Function at 0x100086a1
Capabilities:
Delete file
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005fe6f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x260
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 3
lea ecx, [ebp - 0x1f4]
call fcn.100017ce
and dword [ebp - 4], 0
push 2
lea ecx, [ebp - 0x1d0]
call fcn.100017ce
mov byte [ebp - 4], 1
mov dword [ebp - 0x138], 0xa77c8748
mov dword [ebp - 0x18], 0
jmp 0x10008702
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1000871e
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1f4]
call fcn.1000184c
mov dword [eax], 1
jmp 0x100086fb
mov dword [ebp - 0x18], 0
jmp 0x1000872e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1000874a
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1d0]
call fcn.1000184c
mov dword [eax], 0xb8c3
jmp 0x10008727
mov byte [ebp - 0x29], 0
mov dword [ebp - 0xc4], 0x1c81
mov dword [ebp - 0x140], str.berb_sqdvnc_axiobjpd_pbh_eek_lzodcfy
cmp dword [ebp - 0xc4], 0x1dee
jle 0x10008885
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetMenu]
and dword [ebp - 0x54], 0
jmp 0x1000878e
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x47dd
jge 0x1000886a
and dword [ebp - 0x88], 0
jmp 0x100087b1
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x58a1
jge 0x10008865
and dword [ebp - 0x4c], 0
jmp 0x100087ce
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x34ce
jge 0x10008860
and dword [ebp - 0x8c], 0
jmp 0x100087f1
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x76ce
jge 0x1000885b
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x8c]
or eax, dword [ebp - 0x54]
cdq
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], edx
push dword [ebp - 0x148]
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x258]
call fcn.10002394
pop ecx
pop ecx
mov dword [ebp - 0x178], eax
mov ecx, dword [ebp - 0x178]
call fcn.10005527
push eax
call fcn.10047752
pop ecx
lea ecx, [ebp - 0x258]
call fcn.1000551d
jmp 0x100087e4
jmp 0x100087c7
jmp 0x100087a4
jmp 0x10008787
push 0
push 0
push 0x1b60
push 0x1bb7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindow]
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x10008895
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 2
cmp dword [ebp - 0xc4], 0x1adc
jge 0x100088b1
push dword [ebp - 0x140]
call fcn.10047752
pop ecx
jmp 0x100088cd
mov dword [ebp - 4], 1
jmp 0x100088dd
mov dword [ebp - 0x108], 0x42c9
mov dword [ebp - 0x124], str.ucsst_oovlx_knqp_thoyam_eyvjwawo_tuqnes_yhorrixlh_jlpbzb_eak
cmp dword [ebp - 0x108], 0x4528
jle 0x100089a4
and dword [ebp - 0x44], 0
jmp 0x1000890e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x24ce
jge 0x1000895b
and dword [ebp - 0x5c], 0
jmp 0x10008924
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x6bd8
jge 0x10008959
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x5c]
cdq
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], edx
push dword [ebp - 0x154]
push dword [ebp - 0x158]
mov ecx, 0x1007ba38
call fcn.10005547
jmp 0x1000891d
jmp 0x10008907
push 0
push 0x1780
push 0xaca
push 0x8d1
push 0x30a
push 0x255f
push 0xe06
push 0x2439
push 0xfd2
push 0x1b0d
push 0x229a
push 0x1763
push 0x9bb
push 0x1021
call dword [sym.imp.GDI32.dll_CreateFontA]
push 1
lea ecx, [ebp - 0x1d0]
call fcn.1000184c
mov esi, eax
push 0
lea ecx, [ebp - 0x1f4]
call fcn.1000184c
mov eax, dword [eax]
mov dword [esi], eax
mov dword [ebp - 0x138], 0xfffffffa
mov byte [ebp - 4], 4
cmp dword [ebp - 0x108], 0x4029
jge 0x100089ee
mov edx, dword [ebp - 0x124]
mov ecx, 0x1007ba38
call fcn.100078f4
jmp 0x10008a0a
mov dword [ebp - 4], 1
jmp 0x10008a1a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1d0]
call fcn.10001830
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f4]
call fcn.10001830
movzx eax, byte [0x1007cb7c]
test eax, eax
je 0x10008a56
mov esi, 0x100785e0
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10009689
mov dword [ebp - 0x220], 0x100785e0
mov dword [ebp - 0x210], 0x100785e4
mov byte [0x1007cb7c], 1
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x10078740
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x30], 0xca4f833f
push 3
lea ecx, [ebp - 0x198]
call fcn.100017ce
mov dword [ebp - 4], 6
mov dword [ebp - 0x80], 0
jmp 0x10008ab0
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10008acc
push dword [ebp - 0x80]
lea ecx, [ebp - 0x198]
call fcn.1000184c
mov dword [eax], 0xe60f951
jmp 0x10008aa9
cmp dword [ebp - 0x30], 0
je 0x10008aee
mov dword [ebp - 0x114], 0xffffffff
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
jmp 0x10008c2c
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x90], 0xffffffff
mov dword [ebp - 0x12c], 0xffffffff
cmp dword [ebp - 0x20], 1
jle 0x10008b1b
mov dword [ebp - 0xb8], 1
jmp 0x10008b22
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x10008b43
mov dword [ebp - 0x174], 1
jmp 0x10008b4a
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x204], eax
mov esi, dword [ebp - 0x30]
push 1
lea ecx, [ebp - 0x198]
call fcn.1000184c
mov eax, dword [eax]
sub eax, esi
jne 0x10008b87
cmp dword [ebp - 0x90], 0
jne 0x10008b87
and dword [ebp - 0xe8], 0
jmp 0x10008b91
mov dword [ebp - 0xe8], 1
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0xe8]
shl eax, 1
jne 0x10008bb4
mov eax, 0x32d683a7
test eax, eax
jne 0x10008bb4
and dword [ebp - 0xc0], 0
jmp 0x10008bbe
mov dword [ebp - 0xc0], 1
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x20], 0
jmp 0x10008bda
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x10008c2c
mov dword [ebp - 0x64], 0
jmp 0x10008bf0
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x10008c06
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x240], 6
jmp 0x10008be9
push dword [ebp - 0x20]
lea ecx, [ebp - 0x198]
call fcn.1000184c
mov dword [eax], 0xa1dd7933
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x240], 0xa1dd7933
jmp 0x10008bd3
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x10008c4c
push 0x8b9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x198]
call fcn.10001830
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x10078740
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x144], 0xfffffff8
mov dword [ebp - 0x78], 0
jmp 0x10008c8d
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x10008ca0
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x40], 0xfff6
jmp 0x10008c86
mov dword [ebp - 0x14], 0x12
jmp 0x10008cb0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1a
je 0x10008cc0
cmp dword [ebp - 0x14], 0
je 0x10008cbe
jmp 0x10008cc0
jmp 0x10008ca9
mov dword [ebp - 0x14], 0
jmp 0x10008cd0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x10008e64
mov dword [ebp - 0x6c], 0xfffffffc
mov dword [ebp - 0x188], 0x267e
mov dword [ebp - 0x180], 0xae215169
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x40]
mov ecx, dword [ebp - 0x14]
mov dword [ebp + ecx*4 - 0x40], eax
mov dword [ebp - 0x6c], 0
jmp 0x10008d13
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jg 0x10008e5f
mov dword [ebp - 0x18c], 0x8716
mov dword [ebp - 0x13c], 0x5db2b058
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x40], 0
je 0x10008d40
jmp 0x10008e5f
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x40]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
push 4
pop edx
shl edx, 0
mov edx, dword [ebp + edx - 0x40]
add edx, dword [ebp + ecx*4 - 0x40]
cmp edx, dword [ebp + eax*4 - 0x40]
jl 0x10008d73
mov dword [ebp - 0x100], 1
jmp 0x10008d7a
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x100], eax
je 0x10008d94
mov dword [ebp - 0xc8], 1
jmp 0x10008d9b
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x40]
cmp eax, dword [ebp - 0xc8]
jge 0x10008db6
mov dword [ebp - 0xf0], 1
jmp 0x10008dbd
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0xfffd
ja 0x10008dd5
mov dword [ebp - 0x134], 1
jmp 0x10008ddc
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x188]
imul ecx, dword [ebp + eax*4 - 0x40]
cmp ecx, dword [ebp - 0x13c]
jge 0x10008dfe
mov dword [ebp - 0xd0], 1
jmp 0x10008e05
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xd0], eax
jle 0x10008e1c
mov dword [ebp - 0x110], 1
jmp 0x10008e23
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x110], eax
je 0x10008e47
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x40], 0
je 0x10008e47
mov dword [ebp - 0xd8], 1
jmp 0x10008e4e
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x144], eax
jmp 0x10008d0c
jmp 0x10008cc9
mov eax, dword [ebp - 0x104]
mov dword [0x100785e0], eax
mov dword [ebp - 0x1c], 0xfffffff7
push 2
lea ecx, [ebp - 0x1b0]
call fcn.100017ce
mov dword [ebp - 4], 7
mov dword [ebp - 0xa4], 0xbf90350d
mov dword [ebp - 0x7c], 0
jmp 0x10008ea4
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10008ec0
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x1b0]
call fcn.1000184c
mov dword [eax], 0x9ac54c97
jmp 0x10008e9d
mov byte [ebp - 0x2c], 0
movzx eax, byte [ebp - 0x2c]
test eax, eax
je 0x10008eda
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov dword [ebp - 0x1c], 0
jmp 0x10008eea
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffffe
jge 0x1000934c
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0xf8], 0x66a8
mov dword [ebp - 0x118], str.nhayh_jeofeogy_afbsz_uyr_iqxmccbpz_lrm_ahhafy_lprkjn_xigko_klmxvwcb
cmp dword [ebp - 0xf8], 0x6934
jle 0x10008fa4
push 0x921
push 0xda8
push 0
call dword [sym.imp.USER32.dll_OffsetRect]
and dword [ebp - 0x74], 0
jmp 0x10008f47
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x4c83
jge 0x10008fa4
and dword [ebp - 0x84], 0
jmp 0x10008f66
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xba2
jge 0x10008fa2
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x84]
sar eax, cl
cdq
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], edx
push dword [ebp - 0x160]
push dword [ebp - 0x164]
mov ecx, 0x1007ba38
call fcn.10005547
jmp 0x10008f59
jmp 0x10008f40
push 4
lea ecx, [ebp - 0x1a4]
call fcn.100017ce
mov byte [ebp - 4], 8
mov byte [ebp - 4], 9
cmp dword [ebp - 0xf8], 0x647c
jge 0x10008fd5
mov edx, dword [ebp - 0x118]
mov ecx, 0x1007ba38
call fcn.100078f4
jmp 0x10008ff1
mov dword [ebp - 4], 8
jmp 0x10009001
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x48], 0
jmp 0x1000901b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x10009037
push dword [ebp - 0x48]
lea ecx, [ebp - 0x1a4]
call fcn.1000184c
mov dword [eax], 0xcee34edf
jmp 0x10009014
mov dword [ebp - 0xfc], 0xd4e
mov dword [ebp - 0x120], str.gkonb_vdokamw_ierhz_xxsowzq_aeqprl
cmp dword [ebp - 0xfc], 0x10b5
jle 0x100090ff
and dword [ebp - 0x60], 0
jmp 0x10009068
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x228c
jge 0x100090ff
and dword [ebp - 0x50], 0
jmp 0x10009082
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x60fd
jge 0x100090fa
and dword [ebp - 0x58], 0
jmp 0x10009098
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x148c
jge 0x100090f8
mov eax, dword [ebp - 0x50]
cdq
idiv dword [ebp - 0x58]
and edx, dword [ebp - 0x60]
mov eax, edx
cdq
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], edx
push dword [ebp - 0x16c]
push dword [ebp - 0x170]
lea ecx, [ebp - 0x270]
call fcn.10002394
pop ecx
pop ecx
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x150]
call fcn.10005527
push eax
call fcn.10047752
pop ecx
lea ecx, [ebp - 0x270]
call fcn.1000551d
jmp 0x10009091
jmp 0x1000907b
jmp 0x10009061
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x15c]
jne 0x10009147
mov dword [ebp - 0xb0], 1
jmp 0x1000914e
and dword [ebp - 0xb0], 0
push 0
lea ecx, [ebp - 0x1a4]
call fcn.1000184c
mov dword [ebp - 0x184], eax
push 0
lea ecx, [ebp - 0x1b0]
call fcn.1000184c
mov ecx, dword [ebp - 0x184]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x218], eax
push 0
lea ecx, [ebp - 0x1b0]
call fcn.1000184c
cmp dword [eax], 3
jg 0x100091a2
mov dword [ebp - 0x168], 1
jmp 0x100091a9
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x214], eax
mov eax, 0xf4a7
cmp eax, 1
jle 0x100091cb
mov dword [ebp - 0xb4], 1
jmp 0x100091d2
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0xb4]
jle 0x100091ec
mov dword [ebp - 0xbc], 1
jmp 0x100091f3
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xbc], eax
jg 0x1000920a
mov dword [ebp - 0xac], 1
jmp 0x10009211
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xac]
jle 0x10009228
mov dword [ebp - 0xcc], 1
jmp 0x1000922f
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xcc], eax
jle 0x10009249
mov dword [ebp - 0xd4], 1
jmp 0x10009250
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xd4]
jl 0x10009267
mov dword [ebp - 0xdc], 1
jmp 0x1000926e
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xdc], eax
jle 0x1000929a
push 1
lea ecx, [ebp - 0x1a4]
call fcn.1000184c
cmp dword [eax], 0
je 0x1000929a
mov dword [ebp - 0xe4], 1
jmp 0x100092a1
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xe4], eax
jge 0x100092b8
mov dword [ebp - 0xec], 1
jmp 0x100092bf
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
sub eax, 0x3cf6547d
cmp eax, 0x1943
jge 0x100092dd
mov dword [ebp - 0xf4], 1
jmp 0x100092e4
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x11c], eax
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0xfc], 0xb54
jge 0x1000930c
push dword [ebp - 0x120]
call fcn.10047752
pop ecx
jmp 0x10009328
mov dword [ebp - 4], 8
jmp 0x10009338
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1a4]
call fcn.10001830
jmp 0x10008ee3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b0]
call fcn.10001830
mov eax, dword [ebp - 0x94]
mov dword [0x100785e4], eax
mov dword [ebp - 0x224], 0x9ac78948
mov byte [ebp - 0x2b], 0
movzx eax, byte [ebp - 0x2b]
test eax, eax
je 0x1000938b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 0x22], 0
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x100093a4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
push dword [ecx + eax]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x104]
push dword [ecx + eax]
call fcn.100085d0
pop ecx
pop ecx
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x1c4], 0x8eac
mov dword [ebp - 0x1c0], 0x8eac
mov dword [ebp - 0x1bc], 0x8eac
mov dword [ebp - 0x1b8], 0x8eac
lea ecx, [ebp - 0xa5]
call fcn.1000185b
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x230]
call fcn.1000185e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1dc]
call fcn.1000180a
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x28], 0xcb50bf34
mov dword [ebp - 0x28], 0
jmp 0x1000944a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x1000947c
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1dc]
call fcn.1000184c
mov esi, eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1dc]
call fcn.1000184c
mov eax, dword [eax]
mov dword [esi], eax
cmp dword [ebp - 0x28], 0
je 0x1000947a
jmp 0x10009443
jmp 0x10009443
mov byte [ebp - 0x23], 0
movzx eax, byte [ebp - 0x23]
test eax, eax
je 0x1000949c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1dc]
call fcn.10001830
push dword [ebp - 0x94]
mov edx, 0x1007860c
mov ecx, dword [ebp - 0x128]
call fcn.1000866a
pop ecx
mov dword [ebp - 0x68], 2
mov dword [ebp - 0x20c], 0
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x100094ec
push 0x12b7
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov dword [ebp - 0x68], 0xfffffff0
jmp 0x100094fc
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffff6
jge 0x1000967b
mov dword [ebp - 0x130], 0x1d2c
cmp dword [ebp - 0x130], 0xdcb
jge 0x1000965f
lea eax, [ebp - 0x70]
push eax
mov ecx, 0x1007bb58
call fcn.10016d59
push dword [ebp - 0x70]
lea ecx, [ebp - 0x200]
call fcn.100017ce
mov dword [ebp - 4], 0xe
and dword [ebp - 0x98], 0
and dword [ebp - 0x38], 0
jmp 0x10009557
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x70]
jge 0x10009596
push dword [ebp - 0x38]
lea ecx, [ebp - 0x200]
call fcn.1000184c
push eax
mov ecx, 0x1007bb58
call fcn.10016d59
push dword [ebp - 0x38]
lea ecx, [ebp - 0x200]
call fcn.1000184c
mov ecx, dword [ebp - 0x98]
add ecx, dword [eax]
mov dword [ebp - 0x98], ecx
jmp 0x10009550
push dword [ebp - 0x70]
lea ecx, [ebp - 0x1e8]
call fcn.100017ce
mov byte [ebp - 4], 0xf
and dword [ebp - 0xa0], 0
and dword [ebp - 0x34], 0
jmp 0x100095bc
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x70]
jge 0x100095fb
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1e8]
call fcn.1000184c
push eax
mov ecx, 0x1007bb58
call fcn.10016d59
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1e8]
call fcn.1000184c
mov ecx, dword [ebp - 0xa0]
add ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
jmp 0x100095b5
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0xa0]
jl 0x10009626
push fcn.100198fb
mov edx, 0x10069548
mov ecx, 0x1007ba38
call fcn.100078f4
mov ecx, eax
call fcn.10016f46
jmp 0x10009641
push fcn.100198fb
mov edx, 0x1006954c
mov ecx, 0x1007ba38
call fcn.100078f4
mov ecx, eax
call fcn.10016f46
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1e8]
call fcn.10001830
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.10001830
mov dword [ebp - 0x10c], 0xffff
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
jmp 0x100094f5
mov esi, 0x100785e0
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret