Function at 0x100231d0
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Delete file
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100292f4
mov eax, dword fs:[0]
push eax
mov eax, 0x1544
call fcn.10018190
mov eax, dword [0x10032118]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1490], ecx
mov eax, dword [ebp - 0x1490]
add eax, 8
push eax
lea ecx, [ebp - 0xd54]
call fcn.10003dd0
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x1490]
add ecx, 0x64
push ecx
lea ecx, [ebp - 0xd54]
call fcn.10003e70
mov word [ebp - 0x474], 0
push 0x206
push 0
lea edx, [ebp - 0x472]
push edx
call fcn.1000c950
add esp, 0xc
mov word [ebp - 0x8ac], 0
push 0x206
push 0
lea eax, [ebp - 0x8aa]
push eax
call fcn.1000c950
add esp, 0xc
lea ecx, [ebp - 0xb30]
call fcn.10003d60
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x1490]
add ecx, 0x24
push ecx
lea ecx, [ebp - 0xb30]
call fcn.10003e30
mov byte [ebp - 0x905], 0
lea ecx, [ebp - 0xb30]
call fcn.10006880
movzx edx, al
test edx, edx
je 0x100233a3
lea ecx, [ebp - 0xf60]
call fcn.10005b90
mov byte [ebp - 4], 2
lea eax, [ebp - 0xf60]
push eax
mov ecx, dword [ebp - 0x1490]
call fcn.100223f0
test eax, eax
je 0x100232fe
lea ecx, [ebp - 0xf60]
call fcn.100057e0
push eax
lea ecx, [ebp - 0xb30]
call fcn.10003e50
mov byte [ebp - 0x905], 1
jmp 0x10023394
mov word [ebp - 0x1174], 0
push 0x208
push 0
lea ecx, [ebp - 0x1172]
push ecx
call fcn.1000c950
add esp, 0xc
push 0x104
lea edx, [ebp - 0x1174]
push edx
push str._ProgramFiles_
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea ecx, [ebp - 0x1178]
call fcn.10005b90
mov byte [ebp - 4], 3
lea eax, [ebp - 0x1174]
push eax
push 0x1002df80
lea ecx, [ebp - 0x1178]
push ecx
call fcn.100057b0
add esp, 0xc
push str.BaiduBaiduAn
lea ecx, [ebp - 0x1178]
call fcn.10006f10
lea ecx, [ebp - 0x1178]
call fcn.100057e0
push eax
lea ecx, [ebp - 0xb30]
call fcn.10003e50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1178]
call fcn.10005bd0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf60]
call fcn.10005bd0
lea ecx, [ebp - 0xd38]
call fcn.10005b90
mov byte [ebp - 4], 4
lea edx, [ebp - 0xd38]
push edx
call fcn.10026110
add esp, 4
lea ecx, [ebp - 0xd38]
call fcn.10006840
push eax
lea ecx, [ebp - 0x8e4]
call fcn.10003d90
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6a0]
call fcn.10005b90
mov byte [ebp - 4], 6
lea eax, [ebp - 0x6a0]
push eax
mov ecx, dword [ebp - 0x1490]
call fcn.100223f0
lea ecx, [ebp - 0x6a0]
call fcn.10006840
push eax
lea ecx, [ebp - 0x900]
call fcn.10003d90
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8c8]
call fcn.10003d60
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x8c8]
push ecx
call fcn.100263a0
add esp, 4
lea edx, [ebp - 0x8c8]
push edx
lea ecx, [ebp - 0x2c]
call fcn.10003dd0
mov byte [ebp - 4], 9
mov dword [0x10034650], 3
movzx eax, byte [ebp - 0x905]
neg eax
sbb eax, eax
neg eax
mov dword [0x10034654], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x100345e4]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x10034658], eax
mov ecx, 0x10034648
call fcn.10027990
test eax, eax
je 0x10023497
mov ecx, 0x10034648
call fcn.100275f0
lea ecx, [ebp - 0xb30]
call fcn.10004010
push eax
mov edx, dword [0x100345d4]
push edx
push str._supplyid_d__installmode2__startmain1__silent1___D_s
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0xb30]
call fcn.10004010
push eax
mov ecx, dword [0x100345d4]
push ecx
push str._supplyid_d__installmode2__startmain1__S___D_s
lea edx, [ebp - 0x8ac]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov word [ebp - 0xf5c], 0
push 0x206
push 0
lea eax, [ebp - 0xf5a]
push eax
call fcn.1000c950
add esp, 0xc
mov ecx, 0x10034610
call fcn.10004010
push eax
push 0x104
lea ecx, [ebp - 0xf5c]
push ecx
call fcn.1000d7f9
add esp, 0xc
mov edx, dword [str.2.3.0.2224]
mov dword [ebp - 0x69c], edx
mov eax, dword [0x1002e08c]
mov dword [ebp - 0x698], eax
mov ecx, dword [0x1002e090]
mov dword [ebp - 0x694], ecx
mov edx, dword [0x1002e094]
mov dword [ebp - 0x690], edx
mov eax, dword [0x1002e098]
mov dword [ebp - 0x68c], eax
mov cx, word [0x1002e09c]
mov word [ebp - 0x688], cx
push 0x1f2
push 0
lea edx, [ebp - 0x686]
push edx
call fcn.1000c950
add esp, 0xc
mov word [ebp - 0xb14], 0
push 0x206
push 0
lea eax, [ebp - 0xb12]
push eax
call fcn.1000c950
add esp, 0xc
push str._toolsi.7z
mov ecx, dword [ebp - 0x1490]
add ecx, 8
push ecx
lea edx, [ebp - 0x490]
push edx
call fcn.10006b60
add esp, 0xc
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x490]
call fcn.10004010
push eax
push 0x104
lea eax, [ebp - 0xb14]
push eax
call fcn.1000d7f9
add esp, 0xc
lea ecx, [ebp - 0xb30]
push ecx
lea ecx, [ebp - 0x48]
call fcn.10003dd0
mov byte [ebp - 4], 0xb
push 0x1002e0b8
lea ecx, [ebp - 0x48]
call fcn.10003e90
mov word [ebp - 0x26c], 0
push 0x206
push 0
lea edx, [ebp - 0x26a]
push edx
call fcn.1000c950
add esp, 0xc
lea ecx, [ebp - 0x48]
call fcn.10004010
push eax
push 0x104
lea eax, [ebp - 0x26c]
push eax
call fcn.1000d7f9
add esp, 0xc
mov dword [ebp - 0x90c], 0
lea ecx, [ebp - 0xd54]
call fcn.10004010
push eax
mov ecx, dword [ebp - 0x1490]
call fcn.10022770
mov word [ebp - 0xd34], 0
push 0x1fe
push 0
lea ecx, [ebp - 0xd32]
push ecx
call fcn.1000c950
add esp, 0xc
lea edx, [ebp - 0xd34]
push edx
lea ecx, [ebp - 0xd54]
call fcn.10004010
push eax
call fcn.100287a0
add esp, 8
lea ecx, [ebp - 0x904]
call fcn.10005b90
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0xd34]
push eax
push 0x1002e0bc
lea ecx, [ebp - 0x904]
push ecx
call fcn.100057b0
add esp, 0xc
lea ecx, [ebp - 0x904]
call fcn.10006840
push eax
lea ecx, [ebp - 0x64]
call fcn.10003d90
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x64]
call fcn.10004010
push eax
mov ecx, dword [ebp - 0x1490]
add ecx, 0x80
call fcn.100064b0
movzx edx, al
test edx, edx
je 0x10024009
lea eax, [ebp - 0x474]
push eax
mov ecx, dword [ebp - 0x1490]
add ecx, 0x80
call fcn.100064f0
movzx ecx, al
test ecx, ecx
je 0x10023759
lea edx, [ebp - 0xb14]
push edx
lea eax, [ebp - 0xf5c]
push eax
lea ecx, [ebp - 0x26c]
push ecx
lea edx, [ebp - 0x69c]
push edx
lea ecx, [ebp - 0xd54]
call fcn.10004010
push eax
call fcn.10025c20
add esp, 0x14
mov dword [ebp - 0x90c], eax
jmp 0x1002378f
lea eax, [ebp - 0xb14]
push eax
lea ecx, [ebp - 0xf5c]
push ecx
lea edx, [ebp - 0x26c]
push edx
lea eax, [ebp - 0x69c]
push eax
lea ecx, [ebp - 0xd54]
call fcn.10004010
push eax
call fcn.10025c20
add esp, 0x14
mov dword [ebp - 0x90c], eax
lea ecx, [ebp - 0xd38]
push ecx
call fcn.10026110
add esp, 4
lea ecx, [ebp - 0xd38]
call fcn.10006840
push eax
lea ecx, [ebp - 0x8e4]
call fcn.10003e50
lea edx, [ebp - 0x6a0]
push edx
mov ecx, dword [ebp - 0x1490]
call fcn.100223f0
lea ecx, [ebp - 0x6a0]
call fcn.10006840
push eax
lea ecx, [ebp - 0x900]
call fcn.10003e50
lea eax, [ebp - 0x8c8]
push eax
call fcn.100263a0
add esp, 4
lea ecx, [ebp - 0x8c8]
push ecx
lea ecx, [ebp - 0x1194]
call fcn.10003dd0
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x90c], 0
je 0x10023fe2
cmp dword [0x100345d0], 1
jne 0x10023fe2
mov dword [ebp - 0x11d4], 0
mov dword [ebp - 0x11b4], 0xa
lea ecx, [ebp - 0x11d0]
call fcn.10003d60
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x11f0]
call fcn.10003d60
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x11b0]
call fcn.10003d60
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x11d4], 0
jne 0x10023fb5
push 0x1002e0c4
mov ecx, dword [ebp - 0x1490]
call fcn.10021f80
mov edx, dword [0x1002edcc]
push edx
push 0x5c
lea ecx, [ebp - 0x900]
call fcn.100068f0
mov esi, eax
lea ecx, [ebp - 0x900]
call fcn.10002fe0
sub eax, 1
cmp esi, eax
jne 0x10023a28
lea eax, [ebp - 0x1194]
push eax
lea ecx, [ebp - 0x900]
push ecx
lea edx, [ebp - 0x1268]
push edx
call fcn.10006bf0
add esp, 0xc
mov dword [ebp - 0x1494], eax
mov eax, dword [ebp - 0x1494]
mov dword [ebp - 0x1498], eax
mov byte [ebp - 4], 0x12
push 0x1002e0f0
mov ecx, dword [ebp - 0x1498]
push ecx
lea edx, [ebp - 0x1284]
push edx
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x149c], eax
mov eax, dword [ebp - 0x149c]
mov dword [ebp - 0x14a0], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x14a0]
push ecx
lea ecx, [ebp - 0x11f0]
call fcn.10003e30
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1284]
call fcn.10003e10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1268]
call fcn.10003e10
lea edx, [ebp - 0x1194]
push edx
lea eax, [ebp - 0x900]
push eax
lea ecx, [ebp - 0x12a0]
push ecx
call fcn.10006bf0
add esp, 0xc
mov dword [ebp - 0x14a4], eax
mov edx, dword [ebp - 0x14a4]
mov dword [ebp - 0x14a8], edx
mov byte [ebp - 4], 0x14
push str.pluginsBrowserProtectBDABrowserProtect.exe
mov eax, dword [ebp - 0x14a8]
push eax
lea ecx, [ebp - 0x12bc]
push ecx
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x14ac], eax
mov edx, dword [ebp - 0x14ac]
mov dword [ebp - 0x14b0], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x14b0]
push eax
lea ecx, [ebp - 0x11b0]
call fcn.10003e30
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x12bc]
call fcn.10003e10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x12a0]
call fcn.10003e10
lea ecx, [ebp - 0x1194]
push ecx
lea edx, [ebp - 0x900]
push edx
lea eax, [ebp - 0x12d8]
push eax
call fcn.10006bf0
add esp, 0xc
mov dword [ebp - 0x14b4], eax
mov ecx, dword [ebp - 0x14b4]
mov dword [ebp - 0x14b8], ecx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x14b8]
push edx
lea ecx, [ebp - 0x11d0]
call fcn.10003e30
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x12d8]
call fcn.10003e10
jmp 0x10023c64
push 0x1002e1bc
lea eax, [ebp - 0x900]
push eax
lea ecx, [ebp - 0x12f4]
push ecx
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x14bc], eax
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0x14c0], edx
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x1194]
push eax
mov ecx, dword [ebp - 0x14c0]
push ecx
lea edx, [ebp - 0x1310]
push edx
call fcn.10006bf0
add esp, 0xc
mov dword [ebp - 0x14c4], eax
mov eax, dword [ebp - 0x14c4]
mov dword [ebp - 0x14c8], eax
mov byte [ebp - 4], 0x18
push str.BDABrowserProtect_v3.3.exe
mov ecx, dword [ebp - 0x14c8]
push ecx
lea edx, [ebp - 0x132c]
push edx
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x14cc], eax
mov eax, dword [ebp - 0x14cc]
mov dword [ebp - 0x14d0], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x14d0]
push ecx
lea ecx, [ebp - 0x11f0]
call fcn.10003e30
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x132c]
call fcn.10003e10
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1310]
call fcn.10003e10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x12f4]
call fcn.10003e10
push 0x1002e21c
lea edx, [ebp - 0x900]
push edx
lea eax, [ebp - 0x1348]
push eax
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x14d4], eax
mov ecx, dword [ebp - 0x14d4]
mov dword [ebp - 0x14d8], ecx
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x1194]
push edx
mov eax, dword [ebp - 0x14d8]
push eax
lea ecx, [ebp - 0x1364]
push ecx
call fcn.10006bf0
add esp, 0xc
mov dword [ebp - 0x14dc], eax
mov edx, dword [ebp - 0x14dc]
mov dword [ebp - 0x14e0], edx
mov byte [ebp - 4], 0x1b
push 0x1002e1c0
mov eax, dword [ebp - 0x14e0]
push eax
lea ecx, [ebp - 0x1380]
push ecx
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x14e4], eax
mov edx, dword [ebp - 0x14e4]
mov dword [ebp - 0x14e8], edx
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0x14e8]
push eax
lea ecx, [ebp - 0x11b0]
call fcn.10003e30
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1380]
call fcn.10003e10
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x1364]
call fcn.10003e10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1348]
call fcn.10003e10
push 0x1002e220
lea ecx, [ebp - 0x900]
push ecx
lea edx, [ebp - 0x139c]
push edx
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x14ec], eax
mov eax, dword [ebp - 0x14ec]
mov dword [ebp - 0x14f0], eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1194]
push ecx
mov edx, dword [ebp - 0x14f0]
push edx
lea eax, [ebp - 0x13b8]
push eax
call fcn.10006bf0
add esp, 0xc
mov dword [ebp - 0x14f4], eax
mov ecx, dword [ebp - 0x14f4]
mov dword [ebp - 0x14f8], ecx
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x14f8]
push edx
lea ecx, [ebp - 0x11d0]
call fcn.10003e30
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x13b8]
call fcn.10003e10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x139c]
call fcn.10003e10
lea eax, [ebp - 0x8e4]
push eax
push str.__supplyid
lea ecx, [ebp - 0x13d4]
push ecx
call fcn.10006c80
add esp, 0xc
mov dword [ebp - 0x14fc], eax
mov edx, dword [ebp - 0x14fc]
mov dword [ebp - 0x1500], edx
mov byte [ebp - 4], 0x1f
push 0x1002e258
mov eax, dword [ebp - 0x1500]
push eax
lea ecx, [ebp - 0x13f0]
push ecx
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x1504], eax
mov edx, dword [ebp - 0x1504]
mov dword [ebp - 0x1508], edx
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x900]
push eax
mov ecx, dword [ebp - 0x1508]
push ecx
lea edx, [ebp - 0x140c]
push edx
call fcn.10006bf0
add esp, 0xc
mov dword [ebp - 0x150c], eax
mov eax, dword [ebp - 0x150c]
mov dword [ebp - 0x1510], eax
mov byte [ebp - 4], 0x21
push 0x1002e254
mov ecx, dword [ebp - 0x1510]
push ecx
lea edx, [ebp - 0x1428]
push edx
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x1514], eax
mov eax, dword [ebp - 0x1514]
mov dword [ebp - 0x1518], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1194]
push ecx
mov edx, dword [ebp - 0x1518]
push edx
lea eax, [ebp - 0x1444]
push eax
call fcn.10006bf0
add esp, 0xc
mov dword [ebp - 0x151c], eax
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1520], ecx
mov byte [ebp - 4], 0x23
push 0x1002e224
mov edx, dword [ebp - 0x1520]
push edx
lea eax, [ebp - 0x120c]
push eax
call fcn.10006b60
add esp, 0xc
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1444]
call fcn.10003e10
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1428]
call fcn.10003e10
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x140c]
call fcn.10003e10
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x13f0]
call fcn.10003e10
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x13d4]
call fcn.10003e10
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1448], esp
lea edx, [ebp - 0x120c]
push edx
call fcn.10003dd0
mov dword [ebp - 0x1524], eax
mov eax, dword [ebp - 0x1524]
mov dword [ebp - 0x1528], eax
mov byte [ebp - 4], 0x2a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x144c], esp
lea edx, [ebp - 0x11f0]
push edx
call fcn.10003dd0
mov dword [ebp - 0x152c], eax
mov byte [ebp - 4], 0x29
call fcn.100222a0
add esp, 0x38
mov dword [ebp - 0x1530], eax
mov eax, dword [ebp - 0x1530]
mov dword [ebp - 0x11d4], eax
cmp dword [ebp - 0x11d4], 0
je 0x10023f7e
push str.BDABrowserProtect.exe
mov ecx, dword [ebp - 0x1490]
call fcn.10021f80
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x11f0]
call fcn.10004010
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1210], eax
push 0x1003462c
push str.___lockpage
lea ecx, [ebp - 0x1468]
push ecx
call fcn.10006c80
add esp, 0xc
mov dword [ebp - 0x1534], eax
mov edx, dword [ebp - 0x1534]
mov dword [ebp - 0x1538], edx
mov byte [ebp - 4], 0x2b
push str.___exit1___lockbrowser
mov eax, dword [ebp - 0x1538]
push eax
lea ecx, [ebp - 0x1484]
push ecx
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x153c], eax
mov edx, dword [ebp - 0x153c]
mov dword [ebp - 0x1540], edx
mov byte [ebp - 4], 0x2c
push 0x10034734
mov eax, dword [ebp - 0x1540]
push eax
lea ecx, [ebp - 0x122c]
push ecx
call fcn.10006bf0
add esp, 0xc
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1484]
call fcn.10003e10
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1468]
call fcn.10003e10
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1488], esp
lea edx, [ebp - 0x122c]
push edx
call fcn.10003dd0
mov dword [ebp - 0x1544], eax
mov eax, dword [ebp - 0x1544]
mov dword [ebp - 0x1548], eax
mov byte [ebp - 4], 0x30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x148c], esp
lea edx, [ebp - 0x11b0]
push edx
call fcn.10003dd0
mov dword [ebp - 0x154c], eax
mov byte [ebp - 4], 0x2f
call fcn.100222a0
add esp, 0x38
mov dword [ebp - 0x1550], eax
mov eax, dword [ebp - 0x1550]
mov dword [ebp - 0x11d4], eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x122c]
call fcn.10003e10
mov ecx, dword [ebp - 0x11b4]
mov edx, dword [ebp - 0x11b4]
sub edx, 1
mov dword [ebp - 0x11b4], edx
test ecx, ecx
jge 0x10023fa1
mov dword [ebp - 0x11d4], 1
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x120c]
call fcn.10003e10
jmp 0x1002385e
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x11b0]
call fcn.10003e10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x11f0]
call fcn.10003e10
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x11d0]
call fcn.10003e10
push 0x2710
mov ecx, dword [ebp - 0x1490]
add ecx, 0x80
call fcn.100065a0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1194]
call fcn.10003e10
jmp 0x1002403f
lea eax, [ebp - 0xb14]
push eax
lea ecx, [ebp - 0xf5c]
push ecx
lea edx, [ebp - 0x26c]
push edx
lea eax, [ebp - 0x69c]
push eax
lea ecx, [ebp - 0xd54]
call fcn.10004010
push eax
call fcn.10025c20
add esp, 0x14
mov dword [ebp - 0x90c], eax
cmp dword [ebp - 0x90c], 0
jne 0x10024093
mov dword [0x10034650], 4
mov dword [0x10034654], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x100345e4]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x10034658], eax
mov ecx, 0x10034648
call fcn.10027990
test eax, eax
je 0x1002408e
mov ecx, 0x10034648
call fcn.100275f0
jmp 0x10024172
lea edx, [ebp - 0xd38]
push edx
call fcn.10026110
add esp, 4
lea ecx, [ebp - 0x124c]
call fcn.10005b90
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x124c]
push eax
mov ecx, dword [ebp - 0x1490]
call fcn.100223f0
lea ecx, [ebp - 0xd38]
call fcn.10006840
push eax
lea ecx, [ebp - 0x1248]
call fcn.10003d90
mov byte [ebp - 4], 0x32
mov dword [0x10034650], 4
push 0x10034610
lea ecx, [ebp - 0x1248]
push ecx
call fcn.10006d10
add esp, 8
movzx edx, al
neg edx
sbb edx, edx
add edx, 1
mov dword [0x10034654], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x100345e4]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x10034658], eax
lea ecx, [ebp - 0x124c]
call fcn.10006840
push eax
mov ecx, 0x10034678
call fcn.10003e50
mov ecx, 0x10034648
call fcn.10027990
test eax, eax
je 0x10024154
mov ecx, 0x10034648
call fcn.100275f0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1248]
call fcn.10003e10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x124c]
call fcn.10005bd0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x64]
call fcn.10003e10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x904]
call fcn.10005bd0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x48]
call fcn.10003e10
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x490]
call fcn.10003e10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2c]
call fcn.10003e10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8c8]
call fcn.10003e10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x900]
call fcn.10003e10
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6a0]
call fcn.10005bd0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8e4]
call fcn.10003e10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd38]
call fcn.10005bd0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb30]
call fcn.10003e10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd54]
call fcn.10003e10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000c2ef
mov esp, ebp
pop ebp
ret 4