Function at 0x10009739
Capabilities:
Delete directory
Query service status

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x181c
call fcn.10088140
push esi
push edi
mov dword [ebp - 0x1310], 0
mov dword [ebp - 0x130c], 0
mov dword [ebp - 0x1308], 0
mov dword [ebp - 0x1304], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1310], 0
je 0x100097d6
mov dword [ebp - 0x23c], 9
mov dword [ebp - 0x23c], 2
jmp 0x100097a3
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xfffffff3
je 0x100097d4
mov byte [ebp - 0x14e], 0
movzx eax, byte [ebp - 0x14e]
test eax, eax
je 0x100097d2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RealizePalette]
jmp 0x10009796
jmp 0x100097f6
mov dword [ebp - 0xee4], 1
mov dword [ebp - 0x1014], 0x6ec79cf1
mov eax, dword [ebp - 0xee4]
mov dword [ebp - 0x1014], eax
mov dword [ebp - 0x1340], 0
mov dword [ebp - 0x133c], 0
mov dword [ebp - 0x1338], 0
mov dword [ebp - 0x1334], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1340], 0
je 0x10009884
mov dword [ebp - 0x244], 9
mov dword [ebp - 0x244], 2
jmp 0x10009851
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0xfffffff3
je 0x10009882
mov byte [ebp - 0x18f], 0
movzx eax, byte [ebp - 0x18f]
test eax, eax
je 0x10009880
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RealizePalette]
jmp 0x10009844
jmp 0x100098a4
mov dword [ebp - 0x101c], 1
mov dword [ebp - 0x1024], 0x6ec79cf1
mov eax, dword [ebp - 0x101c]
mov dword [ebp - 0x1024], eax
mov dword [ebp - 0xe4], 0xfe01bd97
mov dword [ebp - 0x9c], 8
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1a4], 0x5240ca70
mov dword [ebp - 0x104c], 0x3a29add9
mov dword [ebp - 0x16f0], 0xfffffff8
mov eax, dword [ebp - 0xe4]
neg eax
jne 0x100098fa
push 6
pop eax
test eax, eax
jne 0x100098fa
and dword [ebp - 0xe44], 0
jmp 0x10009904
mov dword [ebp - 0xe44], 1
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x13c0], eax
cmp dword [ebp - 0xe4], 0xfffffffc
je 0x10009925
mov dword [ebp - 0xa44], 1
jmp 0x1000992c
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xe44], eax
jge 0x10009952
mov dword [ebp - 0xe4c], 1
jmp 0x10009959
and dword [ebp - 0xe4c], 0
cmp dword [ebp - 0xe4c], 1
je 0x1000996e
mov dword [ebp - 0xe54], 1
jmp 0x10009975
and dword [ebp - 0xe54], 0
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0xe54]
cmp dword [ebp - 0xe4], eax
jle 0x1000999e
cmp dword [ebp - 0x9c], 0
je 0x1000999e
mov dword [ebp - 0xe78], 1
jmp 0x100099a5
and dword [ebp - 0xe78], 0
mov eax, dword [ebp - 0xe78]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
je 0x10009a1f
mov dword [ebp - 0x102c], 0x700d62e6
mov dword [ebp - 0x1034], 0xffffffff
mov byte [ebp - 0x197], 0
movzx eax, byte [ebp - 0x197]
test eax, eax
je 0x100099f2
push 0x4df
push 0x482
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
cmp dword [ebp - 0x102c], 0
jne 0x10009a07
mov dword [ebp - 0xe80], 1
jmp 0x10009a0e
and dword [ebp - 0xe80], 0
mov eax, dword [ebp - 0xe80]
mov dword [ebp - 0x1034], eax
jmp 0x10009ce6
mov dword [ebp - 0x1ac], 0x5a8
mov dword [ebp - 0x560], 4
cmp dword [ebp - 0xe4], 0
jne 0x10009a5d
mov dword [ebp - 0x9c], 1
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x9c], eax
jg 0x10009a5d
and dword [ebp - 0xe88], 0
jmp 0x10009a67
mov dword [ebp - 0xe88], 1
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0xe88], eax
jle 0x10009a81
mov dword [ebp - 0x103c], 1
jmp 0x10009a88
and dword [ebp - 0x103c], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x13c8], eax
cmp dword [ebp - 0x9c], 0
jne 0x10009aaf
cmp dword [ebp - 0x1ac], 0
jne 0x10009aaf
and dword [ebp - 0xe74], 0
jmp 0x10009ab9
mov dword [ebp - 0xe74], 1
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0xe74]
jl 0x10009ad3
mov dword [ebp - 0xd00], 1
jmp 0x10009ada
and dword [ebp - 0xd00], 0
mov eax, dword [ebp - 0xd00]
add eax, 3
jne 0x10009af7
cmp dword [ebp - 0x1ac], 0
jne 0x10009af7
and dword [ebp - 0x550], 0
jmp 0x10009b01
mov dword [ebp - 0x550], 1
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x550]
je 0x10009bc0
mov dword [ebp - 0x3ac], 1
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x13d0], eax
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x1ac], eax
jle 0x10009b4f
mov dword [ebp - 0x1044], 1
jmp 0x10009b56
and dword [ebp - 0x1044], 0
mov eax, dword [ebp - 0x560]
cmp dword [ebp - 0x1ac], eax
je 0x10009b70
mov dword [ebp - 0xb88], 1
jmp 0x10009b77
and dword [ebp - 0xb88], 0
cmp dword [ebp - 0xb88], 0xffffffff
je 0x10009b8c
mov dword [ebp - 0x558], 1
jmp 0x10009b93
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 0xfffffffe
jl 0x10009ba8
mov dword [ebp - 0xb90], 1
jmp 0x10009baf
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0xb90]
mov dword [ebp - 0x9c], eax
jmp 0x10009ce6
mov dword [ebp - 0x45c], 0
mov byte [ebp - 0x183], 0
movzx eax, byte [ebp - 0x183]
test eax, eax
je 0x10009bf0
push 0
push 0x2541
push 0x24fa
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov dword [ebp - 0x1a4], 0
jmp 0x10009c09
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x27
jle 0x10009ce6
mov dword [ebp - 0x3a4], 0xbf567d71
cmp dword [ebp - 0x560], 0
jne 0x10009cad
cmp dword [ebp - 0x1ac], 0
jne 0x10009cad
cmp dword [ebp - 0x3a4], 0
jne 0x10009c69
mov eax, dword [ebp - 0xe4]
sub eax, dword [ebp - 0x3a4]
je 0x10009c62
cmp dword [ebp - 0x45c], 0
je 0x10009c62
mov dword [ebp - 0xb98], 1
jmp 0x10009c69
and dword [ebp - 0xb98], 0
cmp dword [ebp - 0x45c], 1
jne 0x10009c7e
mov dword [ebp - 0x568], 1
jmp 0x10009c85
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x3a4]
imul eax, dword [ebp - 0x568]
test eax, eax
jne 0x10009cad
cmp dword [ebp - 0x9c], 0
jne 0x10009cad
xor eax, eax
inc eax
jne 0x10009cad
and dword [ebp - 0xba0], 0
jmp 0x10009cb7
mov dword [ebp - 0xba0], 1
mov eax, dword [ebp - 0x45c]
add eax, dword [ebp - 0xba0]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x104c], eax
jmp 0x10009bfc
mov dword [ebp - 0x1380], 0
mov dword [ebp - 0x137c], 0
mov dword [ebp - 0x1378], 0
mov dword [ebp - 0x1374], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1380], 0
je 0x1000a262
mov dword [ebp - 0x1c], 0xf72b5725
mov dword [ebp - 0x2f4], 0x2fa5d872
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x38], 0x5dbd55a
mov dword [ebp - 0x10d0], 0x26a8acdd
mov eax, 0xab2aee5a
test eax, eax
je 0x10009f03
cmp dword [ebp - 0x1c], 0
jne 0x10009d6d
mov dword [ebp - 0x570], 1
jmp 0x10009d74
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 1
jg 0x10009d89
mov dword [ebp - 0x10c8], 1
jmp 0x10009d90
and dword [ebp - 0x10c8], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x13d8], eax
cmp dword [ebp - 0x1c], 1
jne 0x10009dab
mov dword [ebp - 0xba8], 1
jmp 0x10009db2
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xba8], eax
jne 0x10009dc9
mov dword [ebp - 0x578], 1
jmp 0x10009dd0
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2f4], eax
jl 0x10009df3
mov dword [ebp - 0xbb0], 1
jmp 0x10009dfa
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xbb0], eax
jle 0x10009e11
mov dword [ebp - 0x580], 1
jmp 0x10009e18
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x580]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x344], eax
jge 0x10009e3f
mov dword [ebp - 0xbb8], 1
jmp 0x10009e46
and dword [ebp - 0xbb8], 0
mov eax, dword [ebp - 0xbb8]
sub eax, dword [ebp - 0x38]
imul eax, eax, 0xffffffff
test eax, eax
je 0x10009e6b
cmp dword [ebp - 0x344], 0
je 0x10009e6b
mov dword [ebp - 0x588], 1
jmp 0x10009e72
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x588], eax
jl 0x10009e89
mov dword [ebp - 0xbc0], 1
jmp 0x10009e90
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 0xbc0]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffffd
jge 0x10009eab
mov dword [ebp - 0x590], 1
jmp 0x10009eb2
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x590]
jl 0x10009ec9
mov dword [ebp - 0xbc8], 1
jmp 0x10009ed0
and dword [ebp - 0xbc8], 0
cmp dword [ebp - 0xbc8], 0xf1ef
jle 0x10009ee8
mov dword [ebp - 0x598], 1
jmp 0x10009eef
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x598]
je 0x10009f03
and dword [ebp - 0xbd0], 0
jmp 0x10009f0d
mov dword [ebp - 0xbd0], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xbd0], eax
jg 0x10009f2d
cmp dword [ebp - 0x2f4], 0
je 0x10009f2d
mov dword [ebp - 0x5a0], 1
jmp 0x10009f34
and dword [ebp - 0x5a0], 0
cmp dword [ebp - 0x5a0], 1
je 0x10009f49
mov dword [ebp - 0xbd8], 1
jmp 0x10009f50
and dword [ebp - 0xbd8], 0
cmp dword [ebp - 0xbd8], 9
ja 0x10009f65
mov dword [ebp - 0x5a8], 1
jmp 0x10009f6c
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
sub eax, dword [ebp - 0x1c]
je 0x10009f89
cmp dword [ebp - 0x38], 0
je 0x10009f89
mov dword [ebp - 0xbe0], 1
jmp 0x10009f90
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0xbe0]
add eax, 0x3633e7a3
je 0x10009fb2
mov eax, 0x7e05af84
test eax, eax
je 0x10009fb2
mov dword [ebp - 0x5b0], 1
jmp 0x10009fb9
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x5b0], eax
jle 0x10009fd0
mov dword [ebp - 0xbe8], 1
jmp 0x10009fd7
and dword [ebp - 0xbe8], 0
mov eax, dword [ebp - 0x10d0]
cmp dword [ebp - 0xbe8], eax
jne 0x10009ff4
cmp dword [ebp - 0x38], 0
jne 0x10009ff4
and dword [ebp - 0x5b8], 0
jmp 0x10009ffe
mov dword [ebp - 0x5b8], 1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x5b8]
sub eax, 0x7fad5407
je 0x1000a018
cmp dword [ebp - 0x344], 0
jne 0x1000a022
cmp dword [ebp - 0x38], 0
je 0x1000a1f2
mov dword [ebp - 0x10e0], 1
mov dword [ebp - 0x24c], 0
jmp 0x1000a045
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x1000a061
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x544], 0x3232af72
jmp 0x1000a038
mov dword [ebp - 0x38], 0
jmp 0x1000a071
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffe7
jg 0x1000a098
mov byte [ebp - 0x191], 0
movzx eax, byte [ebp - 0x191]
test eax, eax
je 0x1000a096
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
jmp 0x1000a06a
cmp dword [ebp - 0x1c], 0
je 0x1000a187
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x544]
mov dword [ebp - 0x13e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x544], 0xfff8
jb 0x1000a0d4
mov dword [ebp - 0xbf0], 1
jmp 0x1000a0db
and dword [ebp - 0xbf0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x544]
cmp dword [ebp - 0xbf0], eax
jle 0x1000a0fc
mov dword [ebp - 0x5c0], 1
jmp 0x1000a103
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
add eax, 0x7874d2d
jne 0x1000a11e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x544], 0
imul eax, dword [ebp - 0x38], 0xa0c2
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x544]
jg 0x1000a140
mov dword [ebp - 0x10d8], 1
jmp 0x1000a147
and dword [ebp - 0x10d8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x544]
mov dword [ebp - 0x13e8], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x13f0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x544]
mov dword [ebp - 0x13f8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x38]
cmp dword [ebp + eax - 0x544], ecx
jne 0x1000a1a0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x544], 0
jne 0x1000a1a0
and dword [ebp - 0xbf8], 0
jmp 0x1000a1aa
mov dword [ebp - 0xbf8], 1
cmp dword [ebp - 0xbf8], 1
jl 0x1000a1e4
mov byte [ebp - 0x185], 0
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x1000a1db
push 0
push 0
push 0x3c4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 0x38], 0xffffffff
jmp 0x1000a1f0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x10e0], eax
jmp 0x1000a20c
mov byte [ebp - 0x19b], 0
movzx eax, byte [ebp - 0x19b]
test eax, eax
je 0x1000a20c
push 0
call dword [sym.imp.USER32.dll_RegisterClassA]
mov dword [ebp - 0x254], 9
mov dword [ebp - 0x254], 2
jmp 0x1000a22f
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xfffffff3
je 0x1000a260
mov byte [ebp - 0x187], 0
movzx eax, byte [ebp - 0x187]
test eax, eax
je 0x1000a25e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RealizePalette]
jmp 0x1000a222
jmp 0x1000a282
mov dword [ebp - 0x10e8], 1
mov dword [ebp - 0x1150], 0x6ec79cf1
mov eax, dword [ebp - 0x10e8]
mov dword [ebp - 0x1150], eax
mov dword [ebp - 4], 0xb1cecb45
mov dword [ebp - 0x1d4], 0x87a9b65c
mov dword [ebp - 0x1360], 0x7cec7e9a
mov dword [ebp - 0x135c], 0x7cec7e9a
mov dword [ebp - 0x1358], 0x7cec7e9a
mov dword [ebp - 0x1354], 0x7cec7e9a
mov dword [ebp - 0x620], 0
mov dword [ebp - 0x1400], 0x85266add
mov dword [ebp - 0x1408], 0xffffffff
mov dword [ebp - 0xc58], 2
mov dword [ebp - 0xc0], 0
jmp 0x1000a2fc
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x1000a318
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x51c], 0x41b3
jmp 0x1000a2ef
mov dword [ebp - 0xc0], 0
jmp 0x1000a331
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x1000a34d
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x11fc], 0xff609d70
jmp 0x1000a324
mov dword [ebp - 4], 0
jmp 0x1000a35d
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x1000a7c3
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x4ec], 0x6982b357
mov dword [ebp - 0x39c], 0xa4b38b4b
mov dword [ebp - 0x94], 1
cmp dword [ebp - 0x94], 0
je 0x1000a54e
mov eax, dword [ebp - 4]
mov dword [ebp - 0x5c8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5c8]
mov dword [ebp + eax - 0x11fc], ecx
cmp dword [ebp - 0x5c8], 0xce96f8f9
jbe 0x1000a3cf
mov dword [ebp - 0xc00], 1
jmp 0x1000a3d6
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xc00], eax
jge 0x1000a3ed
mov dword [ebp - 0x1158], 1
jmp 0x1000a3f4
and dword [ebp - 0x1158], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1410], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x11fc], 0xfffffffb
je 0x1000a41b
mov dword [ebp - 0x5d0], 1
jmp 0x1000a422
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x5d0], eax
je 0x1000a439
mov dword [ebp - 0x1160], 1
jmp 0x1000a440
and dword [ebp - 0x1160], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1418], eax
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x94], eax
jge 0x1000a466
mov dword [ebp - 0xc08], 1
jmp 0x1000a46d
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xc08], eax
jl 0x1000a484
mov dword [ebp - 0x5d8], 1
jmp 0x1000a48b
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x5d8], eax
jne 0x1000a4a2
mov dword [ebp - 0xc10], 1
jmp 0x1000a4a9
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0xc10], eax
je 0x1000a4c3
mov dword [ebp - 0x5e0], 1
jmp 0x1000a4ca
and dword [ebp - 0x5e0], 0
cmp dword [ebp - 0x5e0], 0xf888c554
jne 0x1000a4e2
mov dword [ebp - 0xc18], 1
jmp 0x1000a4e9
and dword [ebp - 0xc18], 0
mov eax, dword [ebp - 0xc18]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x51c]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x5e8]
mov dword [ebp + eax*4 - 0x51c], ecx
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x5e8], eax
jle 0x1000a52f
mov dword [ebp - 0xc20], 1
jmp 0x1000a536
and dword [ebp - 0xc20], 0
cmp dword [ebp - 0xc20], 0xb674
je 0x1000a54e
mov dword [ebp - 0x5f0], 1
jmp 0x1000a555
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x11fc]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x51c]
cmp dword [ebp - 0x39c], eax
jge 0x1000a5a4
mov dword [ebp - 0xc30], 1
jmp 0x1000a5ab
and dword [ebp - 0xc30], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x51c]
cmp dword [ebp + eax - 0x1360], ecx
jg 0x1000a5e0
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x51c], 0
je 0x1000a5e0
mov dword [ebp - 0xc28], 1
jmp 0x1000a5e7
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0xc28]
lea eax, [ecx + eax - 0x2795fdd0]
cmp eax, dword [ebp - 0x1d4]
jl 0x1000a60e
mov dword [ebp - 0x5f8], 1
jmp 0x1000a615
and dword [ebp - 0x5f8], 0
cmp dword [ebp - 0x5f8], 5
jae 0x1000a62a
mov dword [ebp - 0x600], 1
jmp 0x1000a631
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0xc30]
cmp eax, dword [ebp - 0x600]
jl 0x1000a64b
mov dword [ebp - 0x100c], 1
jmp 0x1000a652
and dword [ebp - 0x100c], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1420], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp + ecx*4 - 0x51c]
cmp dword [ebp + eax*4 - 0x51c], ecx
jne 0x1000a680
mov dword [ebp - 0xc38], 1
jmp 0x1000a687
and dword [ebp - 0xc38], 0
cmp dword [ebp - 0xc38], 0x7283a38c
jne 0x1000a69f
mov dword [ebp - 0xef0], 1
jmp 0x1000a6a6
and dword [ebp - 0xef0], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x608], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x608]
mov dword [ebp + eax - 0x11fc], ecx
mov eax, dword [ebp - 0x620]
cmp dword [ebp - 0x608], eax
je 0x1000a6df
mov dword [ebp - 0xc40], 1
jmp 0x1000a6e6
and dword [ebp - 0xc40], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x51c]
sub eax, dword [ebp - 0xc40]
cmp eax, 0x274c
je 0x1000a709
mov dword [ebp - 0x610], 1
jmp 0x1000a710
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x51c]
cmp dword [ebp - 0x610], eax
jge 0x1000a72e
mov dword [ebp - 0xc48], 1
jmp 0x1000a735
and dword [ebp - 0xc48], 0
cmp dword [ebp - 0xc48], 0
jne 0x1000a74a
mov dword [ebp - 0x618], 1
jmp 0x1000a751
and dword [ebp - 0x618], 0
cmp dword [ebp - 0x618], 1
jg 0x1000a766
mov dword [ebp - 0xc50], 1
jmp 0x1000a76d
and dword [ebp - 0xc50], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x51c]
cmp dword [ebp - 0xc50], eax
jg 0x1000a78b
mov dword [ebp - 0x1148], 1
jmp 0x1000a792
and dword [ebp - 0x1148], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x1428], eax
cmp dword [ebp - 0x620], 0
je 0x1000a7b2
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x51c], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x1d4], eax
jmp 0x1000a356
mov dword [ebp - 4], 0xb
jmp 0x1000a7d3
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x1000a834
mov dword [ebp - 0x14cc], 0xfffffff7
mov dword [ebp - 0x1708], 0xd7bff020
mov dword [ebp - 0x1704], 0xd7bff020
mov dword [ebp - 0x1700], 0xd7bff020
mov dword [ebp - 0x16fc], 0xd7bff020
mov byte [ebp - 0x193], 0
movzx eax, byte [ebp - 0x193]
test eax, eax
je 0x1000a825
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
mov eax, dword [ebp - 0xc58]
dec eax
mov dword [ebp - 0xc58], eax
jmp 0x1000a7cc
mov dword [ebp - 0x100], 0xfe01bd97
mov dword [ebp - 0x98], 8
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1b4], 0x5240ca70
mov dword [ebp - 0xf08], 0x3a29add9
mov dword [ebp - 0x14d4], 0xfffffff8
mov eax, dword [ebp - 0x100]
neg eax
jne 0x1000a88a
push 6
pop eax
test eax, eax
jne 0x1000a88a
and dword [ebp - 0xc60], 0
jmp 0x1000a894
mov dword [ebp - 0xc60], 1
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x14dc], eax
cmp dword [ebp - 0x100], 0xfffffffc
je 0x1000a8b5
mov dword [ebp - 0x628], 1
jmp 0x1000a8bc
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0xc60], eax
jge 0x1000a8e2
mov dword [ebp - 0x630], 1
jmp 0x1000a8e9
and dword [ebp - 0x630], 0
cmp dword [ebp - 0x630], 1
je 0x1000a8fe
mov dword [ebp - 0xc68], 1
jmp 0x1000a905
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0x100]
add eax, dword [ebp - 0xc68]
cmp dword [ebp - 0x100], eax
jle 0x1000a92e
cmp dword [ebp - 0x98], 0
je 0x1000a92e
mov dword [ebp - 0x638], 1
jmp 0x1000a935
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
je 0x1000a9af
mov dword [ebp - 0xef8], 0x700d62e6
mov dword [ebp - 0x107c], 0xffffffff
mov byte [ebp - 0x189], 0
movzx eax, byte [ebp - 0x189]
test eax, eax
je 0x1000a982
push 0x4df
push 0x482
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
cmp dword [ebp - 0xef8], 0
jne 0x1000a997
mov dword [ebp - 0xc70], 1
jmp 0x1000a99e
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0xc70]
mov dword [ebp - 0x107c], eax
jmp 0x1000ac76
mov dword [ebp - 0x1cc], 0x5a8
mov dword [ebp - 0xc90], 4
cmp dword [ebp - 0x100], 0
jne 0x1000a9ed
mov dword [ebp - 0x98], 1
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x98], eax
jg 0x1000a9ed
and dword [ebp - 0x640], 0
jmp 0x1000a9f7
mov dword [ebp - 0x640], 1
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x640], eax
jle 0x1000aa11
mov dword [ebp - 0xf00], 1
jmp 0x1000aa18
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x98], 0
jne 0x1000aa3f
cmp dword [ebp - 0x1cc], 0
jne 0x1000aa3f
and dword [ebp - 0xc78], 0
jmp 0x1000aa49
mov dword [ebp - 0xc78], 1
mov eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0xc78]
jl 0x1000aa63
mov dword [ebp - 0x648], 1
jmp 0x1000aa6a
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x648]
add eax, 3
jne 0x1000aa87
cmp dword [ebp - 0x1cc], 0
jne 0x1000aa87
and dword [ebp - 0xc80], 0
jmp 0x1000aa91
mov dword [ebp - 0xc80], 1
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0xc80]
je 0x1000ab50
mov dword [ebp - 0x3b4], 1
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x14ec], eax
mov eax, dword [ebp - 0x3b4]
cmp dword [ebp - 0x1cc], eax
jle 0x1000aadf
mov dword [ebp - 0x1128], 1
jmp 0x1000aae6
and dword [ebp - 0x1128], 0
mov eax, dword [ebp - 0xc90]
cmp dword [ebp - 0x1cc], eax
je 0x1000ab00
mov dword [ebp - 0x650], 1
jmp 0x1000ab07
and dword [ebp - 0x650], 0
cmp dword [ebp - 0x650], 0xffffffff
je 0x1000ab1c
mov dword [ebp - 0xc88], 1
jmp 0x1000ab23
and dword [ebp - 0xc88], 0
cmp dword [ebp - 0xc88], 0xfffffffe
jl 0x1000ab38
mov dword [ebp - 0x658], 1
jmp 0x1000ab3f
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x98], eax
jmp 0x1000ac76
mov dword [ebp - 0x3bc], 0
mov byte [ebp - 0x199], 0
movzx eax, byte [ebp - 0x199]
test eax, eax
je 0x1000ab80
push 0
push 0x2541
push 0x24fa
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov dword [ebp - 0x1b4], 0
jmp 0x1000ab99
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x27
jle 0x1000ac76
mov dword [ebp - 0x464], 0xbf567d71
cmp dword [ebp - 0xc90], 0
jne 0x1000ac3d
cmp dword [ebp - 0x1cc], 0
jne 0x1000ac3d
cmp dword [ebp - 0x464], 0
jne 0x1000abf9
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x464]
je 0x1000abf2
cmp dword [ebp - 0x3bc], 0
je 0x1000abf2
mov dword [ebp - 0x660], 1
jmp 0x1000abf9
and dword [ebp - 0x660], 0
cmp dword [ebp - 0x3bc], 1
jne 0x1000ac0e
mov dword [ebp - 0xc98], 1
jmp 0x1000ac15
and dword [ebp - 0xc98], 0
mov eax, dword [ebp - 0x464]
imul eax, dword [ebp - 0xc98]
test eax, eax
jne 0x1000ac3d
cmp dword [ebp - 0x98], 0
jne 0x1000ac3d
xor eax, eax
inc eax
jne 0x1000ac3d
and dword [ebp - 0x668], 0
jmp 0x1000ac47
mov dword [ebp - 0x668], 1
mov eax, dword [ebp - 0x3bc]
add eax, dword [ebp - 0x668]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xf08], eax
jmp 0x1000ab8c
mov dword [ebp - 0x14], 0xf5020f89
cmp dword [ebp - 0x14], 8
jle 0x1000ade4
mov dword [ebp - 0x1174], 0xfffffffa
mov dword [ebp - 0x1170], 0xfffffffa
mov dword [ebp - 0x116c], 0xfffffffa
mov dword [ebp - 0x1168], 0xfffffffa
mov dword [ebp - 0x14], 3
jmp 0x1000acbf
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1000adb9
mov dword [ebp - 0x4bc], 0x9642e40c
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x1174], ecx
jge 0x1000ad50
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp + eax - 0x1174]
mov dword [ebp + ecx*4 - 0x1174], eax
push 0xfffffffffffffff7
pop eax
imul eax, eax, 0xffff6fa2
cmp eax, 8
jne 0x1000ad13
mov dword [ebp - 0xca0], 1
jmp 0x1000ad1a
and dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0x4bc]
add eax, dword [ebp - 0xca0]
jne 0x1000ad34
mov dword [ebp - 0x670], 1
jmp 0x1000ad3b
and dword [ebp - 0x670], 0
cmp dword [ebp - 0x670], 0xab9c
jl 0x1000ad50
and dword [ebp - 0xca8], 0
jmp 0x1000ad5a
mov dword [ebp - 0xca8], 1
mov eax, dword [ebp - 0x4bc]
cmp dword [ebp - 0xca8], eax
jne 0x1000ad74
mov dword [ebp - 0x678], 1
jmp 0x1000ad7b
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x4bc], eax
mov byte [ebp - 0x18b], 0
movzx eax, byte [ebp - 0x18b]
test eax, eax
je 0x1000adb4
push 0x2009
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polyline]
jmp 0x1000acb8
mov dword [ebp - 0x14], 0
jmp 0x1000adc9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1000addf
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1174], 0x4ea3
jmp 0x1000adc2
jmp 0x1000af0f
mov dword [ebp - 0x25c], 0xfffffff7
mov dword [ebp - 0x384], 0
jmp 0x1000ae07
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 1
jge 0x1000ae23
mov eax, dword [ebp - 0x384]
mov dword [ebp + eax*4 - 0x1084], 0xffffffff
jmp 0x1000adfa
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x25c], eax
jge 0x1000ae3a
mov dword [ebp - 0xcb8], 1
jmp 0x1000ae41
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x14f4], eax
cmp dword [ebp - 0x14], 0
je 0x1000ae66
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1000ae66
mov dword [ebp - 0xcb0], 1
jmp 0x1000ae6d
and dword [ebp - 0xcb0], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0xcb0]
cmp dword [ebp - 0x25c], eax
jle 0x1000ae8b
mov dword [ebp - 0x680], 1
jmp 0x1000ae92
and dword [ebp - 0x680], 0
cmp dword [ebp - 0x680], 0x136
jne 0x1000aeaa
mov dword [ebp - 0x688], 1
jmp 0x1000aeb1
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0xcb8]
cmp eax, dword [ebp - 0x688]
jl 0x1000aecb
mov dword [ebp - 0xcc0], 1
jmp 0x1000aed2
and dword [ebp - 0xcc0], 0
mov eax, dword [ebp - 0xcc0]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x25c], 0
jne 0x1000aef2
xor eax, eax
inc eax
jne 0x1000aef2
and dword [ebp - 0x690], 0
jmp 0x1000aefc
mov dword [ebp - 0x690], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x690]
mov dword [ebp + eax - 0x1084], ecx
mov dword [ebp - 0xc], 0xb1cecb45
mov dword [ebp - 0x1bc], 0x87a9b65c
mov dword [ebp - 0x1320], 0x7cec7e9a
mov dword [ebp - 0x131c], 0x7cec7e9a
mov dword [ebp - 0x1318], 0x7cec7e9a
mov dword [ebp - 0x1314], 0x7cec7e9a
mov dword [ebp - 0xd2c], 0
mov dword [ebp - 0x14fc], 0x85266add
mov dword [ebp - 0x1504], 0xffffffff
mov dword [ebp - 0x6f0], 2
mov dword [ebp - 0xc8], 0
jmp 0x1000af89
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x1000afa5
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x52c], 0x41b3
jmp 0x1000af7c
mov dword [ebp - 0xc8], 0
jmp 0x1000afbe
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x1000afda
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x1268], 0xff609d70
jmp 0x1000afb1
mov dword [ebp - 0xc], 0
jmp 0x1000afea
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jg 0x1000b450
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x46c], 0x6982b357
mov dword [ebp - 0x3c4], 0xa4b38b4b
mov dword [ebp - 0xa0], 1
cmp dword [ebp - 0xa0], 0
je 0x1000b1db
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xcc8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xcc8]
mov dword [ebp + eax - 0x1268], ecx
cmp dword [ebp - 0xcc8], 0xce96f8f9
jbe 0x1000b05c
mov dword [ebp - 0x698], 1
jmp 0x1000b063
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x698], eax
jge 0x1000b07a
mov dword [ebp - 0xf10], 1
jmp 0x1000b081
and dword [ebp - 0xf10], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x150c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1268], 0xfffffffb
je 0x1000b0a8
mov dword [ebp - 0xcd0], 1
jmp 0x1000b0af
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xcd0], eax
je 0x1000b0c6
mov dword [ebp - 0x112c], 1
jmp 0x1000b0cd
and dword [ebp - 0x112c], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1514], eax
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], eax
jge 0x1000b0f3
mov dword [ebp - 0x6a0], 1
jmp 0x1000b0fa
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x6a0], eax
jl 0x1000b111
mov dword [ebp - 0xcd8], 1
jmp 0x1000b118
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xcd8], eax
jne 0x1000b12f
mov dword [ebp - 0x6a8], 1
jmp 0x1000b136
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x6a8], eax
je 0x1000b150
mov dword [ebp - 0xce0], 1
jmp 0x1000b157
and dword [ebp - 0xce0], 0
cmp dword [ebp - 0xce0], 0xf888c554
jne 0x1000b16f
mov dword [ebp - 0x6b0], 1
jmp 0x1000b176
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x52c]
mov dword [ebp - 0xce8], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xce8]
mov dword [ebp + eax*4 - 0x52c], ecx
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xce8], eax
jle 0x1000b1bc
mov dword [ebp - 0x6b8], 1
jmp 0x1000b1c3
and dword [ebp - 0x6b8], 0
cmp dword [ebp - 0x6b8], 0xb674
je 0x1000b1db
mov dword [ebp - 0xcf0], 1
jmp 0x1000b1e2
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0xcf0]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1268]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x52c]
cmp dword [ebp - 0x3c4], eax
jge 0x1000b231
mov dword [ebp - 0x6c8], 1
jmp 0x1000b238
and dword [ebp - 0x6c8], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x52c]
cmp dword [ebp + eax - 0x1320], ecx
jg 0x1000b26d
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x52c], 0
je 0x1000b26d
mov dword [ebp - 0x6c0], 1
jmp 0x1000b274
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x6c0]
lea eax, [ecx + eax - 0x2795fdd0]
cmp eax, dword [ebp - 0x1bc]
jl 0x1000b29b
mov dword [ebp - 0xcf8], 1
jmp 0x1000b2a2
and dword [ebp - 0xcf8], 0
cmp dword [ebp - 0xcf8], 5
jae 0x1000b2b7
mov dword [ebp - 0xd0c], 1
jmp 0x1000b2be
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0x6c8]
cmp eax, dword [ebp - 0xd0c]
jl 0x1000b2d8
mov dword [ebp - 0xf18], 1
jmp 0x1000b2df
and dword [ebp - 0xf18], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x151c], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp + ecx*4 - 0x52c]
cmp dword [ebp + eax*4 - 0x52c], ecx
jne 0x1000b30d
mov dword [ebp - 0x6d0], 1
jmp 0x1000b314
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x6d0], 0x7283a38c
jne 0x1000b32c
mov dword [ebp - 0x108c], 1
jmp 0x1000b333
and dword [ebp - 0x108c], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xd14], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd14]
mov dword [ebp + eax - 0x1268], ecx
mov eax, dword [ebp - 0xd2c]
cmp dword [ebp - 0xd14], eax
je 0x1000b36c
mov dword [ebp - 0x6d8], 1
jmp 0x1000b373
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x52c]
sub eax, dword [ebp - 0x6d8]
cmp eax, 0x274c
je 0x1000b396
mov dword [ebp - 0xd1c], 1
jmp 0x1000b39d
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x52c]
cmp dword [ebp - 0xd1c], eax
jge 0x1000b3bb
mov dword [ebp - 0x6e0], 1
jmp 0x1000b3c2
and dword [ebp - 0x6e0], 0
cmp dword [ebp - 0x6e0], 0
jne 0x1000b3d7
mov dword [ebp - 0xd24], 1
jmp 0x1000b3de
and dword [ebp - 0xd24], 0
cmp dword [ebp - 0xd24], 1
jg 0x1000b3f3
mov dword [ebp - 0x6e8], 1
jmp 0x1000b3fa
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x52c]
cmp dword [ebp - 0x6e8], eax
jg 0x1000b418
mov dword [ebp - 0xf20], 1
jmp 0x1000b41f
and dword [ebp - 0xf20], 0
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x1524], eax
cmp dword [ebp - 0xd2c], 0
je 0x1000b43f
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x52c], 0
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x1bc], eax
jmp 0x1000afe3
mov dword [ebp - 0xc], 0xb
jmp 0x1000b460
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x1000b4c1
mov dword [ebp - 0x152c], 0xfffffff7
mov dword [ebp - 0x171c], 0xd7bff020
mov dword [ebp - 0x1718], 0xd7bff020
mov dword [ebp - 0x1714], 0xd7bff020
mov dword [ebp - 0x1710], 0xd7bff020
mov byte [ebp - 0x195], 0
movzx eax, byte [ebp - 0x195]
test eax, eax
je 0x1000b4b2
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
mov eax, dword [ebp - 0x6f0]
dec eax
mov dword [ebp - 0x6f0], eax
jmp 0x1000b459
mov dword [ebp - 0x120], 0x87013dce
mov dword [ebp - 0x1534], 0x17059141
mov dword [ebp - 0x115c], 0x2456160c
mov dword [ebp - 0x1094], 0x3f0244c
mov dword [ebp - 0xd34], 0x5ebec5ec
mov dword [ebp - 0xd3c], 0x2305aba9
mov dword [ebp - 0x60], 0
jmp 0x1000b50d
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1000b523
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x1214], 0xd7f825e7
jmp 0x1000b506
mov dword [ebp - 0x60], 0
jmp 0x1000b533
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1000b549
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x1574], 0xffffffff
jmp 0x1000b52c
mov dword [ebp - 0x60], 0
jmp 0x1000b559
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1000b56f
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xf30], 6
jmp 0x1000b552
mov dword [ebp - 0x120], 2
jmp 0x1000b588
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x1000b6eb
mov dword [ebp - 0x3cc], 1
mov dword [ebp - 0x1330], 0x1d594d03
mov dword [ebp - 0x132c], 0x1d594d03
mov dword [ebp - 0x1328], 0x1d594d03
mov dword [ebp - 0x1324], 0x1d594d03
mov dword [ebp - 0xf28], 0xfffffffd
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp + eax*4 - 0x1214]
mov dword [ebp - 0x153c], eax
mov eax, dword [ebp - 0xd34]
dec eax
mov dword [ebp - 0xd34], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1214]
cmp dword [ebp - 0x3cc], eax
je 0x1000b612
mov dword [ebp - 0x6f8], 1
jmp 0x1000b619
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x115c], eax
mov eax, dword [ebp - 0xf28]
mov dword [ebp - 0x1544], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1574]
cmp dword [ebp - 0xd3c], eax
jg 0x1000b664
mov dword [ebp - 0x520], 1
jmp 0x1000b66b
and dword [ebp - 0x520], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x520]
mov dword [ebp + eax - 0x1330], ecx
mov eax, dword [ebp - 0x1094]
cmp dword [ebp - 0x520], eax
jge 0x1000b693
cmp dword [ebp - 0xd3c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ebp + ecx*4 - 0x1214]
cmp dword [ebp + eax - 0x1574], ecx
jge 0x1000b6ba
mov dword [ebp - 0x700], 1
jmp 0x1000b6c1
and dword [ebp - 0x700], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x700]
mov dword [ebp + eax - 0xf30], ecx
mov eax, dword [ebp - 0x120]
cmp dword [ebp + eax*4 - 0x1214], 0
je 0x1000b6e6
jmp 0x1000b6eb
jmp 0x1000b57b
mov dword [ebp - 0xf0], 0xfe01bd97
mov dword [ebp - 0xa8], 8
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x1dc], 0x5240ca70
mov dword [ebp - 0x118c], 0x3a29add9
mov dword [ebp - 0x154c], 0xfffffff8
mov eax, dword [ebp - 0xf0]
neg eax
jne 0x1000b741
push 6
pop eax
test eax, eax
jne 0x1000b741
and dword [ebp - 0x708], 0
jmp 0x1000b74b
mov dword [ebp - 0x708], 1
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1554], eax
cmp dword [ebp - 0xf0], 0xfffffffc
je 0x1000b76c
mov dword [ebp - 0xd44], 1
jmp 0x1000b773
and dword [ebp - 0xd44], 0
mov eax, dword [ebp - 0xd44]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x708], eax
jge 0x1000b799
mov dword [ebp - 0xd4c], 1
jmp 0x1000b7a0
and dword [ebp - 0xd4c], 0
cmp dword [ebp - 0xd4c], 1
je 0x1000b7b5
mov dword [ebp - 0x710], 1
jmp 0x1000b7bc
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0x710]
cmp dword [ebp - 0xf0], eax
jle 0x1000b7e5
cmp dword [ebp - 0xa8], 0
je 0x1000b7e5
mov dword [ebp - 0xd54], 1
jmp 0x1000b7ec
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0xd54]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
je 0x1000b866
mov dword [ebp - 0x1134], 0x700d62e6
mov dword [ebp - 0xf38], 0xffffffff
mov byte [ebp - 0x17a], 0
movzx eax, byte [ebp - 0x17a]
test eax, eax
je 0x1000b839
push 0x4df
push 0x482
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
cmp dword [ebp - 0x1134], 0
jne 0x1000b84e
mov dword [ebp - 0x718], 1
jmp 0x1000b855
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0xf38], eax
jmp 0x1000bb2d
mov dword [ebp - 0x1c4], 0x5a8
mov dword [ebp - 0x738], 4
cmp dword [ebp - 0xf0], 0
jne 0x1000b8a4
mov dword [ebp - 0xa8], 1
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0xa8], eax
jg 0x1000b8a4
and dword [ebp - 0xd5c], 0
jmp 0x1000b8ae
mov dword [ebp - 0xd5c], 1
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0xd5c], eax
jle 0x1000b8c8
mov dword [ebp - 0x109c], 1
jmp 0x1000b8cf
and dword [ebp - 0x109c], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x155c], eax
cmp dword [ebp - 0xa8], 0
jne 0x1000b8f6
cmp dword [ebp - 0x1c4], 0
jne 0x1000b8f6
and dword [ebp - 0x720], 0
jmp 0x1000b900
mov dword [ebp - 0x720], 1
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x720]
jl 0x1000b91a
mov dword [ebp - 0xd64], 1
jmp 0x1000b921
and dword [ebp - 0xd64], 0
mov eax, dword [ebp - 0xd64]
add eax, 3
jne 0x1000b93e
cmp dword [ebp - 0x1c4], 0
jne 0x1000b93e
and dword [ebp - 0x728], 0
jmp 0x1000b948
mov dword [ebp - 0x728], 1
mov eax, dword [ebp - 0x1dc]
cmp eax, dword [ebp - 0x728]
je 0x1000ba07
mov dword [ebp - 0x3d4], 1
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x1564], eax
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x1c4], eax
jle 0x1000b996
mov dword [ebp - 0xf40], 1
jmp 0x1000b99d
and dword [ebp - 0xf40], 0
mov eax, dword [ebp - 0x738]
cmp dword [ebp - 0x1c4], eax
je 0x1000b9b7
mov dword [ebp - 0xd6c], 1
jmp 0x1000b9be
and dword [ebp - 0xd6c], 0
cmp dword [ebp - 0xd6c], 0xffffffff
je 0x1000b9d3
mov dword [ebp - 0x730], 1
jmp 0x1000b9da
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 0xfffffffe
jl 0x1000b9ef
mov dword [ebp - 0xd74], 1
jmp 0x1000b9f6
and dword [ebp - 0xd74], 0
mov eax, dword [ebp - 0xd74]
mov dword [ebp - 0xa8], eax
jmp 0x1000bb2d
mov dword [ebp - 0x3dc], 0
mov byte [ebp - 0x17c], 0
movzx eax, byte [ebp - 0x17c]
test eax, eax
je 0x1000ba37
push 0
push 0x2541
push 0x24fa
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov dword [ebp - 0x1dc], 0
jmp 0x1000ba50
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x27
jle 0x1000bb2d
mov dword [ebp - 0x474], 0xbf567d71
cmp dword [ebp - 0x738], 0
jne 0x1000baf4
cmp dword [ebp - 0x1c4], 0
jne 0x1000baf4
cmp dword [ebp - 0x474], 0
jne 0x1000bab0
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0x474]
je 0x1000baa9
cmp dword [ebp - 0x3dc], 0
je 0x1000baa9
mov dword [ebp - 0xd7c], 1
jmp 0x1000bab0
and dword [ebp - 0xd7c], 0
cmp dword [ebp - 0x3dc], 1
jne 0x1000bac5
mov dword [ebp - 0x740], 1
jmp 0x1000bacc
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x474]
imul eax, dword [ebp - 0x740]
test eax, eax
jne 0x1000baf4
cmp dword [ebp - 0xa8], 0
jne 0x1000baf4
xor eax, eax
inc eax
jne 0x1000baf4
and dword [ebp - 0xd84], 0
jmp 0x1000bafe
mov dword [ebp - 0xd84], 1
mov eax, dword [ebp - 0x3dc]
add eax, dword [ebp - 0xd84]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x118c], eax
jmp 0x1000ba43
mov dword [ebp - 0xd8c], 1
mov dword [ebp - 0x161c], 0
mov dword [ebp - 0xf48], 0x147909b7
mov dword [ebp - 0x1624], 0xfffffffe
mov dword [ebp - 0x47c], 0xf6efba1a
mov dword [ebp - 0x4c4], 0x8373b2c
mov dword [ebp - 0xf58], 0xfffffffd
mov dword [ebp - 0x2fc], 0
jmp 0x1000bb8c
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 1
jge 0x1000bba8
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x10ac], 4
jmp 0x1000bb7f
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x10a4], eax
mov eax, dword [ebp - 0xf48]
mov dword [ebp - 0xf50], eax
mov eax, dword [ebp - 0x4c4]
dec eax
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x10a4]
cmp eax, dword [ebp - 0xf50]
jle 0x1000bbe7
mov dword [ebp - 0x748], 1
jmp 0x1000bbee
and dword [ebp - 0x748], 0
cmp dword [ebp - 0x748], 0xce1e2c0d
jae 0x1000bc06
mov dword [ebp - 0x113c], 1
jmp 0x1000bc0d
and dword [ebp - 0x113c], 0
mov eax, dword [ebp - 0xd8c]
mov dword [ebp - 0x162c], eax
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x1634], eax
cmp dword [ebp - 0xd8c], 1
je 0x1000bc3a
mov dword [ebp - 0x750], 1
jmp 0x1000bc41
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0xf58]
cmp dword [ebp - 0x750], eax
je 0x1000bc5b
mov dword [ebp - 0xd94], 1
jmp 0x1000bc62
and dword [ebp - 0xd94], 0
mov eax, dword [ebp - 0x47c]
cmp dword [ebp - 0xd94], eax
jne 0x1000bc7c
mov dword [ebp - 0x3e4], 1
jmp 0x1000bc83
and dword [ebp - 0x3e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp + eax - 0x10ac], ecx
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x10], 0xf5020f89
cmp dword [ebp - 0x10], 8
jle 0x1000be10
mov dword [ebp - 0x1188], 0xfffffffa
mov dword [ebp - 0x1184], 0xfffffffa
mov dword [ebp - 0x1180], 0xfffffffa
mov dword [ebp - 0x117c], 0xfffffffa
mov dword [ebp - 0x10], 3
jmp 0x1000bceb
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1000bde5
mov dword [ebp - 0x3ec], 0x9642e40c
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x1188], ecx
jge 0x1000bd7c
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp + eax - 0x1188]
mov dword [ebp + ecx*4 - 0x1188], eax
push 0xfffffffffffffff7
pop eax
imul eax, eax, 0xffff6fa2
cmp eax, 8
jne 0x1000bd3f
mov dword [ebp - 0x758], 1
jmp 0x1000bd46
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x3ec]
add eax, dword [ebp - 0x758]
jne 0x1000bd60
mov dword [ebp - 0xd9c], 1
jmp 0x1000bd67
and dword [ebp - 0xd9c], 0
cmp dword [ebp - 0xd9c], 0xab9c
jl 0x1000bd7c
and dword [ebp - 0x760], 0
jmp 0x1000bd86
mov dword [ebp - 0x760], 1
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0x760], eax
jne 0x1000bda0
mov dword [ebp - 0xda4], 1
jmp 0x1000bda7
and dword [ebp - 0xda4], 0
mov eax, dword [ebp - 0xda4]
mov dword [ebp - 0x3ec], eax
mov byte [ebp - 0x17e], 0
movzx eax, byte [ebp - 0x17e]
test eax, eax
je 0x1000bde0
push 0x2009
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polyline]
jmp 0x1000bce4
mov dword [ebp - 0x10], 0
jmp 0x1000bdf5
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1000be0b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1188], 0x4ea3
jmp 0x1000bdee
jmp 0x1000bf3b
mov dword [ebp - 0x34c], 0xfffffff7
mov dword [ebp - 0x264], 0
jmp 0x1000be33
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 1
jge 0x1000be4f
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xf60], 0xffffffff
jmp 0x1000be26
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x34c], eax
jge 0x1000be66
mov dword [ebp - 0x770], 1
jmp 0x1000be6d
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x163c], eax
cmp dword [ebp - 0x10], 0
je 0x1000be92
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1000be92
mov dword [ebp - 0x768], 1
jmp 0x1000be99
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x768]
cmp dword [ebp - 0x34c], eax
jle 0x1000beb7
mov dword [ebp - 0xdac], 1
jmp 0x1000bebe
and dword [ebp - 0xdac], 0
cmp dword [ebp - 0xdac], 0x136
jne 0x1000bed6
mov dword [ebp - 0xdb4], 1
jmp 0x1000bedd
and dword [ebp - 0xdb4], 0
mov eax, dword [ebp - 0x770]
cmp eax, dword [ebp - 0xdb4]
jl 0x1000bef7
mov dword [ebp - 0x778], 1
jmp 0x1000befe
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x34c], 0
jne 0x1000bf1e
xor eax, eax
inc eax
jne 0x1000bf1e
and dword [ebp - 0xdbc], 0
jmp 0x1000bf28
mov dword [ebp - 0xdbc], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdbc]
mov dword [ebp + eax - 0xf60], ecx
mov dword [ebp - 0x68], 0x76820624
mov dword [ebp - 0x4f8], 0xa147b80b
mov dword [ebp - 0x7b8], 0xffffffff
mov dword [ebp - 0xd0], 0
jmp 0x1000bf6f
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x1000bf8b
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0xe90], 0
jmp 0x1000bf62
mov dword [ebp - 0xd0], 0
jmp 0x1000bfa4
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 4
jge 0x1000bfc0
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x17e8], 0xef5ead4a
jmp 0x1000bf97
mov dword [ebp - 0x68], 0x1d
jmp 0x1000bfd0
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffffb
je 0x1000c387
mov dword [ebp - 0xdd4], 0xb81fdf20
mov dword [ebp - 0x110], 0
jmp 0x1000bffd
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x1000c019
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x4f4], 0x9869ec42
jmp 0x1000bff0
mov dword [ebp - 0x110], 0
jmp 0x1000c032
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x1000c04e
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x26c], 0xfbe58499
jmp 0x1000c025
mov eax, dword [ebp - 0x68]
sub eax, 0x69897b55
sub eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x68]
jge 0x1000c06a
mov dword [ebp - 0x780], 1
jmp 0x1000c071
and dword [ebp - 0x780], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x780]
sub ecx, dword [ebp + eax - 0xe90]
cmp dword [ebp - 0x68], ecx
je 0x1000c095
mov dword [ebp - 0xdc4], 1
jmp 0x1000c09c
and dword [ebp - 0xdc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe90]
imul eax, dword [ebp - 0xdc4]
cmp eax, 0x5e0b
jne 0x1000c0c3
mov dword [ebp - 0x788], 1
jmp 0x1000c0ca
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x788]
sub eax, 9
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x26c]
je 0x1000c0ee
mov dword [ebp - 0x1164], 1
jmp 0x1000c0f5
and dword [ebp - 0x1164], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1644], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4f4]
mov dword [ebp - 0x164c], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1654], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4f4], 0xcbfb
jle 0x1000c139
mov dword [ebp - 0xdcc], 1
jmp 0x1000c140
and dword [ebp - 0xdcc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26c]
neg eax
mov ecx, dword [ebp - 0xdcc]
neg ecx
cmp eax, ecx
jge 0x1000c170
mov eax, 0xce094bf7
test eax, eax
je 0x1000c170
mov dword [ebp - 0x790], 1
jmp 0x1000c177
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0xdd4], eax
cmp dword [ebp - 0xdd4], 0xfff8
je 0x1000c19b
mov dword [ebp - 0x798], 1
jmp 0x1000c1a2
and dword [ebp - 0x798], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe90]
cmp dword [ebp - 0x798], eax
jne 0x1000c1c3
mov dword [ebp - 0xddc], 1
jmp 0x1000c1ca
and dword [ebp - 0xddc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4f4]
cmp dword [ebp - 0xddc], eax
jle 0x1000c1eb
mov dword [ebp - 0x7a0], 1
jmp 0x1000c1f2
and dword [ebp - 0x7a0], 0
cmp dword [ebp - 0x7a0], 8
jle 0x1000c207
mov dword [ebp - 0xde4], 1
jmp 0x1000c20e
and dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0xde4], eax
jle 0x1000c225
mov dword [ebp - 0x7a8], 1
jmp 0x1000c22c
and dword [ebp - 0x7a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4f4]
cmp dword [ebp - 0x7a8], eax
jl 0x1000c24d
mov dword [ebp - 0xdec], 1
jmp 0x1000c254
and dword [ebp - 0xdec], 0
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0xdec]
test eax, eax
je 0x1000c27e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4f4], 0
je 0x1000c27e
mov dword [ebp - 0x7b0], 1
jmp 0x1000c285
and dword [ebp - 0x7b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26c]
cmp dword [ebp - 0x7b0], eax
jl 0x1000c2a6
mov dword [ebp - 0xf68], 1
jmp 0x1000c2ad
and dword [ebp - 0xf68], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x26c]
cmp dword [ebp + eax - 0x4f4], ecx
jge 0x1000c2d5
mov dword [ebp - 0xdf4], 1
jmp 0x1000c2dc
and dword [ebp - 0xdf4], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0xdf4], eax
jg 0x1000c2f9
cmp dword [ebp - 0x7b8], 0
jne 0x1000c2f9
and dword [ebp - 0x10b4], 0
jmp 0x1000c303
mov dword [ebp - 0x10b4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4f4]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x165c], eax
cmp dword [ebp - 0x7b8], 0
jne 0x1000c33d
cmp dword [ebp - 0x4f8], 0
jne 0x1000c33d
and dword [ebp - 0xdfc], 0
jmp 0x1000c347
mov dword [ebp - 0xdfc], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe90]
cmp dword [ebp - 0xdfc], eax
jl 0x1000c368
mov dword [ebp - 0x7c0], 1
jmp 0x1000c36f
and dword [ebp - 0x7c0], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x7c0]
mov dword [ebp + eax - 0x17e8], ecx
jmp 0x1000bfc9
mov byte [ebp - 0x180], 0
movzx eax, byte [ebp - 0x180]
test eax, eax
je 0x1000c3b6
push 0
push 0x1cb9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1a8], 0xffffffff
mov dword [ebp - 0x304], 0
jmp 0x1000c3e0
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 1
jge 0x1000c3fc
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0x1e4], 0xe4b28306
jmp 0x1000c3d3
mov dword [ebp - 0x24], 0
jmp 0x1000c40c
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffed
jg 0x1000c41c
cmp dword [ebp - 0x24], 0
je 0x1000c41a
jmp 0x1000c41c
jmp 0x1000c405
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xe04], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe04]
mov dword [ebp + eax - 0x1e4], ecx
cmp dword [ebp - 0xe04], 0
je 0x1000c596
mov dword [ebp - 0x3f4], 0xffffffff
mov dword [ebp - 0x484], 0xfa318711
mov dword [ebp - 0x274], 0
jmp 0x1000c487
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 3
jge 0x1000c4a3
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x1754], 0xfffffffa
jmp 0x1000c47a
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1664], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp - 0x484], eax
jle 0x1000c4cd
mov dword [ebp - 0x7c8], 1
jmp 0x1000c4d4
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x3f4]
cmp eax, dword [ebp - 0x7c8]
jl 0x1000c4fa
mov dword [ebp - 0xe0c], 1
jmp 0x1000c501
and dword [ebp - 0xe0c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1754]
cmp dword [ebp - 0xe0c], eax
jne 0x1000c522
mov dword [ebp - 0x7d0], 1
jmp 0x1000c529
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x7d0]
neg eax
mov dword [ebp - 0x484], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e4]
cmp eax, dword [ebp - 0x484]
jl 0x1000c558
mov dword [ebp - 0xe14], 1
jmp 0x1000c55f
and dword [ebp - 0xe14], 0
cmp dword [ebp - 0xe14], 0xdb85613
jle 0x1000c577
mov dword [ebp - 0x7d8], 1
jmp 0x1000c57e
and dword [ebp - 0x7d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7d8]
mov dword [ebp + eax - 0x1e4], ecx
jmp 0x1000c649
mov dword [ebp - 0x374], 0
jmp 0x1000c5af
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 3
jge 0x1000c5cb
mov eax, dword [ebp - 0x374]
mov dword [ebp + eax*4 - 0x1584], 0xfffffff6
jmp 0x1000c5a2
mov dword [ebp - 0x1a8], 0
jmp 0x1000c5e4
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0
jg 0x1000c649
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1584]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1584], eax
mov dword [ebp - 0x24], 0
jmp 0x1000c618
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1000c647
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1e4], 0
je 0x1000c62d
jmp 0x1000c647
mov byte [ebp - 0x182], 0
movzx eax, byte [ebp - 0x182]
test eax, eax
je 0x1000c645
call dword [sym.imp.USER32.dll_GetCapture]
jmp 0x1000c611
jmp 0x1000c5d7
mov dword [ebp - 8], 0xb1cecb45
mov dword [ebp - 0x1b0], 0x87a9b65c
mov dword [ebp - 0x1350], 0x7cec7e9a
mov dword [ebp - 0x134c], 0x7cec7e9a
mov dword [ebp - 0x1348], 0x7cec7e9a
mov dword [ebp - 0x1344], 0x7cec7e9a
mov dword [ebp - 0x834], 0
mov dword [ebp - 0x166c], 0x85266add
mov dword [ebp - 0x1674], 0xffffffff
mov dword [ebp - 0xe38], 2
mov dword [ebp - 0xac], 0
jmp 0x1000c6c3
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x1000c6df
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x4e4], 0x41b3
jmp 0x1000c6b6
mov dword [ebp - 0xac], 0
jmp 0x1000c6f8
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x1000c714
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x1244], 0xff609d70
jmp 0x1000c6eb
mov dword [ebp - 8], 0
jmp 0x1000c724
cmp dword [ebp - 8], 2
jg 0x1000cb8a
mov dword [ebp - 0xa4], 0xffffffff
mov dword [ebp - 0x4cc], 0x6982b357
mov dword [ebp - 0x3fc], 0xa4b38b4b
mov dword [ebp - 0xa4], 1
cmp dword [ebp - 0xa4], 0
je 0x1000c915
mov eax, dword [ebp - 8]
mov dword [ebp - 0xe1c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe1c]
mov dword [ebp + eax - 0x1244], ecx
cmp dword [ebp - 0xe1c], 0xce96f8f9
jbe 0x1000c796
mov dword [ebp - 0x7e0], 1
jmp 0x1000c79d
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x7e0], eax
jge 0x1000c7b4
mov dword [ebp - 0xf70], 1
jmp 0x1000c7bb
and dword [ebp - 0xf70], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x167c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1244], 0xfffffffb
je 0x1000c7e2
mov dword [ebp - 0xe24], 1
jmp 0x1000c7e9
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xe24], eax
je 0x1000c800
mov dword [ebp - 0x1144], 1
jmp 0x1000c807
and dword [ebp - 0x1144], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1684], eax
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], eax
jge 0x1000c82d
mov dword [ebp - 0x7e8], 1
jmp 0x1000c834
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x7e8], eax
jl 0x1000c84b
mov dword [ebp - 0xe2c], 1
jmp 0x1000c852
and dword [ebp - 0xe2c], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xe2c], eax
jne 0x1000c869
mov dword [ebp - 0x7f0], 1
jmp 0x1000c870
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x7f0], eax
je 0x1000c88a
mov dword [ebp - 0xe34], 1
jmp 0x1000c891
and dword [ebp - 0xe34], 0
cmp dword [ebp - 0xe34], 0xf888c554
jne 0x1000c8a9
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1244]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x4e4]
cmp dword [ebp - 0x3fc], eax
jge 0x1000c96b
mov dword [ebp - 0xb5c], 1
jmp 0x1000c972
and dword [ebp - 0xb5c], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x4e4]
cmp dword [ebp + eax - 0x1350], ecx
jg 0x1000c9a7
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x4e4], 0
je 0x1000c9a7
mov dword [ebp - 0xd04], 1
jmp 0x1000c9ae
and dword [ebp - 0xd04], 0
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xd04]
lea eax, [ecx + eax - 0x2795fdd0]
cmp eax, dword [ebp - 0x1b0]
jl 0x1000c9d5
mov dword [ebp - 0x80c], 1
jmp 0x1000c9dc
and dword [ebp - 0x80c], 0
cmp dword [ebp - 0x80c], 5
jae 0x1000c9f1
mov dword [ebp - 0x814], 1
jmp 0x1000c9f8
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0xb5c]
cmp eax, dword [ebp - 0x814]
jl 0x1000ca12
mov dword [ebp - 0xf78], 1
jmp 0x1000ca19
and dword [ebp - 0xf78], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x168c], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp + ecx*4 - 0x4e4]
cmp dword [ebp + eax*4 - 0x4e4], ecx
jne 0x1000ca47
mov dword [ebp - 0xdd0], 1
jmp 0x1000ca4e
and dword [ebp - 0xdd0], 0
cmp dword [ebp - 0xdd0], 0x7283a38c
jne 0x1000ca66
mov dword [ebp - 0x10bc], 1
jmp 0x1000ca6d
and dword [ebp - 0x10bc], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x81c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x81c]
mov dword [ebp + eax - 0x1244], ecx
mov eax, dword [ebp - 0x834]
cmp dword [ebp - 0x81c], eax
je 0x1000caa6
mov dword [ebp - 0xb64], 1
jmp 0x1000caad
and dword [ebp - 0xb64], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x4e4]
sub eax, dword [ebp - 0xb64]
cmp eax, 0x274c
je 0x1000cad0
mov dword [ebp - 8], 0xb
jmp 0x1000cb9a
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x1000cbfb
mov dword [ebp - 0x169c], 0xfffffff7
mov dword [ebp - 0x1480], 0xd7bff020
mov dword [ebp - 0x147c], 0xd7bff020
mov dword [ebp - 0x1478], 0xd7bff020
mov dword [ebp - 0x1474], 0xd7bff020
mov byte [ebp - 0x184], 0
movzx eax, byte [ebp - 0x184]
test eax, eax
je 0x1000cbec
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
mov eax, dword [ebp - 0xe38]
dec eax
mov dword [ebp - 0xe38], eax
jmp 0x1000cb93
mov dword [ebp - 0x140], 0x87013dce
mov dword [ebp - 0x16a4], 0x17059141
mov dword [ebp - 0x11c0], 0x2456160c
mov dword [ebp - 0x10c4], 0x3f0244c
mov dword [ebp - 0x83c], 0x5ebec5ec
mov dword [ebp - 0x844], 0x2305aba9
mov dword [ebp - 0x40], 0
jmp 0x1000cc47
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1000cc5d
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x122c], 0xd7f825e7
jmp 0x1000cc40
mov dword [ebp - 0x40], 0
jmp 0x1000cc6d
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1000cc83
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1594], 0xffffffff
jmp 0x1000cc66
mov dword [ebp - 0x40], 0
jmp 0x1000cc93
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x1000cca9
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xf90], 6
jmp 0x1000cc8c
mov dword [ebp - 0x140], 2
jmp 0x1000ccc2
cmp dword [ebp - 0x140], 0
jl 0x1000ce25