Function at 0x1000acc4
Capabilities:
Check os version
Get common file path
Get graphical window text
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x920
push esi
push edi
mov dword [ebp - 0x6c], 8
mov dword [ebp - 0x1d0], 0
jmp 0x1000acef
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 3
jge 0x1000ad0b
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x8f0], 1
jmp 0x1000ace2
mov dword [ebp - 0x6c], 2
jmp 0x1000ad1b
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x1000ad65
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1b4], 0
jmp 0x1000ad44
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jg 0x1000ad63
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x1000ad61
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x1000ad37
jmp 0x1000ad14
mov dword [ebp - 0x6c], 0
jmp 0x1000ad75
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x12
je 0x1000ad9d
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1000ad93
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
cmp dword [ebp - 0x6c], 0
je 0x1000ad9b
jmp 0x1000ad6e
jmp 0x1000ad6e
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x168], 0
jmp 0x1000adbd
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x1000add9
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x908], 1
jmp 0x1000adb0
mov dword [ebp - 0x34], 2
jmp 0x1000ade9
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1000ae39
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1b8], 0
jmp 0x1000ae12
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 2
jg 0x1000ae37
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x1000ae35
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x1000ae05
jmp 0x1000ade2
mov dword [ebp - 0x34], 0
jmp 0x1000ae49
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x12
je 0x1000ae71
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x1000ae67
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
cmp dword [ebp - 0x34], 0
je 0x1000ae6f
jmp 0x1000ae42
jmp 0x1000ae42
mov dword [ebp - 0x6e0], 0x2d5e48d3
mov dword [ebp - 0x6dc], 0x2d5e48d3
mov dword [ebp - 0x6d8], 0x2d5e48d3
mov dword [ebp - 0x6d4], 0x2d5e48d3
mov dword [ebp - 0xf4], 0x52061f6
mov dword [ebp - 0xf4], 3
jmp 0x1000aebc
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jl 0x1000aee1
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0x6e0]
mov dword [ebp + ecx*4 - 0x6e0], eax
jmp 0x1000aeaf
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1000aef8
push 0x1d30
call dword [sym.imp.USER32.dll_MessageBeep]
mov dword [ebp - 0x5e8], 0
mov dword [ebp - 0x54], 0
jmp 0x1000af12
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1000af28
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x224], 0xffffffff
jmp 0x1000af0b
mov dword [ebp - 0x54], 0
jmp 0x1000af38
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1000af4e
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x6b8], 0xc4d1454b
jmp 0x1000af31
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x224]
cmp dword [ebp + eax - 0x224], ecx
jne 0x1000af76
mov dword [ebp - 0x580], 1
jmp 0x1000af7d
and dword [ebp - 0x580], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x224], 0
jne 0x1000afa6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x224], 0
jne 0x1000afa6
and dword [ebp - 0x524], 0
jmp 0x1000afb0
mov dword [ebp - 0x524], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x524]
mov dword [ebp + eax - 0x6b8], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6b8]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x224]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x224]
jne 0x1000aff9
mov dword [ebp - 0x570], 1
jmp 0x1000b000
and dword [ebp - 0x570], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x224]
cmp eax, dword [ebp - 0x570]
je 0x1000b021
mov dword [ebp - 0x578], 1
jmp 0x1000b028
and dword [ebp - 0x578], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x578]
sub ecx, dword [ebp + eax - 0x224]
jne 0x1000b049
mov dword [ebp - 0x588], 1
jmp 0x1000b050
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x580]
cmp eax, dword [ebp - 0x588]
je 0x1000b06a
mov dword [ebp - 0x590], 1
jmp 0x1000b071
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x5e8], eax
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x1000b096
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [ebp - 0x64], 8
mov dword [ebp - 0x170], 1
mov dword [ebp - 0x7dc], 0xc3414b58
mov dword [ebp - 0x170], 0xa
jmp 0x1000b0ca
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xfffffff0
jge 0x1000b1f3
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x1c0], 0
jmp 0x1000b0fa
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x1000b116
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x850], 0x47dc4b4e
jmp 0x1000b0ed
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1000b131
push 0
push 0x23f2
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov dword [ebp - 0x178], 0
jmp 0x1000b14a
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jg 0x1000b1ee
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x154], 0
jmp 0x1000b17a
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 2
jg 0x1000b1e9
mov dword [ebp - 0x1c8], 2
mov dword [ebp - 0x1c8], 0
jmp 0x1000b1a6
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jg 0x1000b1ce
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x1000b1cc
push 0
push 0x178e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
jmp 0x1000b199
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x850]
mov ecx, dword [ebp - 0x154]
mov dword [ebp + ecx*4 - 0x850], eax
jmp 0x1000b16d
jmp 0x1000b13d
jmp 0x1000b0bd
mov dword [ebp - 0x180], 0
jmp 0x1000b20c
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 3
jge 0x1000b228
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x920], 1
jmp 0x1000b1ff
mov dword [ebp - 0x87c], 0xffffffff
mov dword [ebp - 0x270], 0xddbc3707
mov dword [ebp - 0x278], 0xe7f737a9
mov dword [ebp - 0x2a4], 0x8213af72
mov dword [ebp - 0x2ac], 0x4794
mov dword [ebp - 0x240], 0xf9f7c8b1
mov dword [ebp - 0x65c], 0x9135
mov dword [ebp - 0x28], 0
jmp 0x1000b27e
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1000b294
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x59c], 0x67b8f5f4
jmp 0x1000b277
mov dword [ebp - 0x28], 0
jmp 0x1000b2a4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1000b2ba
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x8a8], 0xfffffffa
jmp 0x1000b29d
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x1000b2d4
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
jne 0x1000b3e0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x854], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x59c], 0
jne 0x1000b316
cmp dword [ebp - 0x270], 0
cmp dword [ebp - 0x2a4], 1
jg 0x1000b32b
mov dword [ebp - 0x29c], 1
jmp 0x1000b332
and dword [ebp - 0x29c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x59c]
cmp dword [ebp - 0x29c], eax
jl 0x1000b353
mov dword [ebp - 0x4f0], 1
jmp 0x1000b35a
and dword [ebp - 0x4f0], 0
imul eax, dword [ebp - 0x270], 0x67b3
cmp eax, dword [ebp - 0x4f0]
jne 0x1000b378
mov dword [ebp - 0x4f8], 1
jmp 0x1000b37f
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x2a4]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x59c]
imul ecx, dword [ebp - 0x4f8]
add ecx, dword [ebp - 0x270]
imul eax, ecx
test eax, eax
je 0x1000b3bb
cmp dword [ebp - 0x2ac], 0
je 0x1000b3bb
mov dword [ebp - 0x500], 1
jmp 0x1000b3c2
and dword [ebp - 0x500], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x59c]
cmp dword [ebp - 0x500], eax
jl 0x1000b3e0
and dword [ebp - 0x2b4], 0
jmp 0x1000b3ea
mov dword [ebp - 0x2b4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b4]
sub ecx, dword [ebp + eax - 0x59c]
jne 0x1000b411
cmp dword [ebp - 0x65c], 0
jne 0x1000b411
and dword [ebp - 0x508], 0
jmp 0x1000b41b
mov dword [ebp - 0x508], 1
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x508], eax
jl 0x1000b435
mov dword [ebp - 0x2bc], 1
jmp 0x1000b43c
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x64], 2
jmp 0x1000b458
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x1000b505
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1dc], 0
jmp 0x1000b485
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jg 0x1000b500
mov dword [ebp - 0x80c], 0xffffffff
mov byte [ebp - 0x7f], 0
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x1000b4aa
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1000b4e1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0x2049
push 0x2290
push 0x613
push 0x25aa
push 0
call dword [sym.imp.USER32.dll_TrackPopupMenu]
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x1000b4fb
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x1000b478
jmp 0x1000b451
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0x6ac], 0
mov dword [ebp - 0x6a8], 0
mov dword [ebp - 0x6a4], 0
mov dword [ebp - 0x188], 0
jmp 0x1000b546
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x1000b562
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x89c], 0xbf506e60
jmp 0x1000b539
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6b0], 0
jmp 0x1000b590
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6b0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6b0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6b0], 0x16
je 0x1000b60e
mov dword [ebp - 0x1e4], 0x94fe5f36
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1000b5c2
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov dword [ebp - 0x1e4], 0
jmp 0x1000b5db
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jl 0x1000b609
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x1000b607
push 0
push 0
push 0x14ef
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
jmp 0x1000b5ce
jmp 0x1000b575
mov dword [ebp - 0x64], 0
jmp 0x1000b61e
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x12
je 0x1000b646
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1000b63c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
cmp dword [ebp - 0x64], 0
je 0x1000b644
jmp 0x1000b617
jmp 0x1000b617
mov dword [ebp - 0xac], 1
mov dword [ebp - 0x280], 0x486b6feb
mov dword [ebp - 0x288], 0xffffffff
mov dword [ebp - 0xb4], 0x609fa85f
mov dword [ebp - 0x158], 0xfb8eb5ea
cmp dword [ebp - 0xac], 0xf545
jge 0x1000b690
mov dword [ebp - 0x518], 1
jmp 0x1000b697
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xac], eax
jge 0x1000b6b1
mov dword [ebp - 0x510], 1
jmp 0x1000b6b8
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x510], eax
jle 0x1000b6d2
mov dword [ebp - 0x2c4], 1
jmp 0x1000b6d9
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
imul eax, dword [ebp - 0x518]
cmp eax, dword [ebp - 0xac]
jge 0x1000b706
mov dword [ebp - 0x2cc], 1
jmp 0x1000b70d
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x2cc], eax
jge 0x1000b73f
cmp dword [ebp - 0xac], 0
jne 0x1000b73f
cmp dword [ebp - 0x280], 0
jne 0x1000b73f
mov eax, 0xf4a0
test eax, eax
jne 0x1000b73f
and dword [ebp - 0x520], 0
jmp 0x1000b749
mov dword [ebp - 0x520], 1
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0xac]
imul eax, eax, 0x6c7f
cmp eax, 8
jle 0x1000b778
mov dword [ebp - 0x2d4], 1
jmp 0x1000b77f
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x2d4], eax
jge 0x1000b799
mov dword [ebp - 0x528], 1
jmp 0x1000b7a0
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x528], eax
jg 0x1000b7ba
mov dword [ebp - 0x2dc], 1
jmp 0x1000b7c1
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x158], 1
jmp 0x1000b7e6
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xffffffed
jge 0x1000b85e
mov dword [ebp - 0x190], 0
jmp 0x1000b808
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x1000b824
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x688], 0xffffffff
jmp 0x1000b7fb
mov dword [ebp - 0xb4], 0
jmp 0x1000b83d
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x1000b859
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x688], 1
jmp 0x1000b830
jmp 0x1000b7d9
mov dword [ebp - 0x1ec], 0x82062403
mov byte [ebp - 0x8b], 0
movzx eax, byte [ebp - 0x8b]
test eax, eax
je 0x1000b884
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x1ec], 0
jmp 0x1000b89d
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 5
jge 0x1000b8d1
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1000b8cf
push 0x14ee
push 0x9ac
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
jmp 0x1000b890
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x290], 0x486b6feb
mov dword [ebp - 0x26c], 0xffffffff
mov dword [ebp - 0xc4], 0x609fa85f
mov dword [ebp - 0x11c], 0xfb8eb5ea
cmp dword [ebp - 0xbc], 0xf545
jge 0x1000b91b
mov dword [ebp - 0x538], 1
jmp 0x1000b922
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xbc], eax
jge 0x1000b93c
mov dword [ebp - 0x530], 1
jmp 0x1000b943
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x530], eax
jle 0x1000b95d
mov dword [ebp - 0x2e4], 1
jmp 0x1000b964
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
imul eax, dword [ebp - 0x538]
cmp eax, dword [ebp - 0xbc]
jge 0x1000b991
mov dword [ebp - 0x2ec], 1
jmp 0x1000b998
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x2ec], eax
jge 0x1000b9ca
cmp dword [ebp - 0xbc], 0
jne 0x1000b9ca
cmp dword [ebp - 0x290], 0
jne 0x1000b9ca
mov eax, 0xf4a0
test eax, eax
jne 0x1000b9ca
and dword [ebp - 0x540], 0
jmp 0x1000b9d4
mov dword [ebp - 0x540], 1
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
sub eax, dword [ebp - 0xbc]
imul eax, eax, 0x6c7f
cmp eax, 8
jle 0x1000ba03
mov dword [ebp - 0x2f4], 1
jmp 0x1000ba0a
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x2f4], eax
jge 0x1000ba24
mov dword [ebp - 0x548], 1
jmp 0x1000ba2b
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x548], eax
jg 0x1000ba45
mov dword [ebp - 0x2fc], 1
jmp 0x1000ba4c
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x11c], 1
jmp 0x1000ba71
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xffffffed
jge 0x1000bae9
mov dword [ebp - 0x198], 0
jmp 0x1000ba93
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jge 0x1000baaf
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x62c], 0xffffffff
jmp 0x1000ba86
mov dword [ebp - 0xc4], 0
jmp 0x1000bac8
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 1
jge 0x1000bae4
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x62c], 1
jmp 0x1000babb
jmp 0x1000ba64
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x814], 0x744d0289
mov dword [ebp - 0x1f4], 0
jmp 0x1000bb13
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 1
jge 0x1000bb2f
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x550], 0x99ac7894
jmp 0x1000bb06
mov dword [ebp - 0x44], 0
jmp 0x1000bb3f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x1000bb95
mov dword [ebp - 0x13c], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x550], 0
je 0x1000bb5e
jmp 0x1000bb95
mov dword [ebp - 0x13c], 0
jmp 0x1000bb77
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x1000bb93
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x550], 0x7cefa9d1
jmp 0x1000bb6a
jmp 0x1000bb38
mov dword [ebp - 0x44], 0
jmp 0x1000bba5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x1000bbce
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x1000bbcc
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x1000bb9e
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x1a0], 0
jmp 0x1000bbf8
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x1000bc14
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x6d0], 4
jmp 0x1000bbeb
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1000bc38
push 0x1ea9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp - 0x10], 3
jmp 0x1000bc48
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 8
jne 0x1000be1a
mov dword [ebp - 0x24c], 0x8efa97f5
mov dword [ebp - 0x28c], 0x9495116
mov dword [ebp - 0x470], 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x5ec], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5ec]
mov dword [ebp + eax - 0x6d0], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x10], 0
jge 0x1000bcbd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6d0], 0
jne 0x1000bcbd
and dword [ebp - 0x304], 0
jmp 0x1000bcc7
mov dword [ebp - 0x304], 1
mov eax, dword [ebp - 0x304]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0x3847d228
je 0x1000bcee
mov dword [ebp - 0x30c], 1
jmp 0x1000bcf5
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x30c], eax
jge 0x1000bd0f
mov dword [ebp - 0x560], 1
jmp 0x1000bd16
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x560]
jne 0x1000bd2d
mov dword [ebp - 0x568], 1
jmp 0x1000bd34
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
add eax, 0x7f39ab76
cmp eax, dword [ebp - 0x10]
jg 0x1000bd50
mov dword [ebp - 0x318], 1
jmp 0x1000bd57
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jne 0x1000bd71
mov dword [ebp - 0x478], 1
jmp 0x1000bd78
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 0x2ae8
jg 0x1000bd90
mov dword [ebp - 0x320], 1
jmp 0x1000bd97
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0
jne 0x1000bdca
cmp dword [ebp - 0x24c], 0
jne 0x1000bdca
and dword [ebp - 0x328], 0
jmp 0x1000bdd4
mov dword [ebp - 0x328], 1
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x328], eax
jge 0x1000be0a
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x1000be08
push 0x2395
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
jmp 0x1000be15
cmp dword [ebp - 0x28c], 0
je 0x1000be15
jmp 0x1000be1a
jmp 0x1000bc41
mov dword [ebp - 0x1fc], 0x82062403
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1000be40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x1fc], 0
jmp 0x1000be59
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 5
jge 0x1000be8d
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x1000be8b
push 0x14ee
push 0x9ac
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
jmp 0x1000be4c
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0x254], 0x486b6feb
mov dword [ebp - 0x274], 0xffffffff
mov dword [ebp - 0xd4], 0x609fa85f
mov dword [ebp - 0x124], 0xfb8eb5ea
cmp dword [ebp - 0xcc], 0xf545
jge 0x1000bed7
mov dword [ebp - 0x474], 1
jmp 0x1000bede
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], eax
jge 0x1000bef8
mov dword [ebp - 0x504], 1
jmp 0x1000beff
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x504], eax
jle 0x1000bf19
mov dword [ebp - 0x330], 1
jmp 0x1000bf20
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
imul eax, dword [ebp - 0x474]
cmp eax, dword [ebp - 0xcc]
jge 0x1000bf4d
mov dword [ebp - 0x338], 1
jmp 0x1000bf54
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x338], eax
jge 0x1000bf86
cmp dword [ebp - 0xcc], 0
jne 0x1000bf86
cmp dword [ebp - 0x254], 0
jne 0x1000bf86
mov eax, 0xf4a0
test eax, eax
jne 0x1000bf86
and dword [ebp - 0x574], 0
jmp 0x1000bf90
mov dword [ebp - 0x574], 1
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0xcc]
imul eax, eax, 0x6c7f
cmp eax, 8
jle 0x1000bfbf
mov dword [ebp - 0x340], 1
jmp 0x1000bfc6
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x340], eax
jge 0x1000bfe0
mov dword [ebp - 0x47c], 1
jmp 0x1000bfe7
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x47c], eax
jg 0x1000c001
mov dword [ebp - 0x348], 1
jmp 0x1000c008
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x124], 1
jmp 0x1000c02d
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffed
jge 0x1000c0a5
mov dword [ebp - 0x1a8], 0
jmp 0x1000c04f
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x1000c06b
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x5f0], 0xffffffff
jmp 0x1000c042
mov dword [ebp - 0xd4], 0
jmp 0x1000c084
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x1000c0a0
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x5f0], 1
jmp 0x1000c077
jmp 0x1000c020
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x768], 0x744d0289
mov dword [ebp - 0x204], 0
jmp 0x1000c0cf
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jge 0x1000c0eb
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x50c], 0x99ac7894
jmp 0x1000c0c2
mov dword [ebp - 0x5c], 0
jmp 0x1000c0fb
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x1000c151
mov dword [ebp - 0x110], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp + eax*4 - 0x50c], 0
je 0x1000c11a
jmp 0x1000c151
mov dword [ebp - 0x110], 0
jmp 0x1000c133
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x1000c14f
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x50c], 0x7cefa9d1
jmp 0x1000c126
jmp 0x1000c0f4
mov dword [ebp - 0x5c], 0
jmp 0x1000c161
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x1000c18a
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1000c188
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x1000c15a
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x1b0], 0
jmp 0x1000c1b4
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x1000c1d0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x708], 4
jmp 0x1000c1a7
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x1000c1f4
push 0x1ea9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp - 0x18], 3
jmp 0x1000c204
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 8
jne 0x1000c3d6
mov dword [ebp - 0x25c], 0x8efa97f5
mov dword [ebp - 0x284], 0x9495116
mov dword [ebp - 0x370], 0xffffffff
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5f8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5f8]
mov dword [ebp + eax - 0x708], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x778], eax
cmp dword [ebp - 0x18], 0
jge 0x1000c279
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x708], 0
jne 0x1000c279
and dword [ebp - 0x350], 0
jmp 0x1000c283
mov dword [ebp - 0x350], 1
mov eax, dword [ebp - 0x350]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0x3847d228
je 0x1000c2aa
mov dword [ebp - 0x358], 1
jmp 0x1000c2b1
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x25c]
cmp dword [ebp - 0x358], eax
jge 0x1000c2cb
mov dword [ebp - 0x554], 1
jmp 0x1000c2d2
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x554]
jne 0x1000c2e9
mov dword [ebp - 0x360], 1
jmp 0x1000c2f0
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x360]
add eax, 0x7f39ab76
cmp eax, dword [ebp - 0x18]
jg 0x1000c30c
mov dword [ebp - 0x48c], 1
jmp 0x1000c313
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jne 0x1000c32d
mov dword [ebp - 0x368], 1
jmp 0x1000c334
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0x2ae8
jg 0x1000c34c
mov dword [ebp - 0x514], 1
jmp 0x1000c353
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0
jne 0x1000c386
cmp dword [ebp - 0x25c], 0
jne 0x1000c386
and dword [ebp - 0x494], 0
jmp 0x1000c390
mov dword [ebp - 0x494], 1
mov eax, dword [ebp - 0x25c]
cmp dword [ebp - 0x494], eax
jge 0x1000c3c6
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1000c3c4
push 0x2395
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
jmp 0x1000c3d1
cmp dword [ebp - 0x284], 0
je 0x1000c3d1
jmp 0x1000c3d6
jmp 0x1000c1fd
mov dword [ebp - 0x10c], 0x3d06ce12
mov dword [ebp - 0x20c], 0
jmp 0x1000c3f9
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x1000c415
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x60c], 1
jmp 0x1000c3ec
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x10c]
mov dword [ebp + eax - 0x60c], ecx
mov dword [ebp - 0x10c], 0
jmp 0x1000c441
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 4
jle 0x1000c58b
mov dword [ebp - 0x74], 0x439cb61d
mov dword [ebp - 0x49c], 0x700168aa
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x780], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60c]
mov dword [ebp - 0x788], eax
xor eax, eax
inc eax
sub eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x74]
jne 0x1000c495
mov dword [ebp - 0x378], 1
jmp 0x1000c49c
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x378], 0x110e
jle 0x1000c4b4
mov dword [ebp - 0x594], 1
jmp 0x1000c4bb
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x594], eax
jne 0x1000c4d2
mov dword [ebp - 0x380], 1
jmp 0x1000c4d9
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 0
je 0x1000c50a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x60c], 0
je 0x1000c50a
mov dword [ebp - 0x388], 1
jmp 0x1000c511
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x388], eax
jle 0x1000c528
mov dword [ebp - 0x51c], 1
jmp 0x1000c52f
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x51c]
jge 0x1000c54f
mov eax, 0x98d7
test eax, eax
je 0x1000c54f
mov dword [ebp - 0x390], 1
jmp 0x1000c556
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 8
jae 0x1000c56b
mov dword [ebp - 0x4a4], 1
jmp 0x1000c572
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x1000c586
jmp 0x1000c434
jmp 0x1000c434
mov dword [ebp - 0x214], 0x82062403
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x1000c5b1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x214], 0
jmp 0x1000c5ca
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 5
jge 0x1000c5fe
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1000c5fc
push 0x14ee
push 0x9ac
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
jmp 0x1000c5bd
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x790], 0x744d0289
mov dword [ebp - 0x1bc], 0
jmp 0x1000c628
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x1000c644
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x398], 0x99ac7894
jmp 0x1000c61b
mov dword [ebp - 0x4c], 0
jmp 0x1000c654
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x1000c6aa
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x398], 0
je 0x1000c673
jmp 0x1000c6aa
mov dword [ebp - 0x14c], 0
jmp 0x1000c68c
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x1000c6a8
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x398], 0x7cefa9d1
jmp 0x1000c67f
jmp 0x1000c64d
mov dword [ebp - 0x4c], 0
jmp 0x1000c6ba
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x1000c6e3
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x1000c6e1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x1000c6b3
mov dword [ebp - 0x600], 0
mov dword [ebp - 0x2c], 0
jmp 0x1000c6fd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1000c713
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x22c], 0xffffffff
jmp 0x1000c6f6
mov dword [ebp - 0x2c], 0
jmp 0x1000c723
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1000c739
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x6e8], 0xc4d1454b
jmp 0x1000c71c
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x22c]
cmp dword [ebp + eax - 0x22c], ecx
jne 0x1000c761
mov dword [ebp - 0x3a8], 1
jmp 0x1000c768
and dword [ebp - 0x3a8], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22c], 0
jne 0x1000c791
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22c], 0
jne 0x1000c791
and dword [ebp - 0x55c], 0
jmp 0x1000c79b
mov dword [ebp - 0x55c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x55c]
mov dword [ebp + eax - 0x6e8], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e8]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x22c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x22c]
jne 0x1000c7e4
mov dword [ebp - 0x3a0], 1
jmp 0x1000c7eb
and dword [ebp - 0x3a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22c]
cmp eax, dword [ebp - 0x3a0]
je 0x1000c80c
mov dword [ebp - 0x4ac], 1
jmp 0x1000c813
and dword [ebp - 0x4ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4ac]
sub ecx, dword [ebp + eax - 0x22c]
jne 0x1000c834
mov dword [ebp - 0x294], 1
jmp 0x1000c83b
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x3a8]
cmp eax, dword [ebp - 0x294]
je 0x1000c855
mov dword [ebp - 0x3b0], 1
jmp 0x1000c85c
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x600], eax
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1000c887
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
movzx eax, byte [0x106686a0]
test eax, eax
je 0x1000c8a5