 4]
push 0x6a1488
push edx
push eax
call fcn.0044a070
add esp, 0xc
mov dword [0x6c4a10], eax
jmp 0x48b226
push esi
push edi
mov ecx, 0xcfeb20
call fcn.00566b60
cmp eax, ebx
je 0x48bd2a
mov eax, dword [0xa26338]
mov dword [0xcfa664], ebx
test eax, eax
je 0x48bb23
mov eax, dword [0xa26280]
inc eax
cmp eax, 0xa
mov dword [0xa26280], eax
jle 0x48baa1
sub eax, 0xb
mov dword [0xa26280], eax
mov ecx, dword [0x6c4a24]
xor edx, edx
lea edi, [ecx + 1]
cmp edi, 0xa
jle 0x48bab6
mov edx, 0xb
sub ecx, edx
inc ecx
cmp eax, ecx
jne 0x48bad0
inc eax
cmp eax, 0xb
mov dword [0xa26280], eax
jl 0x48bad0
sub eax, 0xb
mov dword [0xa26280], eax
lea eax, [eax + eax*4]
or ecx, 0xffffffff
lea edx, [eax*4 + 0x6a0728]
xor eax, eax
mov edi, edx
mov dword [0x6c4a14], eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [0x6c4a08], ecx
je 0x48bd2a
push edx
add ecx, esi
push 0x642e50
push 0x6a1488
mov dword [0x6c4a08], ecx
mov dword [0x6c4a14], ecx
call fcn.006133d6
mov ecx, dword [0x6c4a08]
add esp, 0xc
jmp 0x48bc9b
mov eax, dword [0x6a1bc0]
test eax, eax
je 0x48bd2a
mov eax, dword [0x6a1480]
test eax, eax
jne 0x48bbf2
mov edi, dword [0x6a1bac]
mov dword [0x6a1480], ebx
mov esi, dword [edi]
cmp esi, edi
je 0x48bb66
mov eax, esi
mov esi, dword [esi]
lea ecx, [ebp - 0x1c]
push eax
push ecx
mov ecx, 0x6a1ba8
call fcn.00452590
cmp esi, edi
jne 0x48bb4f
mov eax, dword [0x6a1bbc]
mov edi, dword [eax]
cmp edi, eax
je 0x48bbc7
mov esi, dword [0x6a1bac]
push 0xc
mov ebx, dword [esi + 4]
call fcn.00613321
add esp, 4
mov ecx, esi
test esi, esi
jne 0x48bb8c
mov ecx, eax
test ebx, ebx
mov dword [eax], ecx
jne 0x48bb94
mov ebx, eax
mov dword [eax + 4], ebx
mov dword [esi + 4], eax
mov edx, dword [eax + 4]
lea ecx, [edi + 8]
push ecx
mov dword [edx], eax
add eax, 8
push eax
call fcn.0045cd40
mov ecx, dword [0x6a1bb0]
mov eax, dword [0x6a1bbc]
add esp, 8
inc ecx
mov dword [0x6a1bb0], ecx
mov edi, dword [edi]
cmp edi, eax
jne 0x48bb71
mov eax, dword [0x6a1bac]
mov dword [ebp - 0x10], 0x68ef6c
mov esi, dword [eax]
mov ecx, dword [esi + 4]
push ecx
push esi
mov ecx, 0x6a1ba8
call fcn.0048de10
mov dword [esi + 4], eax
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x10]
mov dword [edx], eax
push ecx
jmp 0x48bc16
mov edx, dword [0x6a1bac]
mov ecx, 0x6a1ba8
mov esi, dword [edx]
mov eax, dword [esi + 4]
push eax
push esi
call fcn.0048de10
mov dword [esi + 4], eax
mov ecx, dword [eax + 4]
push 0x6a1bd8
mov dword [ecx], eax
add eax, 8
push eax
call fcn.0045cd40
mov eax, dword [0x6a1bb0]
add esp, 8
inc eax
mov dword [0x6a1bb0], eax
mov eax, dword [0x6a1bac]
mov edx, dword [eax + 4]
mov ecx, dword [edx + 8]
mov dword [0x6a1bd8], ecx
mov eax, dword [eax + 4]
push eax
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [edx], ecx
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
call fcn.006066eb
mov esi, dword [0x6a1bb0]
add esp, 4
dec esi
mov ecx, 0x19
mov dword [0x6a1bb0], esi
mov esi, dword [0x6a1bd8]
mov edi, 0x6a1488
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov edi, 0x6a1488
or ecx, 0xffffffff
mov byte [0x6a14ec], 0
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [0x6c4a08], ecx
mov dword [0x6c4a14], ecx
mov edx, dword [0x62d5a8]
mov eax, dword [ebp - 4]
push ecx
push 0x6a1488
push edx
push eax
mov dword [0x6c4a0c], 0
call fcn.0044a1e0
add esp, 0x10
test eax, eax
je 0x48bcd1
mov eax, dword [0x6c4a08]
mov dword [0x6c4a10], eax
jmp 0x48b226
mov ecx, dword [0x62d5a8]
mov edx, dword [ebp - 4]
push 0x6a1488
push ecx
push edx
call fcn.0044a070
add esp, 0xc
mov dword [0x6c4a10], eax
jmp 0x48b226
cmp dword [0x6a1480], edi
je 0x48bd2a
mov edi, dword [0x6a1bac]
xor eax, eax
mov dword [0x6a1480], eax
mov dword [0x6a1bd8], eax
mov esi, dword [edi]
cmp esi, edi
je 0x48bd2a
mov eax, esi
mov esi, dword [esi]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x6a1ba8
call fcn.00452590
cmp esi, edi
jne 0x48bd13
mov eax, dword [0x6a0478]
test eax, eax
je 0x48bd41
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [0xa4f000]
mov edx, dword [ebp - 4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x68]
jmp 0x48c9b0
cmp al, 2
jne 0x48c9b0
cmp dword [0xa26334], ecx
je 0x48c46c
mov eax, dword [0xa25c14]
add eax, 0xffffffef
cmp eax, 0xaf
ja case.0x48c486.16
xor ecx, ecx
mov cl, byte [eax + 0x48ca94]
jmp dword [ecx*4 + 0x48ca58]
mov eax, dword [0xcf2d34]
inc eax
cmp eax, 3
mov dword [0xcf2d34], eax
jl case.0x48c486.16
mov dword [0xcf2d34], 0
jmp case.0x48c486.16
mov eax, dword [0xcfb6ec]
test eax, eax
je case.0x48c486.16
mov byte [0xcfb788], 0
jmp case.0x48c486.16
mov edx, dword [0xa2af98]
push edx
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je case.0x48c486.16
push 1
call dword [sym.imp.USER32.dll_GetClipboardData]
mov edi, eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test edi, edi
mov esi, eax
je case.0x48c486.16
mov eax, dword [0x6a0660]
test eax, eax
je 0x48be1a
push 0
push 0
push esi
mov ecx, 0x6a0638
call fcn.004294b0
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp case.0x48c486.16
mov eax, dword [0x6a0508]
test eax, eax
je 0x48be3d
push 0
push 0
push esi
mov ecx, 0x6a04e0
call fcn.004294b0
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp case.0x48c486.16
mov eax, dword [0x6a0570]
test eax, eax
je 0x48be60
push 0
push 0
push esi
mov ecx, 0x6a0548
call fcn.004294b0
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp case.0x48c486.16
mov eax, dword [0xcea35c]
test eax, eax
je 0x48beb0
mov ecx, dword [0xcea3e4]
test ecx, ecx
je 0x48be8d
push 0
push 0
push esi
mov ecx, 0xcea3bc
call fcn.004294b0
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp case.0x48c486.16
test eax, eax
je 0x48beb0
mov eax, dword [0xcea454]
test eax, eax
je 0x48beb0
push esi
mov ecx, 0xcea420
call fcn.0042a5d0
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp case.0x48c486.16
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, esi
mov dword [0x6c4a08], ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, esi
mov dword [0x6c4a10], ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, 0x6a1488
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp case.0x48c486.16
mov dword [0xa26334], 1
jmp case.0x48c486.16
call fcn.004fe100
test eax, eax
je case.0x48c486.16
mov eax, dword [0xcf474c]
test eax, eax
jne case.0x48c486.16
call fcn.0056f820
jmp case.0x48c486.16
call fcn.004fe100
test eax, eax
je case.0x48c486.16
mov eax, dword [0xcfa484]
test eax, eax
je case.0x48c486.16
call fcn.00432420
call fcn.00512a50
call fcn.005a2270
mov ecx, dword [0xcfa484]
mov eax, 1
cmp ecx, eax
je 0x48bf6a
mov dword [0xcfa484], eax
mov dword [0xcea2d8], eax
jmp case.0x48c486.16
mov eax, dword [0xa26284]
xor ecx, ecx
test eax, eax
sete cl
mov dword [0xa26284], ecx
jmp case.0x48c486.16
call fcn.004fe100
test eax, eax
je case.0x48c486.16
call fcn.0054d160
jmp case.0x48c486.16
call fcn.004fe100
test eax, eax
je case.0x48c486.16
call fcn.005133b0
mov eax, dword [0xa4f274]
push 0
push 0
push 0
test eax, eax
mov dword [0xa233b8], 1
push 0
je 0x48bfe1
push 0x648160
call fcn.004cbc90
add esp, 0x14
jmp case.0x48c486.16
push 0x648144
call fcn.004cbc90
add esp, 0x14
jmp case.0x48c486.16
call fcn.004fe100
test eax, eax
je case.0x48c486.16
mov ecx, dword [0xcf8be4]
xor edx, edx
test ecx, ecx
sete dl
mov esi, edx
test esi, esi
je 0x48c018
call fcn.005a2270
cmp dword [0xcf8be4], esi
je 0x48c059
test esi, esi
mov dword [0xcf8be4], esi
jne 0x48c059
mov eax, dword [0xcf8c38]
test eax, eax
je 0x48c047
push esi
push esi
push 0xcf8c3c
push 0xcf8c38
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
test eax, eax
je 0x48c059
push eax
call fcn.004e6ba0
add esp, 4
mov eax, dword [0x62d4c4]
add eax, 0x26
push eax
call fcn.00575a50
mov eax, dword [0xcf8be4]
add esp, 4
test eax, eax
je case.0x48c486.16
call fcn.00512a50
call fcn.00512590
call fcn.005a2270
cmp dword [0xcf8be4], 1
je case.0x48c486.16
mov dword [0xcf8be4], 1
jmp case.0x48c486.16
mov eax, dword [0x6d69f8]
test eax, eax
je 0x48c0bd
cmp eax, 0x10
jl case.0x48c486.16
cmp eax, 0x19
jge case.0x48c486.16
mov eax, dword [0x6454a8]
test eax, eax
je case.0x48c486.16
call fcn.0051bd60
test al, al
jne case.0x48c486.16
mov ecx, dword [0x6d69fc]
mov dword [0x6d6b20], ebx
and ecx, 0xffff
mov dword [0x6d69f8], ebx
or ecx, 0x110000
mov dword [0x6d6b34], 0
push ecx
call fcn.004e58a0
add esp, 4
jmp case.0x48c486.16
mov eax, dword [0x6d69f8]
test eax, eax
je 0x48c128
cmp eax, 0x10
jl case.0x48c486.16
cmp eax, 0x19
jge case.0x48c486.16
mov eax, dword [0x6454a8]
test eax, eax
je case.0x48c486.16
call fcn.0051bd60
test al, al
jne case.0x48c486.16
mov edx, dword [0x6d69fc]
mov dword [0x6d6b20], edi
and edx, 0xffff
mov dword [0x6d69f8], edi
or edx, 0x120000
mov dword [0x6d6b34], 0
push edx
call fcn.004e58a0
add esp, 4
jmp case.0x48c486.16
mov eax, dword [0x6d69f8]
test eax, eax
je 0x48c193
cmp eax, 0x10
jl case.0x48c486.16
cmp eax, 0x19
jge case.0x48c486.16
mov eax, dword [0x6454a8]
test eax, eax
je case.0x48c486.16
call fcn.0051bd60
test al, al
jne case.0x48c486.16
mov eax, 0x13
mov dword [0x6d6b34], 0
mov dword [0x6d6b20], eax
mov dword [0x6d69f8], eax
mov eax, dword [0x6d69fc]
and eax, 0xffff
or eax, 0x130000
push eax
call fcn.004e58a0
add esp, 4
jmp case.0x48c486.16
mov eax, dword [0xcf944c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcf89e4]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcf896c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcecc84]
