Function at 0x1004d42a
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008216d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x480
push esi
push edi
mov dword [ebp - 0x154], 0xfffffffc
mov dword [ebp - 0x80], 0
jmp 0x1004d464
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1004d47a
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x2a8], 0xfffffff8
jmp 0x1004d45d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2a8], 0xffffffe2
jmp 0x1004d4a8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2a8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a8], 0x19
jl 0x1004d649
mov dword [ebp - 0x18], 0xffffffff
push 1
lea ecx, [ebp - 0x3c8]
call fcn.10015917
and dword [ebp - 4], 0
mov dword [ebp - 0xb0], 0
jmp 0x1004d4ed
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1004d50f
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x3c8]
call fcn.100159b5
mov dword [eax], 0x7b6fe6d3
jmp 0x1004d4e0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jl 0x1004d523
mov dword [ebp - 0x26c], 1
jmp 0x1004d52a
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x1e6e2bf
jne 0x1004d54b
mov dword [ebp - 0x278], 1
jmp 0x1004d552
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x18], 0
jle 0x1004d564
mov dword [ebp - 0x234], 1
jmp 0x1004d56b
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
cmp dword [ebp - 0x234], eax
jle 0x1004d615
mov dword [ebp - 0x18], 0
jmp 0x1004d594
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1004d5d6
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1004d5bb
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x1004d5d4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
jmp 0x1004d58d
mov dword [ebp - 0x18], 0xfffffff3
jmp 0x1004d5e6
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffee
jne 0x1004d613
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x1004d611
push 0x19d9
push 0x1f0d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call dword [sym.imp.USER32.dll_GetMessageA]
jmp 0x1004d5df
jmp 0x1004d635
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x1004d635
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c8]
call fcn.10015999
jmp 0x1004d48d
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1004d673
push 0x1df1
push 0xf3a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_LineTo]
mov dword [ebp - 0xb4], 3
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x70], 0x80bf
mov dword [ebp - 0x124], 5
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x290], 1
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x68], 0
jmp 0x1004d6c3
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xb
je 0x1004d8b4
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x238], 0x3888ad88
mov dword [ebp - 0x140], 0x83312ef3
mov dword [ebp - 0x8c], 0
jmp 0x1004d70e
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1004d72a
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x3d8], 0xffffffff
jmp 0x1004d701
mov dword [ebp - 0xf4], 1
mov eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0xdc]
jne 0x1004d74e
mov dword [ebp - 0x23c], 1
jmp 0x1004d755
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 0x3292c5eb
je 0x1004d76d
mov dword [ebp - 0x22c], 1
jmp 0x1004d774
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x70], 0
je 0x1004d78c
cmp dword [ebp - 0x70], 0
je 0x1004d78c
mov dword [ebp - 0x280], 1
jmp 0x1004d793
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x70], 0
jne 0x1004d7b4
cmp dword [ebp - 0x68], 0
jne 0x1004d7b4
and dword [ebp - 0x120], 0
jmp 0x1004d7be
mov dword [ebp - 0x120], 1
mov eax, dword [ebp - 0x22c]
imul eax, dword [ebp - 0x120]
mov dword [ebp - 0x124], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d8]
mov dword [ebp - 0x40c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d8]
cmp dword [ebp - 0x124], eax
