Function at 0x10005f6b
Capabilities:
Log keystrokes

Disassembly:
mov eax, 0x1005f4c9
call fcn.1005ecf4
sub esp, 0xc4
push ebx
push esi
mov esi, edx
mov dword [ebp - 0x44], ecx
push edi
mov dword [ebp - 0x3c], esi
cmp byte [esi], 0x50
jne 0x10006944
cmp byte [esi + 1], 0x4b
jne 0x10006944
xor edi, edi
xor ebx, ebx
inc edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x30], 0x95d7c154
mov dword [ebp - 0x44], 0x8ebcce3f
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], bl
je 0x10005fbe
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], 0xfffffff7
je 0x10006090
mov esi, 0xee85ec41
mov dword [ebp - 0x30], 0xcc9f71d6
mov dword [ebp - 0x24], 0xaa6f4ed8
mov dword [ebp - 0x14], ebx
jmp 0x10005ff1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c], 0x11c15747
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10005fe3
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x10], ebx
jne 0x10006002
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x4c]
cmp esi, eax
mov eax, dword [ebp - 0x4c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setle cl
add eax, 0x40e66cec
add eax, ecx
xor ecx, ecx
cmp eax, 0x64939e63
setne cl
imul eax, ecx, 0xced6
cmp eax, dword [ebp - 0x48]
jge 0x1000603b
mov edx, ebx
cmp dword [ebp - 0x48], ebx
je 0x1000603d
mov edx, edi
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
setle cl
imul ecx, dword [ebp - 0x10]
cmp ecx, 3
jg 0x10006053
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 9
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x10]
inc ecx
cmp ecx, eax
setl dl
mov dword [ebp - 0x24], edx
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff7
jne 0x10005fd0
mov esi, dword [ebp - 0x3c]
mov al, byte [esi + 2]
lea ecx, [ebp - 0xa4]
push 4
mov byte [ebp - 0x29], al
call fcn.1000354d
push 2
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x100060bc
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x8c], 0x5f70
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100060ab
mov dword [ebp - 0x10], ebx
jmp 0x100060d9
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xa4]
mov dword [eax + ecx*4], 0x6f5020f8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100060c6
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 8], edi
mov eax, dword [ecx + 8]
mov dword [ebp - 0x28], edi
cmp dword [ebp + eax*4 - 0x8c], ebx
jne 0x10006117
mov dword [ebp - 0x28], ebx
jmp 0x1000610d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x8c], 0x770a
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x100060fc
dec dword [ecx + 8]
jns 0x100060e8
lea ecx, [ebp - 0xa4]
call fcn.100035d0
mov al, byte [esi + 3]
push 0xfffffffffffffff8
pop esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], 0x570a50b5
push 7
mov byte [ebp - 0x15], al
mov dword [ebp - 0x24], esi
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 5
cmp dword [ebp - 0x10], eax
jl 0x1000626c
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x30], 0x2ddb74a7
mov dword [ebp - 0x14], 0x289a6957
cmp dword [ebp - 0x28], 0x8ae505b0
jne 0x1000619c
mov ecx, dword [ebp - 0x14]
xor ebx, ebx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setle bl
xor edx, edx
sub ebx, dword [ebp - 0x10]
add ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
cmp ebx, 0xfffffffd
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
xor ebx, ebx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
add eax, 0x5c14225a
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, esi
setne cl
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x30], ecx
je 0x1000622b
mov dword [ebp - 0x1c], 0xe7374489
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x20]
jle 0x100061da
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
xor edx, edx
test eax, eax
mov eax, dword [ebp - 0x10]
sets dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], 0xffff
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x38]
setle cl
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x10]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x14], edx
jmp 0x10006237
mov dword [ebp - 0x30], 0xf4f
cmp dword [ebp - 0x30], ebx
jne 0x1000626c
mov dword [ebp - 0x20], ebx
jmp 0x10006259
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x10006256
push 0x1328
push 0x111b
push ebx
call dword [sym.imp.USER32.dll_EnableMenuItem]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1000623c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 7
jge 0x1000614e
movzx esi, byte [ebp - 0x29]
mov eax, 0x909b7928
mov dword [ebp - 0x10], 0xffffffff
add esi, 4
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], 0xcdcb363f
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x1c], 0xd3388a01
mov dword [ebp - 0x28], 0xa3e8
mov eax, dword [ebp - 0x14]
dec dword [ebp - 0x14]
mov dword [ebp - 0x24], esi
test eax, eax
je 0x1000630d
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setne cl
imul ecx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x10]
je 0x100062e6
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x74], ebx
je 0x100062f4
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setle dl
cmp edx, dword [ebp - 0x38]
jne 0x1000630d
mov ecx, edi
cmp dword [ebp - 0x1c], ebx
jne 0x1000630f
mov ecx, ebx
mov eax, dword [ebp - 0x20]
sub ecx, eax
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1000632f
push ebx
push 0x147d
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1000634e
push ebx
push 0x955
push 0x1358
push 0x3e9
call dword [sym.imp.GDI32.dll_MoveToEx]
movzx eax, byte [ebp - 0x15]
mov ecx, dword [ebp - 0x24]
add eax, 0x18
add esi, eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [ecx + eax]
mov ecx, dword [ecx + eax + 0x14]
call fcn.10005f5f
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
add eax, esi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x14], ebx
jmp 0x100063a7
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10006391
push ebx
push 0x215c
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100063a4
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffee
jg 0x1000637c
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x1c], 0x95d7c154
mov dword [ebp - 0x44], 0x8ebcce3f
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100063ce
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x10], ebx
jmp 0x1000648a
mov dword [ebp - 0x1c], 0xcc9f71d6
mov dword [ebp - 0x1c], 0xaa6f4ed8
mov dword [ebp - 0x14], ebx
jmp 0x100063f7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x54], 0x11c15747
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100063e9
mov esi, edi
cmp dword [ebp - 0x10], ebx
jne 0x10006406
mov esi, ebx
mov eax, dword [ebp - 0x54]
mov ecx, 0xee85ec41
cmp ecx, eax
mov eax, dword [ebp - 0x54]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
lea eax, [ecx + 0x40e66cec]
xor ecx, ecx
add eax, esi
cmp eax, 0x64939e63
setne cl
imul eax, ecx, 0xced6
cmp eax, dword [ebp - 0x50]
jge 0x10006442
mov edx, ebx
cmp dword [ebp - 0x50], ebx
je 0x10006444
mov edx, edi
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
setle cl
imul ecx, dword [ebp - 0x10]
cmp ecx, 3
jg 0x1000645a
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 9
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x10]
inc ecx
cmp ecx, eax
setl dl
mov dword [ebp - 0x1c], edx
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff7
jne 0x100063d6
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x38]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x14], ebx
jmp 0x100064bc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x40], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100064b2
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100064e0
push ebx
push 0x71b
push 0x1eb9
push 0x23e1
call dword [sym.imp.GDI32.dll_SetPixel]
mov dword [ebp - 0x10], ebx
jmp 0x10006691
push 2
lea ecx, [ebp - 0x70]
call fcn.1000354d
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1000650d
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x70]
mov dword [eax + ecx*4], 0x8a137b18
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100064fd
mov eax, dword [ebp - 0x70]
mov dword [eax], ebx
push 4
pop esi
mov dword [ebp - 0x1c], 0x67f8b4df
lea ecx, [ebp - 0x98]
push esi
call fcn.1000354d
mov dword [ebp - 0x14], ebx
jmp 0x10006543
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x98]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10006533
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x40]
cmp eax, ecx
mov ecx, dword [ebp - 0x1c]
setle dl
cmp edx, esi
sbb eax, eax
neg eax
add ecx, eax
mov eax, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
mov esi, dword [ebp + eax*4 - 0x40]
neg ecx
mov eax, 0x9689
sub eax, ecx
xor ecx, ecx
cmp eax, 0x997
mov eax, dword [ebp - 0x70]
setle cl
xor edx, edx
cmp esi, ecx
sete dl
xor ebx, ebx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x10]
setle bl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x40]
cmp ebx, eax
setg cl
xor edx, edx
add ecx, 0x4ed3
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setge bl
xor ecx, ecx
neg ebx
cmp ebx, eax
setle cl
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp eax, 0x981c
mov eax, dword [ebp - 0x98]
setl cl
imul ecx, ecx, 0xe327
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x98]
call fcn.100035d0
mov eax, dword [ebp - 0x70]
push 0
pop ebx
inc dword [eax]
mov eax, dword [eax]
test eax, eax
jle 0x10006518
cmp eax, 0x36511f0b
jle 0x10006617
mov eax, ebx
cmp dword [ebp - 0x10], ebx
je 0x10006619
mov eax, edi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x40]
mov ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0x34f12ce3
setg al
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
cmp dword [ebp + eax*4 - 0x40], edx
jg 0x10006653
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x70]
mov dword [eax], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x40]
imul eax, edx, 0x72fd
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x70]
or dword [ebp - 4], 0xffffffff
call fcn.100035d0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x100064e8
mov eax, dword [ebp - 0x38]
shr eax, 2
inc eax
mov dword [ebp - 0x14], 0x5d6c05ba
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x14], ebx
jmp 0x100066c1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd0], 0xb4074dd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100066b0
mov dword [ebp - 0x14], 0xe
jmp 0x100066dd
mov dword [ebp - 0x1c], 0x4c8d3c89
inc dword [ebp - 0x1c]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x19
jle 0x100066d0
mov esi, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + esi]
mov dword [ebp - 0xb4], eax
mov eax, dword [ecx + esi + 4]
mov dword [ebp - 0xb0], eax
mov eax, dword [ecx + esi + 8]
mov dword [ebp - 0xac], eax
mov eax, dword [ecx + esi + 0xc]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x10], 0xb57fd546
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x3c], 0x25d8bac8
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], 5
jg 0x1000690b
mov eax, 0xc6ae49a2
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x44], 0x43d03942
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
ja 0x1000675c
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x60]
xor edx, edx
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setl dl
sub edx, eax
imul edx, dword [ebp - 0x60]
test edx, edx
jne 0x10006779
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x60]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
cmp dword [ebp - 0x10], ecx
jge 0x100067b9
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100068e7
push ebx
push ebx
push 0x1f39
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateDialogParamA]
jmp 0x100068e7
mov dword [ebp - 0x1c], 0xffffffff
cmp dword [ebp - 0x5c], ebx
je 0x100068e1
push 7
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0x27020778
mov dword [ebp - 0x28], 0xfffffff3
cmp dword [ebp - 0x28], eax
jne 0x100068e7
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x1000683d
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], ebx
jmp 0x10006832
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x64]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x64], ecx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000682f
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_AttachThreadInput]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x1000680f
dec dword [ebp - 0x14]
jns 0x10006803
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
neg eax
add eax, 0x71fecc2c
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
sub eax, 3
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x3c]
jne 0x1000688d
mov ecx, ebx
cmp dword [ebp - 0x14], ebx
je 0x1000688f
mov ecx, edi
xor eax, eax
cmp ecx, 0xfffffffb
setge al
xor ecx, ecx
cmp eax, 9
setne cl
xor edx, edx
cmp ecx, 0x889e
setge dl
cmp dword [ebp - 0x1c], 0xffffffff
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, edx
setle cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setge dl
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x44], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 7
je 0x100067ed
jmp 0x100068e7
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100068f9
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
inc dword [ebp - 0x10]
mov eax, 0xc6ae49a2
cmp dword [ebp - 0x10], 5
jle 0x10006737
mov edi, dword [ebp - 0x38]
test edi, edi
je 0x10006a11
mov ecx, dword [ebp - 0x30]
sub esi, ecx
mov ecx, dword [ecx]
mov edx, ebx
and edx, 3
mov edx, dword [ebp + edx*4 - 0xb4]
call fcn.10005f5f
mov ecx, dword [ebp - 0x30]
mov dword [esi + ecx], eax
add ecx, 4
inc ebx
mov dword [ebp - 0x30], ecx
cmp ebx, edi
jb 0x1000691b
jmp 0x10006a11
mov dword [ebp - 0x14], 0x41e55969
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x24], 0xade2167f
or ebx, 0xffffffff
mov dword [ebp - 0x24], 0x8974b666
xor esi, esi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x924c0001
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0x963ba20b
mov dword [ebp - 0x24], 0x9f6d4a0d
mov dword [ebp - 0x24], 0x14eb4c8f
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 7
push 3
call fcn.1000354d
mov dword [ebp - 0x24], 0xfffffffb
xor edi, edi
mov dword [ebp - 0x24], 0xc75daa08
inc edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], esi
jmp 0x100069c1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x84], 9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x100069b0
mov dword [ebp - 0x20], esi
jmp 0x100069de
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 0xcc80fc3a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100069cb
mov dword [ebp - 0x14], esi
jmp 0x100069f6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x84], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100069e9
dec dword [ebp - 0x24]
lea ecx, [ebp - 0xc0]
call fcn.100035d0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret