Function at 0x1004fd4f
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x470
push esi
push edi
mov dword [ebp - 0x10], 0x6512
mov dword [ebp - 0xe4], 0xc25b
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x368], 1
mov dword [ebp - 0x364], 1
mov dword [ebp - 0x360], 1
mov dword [ebp - 0x60], 0x73ee7637
mov dword [ebp - 0x58], 0xc7d24b5e
mov dword [ebp - 0x264], 0xbe360de5
mov dword [ebp - 0xa4], 0
jmp 0x1004fdc4
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x1004fde0
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x10c], 0xbe56890c
jmp 0x1004fdb7
push 7
pop eax
test eax, eax
je 0x1004fe5e
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x260], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x260]
mov dword [ebp + eax - 0x10c], ecx
cmp dword [ebp - 0x260], 0
je 0x1004fe2b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10c], 0
je 0x1004fe2b
mov dword [ebp - 0xdc], 1
jmp 0x1004fe32
and dword [ebp - 0xdc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xdc]
mov dword [ebp + eax - 0x36c], ecx
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0xdc]
test eax, eax
je 0x1004fe5e
mov dword [ebp - 0x2b4], 1
jmp 0x1004fe65
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x2b4]
jg 0x1004fe7c
mov dword [ebp - 0x2c8], 1
jmp 0x1004fe83
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jne 0x1004fea4
mov eax, 0x4c92
test eax, eax
jne 0x1004fea4
and dword [ebp - 0x2c4], 0
jmp 0x1004feae
mov dword [ebp - 0x2c4], 1
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x2c4]
cmp eax, 0x41145714
jg 0x1004fecb
mov dword [ebp - 0x25c], 1
jmp 0x1004fed2
and dword [ebp - 0x25c], 0
imul eax, dword [ebp - 0x25c], 0xffff
test eax, eax
jne 0x1004fef2
mov eax, 0xffff
test eax, eax
jne 0x1004fef2
and dword [ebp - 0x144], 0
jmp 0x1004fefc
mov dword [ebp - 0x144], 1
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0x144]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x264], eax
jg 0x1004ff54
mov dword [ebp - 0x58], 3
jmp 0x1004ff33
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffe9
je 0x1004ff4f
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2d4], 0
jmp 0x1004ff2c
jmp 0x10050100
mov dword [ebp - 0x104], 0x2a93
mov dword [ebp - 0x20], 0
jmp 0x1004ff6e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1004ff84
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x380], 0xffffffff
jmp 0x1004ff67
mov dword [ebp - 0x20], 0
jmp 0x1004ff94
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1004ffaa
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x314], 0x95cc9e52
jmp 0x1004ff8d
mov dword [ebp - 0x60], 0
jmp 0x1004ffba
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 8
je 0x1004ffe9
mov dword [ebp - 0x10], 0
jmp 0x1004ffd0
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x1004ffe7
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x10c], 0
je 0x1004ffe5
jmp 0x1004ffe7
jmp 0x1004ffc9
jmp 0x1004ffb3
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x380]
cmp dword [ebp - 0x104], eax
je 0x10050013
mov dword [ebp - 0xec], 1
jmp 0x1005001a
and dword [ebp - 0xec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xec]
mov dword [ebp + eax - 0x314], ecx
cmp dword [ebp - 0xec], 0xd33d73c1
ja 0x10050045
mov dword [ebp - 0x14c], 1
jmp 0x1005004c
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0x982f
jge 0x10050064
mov dword [ebp - 0x26c], 1
jmp 0x1005006b
and dword [ebp - 0x26c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x380]
add eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x10]
je 0x1005008f
mov dword [ebp - 0x154], 1
jmp 0x10050096
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
sub eax, 0x7fb1
cmp eax, dword [ebp - 0x104]
jle 0x100500c2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x380], 0
jne 0x100500c2
and dword [ebp - 0x274], 0
jmp 0x100500cc
mov dword [ebp - 0x274], 1
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x274], eax
jle 0x100500e6
mov dword [ebp - 0x15c], 1
jmp 0x100500ed
and dword [ebp - 0x15c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x15c]
mov dword [ebp + eax - 0x36c], ecx
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10050120
push 0
push 0xf24
push 0
push 0x2624
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
mov dword [ebp - 0x3d8], 0xbca63185
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x1005013e
push 0
call dword [sym.imp.USER32.dll_RegisterClassW]
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x10050152
push 0
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0xb8], 0xb7c7ce53
mov dword [ebp - 0x74], 0
jmp 0x1005016c
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x10050182
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x43c], 3
jmp 0x10050165
mov dword [ebp - 0xb8], 2
jmp 0x1005019b
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x10050208
mov dword [ebp - 0x7c], 0x4dd03248
mov dword [ebp - 0x7c], 0
jmp 0x100501bb
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jg 0x10050206
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x100501e9
push 0x1846
push 0xe5b
push 0x1efa
push 0x2404
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x10050204
push 0xd14
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
jmp 0x100501b4
jmp 0x1005018e
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x1005021c
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x5c], 0xfffffffc
mov dword [ebp - 0x84], 0
jmp 0x10050243
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1005025f
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xf4], 5
jmp 0x10050236
mov dword [ebp - 0x5c], 0
jmp 0x1005026f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x10050379
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0xc], 0
jmp 0x10050290
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jg 0x10050315
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0xf4], 0
je 0x100502b8
cmp dword [ebp - 0x5c], 0xed3
jne 0x100502b8
mov dword [ebp - 0x27c], 1
jmp 0x100502bf
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0xc], 0
jge 0x100502d1
mov dword [ebp - 0x164], 1
jmp 0x100502d8
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x27c]
sub eax, dword [ebp - 0x164]
cmp eax, 2
jne 0x100502f5
mov dword [ebp - 0x284], 1
jmp 0x100502fc
and dword [ebp - 0x284], 0
imul eax, dword [ebp - 0x284], 0x1da6
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0xf4], eax
jmp 0x10050289
mov dword [ebp - 0xc], 0
jmp 0x10050325
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x10050374
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x6c], 0
jmp 0x10050342
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x10050372
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x10050370
push 0x8ec
push 0x2535
push 0x187f
push 0x453
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
jmp 0x1005033b
jmp 0x1005031e
jmp 0x10050268
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c]
mov dword [ebp + eax - 0xf4], ecx
mov dword [ebp - 0x88], 0
jmp 0x100503a2
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x100503be
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x11c], 0x56834504
jmp 0x10050395
mov dword [ebp - 0x28], 1
jmp 0x100503ce
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x100509ab
mov dword [ebp - 0x44], 0xfffffff7
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x2f4], 0x35ca4204
mov dword [ebp - 0x308], 0x3f17e2f9
mov dword [ebp - 0x324], 1
mov dword [ebp - 0xfc], 0x31f145ba
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0x248], 0x66c4a87f
mov dword [ebp - 0x174], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x1005043f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10050455
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x410], 0xa6847dfa
jmp 0x10050438
mov dword [ebp - 0x24], 0
jmp 0x10050465
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1005047b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x35c], 0x448112de
jmp 0x1005045e
mov dword [ebp - 0x44], 2
jmp 0x1005048b
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10050645
mov dword [ebp - 0x38c], 0x41637c1d
mov dword [ebp - 0x394], 1
mov dword [ebp - 0x3cc], 0x512a30a
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x114], 0x780f
mov dword [ebp - 0x18], 0
jmp 0x100504d7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x100504ed
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x31c], 0xd9b9
jmp 0x100504d0
mov dword [ebp - 0x18], 0
jmp 0x100504fd
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10050513
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x454], 0xe22401db
jmp 0x100504f6
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x58bf
jle 0x10050538
mov dword [ebp - 0x184], 1
jmp 0x1005053f
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x410]
add eax, 5
cmp eax, 0xfffffffc
ja 0x1005055d
mov dword [ebp - 0x16c], 1
jmp 0x10050564
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x16c], eax
jge 0x1005057b
mov dword [ebp - 0x28c], 1
jmp 0x10050582
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x28c], eax
jge 0x1005059c
mov dword [ebp - 0x294], 1
jmp 0x100505a3
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x294], eax
jg 0x100505bd
mov dword [ebp - 0x17c], 1
jmp 0x100505c4
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 8
je 0x100505d9
mov dword [ebp - 0x29c], 1
jmp 0x100505e0
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x184], eax
jg 0x10050600
mov dword [ebp - 0x2a4], 1
jmp 0x10050607
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
add eax, 0x74bf90ed
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x31c]
jge 0x1005062d
mov dword [ebp - 0x2ac], 1
jmp 0x10050634
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0xfc], eax
jmp 0x10050484
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x190], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x190]
mov dword [ebp + eax - 0x35c], ecx
cmp dword [ebp - 0x190], 0
je 0x100507ee
mov dword [ebp - 0x2a8], 1
mov dword [ebp - 0x32c], 0
cmp dword [ebp - 0xfc], 0
jge 0x1005069a
mov dword [ebp - 0xe0], 1
jmp 0x100506a1
and dword [ebp - 0xe0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe0]
mov dword [ebp + eax - 0x35c], ecx
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0xe0], eax
jl 0x100506cb
mov dword [ebp - 0x280], 1
jmp 0x100506d2
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x280], eax
jle 0x100506ec
mov dword [ebp - 0x198], 1
jmp 0x100506f3
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x198]
jl 0x1005070d
mov dword [ebp - 0x238], 1
jmp 0x10050714
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 4
jle 0x10050729
mov dword [ebp - 0x1a0], 1
jmp 0x10050730
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x2a8], 0xa839
jle 0x10050754
mov dword [ebp - 0x1a8], 1
jmp 0x1005075b
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0x1552b9cb
jl 0x10050773
mov dword [ebp - 0x240], 1
jmp 0x1005077a
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x240], eax
jl 0x10050794
mov dword [ebp - 0x1b0], 1
jmp 0x1005079b
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0xfd1a6840
ja 0x100507b3
mov dword [ebp - 0x288], 1
jmp 0x100507ba
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x288], eax
jle 0x100507d4
mov dword [ebp - 0x1b8], 1
jmp 0x100507db
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
neg eax
mov dword [ebp - 0x308], eax
jmp 0x100508a3
mov dword [ebp - 0x64], 0xea27
mov dword [ebp - 0x2e4], 0xbb69233
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x64], 8
je 0x10050820
cmp dword [ebp - 0x248], 0
jne 0x10050820
and dword [ebp - 0x1c0], 0
jmp 0x1005082a
mov dword [ebp - 0x1c0], 1
cmp dword [ebp - 0x1c0], 0
jle 0x1005083f
mov dword [ebp - 0x30c], 1
jmp 0x10050846
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0xe8], eax
jle 0x10050872
mov dword [ebp - 0x2bc], 1
jmp 0x10050879
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x2bc], eax
je 0x10050890
mov dword [ebp - 0x1c8], 1
jmp 0x10050897
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x11c]
mov dword [ebp - 0x3f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x11c]
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ebp + ecx*4 - 0x11c]
jle 0x100508e6
mov dword [ebp - 0x250], 1
jmp 0x100508ed
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x28]
mov ecx, 0x526d2e85
sub ecx, dword [ebp + eax*4 - 0x11c]
sub ecx, dword [ebp - 0x250]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x11c], ecx
mov byte [ebp - 0x4f], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x8c], 0
jmp 0x10050933
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x1005094f
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x470], 0
jmp 0x10050926
mov dword [ebp - 0xc0], 0
jmp 0x10050968
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jg 0x10050999
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x10050983
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x10050997
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
jmp 0x1005095b
push 0
lea eax, [ebp - 0x4f]
push eax
call fcn.1004e1ae
pop ecx
pop ecx
jmp 0x100503c7
mov dword [ebp - 4], 0xfffffffa
mov dword [ebp - 0x290], 9
mov dword [ebp - 0xc8], 0xebd004dd
mov dword [ebp - 0x2f0], 0xfffffffb
mov dword [ebp - 0x94], 0
jmp 0x100509e9
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10050a05
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x134], 0x624039b6
jmp 0x100509dc
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x10050a19
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 4], 0
jmp 0x10050a29
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x10050c70
mov dword [ebp - 0x9c], 0xd0f065f4
mov dword [ebp - 0xf0], 0xcd17cd95
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x134]
inc eax
inc eax
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x134], ecx
or eax, 0xffffffff
sub eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
je 0x10050b38
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x134]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x134], 0
jg 0x10050aba
mov dword [ebp - 0x1d8], 1
jmp 0x10050ac1
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x134]
cmp dword [ebp - 0xc8], eax
jg 0x10050aeb
mov dword [ebp - 0x258], 1
jmp 0x10050af2
and dword [ebp - 0x258], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x134]
cmp dword [ebp - 0x258], eax
jle 0x10050b13
mov dword [ebp - 0x1e0], 1
jmp 0x10050b1a
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x1e0]
sub ecx, dword [ebp + eax*4 - 0x134]
je 0x10050b38
mov dword [ebp - 0x2b0], 1
jmp 0x10050b3f
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
sub eax, dword [ebp - 0x9c]
dec eax
dec eax
cmp eax, 0x4151
jl 0x10050b60
mov dword [ebp - 0x1e8], 1
jmp 0x10050b67
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1e8], eax
jge 0x10050b81
mov dword [ebp - 0x138], 1
jmp 0x10050b88
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x10050bbe
xor eax, eax
inc eax
je 0x10050bbe
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x134], 0
je 0x10050bbe
mov dword [ebp - 0x1f0], 1
jmp 0x10050bc5
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1f0], eax
jle 0x10050bdc
mov dword [ebp - 0x2e8], 1
jmp 0x10050be3
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x404], eax
push 0xfffffffffffffff6
pop eax
add eax, 0x955f1bb1
add eax, dword [ebp - 4]
cmp eax, dword [ebp - 4]
jne 0x10050c0b
mov dword [ebp - 0x298], 1
jmp 0x10050c12
and dword [ebp - 0x298], 0
cmp dword [ebp - 0x298], 0
jb 0x10050c27
mov dword [ebp - 0x1f8], 1
jmp 0x10050c2e
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x1f8], eax
jle 0x10050c48
mov dword [ebp - 0x328], 1
jmp 0x10050c4f
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x134]
mov dword [ebp - 0x2f0], eax
jmp 0x10050a22
push 1
push 0x73c4
call fcn.1004e1ae
pop ecx
pop ecx
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x310], 0xd9ee1c97
mov dword [ebp - 0xd0], 0
jmp 0x10050cb5
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jge 0x10050cd1
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x390], 0xe1d925b0
jmp 0x10050ca8
mov dword [ebp - 0xd8], 0
jmp 0x10050cea
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xfffffff6
jge 0x10050d2f
mov dword [ebp - 0x68], 0x7d45db34
mov byte [ebp - 0x38], 0
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x10050d0c
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov dword [ebp - 0x68], 0
jmp 0x10050d1c
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jg 0x10050d2d
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x268], eax
jmp 0x10050d15
jmp 0x10050cdd
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x310], eax
push 1
lea eax, [ebp - 0x460]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.1004da40
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x41c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x41c]
lea edi, [ebp - 0x338]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x4c], 8
mov dword [ebp - 0x2c], 0xfffc
mov dword [ebp - 0x354], 0xfffffff7
mov dword [ebp - 0x350], 0xfffffff7
mov dword [ebp - 0x34c], 0xfffffff7
mov dword [ebp - 0x348], 0xfffffff7
mov dword [ebp - 0x210], 0x3bf58aae
mov dword [ebp - 0x218], 5
mov dword [ebp - 0x100], 0xabebf3b8
mov dword [ebp - 0x18c], 0xa7c6dd3e
mov dword [ebp - 0x2f8], 0x1d2daffa
mov dword [ebp - 0x320], 0
cmp dword [ebp - 0x4c], 0
je 0x10050ea9
cmp dword [ebp - 0x4c], 0
je 0x10050e8f
cmp dword [ebp - 0x2c], 0
je 0x10050e7d
cmp dword [ebp - 0x2c], 0
je 0x10050e15
mov eax, 0xfff9
test eax, eax
je 0x10050e15
mov dword [ebp - 0x200], 1
jmp 0x10050e1c
and dword [ebp - 0x200], 0
imul eax, dword [ebp - 0x200], 0xd013
cmp eax, 9
jne 0x10050e37
mov dword [ebp - 0x2c0], 1
jmp 0x10050e3e
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c0], eax
jl 0x10050e55
mov dword [ebp - 0x208], 1
jmp 0x10050e5c
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x208], eax
jle 0x10050e73
mov dword [ebp - 0x270], 1
jmp 0x10050e7a
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0
je 0x10050e8f
mov dword [ebp - 0xf8], 1
jmp 0x10050e96
and dword [ebp - 0xf8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xf8]
mov dword [ebp + eax - 0x354], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x354]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x210], eax
jg 0x10050ed3
mov dword [ebp - 0x2a0], 1
jmp 0x10050eda
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 1
jae 0x10050efb
mov dword [ebp - 0x278], 1
jmp 0x10050f02
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x4c]
jg 0x10050f1c
mov dword [ebp - 0x220], 1
jmp 0x10050f23
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x220], eax
je 0x10050f3a
mov dword [ebp - 0x2b8], 1
jmp 0x10050f41
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jne 0x10050f65
cmp dword [ebp - 0x2c], 0
jne 0x10050f65
and dword [ebp - 0x188], 0
jmp 0x10050f6f
mov dword [ebp - 0x188], 1
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x188]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x2f8]
je 0x10050faa
cmp dword [ebp - 0x2c], 0
je 0x10050faa
mov dword [ebp - 0x194], 1
jmp 0x10050fb1
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0xcc], 0
jmp 0x10050fd6
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x10050ff2
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x230], 0xc213532f
jmp 0x10050fc9
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x230], 0xfffffffb
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x100510f1
mov dword [ebp - 0x108], 0xfffffffa
mov dword [ebp - 0xac], 0
jmp 0x10051030
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x1005104c
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x3a0], 0
jmp 0x10051023
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x398], eax
imul eax, dword [ebp - 0x108], 0
cmp eax, 0xd6c3
je 0x10051072
mov dword [ebp - 0x19c], 1
jmp 0x10051079
and dword [ebp - 0x19c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x230]
cmp dword [ebp - 0x19c], eax
jne 0x10051099
mov dword [ebp - 0x1a4], 1
jmp 0x100510a0
and dword [ebp - 0x1a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x230]
add eax, dword [ebp - 0x1a4]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x230]
cmp eax, dword [ebp - 0x108]
jg 0x100510d2
mov dword [ebp - 0x1ac], 1
jmp 0x100510d9
and dword [ebp - 0x1ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp + eax - 0x3a0], ecx
jmp 0x1005121a
mov dword [ebp - 0x1cc], 0x7528
mov dword [ebp - 0x300], 0xfffffff9
mov eax, 0x842f
test eax, eax
je 0x1005118b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x230], 0
je 0x1005113c
cmp dword [ebp - 0x1cc], 0
je 0x1005113c
mov eax, 0x5d764ce3
test eax, eax
je 0x1005113c
mov dword [ebp - 0x1b4], 1
jmp 0x10051143
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0x20b5
jge 0x1005115b
mov dword [ebp - 0x1bc], 1
jmp 0x10051162
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
neg eax
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x230]
mov ecx, 0x3ac9
sub ecx, eax
je 0x1005118b
mov dword [ebp - 0x1c4], 1
jmp 0x10051192
and dword [ebp - 0x1c4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x230]
cmp dword [ebp - 0x1c4], eax
jne 0x100511b2
mov dword [ebp - 0x1d4], 1
jmp 0x100511b9
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1cc]
imul eax, dword [ebp - 0x1d4]
test eax, eax
jne 0x100511dc
mov eax, 0xacd4
test eax, eax
jne 0x100511dc
and dword [ebp - 0x1dc], 0
jmp 0x100511e6
mov dword [ebp - 0x1dc], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x230]
cmp dword [ebp - 0x1dc], eax
jne 0x10051207
mov dword [ebp - 0x1e4], 1
jmp 0x1005120e
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x1c], 0xbac64a68
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x2e0], 1
mov dword [ebp - 0x384], 0xc82f744e
mov dword [ebp - 0xc4], 0
jmp 0x10051258
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x10051274
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x448], 1
jmp 0x1005124b
mov dword [ebp - 0x1c], 0
jmp 0x10051284
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffff1
jg 0x10051310
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xb4], 2
jmp 0x100512b1
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x1005130b
mov dword [ebp - 0xd4], 0x86bd085
mov dword [ebp - 0xd4], 0
jmp 0x100512dd
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jg 0x10051309
mov dword [ebp - 0x1ec], 0x1a35ca42
mov dword [ebp - 0xa0], 1
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
jmp 0x100512d0
jmp 0x100512a4
jmp 0x1005127d
mov dword [ebp - 0x1c], 0xffffffe8
jmp 0x10051320
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffff5
je 0x10051463
mov dword [ebp - 0xbc], 0
jmp 0x10051343
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x1005135f
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x2d0], 0xb0a3531
jmp 0x10051336
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d0]
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0xa0], 0xffffffff
jle 0x1005139b
push 9
pop eax
test eax, eax
jne 0x1005139b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2d0], 0
jne 0x1005139b
and dword [ebp - 0x1f4], 0
jmp 0x100513a5
mov dword [ebp - 0x1f4], 1
cmp dword [ebp - 0x1f4], 0x63ab
jne 0x100513bd
mov dword [ebp - 0x1fc], 1
jmp 0x100513c4
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1fc], eax
jle 0x100513db
mov dword [ebp - 0x318], 1
jmp 0x100513e2
and dword [ebp - 0x318], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d0]
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0xa0], 0x1d97
jne 0x1005140d
mov dword [ebp - 0x204], 1
jmp 0x10051414
and dword [ebp - 0x204], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d0]
add eax, dword [ebp - 0x204]
jne 0x1005143b
mov eax, 0x440e708b
test eax, eax
jne 0x1005143b
and dword [ebp - 0x20c], 0
jmp 0x10051445
mov dword [ebp - 0x20c], 1
mov eax, dword [ebp - 0x2e0]
add eax, dword [ebp - 0x20c]
mov ecx, 0x30a4
sub ecx, eax
mov dword [ebp - 0xa0], ecx
jmp 0x10051319
mov dword [ebp - 8], 0x7d8a8701
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0xa8], 0
jmp 0x10051494
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x100514b0
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x128], 0x7f82
jmp 0x10051487
mov dword [ebp - 8], 0
jmp 0x100514c0
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jg 0x100518bc
mov dword [ebp - 0x34], 5
mov dword [ebp - 0x110], 0x8110
mov dword [ebp - 0x158], 0xde769035
mov dword [ebp - 0xb0], 0
jmp 0x100514fe
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x1005151a
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x374], 1
jmp 0x100514f1
mov dword [ebp - 0x34], 0
jmp 0x1005152a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x100517fe
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x14], 2
jmp 0x1005154b
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x100517f9
mov dword [ebp - 0x70], 0
jmp 0x10051565
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x1005157b
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x344], 1
jmp 0x1005155e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x344], 0
jmp 0x100515a9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x344]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x344], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x344], 2
jg 0x100515ca
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x128], 0
je 0x100515c8
jmp 0x100515ca
jmp 0x1005158e
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jg 0x100515e7
mov dword [ebp - 0x214], 1
jmp 0x100515ee
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0
jbe 0x10051603
mov dword [ebp - 0x21c], 1
jmp 0x1005160a
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x21c], eax
jle 0x10051624
mov dword [ebp - 0x224], 1
jmp 0x1005162b
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x128]
add eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0x110]
jl 0x1005164f
mov dword [ebp - 0x234], 1
jmp 0x10051656
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x234], eax
jle 0x10051670
mov dword [ebp - 0x23c], 1
jmp 0x10051677
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
sub eax, 8
neg eax
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x1005169c
mov dword [ebp - 0x244], 1
jmp 0x100516a3
and dword [ebp - 0x244], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
cmp dword [ebp - 0x244], eax
jle 0x100516c4
mov dword [ebp - 0x24c], 1
jmp 0x100516cb
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
add eax, 6
cmp eax, 7
jge 0x100516e5
mov dword [ebp - 0x254], 1
jmp 0x100516ec
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x254]
je 0x10051703
mov dword [ebp - 0x2dc], 1
jmp 0x1005170a
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x128]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x128], ecx
jl 0x1005173e
mov dword [ebp - 0x13c], 1
jmp 0x10051745
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x13c], eax
jle 0x1005175f
mov dword [ebp - 0x140], 1
jmp 0x10051766
and dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
cmp dword [ebp - 0x140], eax
jl 0x10051787
mov dword [ebp - 0x2ec], 1
jmp 0x1005178e
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x128], 0xfffffff8
je 0x100517a7
mov dword [ebp - 0x148], 1
jmp 0x100517ae
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
sub eax, dword [ebp - 8]
cmp eax, 0x6ee3e4f6
jg 0x100517da
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x128], 0
je 0x100517da
mov dword [ebp - 0x150], 1
jmp 0x100517e1
and dword [ebp - 0x150], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x150]
mov dword [ebp + eax - 0x374], ecx
jmp 0x10051544
jmp 0x10051523
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x30], eax
jne 0x10051824
cmp dword [ebp - 0x30], 0
je 0x10051824
mov dword [ebp - 0x160], 1
jmp 0x1005182b
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x160], eax
jl 0x10051842
mov dword [ebp - 0x168], 1
jmp 0x10051849
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 8]
mov ecx, 0x656e
sub ecx, dword [ebp - 0x168]
add eax, ecx
cmp eax, 0xfff9
jae 0x1005186c
mov dword [ebp - 0x170], 1
jmp 0x10051873
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 8]
imul eax, eax, 0x25a5
mov dword [ebp - 0x178], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x178]
mov dword [ebp + eax - 0x374], ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x128]
add eax, dword [ebp - 0x178]
mov dword [ebp - 0x2d8], eax
jmp 0x100514b9
mov dword [ebp - 0x90], 0xb7c7ce53
mov dword [ebp - 0x2fc], 0xfffe
mov dword [ebp - 0x304], 0x743d837b
mov dword [ebp - 0x3f8], 0xffffffff
mov dword [ebp - 0x3c0], 0xffffffff
mov dword [ebp - 0x3e8], 0xf8067e30
mov dword [ebp - 0x3c8], 0xec4279c4
mov dword [ebp - 0x3fc], 0
mov dword [ebp - 0x3d0], 1
mov dword [ebp - 0x3f0], 0x4996
mov dword [ebp - 0x180], 0x791e6e40
mov dword [ebp - 0x78], 0
jmp 0x1005193a
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x10051950
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x424], 0x39e3cf95
jmp 0x10051933
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x80], 0
jmp 0x10051979
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1005198f
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x430], 3
jmp 0x10051972
mov dword [ebp - 0x90], 2
jmp 0x100519a8
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x10051a09
mov dword [ebp - 0x98], 0x4dd03248
mov dword [ebp - 0x98], 0
jmp 0x100519d4
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jg 0x10051a07
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x100519f1
push 0
call fcn.1004efba
pop ecx
mov byte [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x10051a05
push 1
call fcn.1004efba
pop ecx
jmp 0x100519c7
jmp 0x1005199b
mov byte [ebp - 0x37], 0
movzx eax, byte [ebp - 0x37]
test eax, eax
je 0x10051a1d
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
cmp dword [ebp - 0x338], 0
je 0x10051a3a
push 3
push dword [ebp - 0x330]
push dword [ebp - 0x334]
call dword [ebp - 0x338]
pop edi
pop esi
mov esp, ebp
pop ebp
ret