Function at 0x1002f640
Capabilities:
Check http status code
Enumerate processes
Get graphical window text
Receive data
Receive data on socket
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007de80
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x948
mov eax, dword [0x1009a774]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x10a92166
call fcn.1004081d
mov eax, 1
test eax, eax
je 0x100306bd
mov dword [ebp - 4], 0
cmp dword [0x100d3710], 0
je 0x100305c0
push 0
push 0x1000
push 0x10a8e6e8
mov eax, dword [0x100d3710]
push eax
call dword [sym.imp.WS2_32.dll_recv]
test eax, eax
jle 0x100305c0
movzx eax, word [0x10a8e6e8]
push eax
push 0x10a8e6e8
call fcn.1002c320
add esp, 8
mov eax, 0x10a8e6e8
test eax, eax
je case.default.0x1002f74f
movzx eax, word [0x10a8e6e8]
mov dword [ebp - 0x18], eax
movzx eax, word [0x10a8e6ea]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x10a8e6ec]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0xa097
jne case.default.0x1002f74f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x8d8], eax
cmp dword [ebp - 0x8d8], 0x12b
jg 0x1002f756
cmp dword [ebp - 0x8d8], 0x12b
je 0x1003010c
mov ecx, dword [ebp - 0x8d8]
sub ecx, 2
mov dword [ebp - 0x8d8], ecx
cmp dword [ebp - 0x8d8], 3
ja case.default.0x1002f74f
mov edx, dword [ebp - 0x8d8]
jmp dword [edx*4 + 0x100306dc]
cmp dword [ebp - 0x8d8], 0x2ef
jg 0x1002f797
cmp dword [ebp - 0x8d8], 0x2ee
jge 0x10030357
cmp dword [ebp - 0x8d8], 0x193
je 0x10030170
cmp dword [ebp - 0x8d8], 0x22b
je 0x10030267
jmp case.default.0x1002f74f
cmp dword [ebp - 0x8d8], 0x2f8
jl case.default.0x1002f74f
cmp dword [ebp - 0x8d8], 0x2f9
jle 0x100304a4
jmp case.default.0x1002f74f
mov byte [0x100d372f], 1
jmp case.default.0x1002f74f
push 2
call fcn.1002f100
add esp, 4
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x38]
call fcn.10028450
mov byte [ebp - 4], 1
push 0x800
call fcn.10041575
add esp, 4
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0x8d8]
mov dword [ebp - 0x758], eax
mov ecx, dword [ebp - 0x758]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x230], 0x128
push 0
push 0x1f
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov dword [ebp - 0x234], eax
mov byte [ebp - 0x235], 1
lea eax, [ebp - 0x230]
push eax
mov ecx, dword [ebp - 0x234]
push ecx
call sub.KERNEL32.dll_Process32First
cmp eax, 1
jne 0x1002fa49
lea eax, [ebp - 0x230]
push eax
mov ecx, dword [ebp - 0x234]
push ecx
call sub.KERNEL32.dll_Process32Next
cmp eax, 1
jne 0x1002fa49
mov byte [ebp - 0x235], 1
mov dword [ebp - 0x340], 0
jmp 0x1002f8b5
mov eax, dword [ebp - 0x340]
add eax, 1
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x103
jg 0x1002f8dd
mov eax, dword [ebp - 0x340]
mov ecx, dword [ebp - 0x340]
mov dl, byte [ebp + ecx - 0x20c]
mov byte [ebp + eax - 0x33c], dl
jmp 0x1002f8a6
lea eax, [ebp - 0x33c]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x228]
push eax
call fcn.1002c9e0
add esp, 4
mov dword [ebp - 0x8d8], eax
mov ecx, dword [ebp - 0x8d8]
mov dword [ebp - 0x108], ecx
push 0x10082a8c
lea ecx, [ebp - 0x38]
call fcn.1002ac70
mov eax, dword [ebp - 0x344]
push eax
lea ecx, [ebp - 0x35c]
call fcn.10002220
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 2
lea eax, [ebp - 0x35c]
push eax
lea ecx, [ebp - 0x38]
call fcn.1002ac40
cmp dword [ebp - 0x108], 0
je 0x1002f9e9
push 0x400
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0xc8
mov eax, dword [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x104]
push ecx
call fcn.10060972
add esp, 0xc
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x374]
call fcn.10002220
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 3
push 0x100804d4
lea eax, [ebp - 0x374]
push eax
call fcn.100257b0
add esp, 8
mov byte [ebp - 0x8d5], al
movzx ecx, byte [ebp - 0x8d5]
test ecx, ecx
je 0x1002f9da
push 0x10082a90
lea ecx, [ebp - 0x38]
call fcn.1002ac70
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0x38]
call fcn.1002ac40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x374]
call fcn.10002360
lea ecx, [ebp - 0x38]
call fcn.10002f30
push eax
call fcn.1005c080
add esp, 4
cmp eax, 0x190
jbe 0x1002fa2d
lea ecx, [ebp - 0x38]
call fcn.10002f30
push eax
push 0
push 0x190
call fcn.10030a40
add esp, 0xc
push 0x100804d4
lea ecx, [ebp - 0x38]
call fcn.10029fc0
mov byte [ebp - 0x235], 0
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x35c]
call fcn.10002360
jmp 0x1002f877
movzx eax, byte [ebp - 0x235]
test eax, eax
je 0x1002fa6c
lea ecx, [ebp - 0x38]
call fcn.10002f30
push eax
push 0
push 0x190
call fcn.10030a40
add esp, 0xc
mov eax, dword [ebp - 0x234]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x38]
call fcn.10002f30
push eax
push 0x320
push 0x190
call fcn.10030a40
add esp, 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10002360
jmp case.default.0x1002f74f
push str.iphlpapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x38c], eax
push str.GetExtendedTcpTable
mov eax, dword [ebp - 0x38c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x378], eax
push 0
push 5
push 2
push 0
lea eax, [ebp - 0x384]
push eax
push 0
call dword [ebp - 0x378]
mov dword [ebp - 0x8d8], eax
mov ecx, dword [ebp - 0x8d8]
mov dword [ebp - 0x388], ecx
mov eax, dword [ebp - 0x384]
push eax
call fcn.1005f46d
add esp, 4
mov dword [ebp - 0x37c], eax
push 0
push 5
push 2
push 0
lea eax, [ebp - 0x384]
push eax
mov ecx, dword [ebp - 0x37c]
push ecx
call dword [ebp - 0x378]
mov dword [ebp - 0x8d8], eax
mov edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x388], edx
mov dword [ebp - 0x390], 0
jmp 0x1002fb61
mov eax, dword [ebp - 0x390]
add eax, 1
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x37c]
mov ecx, dword [ebp - 0x390]
cmp ecx, dword [eax]
jae 0x100300f3
imul eax, dword [ebp - 0x390], 0x18
mov ecx, dword [ebp - 0x37c]
lea edx, [ecx + eax + 4]
mov dword [ebp - 0x380], edx
mov eax, dword [ebp - 0x380]
mov ecx, dword [eax + 0x14]
push ecx
lea edx, [ebp - 0x3a8]
push edx
call fcn.1002d760
add esp, 8
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x380]
movzx ecx, word [eax + 0x10]
push ecx
call dword [sym.imp.WS2_32.dll_ntohs]
movzx edx, ax
push edx
lea eax, [ebp - 0x3c8]
push eax
call fcn.1003b3a0
add esp, 8
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x380]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x3ac], ecx
mov eax, dword [ebp - 0x380]
movzx ecx, word [eax + 8]
push ecx
call dword [sym.imp.WS2_32.dll_ntohs]
movzx edx, ax
push edx
lea eax, [ebp - 0x3e0]
push eax
call fcn.1003b3a0
add esp, 8
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x380]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x3b0], ecx
mov eax, dword [ebp - 0x3ac]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.10002220
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x3b0]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [ebp - 0x410]
call fcn.10002220
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x380]
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x428]
push edx
call fcn.1003b3e0
add esp, 8
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 9
movzx eax, byte [ebp - 0x761]
push eax
push 0x10082ab8
lea ecx, [ebp - 0x760]
call fcn.10024f10
mov dword [ebp - 0x8d8], eax
mov ecx, dword [ebp - 0x8d8]
call fcn.100368e0
mov dword [ebp - 0x8dc], eax
movzx ecx, byte [ebp - 0x769]
push ecx
push 0x10082abc
lea ecx, [ebp - 0x768]
call fcn.10025060
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x8e0]
call fcn.100367c0
mov dword [ebp - 0x8e4], eax
movzx edx, byte [ebp - 0x775]
push edx
push str.__L:
lea ecx, [ebp - 0x774]
call fcn.10024ad0
mov dword [ebp - 0x8e8], eax
mov ecx, dword [ebp - 0x8e8]
call fcn.10036a00
mov dword [ebp - 0x8ec], eax
movzx eax, byte [ebp - 0x77d]
push eax
push 0x10082abc
lea ecx, [ebp - 0x77c]
call fcn.10025010
mov dword [ebp - 0x8f0], eax
mov ecx, dword [ebp - 0x8f0]
call fcn.100367c0
mov dword [ebp - 0x8f4], eax
movzx ecx, byte [ebp - 0x789]
push ecx
push str.__R:
lea ecx, [ebp - 0x788]
call fcn.10024d00
mov dword [ebp - 0x8f8], eax
mov ecx, dword [ebp - 0x8f8]
call fcn.10036970
mov dword [ebp - 0x8fc], eax
movzx edx, byte [ebp - 0x791]
push edx
push 0x10082ad0
lea ecx, [ebp - 0x790]
call fcn.10024fa0
mov dword [ebp - 0x900], eax
mov ecx, dword [ebp - 0x900]
call fcn.10036850
mov dword [ebp - 0x904], eax
lea eax, [ebp - 0x428]
push eax
mov ecx, dword [ebp - 0x904]
push ecx
lea edx, [ebp - 0x7ac]
push edx
call fcn.100258a0
add esp, 0xc
mov dword [ebp - 0x908], eax
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x90c], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x8fc]
push ecx
mov edx, dword [ebp - 0x90c]
push edx
lea eax, [ebp - 0x7c4]
push eax
call fcn.10025850
add esp, 0xc
mov dword [ebp - 0x910], eax
mov ecx, dword [ebp - 0x910]
mov dword [ebp - 0x914], ecx
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x3f8]
push edx
mov eax, dword [ebp - 0x914]
push eax
lea ecx, [ebp - 0x7dc]
push ecx
call fcn.10025800
add esp, 0xc
mov dword [ebp - 0x918], eax
mov edx, dword [ebp - 0x918]
mov dword [ebp - 0x91c], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x8f4]
push eax
mov ecx, dword [ebp - 0x91c]
push ecx
lea edx, [ebp - 0x7f4]
push edx
call fcn.10025850
add esp, 0xc
mov dword [ebp - 0x920], eax
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0x924], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x3c8]
push ecx
mov edx, dword [ebp - 0x924]
push edx
lea eax, [ebp - 0x80c]
push eax
call fcn.10025800
add esp, 0xc
mov dword [ebp - 0x928], eax
mov ecx, dword [ebp - 0x928]
mov dword [ebp - 0x92c], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x8ec]
push edx
mov eax, dword [ebp - 0x92c]
push eax
lea ecx, [ebp - 0x824]
push ecx
call fcn.10025850
add esp, 0xc
mov dword [ebp - 0x930], eax
mov edx, dword [ebp - 0x930]
mov dword [ebp - 0x934], edx
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x410]
push eax
mov ecx, dword [ebp - 0x934]
push ecx
lea edx, [ebp - 0x83c]
push edx
call fcn.10025800
add esp, 0xc
mov dword [ebp - 0x938], eax
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0x93c], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x8e4]
push ecx
mov edx, dword [ebp - 0x93c]
push edx
lea eax, [ebp - 0x854]
push eax
call fcn.10025850
add esp, 0xc
mov dword [ebp - 0x940], eax
mov ecx, dword [ebp - 0x940]
mov dword [ebp - 0x944], ecx
mov byte [ebp - 4], 0x11
lea edx, [ebp - 0x3e0]
push edx
mov eax, dword [ebp - 0x944]
push eax
lea ecx, [ebp - 0x86c]
push ecx
call fcn.10025800
add esp, 0xc
mov dword [ebp - 0x948], eax
mov edx, dword [ebp - 0x948]
mov dword [ebp - 0x94c], edx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x8dc]
push eax
mov ecx, dword [ebp - 0x94c]
push ecx
lea edx, [ebp - 0x884]
push edx
call fcn.10025850
add esp, 0xc
mov dword [ebp - 0x950], eax
mov eax, dword [ebp - 0x950]
mov dword [ebp - 0x954], eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3a8]
push ecx
mov edx, dword [ebp - 0x954]
push edx
lea eax, [ebp - 0x440]
push eax
call fcn.10025800
add esp, 0xc
mov dword [ebp - 0x958], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x884]
call fcn.10002360
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x86c]
call fcn.10002360
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x854]
call fcn.10002360
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x83c]
call fcn.10002360
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x824]
call fcn.10002360
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x80c]
call fcn.10002360
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x7f4]
call fcn.10002360
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x7dc]
call fcn.10002360
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x7c4]
call fcn.10002360
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x7ac]
call fcn.10002360
lea ecx, [ebp - 0x440]
call fcn.10002f30
push eax
push 0
push 0x1fa
call fcn.10030a40
add esp, 0xc
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x440]
call fcn.10002360
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x428]
call fcn.10002360
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x410]
call fcn.10002360
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3f8]
call fcn.10002360
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3e0]
call fcn.10002360
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3c8]
call fcn.10002360
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3a8]
call fcn.10002360
jmp 0x1002fb52
push 0
push 0x320
push 0x1fa
call fcn.10030a40
add esp, 0xc
jmp case.default.0x1002f74f
cvtsi2ss xmm0, dword [0x10a8e6f0]
divss xmm0, dword [0x10082ed0]
movss dword [ebp - 0x444], xmm0
movzx eax, byte [0x100d3707]
test eax, eax
je 0x1003014e
push 4
push ecx
movss xmm0, dword [ebp - 0x444]
movss dword [esp], xmm0
push 0xcc7a78
call fcn.1002ef80
add esp, 0xc
jmp 0x1003016b
push 4
push ecx
movss xmm0, dword [ebp - 0x444]
movss dword [esp], xmm0
push 0xcc8a78
call fcn.1002ef80
add esp, 0xc
jmp case.default.0x1002f74f
mov eax, dword [0x10a8e6f0]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x44c], 0xc
mov eax, dword [ebp - 0x44c]
add eax, dword [ebp - 0x448]
push eax
mov ecx, dword [ebp - 0x44c]
push ecx
push 0x10a8e6e8
call fcn.10030840
add esp, 0xc
mov dword [ebp - 0x8d8], eax
mov edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x450], edx
mov eax, dword [ebp - 0x44c]
add eax, dword [ebp - 0x448]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
mov ecx, dword [eax + 0x10a8e6e8]
mov dword [ebp - 0x448], ecx
mov eax, dword [ebp - 0x44c]
add eax, 4
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
add eax, dword [ebp - 0x448]
push eax
mov ecx, dword [ebp - 0x44c]
push ecx
push 0x10a8e6e8
call fcn.10030840
add esp, 0xc
mov dword [ebp - 0x8d8], eax
mov edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x454], edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x888], esp
mov eax, dword [ebp - 0x450]
push eax
call fcn.10002220
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 0x1f
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x88c], esp
mov edx, dword [ebp - 0x454]
push edx
call fcn.10002220
mov byte [ebp - 4], 0
call fcn.10002680
add esp, 0x30
jmp case.default.0x1002f74f
mov eax, dword [0x10a8e6f0]
mov dword [ebp - 0x458], eax
mov eax, dword [0x10a8e6f4]
mov dword [ebp - 0x45c], eax
mov dword [ebp - 0x460], 0x10
mov eax, dword [ebp - 0x460]
add eax, dword [ebp - 0x45c]
push eax
mov ecx, dword [ebp - 0x460]
push ecx
push 0x10a8e6e8
call fcn.10030840
add esp, 0xc
mov dword [ebp - 0x8d8], eax
mov edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x464], edx
push 0x80
push 0
push 0x1009a020
call fcn.10058600
add esp, 0xc
mov eax, dword [ebp - 0x458]
push eax
mov ecx, dword [ebp - 0x464]
push ecx
push str._s__d
push 0x1009a020
call fcn.1003c470
add esp, 0x10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x890], esp
push 0x1009a020
call fcn.10002220
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 0x20
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x894], esp
push str.VALUE
call fcn.10002220
mov dword [ebp - 0x8dc], eax
mov byte [ebp - 4], 0x21
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x898], esp
push str.SOFTWAREWOW64
call fcn.10002220
push closesocket
mov byte [ebp - 4], 0
call fcn.10030f60
add esp, 0x4c
jmp case.default.0x1002f74f
cmp dword [ebp - 0x20], 0x2ee
jne 0x10030365
call fcn.1002bb70
mov eax, dword [0x10a8e6f0]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x46c], 0xc
mov dword [ebp - 0x470], 0
jmp 0x10030395
mov eax, dword [ebp - 0x470]
add eax, 1
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x468]
jge 0x1003049f
mov eax, dword [ebp - 0x46c]
cmp eax, dword [ebp - 0x18]
jle 0x100303b7
jmp 0x1003049f
mov eax, dword [ebp - 0x46c]
mov ecx, dword [eax + 0x10a8e6e8]
mov dword [ebp - 0x474], ecx
mov eax, dword [ebp - 0x46c]
add eax, 4
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
add eax, dword [ebp - 0x474]
push eax
mov ecx, dword [ebp - 0x46c]
push ecx
push 0x10a8e6e8
call fcn.10030840
add esp, 0xc
mov dword [ebp - 0x8d8], eax
mov edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x478], edx
mov eax, dword [ebp - 0x46c]
add eax, dword [ebp - 0x474]
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x478], 0
je 0x10030492
push 0x100804d4
mov eax, dword [ebp - 0x478]
push eax
call fcn.1005f320
add esp, 8
test eax, eax
je 0x10030492
push 0x10082af4
mov eax, dword [ebp - 0x478]
push eax
call fcn.1005f320
add esp, 8
test eax, eax
je 0x10030492
mov eax, dword [ebp - 0x478]
push eax
lea ecx, [ebp - 0x8b0]
call fcn.10002220
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x8b0]
push ecx
mov ecx, 0x10a8f724
call fcn.1003a430
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8b0]
call fcn.10002360
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10030386
jmp case.default.0x1002f74f
cmp dword [ebp - 0x20], 0x2f8
jne 0x100304b2
call fcn.1002bba0
mov eax, dword [0x10a8e6f0]
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x480], 0xc
mov dword [ebp - 0x484], 0
jmp 0x100304e2
mov eax, dword [ebp - 0x484]
add eax, 1
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
cmp eax, dword [ebp - 0x47c]
jge case.default.0x1002f74f
mov eax, dword [ebp - 0x480]
cmp eax, dword [ebp - 0x18]
jle 0x10030504
jmp case.default.0x1002f74f
mov eax, dword [ebp - 0x480]
mov ecx, dword [eax + 0x10a8e6e8]
mov dword [ebp - 0x488], ecx
mov eax, dword [ebp - 0x480]
add eax, 4
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x480]
add eax, dword [ebp - 0x488]
push eax
mov ecx, dword [ebp - 0x480]
push ecx
push 0x10a8e6e8
call fcn.10030840
add esp, 0xc
mov dword [ebp - 0x8d8], eax
mov edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x48c], edx
mov eax, dword [ebp - 0x480]
add eax, dword [ebp - 0x488]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x8c8]
call fcn.10002220
mov dword [ebp - 0x8d8], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x8c8]
push ecx
mov ecx, 0x10a8f700
call fcn.1003a430
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8c8]
call fcn.10002360
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100304d3
push 0x10a8e6e8
call fcn.1005f059
add esp, 4
jmp 0x1003066d
mov dword [ebp - 4], 0xffffffff
jmp 0x1003067f
jmp 0x1003068a
jmp 0x10030693
mov dword [ebp - 0x8d4], 0xfa
lea eax, [ebp - 0x8d4]
push eax
lea ecx, [ebp - 0x8d0]
call fcn.10025170
push eax
call fcn.10027870
add esp, 4
jmp 0x1002f67c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1004084f
mov esp, ebp
pop ebp
ret