Function at 0x10013c20
Capabilities:
Access peb ldr_data
Check for time delay via gettickcount
Get number of processors

Disassembly:
mov edi, edi
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10021e9b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x490
mov eax, dword [0x10064318]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov dword [ebp - 0x478], esi
mov byte [ebp - 0x46b], cl
cmp word [0x10065150], 0
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x490], eax
je 0x100141e1
mov eax, dword [0x1006536c]
mov dword [ebp - 0x484], 0
cmp eax, 1
jne 0x100141ed
mov eax, dword [0x10064c58]
cmp dword [eax], 0
jne 0x100140d4
xor eax, eax
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0
jne 0x10013e40
mov ecx, dword fs:[0x30]
xor dl, dl
xor eax, eax
mov byte [ebp - 0x469], dl
mov ecx, dword [ecx + 0x1e4]
and ecx, 0x20000000
or eax, ecx
jne 0x10024f9f
cmp byte [0x10064c54], 0
je 0x10014242
mov al, byte [0x10064c55]
mov edi, dword [ebx + 8]
test al, al
jne 0x1001433c
push 0x30
lea eax, [ebp - 0x468]
mov dword [ebp - 0x470], 0
push 0
push eax
call sub.msvcrt.dll_memset
mov edx, dword [ebx + 0xc]
xor cl, cl
add esp, 0xc
mov dword [ebp - 0x468], 0x30
mov byte [ebp - 0x469], cl
mov dword [ebp - 0x47c], edx
cmp edi, 0x14
jb 0x10013d4a
cmp edi, 0x8002
jb case.0x10013ec0.6
cmp edi, 0x800b
je 0x10013e60
cmp edi, 0x8002
jbe 0x10013ea7
mov eax, edi
sub eax, 0x8003
je 0x1001411c
sub eax, 2
je 0x10013fd1
mov al, byte [ebp - 0x46b]
test al, al
jne 0x10013ec7
test cl, cl
jne 0x100253d2
test al, al
jne 0x10013ee6
test esi, esi
je 0x10013e40
cmp dword [0x100649e0], esi
je 0x10013e40
test cl, cl
jne 0x10013f6f
cmp dword [ebp - 0x47c], 0xfffffff8
je 0x10013f6f
cmp byte [0x100649f9], 0
jne 0x10013e40
cmp byte [0x10065149], 0
jne 0x10013e40
cmp dword [0x100649dc], 0
jne 0x10013e34
cmp dword [ebp - 0x470], 0
jne 0x10013e05
lea eax, [ebp - 0x468]
push eax
push 0
call dword [sym.imp.USER32.dll_GetGUIThreadInfo]
lea eax, [ebp - 0x470]
push eax
push dword [ebp - 0x45c]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
lea eax, [ebp - 0x494]
mov dword [ebp - 0x494], 0
push eax
push dword [ebp - 0x45c]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov esi, eax
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentThreadId]
cmp esi, eax
je 0x10013e79
mov esi, dword [ebp - 0x478]
cmp esi, dword [0x100649dc]
je 0x100254a5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1001f1e0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
test edx, edx
jne case.0x10013ec0.6
cmp esi, dword [0x100649d8]
jne case.0x10013ec0.6
jmp 0x100253bb
mov eax, dword [0x1006554c]
push 2
push eax
mov dword [0x100649dc], eax
call dword [sym.imp.USER32.dll_GetAncestor]
mov dword [0x100649d8], eax
mov eax, dword [0x10065548]
mov dword [0x100649d4], eax
mov eax, dword [0x10065544]
mov dword [0x100649d0], eax
jmp 0x10013e2e
je 0x1001403e
lea eax, [edi - 5]
cmp eax, 0xe
ja case.0x10013ec0.6
movzx eax, byte [eax + 0x100144d0]
jmp dword [eax*4 + 0x100144b0]
cmp byte [0x100649f9], 0
jne 0x10013e40
cmp byte [0x10065149], 0
je 0x10013d86
jmp 0x10013e40
mov edx, esi
mov ecx, 0x10064a40
call fcn.10014500
cmp edi, 3
je 0x10013f08
xor eax, eax
mov ecx, 0x100654a4
xchg dword [ecx], eax
test eax, eax
jne 0x10025423
mov dword [0x10064a38], 0x10000
cmp edi, 3
ja case.default.0x10013f17
jmp dword [edi*4 + 0x100144e0]
mov ecx, dword [ebp - 0x490]
mov edx, 1
mov dword [0x100649e0], esi
mov eax, dword [ecx]
mov dword [0x100649bc], eax
mov eax, dword [ecx + 4]
mov dword [0x100649c0], eax
mov eax, dword [ecx + 8]
mov dword [0x100649c4], eax
mov eax, dword [ecx + 0xc]
mov ecx, esi
mov dword [0x100649c8], eax
mov byte [0x100649fb], 1
call fcn.10011540
mov cl, byte [ebp - 0x469]
test cl, cl
je 0x10013e40
jmp 0x10014306
mov edx, esi
mov ecx, 0x10064a40
call fcn.10014500
cmp dword [0x10064a44], 0
je 0x10013e40
cmp edi, 0x8003
ja case.default.0x10013fca
cmp dword [ebp - 0x47c], 0xfffffff8
jne case.default.0x10013fca
cmp dword [0x10064a4c], 1
je case.default.0x10013fca
cmp byte [0x100645c0], 0
je case.default.0x10013fca
add edi, 0xffff8000
cmp edi, 3
ja case.default.0x10013fca
jmp dword [edi*4 + 0x100144f0]
mov al, byte [0x10064328]
mov byte [ebp - 0x471], al
mov eax, dword fs:[0x30]
mov byte [ebp - 0x46a], 0
mov ecx, dword [eax + 0x1e4]
xor eax, eax
and ecx, 0x20000000
or eax, ecx
jne 0x100251c2
mov al, byte [ebp - 0x46a]
cmp byte [ebp - 0x471], 0
je 0x100251cf
test al, al
jne 0x100251e6
cmp dword [0x100649f4], 0
jg 0x100251e6
push 0
push dword [ebx + 0xc]
push dword [0x10065138]
push esi
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x10013e40
test edx, edx
jne case.0x10013ec0.6
cmp dword [ebx + 0x10], edx
jne case.0x10013ec0.6
push 0x104
lea eax, [ebp - 0x228]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameW]
add eax, eax
cmp eax, 0x20a
jae 0x100144a8
xor ecx, ecx
mov word [ebp + eax - 0x228], cx
mov ecx, 0x10007f74
lea eax, [ebp - 0x228]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100143ed
test dx, dx
je 0x100140ae
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100143ed
add eax, 4
add ecx, 4
test dx, dx
jne 0x10014084
xor eax, eax
test eax, eax
je 0x10025139
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, eax
js 0x10014293
mov cl, byte [ebp - 0x469]
jmp case.0x10013ec0.6
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentThreadId]
mov ecx, dword [0x10064c58]
cmp dword [ecx], eax
jne 0x10013cae
mov eax, 1
jmp 0x10013cb0
mov ecx, dword [ebp - 0x490]
mov eax, dword [ecx]
mov dword [0x100649ac], eax
mov eax, dword [ecx + 4]
mov dword [0x100649b0], eax
mov eax, dword [ecx + 8]
mov dword [0x100649b4], eax
mov eax, dword [ecx + 0xc]
mov dword [0x100649b8], eax
jmp case.default.0x10013f17
test edx, edx
jne case.0x10013ec0.6
cmp dword [ebx + 0x10], edx
jne case.0x10013ec0.6
push 0x104
lea eax, [ebp - 0x438]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameW]
add eax, eax
cmp eax, 0x20a
jae 0x100144a8
xor ecx, ecx
mov word [ebp + eax - 0x438], cx
mov ecx, 0x10007f74
lea eax, [ebp - 0x438]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10014464
test dx, dx
je 0x1001418c
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10014464
add eax, 4
add ecx, 4
test dx, dx
jne 0x10014162
xor eax, eax
test eax, eax
je 0x100252ce
