Function at 0x100244e2
Capabilities:
Check http status code
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007ac0a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34c
push esi
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10025357
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x204], 0xa29822cb
push 3
lea ecx, [ebp - 0x2d4]
call fcn.10015d9e
and dword [ebp - 4], 0
mov dword [ebp - 0x2bc], 4
mov dword [ebp - 0x2b8], 4
mov dword [ebp - 0x2b4], 4
mov dword [ebp - 0x2b0], 4
lea ecx, [ebp - 0xa9]
call fcn.10008f83
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x358]
call fcn.10015e1a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x340]
call fcn.10015de0
mov byte [ebp - 4], 1
mov dword [ebp - 0x28], 0
jmp 0x100245a0
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100245bc
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2d4]
call fcn.10015e0b
mov dword [eax], 0x7847
jmp 0x10024599
mov dword [ebp - 0x28], 0
jmp 0x100245cc
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x100245e2
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1c8], 0x233fd52
jmp 0x100245c5
cmp dword [ebp - 0x5c], 0
je 0x10024714
mov dword [ebp - 0x204], 0xfffffffc
cmp dword [ebp - 0x5c], 0x456e
jne 0x10024611
mov eax, 0x8cc3837a
test eax, eax
jne 0x10024611
and dword [ebp - 0x1fc], 0
jmp 0x1002461b
mov dword [ebp - 0x1fc], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1fc], eax
jle 0x10024632
mov dword [ebp - 0xbc], 1
jmp 0x10024639
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0xbc], eax
jle 0x10024650
mov dword [ebp - 0x1b8], 1
jmp 0x10024657
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1b8], eax
jl 0x10024674
mov eax, 0xe637
test eax, eax
jne 0x10024674
and dword [ebp - 0xc4], 0
jmp 0x1002467e
mov dword [ebp - 0xc4], 1
cmp dword [ebp - 0xc4], 7
jae 0x10024693
mov dword [ebp - 0x1c0], 1
jmp 0x1002469a
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1c0], eax
jle 0x100246b1
mov dword [ebp - 0xcc], 1
jmp 0x100246b8
and dword [ebp - 0xcc], 0
push 1
lea ecx, [ebp - 0x2d4]
call fcn.10015e0b
mov ecx, dword [ebp - 0xcc]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c8], 0
jl 0x100246e9
mov dword [ebp - 0xd4], 1
jmp 0x100246f0
and dword [ebp - 0xd4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c8]
imul eax, dword [ebp - 0xd4]
test eax, eax
je 0x10024714
mov dword [ebp - 0x1d0], 1
jmp 0x1002471b
and dword [ebp - 0x1d0], 0
push 1
lea ecx, [ebp - 0x340]
call fcn.10015e0b
mov ecx, dword [ebp - 0x1d0]
mov dword [eax], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x340]
call fcn.10015e06
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d4]
call fcn.10015e06
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x1c], 0
jne 0x1002484d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x1c]
sub eax, 0x679b4575
cmp eax, dword [ebp - 0x1c]
jge 0x1002479f
mov dword [ebp - 0x20c], 1
jmp 0x100247a6
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x20], 0
je 0x100247d9
cmp dword [ebp - 0x20], 0
je 0x100247d9
mov dword [ebp - 0xdc], 1
jmp 0x100247e0
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xdc], eax
jl 0x100247f7
mov dword [ebp - 0x1d8], 1
jmp 0x100247fe
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1d8], eax
jge 0x10024815
mov dword [ebp - 0xe4], 1
jmp 0x1002481c
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xe4], eax
jle 0x10024833
mov dword [ebp - 0x1e0], 1
jmp 0x1002483a
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1e0]
neg eax
jne 0x1002484d
and dword [ebp - 0x284], 0
jmp 0x10024857
mov dword [ebp - 0x284], 1
mov eax, dword [ebp - 0x18]
add eax, 0xc40a
mov dword [ebp - 0x14], eax
je 0x10024b40
mov dword [ebp - 0xa8], 0x511ecbfc
mov dword [ebp - 0x40], 0x9a7032f1
