Function at 0x10049320
Capabilities:
Get disk size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa44
push esi
push edi
mov dword [ebp - 0x8cc], 1
mov dword [ebp - 0x824], 0x56915a13
mov dword [ebp - 0x82c], 0xebf0
mov dword [ebp - 0x8a8], 0x80eec299
mov dword [ebp - 0x3ac], 0xc4dd
mov dword [ebp - 0x30], 0
jmp 0x1004936d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10049383
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x8b0], 0
jmp 0x10049366
mov dword [ebp - 0x30], 0
jmp 0x10049393
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x100493a9
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x8b8], 0x28f6c74a
jmp 0x1004938c
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0xe4], 0xda115252
mov dword [ebp - 0x44], 0
jmp 0x100493d0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x100493e6
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x6ec], 0xfffffffc
jmp 0x100493c9
mov dword [ebp - 0x44], 0
jmp 0x100493f6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1004940c
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x9a0], 4
jmp 0x100493ef
mov dword [ebp - 0xe4], 1
mov dword [ebp - 0xe4], 0
jmp 0x1004942f
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jg 0x100496e3
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x550], 0xfffffffb
mov dword [ebp - 0x8c0], 0xc4779d44
mov dword [ebp - 0x184], 0
jmp 0x10049470
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x1004948c
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x8c8], 0xfcc8af95
jmp 0x10049463
mov dword [ebp - 0x7c], 0
jmp 0x1004949c
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jg 0x100496cc
mov dword [ebp - 0x118], 6
mov dword [ebp - 0x8d0], 0xfffffffb
mov dword [ebp - 0x8d8], 0xffffffff
mov dword [ebp - 0x8e0], 9
mov dword [ebp - 0x8e8], 0xfffffff8
mov dword [ebp - 0x8f0], 0xfffffffd
mov dword [ebp - 0x138], 0
jmp 0x100494fb
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 2
jge 0x10049517
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x9d8], 0x7221ebc5
jmp 0x100494ee
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6ec]
mov dword [ebp - 0x8f8], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x9a0], 3
mov eax, 0xba7b7e80
add eax, 3
cmp eax, dword [ebp - 0x118]
jge 0x10049557
mov dword [ebp - 0x540], 1
jmp 0x1004955e
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x540]
jne 0x10049575
mov dword [ebp - 0x548], 1
jmp 0x1004957c
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x550]
sub eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ebp + ecx*4 - 0x6ec]
sub ecx, eax
cmp ecx, dword [ebp - 0x7c]
jl 0x100495ae
mov dword [ebp - 0x558], 1
jmp 0x100495b5
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 0x5f27
jge 0x100495cd
mov dword [ebp - 0x570], 1
jmp 0x100495d4
and dword [ebp - 0x570], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x570]
mov dword [ebp + eax - 0x6ec], ecx
mov dword [ebp - 0x118], 0
jmp 0x10049600
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jg 0x100496c7
mov dword [ebp - 0x96c], 0xb09b37d0
mov dword [ebp - 0x974], 0
mov dword [ebp - 0x97c], 0x2f4e55b6
mov dword [ebp - 0x984], 0
mov dword [ebp - 0x98c], 0xffffffff
mov dword [ebp - 0x994], 0x7aebb1bb
mov dword [ebp - 0x990], 0xd3709e8e
mov dword [ebp - 0x874], 0xe183a099
mov dword [ebp - 0x34], 0
jmp 0x1004966d
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10049683
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xa28], 0x705618d7
jmp 0x10049666
mov dword [ebp - 0x34], 0
jmp 0x10049693
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x100496a9
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x908], 0
jmp 0x1004968c
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x908]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x908], eax
jmp 0x100495f3
jmp 0x10049495
mov eax, dword [ebp - 0xe4]
cmp dword [ebp + eax*4 - 0x6ec], 0
je 0x100496de
jmp 0x100496e3
jmp 0x10049422
mov dword [ebp - 8], 0x666a
mov dword [ebp - 0x598], 0x237ddc4e
mov dword [ebp - 0x594], 0x237ddc4e
mov dword [ebp - 0x590], 0x237ddc4e
mov dword [ebp - 0x58c], 0x237ddc4e
mov dword [ebp - 0x708], 0xb7466640
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x278], 0xe56b76af
mov dword [ebp - 0x508], 6
mov dword [ebp - 0x644], 0
cmp dword [ebp - 8], 0
je 0x100497f9
cmp dword [ebp - 8], 0
je 0x10049769
cmp dword [ebp - 8], 0xbefc
jl 0x10049769
mov dword [ebp - 0x248], 1
jmp 0x10049770
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x248], eax
jle 0x10049787
mov dword [ebp - 0x52c], 1
jmp 0x1004978e
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x52c], eax
jl 0x100497a5
mov dword [ebp - 0x5e0], 1
jmp 0x100497ac
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jge 0x100497d5
mov dword [ebp - 0x61c], 1
jmp 0x100497dc
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x86c], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
je 0x100497f9
mov dword [ebp - 0x624], 1
jmp 0x10049800
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x718], eax
cmp dword [ebp - 8], 0
jne 0x1004981e
cmp dword [ebp - 8], 0
jne 0x1004981e
and dword [ebp - 0x240], 0
jmp 0x10049828
mov dword [ebp - 0x240], 1
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x240]
cmp eax, 0x5205300c
jg 0x10049852
mov eax, 0x97867a7b
test eax, eax
je 0x10049852
xor eax, eax
inc eax
je 0x10049852
mov dword [ebp - 0x24c], 1
jmp 0x10049859
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x24c]
test eax, eax
je 0x100498be
mov dword [ebp - 0x62c], 0x9ebef9f3
mov dword [ebp - 0x180], 0
jmp 0x1004988a
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 4
jge 0x100498a6
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0xa38], 1
jmp 0x1004987d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa38]
mov dword [ebp - 0x62c], eax
jmp 0x10049c45
mov dword [ebp - 0x898], 0xe27dfdee
mov dword [ebp - 0x720], 7
mov dword [ebp - 0x8a0], 0x795bcd59
mov dword [ebp - 0x728], 8
mov dword [ebp - 0x8fc], 0x4db59fb1
mov dword [ebp - 0x730], 0xfffffff9
mov dword [ebp - 0x87c], 0
mov dword [ebp - 0x738], 0
mov dword [ebp - 0x38], 0
jmp 0x1004991e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10049934
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x918], 0xc77e2192
jmp 0x10049917
mov dword [ebp - 0x38], 0
jmp 0x10049944
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1004995a
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x968], 1
jmp 0x1004993d
mov dword [ebp - 8], 0
jmp 0x1004996a
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jg 0x10049c38
mov dword [ebp - 0x12c], 4
mov dword [ebp - 0x63c], 0x497a847e
mov dword [ebp - 0x12c], 0xfffffffc
jmp 0x100499a1
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 9
jle 0x10049c33
mov dword [ebp - 0x1e0], 1
mov dword [ebp - 0x140], 0
jmp 0x100499d1
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 4
jge 0x100499ed
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x228], 0x2be2ff5
jmp 0x100499c4
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x228], 0
jmp 0x10049a1b
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x228]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x228], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x228], 5
jl 0x10049b48
mov dword [ebp - 0x4a0], 0xc710
mov dword [ebp - 0x634], 0xd9132e88
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x228]
cmp dword [ebp + eax - 0x228], ecx
jl 0x10049aec
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x228]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x884], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x918]
mov dword [ebp - 0x748], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x228]
add eax, dword [ebp - 8]
jne 0x10049ab5
mov eax, 0xffff
test eax, eax
jne 0x10049ab5
and dword [ebp - 0x3d8], 0
jmp 0x10049abf
mov dword [ebp - 0x3d8], 1
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x3d8], eax
je 0x10049ad9
mov dword [ebp - 0x250], 1
jmp 0x10049ae0
and dword [ebp - 0x250], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x918]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x228]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x634]
cmp dword [ebp - 0x4a0], eax
jle 0x10049b19
mov dword [ebp - 0x1ac], 1
jmp 0x10049b20
and dword [ebp - 0x1ac], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp + eax - 0x598], ecx
mov eax, 0xdbb7a2e2
sub eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1e0], eax
jmp 0x10049a00
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x598]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0xfffffff9
jle 0x10049b6f
mov dword [ebp - 0x258], 1
jmp 0x10049b76
and dword [ebp - 0x258], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x228]
dec eax
cmp dword [ebp - 0x258], eax
jl 0x10049b98
mov dword [ebp - 0x3e0], 1
jmp 0x10049b9f
and dword [ebp - 0x3e0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x228]
cmp dword [ebp - 0x3e0], eax
jl 0x10049bc0
mov dword [ebp - 0x260], 1
jmp 0x10049bc7
and dword [ebp - 0x260], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x228]
cmp dword [ebp - 0x260], eax
je 0x10049be8
mov dword [ebp - 0x55c], 1
jmp 0x10049bef
and dword [ebp - 0x55c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x228]
mov ecx, dword [ebp - 0x55c]
add ecx, 0x6cbc8ca9
add eax, ecx
cmp eax, 0xfffffff7
jle 0x10049c1b
mov dword [ebp - 0x268], 1
jmp 0x10049c22
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x63c], eax
jmp 0x10049994
jmp 0x10049963
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x598], 0
je 0x10049d64
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x8c]
cmp dword [ebp + eax - 0x598], ecx
jne 0x10049c79
mov dword [ebp - 0x3e8], 1
jmp 0x10049c80
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0x7d4e0d3b
jle 0x10049c98
mov dword [ebp - 0x270], 1
jmp 0x10049c9f
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x270], eax
je 0x10049cb9
mov dword [ebp - 0x4a8], 1
jmp 0x10049cc0
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x4a8], eax
jg 0x10049ce6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x598], 0
jne 0x10049ce6
and dword [ebp - 0x3f0], 0
jmp 0x10049cf0
mov dword [ebp - 0x3f0], 1
mov eax, dword [ebp - 0x8c]
neg eax
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x278]
add edx, dword [ebp - 0x3f0]
sub ecx, edx
mov edx, 0xffff
sub edx, ecx
imul eax, edx
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x598], eax
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], eax
jle 0x10049d3c
mov dword [ebp - 0x280], 1
jmp 0x10049d43
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 0
je 0x10049d64
mov dword [ebp - 0x288], 1
jmp 0x10049d6b
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x90c], 1
mov dword [ebp - 0x750], 0x56915a13
mov dword [ebp - 0x88c], 0x99ac
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x3f8], 1
mov dword [ebp - 0x6c], 0
jmp 0x10049db9
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10049dcf
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x9ac], 0
jmp 0x10049db2
mov dword [ebp - 0x6c], 0
jmp 0x10049ddf
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10049df5
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x9e0], 0xd19ac196
jmp 0x10049dd8
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0xf0], 0
jmp 0x10049e1b
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x10049e37
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x9ac], 0
jmp 0x10049e0e
mov dword [ebp - 0x758], 0xebf0
mov dword [ebp - 0x980], 0x80eec299
mov dword [ebp - 0x4d0], 0xc4dd
mov dword [ebp - 0xd8], 3
mov dword [ebp - 0x400], 0xffffffff
mov dword [ebp - 0x6a4], 0x11d01887
mov dword [ebp - 0x2a8], 0x206dd2cc
mov dword [ebp - 0x760], 0xef70
mov dword [ebp - 0x188], 0
jmp 0x10049ea0
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 2
jge 0x10049ebc
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x838], 0xde9bf9f3
jmp 0x10049e93
cmp dword [ebp - 0xd8], 0xffff
je 0x10049ed4
mov dword [ebp - 0x290], 1
jmp 0x10049edb
and dword [ebp - 0x290], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x838], 8
cmp dword [ebp - 0x290], 8
je 0x10049f01
mov dword [ebp - 0x64c], 1
jmp 0x10049f08
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x400], 6
jl 0x10049f29
mov dword [ebp - 0x4b0], 1
jmp 0x10049f30
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0xd8]
sub eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd8]
add ecx, dword [ebp - 0x4b0]
cmp eax, ecx
jl 0x10049f58
mov dword [ebp - 0x298], 1
jmp 0x10049f5f
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x298], eax
jge 0x10049f79
mov dword [ebp - 0x2a0], 1
jmp 0x10049f80
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x400]
cmp dword [ebp - 0x2a0], eax
jge 0x10049f9a
mov dword [ebp - 0x53c], 1
jmp 0x10049fa1
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x6a4], eax
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0xb4], 0xbc657e3b
mov dword [ebp - 0x148], 0
jmp 0x10049fe4
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jge 0x1004a000
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x65c], 0
jmp 0x10049fd7
mov dword [ebp - 0x20], 2
jmp 0x1004a010
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1004a216
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x510], 0xba2522ab
mov dword [ebp - 0x110], 0
jmp 0x1004a047
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jg 0x1004a202
mov dword [ebp - 0x6b4], 6
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x65c], 0
jne 0x1004a07f
mov eax, 0xcabfc393
test eax, eax
jne 0x1004a07f
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x65c], 0
xor eax, eax
inc eax
jne 0x1004a095
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x65c], 0
je 0x1004a1cf
mov dword [ebp - 0xac], 1
mov dword [ebp - 0x6ac], 0xffffffff
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x1004a0ca
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
cmp dword [ebp - 0xac], 0
jne 0x1004a1b1
cmp dword [ebp - 0xac], 0
jne 0x1004a0f6
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x65c], 0
jne 0x1004a0f6
and dword [ebp - 0x408], 0
jmp 0x1004a100
mov dword [ebp - 0x408], 1
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x408]
cmp eax, dword [ebp - 0xac]
jne 0x1004a120
mov dword [ebp - 0x2b0], 1
jmp 0x1004a127
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 1
jb 0x1004a13c
mov dword [ebp - 0x4b8], 1
jmp 0x1004a143
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x4b8]
jl 0x1004a15d
mov dword [ebp - 0x2b8], 1
jmp 0x1004a164
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x2b8]
je 0x1004a187
mov dword [ebp - 0x410], 1
jmp 0x1004a18e
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0xac], eax
jle 0x1004a1b1
and dword [ebp - 0x2c0], 0
jmp 0x1004a1bb
mov dword [ebp - 0x2c0], 1
mov eax, dword [ebp - 0x2c0]
sub eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x6b4], eax
jmp 0x1004a1fd
mov dword [ebp - 0x510], 0xd9e177c4
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x1004a1fd
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
jmp 0x1004a03a
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x65c], 0
je 0x1004a211
jmp 0x1004a216
jmp 0x1004a009
mov dword [ebp - 0xb4], 0
jmp 0x1004a22f
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xfffffff5
jg 0x1004a25c
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1004a25a
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
jmp 0x1004a222
mov dword [ebp - 0x78], 0
jmp 0x1004a26c
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1004a282
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x768], 0
jmp 0x1004a265
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x10], 0x252cb136
mov dword [ebp - 0x120], 0xfffffff6
mov dword [ebp - 0x614], 0
mov dword [ebp - 0x1dc], 0xa862252
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xf8], 0
jmp 0x1004a2d3
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x16
je 0x1004a760
mov dword [ebp - 0x150], 0xc295a527
mov dword [ebp - 0x4c], 0
jmp 0x1004a2fa
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1004a310
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x1fc], 0x129b8575
jmp 0x1004a2f3
mov dword [ebp - 0x4c], 0
jmp 0x1004a320
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1004a336
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x844], 0xffffffff
jmp 0x1004a319
mov dword [ebp - 0x10], 0
jmp 0x1004a346
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 7
jle 0x1004a4f4
mov dword [ebp - 0x1b8], 9
mov dword [ebp - 0x190], 0xfffffffe
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x698], eax
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x698], 6
ja 0x1004a392
mov dword [ebp - 0x5b8], 1
jmp 0x1004a399
and dword [ebp - 0x5b8], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1fc], 0
je 0x1004a3c3
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1fc], 0
je 0x1004a3c3
mov dword [ebp - 0x2c8], 1
jmp 0x1004a3ca
and dword [ebp - 0x2c8], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1fc], 0x7dcd
jle 0x1004a3e8
mov dword [ebp - 0x418], 1
jmp 0x1004a3ef
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x418]
je 0x1004a418
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1fc], 0
je 0x1004a418
mov dword [ebp - 0x2d0], 1
jmp 0x1004a41f
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
add eax, 0x8319
cmp eax, dword [ebp - 0x190]
je 0x1004a43e
mov dword [ebp - 0x4c0], 1
jmp 0x1004a445
and dword [ebp - 0x4c0], 0
xor eax, eax
sub eax, dword [ebp - 0x4c0]
add eax, dword [ebp - 0x190]
cmp eax, dword [ebp - 0x614]
jne 0x1004a474
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fc], 0
jne 0x1004a474
and dword [ebp - 0x5bc], 0
jmp 0x1004a47e
mov dword [ebp - 0x5bc], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1fc]
mov dword [ebp - 0x91c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1fc]
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x190], 0xffffffff
jne 0x1004a4b8
mov dword [ebp - 0x2d8], 1
jmp 0x1004a4bf
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x2d8], eax
je 0x1004a4d9
mov dword [ebp - 0x420], 1
jmp 0x1004a4e0
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
add eax, 8
mov dword [ebp - 0x150], eax
jmp 0x1004a33f
mov dword [ebp - 0x10], 0
jmp 0x1004a504
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe6
je 0x1004a75b
mov dword [ebp - 0x2f0], 0x96f77d90
mov dword [ebp - 0x4c8], 0xe0c42ef3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fc], 0
jne 0x1004a54a
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1fc], 0
jne 0x1004a54a
and dword [ebp - 0x2e0], 0
jmp 0x1004a554
mov dword [ebp - 0x2e0], 1
mov eax, 0x11771b70
sub eax, dword [ebp - 0x2e0]
cmp eax, dword [ebp - 0x150]
jl 0x1004a573
mov dword [ebp - 0x554], 1
jmp 0x1004a57a
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x554], eax
jne 0x1004a591
mov dword [ebp - 0x2e8], 1
jmp 0x1004a598
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x2e8], eax
jl 0x1004a5b2
mov dword [ebp - 0x428], 1
jmp 0x1004a5b9
and dword [ebp - 0x428], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1fc]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x428]
jl 0x1004a73c
mov dword [ebp - 0x6a0], 0x84865e5a
cmp dword [ebp - 0x120], 5
jne 0x1004a5fc
mov dword [ebp - 0x518], 1
jmp 0x1004a603
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x2f0], 0
je 0x1004a640
mov dword [ebp - 0x4c8], 0xab95
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x778], eax
cmp dword [ebp - 0x10], 0
je 0x1004a640
mov dword [ebp - 0x2f8], 1
jmp 0x1004a647
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x1dc], eax
jge 0x1004a66d
mov dword [ebp - 0x430], 1
jmp 0x1004a674
and dword [ebp - 0x430], 0
cmp dword [ebp - 0x430], 0xe20
jl 0x1004a68c
mov dword [ebp - 0x300], 1
jmp 0x1004a693
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x6a0]
cmp dword [ebp - 0x300], eax
jg 0x1004a6ad
mov dword [ebp - 0x5c0], 1
jmp 0x1004a6b4
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x970], eax
cmp dword [ebp - 0x1dc], 0
je 0x1004a6de
mov eax, 0x1db06d67
test eax, eax
je 0x1004a6de
mov dword [ebp - 0x308], 1
jmp 0x1004a6e5
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x518]
cmp eax, dword [ebp - 0x308]
jg 0x1004a6ff
mov dword [ebp - 0x438], 1
jmp 0x1004a706
and dword [ebp - 0x438], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x844]
cmp eax, dword [ebp - 0x438]
jne 0x1004a727
mov dword [ebp - 0x310], 1
jmp 0x1004a72e
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x120], eax
jmp 0x1004a756
mov byte [ebp - 0x92], 0
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x1004a756
push 0
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
jmp 0x1004a4fd
jmp 0x1004a2c6
mov dword [ebp - 0x78], 0
jmp 0x1004a770
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1004a786
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x780], 0x28f6c74a
jmp 0x1004a769
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x198], 0
jmp 0x1004a7ac
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x1004a7c8
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x588], 0
jmp 0x1004a79f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x588], 0
jmp 0x1004a7f6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x588]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x588], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x588], 0xfffffff3
je 0x1004a87f
mov dword [ebp - 0x100], 0xfffffff7
mov dword [ebp - 0x158], 0
jmp 0x1004a829
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jge 0x1004a845
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x630], 0
jmp 0x1004a81c
mov dword [ebp - 0x100], 0
jmp 0x1004a85e
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x1004a87a
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x630], 0x3248
jmp 0x1004a851
jmp 0x1004a7db
mov byte [ebp - 0x94], 0
movzx eax, byte [ebp - 0x94]
test eax, eax
je 0x1004a89e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
mov dword [ebp - 0x8a4], 0
mov dword [ebp - 0x788], 0xffffffff
mov dword [ebp - 0x92c], 0x51d69f42
mov dword [ebp - 0x790], 0xffffffff
mov dword [ebp - 0x8ac], 0xa1836ccb
mov dword [ebp - 0x798], 0xfffffffa
mov dword [ebp - 0x950], 0xe4b28306
mov dword [ebp - 0x318], 0xe6b
mov dword [ebp - 0x1a0], 0
jmp 0x1004a907
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x1004a923
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xa00], 0x327439cb
jmp 0x1004a8fa
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x1004a955
push 0
push 0xa40
push 0x1408
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
mov eax, dword [ebp - 0x318]
dec eax
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x458], 1
mov dword [ebp - 0x358], 0xaec2b2a8
mov dword [ebp - 0x54], 0
jmp 0x1004a986
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1004a99c
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x928], 0xf825
jmp 0x1004a97f
mov dword [ebp - 0x54], 0
jmp 0x1004a9ac
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1004a9c2
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x538], 1
jmp 0x1004a9a5
xor eax, eax
inc eax
je 0x1004a9e3
mov dword [ebp - 0x440], 0xd65121ac
mov eax, dword [ebp - 0x440]
inc eax
mov dword [ebp - 0x440], eax
jmp 0x1004addc
mov dword [ebp - 0x74], 0xb4b13281
mov dword [ebp - 0x5c8], 0x78bea8e4
mov dword [ebp - 0x74], 0xfffffff8
jmp 0x1004aa04
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffff
je 0x1004aa2b
mov byte [ebp - 0x98], 0
movzx eax, byte [ebp - 0x98]
test eax, eax
je 0x1004aa29
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
jmp 0x1004a9fd
mov dword [ebp - 0x74], 0x15
jmp 0x1004aa3b
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xfffffff8
jl 0x1004addc
mov dword [ebp - 0xe8], 0x858f9c25
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0xe8], 0x16
jmp 0x1004aa72
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xffffffff
jle 0x1004add7
mov dword [ebp - 0x1a8], 0
jmp 0x1004aa98
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x1004aab1
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x14], 0x28ed4a55
jmp 0x1004aa8b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14], 0
jmp 0x1004aad6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0x1a
jge 0x1004add2
mov dword [ebp - 0x128], 0xc924b541
mov dword [ebp - 0x128], 0xfffffff6
jmp 0x1004ab0a
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xffffffe3
jg 0x1004abcd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0x1311e2db
jle 0x1004ab33
mov dword [ebp - 0x544], 1
jmp 0x1004ab3a
and dword [ebp - 0x544], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x7a0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x14]
cmp dword [ebp + eax - 0x928], ecx
jg 0x1004ab6f
mov dword [ebp - 0x320], 1
jmp 0x1004ab76
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0xe8]
push 4
pop ecx
shl ecx, 1
mov edx, dword [ebp - 0x320]
sub edx, dword [ebp + ecx - 0x928]
sub eax, edx
cmp dword [ebp - 0x544], eax
jg 0x1004aba4
mov dword [ebp - 0x328], 1
jmp 0x1004abab
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x108], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x538], 6
jmp 0x1004aafd
mov eax, 0xa104
test eax, eax
je 0x1004acc9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x8b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x7a8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jge 0x1004ac13
mov dword [ebp - 0x448], 1
jmp 0x1004ac1a
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 0xfff6
jne 0x1004ac32
mov dword [ebp - 0x330], 1
jmp 0x1004ac39
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
add eax, 0x84a4
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x538]
jl 0x1004ac63
xor eax, eax
je 0x1004ac63
mov dword [ebp - 0x4d8], 1
jmp 0x1004ac6a
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x4d8]
jle 0x1004ac84
mov dword [ebp - 0x338], 1
jmp 0x1004ac8b
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 0xf5d3
jg 0x1004aca4
xor eax, eax
jne 0x1004aca4
and dword [ebp - 0x450], 0
jmp 0x1004acae
mov dword [ebp - 0x450], 1
imul eax, dword [ebp - 0x450], 0xfffc
cmp eax, dword [ebp - 0x74]
je 0x1004acc9
mov dword [ebp - 0x340], 1
jmp 0x1004acd0
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x340], eax
jle 0x1004acea
mov dword [ebp - 0x520], 1
jmp 0x1004acf1
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x520], 0x9ce85662
je 0x1004ad12
mov eax, 0x2dc1b2d8
test eax, eax
je 0x1004ad12
mov dword [ebp - 0x348], 1
jmp 0x1004ad19
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x458], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x538]
add ecx, dword [ebp - 0x458]
imul ecx, dword [ebp + eax - 0x538]
test ecx, ecx
ja 0x1004ad56
mov dword [ebp - 0x350], 1
jmp 0x1004ad5d
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x1004ad7f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x1004ad91
mov eax, 0xfff7
test eax, eax
jne 0x1004ad91
and dword [ebp - 0x4e0], 0
jmp 0x1004ad9b
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x128]
add eax, dword [ebp - 0x4e0]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x538]
lea eax, [eax + ecx + 0x1e1c3e23]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x5c8], eax
jmp 0x1004aac1
jmp 0x1004aa65
jmp 0x1004aa34
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x1004adf8
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
mov dword [ebp - 0xe0], 0xda115252
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x7b0], 0xffffffff
mov dword [ebp - 0x8bc], 0x51d69f42
mov dword [ebp - 0x7b8], 0xffffffff
mov dword [ebp - 0x954], 0xa1836ccb
mov dword [ebp - 0x7c0], 0xfffffffa
mov dword [ebp - 0x8c4], 0xe4b28306
mov dword [ebp - 0x460], 0xe6b
mov dword [ebp - 0x164], 0
jmp 0x1004ae6b
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x1004ae87
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0xa10], 0x327439cb
jmp 0x1004ae5e
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x1004aeb9
push 0
push 0xa40
push 0x1408
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
mov eax, dword [ebp - 0x460]
dec eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x5c], 0
jmp 0x1004aed6
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1004aeec
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x6fc], 0xfffffffc
jmp 0x1004aecf
mov dword [ebp - 0x5c], 0
jmp 0x1004aefc
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1004af12
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x9b8], 4
jmp 0x1004aef5
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0xe0], 0
jmp 0x1004af35
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jg 0x1004b1e9
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x368], 0xfffffffb
mov dword [ebp - 0x7c8], 0xc4779d44
mov dword [ebp - 0x1a4], 0
jmp 0x1004af76
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x1004af92
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x94c], 0xfcc8af95
jmp 0x1004af69
mov dword [ebp - 0x80], 0
jmp 0x1004afa2
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jg 0x1004b1d2
mov dword [ebp - 0xec], 6
mov dword [ebp - 0x7d0], 0xfffffffb
mov dword [ebp - 0x700], 0xffffffff
mov dword [ebp - 0x7d8], 9
mov dword [ebp - 0x95c], 0xfffffff8
mov dword [ebp - 0x7e0], 0xfffffffd
mov dword [ebp - 0x130], 0
jmp 0x1004b001
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x1004b01d
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0xa20], 0x7221ebc5
jmp 0x1004aff4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6fc]
mov dword [ebp - 0x8d4], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x9b8], 3
mov eax, 0xba7b7e80
add eax, 3
cmp eax, dword [ebp - 0xec]
jge 0x1004b05d
mov dword [ebp - 0x360], 1
jmp 0x1004b064
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x360]
jne 0x1004b07b
mov dword [ebp - 0x56c], 1
jmp 0x1004b082
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
sub eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x80]
mov ecx, dword [ebp + ecx*4 - 0x6fc]
sub ecx, eax
cmp ecx, dword [ebp - 0x80]
jl 0x1004b0b4
mov dword [ebp - 0x468], 1
jmp 0x1004b0bb
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0x5f27
jge 0x1004b0d3
mov dword [ebp - 0x370], 1
jmp 0x1004b0da
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0x6fc], ecx
mov dword [ebp - 0xec], 0
jmp 0x1004b106
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jg 0x1004b1cd
mov dword [ebp - 0x7e8], 0xb09b37d0
mov dword [ebp - 0x964], 0
mov dword [ebp - 0x7f0], 0x2f4e55b6
mov dword [ebp - 0x8dc], 0
mov dword [ebp - 0x7f8], 0xffffffff
mov dword [ebp - 0x958], 0x7aebb1bb
mov dword [ebp - 0x800], 0xd3709e8e
mov dword [ebp - 0x8e4], 0xe183a099
mov dword [ebp - 0x70], 0
jmp 0x1004b173
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1004b189
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x9e8], 0x705618d7
jmp 0x1004b16c
mov dword [ebp - 0x70], 0
jmp 0x1004b199
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x1004b1af
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x938], 0
jmp 0x1004b192
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x938]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x938], eax
jmp 0x1004b0f9
jmp 0x1004af9b
mov eax, dword [ebp - 0xe0]
cmp dword [ebp + eax*4 - 0x6fc], 0
je 0x1004b1e4
jmp 0x1004b1e9
jmp 0x1004af28
mov dword [ebp - 0x808], 1
mov dword [ebp - 4], 0x666a
mov dword [ebp - 0x580], 0x237ddc4e
mov dword [ebp - 0x57c], 0x237ddc4e
mov dword [ebp - 0x578], 0x237ddc4e
mov dword [ebp - 0x574], 0x237ddc4e
mov dword [ebp - 0x978], 0xb7466640
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x3b0], 0xe56b76af
mov dword [ebp - 0x490], 6
mov dword [ebp - 0x640], 0
cmp dword [ebp - 4], 0
je 0x1004b309
cmp dword [ebp - 4], 0
je 0x1004b279
cmp dword [ebp - 4], 0xbefc
jl 0x1004b279
mov dword [ebp - 0x4e8], 1
jmp 0x1004b280
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x4e8], eax
jle 0x1004b297
mov dword [ebp - 0x378], 1
jmp 0x1004b29e
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x378], eax
jl 0x1004b2b5
mov dword [ebp - 0x680], 1
jmp 0x1004b2bc
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x8ec], eax
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
cmp eax, dword [ebp - 4]
jge 0x1004b2e5
mov dword [ebp - 0x5d0], 1
jmp 0x1004b2ec
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
je 0x1004b309
mov dword [ebp - 0x638], 1
jmp 0x1004b310
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x960], eax
cmp dword [ebp - 4], 0
jne 0x1004b32e
cmp dword [ebp - 4], 0
jne 0x1004b32e
and dword [ebp - 0x470], 0
jmp 0x1004b338
mov dword [ebp - 0x470], 1
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x470]
cmp eax, 0x5205300c
jg 0x1004b362
mov eax, 0x97867a7b
test eax, eax
je 0x1004b362
xor eax, eax
inc eax
je 0x1004b362
mov dword [ebp - 0x380], 1
jmp 0x1004b369
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x380]
test eax, eax
je 0x1004b3ce
mov dword [ebp - 0x5d8], 0x9ebef9f3
mov dword [ebp - 0x16c], 0
jmp 0x1004b39a
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 4
jge 0x1004b3b6
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x9f8], 1
jmp 0x1004b38d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9f8]
mov dword [ebp - 0x5d8], eax
jmp 0x1004b755
mov dword [ebp - 0x820], 0xe27dfdee
mov dword [ebp - 0x8f4], 7
mov dword [ebp - 0x828], 0x795bcd59
mov dword [ebp - 0x988], 8
mov dword [ebp - 0x830], 0x4db59fb1
mov dword [ebp - 0x870], 0xfffffff9
mov dword [ebp - 0x83c], 0
mov dword [ebp - 0x878], 0
mov dword [ebp - 0x64], 0
jmp 0x1004b42e
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1004b444
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x948], 0xc77e2192
jmp 0x1004b427
mov dword [ebp - 0x64], 0
jmp 0x1004b454
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1004b46a
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x848], 1
jmp 0x1004b44d
mov dword [ebp - 4], 0
jmp 0x1004b47a
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x1004b748
mov dword [ebp - 0xf4], 4
mov dword [ebp - 0x5ac], 0x497a847e
mov dword [ebp - 0xf4], 0xfffffffc
jmp 0x1004b4b1
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 9
jle 0x1004b743
mov dword [ebp - 0x1e4], 1
mov dword [ebp - 0x18c], 0
jmp 0x1004b4e1
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 4
jge 0x1004b4fd
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x218], 0x2be2ff5
jmp 0x1004b4d4
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x218], 0
jmp 0x1004b52b
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x218]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x218], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x218], 5
jl 0x1004b658
mov dword [ebp - 0x478], 0xc710
mov dword [ebp - 0x6b0], 0xd9132e88
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x218]
cmp dword [ebp + eax - 0x218], ecx
jl 0x1004b5fc
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x218]
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x854], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x948]
mov dword [ebp - 0x888], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x218]
add eax, dword [ebp - 4]
jne 0x1004b5c5
mov eax, 0xffff
test eax, eax
jne 0x1004b5c5
and dword [ebp - 0x528], 0
jmp 0x1004b5cf
mov dword [ebp - 0x528], 1
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x528], eax
je 0x1004b5e9
mov dword [ebp - 0x388], 1
jmp 0x1004b5f0
and dword [ebp - 0x388], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x948]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x218]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0x478], eax
jle 0x1004b629
mov dword [ebp - 0x1c0], 1
jmp 0x1004b630
and dword [ebp - 0x1c0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp + eax - 0x580], ecx
mov eax, 0xdbb7a2e2
sub eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1e4], eax
jmp 0x1004b510
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x580]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xfffffff9
jle 0x1004b67f
mov dword [ebp - 0x390], 1
jmp 0x1004b686
and dword [ebp - 0x390], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x218]
dec eax
cmp dword [ebp - 0x390], eax
jl 0x1004b6a8
mov dword [ebp - 0x4f0], 1
jmp 0x1004b6af
and dword [ebp - 0x4f0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x218]
cmp dword [ebp - 0x4f0], eax
jl 0x1004b6d0
mov dword [ebp - 0x398], 1
jmp 0x1004b6d7
and dword [ebp - 0x398], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x218]
cmp dword [ebp - 0x398], eax
je 0x1004b6f8
mov dword [ebp - 0x480], 1
jmp 0x1004b6ff
and dword [ebp - 0x480], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x218]
mov ecx, dword [ebp - 0x480]
add ecx, 0x6cbc8ca9
add eax, ecx
cmp eax, 0xfffffff7
jle 0x1004b72b
mov dword [ebp - 0x3a0], 1
jmp 0x1004b732
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x5ac], eax
jmp 0x1004b4a4
jmp 0x1004b473
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x580], 0
je 0x1004b874
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x88]
cmp dword [ebp + eax - 0x580], ecx
jne 0x1004b789
mov dword [ebp - 0x54c], 1
jmp 0x1004b790
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0x7d4e0d3b
jle 0x1004b7a8
mov dword [ebp - 0x3a8], 1
jmp 0x1004b7af
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x3a8], eax
je 0x1004b7c9
mov dword [ebp - 0x488], 1
jmp 0x1004b7d0
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x488], eax
jg 0x1004b7f6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x580], 0
jne 0x1004b7f6
and dword [ebp - 0x4f8], 0
jmp 0x1004b800
mov dword [ebp - 0x4f8], 1
mov eax, dword [ebp - 0x88]
neg eax
mov ecx, dword [ebp - 0x88]
mov edx, dword [ebp - 0x3b0]
add edx, dword [ebp - 0x4f8]
sub ecx, edx
mov edx, 0xffff
sub edx, ecx
imul eax, edx
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x580], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x88], eax
jle 0x1004b84c
mov dword [ebp - 0x3b8], 1
jmp 0x1004b853
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0
je 0x1004b874
mov dword [ebp - 0x3c0], 1
jmp 0x1004b87b
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x3c], 0x43cdf98a
mov dword [ebp - 0x530], 0x25d2d915
mov dword [ebp - 0xd4], 0x1874da86
mov dword [ebp - 0x174], 0
jmp 0x1004b8bb
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jge 0x1004b8d7
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x568], 0xc93b4e1a
jmp 0x1004b8ae
mov dword [ebp - 0x3c], 0
jmp 0x1004b8e7
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jg 0x1004ba20
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x1004b90e
push 0x263
call dword [sym.imp.GDI32.dll_GetStockObject]
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x568], 0
je 0x1004b937
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x568], 0
je 0x1004b937
mov dword [ebp - 0x500], 1
jmp 0x1004b93e
and dword [ebp - 0x500], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x568]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x530]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x568]
dec ecx
sub eax, ecx
mov ecx, dword [ebp - 0x3c]
cmp eax, dword [ebp + ecx*4 - 0x568]
jl 0x1004b97e
mov dword [ebp - 0x3c8], 1
jmp 0x1004b985
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x568]
cmp eax, dword [ebp - 0x3c8]
jle 0x1004b9a3
mov dword [ebp - 0x498], 1
jmp 0x1004b9aa
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 9
jae 0x1004b9bf
mov dword [ebp - 0x3d0], 1
jmp 0x1004b9c6
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3d0]
sub ecx, dword [ebp + eax*4 - 0x568]
cmp dword [ebp - 0x500], ecx
jge 0x1004b9ea
mov dword [ebp - 0x244], 1
jmp 0x1004b9f1
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x244], eax
jle 0x1004ba08
mov dword [ebp - 0x23c], 1
jmp 0x1004ba0f
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0xd4], eax
jmp 0x1004b8e0
mov dword [ebp - 0xd4], 0
jmp 0x1004ba39
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x1004ba55
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x568], 0
jmp 0x1004ba2c
mov dword [ebp - 0x860], 0x56915a13
mov dword [ebp - 0x19c], 0xe75d5f8d
mov dword [ebp - 0x40], 0
jmp 0x1004ba79
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1004ba8f
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x66c], 0xffff
jmp 0x1004ba72
mov dword [ebp - 0x40], 0
jmp 0x1004ba9f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x1004bab5
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x5a8], 0xe83c773
jmp 0x1004ba98
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x5a8], 2
jmp 0x1004bae3
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x5a8]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x5a8], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x5a8], 0
jl 0x1004bb52
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x1004bb25
push 0
push 0x5a6
push 0
push 0x246d
push 0x1cbd
push 0
push 0x24f3
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x5a8]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x5a8]
mov eax, dword [ebp + eax*4 - 0x66c]
mov dword [ebp + ecx*4 - 0x66c], eax
jmp 0x1004bac8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x66c]
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x19c], 0xd3bb8a12
je 0x1004bb7c
mov dword [ebp - 0x5e8], 1
jmp 0x1004bb83
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x19c], 0xffffffff
jne 0x1004bba4
mov dword [ebp - 0x25c], 1
jmp 0x1004bbab
and dword [ebp - 0x25c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5a8]
mov dword [ebp - 0x254], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x254]
mov dword [ebp + eax - 0x5a8], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x66c]
sub eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0x25c]
jne 0x1004bbf7
mov dword [ebp - 0x264], 1
jmp 0x1004bbfe
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
add eax, 0x5034859b
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x66c]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x648], 0xe434392f
mov dword [ebp - 0x714], 0
mov dword [ebp - 0xc], 0
jmp 0x1004bc41
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x1004bc57
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x67c], 0x9841b3c6
jmp 0x1004bc3a
mov dword [ebp - 0xc], 0
jmp 0x1004bc67
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x1004bc7d
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x90], 0x1cecb457
jmp 0x1004bc60
mov dword [ebp - 0xc], 0
jmp 0x1004bc8d
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x1004bca3
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x5f0], 0xa0c8d467
jmp 0x1004bc86
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x90], 0
jmp 0x1004bcd1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x90], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x90], 2
jg 0x1004be5d
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x284], 0xfff8
mov dword [ebp - 0x690], 0xffffffff
mov dword [ebp - 0x24], 2
jmp 0x1004bd10
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1004bd95
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
mov eax, dword [ebp + eax*4 - 0x67c]
mov dword [ebp - 0x26c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
mov ecx, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x67c], ecx
cmp dword [ebp - 0x26c], 0
je 0x1004bd6c
mov dword [ebp - 0x274], 6
mov eax, dword [ebp - 0x274]
dec eax
mov dword [ebp - 0x274], eax
jmp 0x1004bd85
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp + eax*4 - 0x67c], 0
je 0x1004bd85
jmp 0x1004bd95
cmp dword [ebp - 0x284], 0
je 0x1004bd90
jmp 0x1004bd95
jmp 0x1004bd09
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x1004bdbb
push 0
push 0x66e
push 0x1140
push 0
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
mov dword [ebp - 0x24], 2
jmp 0x1004bdcb
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1004be58
mov dword [ebp - 0x28c], 0xffffffff
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x67c]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x67c], ecx
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x690], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x28c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
imul eax, dword [ebp - 0x28c]
mov dword [ebp - 0x294], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x294]
mov dword [ebp + eax - 0x5f0], ecx
push 6
pop eax
sub eax, dword [ebp - 0x294]
mov dword [ebp - 0x648], eax
jmp 0x1004bdc4
jmp 0x1004bcb6
mov dword [ebp - 0x71c], 0x99ac
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x29c], 1
mov dword [ebp - 0x48], 0
jmp 0x1004be8b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1004bea1
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x9d0], 0
jmp 0x1004be84
mov dword [ebp - 0x48], 0
jmp 0x1004beb1
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1004bec7
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xa18], 0xd19ac196
jmp 0x1004beaa
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0xfc], 0
jmp 0x1004beed
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x1004bf09
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x9d0], 0
jmp 0x1004bee0
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x600], 6
mov dword [ebp - 0x17c], 0
jmp 0x1004bf33
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x1004bf4f
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x724], 0
jmp 0x1004bf26
mov dword [ebp - 0x2c], 0
jmp 0x1004bf5f
cmp dword [ebp - 0x2c], 1
jne 0x1004c10f
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0x2cc], 1
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x73c], eax
cmp dword [ebp - 0x2c], 0xffffffff
je 0x1004bfb0
mov dword [ebp - 0x5f8], 1
jmp 0x1004bfb7
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0xbc], 0
je 0x1004bfda
or eax, 0xffffffff
je 0x1004bfda
mov dword [ebp - 0x2a4], 1
jmp 0x1004bfe1
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2a4], eax
jge 0x1004bff8
mov dword [ebp - 0x2ac], 1
jmp 0x1004bfff
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0xfffffff8
jle 0x1004c014
mov dword [ebp - 0x2b4], 1
jmp 0x1004c01b
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 0
ja 0x1004c030
mov dword [ebp - 0x2bc], 1
jmp 0x1004c037
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2bc], eax
jne 0x1004c04e
mov dword [ebp - 0x2c4], 1
jmp 0x1004c055
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x2c4]
je 0x1004c06f
mov dword [ebp - 0x694], 1
jmp 0x1004c076
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x74c], eax
or eax, 0xffffffff
jne 0x1004c08d
cmp dword [ebp - 0x2cc], 0
je 0x1004c0be
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1004c0bc
push 0x99a
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
jmp 0x1004c0dc
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1004c0dc
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov dword [ebp - 0xbc], 5
jmp 0x1004c0f5
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1004c135
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndDoc]
mov dword [ebp - 0x754], 0xebf0
mov dword [ebp - 0x75c], 0x80eec299
mov dword [ebp - 0x524], 0xc4dd
mov dword [ebp - 0x764], 0xfffffffa
mov dword [ebp - 0x2d4], 1
mov dword [ebp - 0x194], 0
jmp 0x1004c180
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x1004c19c
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0xa08], 0x7c7ce53d
jmp 0x1004c173
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x1004c1c6
push 0x420
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [ebp - 0x50], 0
jmp 0x1004c1d6
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1004c1ec
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x234], 0xfffffffc
jmp 0x1004c1cf
mov dword [ebp - 0x50], 0
jmp 0x1004c1fc
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1004c212
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x6cc], 0x9849b76e
jmp 0x1004c1f5
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x234], 0
jmp 0x1004c240
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x234], 0xfffffff7
jg 0x1004c491
mov dword [ebp - 0x15c], 0xc4d1454b
mov dword [ebp - 0x76c], 0xfffffffe
mov dword [ebp - 0x314], 0x16e289aa
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x234]
mov dword [ebp - 0x774], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x234]
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x784], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x6cc]
cmp dword [ebp + eax - 0x6cc], ecx
jg 0x1004c2ca
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x1004c4a9