Function at 0x4dbb90
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x448
cmp dword [0x5fdb24], 1
jne 0x4dbba7
jmp 0x4dc40c
mov dword [ebp + 0xc], 0
mov eax, dword [0x5ff21c]
push eax
call fcn.00530f50
add esp, 4
mov dword [ebp - 0x430], eax
cmp dword [0x606b68], 0
je 0x4dbbda
mov ecx, dword [0x606b68]
push ecx
call fcn.00531d90
add esp, 4
push str..DAT
mov edx, dword [ebp + 8]
push edx
call fcn.00532680
add esp, 8
test eax, eax
je 0x4dbc32
push 0x575904
mov eax, dword [ebp + 8]
push eax
call fcn.0042eaa0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4dbc2d
mov ecx, dword [ebp - 8]
push ecx
push 1
push 0x800
push 0x606360
call fcn.0053367b
add esp, 0x10
mov edx, dword [ebp - 8]
push edx
call fcn.00431d50
add esp, 4
jmp 0x4dbe13
push 0x575908
mov eax, dword [ebp + 8]
push eax
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x4dbe13
mov dword [ebp - 0x438], 0x606360
mov dword [ebp - 0x410], 0
jmp 0x4dbc70
mov ecx, dword [ebp - 0x410]
add ecx, 1
mov dword [ebp - 0x410], ecx
cmp dword [ebp - 0x410], 0x100
jge 0x4dbe13
mov edx, dword [ebp - 0x438]
mov byte [edx], 0
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x438]
mov dl, byte [ebp - 0x410]
mov byte [ecx], dl
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x410], 1
je 0x4dbccb
cmp dword [ebp - 0x410], 0xf
jne 0x4dbd60
mov ecx, dword [ebp - 0x438]
mov byte [ecx], 0xff
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
mov eax, dword [ebp - 0x438]
mov byte [eax], 0xff
mov ecx, dword [ebp - 0x438]
add ecx, 1
mov dword [ebp - 0x438], ecx
mov edx, dword [ebp - 0x438]
mov byte [edx], 0xff
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x438]
mov byte [ecx], 0xff
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
mov eax, dword [ebp - 0x438]
mov byte [eax], 0xff
mov ecx, dword [ebp - 0x438]
add ecx, 1
mov dword [ebp - 0x438], ecx
mov edx, dword [ebp - 0x438]
mov byte [edx], 0xff
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
jmp 0x4dbe0e
mov ecx, dword [ebp - 0x438]
mov dl, byte [ebp - 0x410]
mov byte [ecx], dl
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x438]
mov dl, byte [ebp - 0x410]
mov byte [ecx], dl
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x438]
mov dl, byte [ebp - 0x410]
mov byte [ecx], dl
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x438]
mov dl, byte [ebp - 0x410]
mov byte [ecx], dl
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x438]
mov dl, byte [ebp - 0x410]
mov byte [ecx], dl
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x438]
mov dl, byte [ebp - 0x410]
mov byte [ecx], dl
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
jmp 0x4dbc61
push 0
push 0xa
push 0
push 0x100
call fcn.00531d70
add esp, 0x10
mov dword [0x606b68], eax
push 0x408
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
jne 0x4dbe59
push str.could_not_allocate_memory_for_palette
call fcn.004f50c0
add esp, 4
jmp 0x4dc40c
mov ecx, dword [ebp - 0x42c]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0
jne 0x4dbe87
push str.Unable_to_lock_hLogPal
call fcn.004f50c0
add esp, 4
jmp 0x4dc40c
mov edx, 0x300
mov eax, dword [ebp - 0x418]
mov word [eax], dx
mov ecx, 0x100
mov edx, dword [ebp - 0x418]
mov word [edx + 2], cx
mov dword [ebp - 0x410], 0
jmp 0x4dbebf
mov eax, dword [ebp - 0x410]
add eax, 1
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0x100
jge 0x4dc087
mov ecx, dword [ebp - 0x410]
movzx edx, byte [ecx*8 + 0x606362]
shl edx, 8
mov eax, dword [ebp - 0x410]
movzx ecx, byte [eax*8 + 0x606363]
add edx, ecx
mov word [ebp - 0x420], dx
mov edx, dword [ebp - 0x410]
movzx eax, byte [edx*8 + 0x606364]
shl eax, 8
mov ecx, dword [ebp - 0x410]
movzx edx, byte [ecx*8 + 0x606365]
add eax, edx
mov word [ebp - 0x41e], ax
mov eax, dword [ebp - 0x410]
movzx ecx, byte [eax*8 + 0x606366]
shl ecx, 8
mov edx, dword [ebp - 0x410]
movzx eax, byte [edx*8 + 0x606367]
add ecx, eax
mov word [ebp - 0x41c], cx
movzx ecx, word [ebp - 0x420]
cmp ecx, 0x1000
jge 0x4dbfbc
movzx edx, word [ebp - 0x41e]
cmp edx, 0x1000
jge 0x4dbfbc
movzx eax, word [ebp - 0x41c]
cmp eax, 0x1000
jge 0x4dbfbc
movzx ecx, word [ebp - 0x420]
test ecx, ecx
je 0x4dbfbc
movzx edx, word [ebp - 0x41e]
test edx, edx
je 0x4dbfbc
movzx eax, word [ebp - 0x41c]
test eax, eax
je 0x4dbfbc
mov ecx, 0x1000
mov word [ebp - 0x41c], cx
mov dx, word [ebp - 0x41c]
mov word [ebp - 0x41e], dx
mov ax, word [ebp - 0x41e]
mov word [ebp - 0x420], ax
lea ecx, [ebp - 0x420]
push ecx
movzx edx, word [ebp - 0x410]
push edx
mov eax, dword [0x606b68]
push eax
call fcn.00531df0
add esp, 0xc
movzx ecx, word [ebp - 0x420]
sar ecx, 8
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x418]
mov byte [eax + edx*4 + 4], cl
movzx ecx, word [ebp - 0x41e]
sar ecx, 8
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x418]
mov byte [eax + edx*4 + 5], cl
movzx ecx, word [ebp - 0x41c]
sar ecx, 8
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x418]
mov byte [eax + edx*4 + 6], cl
mov ecx, dword [ebp - 0x410]
mov edx, dword [ebp - 0x418]
mov byte [edx + ecx*4 + 7], 0
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x418]
movzx edx, byte [ecx + eax*4 + 4]
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x418]
movzx eax, byte [ecx + eax*4 + 5]
shl eax, 8
or edx, eax
mov ecx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x418]
movzx ecx, byte [eax + ecx*4 + 6]
shl ecx, 0x10
or edx, ecx
mov eax, dword [ebp - 0x410]
mov dword [eax*4 + 0x606b80], edx
jmp 0x4dbeb0
mov dword [ebp - 0x428], 0
mov ecx, dword [0x606f84]
push ecx
mov edx, dword [0x606b68]
push edx
call fcn.00531e10
add esp, 8
movsx eax, word [0x60043c]
test eax, eax
je 0x4dc0c7
xor ecx, ecx
cmp dword [0x5758f8], 0
sete cl
push ecx
call fcn.004dd5b0
add esp, 4
mov dword [0x5758f8], 0
call fcn.004d3290
push 0x21
call fcn.005313c0
add esp, 4
movsx edx, word [0x60043c]
test edx, edx
je 0x4dc212
mov eax, dword [0x601330]
mov dword [ebp - 0x448], eax
mov ecx, dword [0x601334]
mov dword [ebp - 0x43c], ecx
mov dx, word [0x601330]
mov word [ebp - 0x442], dx
mov ax, word [0x601334]
mov word [ebp - 0x444], ax
movsx ecx, word [ebp - 0x442]
movsx edx, word [0x57568c]
add ecx, edx
mov word [ebp - 0x43e], cx
movsx ecx, word [ebp - 0x444]
movsx eax, word [0x600430]
imul eax, eax, 0x340
cdq
and edx, 7
add eax, edx
sar eax, 3
add ecx, eax
mov word [ebp - 0x440], cx
movsx edx, word [0x600434]
test edx, edx
jne 0x4dc17a
movsx eax, word [ebp - 0x440]
add eax, 2
mov word [ebp - 0x440], ax
lea ecx, [ebp - 0x444]
push ecx
call fcn.00531480
add esp, 4
mov dword [0x601330], 0
mov dword [0x601334], 0
xor edx, edx
mov word [ebp - 0x442], dx
xor eax, eax
mov word [ebp - 0x444], ax
movsx ecx, word [ebp - 0x442]
movsx edx, word [0x57568c]
add ecx, edx
mov word [ebp - 0x43e], cx
movsx ecx, word [ebp - 0x444]
movsx eax, word [0x600430]
imul eax, eax, 0x340
cdq
and edx, 7
add eax, edx
sar eax, 3
add ecx, eax
mov word [ebp - 0x440], cx
push 0x64d8e0
call fcn.004d3350
add esp, 4
mov edx, dword [ebp - 0x448]
mov dword [0x601330], edx
mov eax, dword [ebp - 0x43c]
mov dword [0x601334], eax
jmp 0x4dc22c
push 0x64d8e0
call fcn.00531480
add esp, 4
push 0x64d8e0
call fcn.004d3350
add esp, 4
lea ecx, [ebp - 0x424]
push ecx
lea edx, [ebp - 0x414]
push edx
call fcn.00530f10
add esp, 8
push 0
mov eax, dword [0x64d5b0]
push eax
call fcn.00530f30
add esp, 8
push 1
mov ecx, dword [0x606b68]
push ecx
mov edx, dword [0x64d5b0]
push edx
call fcn.00531dd0
add esp, 0xc
mov eax, dword [0x64d5b0]
push eax
call fcn.00531db0
add esp, 4
mov ecx, dword [0x60137c]
push ecx
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x434], eax
lea edx, [ebp - 0x408]
push edx
push 0x100
push 0
mov eax, dword [ebp - 0x434]
push eax
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
mov dword [ebp - 4], eax
mov dword [ebp - 0x410], 0
jmp 0x4dc2c4
mov ecx, dword [ebp - 0x410]
add ecx, 1
mov dword [ebp - 0x410], ecx
cmp dword [ebp - 0x410], 0x100
jge 0x4dc33b
mov edx, dword [ebp - 0x410]
movzx eax, byte [ebp + edx*4 - 0x408]
shl eax, 8
mov word [ebp - 0x420], ax
mov ecx, dword [ebp - 0x410]
movzx edx, byte [ebp + ecx*4 - 0x407]
shl edx, 8
mov word [ebp - 0x41e], dx
mov eax, dword [ebp - 0x410]
movzx ecx, byte [ebp + eax*4 - 0x406]
shl ecx, 8
mov word [ebp - 0x41c], cx
lea edx, [ebp - 0x420]
push edx
movzx eax, word [ebp - 0x410]
push eax
mov ecx, dword [0x606b68]
push ecx
call fcn.00531df0
add esp, 0xc
jmp 0x4dc2b5
push 0
mov edx, dword [0x601374]
push edx
mov eax, dword [ebp - 0x434]
push eax
call dword [sym.imp.GDI32.dll_SelectPalette]
mov ecx, dword [ebp - 0x434]
push ecx
call dword [sym.imp.GDI32.dll_RealizePalette]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x434]
push edx
call dword [sym.imp.GDI32.dll_UpdateColors]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x434]
push eax
mov ecx, dword [0x60137c]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
push 1
mov edx, dword [0x606b68]
push edx
mov eax, dword [0x64d5b0]
push eax
call fcn.00531dd0
add esp, 0xc
mov ecx, dword [0x64d5b0]
push ecx
call fcn.00531db0
add esp, 4
mov edx, dword [0x606f80]
push edx
mov eax, dword [0x606b68]
push eax
call fcn.00531e10
add esp, 8
call fcn.004db730
cmp dword [0x5fdb24], 1
jne 0x4dc3d0
jmp 0x4dc40c
mov ecx, dword [ebp - 0x424]
push ecx
mov edx, dword [ebp - 0x414]
push edx
call fcn.00530f30
add esp, 8
mov eax, dword [0x606b68]
push eax
call fcn.00531e30
add esp, 4
movsx ecx, ax
mov dword [ebp - 0x40c], ecx
call fcn.004dd220
push 3
call fcn.004dd210
add esp, 4
mov esp, ebp
pop ebp
ret