mov dword [ebp - 0xf4], 0x8b01197b
mov dword [ebp - 0x7c], 0xfffffffc
mov dword [ebp - 0x10c], 0xffffffff
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa8], eax
imul eax, dword [ebp - 0xa8], 0x4df2
cmp dword [ebp - 0x18], eax
jge 0x100248b8
mov dword [ebp - 0x28c], 1
jmp 0x100248bf
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x1c], eax
je 0x100248d3
mov dword [ebp - 0xec], 1
jmp 0x100248da
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x40]
jg 0x100248f4
mov dword [ebp - 0x1e8], 1
jmp 0x100248fb
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x18]
sub eax, 0x322e099b
mov dword [ebp - 0x7c], eax
je 0x10024ae1
mov dword [ebp - 0x6c], 0x8971
mov eax, dword [ebp - 0xf4]
sub eax, 0x67a0
sub eax, dword [ebp - 0x6c]
cmp eax, 0xfffb
ja 0x10024970
cmp dword [ebp - 0x20], 0
jne 0x10024970
and dword [ebp - 0x1f0], 0
jmp 0x1002497a
mov dword [ebp - 0x1f0], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1f0], eax
jne 0x10024991
mov dword [ebp - 0xfc], 1
jmp 0x10024998
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0xfffffffc
je 0x100249ad
mov dword [ebp - 0x1f8], 1
jmp 0x100249b4
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1f8], eax
jg 0x100249c3
cmp dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x14], eax
imul eax, dword [ebp - 0x14], 0
cmp eax, dword [ebp - 0x40]
jge 0x100249e7
mov dword [ebp - 0x104], 1
jmp 0x100249ee
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0x1f6e
jg 0x10024a06
mov dword [ebp - 0x200], 1
jmp 0x10024a0d
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x200], eax
jg 0x10024a24
mov dword [ebp - 0x220], 1
jmp 0x10024a2b
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x31c], eax
mov eax, 0x9700
test eax, eax
jne 0x10024a4f
cmp dword [ebp - 0x10c], 0
jne 0x10024a4f
and dword [ebp - 0x21c], 0
jmp 0x10024a59
mov dword [ebp - 0x21c], 1
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1c], eax
jle 0x10024a79
mov dword [ebp - 0x1c4], 1
jmp 0x10024a80
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1c4], eax
je 0x10024a97
mov dword [ebp - 0x114], 1
jmp 0x10024a9e
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0xfff9
jne 0x10024ab6
mov dword [ebp - 0x254], 1
jmp 0x10024abd
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x40], 0x2d30a937
jmp 0x10024b14
mov dword [ebp - 0x20], 0xffffffec
jmp 0x10024af1
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xe
jne 0x10024b14
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x10024b12
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
jmp 0x10024aea
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10024b3b
push 0x497
push 0
push 0x26c
push 0
push 0x23e2
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
jmp 0x10024ce8
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x134], 0xfff8
mov dword [ebp - 0x1f4], 0xffffffff
mov dword [ebp - 0xa4], 0
jmp 0x10024b74
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x10024b90
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x2f4], 0xc4e1b820
jmp 0x10024b67
cmp dword [ebp - 0x14], 0
je 0x10024bf5
cmp dword [ebp - 0x4c], 0xf662
je 0x10024bae
cmp dword [ebp - 0x14], 0
jne 0x10024bae
and dword [ebp - 0x18c], 0
jmp 0x10024bb8
mov dword [ebp - 0x18c], 1
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x18c]
jg 0x10024bcf
mov dword [ebp - 0x11c], 1
jmp 0x10024bd6
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4c]
je 0x10024bf5
mov dword [ebp - 0x1e4], 1
jmp 0x10024bfc
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x124], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x124]
mov dword [ebp + eax - 0x2f4], ecx
mov eax, dword [ebp - 0x1e4]
sub eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x124], eax
jge 0x10024c35
mov dword [ebp - 0x194], 1
jmp 0x10024c3c
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x194]
test eax, eax
je 0x10024c5c
cmp dword [ebp - 0x18], 0
je 0x10024c5c
mov dword [ebp - 0x12c], 1
jmp 0x10024c63
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xadff
je 0x10024c81
mov dword [ebp - 0x1cc], 1
jmp 0x10024c88
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x1c]
jl 0x10024cb1
mov dword [ebp - 0x19c], 1
jmp 0x10024cb8
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x19c], eax
jl 0x10024cd2
mov dword [ebp - 0x13c], 1
jmp 0x10024cd9
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x60], 8
push 4
lea ecx, [ebp - 0x29c]
call fcn.10015d9e
mov dword [ebp - 4], 2
mov dword [ebp - 0x84], 0
jmp 0x10024d37
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x10024d59
push dword [ebp - 0x84]
lea ecx, [ebp - 0x29c]
call fcn.10015e0b
mov dword [eax], 0xd00585b7
jmp 0x10024d2a
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x10024d6f
push 0
push 0
call dword [sym.imp.GDI32.dll_RectInRegion]
mov dword [ebp - 0x60], 1
jmp 0x10024d7f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x17
jl 0x10024e09
mov dword [ebp - 0x224], 0xfb023ed1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x224], eax
jl 0x10024daa
mov dword [ebp - 0x144], 1
jmp 0x10024db1
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x144], eax
je 0x10024dc8
mov dword [ebp - 0x1a4], 1
jmp 0x10024dcf
and dword [ebp - 0x1a4], 0
push 0
lea ecx, [ebp - 0x29c]
call fcn.10015e0b
mov ecx, dword [ebp - 0x1a4]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x29c]
call fcn.10015e0b
mov esi, eax
push 0
lea ecx, [ebp - 0x29c]
call fcn.10015e0b
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x10024d78
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29c]
call fcn.10015e06
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x54], 0xfffffff7
mov dword [ebp - 0x64], 0x1b
jmp 0x10024e42
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jle 0x10024f7a
mov dword [ebp - 0x3c], 0xb1658084
mov dword [ebp - 0x268], 0x77c422d5
cmp dword [ebp - 0x3c], 0
je 0x10024f5c
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x3c], 0
je 0x10024e88
cmp dword [ebp - 0x3c], 0
je 0x10024e88
mov dword [ebp - 0x14c], 1
jmp 0x10024e8f
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x14c]
lea ecx, [edx + ecx - 0x3b6f]
add eax, ecx
cmp eax, 0xe1fc6578
jne 0x10024eb7
mov dword [ebp - 0x1d4], 1
jmp 0x10024ebe
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x1d4]
je 0x10024edb
cmp dword [ebp - 0x3c], 0
je 0x10024edb
mov dword [ebp - 0x154], 1
jmp 0x10024ee2
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x154], eax
jl 0x10024ef9
mov dword [ebp - 0x1ac], 1
jmp 0x10024f00
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0xfecafe8
jle 0x10024f18
mov dword [ebp - 0x15c], 1
jmp 0x10024f1f
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 1
jne 0x10024f34
mov dword [ebp - 0x22c], 1
jmp 0x10024f3b
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x64], 0
je 0x10024f47
cmp dword [ebp - 0x64], 0
jne 0x10024f50
mov eax, 0x5f76
test eax, eax
je 0x10024f5c
mov dword [ebp - 0x1ec], 1
jmp 0x10024f63
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x268], eax
jmp 0x10024e3b
mov dword [ebp - 0x54], 0xfffffff4
jmp 0x10024f8a
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xf
jne 0x10025016
push 3
lea ecx, [ebp - 0x2c8]
call fcn.10015d9e
mov dword [ebp - 4], 3
mov dword [ebp - 0x234], 0xffffffff
mov dword [ebp - 0x9c], 0
jmp 0x10024fcb
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x10024fed
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x2c8]
call fcn.10015e0b
mov dword [eax], 0xea5d840d
jmp 0x10024fbe
push 2
lea ecx, [ebp - 0x2c8]
call fcn.10015e0b
mov eax, dword [eax]
mov dword [ebp - 0x234], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c8]
call fcn.10015e06
jmp 0x10024f83
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x10], 0x3a0b8ee4
mov dword [ebp - 0x68], 0x20796559
mov dword [ebp - 0x110], 0x94ccb090
mov dword [ebp - 0x118], 0xc06e3268
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x244], 3
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x10025078
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
cmp dword [ebp - 0x10], 0
jl 0x1002508d
cmp dword [ebp - 0x10], 0
jne 0x1002508d
and dword [ebp - 0x164], 0
jmp 0x10025097
mov dword [ebp - 0x164], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x164], eax
jne 0x100250ae
mov dword [ebp - 0x1b4], 1
jmp 0x100250b5
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1b4], eax
jl 0x100250cc
mov dword [ebp - 0x16c], 1
jmp 0x100250d3
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0xb56
jge 0x100250eb
mov dword [ebp - 0x1dc], 1
jmp 0x100250f2
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x1dc], eax
je 0x10025109
mov dword [ebp - 0x174], 1
jmp 0x10025110
and dword [ebp - 0x174], 0
imul eax, dword [ebp - 0x174], 3
test eax, eax
jne 0x1002512a
cmp dword [ebp - 0x68], 0
jne 0x1002512a
and dword [ebp - 0x270], 0
jmp 0x10025134
mov dword [ebp - 0x270], 1
cmp dword [ebp - 0x10], 0
je 0x1002514c
cmp dword [ebp - 0x68], 0
je 0x1002514c
mov dword [ebp - 0x1bc], 1
jmp 0x10025153
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x68], eax
jl 0x10025170
mov dword [ebp - 0x17c], 1
jmp 0x10025177
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x17c]
jl 0x1002518e
mov dword [ebp - 0xb4], 1
jmp 0x10025195
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xb4], eax
je 0x100251ac
mov dword [ebp - 0x184], 1
jmp 0x100251b3
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x184], eax
jge 0x100251ca
mov dword [ebp - 0x108], 1
jmp 0x100251d1
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x118]
jge 0x10025203
mov dword [ebp - 0x120], 1
jmp 0x1002520a
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x120], eax
jne 0x10025221
mov dword [ebp - 0x128], 1
jmp 0x10025228
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x128], eax
jl 0x1002523f
mov dword [ebp - 0x130], 1
jmp 0x10025246
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
dec eax
cmp eax, dword [ebp - 0x8c]
jl 0x10025261
mov dword [ebp - 0x138], 1
jmp 0x10025268
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x138], eax
jge 0x10025282
mov dword [ebp - 0x140], 1
jmp 0x10025289
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x140]
jg 0x100252a0
mov dword [ebp - 0x148], 1
jmp 0x100252a7
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x8c], eax
jl 0x100252ca
mov dword [ebp - 0x150], 1
jmp 0x100252d1
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x100252f2
mov dword [ebp - 0x158], 1
jmp 0x100252f9
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x214], eax
push 0x1c8c
push 0x3188
mov eax, dword [ebp - 0x24c]
push dword [eax]
mov eax, dword [ebp - 0x278]
push dword [eax]
push 0x51a3
push 0x1cb0
push dword [ebp - 0x214]
push 0x5ce
mov eax, dword [ebp - 0x218]
push dword [eax]
push 0
call fcn.1002aad2
add esp, 0x28
jmp 0x10025aef
mov dword [ebp - 0x74], 0x7e2799ac
mov dword [ebp - 0x70], 0x7555b7ce
mov dword [ebp - 0x74], 0
jmp 0x10025375
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x1a
je 0x100253e3
mov dword [ebp - 0x70], 0xb72fd491
mov dword [ebp - 0x70], 0x17
jmp 0x10025392
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 7
je 0x100253e1
mov dword [ebp - 0x94], 0x173bf38c
mov dword [ebp - 0x94], 0
jmp 0x100253bb
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xfffffff2
jge 0x100253df
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x100253dd
push 0x2064
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
jmp 0x100253ae
jmp 0x1002538b
jmp 0x1002536e
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24], 1
push 3
lea ecx, [ebp - 0x260]
call fcn.10015d9e
mov dword [ebp - 4], 4
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x240], 0xc2010065
mov dword [ebp - 0x30], 0
jmp 0x10025434
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10025450
push dword [ebp - 0x30]
lea ecx, [ebp - 0x260]
call fcn.10015e0b
mov dword [eax], 0x91359a70
jmp 0x1002542d
mov dword [ebp - 0x30], 0
jmp 0x10025460
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10025476
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x230], 1
jmp 0x10025459
mov dword [ebp - 0x24], 0
jmp 0x10025486
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xf
jl 0x1002588d
mov dword [ebp - 0x78], 0
jmp 0x100254a0
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x100254b3
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x2c], 0x7b8f5f49
jmp 0x10025499
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x24], 1
jg 0x100254d5
mov dword [ebp - 0x160], 1
jmp 0x100254dc
and dword [ebp - 0x160], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x160], eax
jne 0x100254fa
mov dword [ebp - 0x168], 1
jmp 0x10025501
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 0xffffffff
ja 0x10025515
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
cmp dword [ebp - 0x24], 0
je 0x10025534
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
je 0x10025534
mov dword [ebp - 0x170], 1
jmp 0x1002553b
and dword [ebp - 0x170], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x170], eax
jg 0x10025559
mov dword [ebp - 0x178], 1
jmp 0x10025560
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x178], eax
jge 0x10025577
mov dword [ebp - 0x180], 1
jmp 0x1002557e
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0x194
jle 0x10025596
mov dword [ebp - 0x188], 1
jmp 0x1002559d
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 1
jb 0x100255b3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
je 0x100255e7
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x100255cc
push 0x1ce9
push 0
call dword [sym.imp.KERNEL32.dll_WinExec]
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x100255e2
push 0
push 0
call dword [sym.imp.GDI32.dll_RectInRegion]
jmp 0x10025888
mov dword [ebp - 0x88], 5
push 2
lea ecx, [ebp - 0x2a8]
call fcn.10015d9e
mov byte [ebp - 4], 5
mov dword [ebp - 0x90], 0xfffffffa
mov dword [ebp - 0x1a0], 0x5adb51fd
mov dword [ebp - 0x210], 0xeef10dec
mov dword [ebp - 0x80], 0
jmp 0x10025630
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1002564c
push dword [ebp - 0x80]
lea ecx, [ebp - 0x2a8]
call fcn.10015e0b
mov dword [eax], 0xf419c2b2
jmp 0x10025629
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x88], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x24], 0xfc1c5751
jbe 0x1002567a
mov dword [ebp - 0xb0], 1
jmp 0x10025681
and dword [ebp - 0xb0], 0
push 0
lea ecx, [ebp - 0x2a8]
call fcn.10015e0b
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jne 0x100256bd
mov eax, 0x9bdd86bd
test eax, eax
jne 0x100256bd
and dword [ebp - 0x190], 0
jmp 0x100256c7
mov dword [ebp - 0x190], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x190], eax
jge 0x100256e1
mov dword [ebp - 0x198], 1
jmp 0x100256e8
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x314], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0x2bc90638
jne 0x1002571c
mov dword [ebp - 0x1a8], 1
jmp 0x10025723
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0x5423b19d
jge 0x1002573b
mov dword [ebp - 0x1b0], 1
jmp 0x10025742
and dword [ebp - 0x1b0], 0
push 1
lea ecx, [ebp - 0x260]
call fcn.10015e0b
mov ecx, dword [ebp - 0x1b0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x90]
test eax, eax
je 0x10025867
mov dword [ebp - 0xd8], 0xffffffff
mov dword [ebp - 0x238], 0xe724d257
cmp dword [ebp - 0x88], 0
jne 0x10025798
cmp dword [ebp - 0x210], 0
jne 0x10025798
and dword [ebp - 0xc0], 0
jmp 0x100257a2
mov dword [ebp - 0xc0], 1
push 2
lea ecx, [ebp - 0x260]
call fcn.10015e0b
mov dword [ebp - 0xb8], eax
push 1
lea ecx, [ebp - 0x2a8]
call fcn.10015e0b
mov ecx, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xc0]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x88]
je 0x100257ee
mov dword [ebp - 0xc8], 1
jmp 0x100257f5
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xc8], eax
jle 0x1002580f
mov dword [ebp - 0xd0], 1
jmp 0x10025816
and dword [ebp - 0xd0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov ecx, dword [ebp - 0x228]
imul ecx, dword [ebp - 0xd0]
add eax, ecx
imul eax, dword [ebp - 0xd8]
mov dword [ebp - 0xe0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe0]
mov dword [ebp + eax - 0x230], ecx
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x90], 0x1fc5bff9
jmp 0x10025879
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x10025879
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2a8]
call fcn.10015e06
jmp 0x1002547f
push 1
lea ecx, [ebp - 0x260]
call fcn.10015e0b
cmp dword [eax], 0xa04c7c9a
jne 0x100258ae
mov dword [ebp - 0xe8], 1
jmp 0x100258b5
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xe8], eax
jl 0x100258cc
mov dword [ebp - 0xf0], 1
jmp 0x100258d3
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x240], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x260]
call fcn.10015e06
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x34], 3
push 3
lea ecx, [ebp - 0x2e0]
call fcn.10015d9e
mov dword [ebp - 4], 6
mov dword [ebp - 0x274], 4
mov dword [ebp - 0x38], 0
jmp 0x1002593b
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10025954
push dword [ebp - 0x38]
lea ecx, [ebp - 0x2e0]
call fcn.10015e0b
or dword [eax], 0xffffffff
jmp 0x10025934
mov dword [ebp - 0x38], 0
jmp 0x10025964
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1002597a
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x350], 0xffffffff
jmp 0x1002595d
mov dword [ebp - 0x34], 0
jmp 0x1002598a
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff6
jle 0x10025a09
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x98], 0x1c
jmp 0x100259b3
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xffffffef
jne 0x10025a04
mov dword [ebp - 0xa0], 0xfffffff6
mov dword [ebp - 0xa0], 2
jmp 0x100259df
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x13
jl 0x10025a02
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x10025a00
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
jmp 0x100259d2
jmp 0x100259a6
jmp 0x10025983
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10015e0b
mov dword [eax], 0xb27f
mov eax, 0x598a
sub eax, 0xb27f
mov ecx, dword [ebp - 0x34]
imul ecx, eax
cmp ecx, 0xc5a3d7f1
jbe 0x10025a40
mov dword [ebp - 0x264], 1
jmp 0x10025a47
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x34], 0x9bca
jg 0x10025a5c
mov dword [ebp - 0xf8], 1
jmp 0x10025a63
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x34]
je 0x10025a7e
mov dword [ebp - 0x100], 1
jmp 0x10025a85
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 1
jae 0x10025a9a
mov dword [ebp - 0x26c], 1
jmp 0x10025aa1
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2e8], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x350]
mov dword [ebp + ecx - 0x350], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e0]
call fcn.10015e06
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp - 0x208]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret