Function at 0x10024a71
Capabilities:
Contain obfuscated stackstrings
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10081491
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3bc
push esi
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x10024dfa
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x220], eax
push 1
lea ecx, [ebp - 0x200]
call fcn.100173c8
and dword [ebp - 4], 0
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x94], 4
push 3
lea ecx, [ebp - 0x300]
call fcn.100173c8
mov byte [ebp - 4], 1
mov dword [ebp - 0x24], 0
jmp 0x10024af4
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10024b10
push dword [ebp - 0x24]
lea ecx, [ebp - 0x200]
call fcn.10017435
mov dword [eax], 0x97f6af11
jmp 0x10024aed
mov dword [ebp - 0x24], 0
jmp 0x10024b20
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10024b3c
push dword [ebp - 0x24]
lea ecx, [ebp - 0x300]
call fcn.10017435
mov dword [eax], 0xf47f28a9
jmp 0x10024b19
push 0
lea ecx, [ebp - 0x200]
call fcn.10017435
mov dword [eax], 0x12
jmp 0x10024b75
push 0
lea ecx, [ebp - 0x200]
call fcn.10017435
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x128]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x200]
call fcn.10017435
cmp dword [eax], 0xa
jne 0x10024ce0
mov dword [ebp - 0x1b0], 0x6d8d
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x334], 0
mov dword [ebp - 0xdc], 0x493876a4
mov eax, dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x2b0]
cmp eax, 0xfff6
ja 0x10024bd2
mov dword [ebp - 0x1cc], 1
jmp 0x10024bd9
and dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 0x33ee
je 0x10024bf1
mov dword [ebp - 0xd4], 1
jmp 0x10024bf8
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xd4], eax
jne 0x10024c12
mov dword [ebp - 0x168], 1
jmp 0x10024c19
and dword [ebp - 0x168], 0
push 0
lea ecx, [ebp - 0x200]
call fcn.10017435
mov esi, dword [ebp - 0x168]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x200]
call fcn.10017435
add esi, dword [eax]
imul esi, dword [ebp - 0xdc]
cmp esi, dword [ebp - 0x94]
jg 0x10024c58
mov dword [ebp - 0x16c], 1
jmp 0x10024c5f
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x16c], eax
jge 0x10024c79
mov dword [ebp - 0xe4], 1
jmp 0x10024c80
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0x9c5a
jg 0x10024c98
mov dword [ebp - 0x2a0], 1
jmp 0x10024c9f
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x33c], eax
mov esi, dword [ebp - 0x1b0]
push 0
lea ecx, [ebp - 0x300]
call fcn.10017435
mov dword [eax], esi
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x10024cdb
push 0x2357
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
jmp 0x10024b51
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x300]
call fcn.10017430
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.10017430
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x2e8], 0xfffffff9
mov dword [ebp - 0x2e4], 0xfffffff9
mov dword [ebp - 0x2e0], 0xfffffff9
mov dword [ebp - 0x2dc], 0xfffffff9
lea ecx, [ebp - 0x9d]
call fcn.10009483
push eax
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.10017444
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3b0]
call fcn.1001740a
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x70], 0
jmp 0x10024d87
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jg 0x10024db4
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x10024db2
push 0x223
push 0x2598
push 0
push 0x1c4f
push 0
call dword [sym.imp.USER32.dll_GetMenuStringW]
jmp 0x10024d80
lea ecx, [ebp - 0x3b0]
call fcn.10017430
mov eax, dword [ebp - 0x54]
mov dword [eax], 0
jmp 0x10024dd5
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x54]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax], 2
jge 0x10024df5
mov eax, dword [ebp - 0x54]
push dword [eax]
mov ecx, dword [ebp - 0x284]
call fcn.10017435
mov dword [eax], 0xffff
jmp 0x10024dca
jmp 0x100261ce
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x18c], 1
mov dword [ebp - 0xb8], 0x716b5b38
mov dword [ebp - 0x1d4], 0xfffffff8
mov dword [ebp - 0x234], 0x5db2b058
mov dword [ebp - 0xa8], 0x51ef9953
mov dword [ebp - 0x344], 0x48aab564
mov dword [ebp - 0x330], 4
push 3
lea ecx, [ebp - 0x21c]
call fcn.100173c8
mov dword [ebp - 4], 2
push 1
lea ecx, [ebp - 0x2f4]
call fcn.100173c8
mov byte [ebp - 4], 3
mov dword [ebp - 0x298], 0x6f8a3e09
mov dword [ebp - 0x10], 0
jmp 0x10024e88
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10024e9e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2c0], 0xb055cc25
jmp 0x10024e81
mov dword [ebp - 0x10], 0
jmp 0x10024eae
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10024eca
push dword [ebp - 0x10]
lea ecx, [ebp - 0x21c]
call fcn.10017435
mov dword [eax], 0x4caa5d73
jmp 0x10024ea7
mov dword [ebp - 0x10], 0
jmp 0x10024eda
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10024ef6
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2f4]
call fcn.10017435
mov dword [eax], 8
jmp 0x10024ed3
mov dword [ebp - 0x10], 0
jmp 0x10024f06
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10024f1c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x36c], 0xbb5c02ac
jmp 0x10024eff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c0]
mov dword [ebp - 0x354], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2c0]
mov dword [ebp - 0x35c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2c0]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0xa8], eax
jge 0x10024f6e
mov dword [ebp - 0xec], 1
jmp 0x10024f75
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 2
je 0x10024f9c
push 0
lea ecx, [ebp - 0x21c]
call fcn.10017435
cmp dword [eax], 0
je 0x10024f9c
mov dword [ebp - 0x174], 1
jmp 0x10024fa3
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 0xfffffffd
jbe 0x10024fca
mov eax, 0x9a81
test eax, eax
je 0x10024fca
mov eax, 0xde63b691
test eax, eax
je 0x10024fca
mov dword [ebp - 0xf4], 1
jmp 0x10024fd1
and dword [ebp - 0xf4], 0
imul eax, dword [ebp - 0xf4], 0xfffffffa
test eax, eax
jne 0x10024fe9
xor eax, eax
jne 0x10024fe9
and dword [ebp - 0x1b4], 0
jmp 0x10024ff3
mov dword [ebp - 0x1b4], 1
cmp dword [ebp - 0x1b4], 4
je 0x10025008
mov dword [ebp - 0xfc], 1
jmp 0x1002500f
and dword [ebp - 0xfc], 0
push 0
lea ecx, [ebp - 0x2f4]
call fcn.10017435
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x22c]
jle 0x10025067
mov dword [ebp - 0x17c], 1
jmp 0x1002506e
and dword [ebp - 0x17c], 0
push 2
lea ecx, [ebp - 0x21c]
call fcn.10017435
mov ecx, dword [ebp - 0x17c]
cmp ecx, dword [eax]
je 0x10025091
mov dword [ebp - 0x104], 1
jmp 0x10025098
and dword [ebp - 0x104], 0
push 4
pop eax
imul eax, eax, 3
mov esi, dword [ebp - 0x104]
sub esi, dword [ebp + eax - 0x2c0]
push 2
lea ecx, [ebp - 0x21c]
call fcn.10017435
cmp esi, dword [eax]
jne 0x100250c8
mov dword [ebp - 0x1dc], 1
jmp 0x100250cf
and dword [ebp - 0x1dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c0]
cmp eax, dword [ebp - 0x1dc]
je 0x100250f0
mov dword [ebp - 0x10c], 1
jmp 0x100250f7
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x298]
imul eax, dword [ebp - 0x10c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x36c]
jne 0x1002511f
mov dword [ebp - 0x184], 1
jmp 0x10025126
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
imul eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x114], eax
push 0
lea ecx, [ebp - 0x21c]
call fcn.10017435
mov ecx, dword [ebp - 0x114]
mov dword [eax], ecx
mov eax, dword [ebp - 0x114]
neg eax
add eax, 3
jne 0x1002516d
cmp dword [ebp - 0x234], 0
jne 0x1002516d
and dword [ebp - 0x1bc], 0
jmp 0x10025177
mov dword [ebp - 0x1bc], 1
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x1bc], eax
je 0x10025191
mov dword [ebp - 0x280], 1
jmp 0x10025198
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0xa8]
add eax, 7
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x36c]
jne 0x100251ce
mov eax, 0x309e
test eax, eax
jne 0x100251ce
and dword [ebp - 0x11c], 0
jmp 0x100251d8
mov dword [ebp - 0x11c], 1
mov eax, dword [ebp - 0x11c]
inc eax
cmp eax, dword [ebp - 0x18c]
jl 0x100251f3
mov dword [ebp - 0x124], 1
jmp 0x100251fa
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x1d4], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2f4]
call fcn.10017430
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21c]
call fcn.10017430
mov eax, dword [ebp + 8]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x9c], 0xfffffff7
mov dword [ebp - 0x1c4], 0xffffffff
mov dword [ebp - 0xa4], 0xfffffffe
mov dword [ebp - 0x23c], 0xed7d4130
mov dword [ebp - 0x90], 0
jmp 0x10025281
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x1002529d
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x31c], 9
jmp 0x10025274
cmp dword [ebp - 0x18], 0
je 0x100252b5
cmp dword [ebp - 0x18], 0
je 0x100252b5
mov dword [ebp - 0x14c], 1
jmp 0x100252bc
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x18], 0
jne 0x100252f1
cmp dword [ebp - 0x18], 0xca70051
jge 0x100252d7
mov dword [ebp - 0x98], 1
jmp 0x100252de
and dword [ebp - 0x98], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x98]
mov dword [ebp + eax - 0x31c], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x31c]
cmp dword [ebp - 0x18], eax
jle 0x1002530f
mov dword [ebp - 0x12c], 1
jmp 0x10025316
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0xa83d87e3
jbe 0x1002532e
mov dword [ebp - 0x194], 1
jmp 0x10025335
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3a4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x18]
cmp dword [ebp + eax - 0x31c], ecx
jne 0x10025374
mov dword [ebp - 0x134], 1
jmp 0x1002537b
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x134]
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jne 0x100253b6
cmp dword [ebp - 0x9c], 0
jne 0x100253b6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x31c], 0
jne 0x100253b6
and dword [ebp - 0x13c], 0
jmp 0x100253c0
mov dword [ebp - 0x13c], 1
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xa4], eax
jg 0x100253ec
cmp dword [ebp - 0xa4], 0
je 0x100253ec
mov dword [ebp - 0x19c], 1
jmp 0x100253f3
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x19c], eax
jne 0x1002540a
mov dword [ebp - 0x144], 1
jmp 0x10025411
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0xbc4433ac
ja 0x10025429
mov dword [ebp - 0x1e4], 1
jmp 0x10025430
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x14c]
sub ecx, eax
mov dword [ebp - 0x23c], ecx
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x238], eax
push 1
lea ecx, [ebp - 0x1f4]
call fcn.100173c8
mov dword [ebp - 4], 4
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x84], 0
jmp 0x100254b2
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x100254d4
push dword [ebp - 0x84]
lea ecx, [ebp - 0x1f4]
call fcn.10017435
mov dword [eax], 0x13ec
jmp 0x100254a5
mov dword [ebp - 0x20], 0
jmp 0x100254e4
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1002583b
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x210], 0xffffffff
mov dword [ebp - 0x20c], 0xffffffff
mov dword [ebp - 0x208], 0xffffffff
mov dword [ebp - 0x204], 0xffffffff
mov dword [ebp - 0x2ac], 0x6bc97de2
mov dword [ebp - 0x2c], 0
jmp 0x10025537
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jg 0x10025836
mov dword [ebp - 0x294], 0x90438315
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.10017435
mov ecx, 0xb8f3d421
sub ecx, dword [eax]
je 0x10025672
mov dword [ebp - 0x15c], 0x7f3e76e5
mov dword [ebp - 0x29c], 0x157736d0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.10017435
cmp dword [ebp - 0x15c], 0
jne 0x100255a0
cmp dword [ebp - 0x3c], 0
jne 0x100255a0
and dword [ebp - 0x1a4], 0
jmp 0x100255aa
mov dword [ebp - 0x1a4], 1
cmp dword [ebp - 0x2c], 0x6cc9
jg 0x100255bf
mov dword [ebp - 0x154], 1
jmp 0x100255c6
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x1a4]
add eax, dword [ebp - 0x154]
imul eax, eax, 0x56e7
cmp eax, dword [ebp - 0xac]
jg 0x100255ec
mov dword [ebp - 0x1ac], 1
jmp 0x100255f3
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 4
jae 0x10025608
mov dword [ebp - 0x164], 1
jmp 0x1002560f
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x15c]
imul eax, dword [ebp - 0x164]
neg eax
cmp eax, dword [ebp - 0x20]
jge 0x1002562f
mov dword [ebp - 0xcc], 1
jmp 0x10025636
and dword [ebp - 0xcc], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.10017435
mov ecx, dword [ebp - 0xcc]
cmp ecx, dword [eax]
jg 0x1002565a
mov dword [ebp - 0xd0], 1
jmp 0x10025661
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x29c], eax
jmp 0x100256fd
mov dword [ebp - 0x244], 0
cmp dword [ebp - 0x2c], 0xfffffffa
jge 0x1002568e
mov dword [ebp - 0xd8], 1
jmp 0x10025695
and dword [ebp - 0xd8], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.10017435
cmp dword [eax], 0
jne 0x100256b4
mov dword [ebp - 0xe0], 1
jmp 0x100256bb
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xe0]
sub ecx, dword [ebp - 0x244]
cmp eax, ecx
jle 0x100256e4
mov dword [ebp - 0xe8], 1
jmp 0x100256eb
and dword [ebp - 0xe8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe8]
mov dword [ebp + eax - 0x210], ecx
mov eax, 0x928694a2
test eax, eax
je 0x10025721
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x210], 0
je 0x10025721
mov dword [ebp - 0x28c], 1
jmp 0x10025728
and dword [ebp - 0x28c], 0
xor eax, eax
inc eax
je 0x1002573f
cmp dword [ebp - 0x2c], 0
je 0x1002573f
mov dword [ebp - 0x24c], 1
jmp 0x10025746
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3a0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x210], 0
je 0x1002576b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x210], 0
cmp dword [ebp - 0xac], 0xad21dd8e
jne 0x10025783
mov dword [ebp - 0xf0], 1
jmp 0x1002578a
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0x4681c37f
jle 0x100257a2
mov dword [ebp - 0xf8], 1
jmp 0x100257a9
and dword [ebp - 0xf8], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.10017435
mov ecx, dword [ebp - 0xf8]
sub ecx, dword [eax]
push 4
pop eax
shl eax, 1
cmp ecx, dword [ebp + eax - 0x210]
jge 0x100257d9
mov dword [ebp - 0x100], 1
jmp 0x100257e0
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 0xe56979f9
jne 0x10025827
mov dword [ebp - 0x3c], 0
jmp 0x100257fc
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x1002581c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x20c], 1
mov dword [ebp - 0x2ac], 1
jmp 0x100257f5
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x254], eax
jmp 0x10025831
mov dword [ebp - 0x294], 0xc5a258d3
jmp 0x10025530
jmp 0x100254dd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f4]
call fcn.10017430
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x32c], 0x177e8edf
mov dword [ebp - 0x328], 0x177e8edf
mov dword [ebp - 0x324], 0x177e8edf
mov dword [ebp - 0x320], 0x177e8edf
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x4c], 0
jmp 0x1002589b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x100258d1
mov dword [ebp - 0x7c], 0xfffffff7
mov dword [ebp - 0x7c], 0
jmp 0x100258b8
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jg 0x100258cf
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x32c], 0
je 0x100258cd
jmp 0x100258cf
jmp 0x100258b1
jmp 0x10025894
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x40], 0xca4f833f
mov dword [ebp - 0xbc], 0xfffffffa
mov dword [ebp - 0x2a4], 0xfffffffc
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x37c], 8
mov dword [ebp - 0x8c], 0
jmp 0x10025922
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1002593b
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x28], 0xffffffff
jmp 0x10025915
mov byte [ebp - 0x37], 0
movzx eax, byte [ebp - 0x37]
test eax, eax
je 0x10025951
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
mov dword [ebp - 0x40], 0
jmp 0x10025961
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x10025c76
mov dword [ebp - 0x14], 0x77dd6887
mov dword [ebp - 0x138], 0xfffffff7
push 4
lea ecx, [ebp - 0x30c]
call fcn.100173c8
mov dword [ebp - 4], 5
mov dword [ebp - 0x74], 0
jmp 0x100259a0
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x100259bc
push dword [ebp - 0x74]
lea ecx, [ebp - 0x30c]
call fcn.10017435
mov dword [eax], 0xd0fe1f23
jmp 0x10025999
mov dword [ebp - 0x14], 0
jmp 0x100259cc
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10025c62
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x150], 0xcea0262b
mov dword [ebp - 0x26c], 0xcd1ad70
xor eax, eax
inc eax
je 0x10025b8b
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x14], eax
jne 0x10025a0e
mov dword [ebp - 0x108], 1
jmp 0x10025a15
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 1
jl 0x10025a2a
mov dword [ebp - 0x110], 1
jmp 0x10025a31
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x110], eax
jne 0x10025a48
mov dword [ebp - 0x118], 1
jmp 0x10025a4f
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x28]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp + ecx*4 - 0x28]
add ecx, dword [ebp - 0x118]
imul eax, ecx
sub eax, 0x297c5811
cmp eax, 0xe469
jg 0x10025a7e
mov dword [ebp - 0x120], 1
jmp 0x10025a85
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x28]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x14], 0x339b
jle 0x10025abf
cmp dword [ebp - 0xbc], 0
jne 0x10025abf
and dword [ebp - 0xc8], 0
jmp 0x10025ac9
mov dword [ebp - 0xc8], 1
imul eax, dword [ebp - 0xc8], 0x782e
test eax, eax
je 0x10025adb
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x340], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x348], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x2a4], 0xcb2d
jl 0x10025b2b
mov dword [ebp - 0xb4], 1
jmp 0x10025b32
and dword [ebp - 0xb4], 0
push 3
lea ecx, [ebp - 0x30c]
call fcn.10017435
mov ecx, dword [ebp - 0xb4]
mov dword [eax], ecx
cmp dword [ebp - 0xb4], 0
je 0x10025b65
mov eax, 0xe879
test eax, eax
je 0x10025b65
mov dword [ebp - 0x264], 1
jmp 0x10025b6c
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x28], 0
je 0x10025b8b
mov dword [ebp - 0x27c], 1
jmp 0x10025b92
and dword [ebp - 0x27c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x28], ecx
jl 0x10025bba
mov dword [ebp - 0x130], 1
jmp 0x10025bc1
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x130]
sub ecx, dword [ebp + eax*4 - 0x28]
cmp ecx, 0x360e5697
jl 0x10025be2
mov dword [ebp - 0x140], 1
jmp 0x10025be9
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x140], eax
jge 0x10025c03
mov dword [ebp - 0x148], 1
jmp 0x10025c0a
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x50], 0
jmp 0x10025c32
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x10025c5d
mov dword [ebp - 0xbc], 0xb2d4ad4
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x10025c5b
push 0x1d25
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
jmp 0x10025c2b
jmp 0x100259c5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30c]
call fcn.10017430
jmp 0x1002595a
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x64], 0xfffffff7
mov dword [ebp - 0x64], 0
jmp 0x10025c99
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffffc
jle 0x10025ce1
mov dword [ebp - 0x80], 0x97eede0b
mov dword [ebp - 0x358], 0x891c5534
mov dword [ebp - 0x80], 0xffffffea
jmp 0x10025cc0
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x11
jne 0x10025cdf
mov dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
jmp 0x10025cb9
jmp 0x10025c92
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x170], 0xfffffffe
mov dword [ebp - 0x34], 0x15
jmp 0x10025d0e
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffe3
je 0x10025dee
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x178], 0x2cb3a3fc
mov dword [ebp - 0x228], 0x1510afbd
mov dword [ebp - 0x58], 0xffffffe6
jmp 0x10025d43
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xfffffff2
jle 0x10025de9
mov dword [ebp - 0x290], 0xef054a20
xor eax, eax
jne 0x10025d6a
cmp dword [ebp - 0x34], 0
jne 0x10025d6a
and dword [ebp - 0x160], 0
jmp 0x10025d74
mov dword [ebp - 0x160], 1
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x170], eax
jl 0x10025d97
mov dword [ebp - 0x180], 1
jmp 0x10025d9e
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x178], eax
push 0xfffffffffffffff7
pop eax
sub eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x180]
jl 0x10025dc7
mov dword [ebp - 0x224], 1
jmp 0x10025dce
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x390], eax
imul eax, dword [ebp - 0x58], 0x8de6
mov dword [ebp - 0x228], eax
jmp 0x10025d3c
jmp 0x10025d07
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x44], 0x2443ac46
mov dword [ebp - 0x88], 0
jmp 0x10025e33
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x10025e4f
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x3b8], 0
jmp 0x10025e26
cmp dword [ebp - 0x1c], 0
je 0x10025f2f
mov dword [ebp - 0x2d4], 0x432a2768
mov dword [ebp - 0x2d0], 0x432a2768
mov dword [ebp - 0x2cc], 0x432a2768
mov dword [ebp - 0x2c8], 0x432a2768
lea ecx, [ebp - 0xad]
call fcn.10009483
push eax
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x3c8]
call fcn.10017444
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x378]
call fcn.1001740a
mov dword [ebp - 4], 6
mov dword [ebp - 0x1c], 3
jmp 0x10025ecd
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10025f1e
mov dword [ebp - 0x48], 0x73d2d672
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x10025ef0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
mov dword [ebp - 0x48], 0
jmp 0x10025f00
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x10025f1c
push dword [ebp - 0x48]
lea ecx, [ebp - 0x378]
call fcn.10017435
mov dword [eax], 0xfffffff7
jmp 0x10025ef9
jmp 0x10025ec6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x378]
call fcn.10017430
jmp 0x10025f97
mov dword [ebp - 0x248], 0xfe75
mov dword [ebp - 0x1c], 0
jmp 0x10025f49
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe3
je 0x10025f85
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0
jmp 0x10025f65
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff6
jg 0x10025f83
mov dword [ebp - 0x188], 0x64c7b7f6
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x188], eax
jmp 0x10025f5e
jmp 0x10025f42
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x68], 0
jmp 0x10025fba
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10026012
mov dword [ebp - 0x258], 0xffff
mov dword [ebp - 0x60], 0xfab8c3ad
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x60], 0xf
jmp 0x10025fea
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffff7
jne 0x10026010
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x1002600e
push 0x1a40
push 0x2ca
push 0
call dword [sym.imp.GDI32.dll_OffsetRgn]
jmp 0x10025fe3
jmp 0x10025fb3
push 1
mov ecx, dword [ebp - 0x5c]
call fcn.10017435
push dword [eax]
mov ecx, dword [ebp - 0x190]
call fcn.10017435
mov dword [ebp - 0x198], eax
push 1
mov ecx, dword [ebp - 0x5c]
call fcn.10017435
push dword [eax]
mov ecx, dword [ebp - 0x190]
call fcn.10017435
mov ecx, dword [ebp - 0x198]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x198]
cmp dword [eax], 0
je 0x1002606c
xor eax, eax
inc eax
je 0x1002606c
mov dword [ebp - 0x1d0], 1
jmp 0x10026073
and dword [ebp - 0x1d0], 0
push 0
mov ecx, dword [ebp - 0x5c]
call fcn.10017435
cmp dword [eax], 0
jne 0x10026093
mov eax, dword [ebp - 0x6c]
cmp dword [eax], 0
jne 0x10026093
and dword [ebp - 0x1a0], 0
jmp 0x1002609d
mov dword [ebp - 0x1a0], 1
mov eax, dword [ebp - 0x1e0]
mov eax, dword [eax]
cmp dword [ebp - 0x1a0], eax
jl 0x100260b9
mov dword [ebp - 0x1a8], 1
jmp 0x100260c0
and dword [ebp - 0x1a8], 0
push 1
mov ecx, dword [ebp - 0x5c]
call fcn.10017435
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1a8]
jg 0x100260e0
mov dword [ebp - 0x1b8], 1
jmp 0x100260e7
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 0x978d
jg 0x100260ff
mov dword [ebp - 0x1c0], 1
jmp 0x10026106
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
cmp dword [ebp - 0x1c0], eax
jl 0x1002611f
mov dword [ebp - 0x1c8], 1
jmp 0x10026126
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0xfffffff7
jbe 0x1002613b
mov dword [ebp - 0x1d8], 1
jmp 0x10026142
and dword [ebp - 0x1d8], 0
push 9
pop eax
sub eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x1d8]
je 0x1002615f
mov dword [ebp - 0xc4], 1
jmp 0x10026166
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0xc4]
mov dword [eax], ecx
cmp dword [ebp - 0xc4], 0x493876a4
jl 0x10026189
mov eax, dword [ebp - 0x268]
cmp dword [eax], 0
mov eax, dword [ebp - 0x6c]
cmp dword [eax], 0
jne 0x1002619a
mov eax, dword [ebp - 0x1e0]
cmp dword [eax], 0
mov eax, dword [ebp - 0x6c]
mov esi, dword [eax]
push 1
mov ecx, dword [ebp - 0x5c]
call fcn.10017435
cmp esi, dword [eax]
je 0x100261b9
mov dword [ebp - 0x1e8], 1
jmp 0x100261c0
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x1e8]
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret