Function at 0x10008f39
Capabilities:
Extract resource via kernel32 functions
Get disk information
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100807e6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe40
push esi
push edi
mov dword [ebp - 0x160], 3
mov dword [ebp - 0x160], 3
jmp 0x10008f7c
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xfffffffd
jg 0x10008fb6
mov dword [ebp - 0x828], 0xffffffff
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10008fa9
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp dword [ebp - 0x828], 0
je 0x10008fb4
jmp 0x10008fb6
jmp 0x10008f6f
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x56c], 0
mov dword [ebp - 0x810], 0xec51938d
mov dword [ebp - 0x1ec], 0
jmp 0x10008fed
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x10009009
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0xbdc], 0xfffffff6
jmp 0x10008fe0
mov dword [ebp - 0x104], 0
jmp 0x10009022
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jg 0x10009205
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x748], 0
mov dword [ebp - 0x164], 0
jmp 0x1000905c
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 1
jge 0x10009078
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x808], 1
jmp 0x1000904f
mov dword [ebp - 0xe0], 0
jmp 0x10009091
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jg 0x100091ca
mov dword [ebp - 0xd64], 0
mov dword [ebp - 0x234], 0
jmp 0x100090c1
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jge 0x100090dd
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0xd98], 0xfc0233fd
jmp 0x100090b4
cmp dword [ebp - 0xe0], 0
je 0x10009160
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd98], 0
jg 0x10009101
mov dword [ebp - 0x7f8], 1
jmp 0x10009108
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xcf4], eax
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x800], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x800]
mov dword [ebp + eax - 0x808], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbdc]
mov dword [ebp - 0xbd0], eax
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x56c], eax
jle 0x10009160
mov dword [ebp - 0x738], 1
jmp 0x10009167
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x738], eax
jg 0x10009187
cmp dword [ebp - 0xe0], 0
jne 0x10009187
and dword [ebp - 0x740], 0
jmp 0x10009191
mov dword [ebp - 0x740], 1
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x748], eax
cmp dword [ebp - 0x748], 0xfffffff8
jg 0x100091b2
mov dword [ebp - 0x750], 1
jmp 0x100091b9
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x810], eax
jmp 0x10009084
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x10009200
push 0x254
push 0
push 0
push 0x485
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
jmp 0x10009015
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x16c], 0
jmp 0x10009228
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x10009244
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0xde0], 5
jmp 0x1000921b
mov dword [ebp - 0x138], 2
jmp 0x1000925d
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jl 0x1000927a
mov eax, dword [ebp - 0x138]
cmp dword [ebp + eax*4 - 0xde0], 0
je 0x10009278
jmp 0x1000927a
jmp 0x10009250
mov dword [ebp - 0x1f4], 3
mov dword [ebp - 0x1f4], 3
jmp 0x1000929d
mov eax, dword [ebp - 0x1f4]
dec eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xfffffffd
jg 0x100092d7
mov dword [ebp - 0x818], 0xffffffff
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x100092ca
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp dword [ebp - 0x818], 0
je 0x100092d5
jmp 0x100092d7
jmp 0x10009290
mov dword [ebp - 0xd1c], 0x299d
mov dword [ebp - 0x74], 0
jmp 0x100092f1
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x10009307
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xbec], 4
jmp 0x100092ea
mov dword [ebp - 0x74], 0
jmp 0x10009317
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1000932d
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xc00], 0
jmp 0x10009310
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x10009355
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc00]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc00], eax
mov dword [ebp - 0x758], 0
push 2
lea ecx, [ebp - 0x78c]
call fcn.10015917
and dword [ebp - 4], 0
mov dword [ebp - 0xa68], 0xb4ef66b
mov dword [ebp - 0xa64], 0xb4ef66b
mov dword [ebp - 0xa60], 0xb4ef66b
mov dword [ebp - 0xa5c], 0xb4ef66b
lea ecx, [ebp - 0x29d]
call fcn.10008cf3
push eax
lea eax, [ebp - 0xa58]
push eax
lea eax, [ebp - 0xa68]
push eax
lea ecx, [ebp - 0xdf4]
call fcn.100159c4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x878]
call fcn.10015973
mov byte [ebp - 4], 1
mov dword [ebp - 0x730], 0x8f985589
mov dword [ebp - 0x378], 0x4129b857
mov dword [ebp - 0x174], 0
jmp 0x10009419
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x1000943b
push dword [ebp - 0x174]
lea ecx, [ebp - 0x78c]
call fcn.100159b5
mov dword [eax], 0xfffffff6
jmp 0x1000940c
mov esi, dword [ebp - 0x758]
push 1
lea ecx, [ebp - 0x78c]
call fcn.100159b5
cmp esi, dword [eax]
jne 0x1000945e
mov dword [ebp - 0x37c], 1
jmp 0x10009465
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0xd50], eax
push 2
lea ecx, [ebp - 0x878]
call fcn.100159b5
mov dword [eax], 0xc218
mov dword [ebp - 0x730], 0xc218
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0xbf4], eax
push 0
lea ecx, [ebp - 0x878]
call fcn.100159b5
push 1
lea ecx, [ebp - 0x78c]
call fcn.100159b5
push 3
lea ecx, [ebp - 0x878]
call fcn.100159b5
mov eax, dword [eax]
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0
jne 0x100094df
push 2
lea ecx, [ebp - 0x878]
call fcn.100159b5
push 1
lea ecx, [ebp - 0x78c]
call fcn.100159b5
cmp dword [eax], 0
jne 0x100094fd
mov dword [ebp - 0x588], 1
jmp 0x10009504
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x37c]
cmp eax, dword [ebp - 0x588]
jle 0x1000951e
mov dword [ebp - 0x384], 1
jmp 0x10009525
and dword [ebp - 0x384], 0
push 1
lea ecx, [ebp - 0x78c]
call fcn.100159b5
mov esi, dword [ebp - 0x384]
add esi, dword [eax]
push 1
lea ecx, [ebp - 0x78c]
call fcn.100159b5
mov dword [eax], esi
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1000956d
push 0
push 0x22ce
push 0x9a0
call dword [sym.imp.GDI32.dll_CreatePen]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x878]
call fcn.10015999
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78c]
call fcn.10015999
mov dword [ebp - 0xa40], 0xbac64a68
mov dword [ebp - 0xa3c], 0xbac64a68
mov dword [ebp - 0xa38], 0xbac64a68
mov dword [ebp - 0xa34], 0xbac64a68
lea ecx, [ebp - 0x34d]
call fcn.10008cf3
push eax
lea eax, [ebp - 0xa30]
push eax
lea eax, [ebp - 0xa40]
push eax
lea ecx, [ebp - 0xe34]
call fcn.100159c4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x290]
call fcn.10015973
mov dword [ebp - 4], 2
mov dword [ebp - 0x44], 0x8bfc4f27
mov dword [ebp - 0x2b4], 0x1552
mov dword [ebp - 0x830], 0x3f85024d
push 0
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov dword [eax], 0xfffffffa
jmp 0x10009643
push 0
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x57c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x57c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x290]
call fcn.100159b5
cmp dword [eax], 0xfffffff9
je 0x100096f7
push 2
lea ecx, [ebp - 0xc10]
call fcn.10015917
mov byte [ebp - 4], 3
mov dword [ebp - 0x17c], 0x50e6da50
mov dword [ebp - 0x274], 0
jmp 0x1000968d
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 2
jge 0x100096ac
push dword [ebp - 0x274]
lea ecx, [ebp - 0xc10]
call fcn.100159b5
and dword [eax], 0
jmp 0x10009680
mov dword [ebp - 0x17c], 1
jmp 0x100096c5
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jl 0x100096e3
mov dword [ebp - 0x820], 1
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x44], eax
jmp 0x100096b8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc10]
call fcn.10015999
jmp 0x1000961f
push 0
lea ecx, [ebp - 0x290]
call fcn.100159b5
cmp dword [eax], 0
je 0x1000977e
push 0
lea ecx, [ebp - 0x290]
call fcn.100159b5
cmp dword [eax], 0xfffffff8
jg 0x10009727
mov dword [ebp - 0x38c], 1
jmp 0x1000972e
and dword [ebp - 0x38c], 0
push 3
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov ecx, dword [ebp - 0x38c]
cmp ecx, dword [eax]
jne 0x10009751
mov dword [ebp - 0x66c], 1
jmp 0x10009758
and dword [ebp - 0x66c], 0
push 0
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov ecx, dword [ebp - 0x66c]
imul ecx, dword [eax]
test ecx, ecx
je 0x1000977e
mov dword [ebp - 0x7c0], 1
jmp 0x10009785
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xd18], eax
cmp dword [ebp - 0x44], 0x5ff5
jge 0x100097a3
mov dword [ebp - 0x394], 1
jmp 0x100097aa
and dword [ebp - 0x394], 0
push 0
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov ecx, dword [ebp - 0x394]
add ecx, dword [eax]
cmp ecx, 0x39e22401
jg 0x100097d3
mov dword [ebp - 0x584], 1
jmp 0x100097da
and dword [ebp - 0x584], 0
push 2
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov ecx, dword [ebp - 0x584]
cmp ecx, dword [eax]
jg 0x100097fd
mov dword [ebp - 0x39c], 1
jmp 0x10009804
and dword [ebp - 0x39c], 0
push 2
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov ecx, dword [ebp - 0x39c]
cmp ecx, dword [eax]
jge 0x10009839
push 0
lea ecx, [ebp - 0x290]
call fcn.100159b5
cmp dword [eax], 0
je 0x10009839
mov dword [ebp - 0x6e4], 1
jmp 0x10009840
and dword [ebp - 0x6e4], 0
cmp dword [ebp - 0x6e4], 0x2506ed55
jl 0x10009858
mov dword [ebp - 0x3a4], 1
jmp 0x1000985f
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x3a4], eax
jge 0x10009876
mov dword [ebp - 0x33c], 1
jmp 0x1000987d
and dword [ebp - 0x33c], 0
push 2
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov ecx, dword [ebp - 0x33c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x44]
imul ecx, eax
mov eax, dword [ebp - 0x44]
add eax, ecx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x44], eax
jge 0x100098c5
xor eax, eax
je 0x100098c5
mov dword [ebp - 0x58c], 1
jmp 0x100098cc
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0x35c5
jg 0x100098e4
mov dword [ebp - 0x3ac], 1
jmp 0x100098eb
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
add eax, 6
sub eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0x2b4]
jl 0x1000990e
mov dword [ebp - 0x674], 1
jmp 0x10009915
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0x830], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x290]
call fcn.10015999
mov dword [ebp - 0x184], 3
push 3
lea ecx, [ebp - 0xb3c]
call fcn.10015917
mov dword [ebp - 4], 4
mov dword [ebp - 0x840], 0x4822b16
mov dword [ebp - 0x1fc], 0
jmp 0x10009971
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 3
jge 0x10009993
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0xb3c]
call fcn.100159b5
mov dword [eax], 0x8a1f9496
jmp 0x10009964
mov byte [ebp - 0xfe], 0
movzx eax, byte [ebp - 0xfe]
test eax, eax
je 0x100099b7
push 0x1097
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
push 0
lea ecx, [ebp - 0xb3c]
call fcn.100159b5
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
mov eax, dword [eax]
mov dword [ebp - 0x838], eax
mov eax, dword [ebp - 0x304]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x304]
mov dword [ecx], eax
cmp dword [ebp - 0x838], 0x70c3
jne 0x10009a01
mov dword [ebp - 0x3b4], 1
jmp 0x10009a08
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x840], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb3c]
call fcn.10015999
mov dword [ebp - 0x184], 3
jmp 0x10009a3c
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xfffffffd
jg 0x1000a71c
mov dword [ebp - 0x130], 8
mov dword [ebp - 0xa4], 0xfffffff9
mov dword [ebp - 0x23c], 0
jmp 0x10009a76
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 1
jge 0x10009a92
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0xc04], 0xc857617
jmp 0x10009a69
mov dword [ebp - 0x130], 0xfffffff6
jmp 0x10009aab
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xffffffe7
jg 0x10009d7b
push 1
lea ecx, [ebp - 0x7bc]
call fcn.10015917
mov dword [ebp - 4], 5
push 4
lea ecx, [ebp - 0xc20]
call fcn.10015917
mov byte [ebp - 4], 6
mov dword [ebp - 0x84], 0
jmp 0x10009af6
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x10009b18
push dword [ebp - 0x84]
lea ecx, [ebp - 0x7bc]
call fcn.100159b5
mov dword [eax], 0x22124f84
jmp 0x10009ae9
mov dword [ebp - 0x84], 0
jmp 0x10009b31
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x10009b53
push dword [ebp - 0x84]
lea ecx, [ebp - 0xc20]
call fcn.100159b5
mov dword [eax], 0x80c6548a
jmp 0x10009b24
push 0
lea ecx, [ebp - 0x7bc]
call fcn.100159b5
and dword [eax], 0
jmp 0x10009b89
push 0
lea ecx, [ebp - 0x7bc]
call fcn.100159b5
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x594]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x594]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x7bc]
call fcn.100159b5
cmp dword [eax], 0xfffffff9
jne 0x10009d58
mov dword [ebp - 0x4c], 0x25bfc88e
mov dword [ebp - 0xe8], 0x8d9dcee3
mov dword [ebp - 0xe8], 2
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0xa4]
push 0
lea ecx, [ebp - 0x7bc]
call fcn.100159b5
imul esi, dword [eax]
cmp dword [ebp - 0x4c], esi
jg 0x10009bed
mov dword [ebp - 0x3bc], 1
jmp 0x10009bf4
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x3bc]
jne 0x10009c0e
mov dword [ebp - 0x744], 1
jmp 0x10009c15
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x744], eax
jle 0x10009c2c
mov dword [ebp - 0x3c4], 1
jmp 0x10009c33
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x3c4], eax
jne 0x10009c53
cmp dword [ebp - 0xa4], 0
je 0x10009c53
mov dword [ebp - 0x59c], 1
jmp 0x10009c5a
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x4c]
jle 0x10009c7d
cmp dword [ebp - 0xa4], 0
je 0x10009c7d
mov dword [ebp - 0x3cc], 1
jmp 0x10009c84
and dword [ebp - 0x3cc], 0
mov eax, 0x9978
sub eax, dword [ebp - 0x3cc]
je 0x10009cac
mov dword [ebp - 0x848], 0xefa97f51
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x848], eax
jmp 0x10009d53
mov dword [ebp - 0xa4], 3
jmp 0x10009cc5
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x10009d53
mov dword [ebp - 0x4c], 0
jmp 0x10009ce2
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x10009d2a
mov dword [ebp - 0xe8], 0
jmp 0x10009d01
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jg 0x10009d28
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x10009d26
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
jmp 0x10009cf4
jmp 0x10009cdb
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x10009d4e
push 0x80
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
jmp 0x10009cb8
jmp 0x10009b65
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc20]
call fcn.10015999
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7bc]
call fcn.10015999
jmp 0x10009a9e
mov dword [ebp - 0x7cc], 0xffffffff
mov dword [ebp - 0xa0], 0x4b283066
mov dword [ebp - 0x32c], 0x8d72a67f
mov dword [ebp - 0x118], 0xf1edd1ed
mov dword [ebp - 0x18c], 0
jmp 0x10009dbc
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jge 0x10009dd8
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0xdc8], 6
jmp 0x10009daf
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10009df0
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov dword [ebp - 0xa0], 2
cmp dword [ebp - 0xa0], 0
jne 0x10009f25
cmp dword [ebp - 0xa0], 1
je 0x10009e1c
mov dword [ebp - 0x67c], 1
jmp 0x10009e23
and dword [ebp - 0x67c], 0
cmp dword [ebp - 0x67c], 0x7bc9
je 0x10009e3b
mov dword [ebp - 0x2bc], 1
jmp 0x10009e42
and dword [ebp - 0x2bc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp + eax - 0xdc8], ecx
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x32c], eax
je 0x10009e7b
mov dword [ebp - 0x3d4], 1
jmp 0x10009e82
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x3d4], eax
jge 0x10009e9c
mov dword [ebp - 0x5a4], 1
jmp 0x10009ea3
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x5a4]
jge 0x10009ebd
mov dword [ebp - 0x3dc], 1
jmp 0x10009ec4
and dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 0
je 0x10009ed9
mov dword [ebp - 0x6ec], 1
jmp 0x10009ee0
and dword [ebp - 0x6ec], 0
cmp dword [ebp - 0x6ec], 0x42573927
jne 0x10009ef8
mov dword [ebp - 0x850], 1
jmp 0x10009eff
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xd70], eax
mov eax, dword [ebp - 0x32c]
imul eax, dword [ebp - 0xa0]
test eax, eax
jne 0x10009f25
and dword [ebp - 0x3e4], 0
jmp 0x10009f2f
mov dword [ebp - 0x3e4], 1
cmp dword [ebp - 0x3e4], 0xde467b47
jbe 0x10009f47
mov dword [ebp - 0x5ac], 1
jmp 0x10009f4e
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x5ac], eax
jl 0x10009f68
mov dword [ebp - 0x3ec], 1
jmp 0x10009f6f
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
sub eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x118]
jl 0x10009f8f
mov dword [ebp - 0x684], 1
jmp 0x10009f96
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x684]
cmp eax, dword [ebp - 0x118]
jge 0x10009fb6
mov dword [ebp - 0x3f4], 1
jmp 0x10009fbd
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x204], 5
mov dword [ebp - 0x860], 0
mov dword [ebp - 0xc14], 1
mov dword [ebp - 0xd20], 0xb4ef66b1
mov dword [ebp - 0xc24], 0xdd7770b1
push 4
lea ecx, [ebp - 0xadc]
call fcn.10015917
mov dword [ebp - 4], 7
mov dword [ebp - 0xd58], 0x6d065835
mov dword [ebp - 0x2c4], 0x1afe
push 1
lea ecx, [ebp - 0xaa0]
call fcn.10015917
mov byte [ebp - 4], 8
mov dword [ebp - 0x7c], 0
jmp 0x1000a044
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x1000a060
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xadc]
call fcn.100159b5
mov dword [eax], 1
jmp 0x1000a03d
mov dword [ebp - 0x7c], 0
jmp 0x1000a070
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1000a08c
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xaa0]
call fcn.100159b5
mov dword [eax], 1
jmp 0x1000a069
mov dword [ebp - 0x204], 0xfffffff6
jmp 0x1000a0a5
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 4
jge 0x1000a389
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x858], 0xffffffff
push 1
lea ecx, [ebp - 0x9ac]
call fcn.10015917
mov byte [ebp - 4], 9
mov dword [ebp - 0x194], 0
jmp 0x1000a0f0
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x1000a112
push dword [ebp - 0x194]
lea ecx, [ebp - 0x9ac]
call fcn.100159b5
mov dword [eax], 0xf985589b
jmp 0x1000a0e3
mov dword [ebp - 0x25c], 2
jmp 0x1000a12b
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x10
jge 0x1000a34f
push 4
lea ecx, [ebp - 0x768]
call fcn.10015917
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xc34], 4
mov dword [ebp - 0xd28], 0xfffffffd
push 4
lea ecx, [ebp - 0xa94]
call fcn.10015917
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xc44], 0xbb30
mov dword [ebp - 0x18], 0
jmp 0x1000a188
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1000a19e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xda4], 0xac453072
jmp 0x1000a181
mov dword [ebp - 0x18], 0
jmp 0x1000a1ae
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1000a1ca
push dword [ebp - 0x18]
lea ecx, [ebp - 0x768]
call fcn.100159b5
mov dword [eax], 1
jmp 0x1000a1a7
mov dword [ebp - 0x18], 0
jmp 0x1000a1da
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1000a1f6
push dword [ebp - 0x18]
lea ecx, [ebp - 0xa94]
call fcn.100159b5
mov dword [eax], 0x18c9a01c
jmp 0x1000a1d3
push 1
lea ecx, [ebp - 0x768]
call fcn.100159b5
and dword [eax], 0
jmp 0x1000a22c
push 1
lea ecx, [ebp - 0x768]
call fcn.100159b5
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x5b4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5b4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x768]
call fcn.100159b5
cmp dword [eax], 2
jg 0x1000a303
mov dword [ebp - 0xd80], 0x6c902da
mov dword [ebp - 0xc54], 0xc3d069f4
mov dword [ebp - 0x19c], 0
jmp 0x1000a26f
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x1000a28b
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0xd30], 0x9acd4098
jmp 0x1000a262
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
mov esi, dword [ebp - 0x2c4]
push 1
lea ecx, [ebp - 0x768]
call fcn.100159b5
mov eax, dword [eax]
mov edi, dword [ebp + eax*4 - 0xda4]
imul edi, esi
push 1
lea ecx, [ebp - 0xadc]
call fcn.100159b5
mov dword [eax], edi
push 0
lea ecx, [ebp - 0x9ac]
call fcn.100159b5
mov dword [ebp - 0x3fc], eax
push 1
lea ecx, [ebp - 0x768]
call fcn.100159b5
mov ecx, dword [ebp - 0x3fc]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3fc]
mov eax, dword [eax]
mov dword [ebp - 0x858], eax
jmp 0x1000a208
cmp dword [ebp - 0x860], 0
je 0x1000a32c
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa94]
call fcn.10015999
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x768]
call fcn.10015999
jmp 0x1000a34f
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa94]
call fcn.10015999
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x768]
call fcn.10015999
jmp 0x1000a11e
push 0
lea ecx, [ebp - 0xaa0]
call fcn.100159b5
cmp dword [eax], 0
je 0x1000a375
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9ac]
call fcn.10015999
jmp 0x1000a098
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9ac]
call fcn.10015999
jmp 0x1000a098
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xaa0]
call fcn.10015999
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xadc]
call fcn.10015999
mov byte [ebp - 0xc7], 0
mov dword [ebp - 0xa04], 0x3dd33a4a
mov dword [ebp - 0xa00], 0x3dd33a4a
mov dword [ebp - 0x9fc], 0x3dd33a4a
mov dword [ebp - 0x9f8], 0x3dd33a4a
lea ecx, [ebp - 0x33d]
call fcn.10008cf3
push eax
lea eax, [ebp - 0x9f4]
push eax
lea eax, [ebp - 0xa04]
push eax
lea ecx, [ebp - 0xe24]
call fcn.100159c4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x368]
call fcn.10015973
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x7f0], 0x8cdac369
mov dword [ebp - 0xc64], 0x1a2c
mov dword [ebp - 0x24], 3
jmp 0x1000a43d
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1000a6ea
mov dword [ebp - 0x54], 0xe8c9f369
mov byte [ebp - 0xfc], 0
movzx eax, byte [ebp - 0xfc]
test eax, eax
je 0x1000a466
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [ebp - 0x54], 3
jmp 0x1000a476
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1000a6e5
mov dword [ebp - 0x868], 0x51d77f17
mov dword [ebp - 0x40c], 0xfffffffc
mov dword [ebp - 0x20c], 0
jmp 0x1000a4ad
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 4
jge 0x1000a4c9
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xe4c], 0xfffffff8
jmp 0x1000a4a0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x368]
call fcn.100159b5
cmp dword [ebp - 0x868], 3
jae 0x1000a4ec
mov dword [ebp - 0x72c], 1
jmp 0x1000a4f3
and dword [ebp - 0x72c], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x368]
call fcn.100159b5
mov eax, dword [eax]
cmp eax, dword [ebp - 0x72c]
je 0x1000a517
mov dword [ebp - 0x30c], 1
jmp 0x1000a51e
and dword [ebp - 0x30c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30c]
mov dword [ebp + eax - 0xe4c], ecx
mov eax, dword [ebp - 0x30c]
sub eax, dword [ebp - 0x54]
je 0x1000a540
cmp dword [ebp - 0x24], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x368]
call fcn.100159b5
mov ecx, dword [ebp - 0x24]
cmp dword [eax], ecx
jle 0x1000a561
mov dword [ebp - 0x404], 1
jmp 0x1000a568
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
add eax, 0x7bb456e
cmp eax, 0xffffffff
jle 0x1000a594
push dword [ebp - 0x54]
lea ecx, [ebp - 0x368]
call fcn.100159b5
cmp dword [eax], 0
jne 0x1000a594
and dword [ebp - 0x5bc], 0
jmp 0x1000a59e
mov dword [ebp - 0x5bc], 1
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0xbbda73a1
je 0x1000a5c2
mov dword [ebp - 0x68c], 1
jmp 0x1000a5c9
and dword [ebp - 0x68c], 0
cmp dword [ebp - 0x68c], 0x25bb5a27
jg 0x1000a5e1
mov dword [ebp - 0x414], 1
jmp 0x1000a5e8
and dword [ebp - 0x414], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x368]
call fcn.100159b5
mov ecx, dword [ebp - 0x414]
imul ecx, dword [eax]
add ecx, dword [ebp - 0x24]
jne 0x1000a61f
push 0
lea ecx, [ebp - 0x368]
call fcn.100159b5
cmp dword [eax], 0
jne 0x1000a61f
and dword [ebp - 0x5c4], 0
jmp 0x1000a629
mov dword [ebp - 0x5c4], 1
mov esi, dword [ebp - 0x5c4]
sub esi, dword [ebp - 0x24]
push 3
lea ecx, [ebp - 0x368]
call fcn.100159b5
cmp esi, dword [eax]
jne 0x1000a64f
mov dword [ebp - 0x41c], 1
jmp 0x1000a656
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x41c], eax
jne 0x1000a66d
mov dword [ebp - 0x6f4], 1
jmp 0x1000a674
and dword [ebp - 0x6f4], 0
cmp dword [ebp - 0x6f4], 0x7a540f82
jl 0x1000a68c
mov dword [ebp - 0x424], 1
jmp 0x1000a693
and dword [ebp - 0x424], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x368]
call fcn.100159b5
mov esi, eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x368]
call fcn.100159b5
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x424]
imul ecx, dword [eax]
cmp dword [esi], ecx
jl 0x1000a6cd
mov dword [ebp - 0x5cc], 1
jmp 0x1000a6d4
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x7f0], eax
jmp 0x1000a46f
jmp 0x1000a436
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x368]
call fcn.10015999
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x1000a70c
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp dword [ebp - 0x7cc], 0
je 0x1000a717
jmp 0x1000a71c
jmp 0x10009a2f
push 1
lea ecx, [ebp - 0xad0]
call fcn.10015917
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x1a4], 0xdb2bc40e
mov dword [ebp - 0x42c], 0x2d91
mov dword [ebp - 0x9cc], 2
mov dword [ebp - 0x9c8], 2
mov dword [ebp - 0x9c4], 2
mov dword [ebp - 0x9c0], 2
mov dword [ebp - 0x444], 0xe7071658
mov dword [ebp - 0x20], 0
jmp 0x1000a786
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1000a7a2
push dword [ebp - 0x20]
lea ecx, [ebp - 0xad0]
call fcn.100159b5
mov dword [eax], 0x7e17f759
jmp 0x1000a77f
mov dword [ebp - 0x20], 0
jmp 0x1000a7b2
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1000a7c8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x794], 0xa1650187
jmp 0x1000a7ab
mov dword [ebp - 0x20], 0
jmp 0x1000a7d8
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1000a7ee
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x980], 7
jmp 0x1000a7d1
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x1000a80d
push 0xf86
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x42c], eax
jg 0x1000a827
mov dword [ebp - 0x694], 1
jmp 0x1000a82e
and dword [ebp - 0x694], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9cc], 0x13e1
imul eax, dword [ebp - 0x42c], 0x13e1
cmp eax, dword [ebp - 0x694]
jle 0x1000a85d
mov dword [ebp - 0x434], 1
jmp 0x1000a864
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x1a4]
sub eax, dword [ebp - 0x434]
jne 0x1000a88b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x794], 0
jne 0x1000a88b
and dword [ebp - 0x5d4], 0
jmp 0x1000a895
mov dword [ebp - 0x5d4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x794]
cmp dword [ebp - 0x5d4], eax
jne 0x1000a8b6
mov dword [ebp - 0x43c], 1
jmp 0x1000a8bd
and dword [ebp - 0x43c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x794]
cmp dword [ebp - 0x43c], eax
jle 0x1000a8de
mov dword [ebp - 0x754], 1
jmp 0x1000a8e5
and dword [ebp - 0x754], 0
push 0
lea ecx, [ebp - 0xad0]
call fcn.100159b5
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x754]
add eax, 0x4e5857e6
mov ecx, dword [ebp - 0x2cc]
imul eax, dword [ecx]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x2cc]
mov ecx, dword [ecx]
dec ecx
mov edx, dword [ebp - 0x2cc]
mov dword [edx], ecx
test eax, eax
je 0x1000a93b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x794]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0x8a973314
jb 0x1000a966
mov dword [ebp - 0x5dc], 1
jmp 0x1000a96d
and dword [ebp - 0x5dc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5dc]
mov dword [ebp + eax - 0x980], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xad0]
call fcn.10015999
mov dword [ebp - 0xd60], 0x299d
mov dword [ebp - 0x88], 0
jmp 0x1000a9b2
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1000a9ce
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xc74], 4
jmp 0x1000a9a5
mov dword [ebp - 0x88], 0
jmp 0x1000a9e7
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1000aa03
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xc30], 0
jmp 0x1000a9da
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1000aa2b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc30]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc30], eax
mov dword [ebp - 0x1ac], 0x571177e8
push 2
lea ecx, [ebp - 0xc40]
call fcn.10015917
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x244], 0
jmp 0x1000aa7d
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x1000aa9f
push dword [ebp - 0x244]
lea ecx, [ebp - 0xc40]
call fcn.100159b5
mov dword [eax], 0xfffffffb
jmp 0x1000aa70
mov dword [ebp - 0x1ac], 0
jmp 0x1000aab8
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xffffffef
jl 0x1000ac66
mov dword [ebp - 0x214], 0x1e2c0d37
mov dword [ebp - 0x214], 0
jmp 0x1000aae8
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jg 0x1000ac61
mov dword [ebp - 0x1b4], 0x4f147909
mov dword [ebp - 0x1b4], 1
jmp 0x1000ab18
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jl 0x1000ac36
mov dword [ebp - 0x26c], 0
jmp 0x1000ab3e
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 4
jge 0x1000ab5a
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xb58], 0
jmp 0x1000ab31
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb58], 0
jmp 0x1000ab88
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb58]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb58], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb58], 1
jg 0x1000ac31
mov dword [ebp - 0x1bc], 0x7979b389
mov byte [ebp - 0xfa], 0
movzx eax, byte [ebp - 0xfa]
test eax, eax
je 0x1000abd8
push 0
push 0xe34
push 0x1fd5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
mov dword [ebp - 0x1bc], 1
jmp 0x1000abf1
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
jl 0x1000ac2c
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x1000ac2a
push 0x1df1
push 0xf3a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_LineTo]
jmp 0x1000abe4
jmp 0x1000ab6d
jmp 0x1000ab0b
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1000ac5c
push 0x503
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
jmp 0x1000aadb
jmp 0x1000aaab
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc40]
call fcn.10015999
push 1
lea ecx, [ebp - 0xae8]
call fcn.10015917
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x21c], 0xdb2bc40e
mov dword [ebp - 0x44c], 0x2d91
mov dword [ebp - 0x9dc], 2
mov dword [ebp - 0x9d8], 2
mov dword [ebp - 0x9d4], 2
mov dword [ebp - 0x9d0], 2
mov dword [ebp - 0x464], 0xe7071658
mov dword [ebp - 0x1c], 0
jmp 0x1000acdf
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1000acfb
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xae8]
call fcn.100159b5
mov dword [eax], 0x7e17f759
jmp 0x1000acd8
mov dword [ebp - 0x1c], 0
jmp 0x1000ad0b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000ad21
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7a4], 0xa1650187
jmp 0x1000ad04
mov dword [ebp - 0x1c], 0
jmp 0x1000ad31
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1000ad47
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7d4], 7
jmp 0x1000ad2a
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x1000ad66
push 0xf86
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0x44c], eax
jg 0x1000ad80
mov dword [ebp - 0x69c], 1
jmp 0x1000ad87
and dword [ebp - 0x69c], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9dc], 0x13e1
imul eax, dword [ebp - 0x44c], 0x13e1
cmp eax, dword [ebp - 0x69c]
jle 0x1000adb6
mov dword [ebp - 0x454], 1
jmp 0x1000adbd
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x21c]
sub eax, dword [ebp - 0x454]
jne 0x1000ade4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7a4], 0
jne 0x1000ade4
and dword [ebp - 0x5e4], 0
jmp 0x1000adee
mov dword [ebp - 0x5e4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7a4]
cmp dword [ebp - 0x5e4], eax
jne 0x1000ae0f
mov dword [ebp - 0x45c], 1
jmp 0x1000ae16
and dword [ebp - 0x45c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7a4]
cmp dword [ebp - 0x45c], eax
jle 0x1000ae37
mov dword [ebp - 0x6fc], 1
jmp 0x1000ae3e
and dword [ebp - 0x6fc], 0
push 0
lea ecx, [ebp - 0xae8]
call fcn.100159b5
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x6fc]
add eax, 0x4e5857e6
mov ecx, dword [ebp - 0x34c]
imul eax, dword [ecx]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x34c]
mov ecx, dword [ecx]
dec ecx
mov edx, dword [ebp - 0x34c]
mov dword [edx], ecx
test eax, eax
je 0x1000ae94
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9dc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7a4]
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0x8a973314
jb 0x1000aebf
mov dword [ebp - 0x5ec], 1
jmp 0x1000aec6
and dword [ebp - 0x5ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5ec]
mov dword [ebp + eax - 0x7d4], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xae8]
call fcn.10015999
mov dword [ebp - 0x5c], 0x824a8c6a
mov dword [ebp - 0x46c], 0xffffffff
mov dword [ebp - 0x2d4], 0
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x1000af47
push 0x1008
push 0x41e
push 0x3b2
push 0x1fd8
push 0x92d
push 0x1652
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
mov dword [ebp - 0x5c], 0
jmp 0x1000af57
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffff5
je 0x1000b126
push 3
lea ecx, [ebp - 0x888]
call fcn.10015917
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x314], 0x9974082
mov dword [ebp - 0x974], 0xffffffff
mov dword [ebp - 0x1c4], 0
jmp 0x1000afa2
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jge 0x1000afc4
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x888]
call fcn.100159b5
mov dword [eax], 0x968939f5
jmp 0x1000af95
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jne 0x1000afd8
mov dword [ebp - 0x6a4], 1
jmp 0x1000afdf
and dword [ebp - 0x6a4], 0
push 2
lea ecx, [ebp - 0x888]
call fcn.100159b5
mov eax, dword [eax]
mov dword [ebp - 0x46c], eax
mov esi, dword [ebp - 0x46c]
push 2
lea ecx, [ebp - 0x888]
call fcn.100159b5
add esi, dword [eax]
cmp esi, 0xffffffff
jge 0x1000b01a
mov dword [ebp - 0x924], 1
jmp 0x1000b021
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x2d4]
imul eax, dword [ebp - 0x2d4]
test eax, eax
jne 0x1000b044
cmp dword [ebp - 0x314], 0
jne 0x1000b044
and dword [ebp - 0x474], 0
jmp 0x1000b04e
mov dword [ebp - 0x474], 1
mov eax, dword [ebp - 0x6a4]
cmp eax, dword [ebp - 0x474]
jge 0x1000b068
mov dword [ebp - 0x7dc], 1
jmp 0x1000b06f
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0xd38], eax
cmp dword [ebp - 0x5c], 1
jge 0x1000b08d
mov dword [ebp - 0x5f4], 1
jmp 0x1000b094
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x2d4]
cmp dword [ebp - 0x5f4], eax
jl 0x1000b0ae
mov dword [ebp - 0x47c], 1
jmp 0x1000b0b5
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x47c], eax
je 0x1000b0cf
mov dword [ebp - 0x734], 1
jmp 0x1000b0d6
and dword [ebp - 0x734], 0
mov esi, dword [ebp - 0x5c]
add esi, dword [ebp - 0x734]
sub esi, dword [ebp - 0x5c]
push 2
lea ecx, [ebp - 0x888]
call fcn.100159b5
cmp esi, dword [eax]
jl 0x1000b0ff
mov dword [ebp - 0x484], 1
jmp 0x1000b106
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x974], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x888]
call fcn.10015999
jmp 0x1000af50
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x5fc], 0
mov dword [ebp - 0x96c], 0xec51938d
mov dword [ebp - 0x24c], 0
jmp 0x1000b15d
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 2
jge 0x1000b179
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xd08], 0xfffffff6
jmp 0x1000b150
mov dword [ebp - 0x110], 0
jmp 0x1000b192
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jg 0x1000b375
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x1cc], 0
jmp 0x1000b1cc
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 1
jge 0x1000b1e8
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x7ec], 1
jmp 0x1000b1bf
mov dword [ebp - 0xf0], 0
jmp 0x1000b201
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jg 0x1000b33a
mov dword [ebp - 0xc84], 0
mov dword [ebp - 0x224], 0
jmp 0x1000b231
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x1000b24d
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xdbc], 0xfc0233fd
jmp 0x1000b224
cmp dword [ebp - 0xf0], 0
je 0x1000b2d0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xdbc], 0
jg 0x1000b271
mov dword [ebp - 0x7e4], 1
jmp 0x1000b278
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xd78], eax
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x92c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x92c]
mov dword [ebp + eax - 0x7ec], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd08]
mov dword [ebp - 0xc94], eax
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x5fc], eax
jle 0x1000b2d0
mov dword [ebp - 0x48c], 1
jmp 0x1000b2d7
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x48c], eax
jg 0x1000b2f7
cmp dword [ebp - 0xf0], 0
jne 0x1000b2f7
and dword [ebp - 0x6ac], 0
jmp 0x1000b301
mov dword [ebp - 0x6ac], 1
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0xfffffff8
jg 0x1000b322
mov dword [ebp - 0x604], 1
jmp 0x1000b329
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x96c], eax
jmp 0x1000b1f4
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x1000b370
push 0x254
push 0
push 0
push 0x485
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
jmp 0x1000b185
mov dword [ebp - 0xd40], 0x299d
mov dword [ebp - 0x140], 1
mov dword [ebp - 0x1d4], 0
jmp 0x1000b3a2
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x1000b3be
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0xdd4], 5
jmp 0x1000b395
mov dword [ebp - 0x140], 2
jmp 0x1000b3d7
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jl 0x1000b3f4
mov eax, dword [ebp - 0x140]
cmp dword [ebp + eax*4 - 0xdd4], 0
je 0x1000b3f2
jmp 0x1000b3f4
jmp 0x1000b3ca
mov dword [ebp - 0x38], 0
jmp 0x1000b404
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1000b41a
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xca4], 4
jmp 0x1000b3fd
mov dword [ebp - 0x38], 0
jmp 0x1000b42a
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1000b440
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xc50], 0
jmp 0x1000b423
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x1000b468
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc50]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc50], eax
mov dword [ebp - 0x64], 0x824a8c6a
mov dword [ebp - 0x49c], 0xffffffff
mov dword [ebp - 0x2dc], 0
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x1000b4e2
push 0x1008
push 0x41e
push 0x3b2
push 0x1fd8
push 0x92d
push 0x1652
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
mov dword [ebp - 0x64], 0
jmp 0x1000b4f2
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffff5
je 0x1000b6c1
push 3
lea ecx, [ebp - 0x898]
call fcn.10015917
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x334], 0x9974082
mov dword [ebp - 0x7fc], 0xffffffff
mov dword [ebp - 0x264], 0
jmp 0x1000b53d
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x1000b55f
push dword [ebp - 0x264]
lea ecx, [ebp - 0x898]
call fcn.100159b5
mov dword [eax], 0x968939f5
jmp 0x1000b530
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x64], eax
jne 0x1000b573
mov dword [ebp - 0x704], 1
jmp 0x1000b57a
and dword [ebp - 0x704], 0
push 2
lea ecx, [ebp - 0x898]
call fcn.100159b5
mov eax, dword [eax]
mov dword [ebp - 0x49c], eax
mov esi, dword [ebp - 0x49c]
push 2
lea ecx, [ebp - 0x898]
call fcn.100159b5
add esi, dword [eax]
cmp esi, 0xffffffff
jge 0x1000b5b5
mov dword [ebp - 0x7f4], 1
jmp 0x1000b5bc
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x2dc]
imul eax, dword [ebp - 0x2dc]
test eax, eax
jne 0x1000b5df
cmp dword [ebp - 0x334], 0
jne 0x1000b5df
and dword [ebp - 0x4a4], 0
jmp 0x1000b5e9
mov dword [ebp - 0x4a4], 1
mov eax, dword [ebp - 0x704]
cmp eax, dword [ebp - 0x4a4]
jge 0x1000b603
mov dword [ebp - 0x934], 1
jmp 0x1000b60a
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0xb80], eax
cmp dword [ebp - 0x64], 1
jge 0x1000b628
mov dword [ebp - 0x60c], 1
jmp 0x1000b62f
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x60c], eax
jl 0x1000b649
mov dword [ebp - 0x4ac], 1
jmp 0x1000b650
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x334]
cmp dword [ebp - 0x4ac], eax
je 0x1000b66a
mov dword [ebp - 0x6b4], 1
jmp 0x1000b671
and dword [ebp - 0x6b4], 0
mov esi, dword [ebp - 0x64]
add esi, dword [ebp - 0x6b4]
sub esi, dword [ebp - 0x64]
push 2
lea ecx, [ebp - 0x898]
call fcn.100159b5
cmp esi, dword [eax]
jl 0x1000b69a
mov dword [ebp - 0x4b4], 1
jmp 0x1000b6a1
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x7fc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x898]
call fcn.10015999
jmp 0x1000b4eb
mov dword [ebp - 0x22c], 0x571177e8
push 2
lea ecx, [ebp - 0xc60]
call fcn.10015917
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x1dc], 0
jmp 0x1000b6f8
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jge 0x1000b71a
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0xc60]
call fcn.100159b5
mov dword [eax], 0xfffffffb
jmp 0x1000b6eb
mov dword [ebp - 0x22c], 0
jmp 0x1000b733
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xffffffef
jl 0x1000b8e1
mov dword [ebp - 0x1e4], 0x1e2c0d37
mov dword [ebp - 0x1e4], 0
jmp 0x1000b763
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jg 0x1000b8dc
mov dword [ebp - 0x254], 0x4f147909
mov dword [ebp - 0x254], 1
jmp 0x1000b793
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jl 0x1000b8b1
mov dword [ebp - 0x158], 0
jmp 0x1000b7b9
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 4
jge 0x1000b7d5
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0xb78], 0
jmp 0x1000b7ac
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb78], 0
jmp 0x1000b803
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb78]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb78], 1
jg 0x1000b8ac
mov dword [ebp - 0x154], 0x7979b389
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x1000b853
push 0
push 0xe34
push 0x1fd5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
mov dword [ebp - 0x154], 1
jmp 0x1000b86c
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x1000b8a7
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x1000b8a5
push 0x1df1
push 0xf3a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_LineTo]
jmp 0x1000b85f
jmp 0x1000b7e8
jmp 0x1000b786
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x1000b8d7
push 0x503
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
jmp 0x1000b756
jmp 0x1000b726
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc60]
call fcn.10015999
push 1
lea ecx, [ebp - 0xb00]
call fcn.10015917
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x168], 0xdb2bc40e
mov dword [ebp - 0x614], 0x2d91
mov dword [ebp - 0x9bc], 2
mov dword [ebp - 0x9b8], 2
mov dword [ebp - 0x9b4], 2
mov dword [ebp - 0x9b0], 2
mov dword [ebp - 0x6bc], 0xe7071658
mov dword [ebp - 0x10], 0
jmp 0x1000b95a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1000b976
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb00]
call fcn.100159b5
mov dword [eax], 0x7e17f759
jmp 0x1000b953
mov dword [ebp - 0x10], 0
jmp 0x1000b986
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1000b99c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x79c], 0xa1650187
jmp 0x1000b97f
mov dword [ebp - 0x10], 0
jmp 0x1000b9ac
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1000b9c2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x970], 7
jmp 0x1000b9a5
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x1000b9e1
push 0xf86
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x614], eax
jg 0x1000b9fb
mov dword [ebp - 0x4bc], 1
jmp 0x1000ba02
and dword [ebp - 0x4bc], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9bc], 0x13e1
imul eax, dword [ebp - 0x614], 0x13e1
cmp eax, dword [ebp - 0x4bc]
jle 0x1000ba31
mov dword [ebp - 0x74c], 1
jmp 0x1000ba38
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x168]
sub eax, dword [ebp - 0x74c]
jne 0x1000ba5f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x79c], 0
jne 0x1000ba5f
and dword [ebp - 0x4c4], 0
jmp 0x1000ba69
mov dword [ebp - 0x4c4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x79c]
cmp dword [ebp - 0x4c4], eax
jne 0x1000ba8a
mov dword [ebp - 0x61c], 1
jmp 0x1000ba91
and dword [ebp - 0x61c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x79c]
cmp dword [ebp - 0x61c], eax
jle 0x1000bab2
mov dword [ebp - 0x4cc], 1
jmp 0x1000bab9
and dword [ebp - 0x4cc], 0
push 0
lea ecx, [ebp - 0xb00]
call fcn.100159b5
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x4cc]
add eax, 0x4e5857e6
mov ecx, dword [ebp - 0x2e4]
imul eax, dword [ecx]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x2e4]
mov ecx, dword [ecx]
dec ecx
mov edx, dword [ebp - 0x2e4]
mov dword [edx], ecx
test eax, eax
je 0x1000bb0f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x79c]
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x6bc], 0x8a973314
jb 0x1000bb3a
mov dword [ebp - 0x4d4], 1
jmp 0x1000bb41
and dword [ebp - 0x4d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4d4]
mov dword [ebp + eax - 0x970], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb00]
call fcn.10015999
mov dword [ebp - 0x178], 0x571177e8
push 2
lea ecx, [ebp - 0xc70]
call fcn.10015917
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x170], 0
jmp 0x1000bb9a
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x1000bbbc
push dword [ebp - 0x170]
lea ecx, [ebp - 0xc70]
call fcn.100159b5
mov dword [eax], 0xfffffffb
jmp 0x1000bb8d
mov dword [ebp - 0x178], 0
jmp 0x1000bbd5
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0xffffffef
jl 0x1000bd83
mov dword [ebp - 0x180], 0x1e2c0d37
mov dword [ebp - 0x180], 0
jmp 0x1000bc05
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jg 0x1000bd7e
mov dword [ebp - 0x188], 0x4f147909
mov dword [ebp - 0x188], 1
jmp 0x1000bc35
cmp dword [ebp - 0x188], 0
jl 0x1000bd53
mov dword [ebp - 0x190], 0
jmp 0x1000bc5b
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 4
jge 0x1000bc77
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0xb68], 0
jmp 0x1000bc4e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb68], 0
jmp 0x1000bca5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb68], 1
jg 0x1000bd4e
mov dword [ebp - 0x198], 0x7979b389
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x1000bcf5
jmp 0x1000bc28
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x1000bd79
push 0x503
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
jmp 0x1000bbf8
jmp 0x1000bbc8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc70]
call fcn.10015999
mov dword [ebp - 0x1a0], 2
push 1
lea ecx, [ebp - 0xb18]
call fcn.10015917
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x90], 0
jmp 0x1000bdc9
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1000bdeb
push dword [ebp - 0x90]
lea ecx, [ebp - 0xb18]
call fcn.100159b5
mov dword [eax], 0x532bb11a
jmp 0x1000bdbc
mov dword [ebp - 0x90], 0
jmp 0x1000be04
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1000be20
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x624], 0xfc37
jmp 0x1000bdf7
mov dword [ebp - 0x1a0], 0x16
jmp 0x1000be39
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xfffffff4
jne 0x1000be57
push 0
lea ecx, [ebp - 0xb18]
call fcn.100159b5
mov dword [eax], 0xfffffffa
jmp 0x1000be2c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x624]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x624], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb18]
call fcn.10015999
mov dword [ebp - 0x6c], 0x824a8c6a
mov dword [ebp - 0x4dc], 0xffffffff
mov dword [ebp - 0x31c], 0
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x1000bee0
push 0x1008
push 0x41e
push 0x3b2
push 0x1fd8
push 0x92d
push 0x1652
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
mov dword [ebp - 0x6c], 0
jmp 0x1000bef0
cmp dword [ebp - 0x6c], 0xfffffff5
je 0x1000c0bf