push dword [0x100649e4]
push esi
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
jne 0x1002535d
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, eax
jns 0x100140c9
cmp esi, dword [0x100649f0]
je 0x10025388
push 0x10008130
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
je 0x100140c9
jmp 0x100253b4
xor cl, cl
call fcn.100146d0
jmp 0x10013c88
cmp dword [0x10065370], 1
jne 0x10024f65
mov edi, dword [0x10065388]
test edi, edi
jne 0x10024f89
test eax, eax
jne 0x10024f7c
cmp dword [0x10065378], 5
jb 0x10024f72
mov eax, dword fs:[0x30]
mov ecx, 0x1006536c
mov eax, dword [eax + 0xa0]
add eax, 0xc
mov dword [0x10064c58], eax
mov eax, 1
xchg dword [ecx], eax
jmp 0x10013ca0
call fcn.10014c89
test al, al
jne 0x1001427c
push 0x100080f8
push 0
push 0x100000
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_OpenMutexW]
mov ecx, eax
test ecx, ecx
jne 0x10024fac
xor al, al
push ecx
mov byte [ebp - 0x46a], al
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov al, byte [ebp - 0x46a]
mov dl, byte [ebp - 0x469]
mov byte [0x10064c54], 1
mov byte [0x10064c55], al
jmp 0x10013cfa
cmp esi, dword [0x100649f0]
je 0x1002517d
push 0x10007ee0
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x1002518c
push 0x10008130
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
je 0x100140c9
jmp 0x100251b4
cmp byte [0x100649fa], 0
je 0x100142ed
cmp dword [0x100649e4], esi
jne 0x100142ed
xor edx, edx
mov byte [0x100649fb], 0
mov ecx, esi
call fcn.10011540
mov eax, dword [0x100649e8]
cmp eax, dword [0x100649dc]
jne case.default.0x10013f17
mov cl, 1
mov byte [ebp - 0x469], cl
mov esi, dword [0x100649e8]
mov dword [ebp - 0x478], esi
jmp 0x10013d96
mov ecx, dword [0x100649e0]
test ecx, ecx
je case.default.0x10013f17
jmp 0x10025431
cmp byte [0x10065559], 0
je case.0x10013ec0.6
jmp 0x100250d5
test dl, dl
jne 0x10013d05
mov dword [ebp - 0x488], 0
lea eax, [ebp - 0x488]
mov dword [ebp - 4], 0
push eax
push 0x10008340
push 0x10064b08
call fcn.1001e9a0
mov esi, dword [ebp - 0x488]
test eax, eax
js 0x100143af
mov eax, dword [esi]
push 0
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x47c], eax
cmp eax, fcn.10016180
je 0x100143f7
lea ecx, [ebp - 0x48c]
push ecx
push esi
mov ecx, eax
call dword [0x10066528]
call dword [ebp - 0x47c]
test eax, eax
js 0x100143af
cmp edi, dword [ebp - 0x48c]
je 0x10024fb3
mov dword [ebp - 4], 2
test esi, esi
je 0x100143ca
mov eax, dword [esi]
push esi
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x10066528]
call esi
mov esi, dword [ebp - 0x478]
mov dword [ebp - 4], 0xffffffff
jmp 0x10013d05
cmp esi, dword [0x100649e8]
jne case.0x10013ec0.6
jmp 0x100250c3
sbb eax, eax
or eax, 1
jmp 0x100140b0
lea eax, [ebp - 0x48c]
push eax
push esi
call fcn.10016180
jmp 0x1001439f
cmp dword [0x100649e8], esi
jne case.default.0x10013fca
mov eax, dword [0x10064a60]
test eax, eax
je 0x1002546c
cmp eax, 1
je 0x10014451
cmp dword [0x10064a58], 0
je 0x10014451
cmp byte [0x10065559], 0
jne 0x1002548d
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
sub eax, dword [0x10065554]
cmp eax, 0xfa
jbe 0x10025484
mov byte [0x100649fb], 0
xor al, al
mov byte [0x100649f8], al
jmp case.default.0x10013fca
sbb eax, eax
or eax, 1
jmp 0x1001418e
push esi
mov dword [0x100649e8], esi
mov byte [0x100649fb], 1
mov byte [0x100649f8], 0
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne case.default.0x10013fca
jmp 0x10025478
cmp dword [0x10064a50], 0
jne case.default.0x10013fca
jmp 0x1002545f
call fcn.1001f4a0
lea ecx, [ecx]
int1
dec edi
add dl, byte [eax]
fadd qword [ebx + 1]
adc byte [edx], ch
inc ebx
add dword [eax], edx
not byte [eax + 2]
adc byte [eax], bl
push ecx
add dl, byte [eax]
or edx, dword [eax + 2]
adc byte [ebp + 2014315088], dl
cmp eax, 0x7001001
add byte [ecx], al
add al, byte [ebx]
add al, 7
pop es
pop es
pop es
pop es
pop es
add eax, 1120702470
add dword [eax], edx
push ds
aas
add dword [eax], edx
inc eax
add dword [eax], edx
pop ss
inc ebx
add dword [eax], edx
xchg esi, eax
inc esp
add dword [eax], edx
push es
inc esp
add dword [eax], edx
outsb dx, byte [esi]
inc esp
add dword [eax], edx
push es
inc esp
add dword [eax], edx
push 1
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
jmp 0x10013cb6
mov dword [0x1006536c], 2
push 0x32
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
jmp 0x10013cb6
lea eax, [ebp - 0x484]
mov ecx, edi
push eax
call dword [0x10066528]
call edi
jmp 0x10013cb6
mov dl, 1
mov byte [ebp - 0x469], dl
jmp 0x10013ce8
mov al, 1
jmp 0x10014269
push dword [ebx + 0xc]
mov edi, dword [esi]
push dword [ebp - 0x478]
push 3
mov edi, dword [edi + 0x1c]
mov ecx, edi
push esi
call dword [0x10066528]
call edi
mov dword [ebp - 4], 1
mov eax, dword [esi]
push esi
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x10066528]
call esi
mov dword [ebp - 4], 0xffffffff
jmp 0x10013e40
cmp byte [0x10065479], 0
jne case.0x10013ec0.6
mov cl, 1
mov byte [ebp - 0x469], cl
jmp case.0x10013ec0.6
cmp byte [0x10065148], 0
jne case.0x10013ec0.6
cmp esi, dword [0x100649dc]
jne case.0x10013ec0.6
push 0x10008130
push 2
push esi
call dword [sym.imp.USER32.dll_GetAncestor]
push eax
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x100140c9
mov byte [0x10065149], 1
call fcn.1003443f
jmp 0x10025056
mov byte [0x100649f9], 1
cmp byte [0x100649fa], 0
je 0x100140c9
mov ecx, dword [0x100649e4]
xor edx, edx
call fcn.10011540
mov ecx, dword [0x100649dc]
call fcn.10020df1
test al, al
je 0x100140c9
mov ecx, dword [0x100649dc]
xor dl, dl
call fcn.100343bf
jmp 0x100140c9
cmp byte [0x10065148], 0
jne case.0x10013ec0.6
cmp byte [0x10065149], 0
je case.0x10013ec0.6
mov cl, 1
mov byte [0x10065149], 0
mov byte [ebp - 0x469], cl
jmp case.0x10013ec0.6
mov byte [0x10065559], 1
mov dword [0x1006563c], esi
jmp case.0x10013ec0.6
mov byte [0x10065559], 0
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
mov dword [0x10065554], eax
mov dword [0x1006563c], 0
jmp 0x100140c9
push 0x10008130
push 2
push esi
call dword [sym.imp.USER32.dll_GetAncestor]
push eax
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x100140c9
jmp 0x1002504f
cmp byte [0x100649f9], 0
je case.0x10013ec0.6
mov cl, 1
mov byte [0x100649f9], 0
mov byte [ebp - 0x469], cl
jmp case.0x10013ec0.6
cmp dword [0x10065644], 0
jne 0x10025172
cmp byte [0x100649fa], 0
jne 0x1002515e
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
sub eax, dword [0x100649ec]
cmp eax, 0x1f4
jae 0x10025172
mov ecx, dword [0x100649e4]
xor edx, edx
mov byte [0x10065649], 1
call fcn.10011540
inc dword [0x10065644]
jmp 0x100140b8
cmp byte [0x100649fa], 0
je 0x100142b3
jmp 0x1002519f
cmp byte [0x100649fa], 0
mov dword [0x100649f0], esi
je 0x100142b3
mov ecx, dword [0x100649e4]
mov edx, 1
call fcn.10011540
jmp 0x100142b3
mov dl, 1
mov ecx, esi
call fcn.1005f163
jmp 0x100140c9
mov al, 1
mov byte [ebp - 0x46a], al
jmp 0x10014005
call fcn.10014daa
mov edx, dword [ebx + 0xc]
test al, al
je 0x100251e6
mov al, byte [ebp - 0x46a]
jmp 0x10014012
test edx, edx
je 0x100140c9
cmp byte [0x100645c0], 0
je 0x100140c9
cmp dword [ebp - 0x470], 0
jne 0x10025229
lea eax, [ebp - 0x468]
push eax
push 0
call dword [sym.imp.USER32.dll_GetGUIThreadInfo]
lea eax, [ebp - 0x470]
push eax
push dword [ebp - 0x45c]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [ebx + 0xc]
mov eax, dword [ebx + 0x10]
cmp esi, dword [ebp - 0x45c]
jne 0x100252b8
cmp dword [0x100649dc], esi
jne 0x10025254
cmp dword [0x100649d4], edx
jne 0x10025254
cmp dword [0x100649d0], eax
je 0x100140c9
push eax
mov ecx, esi
call fcn.100344a3
push 2
push esi
mov dword [0x100649dc], esi
call dword [sym.imp.USER32.dll_GetAncestor]
mov edx, dword [ebx + 0xc]
mov dword [0x100649d8], eax
mov eax, dword [ebx + 0x10]
mov dword [0x100649d4], edx
mov dword [0x100649d0], eax
mov dword [0x1006554c], 0
mov dword [0x10065548], 0
mov dword [0x10065544], 0
test esi, esi
jne 0x100140c9
call fcn.1003443f
mov byte [0x100649fb], 0
jmp 0x10025695
mov dword [0x1006554c], esi
mov dword [0x10065548], edx
mov dword [0x10065544], eax
jmp 0x100140c9
mov eax, dword [0x10065644]
test eax, eax
je 0x10014196
sub eax, 1
mov dword [0x10065644], eax
jne 0x10014196
cmp byte [0x10065649], 0
je 0x10013e40
cmp dword [ebp - 0x470], 0
mov byte [0x10065649], 0
jne 0x10025328
lea eax, [ebp - 0x468]
push eax
push 0
call dword [sym.imp.USER32.dll_GetGUIThreadInfo]
lea eax, [ebp - 0x470]
push eax
push dword [ebp - 0x45c]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcessId]
cmp dword [ebp - 0x470], eax
jne 0x10013e40
call dword [sym.imp.USER32.dll_GetFocus]
mov ecx, dword [0x100649e4]
cmp ecx, eax
jne 0x10013e40
mov edx, 1
call fcn.10011540
jmp 0x10013e40
call fcn.1003443f
cmp byte [0x100649fa], 0
mov byte [0x100649fb], 0
je 0x100141ab
mov ecx, dword [0x100649e4]
xor edx, edx
call fcn.10011540
jmp 0x100141ab
cmp byte [0x100649fa], 0
mov dword [0x100649f0], 0
je 0x100141c8
mov ecx, dword [0x100649e4]
mov edx, 1
call fcn.10011540
jmp 0x100141c8
xor dl, dl
jmp 0x100251b6
cmp dword [ebx + 0x10], 0
jne case.0x10013ec0.6
mov cl, 1
mov byte [ebp - 0x469], cl
jmp case.0x10013ec0.6
mov esi, dword [0x100649e4]
mov edx, dword [0x100649d4]
mov dword [ebp - 0x478], esi
mov dword [ebp - 0x47c], edx
cmp edi, 0x800b
je 0x10013d8e
mov ecx, dword [0x100649dc]
call fcn.10020df1
test al, al
je 0x10025412
mov ecx, dword [0x100649dc]
mov dl, 1
call fcn.100343bf
mov al, byte [ebp - 0x46b]
mov cl, byte [ebp - 0x469]
jmp 0x10013d8e
push eax
push 0
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x10013f08
cmp byte [0x100649fa], 0
je 0x10025450
cmp dword [0x100649e4], ecx
jne 0x10025450
xor edx, edx
mov byte [0x100649fb], 0
call fcn.10011540
mov dword [0x100649e0], 0
jmp case.default.0x10013f17
mov dword [0x100649e8], esi
mov byte [0x100649fb], 1
mov byte [0x100649f8], 1
jmp case.default.0x10013fca
mov byte [0x100649fb], 0
jmp case.default.0x10013fca
cmp byte [0x10065559], 0
je 0x1002549e
mov eax, dword [0x1006563c]
cmp eax, dword [0x100649e8]
jne 0x10014451
mov al, 1
jmp 0x1001445a
cmp dword [ebp - 0x47c], 0xfffffff8
je 0x100254bb
cmp byte [ebp - 0x469], 0
je 0x10013e40
cmp byte [0x100645c0], 0
je 0x10013e40
cmp dword [ebp - 0x470], 0
jne 0x100254f3
lea eax, [ebp - 0x468]
push eax
push 0
call dword [sym.imp.USER32.dll_GetGUIThreadInfo]
lea eax, [ebp - 0x470]
push eax
push dword [ebp - 0x45c]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp dword [0x10064a4c], 1
jne 0x10025537
cmp dword [0x100654a4], 0
je 0x10025519
cmp dword [0x10065640], 0
jne 0x10025519
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
mov dword [0x10065640], eax
call fcn.1003443f
mov ecx, dword [ebp - 0x470]
lea eax, [ebp - 0x468]
push eax
mov edx, esi
call fcn.1003359d
jmp 0x10013e40
cmp dword [0x100649e8], esi
jne 0x10013e40
cmp byte [0x100649fb], 0
je 0x10025631
mov edx, dword [0x100649d4]
mov ecx, dword [0x100649dc]
push 0
push dword [0x100649d0]
call fcn.1003482e
lea eax, [ebp - 0x468]
push eax
push ecx
mov ecx, esi
call fcn.100345db
test eax, eax
sete al
cmp dword [0x10064a5c], 1
mov byte [0x100649fb], al
jne 0x1002562d
push 0x100649bc
push esi
call dword [sym.imp.USER32.dll_ScreenToClient]
push 0x100649c4
push esi
call dword [sym.imp.USER32.dll_ScreenToClient]
push esi
call dword [sym.imp.USER32.dll_GetDC]
push 2
mov esi, eax
push 0x100649bc
push esi
call dword [sym.imp.GDI32.dll_LPtoDP]
lea eax, [ebp - 0x49c]
push eax
push esi
call dword [sym.imp.GDI32.dll_GetDCOrgEx]
push dword [ebp - 0x498]
push dword [ebp - 0x49c]
push 0x100649bc
call dword [sym.imp.USER32.dll_OffsetRect]
push esi
push dword [ebp - 0x478]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [0x100649c4]
cmp eax, dword [0x10065490]
jl 0x10025687
mov eax, dword [0x100649bc]
cmp eax, dword [0x10065498]
jg 0x10025687
mov eax, dword [0x100649c8]
cmp eax, dword [0x10065494]
jl 0x10025687
mov eax, dword [0x100649c0]
cmp eax, dword [0x1006549c]
jg 0x10025687
mov al, byte [0x100649fb]
test al, al
jne 0x10025678
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcessId]
cmp dword [ebp - 0x470], eax
je 0x1002564d
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcessId]
cmp dword [0x1006547c], eax
jne 0x10025690
cmp byte [0x100649fb], 0
jne 0x10025678
cmp byte [0x100649fa], 0
je 0x100256b4
push dword [0x100649dc]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x10025690
cmp byte [0x100649fb], 0
je 0x100256b4
mov ecx, 0x64
call fcn.10034401
jmp 0x10013e40
mov byte [0x100649fb], 0
jmp 0x10025631
call fcn.1003443f
cmp byte [0x100649fa], 0
je 0x10013e40
mov ecx, dword [0x100649e4]
xor edx, edx
call fcn.10011540
jmp 0x10013e40
mov ecx, 0x12c
jmp 0x1002567d