je 0x1004d805
mov dword [ebp - 0x288], 1
jmp 0x1004d80c
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x290], eax
jge 0x1004d823
mov dword [ebp - 0x1b8], 1
jmp 0x1004d82a
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x1b8], eax
jl 0x1004d844
mov dword [ebp - 0x270], 1
jmp 0x1004d84b
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x140], 0x1771
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x140], eax
jg 0x1004d89c
mov dword [ebp - 0x1c0], 1
jmp 0x1004d8a3
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0xf4], eax
jmp 0x1004d6bc
mov dword [ebp - 0xb4], 3
jmp 0x1004d8cd
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xfffffffd
jg 0x1004d9ee
mov dword [ebp - 0x258], 0xffffffff
push 3
lea ecx, [ebp - 0x36c]
call fcn.10015917
mov dword [ebp - 4], 1
mov dword [ebp - 0x2e8], 0x4822b16
mov dword [ebp - 0x94], 0
jmp 0x1004d91b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1004d93d
push dword [ebp - 0x94]
lea ecx, [ebp - 0x36c]
call fcn.100159b5
mov dword [eax], 0x8a1f9496
jmp 0x1004d90e
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1004d95b
push 0x1097
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
push 0
lea ecx, [ebp - 0x36c]
call fcn.100159b5
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xe4]
mov dword [ecx], eax
cmp dword [ebp - 0x264], 0x70c3
jne 0x1004d9a5
mov dword [ebp - 0x148], 1
jmp 0x1004d9ac
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x2e8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x36c]
call fcn.10015999
mov byte [ebp - 0x47], 0
push 0x7ee3
push 0
lea eax, [ebp - 0x47]
push eax
call fcn.1004b257
add esp, 0xc
cmp dword [ebp - 0x258], 0
je 0x1004d9e9
jmp 0x1004d9ee
jmp 0x1004d8c0
push 1
lea eax, [ebp - 0x48c]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.1004aabc
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x434]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x434]
lea edi, [ebp - 0x2f4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x200], 0
push 2
lea ecx, [ebp - 0x248]
call fcn.10015917
mov dword [ebp - 4], 2
mov dword [ebp - 0x33c], 0xb4ef66b
mov dword [ebp - 0x338], 0xb4ef66b
mov dword [ebp - 0x334], 0xb4ef66b
mov dword [ebp - 0x330], 0xb4ef66b
lea ecx, [ebp - 0xf9]
call fcn.10008cf3
push eax
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x468]
call fcn.100159c4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2b8]
call fcn.10015973
mov byte [ebp - 4], 3
mov dword [ebp - 0x150], 0x8f985589
mov dword [ebp - 0x1c8], 0x4129b857
mov dword [ebp - 0xac], 0
jmp 0x1004dac9
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x1004daeb
push dword [ebp - 0xac]
lea ecx, [ebp - 0x248]
call fcn.100159b5
mov dword [eax], 0xfffffff6
jmp 0x1004dabc
mov esi, dword [ebp - 0x200]
push 1
lea ecx, [ebp - 0x248]
call fcn.100159b5
cmp esi, dword [eax]
jne 0x1004db0e
mov dword [ebp - 0x158], 1
jmp 0x1004db15
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x420], eax
push 2
lea ecx, [ebp - 0x2b8]
call fcn.100159b5
mov dword [eax], 0xc218
mov dword [ebp - 0x150], 0xc218
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x3dc], eax
push 0
lea ecx, [ebp - 0x2b8]
call fcn.100159b5
push 1
lea ecx, [ebp - 0x248]
call fcn.100159b5
push 3
lea ecx, [ebp - 0x2b8]
call fcn.100159b5
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jne 0x1004db8f
push 2
lea ecx, [ebp - 0x2b8]
call fcn.100159b5
push 1
lea ecx, [ebp - 0x248]
call fcn.100159b5
cmp dword [eax], 0
jne 0x1004dbad
mov dword [ebp - 0x220], 1
jmp 0x1004dbb4
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x220]
jle 0x1004dbce
mov dword [ebp - 0x160], 1
jmp 0x1004dbd5
and dword [ebp - 0x160], 0
push 1
lea ecx, [ebp - 0x248]
call fcn.100159b5
mov esi, dword [ebp - 0x160]
add esi, dword [eax]
push 1
lea ecx, [ebp - 0x248]
call fcn.100159b5
mov dword [eax], esi
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x1004dc17
push 0
push 0x22ce
push 0x9a0
call dword [sym.imp.GDI32.dll_CreatePen]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2b8]
call fcn.10015999
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x248]
call fcn.10015999
mov dword [ebp - 0x328], 0xbac64a68
mov dword [ebp - 0x324], 0xbac64a68
mov dword [ebp - 0x320], 0xbac64a68
mov dword [ebp - 0x31c], 0xbac64a68
lea ecx, [ebp - 0x105]
call fcn.10008cf3
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x460]
call fcn.100159c4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xcc]
call fcn.10015973
mov dword [ebp - 4], 4
mov dword [ebp - 0x28], 0x8bfc4f27
mov dword [ebp - 0xec], 0x1552
mov dword [ebp - 0x2d8], 0x3f85024d
push 0
lea ecx, [ebp - 0xcc]
call fcn.100159b5
mov dword [eax], 0xfffffffa
jmp 0x1004dced
push 0
lea ecx, [ebp - 0xcc]
call fcn.100159b5
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xcc]
call fcn.100159b5
cmp dword [eax], 0xfffffff9
je 0x1004dda1
push 2
lea ecx, [ebp - 0x3e8]
call fcn.10015917
mov byte [ebp - 4], 5
mov dword [ebp - 0xbc], 0x50e6da50
mov dword [ebp - 0x9c], 0
jmp 0x1004dd37
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1004dd56
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x3e8]
call fcn.100159b5
and dword [eax], 0
jmp 0x1004dd2a
mov dword [ebp - 0xbc], 1
jmp 0x1004dd6f
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x1004dd8d
mov dword [ebp - 0x2c4], 1
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x28], eax
jmp 0x1004dd62
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3e8]
call fcn.10015999
jmp 0x1004dcc9
push 0
lea ecx, [ebp - 0xcc]
call fcn.100159b5
cmp dword [eax], 0
je 0x1004de28
push 0
lea ecx, [ebp - 0xcc]
call fcn.100159b5
cmp dword [eax], 0xfffffff8
jg 0x1004ddd1
mov dword [ebp - 0x168], 1
jmp 0x1004ddd8
and dword [ebp - 0x168], 0
push 3
lea ecx, [ebp - 0xcc]
call fcn.100159b5
mov ecx, dword [ebp - 0x168]
cmp ecx, dword [eax]
jne 0x1004ddfb
mov dword [ebp - 0x208], 1
jmp 0x1004de02
and dword [ebp - 0x208], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.100159b5
mov ecx, dword [ebp - 0x208]
imul ecx, dword [eax]
test ecx, ecx
je 0x1004de28
mov dword [ebp - 0x274], 1
jmp 0x1004de2f
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x28], 0x5ff5
jge 0x1004de4d
mov dword [ebp - 0x170], 1
jmp 0x1004de54
and dword [ebp - 0x170], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.100159b5
mov ecx, dword [ebp - 0x170]
add ecx, dword [eax]
cmp ecx, 0x39e22401
jg 0x1004de7d
mov dword [ebp - 0x1d8], 1
jmp 0x1004de84
and dword [ebp - 0x1d8], 0
push 2
lea ecx, [ebp - 0xcc]
call fcn.100159b5
mov ecx, dword [ebp - 0x1d8]
cmp ecx, dword [eax]
jg 0x1004dea7
mov dword [ebp - 0x178], 1
jmp 0x1004deae
and dword [ebp - 0x178], 0
push 2
lea ecx, [ebp - 0xcc]
call fcn.100159b5
mov ecx, dword [ebp - 0x178]
cmp ecx, dword [eax]
jge 0x1004dee3
push 0
lea ecx, [ebp - 0xcc]
call fcn.100159b5
cmp dword [eax], 0
je 0x1004dee3
mov dword [ebp - 0x230], 1
jmp 0x1004deea
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0x2506ed55
jl 0x1004df02
mov dword [ebp - 0x180], 1
jmp 0x1004df09
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x180], eax
jge 0x1004df20
mov dword [ebp - 0x104], 1
jmp 0x1004df27
and dword [ebp - 0x104], 0
push 2
lea ecx, [ebp - 0xcc]
call fcn.100159b5
mov ecx, dword [ebp - 0x104]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x28]
imul ecx, eax
mov eax, dword [ebp - 0x28]
add eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x28], eax
jge 0x1004df6f
xor eax, eax
je 0x1004df6f
mov dword [ebp - 0x1e0], 1
jmp 0x1004df76
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 0x35c5
jg 0x1004df8e
mov dword [ebp - 0x188], 1
jmp 0x1004df95
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
add eax, 6
sub eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0xec]
jl 0x1004dfb8
mov dword [ebp - 0x210], 1
jmp 0x1004dfbf
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x2d8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.10015999
mov dword [ebp - 0x3ec], 0x299d
push 3
lea ecx, [ebp - 0x360]
call fcn.10015917
mov dword [ebp - 4], 6
mov dword [ebp - 0x2cc], 0x4822b16
mov dword [ebp - 0x84], 0
jmp 0x1004e01b
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x1004e03d
push dword [ebp - 0x84]
lea ecx, [ebp - 0x360]
call fcn.100159b5
mov dword [eax], 0x8a1f9496
jmp 0x1004e00e
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x1004e05b
push 0x1097
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
push 0
lea ecx, [ebp - 0x360]
call fcn.100159b5
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
cmp dword [ebp - 0x27c], 0x70c3
jne 0x1004e0a5
mov dword [ebp - 0x190], 1
jmp 0x1004e0ac
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x2cc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x360]
call fcn.10015999
mov dword [ebp - 0x6c], 8
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0x88], 0
jmp 0x1004e0ee
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1004e10a
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x380], 0xc857617
jmp 0x1004e0e1
mov dword [ebp - 0x6c], 0xfffffff6
jmp 0x1004e11a
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe7
jg 0x1004e380
push 1
lea ecx, [ebp - 0x254]
call fcn.10015917
mov dword [ebp - 4], 7
push 4
lea ecx, [ebp - 0x3f8]
call fcn.10015917
mov byte [ebp - 4], 8
mov dword [ebp - 0x1c], 0
jmp 0x1004e159
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1004e175
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x254]
call fcn.100159b5
mov dword [eax], 0x22124f84
jmp 0x1004e152
mov dword [ebp - 0x1c], 0
jmp 0x1004e185
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1004e1a1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x3f8]
call fcn.100159b5
mov dword [eax], 0x80c6548a
jmp 0x1004e17e
push 0
lea ecx, [ebp - 0x254]
call fcn.100159b5
and dword [eax], 0
jmp 0x1004e1d7
push 0
lea ecx, [ebp - 0x254]
call fcn.100159b5
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1e8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x254]
call fcn.100159b5
cmp dword [eax], 0xfffffff9
jne 0x1004e35d
mov dword [ebp - 0x2c], 0x25bfc88e
mov dword [ebp - 0x50], 0x8d9dcee3
mov dword [ebp - 0x50], 2
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x3c], eax
mov esi, dword [ebp - 0x3c]
push 0
lea ecx, [ebp - 0x254]
call fcn.100159b5
imul esi, dword [eax]
cmp dword [ebp - 0x2c], esi
jg 0x1004e22c
mov dword [ebp - 0x198], 1
jmp 0x1004e233
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x198]
jne 0x1004e24a
mov dword [ebp - 0x228], 1
jmp 0x1004e251
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x228], eax
jle 0x1004e268
mov dword [ebp - 0x1a0], 1
jmp 0x1004e26f
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1a0], eax
jne 0x1004e28c
cmp dword [ebp - 0x3c], 0
je 0x1004e28c
mov dword [ebp - 0x1f0], 1
jmp 0x1004e293
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x2c]
jle 0x1004e2b3
cmp dword [ebp - 0x3c], 0
je 0x1004e2b3
mov dword [ebp - 0x1a8], 1
jmp 0x1004e2ba
and dword [ebp - 0x1a8], 0
mov eax, 0x9978
sub eax, dword [ebp - 0x1a8]
je 0x1004e2dc
mov dword [ebp - 0x284], 0xefa97f51
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x284], eax
jmp 0x1004e358
mov dword [ebp - 0x3c], 3
jmp 0x1004e2ec
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1004e358
mov dword [ebp - 0x2c], 0
jmp 0x1004e302
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x1004e338
mov dword [ebp - 0x50], 0
jmp 0x1004e318
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jg 0x1004e336
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x1004e334
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
jmp 0x1004e311
jmp 0x1004e2fb
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x1004e356
push 0x80
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
jmp 0x1004e2e5
jmp 0x1004e1b3
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3f8]
call fcn.10015999
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x254]
call fcn.10015999
jmp 0x1004e113
mov dword [ebp - 0x38], 0x4b283066
mov dword [ebp - 0xe0], 0x8d72a67f
mov dword [ebp - 0x60], 0xf1edd1ed
mov dword [ebp - 0x90], 0
jmp 0x1004e3b1
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1004e3cd
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x440], 6
jmp 0x1004e3a4
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x1004e3df
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov dword [ebp - 0x38], 2
cmp dword [ebp - 0x38], 0
jne 0x1004e4fc
cmp dword [ebp - 0x38], 1
je 0x1004e402
mov dword [ebp - 0x218], 1
jmp 0x1004e409
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 0x7bc9
je 0x1004e421
mov dword [ebp - 0xd8], 1
jmp 0x1004e428
and dword [ebp - 0xd8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd8]
mov dword [ebp + eax - 0x440], ecx
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xe0], eax
je 0x1004e45e
mov dword [ebp - 0x1b0], 1
jmp 0x1004e465
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1b0], eax
jge 0x1004e47c
mov dword [ebp - 0x1f8], 1
jmp 0x1004e483
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x1f8]
jge 0x1004e49a
mov dword [ebp - 0x11c], 1
jmp 0x1004e4a1
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0
je 0x1004e4b6
mov dword [ebp - 0x134], 1
jmp 0x1004e4bd
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0x42573927
jne 0x1004e4d5
mov dword [ebp - 0x2d4], 1
jmp 0x1004e4dc
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x38]
test eax, eax
jne 0x1004e4fc
and dword [ebp - 0x13c], 0
jmp 0x1004e506
mov dword [ebp - 0x13c], 1
cmp dword [ebp - 0x13c], 0xde467b47
jbe 0x1004e51e
mov dword [ebp - 0x144], 1
jmp 0x1004e525
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x144], eax
jl 0x1004e53c
mov dword [ebp - 0x14c], 1
jmp 0x1004e543
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
sub eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x60]
jl 0x1004e55d
mov dword [ebp - 0x118], 1
jmp 0x1004e564
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x60]
jge 0x1004e57e
mov dword [ebp - 0x15c], 1
jmp 0x1004e585
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x24], 0
jmp 0x1004e59e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1004e5b4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x390], 4
jmp 0x1004e597
mov dword [ebp - 0x98], 5
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x398], 1
mov dword [ebp - 0x3a0], 0xb4ef66b1
mov dword [ebp - 0x3ac], 0xdd7770b1
push 4
lea ecx, [ebp - 0x354]
call fcn.10015917
mov dword [ebp - 4], 9
mov dword [ebp - 0x3b8], 0x6d065835
mov dword [ebp - 0xe8], 0x1afe
push 1
lea ecx, [ebp - 0x348]
call fcn.10015917
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x20], 0
jmp 0x1004e62f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x1004e64b
push dword [ebp - 0x20]
lea ecx, [ebp - 0x354]
call fcn.100159b5
mov dword [eax], 1
jmp 0x1004e628
mov dword [ebp - 0x20], 0
jmp 0x1004e65b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1004e677
push dword [ebp - 0x20]
lea ecx, [ebp - 0x348]
call fcn.100159b5
mov dword [eax], 1
jmp 0x1004e654
mov dword [ebp - 0x98], 0xfffffff6
jmp 0x1004e690
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x1004e965
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x28c], 0xffffffff
push 1
lea ecx, [ebp - 0x300]
call fcn.10015917
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xa0], 0
jmp 0x1004e6db
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x1004e6fd
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x300]
call fcn.100159b5
mov dword [eax], 0xf985589b
jmp 0x1004e6ce
mov dword [ebp - 0xa8], 2
jmp 0x1004e716
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x10
jge 0x1004e92b
push 4
lea ecx, [ebp - 0x130]
call fcn.10015917
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x428], 4
mov dword [ebp - 0x414], 0xfffffffd
push 4
lea ecx, [ebp - 0x378]
call fcn.10015917
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x37c], 0xbb30
mov dword [ebp - 0x10], 0
jmp 0x1004e773
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1004e789
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x458], 0xac453072
jmp 0x1004e76c
mov dword [ebp - 0x10], 0
jmp 0x1004e799
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1004e7b5
push dword [ebp - 0x10]
lea ecx, [ebp - 0x130]
call fcn.100159b5
mov dword [eax], 1
jmp 0x1004e792
mov dword [ebp - 0x10], 0
jmp 0x1004e7c5
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1004e7e1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x378]
call fcn.100159b5
mov dword [eax], 0x18c9a01c
jmp 0x1004e7be
push 1
lea ecx, [ebp - 0x130]
call fcn.100159b5
and dword [eax], 0
jmp 0x1004e817
push 1
lea ecx, [ebp - 0x130]
call fcn.100159b5
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x164]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x130]
call fcn.100159b5
cmp dword [eax], 2
jg 0x1004e8df
mov dword [ebp - 0x384], 0x6c902da
mov dword [ebp - 0x41c], 0xc3d069f4
mov dword [ebp - 0x74], 0
jmp 0x1004e851
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1004e867
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x38c], 0x9acd4098
jmp 0x1004e84a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
mov esi, dword [ebp - 0xe8]
push 1
lea ecx, [ebp - 0x130]
call fcn.100159b5
mov eax, dword [eax]
mov edi, dword [ebp + eax*4 - 0x458]
imul edi, esi
push 1
lea ecx, [ebp - 0x354]
call fcn.100159b5
mov dword [eax], edi
push 0
lea ecx, [ebp - 0x300]
call fcn.100159b5
mov dword [ebp - 0x16c], eax
push 1
lea ecx, [ebp - 0x130]
call fcn.100159b5
mov ecx, dword [ebp - 0x16c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov dword [ebp - 0x28c], eax
jmp 0x1004e7f3
cmp dword [ebp - 0x2bc], 0
je 0x1004e908
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x378]
call fcn.10015999
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x130]
call fcn.10015999
jmp 0x1004e92b
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x378]
call fcn.10015999
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x130]
call fcn.10015999
jmp 0x1004e709
push 0
lea ecx, [ebp - 0x348]
call fcn.100159b5
cmp dword [eax], 0
je 0x1004e951
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x300]
call fcn.10015999
jmp 0x1004e683
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x300]
call fcn.10015999
jmp 0x1004e683
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x348]
call fcn.10015999
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x354]
call fcn.10015999
mov dword [ebp - 0x24], 0
jmp 0x1004e993
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1004e9a9
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x408], 0
jmp 0x1004e98c
mov dword [ebp - 0x314], 0x3dd33a4a
mov dword [ebp - 0x310], 0x3dd33a4a
mov dword [ebp - 0x30c], 0x3dd33a4a
mov dword [ebp - 0x308], 0x3dd33a4a
lea ecx, [ebp - 0xd1]
call fcn.10008cf3
push eax
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp - 0x470]
call fcn.100159c4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x114]
call fcn.10015973
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x2c0], 0x8cdac369
mov dword [ebp - 0x3fc], 0x1a2c
mov dword [ebp - 0x14], 3
jmp 0x1004ea38
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1004ecd0
mov dword [ebp - 0x34], 0xe8c9f369
