Function at 0x10050050
Capabilities:
Check for time delay via gettickcount
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10090ef0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3f0
push esi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10051654
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x194], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x218]
movzx eax, byte [eax]
test eax, eax
je 0x100500f7
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
movzx eax, byte [eax]
test eax, eax
je 0x100500f2
push 0x7af9
push 0x1a74
push 1
push 0x525c
push 0x4331
push 0x5d0e
push 1
push 0x60c0
call fcn.1004f7a9
add esp, 0x20
jmp 0x10051652
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0xc0], 0x71fc
mov dword [ebp - 0x234], 0x1000b540
cmp dword [ebp - 0xc0], 0x739c
jle 0x10050213
and dword [ebp - 0x34], 0
jmp 0x10050134
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x3236
jge 0x10050213
and dword [ebp - 0x74], 0
jmp 0x1005014e
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x2404
jge 0x1005020e
and dword [ebp - 0x3c], 0
jmp 0x10050168
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1536
jge 0x10050209
and dword [ebp - 0x94], 0
jmp 0x1005018b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x683c
jge 0x10050204
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x94]
and eax, ecx
cdq
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], edx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x320], eax
push dword [ebp - 0x220]
push dword [ebp - 0x224]
lea ecx, [ebp - 0x3b4]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x264]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x3b4]
call fcn.100252df
jmp 0x1005017e
jmp 0x10050161
jmp 0x10050147
jmp 0x1005012d
push 4
lea ecx, [ebp - 0x304]
call fcn.100254f9
and dword [ebp - 4], 0
mov dword [ebp - 0x44], 0xba76aabe
lea eax, [ebp - 0x2d0]
push eax
push 0x4692
push 0x2ece
push 0x1627
push 1
push 0x2a28
push 1
push 0x78df
push 0x78d7
lea eax, [ebp - 0x304]
push eax
push 0
push 0x2c4b
push 0x752c
call fcn.1007582a
add esp, 0x34
mov dword [ebp - 0x44], 0
jmp 0x1005027f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jg 0x10050528
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x2f8], 9
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x308], 0xa5852835
mov dword [ebp - 0x7c], 0
jmp 0x100502be
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jg 0x100503f2
push 4
lea ecx, [ebp - 0x27c]
call fcn.100254f9
mov byte [ebp - 4], 1
mov dword [ebp - 0x19c], 0xffffffff
mov dword [ebp - 0x330], 0xfffffff7
lea eax, [ebp - 0x27c]
push eax
push 0
push 1
lea eax, [ebp - 0x318]
push eax
push 0
push 0x2cb1
call fcn.10067054
add esp, 0x18
push 1
lea ecx, [ebp - 0x27c]
call fcn.10025597
and dword [eax], 0
jmp 0x10050344
push 1
lea ecx, [ebp - 0x27c]
call fcn.10025597
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x27c]
call fcn.10025597
cmp dword [eax], 3
jg 0x100503bc
push 3
lea ecx, [ebp - 0x2cc]
call fcn.100254f9
mov byte [ebp - 4], 2
lea eax, [ebp - 0x338]
push eax
push 0
push 0x77f2
lea eax, [ebp - 0x2cc]
push eax
call fcn.10074890
add esp, 0x10
push 2
lea ecx, [ebp - 0x2cc]
call fcn.10025597
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x114]
mov dword [ecx], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2cc]
call fcn.1002557b
jmp 0x10050320
push 0x2378
lea eax, [ebp - 0x19c]
push eax
push 0
push 0x521d
push 0
push 0x2881
call fcn.10051724
add esp, 0x18
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x27c]
call fcn.1002557b
jmp 0x100502b7
mov dword [ebp - 0xb4], 0x5f88
mov dword [ebp - 0x1a4], 0x1000b5a8
cmp dword [ebp - 0xb4], 0x5fd9
jle 0x100504f1
and dword [ebp - 0x4c], 0
jmp 0x10050423
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x54fd
jge 0x100504f1
and dword [ebp - 0x64], 0
jmp 0x1005043d
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x11de
jge 0x100504ec
and dword [ebp - 0x54], 0
jmp 0x10050457
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x5c9c
jge 0x100504e7
and dword [ebp - 0x68], 0
jmp 0x10050471
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x24b1
jge 0x100504e2
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x64]
mov edx, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x68]
shl edx, cl
and eax, edx
cdq
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], edx
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov word [ebp - 0x228], ax
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
lea ecx, [ebp - 0x3e4]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x1fc]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x3e4]
call fcn.100252df
jmp 0x1005046a
jmp 0x10050450
jmp 0x10050436
jmp 0x1005041c
mov byte [ebp - 0x21], 0
cmp dword [ebp - 0xb4], 0x5e8e
jge 0x1005050d
push dword [ebp - 0x1a4]
call fcn.1008287d
pop ecx
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x10050523
push 0
push 0x3160
call fcn.10054474
pop ecx
pop ecx
jmp 0x10050278
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x304]
call fcn.1002557b
cmp dword [ebp - 0xc0], 0x71c5
jge 0x1005054f
push dword [ebp - 0x234]
call fcn.1008287d
pop ecx
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x18], eax
push 0
call fcn.100536f0
pop ecx
and dword [ebp - 0xa4], 0
jmp 0x10050591
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x18]
add eax, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xa4], eax
jge 0x10051652
push 0
push 0x3999
call fcn.10062055
pop ecx
pop ecx
mov dword [ebp - 0xcc], 0x3da4
mov dword [ebp - 0x240], 0x1000b5fc
cmp dword [ebp - 0xcc], 0x3dbe
jle 0x10050695
and dword [ebp - 0x5c], 0
jmp 0x100505e8
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x5023
jge 0x10050695
and dword [ebp - 0x70], 0
jmp 0x10050602
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x3a3f
jge 0x10050690
and dword [ebp - 0x2c], 0
jmp 0x1005061c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x14f0
jge 0x1005068b
mov eax, dword [ebp - 0x5c]
cdq
idiv dword [ebp - 0x70]
mov ecx, dword [ebp - 0x2c]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], edx
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov word [ebp - 0x18c], ax
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x36c]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x1ac]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x36c]
call fcn.100252df
jmp 0x10050615
jmp 0x100505fb
jmp 0x100505e1
mov dword [ebp - 0x154], 0x1a27
mov dword [ebp - 0x1b4], 0x1000b62c
cmp dword [ebp - 0x154], 0x1cef
jle 0x10050747
and dword [ebp - 0x78], 0
jmp 0x100506c6
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x7c5e
jge 0x10050747
and dword [ebp - 0x6c], 0
jmp 0x100506dc
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x28db
jge 0x10050742
mov eax, dword [ebp - 0x78]
xor eax, dword [ebp - 0x6c]
cdq
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x244], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x324], eax
push dword [ebp - 0x244]
push dword [ebp - 0x248]
lea ecx, [ebp - 0x384]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x204]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x384]
call fcn.100252df
jmp 0x100506d5
jmp 0x100506bf
mov dword [ebp - 0x20c], 3
cmp dword [ebp - 0x154], 0x19f1
jge 0x10050769
push dword [ebp - 0x1b4]
call fcn.1008287d
pop ecx
mov dword [ebp - 0x1c4], 0x647dc4b
mov dword [ebp - 0x258], 0xffffffff
mov dword [ebp - 0x1bc], 0xfffffff6
push 1
push 0x6998
push 0x562
push 1
call fcn.1004e961
add esp, 0x10
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x1bc]
push eax
push 0
push 0x4fad
lea eax, [ebp - 0x20c]
push eax
push 0x283a
lea eax, [ebp - 0x1c4]
push eax
call fcn.1005f93b
add esp, 0x1c
cmp dword [ebp - 0xcc], 0x3d57
jge 0x100507e5
push dword [ebp - 0x240]
call fcn.1008287d
pop ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x100507fe
mov dword [ebp - 0x11c], 1
jmp 0x10050805
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0xac], 0xa8f93905
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0xac]
cmp eax, 0xffffffff
je 0x10050845
mov dword [ebp - 0xd4], 1
jmp 0x1005084c
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
neg eax
cmp eax, 1
jne 0x10050869
push 0x5aa9
push 0
call fcn.10054cfe
pop ecx
pop ecx
jmp 0x10050871
push 0
call fcn.100566c7
pop ecx
push 0x1b98
push 0x5395
push 0
push 0x117b
push 1
push 0x799f
call fcn.1004eaa7
add esp, 0x18
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x100508aa
mov dword [ebp - 0x144], 1
jmp 0x100508b1
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x10], 0x1c5534bf
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x20], 0x7d6c5051
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x10], 0xd5be
jg 0x100508f0
mov dword [ebp - 0xdc], 1
jmp 0x100508f7
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0x7f191253
jg 0x1005090f
mov dword [ebp - 0x124], 1
jmp 0x10050916
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x10]
jne 0x10050930
mov dword [ebp - 0xe4], 1
jmp 0x10050937
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xe4], eax
jne 0x1005094e
mov dword [ebp - 0x164], 1
jmp 0x10050955
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x164]
jge 0x1005096c
mov dword [ebp - 0xec], 1
jmp 0x10050973
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0xec]
cmp eax, 0xab19
jne 0x1005098f
mov dword [ebp - 0x12c], 1
jmp 0x10050996
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x100509b4
cmp dword [ebp - 0x14], 0
jne 0x100509b4
and dword [ebp - 0x1cc], 0
jmp 0x100509be
mov dword [ebp - 0x1cc], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x10], 0x53b1dab5
je 0x100509e2
cmp dword [ebp - 0x14], 0
je 0x100509e2
mov dword [ebp - 0xf4], 1
jmp 0x100509e9
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 1
jl 0x100509fe
mov dword [ebp - 0x14c], 1
jmp 0x10050a05
and dword [ebp - 0x14c], 0
imul eax, dword [ebp - 0x14c], 3
cmp eax, 0x6193fe69
jg 0x10050a1f
mov dword [ebp - 0xfc], 1
jmp 0x10050a26
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xfc], eax
jg 0x10050a3d
mov dword [ebp - 0x134], 1
jmp 0x10050a44
and dword [ebp - 0x134], 0
imul eax, dword [ebp - 0x134], 0xede0
test eax, eax
jne 0x10050a5e
mov dword [ebp - 0x104], 1
jmp 0x10050a65
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x104], eax
jg 0x10050afa
push 2
lea ecx, [ebp - 0x2a8]
call fcn.100254f9
mov dword [ebp - 4], 3
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x214], 0x91f32afc
push 0
push 0x47a3
lea eax, [ebp - 0x2a8]
push eax
push 0x3033
lea eax, [ebp - 0x2ec]
push eax
call fcn.1005e103
add esp, 0x14
push 0
push 0x43b7
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.1006ab44
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a8]
call fcn.1002557b
jmp 0x10050f20
mov dword [ebp - 0x178], 0x64dbb9a2
mov dword [ebp - 0x174], 0x64dbb9a2
mov dword [ebp - 0x170], 0x64dbb9a2
mov dword [ebp - 0x16c], 0x64dbb9a2
mov dword [ebp - 0x20], 0
jmp 0x10050b32
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe7
je 0x10050f20
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0x10], 0xffffffe4
jmp 0x10050b56
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x2d
jge 0x10050f1b
mov dword [ebp - 0xa0], 0xd77974d3
push 2
lea ecx, [ebp - 0x2c0]
call fcn.100254f9
mov dword [ebp - 4], 4
mov dword [ebp - 0x15c], 0x9b7
mov dword [ebp - 0x1dc], 0x1000b658
cmp dword [ebp - 0x15c], 0xb29
jle 0x10050c8b
and dword [ebp - 0x84], 0
jmp 0x10050bb8
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x4f06
jge 0x10050c8b
and dword [ebp - 0x30], 0
jmp 0x10050bd5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x3a85
jge 0x10050c86
and dword [ebp - 0x38], 0
jmp 0x10050bef
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x45a5
jge 0x10050c81
and dword [ebp - 0x40], 0
jmp 0x10050c09
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x4adf
jge 0x10050c7c
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
sar edx, cl
xor eax, edx
cdq
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x2f4], eax
push dword [ebp - 0x250]
push dword [ebp - 0x254]
lea ecx, [ebp - 0x39c]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x270]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x39c]
call fcn.100252df
jmp 0x10050c02
jmp 0x10050be8
jmp 0x10050bce
jmp 0x10050bab
cmp dword [ebp - 0x15c], 0x7c3
jge 0x10050ca3
push dword [ebp - 0x1dc]
call fcn.1008287d
pop ecx
lea eax, [ebp - 0x340]
push eax
push 0x5a47
push 0
push 0x63b4
push 0x1776
lea eax, [ebp - 0x2c0]
push eax
call fcn.1005c3b5
add esp, 0x18
mov dword [ebp - 0x14], 0
jmp 0x10050cda
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x10050ede
mov eax, dword [ebp - 0x14]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x178]
cmp dword [ebp + eax*4 - 0x178], ecx
jg 0x10050d0d
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x10050d0d
and dword [ebp - 0x10c], 0
jmp 0x10050d17
mov dword [ebp - 0x10c], 1
cmp dword [ebp - 0x10c], 0xcc5119b5
je 0x10050d2f
mov dword [ebp - 0x13c], 1
jmp 0x10050d36
and dword [ebp - 0x13c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x178]
cmp dword [ebp - 0x13c], eax
jne 0x10050d56
mov dword [ebp - 0xb8], 1
jmp 0x10050d5d
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xfffffffb
jge 0x10050d72
mov dword [ebp - 0xbc], 1
jmp 0x10050d79
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xbc], eax
jg 0x10050d93
mov dword [ebp - 0xc8], 1
jmp 0x10050d9a
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x178]
cmp dword [ebp - 0xc8], eax
jne 0x10050db8
mov dword [ebp - 0xd8], 1
jmp 0x10050dbf
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0xd8]
jl 0x10050ddd
xor eax, eax
je 0x10050ddd
mov dword [ebp - 0xe0], 1
jmp 0x10050de4
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 0xfffffffc
jle 0x10050e06
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x178], 0
je 0x10050e06
mov dword [ebp - 0xe8], 1
jmp 0x10050e0d
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xe8], eax
jg 0x10050e27
mov dword [ebp - 0xf0], 1
jmp 0x10050e2e
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xf0], eax
jg 0x10050e45
mov dword [ebp - 0xf8], 1
jmp 0x10050e4c
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0xaa8c97d7
jae 0x10050e64
mov dword [ebp - 0x100], 1
jmp 0x10050e6b
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x100]
jge 0x10050e85
mov dword [ebp - 0x108], 1
jmp 0x10050e8c
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x178]
add eax, dword [ebp - 0x108]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x178]
jl 0x10050eb7
mov dword [ebp - 0x110], 1
jmp 0x10050ebe
and dword [ebp - 0x110], 0
mov esi, dword [ebp - 0x110]
add esi, 0x61f8
push 1
lea ecx, [ebp - 0x2c0]
call fcn.10025597
mov dword [eax], esi
jmp 0x10050cd3
lea eax, [ebp - 0xa0]
push eax
push 0
push 0x75f5
push 1
push 0x5117
push 0
push 0x2e20
push 0x3a83
call fcn.10063ba0
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c0]
call fcn.1002557b
jmp 0x10050b4f
jmp 0x10050b2b
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x10050f39
mov dword [ebp - 0x118], 1
jmp 0x10050f40
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x100513e3
push 0x4000
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
push dword [eax + 8]
push 0x3a4a
push 0x334e
call fcn.10049a96
pop ecx
pop ecx
call eax
mov dword [ebp - 0x120], 0x3ab8
mov dword [ebp - 0x1e4], 0x1000b6a4
cmp dword [ebp - 0x120], 0x3dcf
jle 0x1005107f
and dword [ebp - 0x48], 0
jmp 0x10050fb2
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x29ac
jge 0x1005107f
and dword [ebp - 0x50], 0
jmp 0x10050fcc
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x3673
jge 0x1005107a
and dword [ebp - 0x58], 0
jmp 0x10050fe6
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x5d64
jge 0x10051075
and dword [ebp - 0x60], 0
jmp 0x10051000
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x1374
jge 0x10051070
mov eax, dword [ebp - 0x48]
xor eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x60]
sar edx, cl
xor eax, edx
cdq
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x33c], eax
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
lea ecx, [ebp - 0x3cc]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x21c], eax
mov ecx, dword [ebp - 0x21c]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x3cc]
call fcn.100252df
jmp 0x10050ff9
jmp 0x10050fdf
jmp 0x10050fc5
jmp 0x10050fab
cmp dword [ebp - 0x120], 0x3a01
jge 0x10051097
push dword [ebp - 0x1e4]
call fcn.1008287d
pop ecx
mov dword [ebp - 0x1c], 0x6d8d
mov dword [ebp - 0xa8], 8
push 4
lea ecx, [ebp - 0x29c]
call fcn.100254f9
mov dword [ebp - 4], 5
mov dword [ebp - 0x184], 0xc013cef3
push 0
push 0x7f15
push 0x233
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1006cc12
add esp, 0x14
mov dword [ebp - 0x28], 0
jmp 0x100510f5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1005110b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x34c], 0
jmp 0x100510ee
mov dword [ebp - 0x160], 0x5de4
mov dword [ebp - 0x188], 0x1000b6b8
cmp dword [ebp - 0x160], 0x5eb3
jle 0x10051238
and dword [ebp - 0x80], 0
jmp 0x1005113c
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x43b3
jge 0x10051238
and dword [ebp - 0x88], 0
jmp 0x1005115f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1314
jge 0x10051233
and dword [ebp - 0x90], 0
jmp 0x10051185
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x4673
jge 0x1005122e
and dword [ebp - 0x98], 0
jmp 0x100511ab
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x1e3f
jge 0x10051229
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x90]
imul ecx, dword [ebp - 0x98]
xor eax, ecx
cdq
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], edx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x2d8], eax
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x3fc]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x24c]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x3fc]
call fcn.100252df
jmp 0x1005119e
jmp 0x10051178
jmp 0x10051152
jmp 0x10051135
mov eax, 0xddd3
test eax, eax
je 0x10051343
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x334], eax
xor eax, eax
inc eax
cmp eax, 1
jae 0x10051262
mov dword [ebp - 0x128], 1
jmp 0x10051269
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x128]
sub eax, ecx
cmp eax, dword [ebp - 0x1c]
jge 0x10051288
mov dword [ebp - 0x130], 1
jmp 0x1005128f
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
neg eax
je 0x100512ab
cmp dword [ebp - 0x1c], 0
je 0x100512ab
mov dword [ebp - 0x138], 1
jmp 0x100512b2
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0x4d3ec93c
jne 0x100512ca
mov dword [ebp - 0x140], 1
jmp 0x100512d1
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xa8], eax
jge 0x10051309
mov dword [ebp - 0x148], 1
jmp 0x10051310
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x148], eax
je 0x10051327
mov dword [ebp - 0x1ec], 1
jmp 0x1005132e
and dword [ebp - 0x1ec], 0
mov eax, 0x7cde
test eax, eax
je 0x10051343
mov dword [ebp - 0x150], 1
jmp 0x1005134a
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x10051364
mov dword [ebp - 0xb0], 1
jmp 0x1005136b
and dword [ebp - 0xb0], 0
push 2
lea ecx, [ebp - 0x29c]
call fcn.10025597
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
cmp dword [ebp - 0xb0], 0
je 0x100513a4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x34c], 0
je 0x100513a4
mov dword [ebp - 0x158], 1
jmp 0x100513ab
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x160], 0x5d5c
jge 0x100513cf
push dword [ebp - 0x188]
call fcn.1008287d
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29c]
call fcn.1002557b
jmp 0x1005057b
mov dword [ebp - 0x1b8], 0xf90ef307
mov dword [ebp - 0x1c8], 0x2717f403
mov dword [ebp - 0x1a8], 0x1ba6b42b
mov dword [ebp - 0x1c0], 0xb653b1da
mov dword [ebp - 0x190], 0xa4c82104
mov dword [ebp - 0x180], 0xdd93ba6a
push 4
lea ecx, [ebp - 0x2b4]
call fcn.100254f9
mov dword [ebp - 4], 6
mov dword [ebp - 0x1b0], 0xffff
mov dword [ebp - 0x1a0], 0x9643747c
push 0
push 0x7302
lea eax, [ebp - 0x2b4]
push eax
push 1
push 0x481f
push 0x5406
push 0x18a9
lea eax, [ebp - 0x2e8]
push eax
push 0x3415
push 0x6e35
push 0x6170
push 0
call fcn.1007616d
add esp, 0x30
lea eax, [ebp - 0x190]
push eax
push 0x412e
lea eax, [ebp - 0x180]
push eax
push 1
push 1
push 0x4ba
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1b8]
push eax
push 0x748b
lea eax, [ebp - 0x2b4]
push eax
push 0x2b5f
lea eax, [ebp - 0x1c0]
push eax
push 0x4e0f
lea eax, [ebp - 0x1c8]
push eax
push 0x4e46
push 0x5de9
call fcn.1004e395
add esp, 0x48
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.1002557b
push 0x51ed
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1d8]
push eax
push 0
push 0x50d8
push 1
push 0x1fa8
lea eax, [ebp - 0x1e0]
push eax
push 0x696c
push 0
lea eax, [ebp - 0x1f0]
push eax
push 0x4ac1
call fcn.1007582a
add esp, 0x34
push 0
push 0x25da
push 0xf57
push 0xef3
push 1
call fcn.100577f3
add esp, 0x14
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x168]
push eax
push 0
call fcn.10064653
add esp, 0x10
cmp dword [ebp - 0x168], 0
jbe 0x1005164d
or dword [ebp - 0x290], 0xffffffff
or dword [ebp - 0x28c], 0xffffffff
or dword [ebp - 0x288], 0xffffffff
or dword [ebp - 0x284], 0xffffffff
lea ecx, [ebp - 0x99]
call fcn.100255a6
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x354]
call fcn.100255a9
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x314]
call fcn.10025555
mov dword [ebp - 4], 7
mov dword [ebp - 0x1e8], 0x9000d4e7
mov dword [ebp - 0x31c], 0x5934
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x1e8]
push eax
push 0
call fcn.1006d524
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x314]
call fcn.1002557b
lea eax, [ebp - 0x2f0]
push eax
push dword [ebp - 0x1f0]
push dword [ebp - 0x168]
mov eax, dword [ebp - 0x18]
push dword [eax + 8]
push 0x3a4a
push 0x4842
call fcn.10049a96
pop ecx
pop ecx
call eax
jmp 0x1005057b
jmp 0x100516ae
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x200], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
movzx eax, byte [eax]
test eax, eax
je 0x100516a8
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
movzx eax, byte [eax]
test eax, eax
je 0x100516a6
push 0x7169
push 0
call fcn.10066f6b
pop ecx
pop ecx
jmp 0x100516ae
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret