Function at 0x10009134
Capabilities:
Check for time delay via gettickcount
Check http status code
Create process on windows
Enumerate gui resources
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007a67d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1188
call fcn.10076890
push esi
push edi
mov dword [ebp - 0x20], 0xe1abe8f2
mov dword [ebp - 0x3a8], 0xfc5c2f0
mov dword [ebp - 0xeb4], 0
xor eax, eax
jne 0x100091ad
cmp dword [ebp - 0x20], 0
je 0x10009192
mov eax, 0x25155467
test eax, eax
je 0x10009192
mov dword [ebp - 0x76c], 1
jmp 0x10009199
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x76c]
jne 0x100091ad
and dword [ebp - 0x378], 0
jmp 0x100091b7
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x378]
cmp dword [ebp - 0x20], eax
jl 0x100091d1
mov dword [ebp - 0x850], 1
jmp 0x100091d8
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x850], eax
jl 0x100091ef
mov dword [ebp - 0xa34], 1
jmp 0x100091f6
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xe5c], eax
xor eax, eax
inc eax
jne 0x10009211
xor eax, eax
jne 0x10009211
and dword [ebp - 0x380], 0
jmp 0x1000921b
mov dword [ebp - 0x380], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x380], eax
je 0x10009232
mov dword [ebp - 0x858], 1
jmp 0x10009239
and dword [ebp - 0x858], 0
imul eax, dword [ebp - 0x858], 0xfff7
cmp eax, 0xfff6
jne 0x10009256
mov dword [ebp - 0x388], 1
jmp 0x1000925d
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
sub eax, dword [ebp - 0x20]
imul eax, eax, 0x39d9
test eax, eax
je 0x10009295
mov dword [ebp - 0xb5c], 0xcf86511
mov dword [ebp - 0xa90], 0x69be541
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0xa90], eax
jmp 0x100094eb
mov dword [ebp - 0xa44], 1
mov dword [ebp - 0x870], 0xfffffffb
mov dword [ebp - 0xe8], 0
jmp 0x100092c2
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x100092de
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0xb84], 8
jmp 0x100092b5
mov dword [ebp - 0xe8], 0
jmp 0x100092f7
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x10009313
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0xe70], 0xfffffffb
jmp 0x100092ea
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb84]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0xb84]
jne 0x1000933d
cmp dword [ebp - 0x20], 0
jne 0x1000933d
and dword [ebp - 0x860], 0
jmp 0x10009347
mov dword [ebp - 0x860], 1
cmp dword [ebp - 0x860], 0xb91300d3
je 0x1000935f
mov dword [ebp - 0x390], 1
jmp 0x10009366
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x390], eax
jg 0x1000937d
mov dword [ebp - 0x868], 1
jmp 0x10009384
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x868], eax
jl 0x1000939b
mov dword [ebp - 0x398], 1
jmp 0x100093a2
and dword [ebp - 0x398], 0
cmp dword [ebp - 0x398], 0
jle 0x100093c4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb84], 0
jne 0x100093c4
and dword [ebp - 0x3a0], 0
jmp 0x100093ce
mov dword [ebp - 0x3a0], 1
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0x870], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb84]
imul eax, dword [ebp - 0x870]
cmp eax, dword [ebp - 0x3a0]
jge 0x10009402
mov dword [ebp - 0x878], 1
jmp 0x10009409
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x878]
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0x3942
jl 0x1000942d
mov dword [ebp - 0x880], 1
jmp 0x10009434
and dword [ebp - 0x880], 0
cmp dword [ebp - 0x880], 0x3ed8
jg 0x1000944c
mov dword [ebp - 0x3b0], 1
jmp 0x10009453
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3b0], eax
jl 0x1000946a
mov dword [ebp - 0x888], 1
jmp 0x10009471
and dword [ebp - 0x888], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb84]
cmp dword [ebp - 0x888], eax
jl 0x10009497
or eax, 0xffffffff
je 0x10009497
mov dword [ebp - 0x3b8], 1
jmp 0x1000949e
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3b8], eax
jle 0x100094b5
mov dword [ebp - 0x890], 1
jmp 0x100094bc
and dword [ebp - 0x890], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x890]
mov dword [ebp + eax - 0xe70], ecx
mov byte [ebp - 0x14e], 0
movzx eax, byte [ebp - 0x14e]
test eax, eax
je 0x100094eb
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0x194], 0xffffffff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x300], 0xfffffffd
push 4
lea ecx, [ebp - 0xdd4]
call fcn.10015d9e
and dword [ebp - 4], 0
mov dword [ebp - 0x2c4], 0
jmp 0x10009533
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 4
jge 0x10009555
push dword [ebp - 0x2c4]
lea ecx, [ebp - 0xdd4]
call fcn.10015e0b
mov dword [eax], 7
jmp 0x10009526
mov dword [ebp - 0x194], 0
jmp 0x1000956e
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xd
je 0x100096e5
mov dword [ebp - 0x98], 0
cmp dword [ebp - 0x98], 0
je 0x1000962c
cmp dword [ebp - 0x98], 3
jle 0x100095a7
mov dword [ebp - 0x3c0], 1
jmp 0x100095ae
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x194], eax
jge 0x100095c8
mov dword [ebp - 0xb44], 1
jmp 0x100095cf
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xe64], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xef4], eax
cmp dword [ebp - 0x300], 0xd7006986
ja 0x100095ff
mov dword [ebp - 0x898], 1
jmp 0x10009606
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x3c0]
add eax, dword [ebp - 0x898]
add eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x98]
jg 0x1000962c
mov dword [ebp - 0x3c8], 1
jmp 0x10009633
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x3c8], eax
je 0x1000964d
mov dword [ebp - 0x8a0], 1
jmp 0x10009654
and dword [ebp - 0x8a0], 0
cmp dword [ebp - 0x8a0], 0
jl 0x10009669
mov dword [ebp - 0x3d0], 1
jmp 0x10009670
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x3d0], 0x3111738a
je 0x10009688
mov dword [ebp - 0x8a8], 1
jmp 0x1000968f
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x98], 0
jmp 0x100096bb
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x29
jg 0x100096e0
mov byte [ebp - 0x180], 0
movzx eax, byte [ebp - 0x180]
test eax, eax
je 0x100096de
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x100096ae
jmp 0x10009561
mov dword [ebp - 0x114], 0
jmp 0x100096fe
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 4
jge 0x1000971d
push dword [ebp - 0x114]
lea ecx, [ebp - 0xdd4]
call fcn.10015e0b
and dword [eax], 0
jmp 0x100096f1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdd4]
call fcn.10015e06
mov dword [ebp - 0x100], 0xeca4
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x408], 0x36d0c11e
mov dword [ebp - 0x8d8], 0
mov dword [ebp - 0xa4c], 9
mov dword [ebp - 0xefc], 0x842b4cf2
mov dword [ebp - 0x23c], 0
jmp 0x10009781
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 3
jge 0x1000979d
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x1024], 0xc43cc9f1
jmp 0x10009774
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0xf04], eax
cmp dword [ebp - 0x100], 0x8ec
jge 0x100097cd
mov dword [ebp - 0x3d8], 1
jmp 0x100097d4
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0
jae 0x100097ef
cmp dword [ebp - 0x100], 0
jne 0x100097ef
and dword [ebp - 0x8b0], 0
jmp 0x100097f9
mov dword [ebp - 0x8b0], 1
mov eax, dword [ebp - 0x408]
cmp dword [ebp - 0x8b0], eax
jne 0x10009813
mov dword [ebp - 0x3e0], 1
jmp 0x1000981a
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 3
ja 0x1000982f
mov dword [ebp - 0x8b8], 1
jmp 0x10009836
and dword [ebp - 0x8b8], 0
cmp dword [ebp - 0x8b8], 0xeef7d266
jne 0x1000984e
mov dword [ebp - 0x3e8], 1
jmp 0x10009855
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
sub eax, 0xe283
mov dword [ebp - 0x8c0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8c0]
mov dword [ebp + eax - 0x1024], ecx
cmp dword [ebp - 0x8c0], 0
jne 0x10009892
push 9
pop eax
test eax, eax
jne 0x10009892
and dword [ebp - 0x3f0], 0
jmp 0x1000989c
mov dword [ebp - 0x3f0], 1
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x204]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0x3f0]
jge 0x100098c8
mov dword [ebp - 0x8c8], 1
jmp 0x100098cf
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x8c8], eax
jne 0x100098f9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1024], 0
je 0x100098f9
mov dword [ebp - 0x3f8], 1
jmp 0x10009900
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x3f8], eax
jne 0x1000991c
xor eax, eax
inc eax
jne 0x1000991c
and dword [ebp - 0x8d0], 0
jmp 0x10009926
mov dword [ebp - 0x8d0], 1
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x8d0], eax
jne 0x10009940
mov dword [ebp - 0x400], 1
jmp 0x10009947
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0x8d8]
mov dword [ebp - 0xf0c], eax
cmp dword [ebp - 0x100], 0xf141
jne 0x10009977
mov dword [ebp - 0x8e0], 1
jmp 0x1000997e
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x408]
cmp dword [ebp - 0x8e0], eax
jl 0x10009998
mov dword [ebp - 0x410], 1
jmp 0x1000999f
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0x28], 0xe1abe8f2
mov dword [ebp - 0x1ec], 1
mov dword [ebp - 0xd0], 0
jmp 0x100099d5
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x100099f1
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x1174], 0
jmp 0x100099c8
mov dword [ebp - 0xd0], 0
jmp 0x10009a0a
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x10009a26
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0xb68], 0x9cd4431f
jmp 0x100099fd
mov byte [ebp - 0x14f], 0
movzx eax, byte [ebp - 0x14f]
test eax, eax
je 0x10009a44
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov dword [ebp - 0x1ec], 0
jmp 0x10009a5d
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jg 0x10009bbb
mov dword [ebp - 0x214], 0x53bc
cmp dword [ebp - 0x214], 0
je 0x10009a99
mov dword [ebp - 0x8e8], 8
mov eax, dword [ebp - 0x8e8]
inc eax
mov dword [ebp - 0x8e8], eax
jmp 0x10009ba4
mov dword [ebp - 0xa0], 0xffffffff
cmp dword [ebp - 0x214], 0
je 0x10009ac1
cmp dword [ebp - 0xa0], 0
je 0x10009ac1
mov dword [ebp - 0x420], 1
jmp 0x10009ac8
and dword [ebp - 0x420], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb68], 0xce3051eb
cmp dword [ebp - 0xa0], 0xce3051eb
jle 0x10009af1
mov dword [ebp - 0x418], 1
jmp 0x10009af8
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
sub eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0xa0], eax
jl 0x10009b18
mov dword [ebp - 0x8f0], 1
jmp 0x10009b1f
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x8f0], eax
jne 0x10009b39
mov dword [ebp - 0x8f8], 1
jmp 0x10009b40
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0x420]
sub eax, dword [ebp - 0x8f8]
add eax, 4
sub eax, dword [ebp - 0x214]
je 0x10009b99
cmp dword [ebp - 0x214], 0
je 0x10009b62
jmp 0x10009bbb
mov dword [ebp - 0xa0], 0
jmp 0x10009b7b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x10009b97
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xb68], 2
jmp 0x10009b6e
jmp 0x10009ba4
cmp dword [ebp - 0x214], 0
je 0x10009ba4
jmp 0x10009bbb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb68], 0
je 0x10009bb6
jmp 0x10009bbb
jmp 0x10009a50
mov dword [ebp - 0x480], 0xfc5c2f0
mov dword [ebp - 0xf14], 0
xor eax, eax
jne 0x10009c09
cmp dword [ebp - 0x28], 0
je 0x10009bee
mov eax, 0x25155467
test eax, eax
je 0x10009bee
mov dword [ebp - 0x428], 1
jmp 0x10009bf5
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x428]
jne 0x10009c09
and dword [ebp - 0x900], 0
jmp 0x10009c13
mov dword [ebp - 0x900], 1
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x900]
cmp dword [ebp - 0x28], eax
jl 0x10009c2d
mov dword [ebp - 0x430], 1
jmp 0x10009c34
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x430], eax
jl 0x10009c4b
mov dword [ebp - 0xc68], 1
jmp 0x10009c52
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xf1c], eax
xor eax, eax
inc eax
jne 0x10009c6d
xor eax, eax
jne 0x10009c6d
and dword [ebp - 0x908], 0
jmp 0x10009c77
mov dword [ebp - 0x908], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x908], eax
je 0x10009c8e
mov dword [ebp - 0x438], 1
jmp 0x10009c95
and dword [ebp - 0x438], 0
imul eax, dword [ebp - 0x438], 0xfff7
cmp eax, 0xfff6
jne 0x10009cb2
mov dword [ebp - 0x910], 1
jmp 0x10009cb9
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x910]
sub eax, dword [ebp - 0x28]
imul eax, eax, 0x39d9
test eax, eax
je 0x10009ea2
mov dword [ebp - 0xb38], 0xcf86511
mov dword [ebp - 0xa5c], 0x69be541
mov dword [ebp - 0x440], 3
mov dword [ebp - 0xa54], 0xffffffff
mov dword [ebp - 0x458], 0
mov dword [ebp - 0xf4], 0
jmp 0x10009d1b
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 4
jge 0x10009d37
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0xca4], 0xffffffff
jmp 0x10009d0e
mov dword [ebp - 0xf4], 0
jmp 0x10009d50
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x10009d6c
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x1100], 0x812a3cc9
jmp 0x10009d43
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xca4]
mov dword [ebp - 0x440], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xca4]
cmp eax, dword [ebp - 0x440]
jg 0x10009da0
mov dword [ebp - 0x920], 1
jmp 0x10009da7
and dword [ebp - 0x920], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xca4]
mov dword [ebp - 0xf24], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xca4]
cmp dword [ebp + eax - 0xca4], ecx
jl 0x10009de2
mov dword [ebp - 0x918], 1
jmp 0x10009de9
and dword [ebp - 0x918], 0
cmp dword [ebp - 0x918], 0x1e4f
je 0x10009e01
mov dword [ebp - 0x448], 1
jmp 0x10009e08
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0xa54]
cmp dword [ebp - 0x448], eax
jg 0x10009e22
mov dword [ebp - 0x450], 1
jmp 0x10009e29
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x920]
cmp eax, dword [ebp - 0x450]
jle 0x10009e43
mov dword [ebp - 0x928], 1
jmp 0x10009e4a
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x928]
mov dword [ebp - 0x458], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xca4]
cmp eax, dword [ebp - 0x458]
jne 0x10009e77
mov dword [ebp - 0x930], 1
jmp 0x10009e7e
and dword [ebp - 0x930], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x930]
mov dword [ebp + eax - 0x1100], ecx
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0xa5c], eax
jmp 0x1000a1af
mov dword [ebp - 0xf2c], 0xfffffffa
mov dword [ebp - 0xf34], 0x3f4f46db
push 1
lea ecx, [ebp - 0x1034]
call fcn.10015d9e
mov dword [ebp - 4], 1
mov dword [ebp - 0xf3c], 0x8f5f4990
mov dword [ebp - 0xf44], 0xffffffff
mov dword [ebp - 0x460], 0x74d
mov dword [ebp - 0x28c], 0
jmp 0x10009f01
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x10009f23
push dword [ebp - 0x28c]
lea ecx, [ebp - 0x1034]
call fcn.10015e0b
mov dword [eax], 0x1f665683
jmp 0x10009ef4
mov byte [ebp - 0x182], 0
movzx eax, byte [ebp - 0x182]
test eax, eax
je 0x10009f3d
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov eax, dword [ebp - 0x460]
dec eax
mov dword [ebp - 0x460], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1034]
call fcn.10015e06
mov dword [ebp - 0xbc8], 1
mov dword [ebp - 0x948], 0xfffffffb
mov dword [ebp - 0xa8], 0
jmp 0x10009f86
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10009fa2
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xb94], 8
jmp 0x10009f79
mov dword [ebp - 0xa8], 0
jmp 0x10009fbb
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x10009fd7
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xe7c], 0xfffffffb
jmp 0x10009fae
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb94]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0xb94]
jne 0x1000a001
cmp dword [ebp - 0x28], 0
jne 0x1000a001
and dword [ebp - 0x938], 0
jmp 0x1000a00b
mov dword [ebp - 0x938], 1
cmp dword [ebp - 0x938], 0xb91300d3
je 0x1000a023
mov dword [ebp - 0x468], 1
jmp 0x1000a02a
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x468], eax
jg 0x1000a041
mov dword [ebp - 0x940], 1
jmp 0x1000a048
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x940], eax
jl 0x1000a05f
mov dword [ebp - 0x470], 1
jmp 0x1000a066
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0
jle 0x1000a088
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb94], 0
jne 0x1000a088
and dword [ebp - 0x478], 0
jmp 0x1000a092
mov dword [ebp - 0x478], 1
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0x948], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb94]
imul eax, dword [ebp - 0x948]
cmp eax, dword [ebp - 0x478]
jge 0x1000a0c6
mov dword [ebp - 0x950], 1
jmp 0x1000a0cd
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x950]
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0x3942
jl 0x1000a0f1
mov dword [ebp - 0x958], 1
jmp 0x1000a0f8
and dword [ebp - 0x958], 0
cmp dword [ebp - 0x958], 0x3ed8
jg 0x1000a110
mov dword [ebp - 0x488], 1
jmp 0x1000a117
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x488], eax
jl 0x1000a12e
mov dword [ebp - 0x960], 1
jmp 0x1000a135
and dword [ebp - 0x960], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb94]
cmp dword [ebp - 0x960], eax
jl 0x1000a15b
or eax, 0xffffffff
je 0x1000a15b
mov dword [ebp - 0x490], 1
jmp 0x1000a162
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x490], eax
jle 0x1000a179
mov dword [ebp - 0x968], 1
jmp 0x1000a180
and dword [ebp - 0x968], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x968]
mov dword [ebp + eax - 0xe7c], ecx
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x1000a1af
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0x24], 0xe1abe8f2
mov dword [ebp - 0xb0], 3
push 3
lea ecx, [ebp - 0xe04]
call fcn.10015d9e
mov dword [ebp - 4], 2
mov dword [ebp - 0xa6c], 4
mov dword [ebp - 0xd8], 0
jmp 0x1000a1f7
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x1000a216
push dword [ebp - 0xd8]
lea ecx, [ebp - 0xe04]
call fcn.10015e0b
or dword [eax], 0xffffffff
jmp 0x1000a1ea
mov dword [ebp - 0xd8], 0
jmp 0x1000a22f
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x1000a24b
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x1044], 0xffffffff
jmp 0x1000a222
mov dword [ebp - 0xb0], 0
jmp 0x1000a264
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xfffffff6
jle 0x1000a2ec
mov dword [ebp - 0x244], 0xffffffff
mov dword [ebp - 0x244], 0x1c
jmp 0x1000a290
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0xffffffef
jne 0x1000a2e7
mov dword [ebp - 0x2b4], 0xfffffff6
mov dword [ebp - 0x2b4], 2
jmp 0x1000a2bc
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x13
jl 0x1000a2e5
mov byte [ebp - 0x184], 0
movzx eax, byte [ebp - 0x184]
test eax, eax
je 0x1000a2e3
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
jmp 0x1000a2af
jmp 0x1000a283
jmp 0x1000a257
push 0
lea ecx, [ebp - 0xe04]
call fcn.10015e0b
mov dword [eax], 0xb27f
mov eax, 0x598a
sub eax, 0xb27f
mov ecx, dword [ebp - 0xb0]
imul ecx, eax
cmp ecx, 0xc5a3d7f1
jbe 0x1000a326
mov dword [ebp - 0xa64], 1
jmp 0x1000a32d
and dword [ebp - 0xa64], 0
cmp dword [ebp - 0xb0], 0x9bca
jg 0x1000a345
mov dword [ebp - 0x498], 1
jmp 0x1000a34c
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0x498]
cmp eax, dword [ebp - 0xb0]
je 0x1000a36d
mov dword [ebp - 0x970], 1
jmp 0x1000a374
and dword [ebp - 0x970], 0
cmp dword [ebp - 0x970], 1
jae 0x1000a389
mov dword [ebp - 0xb40], 1
jmp 0x1000a390
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0xa6c]
mov dword [ebp - 0xf4c], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xf54], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x1044]
mov dword [ebp + ecx - 0x1044], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe04]
call fcn.10015e06
mov dword [ebp - 0x904], 0xfc5c2f0
mov dword [ebp - 0xf5c], 0
mov dword [ebp - 0x74], 0xad59
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 0x2c], 0xa3888451
mov dword [ebp - 0x308], 0x90aec51
mov dword [ebp - 0xa74], 0xc33bab72
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xf64], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x2c], eax
jne 0x1000a440
mov dword [ebp - 0x4a0], 1
jmp 0x1000a447
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 0x1b66bafc
jl 0x1000a45f
mov dword [ebp - 0x978], 1
jmp 0x1000a466
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x978]
jle 0x1000a47d
mov dword [ebp - 0x4a8], 1
jmp 0x1000a484
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 5
jle 0x1000a499
mov dword [ebp - 0x980], 1
jmp 0x1000a4a0
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x74], eax
jge 0x1000a80b
mov dword [ebp - 0xd6c], 2
mov dword [ebp - 0xd68], 2
mov dword [ebp - 0xd64], 2
mov dword [ebp - 0xd60], 2
lea ecx, [ebp - 0x2e5]
call fcn.10008f83
push eax
lea eax, [ebp - 0xd5c]
push eax
lea eax, [ebp - 0xd6c]
push eax
lea ecx, [ebp - 0x1114]
call fcn.10015e1a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xba4]
call fcn.10015de0
mov dword [ebp - 4], 3
mov dword [ebp - 0x74], 0
jmp 0x1000a520
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jg 0x1000a7fa
mov dword [ebp - 0x1f4], 0xdd2ac30b
mov dword [ebp - 0x2c], 0
jmp 0x1000a544
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x1000a7f5
mov dword [ebp - 0x360], 0xb25631cd
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x4b8], 0x2ca8e1f9
mov dword [ebp - 0x11c], 0
jmp 0x1000a585
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jg 0x1000a7e4
mov dword [ebp - 0x19c], 0x3c576436
mov dword [ebp - 0x338], 0xffffffff
mov dword [ebp - 0x19c], 3
jmp 0x1000a5bf
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jl 0x1000a61a
mov dword [ebp - 0x24c], 0xfc80ae7b
mov dword [ebp - 0x24c], 0
jmp 0x1000a5eb
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jg 0x1000a618
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xba4]
call fcn.10015e0b
mov esi, eax
push dword [ebp - 0x74]
lea ecx, [ebp - 0xba4]
call fcn.10015e0b
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1000a5de
jmp 0x1000a5b2
mov eax, dword [ebp - 0x338]
dec eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x1f4], 1
jb 0x1000a63c
mov dword [ebp - 0x4b0], 1
jmp 0x1000a643
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x19c]
add eax, dword [ebp - 0x4b0]
cmp eax, dword [ebp - 0x4d0]
jg 0x1000a667
xor eax, eax
je 0x1000a667
mov dword [ebp - 0x988], 1
jmp 0x1000a66e
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x988]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x4b8]
cmp dword [ebp - 0x360], eax
jle 0x1000a694
mov dword [ebp - 0xc28], 1
jmp 0x1000a69b
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0xf6c], eax
cmp dword [ebp - 0x360], 4
jne 0x1000a6bc
mov dword [ebp - 0x990], 1
jmp 0x1000a6c3
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x990]
jne 0x1000a6d7
cmp dword [ebp - 0x338], 0
je 0x1000a6ea
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x1000a6ea
mov dword [ebp - 0x4c0], 1
jmp 0x1000a6f1
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
add eax, 0x70d9
je 0x1000a71c
cmp dword [ebp - 0x1f4], 0
je 0x1000a71c
cmp dword [ebp - 0x308], 0
je 0x1000a71c
mov dword [ebp - 0x998], 1
jmp 0x1000a723
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x998], eax
jge 0x1000a743
mov eax, 0x78c7
test eax, eax
jne 0x1000a743
and dword [ebp - 0x4c8], 0
jmp 0x1000a74d
mov dword [ebp - 0x4c8], 1
push 3
lea ecx, [ebp - 0xba4]
call fcn.10015e0b
mov eax, dword [eax]
imul eax, dword [ebp - 0x4c8]
test eax, eax
jne 0x1000a773
mov dword [ebp - 0x9a0], 1
jmp 0x1000a77a
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x9a0]
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
je 0x1000a79c
mov eax, 0x98319b20
test eax, eax
je 0x1000a79c
cmp dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0xf74], eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xba4]
call fcn.10015e0b
mov ecx, dword [ebp - 0x4d0]
cmp dword [eax], ecx
jge 0x1000a7cc
mov dword [ebp - 0x9a8], 1
jmp 0x1000a7d3
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x360], eax
jmp 0x1000a578
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1f4], eax
jmp 0x1000a53d
jmp 0x1000a519
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xba4]
call fcn.10015e06
jmp 0x1000a823
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x1000a823
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2c], 0xc964
cmp dword [ebp - 0x2c], 0xdce5
jl 0x1000a83f
mov dword [ebp - 0x4d8], 1
jmp 0x1000a846
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0xa74], eax
xor eax, eax
jne 0x1000a88c
cmp dword [ebp - 0x24], 0
je 0x1000a871
mov eax, 0x25155467
test eax, eax
je 0x1000a871
mov dword [ebp - 0x9b0], 1
jmp 0x1000a878
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x9b0]
jne 0x1000a88c
and dword [ebp - 0x4e0], 0
jmp 0x1000a896
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x4e0]
cmp dword [ebp - 0x24], eax
jl 0x1000a8b0
mov dword [ebp - 0x9b8], 1
jmp 0x1000a8b7
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x9b8], eax
jl 0x1000a8ce
mov dword [ebp - 0xb48], 1
jmp 0x1000a8d5
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xf7c], eax
xor eax, eax
inc eax
jne 0x1000a8f0
xor eax, eax
jne 0x1000a8f0
and dword [ebp - 0x4e8], 0
jmp 0x1000a8fa
mov dword [ebp - 0x4e8], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x4e8], eax
je 0x1000a911
mov dword [ebp - 0x9c0], 1
jmp 0x1000a918
and dword [ebp - 0x9c0], 0
imul eax, dword [ebp - 0x9c0], 0xfff7
cmp eax, 0xfff6
jne 0x1000a935
mov dword [ebp - 0x4f0], 1
jmp 0x1000a93c
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
sub eax, dword [ebp - 0x24]
imul eax, eax, 0x39d9
test eax, eax
je 0x1000a974
mov dword [ebp - 0xa7c], 0xcf86511
mov dword [ebp - 0xbd8], 0x69be541
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0xbd8], eax
jmp 0x1000b60c
mov dword [ebp - 0xa8c], 1
mov dword [ebp - 0x574], 0xfffffffb
push 2
lea ecx, [ebp - 0xbb4]
call fcn.10015d9e
mov dword [ebp - 4], 4
mov dword [ebp - 0xf84], 0
mov dword [ebp - 0xf8c], 0x7822e6e7
mov dword [ebp - 0xf94], 1
mov dword [ebp - 0x18], 0
jmp 0x1000a9ca
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1000a9e0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf9c], 0x327cb3f4
jmp 0x1000a9c3
mov dword [ebp - 0x18], 0
jmp 0x1000a9f0
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1000aa0c
push dword [ebp - 0x18]
lea ecx, [ebp - 0xbb4]
call fcn.10015e0b
mov dword [eax], 1
jmp 0x1000a9e9
mov dword [ebp - 0x18], 0
jmp 0x1000aa1c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1000aa32
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1184], 2
jmp 0x1000aa15
push 0
lea ecx, [ebp - 0xbb4]
call fcn.10015e0b
and dword [eax], 0
jmp 0x1000aa68
push 0
lea ecx, [ebp - 0xbb4]
call fcn.10015e0b
mov dword [ebp - 0x9c8], eax
mov eax, dword [ebp - 0x9c8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x9c8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xbb4]
call fcn.10015e0b
cmp dword [eax], 0
jg 0x1000ab3e
mov dword [ebp - 0xfa4], 0xfffffffa
push 3
lea ecx, [ebp - 0xdbc]
call fcn.10015d9e
mov byte [ebp - 4], 5
mov dword [ebp - 0x8c], 0
jmp 0x1000aab2
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x1000aace
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x114c], 1
jmp 0x1000aaa5
mov dword [ebp - 0x8c], 0
jmp 0x1000aae7
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1000ab06
push dword [ebp - 0x8c]
lea ecx, [ebp - 0xdbc]
call fcn.10015e0b
or dword [eax], 0xffffffff
jmp 0x1000aada
push 2
lea ecx, [ebp - 0xdbc]
call fcn.10015e0b
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x4f8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4f8]
mov dword [ecx], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xdbc]
call fcn.10015e06
jmp 0x1000aa44
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbb4]
call fcn.10015e06
mov dword [ebp - 0x1bc], 0xffffffff
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x310], 0xfffffffd
push 4
lea ecx, [ebp - 0xd98]
call fcn.10015d9e
mov dword [ebp - 4], 6
mov dword [ebp - 0x294], 0
jmp 0x1000ab98
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 4
jge 0x1000abba
push dword [ebp - 0x294]
lea ecx, [ebp - 0xd98]
call fcn.10015e0b
mov dword [eax], 7
jmp 0x1000ab8b
mov dword [ebp - 0x1bc], 0
jmp 0x1000abd3
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xd
je 0x1000ad4a
mov dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0
je 0x1000ac91
cmp dword [ebp - 0xb8], 3
jle 0x1000ac0c
mov dword [ebp - 0x9d0], 1
jmp 0x1000ac13
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x1bc], eax
jge 0x1000ac2d
mov dword [ebp - 0xa84], 1
jmp 0x1000ac34
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xfac], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xfb4], eax
cmp dword [ebp - 0x310], 0xd7006986
ja 0x1000ac64
mov dword [ebp - 0x500], 1
jmp 0x1000ac6b
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x9d0]
add eax, dword [ebp - 0x500]
add eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0xb8]
jg 0x1000ac91
mov dword [ebp - 0x9d8], 1
jmp 0x1000ac98
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x310]
cmp dword [ebp - 0x9d8], eax
je 0x1000acb2
mov dword [ebp - 0x508], 1
jmp 0x1000acb9
and dword [ebp - 0x508], 0
cmp dword [ebp - 0x508], 0
jl 0x1000acce
mov dword [ebp - 0x9e0], 1
jmp 0x1000acd5
and dword [ebp - 0x9e0], 0
cmp dword [ebp - 0x9e0], 0x3111738a
je 0x1000aced
mov dword [ebp - 0x510], 1
jmp 0x1000acf4
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0x510]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0xb8], 0
jmp 0x1000ad20
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x29
jg 0x1000ad45
mov byte [ebp - 0x186], 0
movzx eax, byte [ebp - 0x186]
test eax, eax
je 0x1000ad43
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x1000ad13
jmp 0x1000abc6
mov dword [ebp - 0x124], 0
jmp 0x1000ad63
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 4
jge 0x1000ad82
push dword [ebp - 0x124]
lea ecx, [ebp - 0xd98]
call fcn.10015e0b
and dword [eax], 0
jmp 0x1000ad56
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd98]
call fcn.10015e06
mov dword [ebp - 0xfc], 0xeca4
mov dword [ebp - 0x20c], 1
mov dword [ebp - 0xa18], 0x36d0c11e
mov dword [ebp - 0x540], 0
mov dword [ebp - 0xb50], 9
mov dword [ebp - 0xfbc], 0x842b4cf2
mov dword [ebp - 0x254], 0
jmp 0x1000ade6
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x1000ae02
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x1054], 0xc43cc9f1
jmp 0x1000add9
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0xfc4], eax
cmp dword [ebp - 0xfc], 0x8ec
jge 0x1000ae32
mov dword [ebp - 0x9e8], 1
jmp 0x1000ae39
and dword [ebp - 0x9e8], 0
cmp dword [ebp - 0x9e8], 0
jae 0x1000ae54
cmp dword [ebp - 0xfc], 0
jne 0x1000ae54
and dword [ebp - 0x518], 0
jmp 0x1000ae5e
mov dword [ebp - 0x518], 1
mov eax, dword [ebp - 0xa18]
cmp dword [ebp - 0x518], eax
jne 0x1000ae78
mov dword [ebp - 0x9f0], 1
jmp 0x1000ae7f
and dword [ebp - 0x9f0], 0
cmp dword [ebp - 0x9f0], 3
ja 0x1000ae94
mov dword [ebp - 0x520], 1
jmp 0x1000ae9b
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x520], 0xeef7d266
jne 0x1000aeb3
mov dword [ebp - 0x9f8], 1
jmp 0x1000aeba
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x9f8]
sub eax, 0xe283
mov dword [ebp - 0x528], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x528]
mov dword [ebp + eax - 0x1054], ecx
cmp dword [ebp - 0x528], 0
jne 0x1000aef7
push 9
pop eax
test eax, eax
jne 0x1000aef7
and dword [ebp - 0xa00], 0
jmp 0x1000af01
mov dword [ebp - 0xa00], 1
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0x20c]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0xa00]
jge 0x1000af2d
mov dword [ebp - 0x530], 1
jmp 0x1000af34
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x530], eax
jne 0x1000af5e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1054], 0
je 0x1000af5e
mov dword [ebp - 0xa08], 1
jmp 0x1000af65
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xa08], eax
jne 0x1000af81
xor eax, eax
inc eax
jne 0x1000af81
and dword [ebp - 0x538], 0
jmp 0x1000af8b
mov dword [ebp - 0x538], 1
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x538], eax
jne 0x1000afa5
mov dword [ebp - 0xa10], 1
jmp 0x1000afac
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0xfcc], eax
cmp dword [ebp - 0xfc], 0xf141
jne 0x1000afdc
mov dword [ebp - 0x548], 1
jmp 0x1000afe3
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0xa18]
cmp dword [ebp - 0x548], eax
jl 0x1000affd
mov dword [ebp - 0xa20], 1
jmp 0x1000b004
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0xb50], eax
mov dword [ebp - 0xf0], 0
jmp 0x1000b029
push 3
lea ecx, [ebp - 0xcd4]
call fcn.10015d9e
mov dword [ebp - 4], 7
mov dword [ebp - 0x1a4], 0x6aabecba
mov dword [ebp - 0x2d4], 0
jmp 0x1000b643
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 3
jge 0x1000b665
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0xcd4]
call fcn.10015e0b
mov dword [eax], 0xfffffffc
jmp 0x1000b636
mov dword [ebp - 0x1a4], 0
jmp 0x1000b67e
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jg 0x1000b6b1
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0xcd4]
call fcn.10015e0b
mov esi, eax
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0xcd4]
call fcn.10015e0b
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1000b671
mov byte [ebp - 0x16d], 0
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x1000b6ce
push 0x3aa
call dword [sym.imp.KERNEL32.dll_ExitProcess]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcd4]
call fcn.10015e06
push 3
lea ecx, [ebp - 0xce0]
call fcn.10015d9e
mov dword [ebp - 4], 8
mov dword [ebp - 0x1cc], 0x6aabecba
mov dword [ebp - 0x25c], 0
jmp 0x1000b714
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x1000b736
push dword [ebp - 0x25c]
lea ecx, [ebp - 0xce0]
call fcn.10015e0b
mov dword [eax], 0xfffffffc
jmp 0x1000b707
mov dword [ebp - 0x1cc], 0
jmp 0x1000b74f
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jg 0x1000b782
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xce0]
call fcn.10015e0b
mov esi, eax
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xce0]
call fcn.10015e0b
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1000b742
mov byte [ebp - 0x18a], 0
movzx eax, byte [ebp - 0x18a]
test eax, eax
je 0x1000b79f
push 0x3aa
call dword [sym.imp.KERNEL32.dll_ExitProcess]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xce0]
call fcn.10015e06
mov dword [ebp - 0xfdc], 0x8c45cdbe
mov dword [ebp - 0xfe4], 0xb2cfb631
mov dword [ebp - 0xfec], 0x210b999f
mov dword [ebp - 0xff4], 0x15de05da
mov dword [ebp - 0xffc], 0xfffffff6
mov dword [ebp - 0x1004], 0xfffffffe
mov dword [ebp - 0x7f4], 0x29ef
mov dword [ebp - 0x29c], 0
jmp 0x1000b80d
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 1
jge 0x1000b829
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x100c], 0
jmp 0x1000b800
mov eax, dword [ebp - 0x7f4]
inc eax
mov dword [ebp - 0x7f4], eax
mov dword [ebp - 0x1014], 0xfffffffa
mov dword [ebp - 0x10bc], 0x3f4f46db
push 1
lea ecx, [ebp - 0x1064]
call fcn.10015d9e
mov dword [ebp - 4], 9
mov dword [ebp - 0x10c4], 0x8f5f4990
mov dword [ebp - 0x10cc], 0xffffffff
mov dword [ebp - 0x5bc], 0x74d
mov dword [ebp - 0x264], 0
jmp 0x1000b895
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 1
jge 0x1000b8b7
push dword [ebp - 0x264]
lea ecx, [ebp - 0x1064]
call fcn.10015e0b
mov dword [eax], 0x1f665683
jmp 0x1000b888
mov byte [ebp - 0x175], 0
movzx eax, byte [ebp - 0x175]
test eax, eax
je 0x1000b8d1
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov eax, dword [ebp - 0x5bc]
dec eax
mov dword [ebp - 0x5bc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1064]
call fcn.10015e06
push 3
lea ecx, [ebp - 0xcb0]
call fcn.10015d9e
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1ac], 0x6aabecba
mov dword [ebp - 0x2bc], 0
jmp 0x1000b924
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 3
jge 0x1000b946
push dword [ebp - 0x2bc]
lea ecx, [ebp - 0xcb0]
call fcn.10015e0b
mov dword [eax], 0xfffffffc
jmp 0x1000b917
mov dword [ebp - 0x1ac], 0
jmp 0x1000b95f
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jg 0x1000b992
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0xcb0]
call fcn.10015e0b
mov esi, eax
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0xcb0]
call fcn.10015e0b
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1000b952
mov byte [ebp - 0x18c], 0
movzx eax, byte [ebp - 0x18c]
test eax, eax
je 0x1000b9af
push 0x3aa
call dword [sym.imp.KERNEL32.dll_ExitProcess]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb0]
call fcn.10015e06
mov dword [ebp - 0x10d4], 0x8c45cdbe
mov dword [ebp - 0x10dc], 0xb2cfb631
mov dword [ebp - 0x10e4], 0x210b999f
mov dword [ebp - 0x10ec], 0x15de05da
mov dword [ebp - 0x10f4], 0xfffffff6
mov dword [ebp - 0x10b0], 0xfffffffe
mov dword [ebp - 0x914], 0x29ef
mov dword [ebp - 0x26c], 0
jmp 0x1000ba1d
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jge 0x1000ba39
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xeb8], 0
jmp 0x1000ba10
mov eax, dword [ebp - 0x914]
inc eax
mov dword [ebp - 0x914], eax
mov dword [ebp - 0xa9c], 0x7f2f
push 1
lea ecx, [ebp - 0xdb0]
call fcn.10015d9e
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x340], 0xffffffff
mov dword [ebp - 0x318], 0xfffffffc
mov dword [ebp - 0x1038], 0x92f644ac
push 3
lea ecx, [ebp - 0xbd4]
call fcn.10015d9e
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x9a4], 0x415f
mov dword [ebp - 0xbe8], 0
mov dword [ebp - 0x5c4], 0x45b3659e
mov dword [ebp - 0xb58], 0
mov dword [ebp - 0xa94], 0
mov dword [ebp - 0x90], 0
jmp 0x1000bade
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1000bb00
push dword [ebp - 0x90]
lea ecx, [ebp - 0xdb0]
call fcn.10015e0b
mov dword [eax], 1
jmp 0x1000bad1
mov dword [ebp - 0x90], 0
jmp 0x1000bb19
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1000bb3b
push dword [ebp - 0x90]
lea ecx, [ebp - 0xbd4]
call fcn.10015e0b
mov dword [eax], 0xe55459ee
jmp 0x1000bb0c
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0xe38], eax
mov eax, dword [ebp - 0xa94]
mov dword [ebp - 0xfa0], eax
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0xe40], eax
push 0
lea ecx, [ebp - 0xbd4]
call fcn.10015e0b
mov eax, dword [ebp - 0xa9c]
mov dword [ebp - 0x7fc], eax
push 0
lea ecx, [ebp - 0xdb0]
call fcn.10015e0b
mov ecx, dword [ebp - 0x7fc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x318], eax
imul eax, dword [ebp - 0x318], 0xfffe
cmp dword [ebp - 0x7fc], eax
jle 0x1000bbd0
mov dword [ebp - 0x5cc], 1
jmp 0x1000bbd7
and dword [ebp - 0x5cc], 0
mov esi, dword [ebp - 0x9a4]
imul esi, dword [ebp - 0x5cc]
add esi, dword [ebp - 0x9a4]
push 2
lea ecx, [ebp - 0xbd4]
call fcn.10015e0b
cmp esi, dword [eax]
je 0x1000bc07