mov byte [ebp - 0x48], 0
movzx eax, byte [ebp - 0x48]
test eax, eax
je 0x1004ea5b
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [ebp - 0x34], 3
jmp 0x1004ea6b
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1004eccb
mov dword [ebp - 0x294], 0x51d77f17
mov dword [ebp - 0x18c], 0xfffffffc
mov dword [ebp - 0x78], 0
jmp 0x1004ea99
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x1004eaaf
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x480], 0xfffffff8
jmp 0x1004ea92
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.100159b5
cmp dword [ebp - 0x294], 3
jae 0x1004ead2
mov dword [ebp - 0x174], 1
jmp 0x1004ead9
and dword [ebp - 0x174], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x114]
call fcn.100159b5
mov eax, dword [eax]
cmp eax, dword [ebp - 0x174]
je 0x1004eafd
mov dword [ebp - 0xf0], 1
jmp 0x1004eb04
and dword [ebp - 0xf0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf0]
mov dword [ebp + eax - 0x480], ecx
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0x34]
je 0x1004eb26
cmp dword [ebp - 0x14], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x114]
call fcn.100159b5
mov ecx, dword [ebp - 0x14]
cmp dword [eax], ecx
jle 0x1004eb47
mov dword [ebp - 0x17c], 1
jmp 0x1004eb4e
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
add eax, 0x7bb456e
cmp eax, 0xffffffff
jle 0x1004eb7a
push dword [ebp - 0x34]
lea ecx, [ebp - 0x114]
call fcn.100159b5
cmp dword [eax], 0
jne 0x1004eb7a
and dword [ebp - 0x184], 0
jmp 0x1004eb84
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xbbda73a1
je 0x1004eba8
mov dword [ebp - 0x194], 1
jmp 0x1004ebaf
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0x25bb5a27
jg 0x1004ebc7
mov dword [ebp - 0x19c], 1
jmp 0x1004ebce
and dword [ebp - 0x19c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.100159b5
mov ecx, dword [ebp - 0x19c]
imul ecx, dword [eax]
add ecx, dword [ebp - 0x14]
jne 0x1004ec05
push 0
lea ecx, [ebp - 0x114]
call fcn.100159b5
cmp dword [eax], 0
jne 0x1004ec05
and dword [ebp - 0x1a4], 0
jmp 0x1004ec0f
mov dword [ebp - 0x1a4], 1
mov esi, dword [ebp - 0x1a4]
sub esi, dword [ebp - 0x14]
push 3
lea ecx, [ebp - 0x114]
call fcn.100159b5
cmp esi, dword [eax]
jne 0x1004ec35
mov dword [ebp - 0x1ac], 1
jmp 0x1004ec3c
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1ac], eax
jne 0x1004ec53
mov dword [ebp - 0x1b4], 1
jmp 0x1004ec5a
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0x7a540f82
jl 0x1004ec72
mov dword [ebp - 0x1bc], 1
jmp 0x1004ec79
and dword [ebp - 0x1bc], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x114]
call fcn.100159b5
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.100159b5
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x1bc]
imul ecx, dword [eax]
cmp dword [esi], ecx
jl 0x1004ecb3
mov dword [ebp - 0x1c4], 1
jmp 0x1004ecba
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x2c0], eax
jmp 0x1004ea64
jmp 0x1004ea31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call fcn.10015999
mov dword [ebp - 0x30], 0x824a8c6a
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0xf8], 0
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x1004ed38
push 0x1008
push 0x41e
push 0x3b2
push 0x1fd8
push 0x92d
push 0x1652
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
mov dword [ebp - 0x30], 0
jmp 0x1004ed48
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffff5
je 0x1004ef08
push 3
lea ecx, [ebp - 0x2e4]
call fcn.10015917
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x100], 0x9974082
mov dword [ebp - 0x2ac], 0xffffffff
mov dword [ebp - 0x7c], 0
jmp 0x1004ed8a
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1004eda6
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x2e4]
call fcn.100159b5
mov dword [eax], 0x968939f5
jmp 0x1004ed83
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jne 0x1004edba
mov dword [ebp - 0x1d4], 1
jmp 0x1004edc1
and dword [ebp - 0x1d4], 0
push 2
lea ecx, [ebp - 0x2e4]
call fcn.100159b5
mov eax, dword [eax]
mov dword [ebp - 0x1cc], eax
mov esi, dword [ebp - 0x1cc]
push 2
lea ecx, [ebp - 0x2e4]
call fcn.100159b5
add esi, dword [eax]
cmp esi, 0xffffffff
jge 0x1004edfc
mov dword [ebp - 0x29c], 1
jmp 0x1004ee03
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0xf8]
imul eax, dword [ebp - 0xf8]
test eax, eax
jne 0x1004ee26
cmp dword [ebp - 0x100], 0
jne 0x1004ee26
and dword [ebp - 0x1dc], 0
jmp 0x1004ee30
mov dword [ebp - 0x1dc], 1
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x1dc]
jge 0x1004ee4a
mov dword [ebp - 0x2c8], 1
jmp 0x1004ee51
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x30], 1
jge 0x1004ee6f
mov dword [ebp - 0x1e4], 1
jmp 0x1004ee76
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x1e4], eax
jl 0x1004ee90
mov dword [ebp - 0x1ec], 1
jmp 0x1004ee97
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x1ec], eax
je 0x1004eeb1
mov dword [ebp - 0x1f4], 1
jmp 0x1004eeb8
and dword [ebp - 0x1f4], 0
mov esi, dword [ebp - 0x30]
add esi, dword [ebp - 0x1f4]
sub esi, dword [ebp - 0x30]
push 2
lea ecx, [ebp - 0x2e4]
call fcn.100159b5
cmp esi, dword [eax]
jl 0x1004eee1
mov dword [ebp - 0x1fc], 1
jmp 0x1004eee8
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x2ac], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e4]
call fcn.10015999
jmp 0x1004ed41
mov byte [ebp - 0x3d], 0
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x268], 0xec51938d
mov dword [ebp - 0xb8], 0
jmp 0x1004ef40
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x1004ef5c
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x3a8], 0xfffffff6
jmp 0x1004ef33
mov dword [ebp - 0x64], 0
jmp 0x1004ef6c
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x1004f128
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0xc0], 0
jmp 0x1004efa0
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x1004efbc
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x260], 1
jmp 0x1004ef93
mov dword [ebp - 0x58], 0
jmp 0x1004efcc
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jg 0x1004f0f3
mov dword [ebp - 0x410], 0
mov dword [ebp - 0xa4], 0
jmp 0x1004eff9
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1004f015
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x44c], 0xfc0233fd
jmp 0x1004efec
cmp dword [ebp - 0x58], 0
je 0x1004f08f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x44c], 0
jg 0x1004f036
mov dword [ebp - 0x2d0], 1
jmp 0x1004f03d
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x25c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x25c]
mov dword [ebp + eax - 0x260], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a8]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x204], eax
jle 0x1004f08f
mov dword [ebp - 0x20c], 1
jmp 0x1004f096
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x20c], eax
jg 0x1004f0b0
cmp dword [ebp - 0x58], 0
jne 0x1004f0b0
and dword [ebp - 0x214], 0
jmp 0x1004f0ba
mov dword [ebp - 0x214], 1
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0xfffffff8
jg 0x1004f0db
mov dword [ebp - 0x224], 1
jmp 0x1004f0e2
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x268], eax
jmp 0x1004efc5
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x1004f123
push 0x254
push 0
push 0
push 0x485
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
jmp 0x1004ef65
lea eax, [ebp - 0x3d]
push eax
push 1
push 0x574b
call fcn.1004b257
add esp, 0xc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x408]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x408], eax
cmp dword [ebp - 0x2f4], 0
je 0x1004f173
push 5
push dword [ebp - 0x2ec]
push dword [ebp - 0x2f0]
call dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret