Function at 0x1000cb10
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x10014d36
push eax
mov eax, 0xa024
mov dword fs:[0], esp
call fcn.10014320
push ebx
push ebp
push esi
push edi
call fcn.1000c9a0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.GlobalNet__d
push 0x1001af9c
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea ecx, [esp + 0x1c]
call fcn.10001e40
mov ebp, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0xa03c], 0
mov byte [esp + 0x13], 0
mov al, byte [esp + 0x13]
test al, al
je 0x1000cbe3
cmp al, 3
je 0x1000cbe3
xor edi, edi
push 0x1001af9c
push 0
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventA]
mov esi, eax
test esi, esi
jne 0x1000cbc6
push str.Sleep
push str.kernel32.dll
call ebx
push eax
call ebp
push 0xc8
call eax
inc edi
cmp edi, 0xc8
jl 0x1000cb8d
jmp 0x1000cbe3
push str.CloseHandle
push str.kernel32.dll
call ebx
push eax
call ebp
lea ecx, [esp + 0x1c]
mov edi, eax
call fcn.10002630
push esi
call edi
mov esi, dword [0x10018b48]
mov eax, dword [0x100188e8]
and esi, 0xffff
test eax, eax
je 0x1000cc08
call dword [sym.imp.MSVCRT.dll_rand]
cdq
mov ecx, 0xffff
idiv ecx
mov esi, edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push esi
push str.zg70412_1616_mvd
lea ecx, [esp + 0x24]
mov edi, eax
call fcn.10002100
test al, al
jne 0x1000cc2d
mov byte [esp + 0x13], 2
jmp 0x1000cb7f
push str.Wfplhkcvd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
lea edx, [esp + 0x20]
push eax
lea eax, [esp + 0xe0]
push edx
push eax
call fcn.1000c790
mov ecx, dword [0x1001ae90]
add esp, 0x10
lea edx, [esp + 0xd8]
lea eax, [esp + 0x1c]
push esi
push str.zg70412_1616_mvd
push 0x1001af9c
push ecx
push edx
push eax
lea ecx, [esp + 0x1f0]
call fcn.10006160
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xa03c], 1
push ecx
lea ecx, [esp + 0x20]
call fcn.10002930
push str.Sleep
push str.kernel32.dll
call ebx
push eax
call ebp
mov edi, eax
xor esi, esi
mov dword [esp + 0x14], edi
lea ecx, [esp + 0x1d8]
call fcn.10006ab0
test al, al
jne 0x1000ccc8
push 0x3e8
call edi
inc esi
cmp esi, 0xa
jl 0x1000ccab
lea ecx, [esp + 0x1d8]
call fcn.10006ab0
test al, al
jne 0x1000ccf1
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xa03c], 0
call fcn.10006260
jmp 0x1000cb7f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push str.Sleep
push str.kernel32.dll
call ebx
push eax
call ebp
push 0x1001af9c
push 0
push 0x1f0003
mov edi, eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
mov edx, dword [esp + 0xc8]
push 0x64
push edx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x1f4
mov dword [esp + 0x1c], eax
call edi
test esi, esi
jne 0x1000cd60
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x1000ccf7
push str.Sleep
push str.kernel32.dll
call ebx
push eax
call ebp
push 0x1b58
call dword [esp + 0x18]
jmp 0x1000ccd8
push str.CloseHandle
push str.kernel32.dll
call ebx
push eax
call ebp
lea ecx, [esp + 0x1c]
mov edi, eax
call fcn.10002630
push esi
call edi
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xa03c], 0
call fcn.10006260
lea ecx, [esp + 0x1c]
mov dword [esp + 0xa03c], 0xffffffff
call fcn.10001ff0
mov ecx, dword [esp + 0xa034]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0xa030
ret