test eax, eax
jne case.0x48c486.16
cmp dword [0x6d69f8], 0x19
je case.0x48c486.16
mov eax, dword [0xd1115c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xd11284]
test eax, eax
jne case.0x48c486.16
call fcn.0051a030
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xd06a0c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xced1f4]
test eax, eax
jne case.0x48c486.16
mov ecx, dword [0xcf2d34]
mov edx, dword [0xa25c14]
lea eax, [edx + ecx*8 - 0x74]
mov dword [ebp - 0x18], eax
lea ebx, [eax + eax*2]
lea ebx, [ebx + ebx*8]
shl ebx, 2
mov ecx, dword [ebx + 0xcf2d88]
test ecx, ecx
je case.0x48c486.16
mov edx, dword [0xcea298]
xor esi, esi
cmp edx, esi
je 0x48c2d8
cmp dword [0xce8ee4], 0x7cf
jne 0x48c2d8
mov eax, dword [0xa4f274]
push esi
push esi
cmp eax, esi
push esi
push esi
je 0x48c2c6
push 0x648124
call fcn.004cbc90
add esp, 0x14
jmp case.0x48c486.16
push 0x648104
call fcn.004cbc90
add esp, 0x14
jmp case.0x48c486.16
mov edx, dword [ebx + 0xcf2d94]
cmp edx, 1
jne 0x48c42b
mov eax, dword [0x6d6a00]
xor edx, edx
and eax, 0x2000
or eax, edx
jne case.0x48c486.16
push ecx
mov ecx, 0xced988
call fcn.0053bf30
test eax, eax
je case.0x48c486.16
mov ecx, dword [ebx + 0xcf2d88]
xor eax, eax
mov dword [ebp - 0x122], eax
mov dword [ebp - 0x2d0], ecx
mov dword [ebp - 0x11e], eax
mov ecx, 0x4c
mov dword [ebp - 0x11a], eax
lea esi, [ebp - 0x19c]
lea edi, [ebp - 0x2cc]
mov byte [ebp - 0x116], al
lea edx, [ebp - 0x2d0]
lea eax, [ebp - 0x20]
rep movsd dword es:[edi], dword [esi]
push edx
push eax
mov ecx, 0xced988
call fcn.00474ae0
mov ecx, eax
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
mov eax, dword [eax + 0x80]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], eax
test al, 0x40
je 0x48c3bf
mov eax, dword [ebx + 0xcf2d88]
mov ecx, 0xced988
push eax
call fcn.0052d310
mov ecx, dword [ebp - 0x10]
test ch, 8
jne 0x48c85c
test ecx, 0x100000
je 0x48c893
mov edx, dword [ebp - 0x18]
mov ecx, 0x68d9e0
push edx
mov dword [0x68e0c0], 1
mov word [0x68e0c4], ax
call fcn.00403e20
jmp case.0x48c486.16
test eax, 0x40000
je 0x48c926
mov eax, dword [0xa4f274]
lea edx, [ebp - 0x6c]
test eax, eax
mov edi, 0x6480f4
jne 0x48c3e0
mov edi, 0x6480e4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov dx, word [ebx + 0xcf2de2]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov word [0xced268], dx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov cx, word [ebx + 0xcf2d88]
mov word [0xced112], cx
call fcn.005133b0
push 0x7cd
lea eax, [ebp - 0x6c]
jmp 0x48c914
cmp edx, 2
jne 0x48c45b
cmp dword [0xce88ac], esi
jne case.0x48c486.16
xor ecx, ecx
push eax
mov dword [0x68e0c0], ecx
mov word [0x68e0c4], cx
mov ecx, 0x68d9e0
call fcn.00403e20
jmp case.0x48c486.16
mov dword [ebx + 0xcf2d88], esi
mov dword [ebx + 0xcf2d94], esi
jmp case.0x48c486.16
mov edx, dword [0xa25c14]
lea eax, [edx - 9]
cmp eax, 0x72
ja case.0x48c486.16
xor ecx, ecx
mov cl, byte [eax + 0x48cb64]
jmp dword [ecx*4 + 0x48cb44]
call fcn.004fe100
test eax, eax
jne 0x48c4a3
cmp dword [0x6d69f8], 0x19
jne case.0x48c486.16
mov eax, dword [0xa4f2a8]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xced06c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xd06a0c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xced1f4]
test eax, eax
jne case.0x48c486.16
call fcn.00536fb0
jmp case.0x48c486.16
call fcn.004fe100
test eax, eax
je case.0x48c486.16
mov eax, dword [0xcf474c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xced1f4]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcea298]
test eax, eax
jne 0x48c9d5
mov eax, dword [0xcf95c0]
test eax, eax
jne 0x48c9d5
mov ecx, dword [0xcf8b5c]
xor edx, edx
test ecx, ecx
sete dl
mov esi, edx
test esi, esi
je 0x48c53a
call fcn.005a2270
cmp dword [0xcf8b5c], esi
je 0x48c57b
test esi, esi
mov dword [0xcf8b5c], esi
jne 0x48c57b
mov eax, dword [0xcf8bb0]
test eax, eax
je 0x48c569
push esi
push esi
push 0xcf8bb4
push 0xcf8bb0
call fcn.005a6840
add esp, 0x10
mov eax, dword [0xd0af88]
test eax, eax
je 0x48c57b
push eax
call fcn.004e6ba0
add esp, 4
mov eax, dword [0x62d4c4]
add eax, 0x26
push eax
call fcn.00575a50
mov eax, dword [0xcf8b5c]
add esp, 4
test eax, eax
je case.0x48c486.16
call fcn.00512a50
call fcn.005a2270
mov eax, dword [0xcf8b5c]
mov esi, 1
cmp eax, esi
je 0x48c5b7
mov dword [0xcf8b5c], esi
call fcn.005a2270
cmp dword [0xcfaa14], esi
je case.0x48c486.16
mov dword [0xcfaa14], 1
jmp case.0x48c486.16
mov eax, dword [0xced1f4]
test eax, eax
jne case.0x48c486.16
mov ecx, dword [0xce8b10]
lea eax, [ecx + 1]
mov ecx, 5
cdq
idiv ecx
mov al, byte [0xce955b]
test al, al
mov dword [0xce8b10], edx
sete dl
mov byte [0xce955b], dl
jmp case.0x48c486.16
mov eax, dword [0xced1f4]
test eax, eax
jne case.0x48c486.16
mov ecx, 0x68d9e0
call fcn.00403da0
jmp case.0x48c486.16
mov eax, dword [0xa4f2a8]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcecc84]
test eax, eax
jne case.0x48c486.16
cmp dword [0x6d69f8], 0x19
je case.0x48c486.16
mov eax, dword [0xd1115c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcfa6b4]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcf944c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcf89e4]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcf896c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xd11284]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xced1f4]
test eax, eax
jne case.0x48c486.16
call fcn.00555e20
jmp case.0x48c486.16
mov eax, dword [0xcecc84]
test eax, eax
jne case.0x48c486.16
cmp dword [0x6d69f8], 0x19
je case.0x48c486.16
mov eax, dword [0xd1115c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcfa6b4]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcf944c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcf89e4]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcf896c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xd11284]
test eax, eax
jne case.0x48c486.16
call fcn.0051a030
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xd06a0c]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xced1f4]
test eax, eax
jne case.0x48c486.16
mov eax, dword [0xcf2d34]
mov ecx, dword [0xa25c14]
lea eax, [ecx + eax*8 - 0x74]
mov dword [ebp - 8], eax
lea ebx, [eax + eax*2]
lea ebx, [ebx + ebx*8]
shl ebx, 2
mov ecx, dword [ebx + 0xcf2d88]
test ecx, ecx
je case.0x48c486.16
mov eax, dword [0xcea298]
xor edx, edx
cmp eax, edx
je 0x48c7aa
cmp dword [0xce8ee4], 0x7cf
jne 0x48c7aa
mov eax, dword [0xa4f274]
push edx
push edx
cmp eax, edx
push edx
push edx
je 0x48c2c6
push 0x648124
call fcn.004cbc90
add esp, 0x14
jmp case.0x48c486.16
mov eax, dword [ebx + 0xcf2d94]
cmp eax, 1
jne 0x48c960
mov eax, dword [0x6d6a00]
and eax, 0x2000
or eax, edx
jne case.0x48c486.16
push ecx
mov ecx, 0xced988
call fcn.0053bf30
test eax, eax
je case.0x48c486.16
mov eax, dword [ebx + 0xcf2d88]
xor edx, edx
mov dword [ebp - 0x122], edx
mov ecx, 0x4c
mov dword [ebp - 0x11e], edx
lea esi, [ebp - 0x19c]
mov dword [ebp - 0x11a], edx
lea edi, [ebp - 0x2cc]
mov byte [ebp - 0x116], dl
mov dword [ebp - 0x2d0], eax
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x2d0]
lea edx, [ebp - 0x20]
push ecx
push edx
mov ecx, 0xced988
call fcn.00474ae0
mov ecx, eax
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
mov eax, dword [eax + 0x80]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], eax
test al, 0x40
je 0x48c8b1
mov eax, dword [ebx + 0xcf2d88]
mov ecx, 0xced988
push eax
call fcn.0052d310
mov ecx, dword [ebp - 0x10]
test ch, 8
je 0x48c87c
cmp eax, 0xffffffff
je case.0x48c486.16
mov ecx, dword [ebx + 0xcf2d88]
push eax
push ecx
mov ecx, 0xcf65c0
call fcn.00549c00
jmp case.0x48c486.16
test ecx, 0x100000
je 0x48c893
mov dword [0x68e0c0], 1
jmp 0x48c974
cmp eax, 0xffffffff
je case.0x48c486.16
push eax
mov eax, dword [ebx + 0xcf2d88]
push eax
call fcn.004e5ae0
add esp, 8
jmp case.0x48c486.16
test eax, 0x40000
je 0x48c926
mov eax, dword [0xa4f274]
lea edx, [ebp - 0x6c]
test eax, eax
mov edi, 0x6480f4
jne 0x48c8ce
mov edi, 0x6480e4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov dx, word [ebx + 0xcf2de2]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov word [0xced268], dx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov cx, word [ebx + 0xcf2d88]
mov word [0xced112], cx
call fcn.005133b0
push 0x7cd
lea eax, [ebp - 0x6c]
push eax
call fcn.004fe420
push 0
call fcn.004fe110
add esp, 0xc
jmp case.0x48c486.16
test eax, 0x80000
je case.0x48c486.16
mov eax, dword [0xcf481c]
test eax, eax
jne case.0x48c486.16
mov ecx, dword [ebx + 0xcf2d88]
push ecx
mov ecx, 0xced988
call fcn.0052d310
mov esi, eax
cmp esi, 0xffffffff
je case.0x48c486.16
call fcn.005133b0
push esi
mov ecx, 0xd11268
call fcn.005819d0
jmp case.0x48c486.16
cmp eax, 2
jne 0x48c98a
cmp dword [0xce88ac], edx
jne case.0x48c486.16
xor eax, eax
mov dword [0x68e0c0], eax
mov edx, dword [ebp - 8]
mov ecx, 0x68d9e0
push edx
mov word [0x68e0c4], ax
call fcn.00403e20
jmp case.0x48c486.16
mov dword [ebx + 0xcf2d88], edx
mov dword [ebx + 0xcf2d94], edx
jmp case.0x48c486.16
call fcn.00487f30
cmp dword [0xa25c14], 0x10
jne 0x48c9b0
mov dword [0xa26338], 0
call fcn.005541d0
mov dword [0xa2339c], eax
mov eax, dword [eax*4 + 0xa27024]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
rdtsc
lea ebx, [0xa258f0]
mov dword [ebx], eax
mov dword [ebx + 4], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret