Function at 0xb72290
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xbca570
mov eax, dword fs:[0]
push eax
sub esp, 0x7c
mov eax, dword [0xd08954]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x3c], edi
mov esi, dword [ebp + 8]
cmp esi, 0xd
jl 0xb72489
cmp esi, 0x8004
jge 0xb72489
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0xb72454
cmp esi, 6
je 0xb72774
cmp esi, 0x8006
je 0xb72774
lea eax, [ebp - 0x2c]
push eax
push ebx
call dword [sym.imp.api_ms_win_rtcore_ntuser_private_l1_1_0.dll_GetWindowBand]
test eax, eax
je 0xb72454
mov eax, dword [ebp - 0x2c]
mov al, byte [eax*8 + 0xb3212c]
test al, al
je 0xb72454
push ebx
call dword [sym.imp.USER32.dll_Ordinal_2574]
test eax, eax
jne 0xb72440
cmp esi, 0x11
jl 0xb7233f
cmp esi, 0x8004
jl 0xb72469
cmp esi, 0xa
jle 0xb72590
mov eax, esi
sub eax, 0x10
jne 0xb727d0
mov esi, 0x80004005
mov dword [ebp - 0x4c], eax
push ebx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], esi
call dword [sym.imp.USER32.dll_Ordinal_2574]
test eax, eax
jne 0xbef12f
mov eax, dword [edi + 0xc8]
test eax, eax
je 0xb729f6
mov eax, dword [eax]
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x40], ecx
test eax, eax
jle 0xb7240b
lea esp, [esp]
test esi, esi
jns 0xbef2e7
mov eax, dword [edi + 0xc8]
mov eax, dword [eax + 4]
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x58], esi
test esi, esi
je 0xbef293
mov eax, dword [esi]
mov dword [ebp - 0x20], 0
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x24], eax
cmp eax, fcn.00b764c0
jne 0xbef236
xor edx, edx
mov eax, 0x80004005
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x14], eax
cmp dword [esi + 0x10], edx
jne 0xb724d1
mov dword [ebp - 0x54], edx
test eax, eax
jns 0xbef25a
mov esi, 0x80004005
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x40]
inc eax
mov ecx, eax
mov dword [ebp - 0x40], eax
cmp eax, dword [ebp - 0x38]
jl 0xb72390
test esi, esi
jns 0xbef2e7
mov ecx, dword [edi + 0xc4]
mov eax, dword [ecx]
mov esi, dword [eax + 0x1c]
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x24]
push eax
push 0
push 0
push ebx
push ecx
cmp esi, fcn.00b764c0
jne 0xbef29b
call fcn.00b764c0
mov ebx, eax
test ebx, ebx
js 0xb72469
jmp 0xbef2aa
push 0xb2bb18
push ebx
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetPropW]
test eax, eax
jne 0xb7232e
cmp esi, 0x8004
je 0xb7289e
cmp esi, 4
je 0xb7289e
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00bc0ea0
mov esp, ebp
pop ebp
ret 8
cmp esi, 0x8004
je case.0xb724ae.3
jg case.0xb724ae.3
lea eax, [esi - 2]
cmp eax, 0xa
ja case.0xb724ae.3
movzx eax, byte [eax + 0xb72ad8]
jmp dword [eax*4 + 0xb72ac0]
mov esi, dword [ebp + 0xc]
push esi
call dword [sym.imp.USER32.dll_Ordinal_2574]
test eax, eax
jne 0xb72862
push esi
mov ecx, edi
call fcn.00b72e80
jmp 0xb72469
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0xbef1d1
mov ecx, dword [ecx]
mov dword [ebp - 0x48], ecx
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x48], ecx
jle 0xb723e2
nop
mov eax, dword [esi + 0x10]
mov eax, dword [eax + 4]
mov ecx, dword [eax + ecx*4]
mov dword [ebp - 0x5c], ecx
test ecx, ecx
je 0xb72575
mov eax, dword [ecx]
push ecx
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x24], eax
cmp eax, fcn.00b4df90
je 0xb728dc
mov ecx, eax
call dword [0xd0cffc]
call dword [ebp - 0x24]
mov ecx, eax
mov dword [ebp - 0x18], eax
cmp ecx, ebx
je 0xb72788
mov edx, dword [esi + 0x40]
mov eax, dword [edx]
mov eax, dword [eax + 0x1f4]
mov dword [ebp - 0x24], eax
cmp eax, fcn.00b76dd0
jne 0xbef1fb
mov eax, 0xffff
cmp word [0xd08c20], ax
je 0xbef1d9
push 0xffffffffffffffe0
push ecx
call dword [sym.imp.USER32.dll_GetClassLongW]
movzx eax, ax
test ax, ax
je 0xb72575
cmp ax, word [0xd08c20]
je 0xbef210
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, dword [ebp - 0x48]
jl 0xb724f0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x60]
jmp 0xb723e2
je 0xbeef59
mov eax, esi
sub eax, 1
je 0xb727e8
sub eax, 3
je 0xb727db
sub eax, 2
jne 0xb72469
push ebx
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x14], 0x80004005
call dword [sym.imp.USER32.dll_Ordinal_2574]
test eax, eax
jne 0xb72a1f
mov eax, dword [edi + 0xc8]
test eax, eax
je 0xbeef87
mov eax, dword [eax]
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], ecx
test eax, eax
jle 0xb7267b
mov eax, 0x80004005
lea esp, [esp]
test eax, eax
jns 0xb7292c
mov eax, dword [edi + 0xc8]
mov eax, dword [eax + 4]
mov edi, dword [eax + ecx*4]
mov dword [ebp - 0x54], edi
test edi, edi
je 0xb72924
mov eax, dword [edi]
mov dword [ebp - 0x20], 0
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x30], eax
cmp eax, fcn.00b764c0
jne 0xbeeff3
xor ecx, ecx
mov eax, 0x80004005
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x14], eax
cmp dword [edi + 0x10], ecx
jne 0xb726b6
mov dword [ebp - 0x58], ecx
test eax, eax
jns 0xb728eb
mov eax, 0x80004005
mov dword [ebp - 0x14], eax
mov edi, dword [ebp - 0x18]
inc edi
cmp edi, dword [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x18]
jl 0xb72600
test eax, eax
jns 0xb7292c
mov ecx, dword [edi + 0xc4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x24], eax
cmp eax, fcn.00b764c0
jne 0xbef017
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x30]
push eax
push 0
push 0
push ebx
push ecx
call fcn.00b764c0
mov ebx, eax
test ebx, ebx
js 0xb72469
jmp 0xbef035
mov edx, dword [edi + 0x10]
test edx, edx
je 0xbeef8e
mov edx, dword [edx]
mov dword [ebp - 0x40], edx
xor edx, edx
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x40], ecx
jle 0xb7264e
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 4]
mov ecx, dword [eax + edx*4]
mov dword [ebp - 0x24], ecx
test ecx, ecx
je 0xb72759
mov eax, dword [ecx]
push ecx
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x38], eax
cmp eax, fcn.00b4df90
je 0xb729e7
mov ecx, eax
call dword [0xd0cffc]
call dword [ebp - 0x38]
mov ecx, eax
mov dword [ebp - 0x38], eax
cmp ecx, ebx
je 0xb72820
mov edx, dword [edi + 0x40]
mov eax, dword [edx]
mov eax, dword [eax + 0x1f4]
mov dword [ebp - 0x5c], eax
cmp eax, fcn.00b76dd0
jne 0xbeefb8
mov eax, 0xffff
cmp word [0xd08c20], ax
je 0xbeef96
push 0xffffffffffffffe0
push ecx
call dword [sym.imp.USER32.dll_GetClassLongW]
movzx eax, ax
test ax, ax
je 0xb72759
cmp ax, word [0xd08c20]
je 0xbeefcd
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp eax, dword [ebp - 0x40]
jl 0xb72ab7
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30]
jmp 0xb7264e
push ebx
call dword [sym.imp.USER32.dll_Ordinal_2573]
test eax, eax
je 0xb722fa
jmp 0xb7232e
push dword [ebp - 0x5c]
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
push dword [ebp - 0x44]
lea eax, [ebp - 0x20]
mov dword [ebp - 0x14], 0
push eax
mov dword [ebp - 0x20], 0
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov esi, dword [ebp - 0x58]
xor eax, eax
lea edx, [eax + 4]
jmp 0xb723e2
sub eax, 0x7ff4
jne 0xb729fd
push ebx
mov ecx, edi
call fcn.00b72ae3
jmp 0xb72469
mov ecx, ebx
call fcn.00b83c77
test eax, eax
jne 0xb72469
push 0xb29e58
push ebx
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetPropW]
test eax, eax
jne 0xb72469
push ebx
mov ecx, edi
call fcn.00b737f2
push ebx
mov ecx, edi
call fcn.00b7331c
jmp 0xb72469
push dword [ebp - 0x24]
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
push dword [ebp - 0x48]
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [eax]
mov edi, dword [ecx + 8]
mov ecx, edi
call dword [0xd0cffc]
call edi
mov edi, dword [ebp - 0x54]
xor eax, eax
lea ecx, [eax + 4]
jmp 0xb7264e
lea eax, [ebp - 0x2c]
push eax
push esi
call dword [sym.imp.api_ms_win_rtcore_ntuser_private_l1_1_0.dll_GetWindowBand]
test eax, eax
je 0xb724c7
mov ecx, esi
call fcn.00b84012
test al, al
jne 0xb724c7
mov eax, dword [ebp - 0x2c]
cmp eax, 1
je 0xb72469
cmp eax, 8
jne 0xb724c7
jmp 0xb72469
test ebx, ebx
jne 0xb72a0b
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetForegroundWindow]
test eax, eax
je 0xb728d5
lea ecx, [ebp - 0x5c]
push ecx
push eax
call dword [sym.imp.api_ms_win_rtcore_ntuser_private_l1_1_0.dll_GetWindowBand]
test eax, eax
je 0xbef318
mov eax, dword [ebp - 0x5c]
mov al, byte [eax*8 + 0xb3212c]
test al, al
je 0xbef318
push 0
jmp 0xb727dc
call fcn.00b4df90
mov ecx, eax
mov dword [ebp - 0x18], ecx
jmp 0xb72524
cmp ecx, 4
jl 0xb72659
push edi
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0xb72924
push eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
mov edi, dword [ecx + 8]
mov ecx, edi
call dword [0xd0cffc]
call edi
mov eax, dword [ebp - 0x14]
jmp 0xb72661
xor eax, eax
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
mov edi, dword [ecx + 0x5c]
mov ecx, edi
call dword [0xd0cffc]
call edi
test eax, eax
js 0xbef073
xor bl, bl
cmp esi, 0x8006
je 0xbef07a
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x40]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov edi, dword [ebp - 0x3c]
test eax, 0x10000
jne 0xbef0fd
xor edx, edx
test bl, bl
jne 0xb729a2
mov ecx, dword [edi + 0xbc]
push edx
push dword [ebp - 0x28]
mov eax, dword [ecx]
push dword [ebp - 0x34]
push ecx
mov esi, dword [eax + 0x20]
cmp esi, fcn.00b638a0
jne 0xbef120
call fcn.00b638a0
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb72469
mov ecx, dword [ebp + 0xc]
lea eax, [ecx + 4]
push eax
push dword [ecx]
mov ecx, edi
call fcn.00b4f6ec
mov eax, 1
jmp 0xb7246b
call fcn.00b4df90
mov ecx, eax
mov dword [ebp - 0x38], ecx
jmp 0xb72708
xor eax, eax
jmp 0xb72380
sub eax, 2
jne 0xb72469
jmp 0xb725b3
mov ecx, ebx
call fcn.00b51b4a
test al, al
jne 0xb72469
jmp 0xbef318
lea eax, [ebp - 0x60]
push eax
push ebx
call dword [sym.imp.api_ms_win_rtcore_ntuser_private_l1_1_0.dll_GetWindowBand]
test eax, eax
je 0xb725d7
mov ecx, ebx
call fcn.00b84012
test al, al
jne 0xb725d7
mov eax, dword [ebp - 0x60]
cmp eax, 1
jne 0xbeef65
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1c]
cmp dword [edi + 0xd8], 0
je 0xbeef73
call fcn.00b8ba6f
mov ecx, dword [edi + 0xd8]
lea eax, [ebp - 0x1c]
push eax
mov edx, ebx
call fcn.00b5055a
mov ebx, eax
test ebx, ebx
js 0xb72a9b
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x1c]
call fcn.00b501b0
mov ebx, eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
call fcn.00b8ba6f
test ebx, ebx
js 0xb72469
jmp 0xb7292c
mov edx, dword [ebp - 0x44]
jmp 0xb726d4
mov eax, dword [ebp + 0xc]
mov ecx, dword [edi + 0x68]
shr eax, 0x10
and eax, 0xfff
push eax
call fcn.00c34504
jmp 0xb7246b
mov eax, dword [edi + 0xbc]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x38]
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb72469
push ecx
push ebx
call fcn.00c7ade7
jmp 0xb72469
cmp eax, 8
jne 0xb725d7
jmp 0xb72a4d
call fcn.00b8ba6f
lea edx, [ebp - 0x1c]
mov ecx, ebx
call fcn.00cab989
jmp 0xb72a81
xor eax, eax
jmp 0xb725e7
mov dword [ebp - 0x40], ecx
jmp 0xb726c6
lea eax, [ebp - 0x88]
push eax
push 0xb2baa8
push 0
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetClassInfoW]
mov ecx, dword [ebp - 0x38]
mov word [0xd08c20], ax
jmp 0xb7273b
push ecx
push edx
mov ecx, eax
call dword [0xd0cffc]
call dword [ebp - 0x5c]
test eax, eax
je 0xb72759
mov eax, dword [edi + 0x40]
push dword [ebp - 0x38]
push eax
mov ecx, dword [eax]
mov edi, dword [ecx + 0x40]
mov ecx, edi
call dword [0xd0cffc]
call edi
cmp ebx, eax
je 0xb72820
mov edi, dword [ebp - 0x54]
jmp 0xb72759
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x58]
push ecx
push 0
push 0
push ebx
push edi
mov ecx, eax
call dword [0xd0cffc]
call dword [ebp - 0x30]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x14], eax
jmp 0xb72651
lea edx, [ebp - 0x18]
push edx
lea edx, [ebp - 0x30]
push edx
push 0
push 0
push ebx
push ecx
mov ecx, eax
call dword [0xd0cffc]
call dword [ebp - 0x24]
jmp 0xb726a7
push dword [edi + 0xc4]
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0xb72aaa
push eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
mov edi, dword [ecx + 8]
mov ecx, edi
call dword [0xd0cffc]
call edi
jmp 0xb72aaa
mov bl, 1
jmp 0xb7294b
mov dword [ebp - 0x30], 3
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetForegroundWindow]
mov edi, eax
test edi, edi
je 0xbef0a9
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x30]
mov ecx, esi
call dword [0xd0cffc]
call esi
cmp eax, edi
jne 0xbef0a9
mov edi, dword [ebp - 0x3c]
jmp 0xbef0e9
mov eax, dword [ebp - 0x28]
push 0x10000
push 0x10000
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x44]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov edi, dword [ebp - 0x3c]
test bl, bl
jne 0xbef0e9
mov eax, dword [edi + 0xbc]
push dword [ebp - 0x28]
push dword [ebp - 0x34]
mov esi, dword [eax]
push eax
mov esi, dword [esi + 0x34]
mov ecx, esi
call dword [0xd0cffc]
call esi
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
mov edx, dword [ebp - 0x30]
mov dword [edi + 0xc0], eax
jmp 0xb7297a
mov esi, dword [edi + 0xc0]
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
sub eax, esi
cmp eax, 0x7d0
jbe 0xb72978
mov edx, 2
jmp 0xb7297a
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb729a2
lea eax, [ebp - 0x30]
push eax
push ebx
call dword [sym.imp.api_ms_win_rtcore_ntuser_private_l1_1_0.dll_GetWindowBand]
test eax, eax
je 0xb72370
mov ecx, ebx
call fcn.00b84012
test al, al
jne 0xb72370
mov eax, dword [ebp - 0x30]
cmp eax, 1
je 0xbef162
cmp eax, 8
jne 0xb72370
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c]
cmp dword [edi + 0xd8], 0
je 0xbef194
call fcn.00b8ba6f
mov ecx, dword [edi + 0xd8]
lea eax, [ebp - 0x1c]
push eax
mov edx, ebx
call fcn.00b5055a
jmp 0xbef1a3
call fcn.00b8ba6f
lea edx, [ebp - 0x1c]
mov ecx, ebx
call fcn.00cab989
mov ebx, eax
test ebx, ebx
js 0xbef1bd
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x1c]
call fcn.00b501b0
mov ebx, eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
call fcn.00b8ba6f
jmp 0xbef2df
mov dword [ebp - 0x48], edx
jmp 0xb724e1
lea eax, [ebp - 0x88]
push eax
push 0xb2baa8
push 0
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetClassInfoW]
mov ecx, dword [ebp - 0x18]
mov word [0xd08c20], ax
jmp 0xb72557
push ecx
push edx
mov ecx, eax
call dword [0xd0cffc]
call dword [ebp - 0x24]
test eax, eax
je 0xb72575
mov eax, dword [esi + 0x40]
push dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x40]
mov ecx, esi
call dword [0xd0cffc]
call esi
cmp ebx, eax
je 0xb72788
mov esi, dword [ebp - 0x58]
jmp 0xb72575
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x54]
push ecx
push 0
push 0
push ebx
push esi
mov ecx, eax
call dword [0xd0cffc]
call dword [ebp - 0x24]
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x14], eax
jmp 0xb723e5
cmp edx, 4
jl 0xb723ed
push esi
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0xbef293
push eax
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov esi, dword [ebp - 0x14]
jmp 0xb723f5
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb72435
push dword [edi + 0xc4]
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0xbef2df
push eax
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.api_ms_win_shcore_comhelpers_l1_1_0.dll_IUnknown_Set]
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0xd0cffc]
call esi
test ebx, ebx
js 0xb72469
mov ecx, dword [ebp - 0x4c]
cmp ecx, dword [edi + 0xc4]
je 0xbef300
push dword [ebp - 0x50]
push ecx
mov ecx, edi
call fcn.00c7b669
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov eax, dword [ebp - 0x50]
jmp 0xb729b8
mov eax, dword [edi + 0xbc]
push 0
push 0
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x1c]
mov ecx, esi
call dword [0xd0cffc]
call esi
push 0
push 0
push 0x579
push dword [0xd0ac3c]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SendMessageW]
jmp 0xb72469