Function at 0x1004f1e2
Capabilities:
Clear file content
Get graphical window text
Log keystrokes

Disassembly:
mov eax, 0x100735ac
call fcn.10071d48
sub esp, 0x1fc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 2
pop esi
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x150]
push esi
mov byte [ebp - 0x4c], dl
call fcn.10021783
xor ebx, ebx
mov dword [ebp - 0x40], 0x5c8094a
mov dword [ebp - 0x14], ebx
jmp 0x1004f22e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 0x9f9b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1004f21b
xor edi, edi
mov dword [ebp - 0x40], ebx
inc edi
jmp 0x1004f288
mov dword [ebp - 0x24], 0xafd94fe5
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x24], ebx
jl 0x1004f285
mov dword [ebp - 0x14], ebx
jmp 0x1004f260
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1c4], 3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1004f24f
mov dword [ebp - 0x1b8], 0xfffffffb
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1004f280
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommState]
dec dword [ebp - 0x24]
jns 0x1004f24a
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jle 0x1004f23b
lea ecx, [ebp - 0x150]
call fcn.10021805
push 0xfffffffffffffff8
pop eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x14], ebx
jmp 0x1004f2ca
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], 0xc93
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1004f2b9
mov dword [ebp - 0x40], ebx
jmp 0x1004f316
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x28], 0x2d91509c
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jl 0x1004f310
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xac], ebx
jne 0x1004f310
dec dword [ebp - 0x14]
jns 0x1004f2ff
dec dword [ebp - 0x28]
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jle 0x1004f2d4
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], 0x1987
cmp dword [ebp - 0x2c], 0x1bb7
mov dword [ebp - 0x40], 4
jle 0x1004f3d2
push edi
push ebx
push ebx
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov dword [ebp - 0x14], ebx
mov eax, ebx
mov dword [ebp - 0x48], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, esi
mov edx, ebx
mov esi, dword [ebp - 0x14]
sar eax, cl
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x34], eax
and eax, edx
lea ecx, [ebp - 0x1ec]
xor eax, esi
cdq
push edx
push eax
call fcn.1000a4b3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1004f37a
mov eax, dword [eax]
push eax
call fcn.10059c65
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1ec]
call fcn.10021e6e
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
inc edx
mov dword [ebp - 0x28], edx
cmp edx, 0x30c3
jl 0x1004f35e
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x5823
jl 0x1004f34f
inc eax
mov dword [ebp - 0x48], eax
cmp eax, 0x72c9
jl 0x1004f34a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0xcd1
jl 0x1004f345
push 2
pop esi
cmp dword [ebp - 0x2c], 0x1882
jge 0x1004f3e6
push 0x10008b54
call fcn.10059c65
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x5b9b55bb
mov dword [ebp - 0x24], esi
jmp 0x1004f445
mov dword [ebp - 0x14], 0x7689351f
mov dword [ebp - 0x14], ebx
jmp 0x1004f43c
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1004f41b
push 0x1cad
push ebx
push 0x1198
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1004f439
push ebx
push 0x1551
push 0x184
push 0x551
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe6
jl 0x1004f402
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffffc
jne 0x1004f3f6
mov eax, dword [0x100798cc]
lea ecx, [ebp - 0xfc]
push esi
mov dword [ebp - 0x48], eax
call fcn.10021783
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x28], 0x60915bb0
mov dword [ebp - 0x14], 7
push edi
call fcn.10021783
mov dword [ebp - 0x1c], ebx
jmp 0x1004f49b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xfc]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1004f488
mov dword [ebp - 0x1c], ebx
jmp 0x1004f4b8
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0xc3eec73f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1004f4a5
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0xfc]
mov ecx, dword [esi + 4]
sub ecx, eax
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov esi, dword [esi + 4]
mov eax, dword [ebp - 0x24]
cmp esi, eax
mov eax, esi
setl cl
xor edx, edx
sub eax, ecx
cmp eax, esi
mov eax, dword [ebp - 0x114]
setg dl
xor ecx, ecx
add edx, 0x3266
cmp edx, 0x43d9
setg cl
mov dword [eax], ecx
lea ecx, [ebp - 0x114]
call fcn.10021805
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfc]
call fcn.10021805
cmp byte [ebp - 0x4c], 0
mov esi, dword [ebp + 8]
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
je 0x1004f758
cmp dword [ebp - 0x48], edi
jne 0x1004f758
mov dword [ebp - 0x24], 0xddc85f70
lea ecx, [ebp - 0xb8]
push edi
mov dword [esi + 8], 4
call fcn.10021783
mov dword [ebp - 0x38], 0xfffffff6
mov dword [ebp - 0x44], 0x843334ad
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x34], 0x582d056b
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x1004f594
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0x5461
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1004f581
mov dword [ebp - 0x24], ebx
jmp 0x1004f6fe
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x1c], 0x51978e60
mov dword [ebp - 0x2c], ebx
jmp 0x1004f5c2
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x58], 0x8c3ad3b3
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x1004f5b4
mov dword [ebp - 0x54], ebx
jmp 0x1004f6f2
mov dword [ebp - 0x2c], 0x79a20b28
xor ecx, ecx
mov eax, dword [ebp - 0x54]
cmp eax, 0xeff3
setge cl
mov dword [ebp - 0x18], ecx
imul eax, dword [ebp - 0x18], 0xfffc
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1004f6ef
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xb8]
push 0
cmp eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x18]
pop eax
setle al
xor edx, edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setge dl
imul edx, edx, 0x6a3f
add edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x44]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1004f6e6
mov dword [ebp - 0x28], 0xf71350d
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1004f685
push ebx
push ebx
push 0x2598
call dword [sym.imp.USER32.dll_SetPropA]
mov eax, dword [ebp - 0x54]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0xb8]
cmp ecx, dword [eax]
setge dl
mov dword [ebp - 0x28], edx
xor edx, edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setne dl
mov dword [ebp - 0x14], edx
dec dword [ebp - 0x1c]
jns 0x1004f668
dec dword [ebp - 0x18]
jns 0x1004f5fd
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], ebx
jle 0x1004f5d0
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffef
jl 0x1004f5a1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jne 0x1004f713
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x44]
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x24]
cmp eax, 0xedb0
jg 0x1004f733
mov eax, ebx
cmp dword [ebp - 0x14], ebx
je 0x1004f735
mov eax, edi
cmp eax, dword [ebp - 0x34]
je 0x1004f741
mov eax, edi
cmp dword [ebp - 0x34], ebx
jne 0x1004f743
mov eax, ebx
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x28], eax
call fcn.10021805
mov dword [esi + 0xc], 0x100798cc
push dword [ebp + 8]
movdqa xmm0, xmmword [0x10008ec0]
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x188]
mov dword [ebp - 0x68], ebx
push eax
push ebx
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x64], ebx
movdqu xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x60], ebx
call fcn.10026b5e
push 3
pop esi
mov dword [ebp - 4], esi
mov ecx, 0xf44401d1
mov dword [ebp - 0x2c], 0x6ce4
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x34], 0xb3cf8132
mov dword [ebp - 0x34], 0xafe4
mov dword [ebp - 0x14], 0x5737
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x68]
imul edx, dword [eax]
mov eax, dword [ebp - 0x2c]
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
add eax, edx
neg ecx
cmp ecx, eax
jge 0x1004f7dc
mov edx, edi
cmp dword [ebp - 0x38], ebx
jne 0x1004f7de
mov edx, ebx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x68]
setg cl
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x2c]
setl dl
mov dword [ebp - 0x34], edx
xor edx, edx
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x68]
sete dl
xor ecx, ecx
cmp edx, dword [eax]
setne cl
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x2c], ebx
jmp 0x1004f9e4
mov dword [ebp - 0x1c], 0xf261718b
lea ecx, [ebp - 0x138]
push esi
call fcn.10021783
mov dword [ebp - 0x14], ebx
jmp 0x1004f840
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], 0x32a49e86
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1004f82d
mov dword [ebp - 0x38], 0xffffffff
jmp 0x1004f9cc
mov dword [ebp - 0x18], 0xbf8b243e
xor edx, edx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x24], 0x27815014
mov dword [ebp - 0x30], 0x4bab92a1
mov dword [ebp - 0x30], 0xcc907f7a
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x1004f9c9
mov dword [ebp - 0x30], 0x7c74e2b7
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x30], 0xcbf6
mov dword [ebp - 0x44], 0x311140ae
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], 0x200138d7
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], esi
jg 0x1004f9ab
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x14], ebx
jmp 0x1004f8fd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1b4], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1004f8f0
inc dword [ebp - 0x34]
je 0x1004f920
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1b0], eax
test eax, eax
jne 0x1004f922
mov edi, ebx
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x1c]
imul ecx, dword [ecx + 4], 0xffff8e97
mov eax, dword [ebp - 0x68]
push 0
cmp dword [eax + edx*4], ecx
pop ecx
setg cl
xor eax, eax
test ecx, ecx
mov ecx, 0xffff
push 3
setns al
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x68]
sete dl
xor ecx, ecx
sub edx, dword [eax]
mov eax, dword [ebp - 0x1c]
imul eax, edx
mov edx, dword [ebp - 0x68]
cmp eax, dword [edx + esi*4]
pop esi
setne cl
sub ecx, 0xfffffff7
neg ecx
push 1
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x14]
cmp dword [edx + edi*4], eax
pop edi
setne cl
xor eax, eax
cmp ecx, 0x4bb1
mov ecx, dword [ebp - 0x30]
setle al
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x1004f8eb
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1004f9c0
push ebx
push 0xe60
call dword [sym.imp.GDI32.dll_GetClipBox]
dec dword [ebp - 0x1c]
jns 0x1004f8ad
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x16
jne 0x1004f851
lea ecx, [ebp - 0x138]
call fcn.10021805
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 6
jl 0x1004f815
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.10021805
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x3c], eax
jge 0x100504cd
mov dword [ebp - 0x2c], 6
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x14], 0x6aeba4d3
mov dword [ebp - 0x28], 0xb42b8ff
mov dword [ebp - 0x38], esi
push esi
call fcn.10021783
mov dword [ebp - 0x30], 0x5375bb79
mov dword [ebp - 0x14], ebx
jmp 0x1004fa4f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x12c]
mov dword [eax + ecx*4], 0xfffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1004fa3c
mov ecx, dword [ebp - 0x2c]
dec ecx
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
add ecx, dword [ebp - 0x24]
cmp ecx, 0xe76d
setge al
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
je 0x1004fa7b
mov edx, edi
cmp dword [ebp - 0x2c], ebx
jne 0x1004fa7d
mov edx, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edx
setle cl
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x24]
jne 0x1004fab3
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], edi
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
neg eax
je 0x1004fad6
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
imul ecx, dword [esi + 4]
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, dword [esi + 4]
cmp edx, eax
setg cl
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x12c]
call fcn.10021805
push 3
mov edx, 0x100798d0
mov eax, ebx
pop esi
cmp eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [edx]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x38], eax
jge 0x1004fec7
mov dword [ebp - 0x44], 0x7fc9
cmp dword [ebp - 0x44], 0x83ae
jle 0x1004fba2
mov ecx, ebx
mov dword [ebp - 0x28], ebx
mov eax, ebx
mov dword [ebp - 0x34], ebx
or eax, ecx
lea ecx, [ebp - 0x204]
cdq
push edx
push eax
call fcn.1000a4b3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1004fb71
mov eax, dword [eax]
push eax
call fcn.10059c65
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x204]
call fcn.10021e6e
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0xd0d
jl 0x1004fb57
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x7d04
jl 0x1004fb52
push edi
lea ecx, [ebp - 0xe4]
call fcn.10021783
cmp dword [ebp - 0x44], 0x7d25
jge 0x1004fbc2
push 0x10008b80
call fcn.10059c65
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1004fbdc
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa8], 0x4e2db58
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1004fbcb
mov dword [ebp - 0x18], ebx
jmp 0x1004fbf4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x50], 0x57ad95e1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1004fbe6
mov dword [ebp - 0x18], ebx
jmp 0x1004fc11
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0x61a6b719
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1004fbfe
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1004fc27
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_Beep]
mov dword [ebp - 0x50], ebx
jmp 0x1004fc99
mov dword [ebp - 0x14], 0xc3a0b8ee
xor ecx, ecx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x28], 0x45bbbdeb
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0xa8]
test eax, eax
setne cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
test edx, edx
sets cl
xor edx, edx
cmp ecx, eax
setge dl
xor ecx, ecx
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x50]
sub edx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax], edx
mov eax, dword [ebp - 0x14]
cmp eax, edx
setne cl
mov dword [ebp - 0x14], ecx
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], ebx
jle 0x1004fc2c
lea ecx, [ebp - 0xe4]
call fcn.10021805
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov eax, dword [eax]
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x34], 0x7cad7d71
mov dword [ebp - 0x34], 0xf889a278
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], ebx
jmp 0x1004fcdb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1004fcd1
mov dword [ebp - 0x18], ebx
jmp 0x1004fcf6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1004fce5
mov dword [ebp - 0x18], ebx
jmp 0x1004fd0d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x90], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1004fd00
cmp dword [ebp - 0x14], ebx
je 0x1004fd38
mov edx, dword [ebp - 0x14]
xor ecx, ecx
imul edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, 0xffffffff
setne cl
add edx, ecx
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x7c], eax
mov eax, edi
jne 0x1004fd3a
mov eax, ebx
cmp dword [ebp - 0x14], eax
jg 0x1004fd46
mov edx, ebx
cmp dword [ebp - 0x7c], ebx
je 0x1004fd48
mov edx, edi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], ebx
je 0x1004fd64
mov eax, edi
cmp dword [ebp - 0xa4], ebx
jne 0x1004fd66
mov eax, ebx
mov dword [ebp - 0x90], eax
lea ecx, [ebp - 0xf0]
mov eax, dword [ebp - 0x40]
add dword [ebp - 0x1c], eax
push esi
call fcn.10021783
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x30], 0x740826f3
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x28], 0x1edb6b7b
push esi
call fcn.10021783
mov dword [ebp - 0x30], 0xde5156be
mov dword [ebp - 0x44], 0xf5ab171c
mov dword [ebp - 0x18], ebx
jmp 0x1004fdc8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf0]
mov dword [eax + ecx*4], 0xd16d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1004fdb5
mov dword [ebp - 0x18], ebx
jmp 0x1004fde3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x198], 0xff3e141b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1004fdd2
mov dword [ebp - 0x18], ebx
jmp 0x1004fe01
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x15c]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1004fdee
mov edx, dword [ebp - 0xf0]
xor eax, eax
cmp dword [edx + 4], ebx
setne al
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp dword [edx + 4], eax
setl cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x198], ebx
jne 0x1004fe42
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1004fe52
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea ecx, [ebp - 0x15c]
call fcn.10021805
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf0]
call fcn.10021805
cmp dword [ebp - 0x24], 0
mov edx, dword [ebp - 0x1c]
jne 0x1004fe7b
mov eax, dword [ebp - 0x40]
lea edx, [edx + eax*2]
mov dword [ebp - 0x24], 0x184c506d
mov dword [ebp - 0x14], ebx
jmp 0x1004fe91
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x78], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1004fe87
mov dword [ebp - 0x24], ebx
jmp 0x1004feb6
mov dword [ebp - 0x30], 0xfffffffb
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x78], ecx
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1004fe9b
mov eax, dword [ebp - 0x2c]
add edx, dword [ebp - 0x38]
inc eax
jmp 0x1004fb29
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x30], 0xfffffff6
push 2
mov dword [ebp - 0x30], 0x394a2a4f
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0x2d76715f
push eax
call fcn.10021783
mov dword [ebp - 0x30], 0x7b09f595
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x30], 0xd857289c
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1004ff35
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x168]
mov dword [eax + ecx*4], 0x67a4bedc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1004ff22
inc dword [ebp - 0x3c]
lea ecx, [ebp - 0x168]
call fcn.10021805
mov dword [ebp - 0x34], 0x75e8
cmp dword [ebp - 0x34], 0x764b
jle 0x1004ffbb
push ebx
push ebx
push 0x20b3
push ebx
push 0x15c8
push ebx
push ebx
push 0x33
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x3c], ecx
lea eax, [edi + ebx]
and eax, ecx
mov ecx, 0x1061af58
cdq
push edx
push eax
call fcn.10021543
mov ecx, dword [ebp - 0x3c]
inc ecx
mov dword [ebp - 0x3c], ecx
cmp ecx, 0x34ed
jl 0x1004ff7d
inc edi
push 0
pop ebx
cmp edi, 0x6f0d
jl 0x1004ff75
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x5a2a
jl 0x1004ff73
xor edi, edi
inc edi
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x40]
mov dword [ebp - 4], 9
cmp dword [ebp - 0x34], 0x7482
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], eax
jge 0x1004ffe6
mov edx, 0x10008be0
mov ecx, 0x1061af58
call fcn.10025cea
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], 0x3e91cb64
lea ecx, [ebp - 0x120]
push esi
call fcn.10021783
mov dword [ebp - 0x18], ebx
jmp 0x1005003e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10050030
mov dword [ebp - 0x18], ebx
jmp 0x10050058
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x120]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10050048
mov dword [ebp - 0x18], ebx
jmp 0x10050073
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x144], 0xb5cf6354
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10050062
mov dword [ebp - 0x18], 0x1f94964a
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
jmp 0x100500a9
mov dword [ebp - 0x14], 0x845d811f
mov dword [ebp - 0x14], ebx
jmp 0x100500a1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5c], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10050093
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff1
jl 0x10050087
mov dword [ebp - 0x18], ebx
jmp 0x1005014d
mov dword [ebp - 0x2c], 0xd44ad374
mov dword [ebp - 0x2c], ebx
jmp 0x10050141
mov dword [ebp - 0x30], 0x711db608
mov dword [ebp - 0x14], ebx
jmp 0x100500e0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x108], 0x229edca8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100500cf
mov dword [ebp - 0x100], 0xf82b
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x5c], edi
mov eax, dword [ebp - 0x108]
dec eax
neg eax
sbb eax, eax
inc eax
sub eax, 0x3b0cf5ab
je 0x1005011d
mov edx, edi
cmp dword [ebp - 0x2c], ebx
jne 0x1005011f
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setg cl
xor edx, edx
cmp ecx, 0xfffffffe
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x100500c3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jg 0x100500b7
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jg 0x10050253
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x24], 0xc7fd579
mov dword [ebp - 0x34], 0x63523e24
mov dword [ebp - 0x30], 0x7dcc3592
mov dword [ebp - 0x3c], 0xd707d8eb
mov dword [ebp - 0x3c], 0x35cf455d
mov dword [ebp - 0x18], 0xd90538e0
mov dword [ebp - 0x28], 0x456bbb3
mov dword [ebp - 0x14], ebx
jmp 0x100501b3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xc4], 0xa9b22354
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100501a2
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x24], edi
jle 0x100501d4
cmp dword [ebp - 0x34], ebx
jne 0x100501db
mov eax, edi
cmp dword [ebp - 0x5c], ebx
je 0x100501dd
mov eax, ebx
xor ecx, ecx
cmp eax, 0xfffffff6
mov eax, dword [ebp - 0xc0]
setne cl
xor edx, edx
sub ecx, 0xf288
imul ecx, eax
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setg dl
xor ecx, ecx
mov dword [ebp - 0xc0], edx
mov eax, dword [ebp - 0x144]
cmp edx, eax
mov eax, dword [ebp - 0x28]
sete cl
inc dword [ebp - 0x28]
cmp eax, ecx
mov ecx, dword [ebp - 0x44]
mov eax, edi
cmovge eax, ebx
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x1005016c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.10021805
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0xa0]
push dword [ebp + 8]
xorps xmm0, xmm0
mov dword [ebp - 0xa0], ebx
movdqu xmmword [ebp - 0x1a8], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x24], 0x64fd9e2a
push eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x3c], 0xca779041
push ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
call fcn.10026b5e
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x14], ebx
jmp 0x100502ce
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd0], 7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100502bd
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc8]
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, 0xc5ad
setl cl
mov dword [ebp - 0xc8], ecx
cmp dword [ebp - 0xd0], ebx
je 0x1005031b
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xa0]
xor eax, eax
cmp dword [ecx + 4], eax
setg al
cmp eax, edi
ja 0x10050333
mov eax, edi
cmp dword [ecx], ebx
jne 0x10050335
mov eax, ebx
cmp eax, dword [ecx + 4]
jne 0x10050346
mov dword [ebp - 0x3c], 0x11ff
inc dword [ebp - 0x3c]
jmp 0x10050392
mov dword [ebp - 0x3c], 0x58230b54
xor edx, edx
mov dword [ebp - 0x28], 0x762cc684
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x28], edi
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setge dl
xor ecx, ecx
cmp edx, 0x37d9cc13
setle cl
xor eax, eax
cmp ecx, 0x6c21
setge al
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0xa0]
call fcn.10021805
mov edx, dword [ebp - 0x1c]
mov ecx, ebx
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x24], 0xa137b189
mov dword [ebp - 0x14], 0xb8561371
mov dword [ebp - 0x30], 0xfc1da7bc
cmp dword [ebp - 0x24], ebx
je 0x100503c1
mov ecx, edi
mov eax, dword [ebp - 0x24]
sub ecx, eax
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x14], 0x17
jmp 0x100503e7
mov dword [ebp - 0x30], 0x5732aa61
cmp dword [ebp - 0x24], ebx
jne 0x100503ed
mov eax, dword [ebp - 0x30]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 5
jne 0x100503d5
cmp dword [ebp - 0x44], 0
jne 0x100504cd
cmp byte [ebp - 0x4c], 0
je 0x10050411
cmp dword [ebp - 0x48], edi
jne 0x10050411
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x38]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp + 8]
add dword [ecx + 8], eax
mov eax, dword [edx]
add edx, dword [ebp - 0x40]
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov eax, dword [edx]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x1c], edx
call fcn.10054f63
pop ecx
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x74]
lea eax, [ebp - 0x94]
mov dword [ebp - 0x94], ebx
push eax
push dword [ebp - 0x38]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
call fcn.10053532
mov eax, dword [ebp - 0x38]
mov edx, ebx
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x34], ebx
test eax, eax
jle 0x100504ae
mov eax, edx
and eax, 0x80000001
jns 0x1005046e
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x3c]
add eax, edx
add eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x30]
jmp 0x10050483
lea eax, [edx + 1]
cdq
idiv dword [ebp - 0x38]
cmp word [ecx + edx*2], bx
jne 0x10050480
mov eax, dword [ebp - 0x1c]
mov word [ecx + edx*2], di
mov ecx, dword [ebp - 0x44]
mov al, byte [edx + eax]
mov edx, dword [ebp - 0x34]
mov byte [edx + ecx], al
inc edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x34], edx
cmp edx, eax
jl 0x10050460
mov edx, dword [ebp + 8]
mov dword [edx], eax
mov eax, dword [ebp - 0x44]
mov dword [edx + 4], eax
test ecx, ecx
je 0x100504cd
push ecx
call fcn.10059dd7
pop ecx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x18], 0xd16df251
or ecx, 0xffffffff
mov dword [ebp - 0x1c], 0x1b6ba00b
mov dword [ebp - 0x48], 0xfa9dfeee
mov dword [ebp - 0x28], 0xf04feccd
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x34], 0x477d
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
test eax, eax
je 0x10050608
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x3c], 0x50faeb38
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x14], ebx
jmp 0x1005053e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1d4], 0x740826f3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1005052d
mov dword [ebp - 0x18], 0xffffffe3
jmp 0x100505fc
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x14], ebx
jmp 0x10050565
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x178], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10050558
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x170]
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x28]
add ecx, 0xe467
cmp ecx, eax
setl dl
mov dword [ebp - 0x3c], edx
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setle dl
xor eax, eax
cmp edx, 0x1bd5
setg al
xor ecx, ecx
cmp eax, 0xe456
mov eax, dword [ebp - 0x18]
setl cl
xor edx, edx
sub ecx, 0x4438182e
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], edx
xor edx, edx
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, dword [ebp - 0x3c]
setge al
mov dword [ebp - 0x48], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe5
jge 0x10050550
jmp 0x1005060b
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x48], esi
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], 0x9275a805
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
je 0x10050639
mov eax, ebx
cmp dword [ebp - 0x18], ebx
je 0x1005063b
mov eax, edi
xor ecx, ecx
cmp eax, 0xfffffff9
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp ecx, eax
setne dl
xor eax, eax
add edx, dword [ebp - 0x18]
cmp edx, 0x27b
setne al
add eax, dword [ebp - 0x18]
je 0x10050686
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x10050722
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1005067c
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
dec dword [ebp - 0x18]
jns 0x1005066c
jmp 0x10050722
mov dword [ebp - 0x40], 0x742e
mov dword [ebp - 0x30], 0x3fe74c19
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100506a8
push 0x1ef
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x1c], ebx
jmp 0x1005071c
mov dword [ebp - 0x14], ebx
jmp 0x100506bf
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd8], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100506b2
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
add eax, 0x7740646
je 0x100506d9
mov ecx, edi
cmp dword [ebp - 0x40], ebx
jne 0x100506db
mov ecx, ebx
mov eax, dword [ebp - 0xd4]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setle dl
xor ecx, ecx
cmp eax, 0x13f3b720
setge cl
xor eax, eax
cmp ecx, edx
setle al
sub eax, dword [ebp - 0x40]
mov esi, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xd4]
sub esi, eax
neg esi
sbb esi, esi
xor edx, edx
inc esi
cmp esi, ecx
setl dl
mov dword [ebp - 0x30], edx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffff
jl 0x100506ad
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret