Function at 0x1004c6d8
Capabilities:
Compare security identifiers
Get file size
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008267d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x8a0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x124], 0x9310c13f
mov dword [ebp - 0x16c], 1
mov dword [ebp - 0x48c], 0x7d757520
mov dword [ebp - 0xd0], 0xe17c927d
cmp dword [ebp - 0x18], 0
je 0x1004c75a
push 4
pop eax
test eax, eax
jne 0x1004c768
xor eax, eax
inc eax
jne 0x1004c768
and dword [ebp - 0x3c0], 0
jmp 0x1004c772
mov dword [ebp - 0x3c0], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x3c0]
jne 0x1004c789
mov dword [ebp - 0x220], 1
jmp 0x1004c790
and dword [ebp - 0x220], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x220]
mov dword [ebp + eax - 0x21c], ecx
cmp dword [ebp - 0x220], 1
jle 0x1004c7b8
mov dword [ebp - 0x4fc], 1
jmp 0x1004c7bf
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x4fc], eax
jne 0x1004c7d6
mov dword [ebp - 0x504], 1
jmp 0x1004c7dd
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x504], eax
jle 0x1004c7f4
mov dword [ebp - 0x50c], 1
jmp 0x1004c7fb
and dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 0xe46c2e7c
jae 0x1004c813
mov dword [ebp - 0x514], 1
jmp 0x1004c81a
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x18], 0
jmp 0x1004c836
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x1004cb3f
mov dword [ebp - 0x12c], 6
mov dword [ebp - 0x1cc], 0xafd77ccc
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x21c], 0x66e9
jge 0x1004c870
mov dword [ebp - 0x464], 1
jmp 0x1004c877
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x21c], 0
je 0x1004c899
mov eax, 0xf4ea
test eax, eax
je 0x1004c899
mov dword [ebp - 0x534], 1
jmp 0x1004c8a0
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x124]
add ecx, dword [ebp - 0x534]
cmp dword [ebp + eax*4 - 0x21c], ecx
jle 0x1004c8c4
mov dword [ebp - 0x2c0], 1
jmp 0x1004c8cb
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x464], eax
je 0x1004c8f1
mov dword [ebp - 0x238], 1
jmp 0x1004c8f8
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x238]
sub ecx, dword [ebp + eax - 0x21c]
sub ecx, dword [ebp - 0x1cc]
cmp ecx, 2
jne 0x1004c943
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1004c93e
push 0
push 0
push 0x1cc8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x1004ca3a
mov dword [ebp - 0x474], 0x3e5c
mov dword [ebp - 0x248], 0xc75b167d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x21c], 0
jne 0x1004ca12
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x728], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x21c], 0
jne 0x1004c992
cmp dword [ebp - 0x16c], 0
jne 0x1004c992
and dword [ebp - 0x46c], 0
jmp 0x1004c99c
mov dword [ebp - 0x46c], 1
mov eax, dword [ebp - 0x16c]
imul eax, dword [ebp - 0x46c]
mov dword [ebp - 0x240], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x240]
mov dword [ebp + eax - 0x21c], ecx
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x6f0], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x6f8], eax
mov eax, 0xbc46d767
test eax, eax
je 0x1004c9f3
cmp dword [ebp - 0x1cc], 0
je 0x1004c9f3
cmp dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
mov dword [ebp - 0x48c], 0
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x1004ca3a
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UnionRect]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x21c], 0
jne 0x1004ca56
mov dword [ebp - 0x258], 1
jmp 0x1004ca5d
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x21c]
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x18], 0
je 0x1004ca86
push 9
pop eax
test eax, eax
je 0x1004ca86
mov dword [ebp - 0x47c], 1
jmp 0x1004ca8d
and dword [ebp - 0x47c], 0
cmp dword [ebp - 0x47c], 9
jne 0x1004caa2
mov dword [ebp - 0x250], 1
jmp 0x1004caa9
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x708], eax
cmp dword [ebp - 0x12c], 0
jge 0x1004cad0
mov dword [ebp - 0x484], 1
jmp 0x1004cad7
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0x21c]
add ecx, dword [ebp - 0x484]
sub eax, ecx
cmp dword [ebp - 0x258], eax
jg 0x1004cb2f
mov dword [ebp - 0xd0], 0
jmp 0x1004cb10
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jg 0x1004cb2d
mov eax, dword [ebp - 0xd0]
cmp dword [ebp + eax*4 - 0x21c], 0
je 0x1004cb2b
jmp 0x1004cb2d
jmp 0x1004cb03
jmp 0x1004cb3a
cmp dword [ebp - 0x48c], 0
je 0x1004cb3a
jmp 0x1004cb3f
jmp 0x1004c82f
mov dword [ebp - 0x174], 0x462d5e48
mov dword [ebp - 0x268], 0x1d102278
mov dword [ebp - 0x174], 0
jmp 0x1004cb6c
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xd
jle 0x1004cf47
push 1
lea ecx, [ebp - 0x544]
call fcn.10017c5d
and dword [ebp - 4], 0
mov dword [ebp - 0x34], 0
jmp 0x1004cb9a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1004cbb6
push dword [ebp - 0x34]
lea ecx, [ebp - 0x544]
call fcn.10017cfb
mov dword [eax], 0x5683
jmp 0x1004cb93
mov dword [ebp - 0x34], 0
jmp 0x1004cbc6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1004cbdc
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xd8], 0xffffffff
jmp 0x1004cbbf
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd8], 0
jmp 0x1004cc0a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd8], 0
jg 0x1004cf33
mov dword [ebp - 0xf0], 0xfffffffd
mov dword [ebp - 0x568], 0x9405dbd5
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf0], 0
jmp 0x1004cc55
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x1004cef6
mov dword [ebp - 0x134], 0xb8f5f499
mov dword [ebp - 0x560], 0xfc72fa5d
mov dword [ebp - 0x134], 0
jmp 0x1004cc8f
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jg 0x1004ced9
mov dword [ebp - 0xec], 0x5fac1226
mov dword [ebp - 0xec], 0
jmp 0x1004ccbf
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x1004ced4
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x570], 1
mov dword [ebp - 0x8c], 0
jmp 0x1004ccf9
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x1004cecf
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x544]
call fcn.10017cfb
mov dword [ebp - 0x260], eax
push dword [ebp - 0xec]
lea ecx, [ebp - 0x544]
call fcn.10017cfb
mov ecx, dword [ebp - 0x260]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x260]
cmp dword [eax], 0xfffffff7
jne 0x1004cd4f
mov dword [ebp - 0x494], 1
jmp 0x1004cd56
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0xec], 0x2f3d4794
jne 0x1004cd7a
mov dword [ebp - 0x4b4], 1
jmp 0x1004cd81
and dword [ebp - 0x4b4], 0
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x544]
call fcn.10017cfb
cmp dword [eax], 0
jle 0x1004cda3
mov dword [ebp - 0x49c], 1
jmp 0x1004cdaa
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x268]
cmp eax, dword [ebp - 0x49c]
jne 0x1004cdc4
mov dword [ebp - 0x270], 1
jmp 0x1004cdcb
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
sub eax, 0x40c9ba5b
cmp eax, 0x20410224
jne 0x1004cde9
mov dword [ebp - 0x4a4], 1
jmp 0x1004cdf0
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0xa98ceef
jg 0x1004ce08
mov dword [ebp - 0x278], 1
jmp 0x1004ce0f
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
sub eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0x8c]
jge 0x1004ce2f
mov dword [ebp - 0x4ac], 1
jmp 0x1004ce36
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x4ac], 1
je 0x1004ce4b
mov dword [ebp - 0x280], 1
jmp 0x1004ce52
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x568]
cmp dword [ebp - 0x280], eax
jl 0x1004ce8c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd8], 0
je 0x1004ce8c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd8], 0
je 0x1004ce8c
mov dword [ebp - 0x288], 1
jmp 0x1004ce93
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x4b4]
cmp eax, dword [ebp - 0x288]
jl 0x1004cead
mov dword [ebp - 0x4bc], 1
jmp 0x1004ceb4
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x570], eax
mov dword [ebp - 0xf8], 0
jmp 0x1004ccec
jmp 0x1004ccb2
jmp 0x1004cc82
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x544]
call fcn.10017cfb
cmp dword [eax], 0
je 0x1004cef1
jmp 0x1004cef6
jmp 0x1004cc48
mov dword [ebp - 0xf8], 0
jmp 0x1004cf0f
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x1004cf2e
mov dword [ebp - 0x578], 0x94a737b7
mov dword [ebp - 0x578], 0x23988f15
jmp 0x1004cf02
jmp 0x1004cbef
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x544]
call fcn.10017cdf
jmp 0x1004cb5f
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1004cf63
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x580], 0
mov dword [ebp - 0x734], 0x23b1a956
mov dword [ebp - 0x588], 2
mov dword [ebp - 0x290], 0
mov dword [ebp - 0xe8], 8
push 1
lea ecx, [ebp - 0x614]
call fcn.10017c5d
mov dword [ebp - 4], 1
mov dword [ebp - 0x73c], 0xffffffff
mov dword [ebp - 0x744], 0x7c7ab89b
mov dword [ebp - 0x1ec], 3
mov dword [ebp - 0x74c], 1
and dword [ebp - 0x680], 0
and dword [ebp - 0x67c], 0
and dword [ebp - 0x678], 0
and dword [ebp - 0x674], 0
lea ecx, [ebp - 0x1e5]
call fcn.10008ad3
push eax
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x680]
push eax
lea ecx, [ebp - 0x890]
call fcn.10017d0a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7ac]
call fcn.10017cb9
mov byte [ebp - 4], 2
mov dword [ebp - 0x17c], 0
jmp 0x1004d046
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x1004d068
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x614]
call fcn.10017cfb
mov dword [eax], 0xfffffff8
jmp 0x1004d039
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x290], 0x27a4
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0x1ec], eax
jg 0x1004d0f1
push 5
pop eax
test eax, eax
je 0x1004d0a9
cmp dword [ebp - 0x580], 0
je 0x1004d0a9
mov dword [ebp - 0x4c4], 1
jmp 0x1004d0b0
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x588]
cmp dword [ebp - 0x4c4], eax
je 0x1004d0ca
mov dword [ebp - 0x298], 1
jmp 0x1004d0d1
and dword [ebp - 0x298], 0
push 0
lea ecx, [ebp - 0x614]
call fcn.10017cfb
mov ecx, dword [ebp - 0x298]
cmp ecx, dword [eax]
jg 0x1004d0f1
and dword [ebp - 0x590], 0
jmp 0x1004d0fb
mov dword [ebp - 0x590], 1
cmp dword [ebp - 0xe8], 0
je 0x1004d122
push 0
lea ecx, [ebp - 0x614]
call fcn.10017cfb
cmp dword [eax], 0
je 0x1004d122
mov dword [ebp - 0x4cc], 1
jmp 0x1004d129
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe8], 0
jmp 0x1004d14e
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x1004d1d0
mov dword [ebp - 0x754], 0xfffffff7
mov dword [ebp - 0x75c], 0x8af95342
mov dword [ebp - 0x764], 0x477ae271
mov dword [ebp - 0x76c], 0x2f4e55b6
mov dword [ebp - 0x774], 0xffffffff
mov dword [ebp - 0x77c], 0
mov dword [ebp - 0x784], 7
mov dword [ebp - 0x78c], 1
push 0
lea ecx, [ebp - 0x7ac]
call fcn.10017cfb
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2a0]
mov dword [ecx], eax
jmp 0x1004d141
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7ac]
call fcn.10017cdf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x614]
call fcn.10017cdf
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x794], 0xe48d327c
mov dword [ebp - 0x79c], 0xfffffffd
push 3
lea ecx, [ebp - 0x7bc]
call fcn.10017c5d
mov dword [ebp - 4], 3
mov dword [ebp - 0x834], 0x6e7f737a
mov dword [ebp - 0x4d4], 7
mov dword [ebp - 0x13c], 0
jmp 0x1004d26b
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x1004d28d
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x7bc]
call fcn.10017cfb
mov dword [eax], 1
jmp 0x1004d25e
mov eax, dword [ebp - 0x4d4]
dec eax
mov dword [ebp - 0x4d4], eax
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x1004d2c0
push 0
push 0x1755
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7bc]
call fcn.10017cdf
mov dword [ebp - 0x198], 0x9310c13f
mov dword [ebp - 0x94], 0x49c9fb37
mov dword [ebp - 0x10c], 5
mov dword [ebp - 0x144], 0x1aedf47f
push 3
lea ecx, [ebp - 0x6bc]
call fcn.10017c5d
mov dword [ebp - 4], 4
mov dword [ebp - 0x83c], 0
mov dword [ebp - 0x38], 0
jmp 0x1004d325
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1004d33b
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x524], 1
jmp 0x1004d31e
mov dword [ebp - 0x38], 0
jmp 0x1004d34b
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1004d367
push dword [ebp - 0x38]
lea ecx, [ebp - 0x6bc]
call fcn.10017cfb
mov dword [eax], 0xd571e957
jmp 0x1004d344
cmp dword [ebp - 0x94], 1
jl 0x1004d424
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x94], 1
je 0x1004d395
mov dword [ebp - 0x2a8], 1
jmp 0x1004d39c
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x94], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x524]
cmp dword [ebp - 0x94], eax
jle 0x1004d3c9
mov dword [ebp - 0x4dc], 1
jmp 0x1004d3d0
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0x91df82d8
ja 0x1004d3e8
mov dword [ebp - 0x2b0], 1
jmp 0x1004d3ef
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 0xffff
jae 0x1004d407
mov dword [ebp - 0x4e4], 1
jmp 0x1004d40e
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x4e4]
add eax, 0x5b6478c3
jne 0x1004d424
and dword [ebp - 0x598], 0
jmp 0x1004d42e
mov dword [ebp - 0x598], 1
mov eax, 0x4292
add eax, 0xeba4
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x524]
jle 0x1004d459
cmp dword [ebp - 0x94], 0
jne 0x1004d459
and dword [ebp - 0x2b8], 0
jmp 0x1004d463
mov dword [ebp - 0x2b8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp + eax - 0x524], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x524], 0
je 0x1004d704
mov dword [ebp - 0x4a0], 0xfffffffa
mov dword [ebp - 0x6cc], 0
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0x6c4], 0
mov dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x4ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4ec]
mov dword [ebp + eax - 0x524], ecx
cmp dword [ebp - 0x4ec], 0
je 0x1004d585
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x524], 0
jne 0x1004d514
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x524], 0xa5fc
jle 0x1004d514
and dword [ebp - 0x4f4], 0
jmp 0x1004d51e
mov dword [ebp - 0x4f4], 1
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x4f4], eax
jge 0x1004d538
mov dword [ebp - 0x400], 1
jmp 0x1004d53f
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0xfffffffd
ja 0x1004d554
mov dword [ebp - 0x1d4], 1
jmp 0x1004d55b
and dword [ebp - 0x1d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x524], ecx
mov eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x144]
test eax, eax
jne 0x1004d597
cmp dword [ebp - 0x10c], 0
jne 0x1004d597
and dword [ebp - 0x2c8], 0
jmp 0x1004d5a1
mov dword [ebp - 0x2c8], 1
mov eax, dword [ebp - 0x4a0]
cmp dword [ebp - 0x2c8], eax
jg 0x1004d5c4
mov eax, 0x7c7a5019
test eax, eax
je 0x1004d5c4
mov dword [ebp - 0x2d0], 1
jmp 0x1004d5cb
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x4a0]
cmp dword [ebp - 0x2d0], eax
jle 0x1004d5e5
mov dword [ebp - 0x408], 1
jmp 0x1004d5ec
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x408], eax
jge 0x1004d606
mov dword [ebp - 0x2d8], 1
jmp 0x1004d60d
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x2d8]
jge 0x1004d627
mov dword [ebp - 0x4f0], 1
jmp 0x1004d62e
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x4f0], 0
je 0x1004d643
mov dword [ebp - 0x2e0], 1
jmp 0x1004d64a
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0
jg 0x1004d65f
mov dword [ebp - 0x410], 1
jmp 0x1004d666
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x410], eax
jle 0x1004d680
mov dword [ebp - 0x2e8], 1
jmp 0x1004d687
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0x203f
jg 0x1004d6a5
mov eax, 0x5eb5a40a
test eax, eax
jne 0x1004d6a5
and dword [ebp - 0x4a8], 0
jmp 0x1004d6af
mov dword [ebp - 0x4a8], 1
cmp dword [ebp - 0x4a8], 0xfffffffc
jge 0x1004d6c4
mov dword [ebp - 0x2f0], 1
jmp 0x1004d6cb
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x2f0], eax
jg 0x1004d6e5
mov dword [ebp - 0x418], 1
jmp 0x1004d6ec
and dword [ebp - 0x418], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x418]
mov dword [ebp + eax - 0x6cc], ecx
jmp 0x1004d7a7
mov dword [ebp - 0x84c], 1
mov dword [ebp - 0x854], 0x7311ebc8
mov dword [ebp - 0x20c], 0xfffffff7
mov dword [ebp - 0x184], 0
jmp 0x1004d73b
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x1004d757
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x87c], 0xba8b036c
jmp 0x1004d72e
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x87c]
sub eax, dword [ebp - 0x144]
cmp dword [ebp - 0x20c], eax
jne 0x1004d78b
mov dword [ebp - 0x2f8], 1
jmp 0x1004d792
and dword [ebp - 0x2f8], 0
push 1
lea ecx, [ebp - 0x6bc]
call fcn.10017cfb
mov ecx, dword [ebp - 0x2f8]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6bc]
call fcn.10017cdf
mov dword [ebp - 0x1b0], 1
push 2
lea ecx, [ebp - 0x62c]
call fcn.10017c5d
mov dword [ebp - 4], 5
mov dword [ebp - 0xe0], 0xfffffff8
mov dword [ebp - 0x5a0], 0xbb4aad9d
mov dword [ebp - 0x85c], 0xc3837ace
mov dword [ebp - 0x1dc], 0x365d
mov dword [ebp - 0x3c], 0
jmp 0x1004d80c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1004d828
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x62c]
call fcn.10017cfb
mov dword [eax], 0x98a8
jmp 0x1004d805
mov dword [ebp - 0x3c], 0
jmp 0x1004d838
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1004d84e
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x714], 0xfffffff7
jmp 0x1004d831
mov dword [ebp - 0xe0], 1
jmp 0x1004d867
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x1004d9c9
mov dword [ebp - 0x564], 0xfc4b03e3
mov dword [ebp - 0x828], 0x3dda37bb
mov dword [ebp - 0x720], 0xe82ca968
mov dword [ebp - 0x5e8], 7
mov dword [ebp - 0x860], 0xfffffffb
mov dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x1dc]
inc ecx
mov dword [ebp - 0x1dc], ecx
test eax, eax
jne 0x1004d8d9
mov eax, 0x1c3f
test eax, eax
jne 0x1004d8d9
and dword [ebp - 0x300], 0
jmp 0x1004d8e3
mov dword [ebp - 0x300], 1
mov eax, 0x42bb
test eax, eax
je 0x1004d93b
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x790], eax
push 1
lea ecx, [ebp - 0x62c]
call fcn.10017cfb
mov eax, dword [ebp - 0x5e8]
cmp dword [ebp - 0xe0], eax
jle 0x1004d91f
mov dword [ebp - 0x518], 1
jmp 0x1004d926
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 0
je 0x1004d93b
mov dword [ebp - 0x420], 1
jmp 0x1004d942
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x300]
cmp eax, dword [ebp - 0x420]
jge 0x1004d95c
mov dword [ebp - 0x5cc], 1
jmp 0x1004d963
and dword [ebp - 0x5cc], 0
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x62c]
call fcn.10017cfb
mov ecx, dword [ebp - 0x564]
cmp dword [eax], ecx
jne 0x1004d98a
mov dword [ebp - 0x308], 1
jmp 0x1004d991
and dword [ebp - 0x308], 0
mov eax, 0x693e
sub eax, dword [ebp - 0x308]
je 0x1004d9aa
mov dword [ebp - 0x4b0], 1
jmp 0x1004d9b1
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp + eax - 0x714], ecx
jmp 0x1004d85a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x62c]
call fcn.10017cdf
mov dword [ebp - 0x41c], 0x7d757520
mov dword [ebp - 0xdc], 0xe17c927d
cmp dword [ebp - 0x14], 0
je 0x1004d9f9
push 4
pop eax
test eax, eax
jne 0x1004da07
xor eax, eax
inc eax
jne 0x1004da07
and dword [ebp - 0x310], 0
jmp 0x1004da11
mov dword [ebp - 0x310], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x310]
jne 0x1004da28
mov dword [ebp - 0x200], 1
jmp 0x1004da2f
and dword [ebp - 0x200], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x200]
mov dword [ebp + eax - 0x1fc], ecx
cmp dword [ebp - 0x200], 1
jle 0x1004da57
mov dword [ebp - 0x428], 1
jmp 0x1004da5e
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x428], eax
jne 0x1004da75
mov dword [ebp - 0x318], 1
jmp 0x1004da7c
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x318], eax
jle 0x1004da93
mov dword [ebp - 0x4f8], 1
jmp 0x1004da9a
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0x4f8], 0xe46c2e7c
jae 0x1004dab2
mov dword [ebp - 0x320], 1
jmp 0x1004dab9
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x14], 0
jmp 0x1004dad5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x1004fc71
mov dword [ebp - 0x74], 0x2c03342e
mov dword [ebp - 0x74], 0
jmp 0x1004daf6
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x13
jge 0x1004db57
mov dword [ebp - 0x18c], 0x38ecf54c
mov dword [ebp - 0x6e4], 8
mov dword [ebp - 0x820], 0
mov dword [ebp - 0x18c], 0x16
jmp 0x1004db33
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xffffffec
je 0x1004db55
mov dword [ebp - 0x430], 0x8cccddd
mov eax, dword [ebp - 0x430]
dec eax
mov dword [ebp - 0x430], eax
jmp 0x1004db26
jmp 0x1004daef
mov dword [ebp - 0x74], 0
jmp 0x1004db67
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xf
je 0x1004db91
mov byte [ebp - 0x7e], 0
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x1004db8f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x1004db60
mov dword [ebp - 0x190], 6
mov dword [ebp - 0x1d0], 0xafd77ccc
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x1fc], 0x66e9
jge 0x1004dbc1
mov dword [ebp - 0x330], 1
jmp 0x1004dbc8
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x1fc], 0
je 0x1004dbea
mov eax, 0xf4ea
test eax, eax
je 0x1004dbea
mov dword [ebp - 0x328], 1
jmp 0x1004dbf1
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x198]
add ecx, dword [ebp - 0x328]
cmp dword [ebp + eax*4 - 0x1fc], ecx
jle 0x1004dc15
mov dword [ebp - 0x4b8], 1
jmp 0x1004dc1c
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x330], eax
je 0x1004dc42
mov dword [ebp - 0x438], 1
jmp 0x1004dc49
and dword [ebp - 0x438], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x438]
sub ecx, dword [ebp + eax - 0x1fc]
sub ecx, dword [ebp - 0x1d0]
cmp ecx, 2
jne 0x1004e2a9
mov dword [ebp - 0x10], 0xb674
mov dword [ebp - 0x104], 0xd10caad9
mov dword [ebp - 0x4c], 0
jmp 0x1004dc8c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1004dc9f
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x20], 0x1a652065
jmp 0x1004dc85
mov dword [ebp - 0x4c], 0
jmp 0x1004dcaf
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1004dcc5
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x348], 0xfffffffb
jmp 0x1004dca8
cmp dword [ebp - 0x10], 0x46b6eb6b
jne 0x1004dd9d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x10], eax
jl 0x1004dced
mov dword [ebp - 0x338], 1
jmp 0x1004dcf4
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 0
jg 0x1004dd09
mov dword [ebp - 0x56c], 1
jmp 0x1004dd10
and dword [ebp - 0x56c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x5e4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5e4]
mov dword [ebp + eax - 0x20], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x10]
sub eax, 6
xor ecx, ecx
inc ecx
sub ecx, eax
jne 0x1004dd5c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
jne 0x1004dd5c
and dword [ebp - 0x52c], 0
jmp 0x1004dd66
mov dword [ebp - 0x52c], 1
mov eax, dword [ebp - 0x52c]
sub eax, dword [ebp - 0x10]
jne 0x1004dd7d
mov dword [ebp - 0x340], 1
jmp 0x1004dd84
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
sub eax, 0x21fbb9
je 0x1004dd9d
mov dword [ebp - 0x574], 1
jmp 0x1004dda4
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x798], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x348], 0xfffffffb
mov dword [ebp - 0x104], 0xfffffffb
mov dword [ebp - 0x104], 0xffffffe8
jmp 0x1004dde1
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xffffffe8
jle 0x1004e02c
mov dword [ebp - 0x4c0], 5
mov dword [ebp - 0x448], 1
mov dword [ebp - 0x10], 0
jmp 0x1004de12
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x1004e027
mov dword [ebp - 0x68], 0xb65cab43
mov dword [ebp - 0x368], 0x72c2e8b5
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0x20]
cmp dword [ebp + eax*4 - 0x20], ecx
jne 0x1004de49
mov dword [ebp - 0x440], 1
jmp 0x1004de50
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x440]
mov dword [ebp + eax*4 - 0x20], ecx
mov dword [ebp - 0x68], 0
jmp 0x1004de6d
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x1004e022
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1004de98
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x6f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x348]
mov dword [ebp - 0x824], eax
cmp dword [ebp - 0x4c0], 0xf1111919
jb 0x1004decf
mov dword [ebp - 0x350], 1
jmp 0x1004ded6
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0x746a
jle 0x1004defa
mov dword [ebp - 0x358], 1
jmp 0x1004df01
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 2
je 0x1004df16
mov dword [ebp - 0x500], 1
jmp 0x1004df1d
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x20]
cmp dword [ebp - 0x500], eax
jl 0x1004df38
mov dword [ebp - 0x360], 1
jmp 0x1004df3f
and dword [ebp - 0x360], 0
imul eax, dword [ebp - 0x360], 0
test eax, eax
je 0x1004df60
mov eax, dword [ebp - 0x68]
cmp dword [ebp + eax*4 - 0x20], 0
je 0x1004df60
mov dword [ebp - 0x450], 1
jmp 0x1004df67
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x450], eax
jne 0x1004df88
mov eax, dword [ebp - 0x68]
cmp dword [ebp + eax*4 - 0x20], 0
je 0x1004df88
mov dword [ebp - 0x4c8], 1
jmp 0x1004df8f
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
cmp eax, dword [ebp - 0x4c8]
jge 0x1004dfb6
mov dword [ebp - 0x370], 1
jmp 0x1004dfbd
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x370]
sub eax, 0xfffe
mov ecx, dword [ebp - 0x68]
sub eax, dword [ebp + ecx*4 - 0x20]
imul eax, eax, 0
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x20]
jg 0x1004dfe7
mov dword [ebp - 0x458], 1
jmp 0x1004dfee
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x20]
cmp eax, dword [ebp - 0x458]
je 0x1004e009
mov dword [ebp - 0x378], 1
jmp 0x1004e010
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x378]
mov dword [ebp + eax*4 - 0x20], ecx
jmp 0x1004de66
jmp 0x1004de0b
jmp 0x1004ddd4
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x398], 0xffffffff
mov dword [ebp - 0x380], 0xffffffff
mov dword [ebp - 0x468], 0xc0198ab7
mov dword [ebp - 0x5ac], 1
mov dword [ebp - 0x14c], 0
jmp 0x1004e077
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 4
jge 0x1004e093
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x870], 0xfffffffc
jmp 0x1004e06a
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1004e0af
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 0x3606
test eax, eax
je 0x1004e1e3
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0xd4]
test eax, eax
jne 0x1004e0df
cmp dword [ebp - 0x398], 0
jne 0x1004e0df
and dword [ebp - 0x528], 0
jmp 0x1004e0e9
mov dword [ebp - 0x528], 1
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0xd4], eax
jge 0x1004e10f
mov dword [ebp - 0x460], 1
jmp 0x1004e116
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 1
jb 0x1004e12b
mov dword [ebp - 0x1e4], 1
jmp 0x1004e132
and dword [ebp - 0x1e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp + eax - 0x870], ecx
cmp dword [ebp - 0x1e4], 0xa167
je 0x1004e15d
mov dword [ebp - 0x388], 1
jmp 0x1004e164
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x388], eax
jle 0x1004e180
or eax, 0xffffffff
jne 0x1004e180
and dword [ebp - 0x4d0], 0
jmp 0x1004e18a
mov dword [ebp - 0x4d0], 1
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0xd4]
jne 0x1004e1b8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x870], 0
jne 0x1004e1b8
and dword [ebp - 0x390], 0
jmp 0x1004e1c2
mov dword [ebp - 0x390], 1
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0
je 0x1004e1e3
mov dword [ebp - 0x508], 1
jmp 0x1004e1ea
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x508], eax
jle 0x1004e204
mov dword [ebp - 0x3a0], 1
jmp 0x1004e20b
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x5ac], eax
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x194], 0x91a049fe
mov dword [ebp - 0x6fc], 0xffffffff
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1004e24b
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov dword [ebp - 0x194], 0
jmp 0x1004e264
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xfffffff6
je 0x1004e286
mov dword [ebp - 0x470], 8
mov eax, dword [ebp - 0x470]
inc eax
mov dword [ebp - 0x470], eax
jmp 0x1004e257
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x1004e2a4
push 0
push 0
push 0x1cc8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x1004f45b
mov dword [ebp - 0x60], 0xf89b5461
mov dword [ebp - 0x9c], 0xa20b2878
push 4
lea ecx, [ebp - 0x6b0]
call fcn.10017c5d
mov dword [ebp - 4], 6
mov dword [ebp - 0x50], 0
jmp 0x1004e2de
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1004e2f4
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x55c], 0x5f70ad6f
jmp 0x1004e2d7
mov dword [ebp - 0x50], 0
jmp 0x1004e304
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1004e320
push dword [ebp - 0x50]
lea ecx, [ebp - 0x6b0]
call fcn.10017cfb
mov dword [eax], 5
jmp 0x1004e2fd
mov dword [ebp - 0x60], 0
jmp 0x1004e330
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x1004e4dd
mov dword [ebp - 0x3a8], 0xc58bdfad
mov dword [ebp - 0x3a8], 0xfffffffe
cmp dword [ebp - 0x3a8], 0x2858905b
jg 0x1004e366
mov dword [ebp - 0x4d8], 1
jmp 0x1004e36d
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x55c]
mov dword [ebp - 0x7a0], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x704], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x55c]
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x4d8], 0xcd43
jne 0x1004e3ae
mov dword [ebp - 0x3b0], 1
jmp 0x1004e3b5
and dword [ebp - 0x3b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x55c]
cmp eax, dword [ebp - 0x3b0]
jge 0x1004e3dd
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1004e3dd
mov dword [ebp - 0x478], 1
jmp 0x1004e3e4
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x55c]
cmp dword [ebp - 0x478], eax
jge 0x1004e402
mov dword [ebp - 0x3b8], 1
jmp 0x1004e409
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
neg eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x55c]
cmp eax, dword [ebp - 0x9c]
jge 0x1004e435
mov dword [ebp - 0x530], 1
jmp 0x1004e43c
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0x4d64
jg 0x1004e454
mov dword [ebp - 0x22c], 1
jmp 0x1004e45b
and dword [ebp - 0x22c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x55c]
add eax, dword [ebp - 0x22c]
cmp eax, 4
jb 0x1004e47e
mov dword [ebp - 0x480], 1
jmp 0x1004e485
and dword [ebp - 0x480], 0
push 1
lea ecx, [ebp - 0x6b0]
call fcn.10017cfb
mov ecx, dword [ebp - 0x480]
mov dword [eax], ecx
mov byte [ebp - 0x80], 0
movzx eax, byte [ebp - 0x80]
test eax, eax
je 0x1004e4d8
push 0x10b
push 0x258a
push 0x8dc
push 0x15b7
push 0xc79
push 0x205b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
jmp 0x1004e329
mov dword [ebp - 0x9c], 0xffffffea
jmp 0x1004e4f6
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xfffffff2
jle 0x1004e5ac
mov dword [ebp - 0x3c8], 2
mov dword [ebp - 0x4e0], 1
mov dword [ebp - 0x3d8], 0x6c0f1a01
mov dword [ebp - 0x57c], 0x818a
mov dword [ebp - 0x3c8], 0x2c51978e
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x4e0], eax
imul eax, dword [ebp - 0x4e0], 0
cmp eax, 0x1701
jle 0x1004e55b
mov dword [ebp - 0x488], 1
jmp 0x1004e562
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x9c], 0x136ef6f
je 0x1004e57a
mov dword [ebp - 0x3d0], 1
jmp 0x1004e581
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d8]
cmp dword [ebp - 0x3d0], eax
jle 0x1004e596
cmp dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x488]
add eax, 0xfff9
mov dword [ebp - 0x3d8], eax
jmp 0x1004e4e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6b0]
call fcn.10017cdf
mov dword [ebp - 0x304], 0x3e5c
mov dword [ebp - 0x58], 0
jmp 0x1004e5d5
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1004e5eb
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x5f8], 0xffffffff
jmp 0x1004e5ce
mov dword [ebp - 0x58], 0
jmp 0x1004e5fb
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1004e611
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x118], 0
jmp 0x1004e5f4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x118], 3
jmp 0x1004e63f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x118], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x118], 0
jl 0x1004e977
mov dword [ebp - 0x19c], 0x5b3b9da4
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x608], 1
mov dword [ebp - 0x604], 1
mov dword [ebp - 0x600], 1
mov dword [ebp - 0x5fc], 1
mov dword [ebp - 0x70c], 0x1d2a6f9a
mov dword [ebp - 0x71c], 0xfffffffc
push 1
lea ecx, [ebp - 0x68c]
call fcn.10017c5d
mov dword [ebp - 4], 7
mov dword [ebp - 0x154], 0
jmp 0x1004e6d0
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x1004e6f2
push dword [ebp - 0x154]
lea ecx, [ebp - 0x68c]
call fcn.10017cfb
mov dword [eax], 0xfffffff6
jmp 0x1004e6c3
mov dword [ebp - 0x19c], 0
jmp 0x1004e70b
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jg 0x1004e806
mov dword [ebp - 0x66c], 0x2ab60e70
mov dword [ebp - 0x668], 0x2ab60e70
mov dword [ebp - 0x664], 0x2ab60e70
mov dword [ebp - 0x660], 0x2ab60e70
lea ecx, [ebp - 0x1bd]
call fcn.10008ad3
push eax
lea eax, [ebp - 0x65c]
push eax
lea eax, [ebp - 0x66c]
push eax
lea ecx, [ebp - 0x8a0]
call fcn.10017d0a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x888]
call fcn.10017cb9
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x608]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x608], eax
mov dword [ebp - 0xf4], 0
jmp 0x1004e7a9
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jg 0x1004e7f6
mov dword [ebp - 0x15c], 0xe5a945cb
mov dword [ebp - 0x5a8], 4
mov dword [ebp - 0x15c], 0
jmp 0x1004e7df
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jg 0x1004e7f4
mov dword [ebp - 0x5a8], 8
jmp 0x1004e7d2
jmp 0x1004e79c
lea ecx, [ebp - 0x888]
call fcn.10017cdf
jmp 0x1004e6fe
push 0
lea ecx, [ebp - 0x68c]
call fcn.10017cfb
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1c4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c4]
cmp dword [eax], 0
je 0x1004e8b9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
cmp dword [ebp + eax*4 - 0x5f8], 0
jne 0x1004e85e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x118], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x118], 0
jne 0x1004e887
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x608], 0
jne 0x1004e887
and dword [ebp - 0x510], 0
jmp 0x1004e891
mov dword [ebp - 0x510], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
mov eax, dword [ebp + eax*4 - 0x5f8]
cmp eax, dword [ebp - 0x510]
jne 0x1004e8b9
mov dword [ebp - 0x3e0], 1
jmp 0x1004e8c0
and dword [ebp - 0x3e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
mov eax, dword [ebp + eax*4 - 0x5f8]
add eax, dword [ebp - 0x3e0]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x5f8]
jge 0x1004e8f5
mov dword [ebp - 0x490], 1
jmp 0x1004e8fc
and dword [ebp - 0x490], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
mov eax, dword [ebp + eax*4 - 0x5f8]
cmp dword [ebp - 0x490], eax
jne 0x1004e924
mov dword [ebp - 0x3e8], 1
jmp 0x1004e92b
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0x1e5c
jl 0x1004e943
mov dword [ebp - 0x4e8], 1
jmp 0x1004e94a
and dword [ebp - 0x4e8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4e8]
sub ecx, dword [ebp + eax - 0x5f8]
mov dword [ebp - 0xf4], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68c]
call fcn.10017cdf
jmp 0x1004e624
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1004e99c
push 0x26dd
push 0x12da
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call dword [sym.imp.USER32.dll_GetMessageA]
mov dword [ebp - 0x30c], 0xc75b167d
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x1b4], 0x6de
mov dword [ebp - 0x2ec], 0xfffffff6
mov dword [ebp - 0x44], 0
jmp 0x1004e9d4
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1004e9e7
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x30], 0xddc85f70
jmp 0x1004e9cd
mov dword [ebp - 0x44], 0
jmp 0x1004e9f7
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1004ea0d
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x7cc], 0x2e84cbf7
jmp 0x1004e9f0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x30], 0
jmp 0x1004ea32
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x30], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
jl 0x1004ec35
mov dword [ebp - 0x1a4], 0xd32ffab8
mov dword [ebp - 0x1a4], 0
jmp 0x1004ea66
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 9
jle 0x1004ec30
mov dword [ebp - 0x164], 0
jmp 0x1004ea8c
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x1004eaa8
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x644], 1
jmp 0x1004ea7f
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1004eac7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x644], 0
jmp 0x1004eaf5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x644]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x644], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x644], 0xfffffff7
jl 0x1004ec2b
mov dword [ebp - 0x78], 0x835a23e8
mov dword [ebp - 0x78], 0x1d
jmp 0x1004eb20
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffea
jge 0x1004ebef
mov dword [ebp - 0x1ac], 0xffffffff
mov dword [ebp - 0x1ac], 0
jmp 0x1004eb4d
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xffffffeb
je 0x1004ebea
mov dword [ebp - 0x11c], 0
jmp 0x1004eb73
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x1004eb8f
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x638], 0xfffffffb
jmp 0x1004eb66
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x638], 0
jmp 0x1004ebba
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x638]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x638], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x638], 0xfffffff4
jne 0x1004ebe5
mov byte [ebp - 0x82], 0
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x1004ebe3
push 0
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
jmp 0x1004eba1
jmp 0x1004eb40
jmp 0x1004eb19
mov dword [ebp - 0x78], 0
jmp 0x1004ebff
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xe
je 0x1004ec26
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1004ec24
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
jmp 0x1004ebf8
jmp 0x1004eada
jmp 0x1004ea59
jmp 0x1004ea1d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xfffe
ja 0x1004ec67
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
jne 0x1004ec67
and dword [ebp - 0x3f0], 0
jmp 0x1004ec71
mov dword [ebp - 0x3f0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x3f0], eax
jge 0x1004ec8f
mov dword [ebp - 0x498], 1
jmp 0x1004ec96
and dword [ebp - 0x498], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp eax, dword [ebp - 0x498]
jne 0x1004ecb4
mov dword [ebp - 0x3f8], 1
jmp 0x1004ecbb
and dword [ebp - 0x3f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x3f8], eax
jl 0x1004ecd9
mov dword [ebp - 0x538], 1
jmp 0x1004ece0
and dword [ebp - 0x538], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x538]
sub ecx, dword [ebp + eax - 0x30]
mov dword [ebp - 0x2bc], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp + eax - 0x7cc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x2bc], eax
jne 0x1004ed26
mov dword [ebp - 0x584], 1
jmp 0x1004ed2d
and dword [ebp - 0x584], 0
mov eax, 0xf9e8bfa0
test eax, eax
je 0x1004ed4b
mov eax, 0xd14ca72c
test eax, eax
je 0x1004ed4b
mov dword [ebp - 0x2c4], 1
jmp 0x1004ed52
and dword [ebp - 0x2c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x2c4], eax
jge 0x1004ed70
mov dword [ebp - 0x2cc], 1
jmp 0x1004ed77
and dword [ebp - 0x2cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x30]
sub eax, dword [ebp - 0x2cc]
je 0x1004eda5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7cc], 0
je 0x1004eda5
mov dword [ebp - 0x2d4], 1
jmp 0x1004edac
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x2d4], eax
je 0x1004edc6
mov dword [ebp - 0x2dc], 1
jmp 0x1004edcd
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x2dc], eax
jl 0x1004ede7
mov dword [ebp - 0x5b8], 1
jmp 0x1004edee
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x718], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x2ec]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x30]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x30]
test eax, eax
jne 0x1004ee3e
cmp dword [ebp - 0x1c8], 0
jne 0x1004ee3e
mov dword [ebp - 0x58c], 1
jmp 0x1004ee45
and dword [ebp - 0x58c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x1b4]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x30]
cmp eax, 0x6b93
jg 0x1004ee78
mov dword [ebp - 0x2e4], 1
jmp 0x1004ee7f
and dword [ebp - 0x2e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
add eax, dword [ebp - 0x2e4]
sub eax, dword [ebp - 0x2ec]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x30], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1fc], 0
jne 0x1004ef5a
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7b0], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x1fc], 0
jne 0x1004eeda
cmp dword [ebp - 0x1b0], 0
jne 0x1004eeda
and dword [ebp - 0x2f4], 0
jmp 0x1004eee4
mov dword [ebp - 0x2f4], 1
mov eax, dword [ebp - 0x1b0]
imul eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2fc], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp + eax - 0x1fc], ecx
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x848], eax
mov eax, 0xbc46d767
test eax, eax
je 0x1004ef3b
cmp dword [ebp - 0x1d0], 0
je 0x1004ef3b
cmp dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
mov dword [ebp - 0x41c], 0
mov byte [ebp - 0x9d], 0
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x314], 1
mov dword [ebp - 0x1d8], 0xc1da7bc9
push 2
lea ecx, [ebp - 0x620]
call fcn.10017c5d
mov dword [ebp - 4], 8
mov dword [ebp - 0x354], 0xfffffff6
mov dword [ebp - 0x658], 0xf37d437f
mov dword [ebp - 0x654], 0xf37d437f
mov dword [ebp - 0x650], 0xf37d437f
mov dword [ebp - 0x64c], 0xf37d437f
lea ecx, [ebp - 0x1dd]
call fcn.10008ad3
push eax
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0x658]
push eax
lea ecx, [ebp - 0x898]
call fcn.10017d0a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x698]
call fcn.10017cb9
mov byte [ebp - 4], 9
mov dword [ebp - 0x40], 0
jmp 0x1004f01f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1004f03b
push dword [ebp - 0x40]
lea ecx, [ebp - 0x620]
call fcn.10017cfb
mov dword [eax], 0xfffffff7
jmp 0x1004f018
mov dword [ebp - 0x40], 0
jmp 0x1004f04b
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1004f061
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x208], 0xfffffff6
jmp 0x1004f044
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x1c], 0
je 0x1004f086
push 7
pop eax
test eax, eax
je 0x1004f086
mov dword [ebp - 0x5c0], 1
jmp 0x1004f08d
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x314], eax
jne 0x1004f0b7
mov dword [ebp - 0x31c], 1
jmp 0x1004f0be
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x31c]
jl 0x1004f0d5
mov dword [ebp - 0x324], 1
jmp 0x1004f0dc
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x1d8], eax
jl 0x1004f102
mov dword [ebp - 0x32c], 1
jmp 0x1004f109
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x32c]
jne 0x1004f120
mov dword [ebp - 0x334], 1
jmp 0x1004f127
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x334], eax
je 0x1004f141
mov dword [ebp - 0x33c], 1
jmp 0x1004f148
and dword [ebp - 0x33c], 0
push 1
lea ecx, [ebp - 0x620]
call fcn.10017cfb
mov ecx, dword [ebp - 0x33c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x208], 0x7110e6b6
mov dword [ebp - 0x1c], 0
jmp 0x1004f17e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x1004f426
mov dword [ebp - 0x1a0], 0xffffffff
mov dword [ebp - 0x1b8], 0x3428
mov dword [ebp - 0x180], 0x2b72
mov dword [ebp - 0x1b8], 0x6bae
cmp dword [ebp - 0x1b8], 0
jne 0x1004f1c5
mov dword [ebp - 0x594], 1
jmp 0x1004f1cc
and dword [ebp - 0x594], 0
push 1
lea ecx, [ebp - 0x698]
call fcn.10017cfb
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x344]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x208]
mov dword [ebp - 0x738], eax
imul eax, dword [ebp - 0x1a0], 0x25b7
test eax, eax
je 0x1004f21e
xor eax, eax
je 0x1004f21e
mov dword [ebp - 0x34c], 1
jmp 0x1004f225
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x34c], eax
je 0x1004f23f
mov dword [ebp - 0x5c8], 1
jmp 0x1004f246
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x208]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x208]
cmp dword [ebp - 0x180], eax
jg 0x1004f2a4
mov dword [ebp - 0x59c], 1
jmp 0x1004f2ab
and dword [ebp - 0x59c], 0
push 1
lea ecx, [ebp - 0x620]
call fcn.10017cfb
or eax, 0xffffffff
cmp eax, 4
jbe 0x1004f2cc
mov dword [ebp - 0x35c], 1
jmp 0x1004f2d3
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 0x5f263070
jg 0x1004f2eb
mov dword [ebp - 0x5d0], 1
jmp 0x1004f2f2
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x750], eax
mov eax, 0x78db
cmp eax, 0xffffffff
jle 0x1004f314
mov dword [ebp - 0x364], 1
jmp 0x1004f31b
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x208]
cmp eax, dword [ebp - 0x364]
jl 0x1004f339
mov dword [ebp - 0x36c], 1
jmp 0x1004f340
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x208]
cmp dword [ebp - 0x36c], eax
jg 0x1004f364
push 1
lea ecx, [ebp - 0x698]
call fcn.10017cfb
cmp dword [eax], 0
jne 0x1004f376
cmp dword [ebp - 0x1a0], 0
jne 0x1004f376
and dword [ebp - 0x5a4], 0
jmp 0x1004f380
mov dword [ebp - 0x5a4], 1
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x1d8], 0
jne 0x1004f3a7
mov eax, 0x9acce304
test eax, eax
jne 0x1004f3a7
and dword [ebp - 0x374], 0
jmp 0x1004f3b1
mov dword [ebp - 0x374], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x374]
sub ecx, dword [ebp + eax*4 - 0x208]
cmp ecx, dword [ebp - 0x180]
jg 0x1004f3d5
mov dword [ebp - 0x37c], 1
jmp 0x1004f3dc
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x37c], eax
jne 0x1004f3f6
mov dword [ebp - 0x384], 1
jmp 0x1004f3fd
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x1a0], eax
mov byte [ebp - 0x84], 0
movzx eax, byte [ebp - 0x84]
test eax, eax
je 0x1004f421
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
jmp 0x1004f177
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x698]
call fcn.10017cdf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x620]
call fcn.10017cdf
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1004f45b
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UnionRect]
mov dword [ebp - 0x70], 5
push 1
lea ecx, [ebp - 0x6a4]
call fcn.10017c5d
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x758], 0x14173bf3
mov dword [ebp - 0x24], 0
jmp 0x1004f490
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1004f4a9
push dword [ebp - 0x24]
lea ecx, [ebp - 0x6a4]
call fcn.10017cfb
or dword [eax], 0xffffffff
jmp 0x1004f489
mov dword [ebp - 0x24], 0
jmp 0x1004f4b9
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1004f4cf
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x838], 0xfa4ad744
jmp 0x1004f4b2
mov dword [ebp - 0x24], 0
jmp 0x1004f4df
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1004f4f5
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7dc], 0xfffffffc
jmp 0x1004f4d8
mov dword [ebp - 0x70], 0
jmp 0x1004f505
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x1004f552
mov dword [ebp - 0x100], 2
mov dword [ebp - 0x100], 0
jmp 0x1004f52e
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x1004f550
push dword [ebp - 0x100]
lea ecx, [ebp - 0x6a4]
call fcn.10017cfb
mov dword [eax], 0x4d2edc75
jmp 0x1004f521
jmp 0x1004f4fe
mov dword [ebp - 0x70], 0
jmp 0x1004f562
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jg 0x1004f619
push 3
lea ecx, [ebp - 0x7ec]
call fcn.10017c5d
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x760], 0xfffffff6
mov dword [ebp - 0x7f0], 0xefa5f9c7
mov dword [ebp - 0x188], 0
jmp 0x1004f5aa
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x1004f5c9
push dword [ebp - 0x188]
lea ecx, [ebp - 0x7ec]
call fcn.10017cfb
and dword [eax], 0
jmp 0x1004f59d
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x1004f5ea
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7dc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7dc], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7ec]
call fcn.10017cdf
jmp 0x1004f55b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a4]
call fcn.10017cdf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fc], 0
jne 0x1004f644
mov dword [ebp - 0x3a4], 1
jmp 0x1004f64b
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1fc]
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x14], 0
je 0x1004f674
push 9
pop eax
test eax, eax
je 0x1004f674
mov dword [ebp - 0x38c], 1
jmp 0x1004f67b
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 9
jne 0x1004f690
mov dword [ebp - 0x394], 1
jmp 0x1004f697
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x850], eax
cmp dword [ebp - 0x190], 0
jge 0x1004f6be
mov dword [ebp - 0x39c], 1
jmp 0x1004f6c5
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x1fc]
add ecx, dword [ebp - 0x39c]
sub eax, ecx
cmp dword [ebp - 0x3a4], eax
jg 0x1004f7ba
mov dword [ebp - 0xdc], 0
jmp 0x1004f702
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jg 0x1004f7b5
mov dword [ebp - 0x1a8], 0
jmp 0x1004f728
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x1004f744
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x120], 8
jmp 0x1004f71b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x120], 0xfffffff9
jmp 0x1004f772
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x120], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x120], 0xffffffe7
jne 0x1004f79e
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1004f79c
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
jmp 0x1004f757
mov eax, dword [ebp - 0xdc]
cmp dword [ebp + eax*4 - 0x1fc], 0
je 0x1004f7b0
jmp 0x1004f7b5
jmp 0x1004f6f5
jmp 0x1004fc6c
mov dword [ebp - 0xb4], 0xc75b57fd
mov dword [ebp - 0x5c], 8
mov dword [ebp - 0x5d8], 0xffffffff
mov dword [ebp - 0x770], 0xfffa
mov dword [ebp - 0xb4], 2
jmp 0x1004f7f8
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xfffffff0
jle 0x1004fc61
mov dword [ebp - 0xa4], 0xbd7b1c2a
mov dword [ebp - 0xac], 0x9df9481f
mov dword [ebp - 0xa4], 0xffffffea
jmp 0x1004f832
cmp dword [ebp - 0xa4], 1
jne 0x1004fc51
mov dword [ebp - 0x128], 0
jmp 0x1004f858
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x1004f871
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x54], 4
jmp 0x1004f84b
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0xb4], 0
jne 0x1004f898
mov eax, 0x95ed7c6a
test eax, eax
jne 0x1004f898
and dword [ebp - 0x3ac], 0
jmp 0x1004f8a2
mov dword [ebp - 0x3ac], 1
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x3ac]
jge 0x1004f8bc
mov dword [ebp - 0x3b4], 1
jmp 0x1004f8c3
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
sub eax, dword [ebp - 0xac]
cmp eax, 0xa955
jg 0x1004f8e2
mov dword [ebp - 0x3bc], 1
jmp 0x1004f8e9
and dword [ebp - 0x3bc], 0
imul eax, dword [ebp - 0x3bc], 0x74ad
test eax, eax
jb 0x1004f903
mov dword [ebp - 0x3c4], 1
jmp 0x1004f90a
and dword [ebp - 0x3c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
imul eax, dword [ebp - 0x3c4]
cmp eax, dword [ebp - 0xa4]
jge 0x1004f92f
mov dword [ebp - 0x3cc], 1
jmp 0x1004f936
and dword [ebp - 0x3cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac]
add ecx, dword [ebp - 0x3cc]
push 4
pop edx
imul edx, edx, 0
imul ecx, dword [ebp + edx - 0x54]
cmp dword [ebp + eax - 0x54], ecx
jle 0x1004f965
cmp dword [ebp - 0x5c], 0
je 0x1004fc5c
jmp 0x1004f7eb
jmp 0x1004f7eb
cmp dword [ebp - 0x41c], 0
je 0x1004fc6c
jmp 0x1004fc71
jmp 0x1004dace
mov dword [ebp - 0x140], 0x24a8c6a5
mov dword [ebp - 0x140], 0
jmp 0x1004fc94
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x17
jne 0x1004fd23
mov dword [ebp - 0xe4], 1
mov dword [ebp - 0x148], 0
jmp 0x1004fcc4
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jge 0x1004fce0
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x424], 1
jmp 0x1004fcb7
mov dword [ebp - 0xe4], 0
jmp 0x1004fcf9
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jg 0x1004fd1e
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov eax, dword [ebp + eax*4 - 0x424]
mov dword [ebp + ecx*4 - 0x424], eax
jmp 0x1004fcec
jmp 0x1004fc87
mov byte [ebp - 0x7a], 0
movzx eax, byte [ebp - 0x7a]
test eax, eax
je 0x1004fd43
push 0
push 0x26c1
push 0x1e96
push 0
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
mov dword [ebp - 0x150], 0x91a049fe
mov dword [ebp - 0x810], 0xffffffff
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x1004fd6d
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov dword [ebp - 0x150], 0
jmp 0x1004fd86
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xfffffff6
je 0x1004fda8
mov dword [ebp - 0x42c], 8
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
jmp 0x1004fd79
mov byte [ebp - 0x7d], 0
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x64], 0
jmp 0x1004fdc3
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1004fdd9
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x80c], 0x74006310
jmp 0x1004fdbc
mov dword [ebp - 0x64], 0
jmp 0x1004fde9
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1004fdff
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x158], 1
jmp 0x1004fde2
cmp dword [ebp - 0x28], 0xfff7
jb 0x1004fe14
mov dword [ebp - 0x434], 1
jmp 0x1004fe1b
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 0
je 0x1004fe30
mov dword [ebp - 0x43c], 1
jmp 0x1004fe37
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x43c]
jge 0x1004fe4e
mov dword [ebp - 0x444], 1
jmp 0x1004fe55
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x444], eax
jne 0x1004fe7b
cmp dword [ebp - 0x28], 0
je 0x1004fe7b
mov dword [ebp - 0x44c], 1
jmp 0x1004fe82
and dword [ebp - 0x44c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x44c]
mov dword [ebp + eax - 0x80c], ecx
mov dword [ebp - 0x28], 0xffffffee
jmp 0x1004fea5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x17
je 0x1005008b
mov dword [ebp - 0x5b4], 0x1fc65786
mov dword [ebp - 0x6d4], 0xfffffff9
mov dword [ebp - 0x6d8], 0xffffffff
mov dword [ebp - 0x6e0], 0xd96711db
mov dword [ebp - 0x234], 4
push 2
lea ecx, [ebp - 0x81c]
call fcn.10017c5d
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x6e8], 1
mov dword [ebp - 0x24c], 0x87c2657a
mov dword [ebp - 0x6c], 0
jmp 0x1004ff19
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1004ff2f
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x8ac], 0xfffffffc
jmp 0x1004ff12
mov dword [ebp - 0x6c], 0
jmp 0x1004ff3f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1004ff5b
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x81c]
call fcn.10017cfb
mov dword [eax], 4
jmp 0x1004ff38
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5b0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x158], eax
mov eax, dword [ebp - 0x5e0]
cmp eax, dword [ebp - 0x5b0]
jg 0x1004ffac
mov dword [ebp - 0x454], 1
jmp 0x1004ffb3
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x5b4]
add eax, dword [ebp - 0x454]
cmp eax, 0x6f9b6917
jl 0x1004ffd2
mov dword [ebp - 0x45c], 1
jmp 0x1004ffd9
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x45c]
test eax, eax
je 0x10050003
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x158], 0
je 0x10050003
mov dword [ebp - 0x230], 1
jmp 0x1005000a
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
neg eax
cmp eax, 0x1c1d99ea
jne 0x10050031
mov dword [ebp - 0x23c], 1
jmp 0x10050038
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
inc eax
cmp eax, 0xfffffffa
jl 0x10050050
mov dword [ebp - 0x244], 1
jmp 0x10050057
and dword [ebp - 0x244], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x244]
mov dword [ebp + eax - 0x80c], ecx
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x81c]
call fcn.10017cdf
jmp 0x1004fe9e
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x100504ce
mov dword [ebp - 0x160], 0x462d5e48
mov dword [ebp - 0x264], 0x1d102278
mov dword [ebp - 0x160], 0
jmp 0x100500c4
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xd
jle 0x100504a2
push 1
lea ecx, [ebp - 0x550]
call fcn.10017c5d
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x48], 0
jmp 0x100500f5
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10050111
push dword [ebp - 0x48]
lea ecx, [ebp - 0x550]
call fcn.10017cfb
mov dword [eax], 0x5683
jmp 0x100500ee
mov dword [ebp - 0x48], 0
jmp 0x10050121
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10050137
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xc4], 0xffffffff
jmp 0x1005011a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc4], 0
jmp 0x10050165
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0
jg 0x1005048e
mov dword [ebp - 0x110], 0xfffffffd
mov dword [ebp - 0x5bc], 0x9405dbd5
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x110], 0
jmp 0x100501b0
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x10050451
mov dword [ebp - 0x168], 0xb8f5f499
mov dword [ebp - 0x5dc], 0xfc72fa5d
mov dword [ebp - 0x168], 0
jmp 0x100501ea
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jg 0x10050434
mov dword [ebp - 0xc8], 0x5fac1226
mov dword [ebp - 0xc8], 0
jmp 0x1005021a
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x1005042f
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x5d4], 1
mov dword [ebp - 0xbc], 0
jmp 0x10050254
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x1005042a
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x550]
call fcn.10017cfb
mov dword [ebp - 0x254], eax
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x550]
call fcn.10017cfb
mov ecx, dword [ebp - 0x254]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x254]
cmp dword [eax], 0xfffffff7
jne 0x100502aa
mov dword [ebp - 0x25c], 1
jmp 0x100502b1
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0xc8], 0x2f3d4794
jne 0x100502d5
mov dword [ebp - 0x29c], 1
jmp 0x100502dc
and dword [ebp - 0x29c], 0
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x550]
call fcn.10017cfb
cmp dword [eax], 0
jle 0x100502fe
mov dword [ebp - 0x26c], 1
jmp 0x10050305
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x264]
cmp eax, dword [ebp - 0x26c]
jne 0x1005031f
mov dword [ebp - 0x274], 1
jmp 0x10050326
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
sub eax, 0x40c9ba5b
cmp eax, 0x20410224
jne 0x10050344
mov dword [ebp - 0x27c], 1
jmp 0x1005034b
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 0xa98ceef
jg 0x10050363
mov dword [ebp - 0x284], 1
jmp 0x1005036a
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
sub eax, dword [ebp - 0x5dc]
cmp eax, dword [ebp - 0xbc]
jge 0x1005038a
mov dword [ebp - 0x28c], 1
jmp 0x10050391
and dword [ebp - 0x28c], 0
cmp dword [ebp - 0x28c], 1
je 0x100503a6
mov dword [ebp - 0x294], 1
jmp 0x100503ad
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x5bc]
cmp dword [ebp - 0x294], eax
jl 0x100503e7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0
je 0x100503e7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0
je 0x100503e7
mov dword [ebp - 0x2a4], 1
jmp 0x100503ee
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x2a4]
jl 0x10050408
mov dword [ebp - 0x2ac], 1
jmp 0x1005040f
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0xfc], 0
jmp 0x10050247
jmp 0x1005020d
jmp 0x100501dd
push dword [ebp - 0x110]
lea ecx, [ebp - 0x550]
call fcn.10017cfb
cmp dword [eax], 0
je 0x1005044c
jmp 0x10050451
jmp 0x100501a3
mov dword [ebp - 0xfc], 0
jmp 0x1005046a
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jl 0x10050489
mov dword [ebp - 0x5c4], 0x94a737b7
mov dword [ebp - 0x5c4], 0x23988f15
jmp 0x1005045d
jmp 0x1005014a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x550]
call fcn.10017cdf
jmp 0x100500b7
mov byte [ebp - 0x7f], 0
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x100504b8
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
push 0
push 0
push 0x1cc8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 0x1bc], 0x24a8c6a5
mov dword [ebp - 0x1bc], 0
jmp 0x100504f1
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x17
jne 0x10050580
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0x170], 0
jmp 0x10050521
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x1005053d
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x2b4], 1
jmp 0x10050514
mov dword [ebp - 0xcc], 0
jmp 0x10050556
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jg 0x1005057b
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0x2b4]
mov dword [ebp + ecx*4 - 0x2b4], eax
jmp 0x10050549
jmp 0x100504e4
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x100505a6
push 0
push 0x26c1
push 0x1e96
push 0
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret