Function at 0x11055cc0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x11181df3
mov eax, dword fs:[0]
push eax
sub esp, 0xb90
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ecx + 0x2c]
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov esi, dword [edi + 4]
mov dword [ebp - 0xb64], ecx
lea ecx, [ebx + eax]
mov dword [ebp - 0xb48], ecx
mov ecx, dword [0x111ee100]
mov dword [ebp - 0xb4c], ebx
mov dword [ebp - 0xb3c], esi
call fcn.11062560
test al, al
je 0x11055fa4
cmp byte [0x111ee590], 0
jne 0x11055fa4
lea ecx, [ebp - 0xb7c]
call fcn.110d1930
push 0
mov dword [ebp - 4], 0
call fcn.11143a20
mov edx, dword [0x111ee100]
mov ecx, dword [edx + 0x30]
push eax
push 0x111972c0
push 0x111a0f8c
call fcn.1105e820
xor ecx, ecx
cmp eax, 0x14
setge cl
lea ecx, [ecx + ecx + 5]
push ecx
call fcn.1102ad70
push 0
lea edx, [ebp - 0xb7c]
push edx
push eax
call fcn.111121e0
mov eax, dword [0x111ee100]
mov ecx, dword [eax + 0x30]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
add esp, 0x10
push 0
push 0xc
lea eax, [ebp - 0x64]
push eax
push 0x1119b118
push 0x111a0f8c
call edx
mov eax, dword [ebp - 0xb7c]
mov edx, dword [eax]
lea ecx, [ebp - 0xb7c]
call edx
test al, al
jne 0x11055dd7
push 0x255
push 0x11195b24
push 0x11195b1c
call fcn.11029a70
add esp, 0xc
mov ecx, dword [ebp - 0xb70]
lea eax, [ebp - 0x64]
push eax
push ecx
call fcn.11096210
add esp, 8
test eax, eax
jne 0x11055f92
push 0
push 0
push 5
mov byte [ebp - 0x220], al
mov byte [ebp - 0x320], al
mov byte [ebp - 0x420], al
xor bl, bl
call fcn.11145c70
add esp, 0xc
test eax, eax
je 0x11055eaa
push 0x111a04ac
call fcn.11147060
push 0x100
lea edx, [ebp - 0x420]
push edx
push 0x100
lea eax, [ebp - 0x320]
push eax
lea ecx, [ebp - 0x220]
push 0xc8
push ecx
call fcn.1115e1c0
add esp, 0x1c
test eax, eax
jne 0x11055e8d
call fcn.110639c0
test al, al
je 0x11055e8f
push 3
push 1
push 0x111a049c
push 0x111a0f40
mov ecx, 0x111ee0d0
call fcn.11027f40
mov ecx, dword [esi + 0xc]
push 3
push 1
push 0x111a049c
push 0x111a0f40
call fcn.1105e950
mov bl, 1
lea edx, [ebp - 0x320]
push edx
lea eax, [ebp - 0x220]
push eax
push 0x111a0484
call fcn.11147060
add esp, 0xc
cmp byte [ebp - 0x220], 0
mov byte [0x111ee590], 1
je 0x11055ef2
push 3
lea ecx, [ebp - 0x220]
push ecx
push 0x111a0470
push 0x111a0f40
mov ecx, 0x111ee0d0
call fcn.11027f80
mov ecx, dword [esi + 0xc]
push 3
lea edx, [ebp - 0x220]
push edx
push 0x111a0470
push 0x111a0f40
call fcn.1105e910
cmp byte [ebp - 0x320], 0
je 0x11055f33
push 3
lea eax, [ebp - 0x320]
push eax
push 0x111a045c
push 0x111a0f40
mov ecx, 0x111ee0d0
call fcn.11027f80
push 3
lea ecx, [ebp - 0x320]
push ecx
mov ecx, dword [esi + 0xc]
push 0x111a045c
push 0x111a0f40
call fcn.1105e910
cmp byte [ebp - 0x420], 0
je 0x11055f74
push 3
lea edx, [ebp - 0x420]
push edx
push 0x111a0450
push 0x111a0f40
mov ecx, 0x111ee0d0
call fcn.11027f80
mov ecx, dword [esi + 0xc]
push 3
lea eax, [ebp - 0x420]
push eax
push 0x111a0450
push 0x111a0f40
call fcn.1105e910
test bl, bl
jne 0x11055f8c
push 0x1119bb7c
call fcn.11147060
push 1
call fcn.1102d900
add esp, 8
mov ebx, dword [ebp - 0xb4c]
lea ecx, [ebp - 0xb7c]
mov dword [ebp - 4], 0xffffffff
call fcn.110d0a10
push 4
push 0
push 5
call fcn.11145c70
add esp, 0xc
test eax, eax
je 0x1105601f
mov ecx, dword [0x111ee100]
push 0
push 0
push 0x1119b728
push 0x111a0f40
call fcn.1105e820
test eax, eax
jne 0x1105600b
mov ecx, dword [0x111ee100]
push eax
push eax
push 0x1119b718
push 0x111a0f40
call fcn.1105e820
test eax, eax
je 0x1105601f
mov ecx, dword [0x111ee100]
push 0
push 0
push 0x1119b704
push 0x111a0f40
call fcn.1105e820
test eax, eax
je 0x1105601f
cmp dword [0x111ee254], 0
jne 0x1105601f
mov ecx, dword [ebp - 0xb64]
call fcn.11049580
lea eax, [ebx + 4]
test ebx, ebx
jne 0x1105602b
mov eax, 0x11195264
push 0
push eax
lea ecx, [ebp - 0xb38]
call fcn.11146a90
push 0x350
lea ecx, [ebp - 0xb34]
push 0
push ecx
mov dword [ebp - 4], 1
call fcn.11162be0
add esp, 0xc
mov edx, dword [ebp - 0xb3c]
mov ecx, dword [edx + 0xc]
push 1
push 0
push 0
mov dword [ebp - 0xb34], edi
mov eax, dword [edi + 4]
mov esi, dword [eax]
push 0x1119c2b0
push 0x111a0f40
mov byte [ebp - 4], 2
mov dword [ebp - 0xb40], ecx
call fcn.1105e820
mov ecx, dword [edi + 4]
mov edx, dword [esi + 0x68]
push eax
call edx
mov ebx, dword [ebp - 0xb4c]
mov esi, eax
mov dword [ebp - 0xb54], esi
test ebx, ebx
je 0x110566d0
test byte [ebx + 2], 0x80
je 0x110560b5
mov dword [edi + 0x50], 1
movzx eax, word [ebx + 2]
and eax, 4
mov dword [ebp - 0xb5c], eax
jne 0x11056100
test esi, esi
je 0x11056100
push 1
push 0
mov ebx, 9
mov ecx, edi
call fcn.1104b7f0
add esp, 8
lea ecx, [ebp - 0xb34]
mov byte [ebp - 4], 1
call fcn.11051140
mov eax, dword [ebp - 0xb38]
push eax
call fcn.11162777
add esp, 4
xor eax, eax
jmp 0x110572c2
lea esi, [ebx + 4]
lea ecx, [ebp - 0xb30]
test eax, eax
je 0x110561d4
mov edx, dword [ebp - 0xb38]
mov eax, dword [edi + 0x54]
push 0x100
push ecx
push edx
push eax
call fcn.110ee9a0
add esp, 0x10
mov eax, esi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x11056130
sub eax, edx
lea esi, [esi + eax + 1]
push 0
push esi
lea ecx, [ebp - 0xb44]
call fcn.11146a90
mov ecx, dword [ebp - 0xb44]
mov eax, dword [edi + 0x54]
push 0x100
lea edx, [ebp - 0xa30]
push edx
push ecx
push eax
mov byte [ebp - 4], 3
call fcn.110ee9a0
push 0
push 0x100
lea edx, [ebp - 0x930]
push edx
lea eax, [ebp - 0xa30]
push eax
call fcn.111433d0
mov eax, esi
add esp, 0x20
lea ecx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x11056190
sub eax, ecx
mov ecx, 0x100
lea esi, [esi + eax + 1]
test word [ebx + 2], cx
je 0x110562ed
push 0x74
mov byte [ebp - 0x7f0], 1
call fcn.111101b0
add esp, 4
mov dword [ebp - 0xb58], eax
mov byte [ebp - 4], 4
test eax, eax
je 0x1105620a
mov ecx, eax
call fcn.1104ddd0
jmp 0x1105620c
mov eax, dword [ebp - 0xb38]
push 0xff
push eax
push ecx
call fcn.11164ed0
mov eax, esi
add esp, 0xc
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x110561f0
sub eax, edx
cmp eax, 0x20
ja 0x1105612a
add esi, 0x20
jmp 0x1105613d
xor eax, eax
mov dword [ebp - 0x7ec], eax
mov ecx, dword [edi + 0x328]
mov byte [ebp - 4], 3
mov dword [ebp - 0xb6c], 0x80
test ecx, ecx
je 0x11056268
mov edx, dword [ecx]
mov edx, dword [edx]
lea eax, [ebp - 0xb6c]
push eax
lea eax, [ebp - 0x4a0]
push eax
call edx
test al, al
je 0x11056268
push 0
push 0x200
lea eax, [ebp - 0x7a0]
push eax
lea ecx, [ebp - 0x4a0]
push ecx
call fcn.11145b10
add esp, 0x10
lea edx, [ebp - 0x7a0]
push edx
jmp 0x1105626d
push 0x111a0440
mov ecx, dword [ebp - 0x7ec]
add ecx, 0x4c
call fcn.110d16d0
push 0
push 0x200
lea eax, [ebp - 0x7a0]
push eax
push esi
call fcn.11145b10
add esp, 0x10
lea ecx, [ebp - 0x7a0]
push ecx
mov ecx, dword [ebp - 0x7ec]
add ecx, 0x5c
call fcn.110d16d0
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x110562b0
sub eax, edx
lea esi, [esi + eax + 1]
mov eax, dword [esi]
add esi, 4
mov ecx, esi
add esi, eax
cmp esi, dword [ebp - 0xb48]
ja 0x110565c6
cmp eax, 0x100000
jae 0x110565c6
push ecx
mov ecx, dword [ebp - 0x7ec]
push eax
add ecx, 0x6c
call fcn.11036910
mov eax, 0x200
test word [ebx + 2], ax
je 0x11056382
push 0
push 0x64
lea ecx, [ebp - 0x158]
push ecx
push esi
call fcn.11145b10
add esp, 0x10
cmp byte [ebp - 0x158], 0
je 0x11056376
mov ecx, dword [0x111ee134]
lea edx, [ebp - 0xb9c]
push edx
call fcn.11068160
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0xb9c]
mov byte [ebp - 4], 5
call fcn.110d0860
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb9c]
test eax, eax
je 0x11056371
mov esi, 0x19
call fcn.110d0a10
mov ecx, dword [ebp - 0xb44]
push ecx
mov byte [ebp - 4], 2
call fcn.11162777
add esp, 4
jmp 0x11056409
call fcn.110d0a10
mov edx, dword [ebp - 0xb44]
push edx
jmp 0x11056474
mov ecx, dword [ebp - 0xb40]
mov ecx, dword [ecx + 0x2c]
lea eax, [ebp - 0xb34]
push eax
push fcn.1104e150
push 0
push 0
call fcn.11061970
cmp dword [ebp - 0x800], 0
jne 0x110564f9
lea edx, [ebp - 0xb34]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.1104e150
add esp, 0x1c
cmp dword [ebp - 0x800], 0
jne 0x110564f9
cmp dword [ebp - 0x7fc], 0
je 0x1105646d
test byte [ebx + 2], 1
jne 0x1105646d
mov eax, dword [ebp - 0xb44]
mov esi, dword [ebp - 0x7f4]
push eax
mov byte [ebp - 4], 2
call fcn.11162777
add esp, 4
test esi, esi
je 0x1105640f
cmp dword [edi + 0x50], 0
jne 0x11056414
mov esi, 2
push 1
push 0
mov ebx, esi
mov ecx, edi
call fcn.1104b7f0
mov ecx, dword [ebp - 0x7ec]
add esp, 8
mov byte [ebp - 4], 1
mov esi, ecx
test ecx, ecx
je 0x11056442
call fcn.1104e0a0
push esi
call fcn.11162777
add esp, 4
mov ecx, 0x350
lea eax, [ebp - 0xb34]
lea ecx, [ecx]
mov byte [eax], 0
inc eax
dec ecx
jne 0x11056450
mov ecx, dword [ebp - 0xb38]
push ecx
call fcn.11162777
add esp, 4
xor eax, eax
jmp 0x110572c2
mov ecx, dword [ebp - 0xb44]
push ecx
mov byte [ebp - 4], 2
call fcn.11162777
add esp, 4
test byte [ebx + 2], 1
jne 0x110564b6
cmp byte [ebp - 0xb30], 0
lea eax, [ebp - 0xb30]
jne 0x1105649b
mov eax, dword [ebp - 0xb38]
mov edx, dword [ebp - 0xb3c]
push eax
push edx
push 0x3f3
call fcn.11029990
add esp, 0xc
inc dword [edi + 0x160]
xor eax, eax
cmp dword [edi + 0x160], 4
mov ebx, 5
setg al
mov ecx, edi
push eax
push 0
call fcn.1104b7f0
add esp, 8
lea ecx, [ebp - 0xb34]
mov byte [ebp - 4], 1
call fcn.11051140
mov ecx, dword [ebp - 0xb38]
push ecx
call fcn.11162777
add esp, 4
xor eax, eax
jmp 0x110572c2
mov eax, dword [edi + 0x20]
push eax
call fcn.11162777
lea edx, [ebp - 0xb30]
push 0
push edx
call fcn.11142e60
add esp, 0xc
cmp dword [ebp - 0xb5c], 0
mov dword [edi + 0x20], eax
je 0x110566b8
mov eax, dword [ebp - 0xb4c]
xor ebx, ebx
test byte [eax + 2], 0x20
je 0x1105654b
movsx ebx, byte [esi]
add esi, 4
cmp esi, dword [ebp - 0xb48]
jbe 0x1105654b
mov ecx, dword [ebp - 0xb44]
push ecx
jmp 0x110565cd
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x68]
push 1
push ebx
call eax
cmp eax, dword [ebp - 0xb54]
jae 0x110565a4
push 1
push 0
mov ebx, 9
mov ecx, edi
call fcn.1104b7f0
mov ecx, dword [ebp - 0xb44]
push ecx
call fcn.11162777
add esp, 0xc
lea ecx, [ebp - 0xb34]
mov byte [ebp - 4], 1
call fcn.11051140
mov edx, dword [ebp - 0xb38]
push edx
call fcn.11162777
add esp, 4
xor eax, eax
jmp 0x110572c2
test ebx, ebx
je 0x11056660
cmp ebx, 4
ja 0x1105663c
movsx eax, byte [esi]
add esi, 4
lea ecx, [eax + esi]
cmp ecx, dword [ebp - 0xb48]
jbe 0x110565e3
mov edx, dword [ebp - 0xb44]
push edx
mov byte [ebp - 4], 2
call fcn.11162777
add esp, 4
mov esi, 0x11
jmp 0x11056409
mov ecx, dword [ebp - 0xb3c]
push 0
push eax
push esi
push ebx
call fcn.11064d10
test eax, eax
jne 0x110566b8
push 1
push eax
lea ebx, [eax + 8]
mov ecx, edi
call fcn.1104b7f0
mov eax, dword [ebp - 0xb44]
push eax
call fcn.11162777
add esp, 0xc
lea ecx, [ebp - 0xb34]
mov byte [ebp - 4], 1
call fcn.11051140
mov ecx, dword [ebp - 0xb38]
push ecx
call fcn.11162777
add esp, 4
xor eax, eax
jmp 0x110572c2
push 0
push 0
mov ebx, 8
mov ecx, edi
call fcn.1104b7f0
mov edx, dword [ebp - 0xb44]
push edx
call fcn.11162777
add esp, 0xc
jmp 0x110560db
mov eax, dword [edi + 0x54]
push 0x10
lea ecx, [ebp - 0x74]
push ecx
push esi
push eax
call fcn.110ee9a0
mov ecx, dword [ebp - 0xb3c]
add esp, 0x10
push 0
push 0x10
lea edx, [ebp - 0x74]
push edx
push 1
call fcn.11064d10
test eax, eax
jne 0x110566b8
push 0x209b
push 0x1119d450
push 0x111a0430
call fcn.11029a70
mov eax, dword [ebp - 0xb44]
push eax
mov byte [ebp - 4], 2
call fcn.11162777
add esp, 0x10
jmp 0x1105640f
mov ecx, dword [ebp - 0xb44]
push ecx
mov byte [ebp - 4], 2
call fcn.11162777
add esp, 4
jmp 0x11056776
mov ecx, dword [ebp - 0xb40]
push 0
push 1
push 0x111a0420
push 0x111a0f40
call fcn.1105e820
test eax, eax
je 0x1105674d
push 1
push 0
mov ebx, 0x11
mov ecx, edi
call fcn.1104b7f0
mov ecx, dword [ebp - 0x7ec]
add esp, 8
mov byte [ebp - 4], 1
mov esi, ecx
test ecx, ecx
je 0x1105671e
call fcn.1104e0a0
push esi
call fcn.11162777
add esp, 4
mov ecx, 0x350
lea eax, [ebp - 0xb34]
lea esp, [esp]
mov byte [eax], 0
inc eax
dec ecx
jne 0x11056730
mov edx, dword [ebp - 0xb38]
push edx
call fcn.11162777
add esp, 4
xor eax, eax
jmp 0x110572c2
test esi, esi
jne 0x110560c8
lea ecx, [ebp - 0xb34]
push ecx
push esi
push esi
push esi
push esi
push esi
push esi
call fcn.1104e150
add esp, 0x1c
cmp dword [ebp - 0x800], esi
je 0x1105640f
cmp byte [edi + 0x321], 0
mov esi, dword [ebp - 0xb40]
jne 0x110567bd
push 0
push 0
push 0x1119e240
push 0x111a0f40
mov ecx, esi
call fcn.1105e820
test eax, eax
je 0x110567bd
mov ecx, dword [0x111ee308]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1c]
push 1
push 1
call eax
test eax, eax
je 0x110567bd
mov esi, 0x13
jmp 0x11056409
push 0
push 0
push 0x111a0418
push 0x111a0f40
mov ecx, esi
call fcn.1105e820
push 0
push 0
push 0x111a040c
push 0x111a0f40
mov ecx, esi
mov dword [ebp - 0xb48], eax
call fcn.1105e820
push 0
push 0
push 0x1119d888
push 0x111a0f40
mov ecx, esi
mov dword [ebp - 0xb5c], eax
call fcn.1105e820
mov ebx, dword [ebp - 0xb4c]
mov dword [ebp - 0xb58], eax
test ebx, ebx
je 0x11056825
movzx ecx, word [ebx + 2]
and ecx, 8
mov dword [edi + 0x238], ecx
cmp dword [edi + 0x238], 0
mov dword [ebp - 0xb54], 0
je 0x1105684f
mov ecx, dword [0x111ee134]
push 1
call fcn.11067b40
mov dword [ebp - 0xb54], 1
mov dword [ebp - 0xb60], 0
test ebx, ebx
je 0x1105689f
test byte [ebx + 2], 0x10
je 0x1105689f
call fcn.11133b00
test eax, eax
jne 0x11056874
lea esi, [eax + 0x18]
jmp 0x11056409
mov byte [edi + 0x23c], 1
mov ecx, dword [0x111ee134]
push 1
call fcn.11067b40
mov eax, dword [ebp - 0xb64]
mov ecx, 1
mov dword [ebp - 0xb60], ecx
mov dword [eax + 0x40], ecx
mov dword [eax + 0x50], ecx
push 4
push 0
push 0x111972e4
push 0x1119a86c
mov ecx, esi
call fcn.1105e820
mov dword [ebp - 0xb50], eax
test ebx, ebx
je 0x110568f9
test byte [ebx + 2], 0x40
je 0x110568f9
push 0
push 0
push 0x111a03f4
push 0x111a0f40
mov ecx, esi
call fcn.1105e820
test eax, eax
jne 0x110568f9
mov edx, dword [ebp - 0xb3c]
mov ecx, dword [0x111ee134]
push edx
push 0x11046850
push 0xd0
call fcn.1106c340
mov ecx, dword [0x111ee134]
lea eax, [ebp - 0xb68]
push eax
xor esi, esi
call fcn.11064310
test eax, eax
jne 0x1105692c
cmp dword [ebp - 0xb68], esi
je 0x11056931
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
sub eax, dword [ebp - 0xb68]
cmp eax, 0x3e8
ja 0x11056931
mov esi, 0x64
xor ebx, ebx
test esi, esi
js 0x11056a95
jmp 0x11056940
mov ecx, dword [0x111ee134]
push 0xc0
call fcn.110642e0
add eax, dword [ebp - 0xb60]
mov ecx, dword [edi + 0x238]
add eax, dword [ebp - 0xb54]
test ecx, ecx
jne 0x1105698c
cmp byte [edi + 0x23c], cl
jne 0x1105698c
mov edx, dword [ebp - 0xb50]
test edx, edx
je 0x1105698c
cmp eax, edx
jle 0x1105698c
cmp ebx, esi
jl 0x11056a84
lea esi, [ecx + 0x10]
jmp 0x11056409
cmp dword [ebp - 0xb5c], 0
je 0x11056a53
cmp dword [0x111ee188], 0
je 0x110569bc
cmp dword [ebp - 0xb48], 0
je 0x11056a80
cmp dword [0x111ee184], 0
je 0x11056a80
cmp dword [ebp - 0xb48], 0
jne 0x110569e6
cmp eax, 1
jle 0x110569e6
mov edx, dword [ebp - 0xb3c]
mov ecx, dword [0x111ee134]
push edx
push 0x1103aa20
push 0xd0
call fcn.1106c340
mov esi, dword [ebp - 0xb58]
test esi, esi
je 0x11056a1a
mov edx, dword [ebp - 0xb3c]
mov ecx, dword [0x111ee134]
push edx
push 0x1103aa50
push 0xd0
call fcn.1106c340
cmp dword [0x111ee254], 0
jne 0x11056a1a
call fcn.11029950
mov eax, dword [ebp - 0xb60]
add eax, dword [ebp - 0xb54]
jne 0x11056b12
mov ecx, dword [ebp - 0xb3c]
call fcn.11064e90
mov edx, 0x111ee174
sub edx, eax
mov ebx, 1
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, ebx
test cl, cl
jne 0x11056a43
jmp 0x11056b17
cmp eax, 1
jle 0x110569e6
test ecx, ecx
jne 0x110569e6
cmp byte [edi + 0x23c], cl
jne 0x110569e6
cmp dword [ebp - 0xb48], ecx
je 0x11056a80
cmp dword [0x111ee184], ecx
je 0x11056a80
cmp dword [0x111ee188], ecx
je 0x110569e6
cmp ebx, esi
jge 0x11056a95
push 0x14
call dword [sym.imp.KeRneL32.DLl_Sleep]
inc ebx
cmp ebx, esi
jle 0x11056940
mov eax, dword [ebp - 0xb4c]
neg eax
sbb eax, eax
and eax, dword [ebp - 0xb38]
push eax
mov eax, dword [ebp - 0xb3c]
push eax
push 0x3ec
call fcn.11029990
push 1
push 0x111ee174
mov ebx, 1
mov ecx, edi
call fcn.1104b7f0
mov ecx, dword [ebp - 0x7ec]
add esp, 0x14
mov byte [ebp - 4], bl
mov esi, ecx
test ecx, ecx
je 0x11056aea
call fcn.1104e0a0
push esi
call fcn.11162777
add esp, 4
mov ecx, 0x350
lea eax, [ebp - 0xb34]
mov byte [eax], 0
inc eax
dec ecx
jne 0x11056af5
mov ecx, dword [ebp - 0xb38]
push ecx
call fcn.11162777
add esp, 4
xor eax, eax
jmp 0x110572c2
mov ebx, 1
mov eax, dword [ebp - 0xb48]
mov ecx, dword [ebp - 0xb5c]
xor edx, edx
mov dword [edi + 0x1e4], eax
mov dword [edi + 0x1e8], ecx
mov dword [edi + 0x1ec], esi
cmp dword [0x111ee18c], edx
setg dl
mov dword [edi + 0x168], edx
test eax, eax
je 0x11056b50
add dword [0x111ee184], ebx
test ecx, ecx
je 0x11056b5a
add dword [0x111ee188], ebx
test esi, esi
je 0x11056b64
add dword [0x111ee18c], ebx
mov eax, edi
call fcn.1103a1a0
cmp dword [ebp - 0xb4c], 0
je 0x1105710b
mov esi, dword [ebp - 0xb64]
mov ecx, esi
mov byte [ebp - 0x30], 0
call fcn.11064e20
mov dword [ebp - 0xb58], eax
mov eax, dword [eax + 0x2c]
mov byte [ebp - 4], 6
cmp eax, 2
je 0x11056ba4
cmp eax, 3
jne 0x11056c28
push 0x10
lea eax, [ebp - 0x30]
push eax
mov ecx, esi
call fcn.11069020
test eax, eax
je 0x11056c28
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x30]
push edx
mov byte [ebp - 0x4c], 0
call fcn.1104b710
mov esi, dword [ebp - 0xb40]
add esp, 8
push 3
lea eax, [ebp - 0x4c]
push eax
push 0x111a03e8
push 0x111a0f40
mov ecx, esi
call fcn.1105e910
lea ecx, [ebp - 0x30]
push ecx
call fcn.1112bca0
mov bl, al
add esp, 4
test bl, bl
je 0x11056c0d
push 3
push 1
push 0x111a03dc
push 0x111a0f40
mov ecx, esi
call fcn.1105e950
movzx edx, bl
push edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x30]
push ecx
push 0x111a03b0
call fcn.11147060
add esp, 0x10
jmp 0x11056c2e
mov esi, dword [ebp - 0xb40]
mov edx, dword [esi]
mov edx, dword [edx + 4]
push 0
push 0xd
lea eax, [ebp - 0x20]
push eax
push 0x111a03a4
push 0x111a0f40
mov ecx, esi
mov byte [ebp - 0x20], 0
call edx
lea eax, [ebp - 0x20]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x11056c53
sub eax, edx
cmp eax, 0xc
je 0x11056c88
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x20]
push ecx
call fcn.1103d530
add esp, 8
push 3
lea edx, [ebp - 0x20]
push edx
push 0x1119b614
push 0x111a0f40
mov ecx, esi
call fcn.1105e910
mov ecx, dword [0x111ee308]
mov eax, dword [ecx]
mov edx, dword [eax + 0xd8]
call edx
mov ebx, dword [ebp - 0xb40]
push 3
mov esi, eax
push esi
push 0x111a0394
push 0x111a0f40
mov ecx, ebx
call fcn.1105e910
cmp byte [esi], 0
je 0x11056d23
mov ecx, dword [0x111ee308]
mov eax, dword [ecx]
mov edx, dword [eax + 0x90]
push 0
push 0xffffffffffffffff
call edx
lea eax, [ebp - 0xf4]
push 0x80
push eax
mov byte [ebp - 0xf4], 0
call fcn.111474b0
add esp, 8
test eax, eax
je 0x11056d0f
cmp byte [ebp - 0xf4], 0x3c
je 0x11056d0f
push 3
lea ecx, [ebp - 0xf4]
push ecx
push 0x111a0384
push 0x111a0f40
mov ecx, ebx
call fcn.1105e910
mov ecx, dword [0x111ee308]
mov edx, dword [ecx]
mov eax, dword [edx + 0x90]
push 0
push 0
call eax
cmp byte [edi + 0x23c], 0
je 0x11056d9a
push 0x111a0340
call fcn.11147060
add esp, 4
push 3
push 0
push 0x1119c2c4
push 0x111a0f40
mov ecx, ebx
call fcn.1105e950
push 3
push 0
push 0x1119c2dc
push 0x111a0f40
mov ecx, ebx
call fcn.1105e950
cmp dword [0x111ee0e4], 0
je 0x11056d9a
push 0
push 0
push 0x1119a160
push 0x111a0f40
mov ecx, ebx
call fcn.1105e820
test eax, eax
je 0x11056d9a
push 3
push 1
push 0x1119fe34
push 0x111a0f40
mov ecx, ebx
call fcn.1105e950
mov ecx, ebx
call fcn.11062700
cmp eax, 0xffffffff
jne 0x11056dcc
push 0x111a030c
call fcn.11147060
add esp, 4
push 3
push 1
mov byte [edi + 0x33c], 1
mov byte [0x111ee280], 1
push 0x1119e530
jmp 0x11056ddb
cmp eax, 0x7fffffff
je 0x11056de7
push 3
push eax
push 0x111a02fc
push 0x111a0f8c
mov ecx, ebx
call fcn.1105e950
mov ecx, dword [0x111ee100]
call fcn.11062560
test al, al
je 0x11056f5d
lea ecx, [ebp - 0xb8c]
call fcn.110d1930
push 0
mov byte [ebp - 4], 7
call fcn.11143a20
mov ecx, dword [0x111ee100]
mov ecx, dword [ecx + 0x30]
push eax
push 0x111972c0
push 0x111a0f8c
call fcn.1105e820
xor edx, edx
cmp eax, 0x14
setge dl
lea edx, [edx + edx + 5]
push edx
call fcn.1102ad70
push 0
lea ecx, [ebp - 0xb8c]
push ecx
push eax
call fcn.111121e0
mov edx, dword [0x111ee100]
mov ecx, dword [edx + 0x30]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
add esp, 0x10
push 0
push 0xc
lea edx, [ebp - 0x58]
push edx
push 0x1119b118
push 0x111a0f8c
call eax
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebp - 0xb8c]
call fcn.110094d0
push eax
call fcn.11096210
add esp, 8
mov byte [ebp - 0x3c], 0
test eax, eax
jne 0x11056ece
call fcn.110639c0
test al, al
jne 0x11056ece
push 0x111a02f8
push 0x111a02c8
xor esi, esi
call fcn.111122f0
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x11056ef6
push ebx
call fcn.11163ca7
add esp, 4
cmp eax, 1
jne 0x11056ec3
lea esi, [eax + 1]
push ebx
call fcn.11162777
add esp, 4
jmp 0x11056ef6
push 3
push 0
push 0x1119e530
mov byte [edi + 0x33c], 0
push 0x111a0f8c
mov ecx, ebx
mov esi, 1
mov byte [0x111ee280], 0
call fcn.1105e950
mov ecx, dword [ebp - 0xb40]
push 3
push esi
push 0x111a02bc
push 0x111a0f8c
call fcn.1105e950
mov ecx, dword [0x111ee100]
call fcn.11062560
test al, al
je 0x11056f4e
mov ecx, dword [0x111ee100]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push 0
push 0xc
lea eax, [ebp - 0x3c]
push eax
push 0x111a02b4
push 0x111a0f8c
call edx
lea eax, [ebp - 0x3c]
push eax
push esi
push 0x111a0298
call fcn.11147060
add esp, 0xc
lea ecx, [ebp - 0xb8c]
mov byte [ebp - 4], 6
call fcn.110d0a10
cmp dword [0x111ee254], 0
jne 0x110570f1
cmp byte [ebp - 0xb30], 0
lea eax, [ebp - 0xb30]
jne 0x11056f7f
mov eax, dword [ebp - 0xb38]
mov esi, dword [ebp - 0xb3c]
push eax
push esi
push 0x3f2
call fcn.11029990
add esp, 0xc
mov ecx, esi
call fcn.11064de0
mov ebx, eax
push ebx
call fcn.11163a11
mov edx, dword [ebp - 0xb3c]
mov esi, eax
push 0x38
mov ecx, 0x52
mov word [esi], cx
lea eax, [ebp - 0x7d8]
push 0
add ebx, 0xffffffec
push eax
mov dword [ebp - 0x7e4], edx
mov dword [ebp - 0x7e0], esi
mov dword [ebp - 0x7dc], ebx
call fcn.11162be0
add esp, 0x10
call dword [sym.imp.KeRneL32.DLl_GetTickCount]
mov ecx, dword [ebp - 0xb40]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push 0
or eax, 2
push 0x100
mov word [ebp - 0x7a4], ax
lea eax, [ebp - 0x5a0]
push eax
push 0x1119d874
push 0x111a0f40
call edx
test eax, eax
jle 0x1105701d
cmp byte [ebp - 0x5a0], 0
jne 0x11057053
mov ebx, dword [ebp - 0xb40]
mov eax, dword [ebx]
mov edx, dword [eax + 4]
push 0
push 0x100
lea ecx, [ebp - 0x5a0]
push ecx
push 0x1119d864
push 0x111a0f40
mov ecx, ebx
call edx
test eax, eax
jle 0x1105706e
cmp byte [ebp - 0x5a0], 0
je 0x1105706e
jmp 0x11057059
mov ebx, dword [ebp - 0xb40]
push 0
push 1
push 0x111a0288
push 0x111a0f40
mov ecx, ebx
call fcn.1105e950
lea eax, [ebp - 0x7e4]
push eax
push 0x1103a790
push 0
push 0
mov ecx, ebx
call fcn.11061970
xor ecx, ecx
mov word [esi + 2], cx
mov edx, dword [ebp - 0x7d8]
mov eax, dword [ebp - 0x7e0]
mov byte [edx + eax + 4], cl
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.1103a730
add esp, 4
cmp dword [ebp - 0x7d8], 0
jne 0x110570c7
mov edx, dword [ebp - 0x7e0]
mov dword [ebp - 0x7d8], 1
mov byte [edx + 5], 0
mov edx, dword [ebp - 0x7d8]
mov ecx, dword [ebp - 0xb3c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
push 0
add edx, 5
push edx
push esi
call eax
push esi
call fcn.11163aa5
add esp, 4
mov ecx, edi
call fcn.11054bc0
mov esi, dword [ebp - 0xb58]
mov ecx, esi
mov byte [ebp - 4], 2
call fcn.11033ac0
push esi
call fcn.11162777
add esp, 4
mov ebx, dword [edi + 0x1f8]
test ebx, ebx
je 0x11057125
mov ecx, ebx
call fcn.11110fd0
push ebx
call fcn.11162777
add esp, 4
mov ebx, dword [edi + 0x1f4]
test ebx, ebx
je 0x1105713f
mov ecx, ebx
call fcn.1108e7b0
push ebx
call fcn.11162777
add esp, 4
mov ebx, dword [edi + 0x20c]
test ebx, ebx
je 0x11057159
mov ecx, ebx
call fcn.11033020
push ebx
call fcn.11162777
add esp, 4
mov ebx, dword [edi + 0x248]
test ebx, ebx
je 0x11057173
mov ecx, ebx
call fcn.1110ebc0
push ebx
call fcn.11162777
add esp, 4
mov ecx, dword [ebp - 0xb40]
push 0
push 0
push 0x1119c0d0
push 0x111a0f40
call fcn.1105e820
test eax, eax
je 0x11057195
or ebx, 0xffffffff
jmp 0x11057198
mov ebx, dword [edi + 0x58]
push 4
call fcn.111101b0
add esp, 4
mov dword [ebp - 0xb50], eax
mov esi, dword [ebp - 0xb3c]
mov byte [ebp - 4], 8
test eax, eax
je 0x110571c5
mov ecx, dword [edi + 0x14]
push ebx
push ecx
push esi
mov ecx, eax
call fcn.1108dce0
jmp 0x110571c7
xor eax, eax
push 4
mov byte [ebp - 4], 2
mov dword [edi + 0x1f4], eax
call fcn.111101b0
add esp, 4
mov dword [ebp - 0xb50], eax
mov byte [ebp - 4], 9
test eax, eax
je 0x110571fb
mov edx, dword [edi + 0x58]
mov ecx, dword [edi + 0x14]
push edx
push ecx
push esi
mov ecx, eax
call fcn.11110f80
jmp 0x110571fd
xor eax, eax
push 0x28
mov byte [ebp - 4], 2
mov dword [edi + 0x1f8], eax
call fcn.111101b0
add esp, 4
mov dword [ebp - 0xb50], eax
mov byte [ebp - 4], 0xa
test eax, eax
je 0x1105723c
mov edx, dword [ebp - 0xb40]
mov ecx, dword [edi + 4]
push edx
mov edx, dword [ecx + 0x10]
mov ecx, dword [edi + 0x14]
push edx
push ebx
push ecx
push esi
mov ecx, eax
call fcn.110322d0
jmp 0x1105723e
xor eax, eax
push 4
mov byte [ebp - 4], 2
mov dword [edi + 0x20c], eax
call fcn.111101b0
add esp, 4
mov dword [ebp - 0xb50], eax
mov byte [ebp - 4], 0xb
test eax, eax
je 0x1105726f
mov edx, dword [edi + 0x14]
push ebx
push edx
push esi
mov ecx, eax
call fcn.1110eb70
jmp 0x11057271
xor eax, eax
mov dword [edi + 0x248], eax
mov dword [edi + 0x24], 1
mov ecx, dword [ebp - 0x7ec]
mov byte [ebp - 4], 1
mov esi, ecx
test ecx, ecx
je 0x1105729c
call fcn.1104e0a0
push esi
call fcn.11162777
add esp, 4
mov ecx, 0x350
lea eax, [ebp - 0xb34]
mov byte [eax], 0
inc eax
dec ecx
jne 0x110572a7
mov eax, dword [ebp - 0xb38]
push eax
call fcn.11162777
add esp, 4
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret 8