Function at 0x105c915
Capabilities:
Create process on windows

Disassembly:
jmp 0x105c562
pushal
call 0x105c568
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov esi, dword [ecx + 0x18]
test byte [0x10fb4dc], 1
jne 0x105c59a
or dword [0x10fb4dc], 1
call fcn.01009280
push 0x10c8d50
call fcn.010991d0
add esp, 4
push esi
push 0x10fbe62
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
call 0x105c5ac
jmp 0x105c5b1
pushal
call 0x105c5b7
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
xor ebx, ebx
mov dword [ebp - 0x66c], ebx
push ebx
call 0x105c5d2
jmp 0x105c5d7
pushal
call 0x105c5dd
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov byte [0x10fa7c5], 1
push ebx
call 0x105c5f7
jmp 0x105c5fc
pushal
call 0x105c602
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov dword [ebp - 0x660], ebx
push ebx
call 0x105c61b
jmp 0x105c620
pushal
call 0x105c626
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov dword [ebp - 0x664], ebx
push ebx
call 0x105c63f
jmp 0x105c644
pushal
call 0x105c64a
pop ebx
add ebx, 0xffffffd6
push 0xd51000
pop ebx
popal
pop ebx
pop ebx
mov edx, 0x7ffe0000
mov eax, dword ds:[edx]
mul dword ds:[edx + 4]
shrd eax, edx, 0x18
mov dword [ebp - 0x664], eax
mov eax, dword [ebp - 0x664]
mov dword [0x10fb47c], eax
push ebx
call 0x105c67e
jmp 0x105c683
pushal
call 0x105c689
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov byte [ebp - 0x264], bl
push 0xff
push ebx
lea ecx, [ebp - 0x263]
push ecx
call fcn.0109a300
add esp, 0xc
push ebx
call 0x105c6b7
jmp 0x105c6bc
pushal
call 0x105c6c2
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
xor eax, eax
mov cl, byte [eax + 0x10fad40]
mov byte [ebp + eax - 0x264], cl
inc eax
cmp cl, bl
jne 0x105c6d1
push ebx
call 0x105c6e9
jmp 0x105c6ee
pushal
call 0x105c6f4
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push str.Atipic
lea edx, [ebp - 0x264]
push edx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
call edi
push ebx
call 0x105c71b
jmp 0x105c720
pushal
call 0x105c726
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
test byte [0x10fb4dc], 1
jne 0x105c755
or dword [0x10fb4dc], 1
call fcn.01009280
push 0x10c8d50
call fcn.010991d0
add esp, 4
lea eax, [ebp - 0x264]
push eax
mov esi, 0x10fb4e0
call fcn.01038270
push ebx
call 0x105c76c
jmp 0x105c771
pushal
call 0x105c777
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [ebp - 0x65c]
call fcn.01060070
mov dword [ebp - 0x664], eax
push ebx
call 0x105c79b
jmp 0x105c7a0
pushal
call 0x105c7a6
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov byte [ebp - 0x164], bl
push 0xff
push ebx
lea ecx, [ebp - 0x163]
push ecx
call fcn.0109a300
add esp, 0xc
push ebx
call 0x105c7d4
jmp 0x105c7d9
pushal
call 0x105c7df
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0x10fad40
lea edx, [ebp - 0x164]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
call 0x105c804
jmp 0x105c809
pushal
call 0x105c80f
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push str.AtiSetM.lua
lea eax, [ebp - 0x164]
push eax
call edi
push ebx
call 0x105c830
jmp 0x105c835
pushal
call 0x105c83b
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
test byte [0x10fb4dc], 1
jne 0x105c86a
or dword [0x10fb4dc], 1
call fcn.01009280
push 0x10c8d50
call fcn.010991d0
add esp, 4
push 0x10fb4e0
lea ebx, [ebp - 0x164]
call fcn.01037fc0
push ebx
call 0x105c880
jmp 0x105c885
pushal
call 0x105c88b
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0x10fad40
mov ecx, ebx
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
call 0x105c8ac
jmp 0x105c8b1
pushal
call 0x105c8b7
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push str.AtiTabel.lua
mov edx, ebx
push edx
call edi
push ebx
call 0x105c8d4
jmp 0x105c8d9
pushal
call 0x105c8df
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov eax, ebx
push eax
call fcn.0101c540
add esp, 4
push ebx
call 0x105c8fd
jmp 0x105c902
pushal
call 0x105c908
pop ebx
add ebx, 0xffffffa5
push 0xb51000
pop ebx
popal
pop ebx
pop ebx
mov edi, dword [ebp - 0x65c]
jmp 0x105c920
cmp byte [0x10fa7c4], 0
je 0x105df3f
xor ebx, ebx
mov dword [ebp - 4], ebx
wait
mov dword [ebp - 0x668], ebx
push ebx
call 0x105c93f
jmp 0x105c944
pushal
call 0x105c94a
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
movzx esi, byte [0x10fa7c5]
call fcn.01009900
mov dword [eax + 0x7b0], esi
push ebx
call 0x105c96f
jmp 0x105c974
pushal
call 0x105c97a
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
cmp byte [0x10fa7c5], bl
jne 0x105c9c2
lea eax, [ebx + 0x14]
call fcn.0100ec90
push ebx
call 0x105c99d
jmp 0x105c9a2
pushal
call 0x105c9a8
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x105c920
cmp dword [0x10fb48c], ebx
jne 0x105cc9b
push 0x10dc7d4
mov ecx, 0x10dc7d4
call fcn.0100d250
add esp, 4
test eax, eax
je 0x105ca82
push 0x10dc7b0
mov ecx, 0x10db868
call fcn.0100d250
add esp, 4
test eax, eax
jne 0x105ca82
sub esp, 8
fld qword [str.ffffff]
fstp qword [esp]
push ebx
lea ecx, [ebp - 0x68c]
push ecx
lea edx, [ebp - 0x67c]
push edx
push ebx
push str.000000
push 0x258
push 0x320
push ebx
push ebx
mov ecx, 0x10ec780
call fcn.01038770
cmp eax, 0xffffffff
jne 0x105d6db
sub esp, 8
fld qword [str.ffffff]
fstp qword [esp]
push ebx
lea eax, [ebp - 0x68c]
push eax
lea ecx, [ebp - 0x67c]
push ecx
push ebx
push str.000000
push 0x258
push 0x320
push ebx
push ebx
mov ecx, 0x10dc868
call fcn.01038770
cmp eax, 0xffffffff
jne 0x105d140
sub esp, 8
fld qword [str.ffffff]
fstp qword [esp]
push ebx
lea edx, [ebp - 0x68c]
push edx
lea eax, [ebp - 0x67c]
push eax
push ebx
push str.000000
push 0x258
push 0x320
push ebx
push ebx
mov ecx, 0x10ec780
call fcn.01038770
cmp eax, 0xffffffff
jne 0x105d6db
mov byte [ebp - 0x50], 0x44
mov byte [ebp - 0x4f], 0x4e
mov byte [ebp - 0x4e], 0x46
mov dl, 0x2a
mov byte [ebp - 0x4d], dl
xor eax, eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
push ebx
call 0x105cae7
jmp 0x105caec
pushal
call 0x105caf2
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov byte [ebp - 0x3c], 0x43
mov byte [ebp - 0x3b], 0x6c
mov bl, 0x69
mov byte [ebp - 0x3a], bl
mov cl, 0x65
mov byte [ebp - 0x39], cl
mov byte [ebp - 0x38], 0x6e
mov byte [ebp - 0x37], 0x74
mov byte [ebp - 0x36], 0x2e
mov byte [ebp - 0x35], cl
mov byte [ebp - 0x34], 0x78
mov byte [ebp - 0x33], cl
mov dword [ebp - 0x32], eax
mov dword [ebp - 0x2e], eax
mov word [ebp - 0x2a], ax
push ebx
call 0x105cb37
jmp 0x105cb3c
pushal
call 0x105cb42
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov byte [ebp - 0x64], 0x54
mov byte [ebp - 0x63], cl
mov byte [ebp - 0x62], 0x6e
mov byte [ebp - 0x61], 0x53
mov byte [ebp - 0x60], 0x61
mov byte [ebp - 0x5f], 0x66
mov byte [ebp - 0x5e], cl
mov byte [ebp - 0x5d], dl
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
push ebx
call 0x105cb7b
jmp 0x105cb80
pushal
call 0x105cb86
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov byte [ebp - 0x28], 0x52
mov byte [ebp - 0x27], cl
mov byte [ebp - 0x26], 0x70
mov byte [ebp - 0x25], 0x61
mov byte [ebp - 0x24], bl
mov byte [ebp - 0x23], 0x72
mov byte [ebp - 0x22], 0x2e
mov byte [ebp - 0x21], cl
mov byte [ebp - 0x20], 0x78
mov byte [ebp - 0x1f], cl
mov dword [ebp - 0x1e], eax
mov dword [ebp - 0x1a], eax
mov word [ebp - 0x16], ax
push ebx
call 0x105cbc7
jmp 0x105cbcc
pushal
call 0x105cbd2
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov byte [ebp - 0x658], al
push 0x12b
push eax
lea ecx, [ebp - 0x657]
push ecx
call fcn.0109a300
add esp, 0xc
push ebx
call 0x105cc00
jmp 0x105cc05
pushal
call 0x105cc0b
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push str.Tencentdl
push str.TenioDL
push str.TASLogin
push str.TXPlatform
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x50]
push edx
push str.taskkill__f__t__im__s__im__s__im__s__im__s__im__s__im__s__im__s__im__s
lea eax, [ebp - 0x658]
push eax
call fcn.01094420
add esp, 0x28
push ebx
call 0x105cc56
jmp 0x105cc5b
pushal
call 0x105cc61
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea ecx, [ebp - 0x658]
push ecx
call fcn.01095850
add esp, 4
push ebx
call 0x105cc83
jmp 0x105cc88
pushal
call 0x105cc8e
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov dword [0x10fb48c], 0
push ebx
call 0x105ccab
jmp 0x105ccb0
pushal
call 0x105ccb6
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.010521a0
push ebx
call 0x105ccce
jmp 0x105ccd3
pushal
call 0x105ccd9
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
cmp dword [0x10fb490], 0
je 0x105cf87
mov byte [ebp - 0x42c], 0
push 0xff
push 0
lea edx, [ebp - 0x42b]
push edx
call fcn.0109a300
add esp, 0xc
push ebx
call 0x105cd16
jmp 0x105cd1b
pushal
call 0x105cd21
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea eax, [ebp - 0x42c]
push eax
mov eax, 0x10ec880
mov edx, 0x10dc26c
call fcn.0103a130
add esp, 4
push ebx
call 0x105cd4d
jmp 0x105cd52
pushal
call 0x105cd58
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov ecx, 0x10ec88c
lea eax, [ebp - 0x42c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x105cd90
test dl, dl
je 0x105cd8c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x105cd90
add eax, 2
add ecx, 2
test dl, dl
jne 0x105cd70
xor eax, eax
jmp 0x105cd95
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x105cf87
mov byte [ebp - 0x52c], 0
push 0xff
push 0
lea ecx, [ebp - 0x52b]
push ecx
call fcn.0109a300
add esp, 0xc
push ebx
call 0x105cdc0
jmp 0x105cdc5
pushal
call 0x105cdcb
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea edx, [ebp - 0x52c]
push edx
mov eax, 0x10dc340
mov edx, 0x10dc26c
call fcn.0103a130
add esp, 4
push ebx
call 0x105cdf7
jmp 0x105cdfc
pushal
call 0x105ce02
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea eax, [ebp - 0x52c]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x105ce18
sub eax, edx
je 0x105ce95
push 0x10dbc6c
lea eax, [ebp - 0x52c]
push eax
call fcn.01094630
add esp, 8
test eax, eax
je 0x105ce95
push 5
lea ecx, [ebp - 0x52c]
push ecx
call dword [sym.imp.KERNEL32.dll_WinExec]
push ebx
call 0x105ce50
jmp 0x105ce55
pushal
call 0x105ce5b
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov eax, 0x2710
call fcn.0100ec90
push ebx
call 0x105ce78
jmp 0x105ce7d
pushal
call 0x105ce83
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
jmp 0x105cf87
call fcn.01051c90
push ebx
call 0x105cea0
jmp 0x105cea5
pushal
call 0x105ceab
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov eax, 0x1388
call fcn.0100ec90
push ebx
call 0x105cec8
jmp 0x105cecd
pushal
call 0x105ced3
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea esi, [ebp - 0x50]
call fcn.01008320
push ebx
call 0x105ceee
jmp 0x105cef3
pushal
call 0x105cef9
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0
call fcn.01051ce0
add esp, 4
push ebx
call 0x105cf16
jmp 0x105cf1b
pushal
call 0x105cf21
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov eax, 0x3e8
call fcn.0100ec90
push ebx
call 0x105cf3e
jmp 0x105cf43
pushal
call 0x105cf49
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push str.www.baidu.com
lea ecx, [ebp - 0x50]
call fcn.010086d0
test eax, eax
je 0x105cf06
push str.125.141.149.51
lea ecx, [ebp - 0x50]
call fcn.010086d0
test eax, eax
je 0x105cf06
lea edx, [ebp - 0x50]
push edx
call fcn.01008670
mov edi, dword [ebp - 0x65c]
mov ebx, 1
add dword [0x10fb490], ebx
push ebx
call 0x105cf98
jmp 0x105cf9d
pushal
call 0x105cfa3
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov ecx, edi
call fcn.0105b340
test eax, eax
jne 0x105cff5
call fcn.01009900
mov eax, 0x1388
call fcn.010476c0
push ebx
call 0x105cfd0
jmp 0x105cfd5
pushal
call 0x105cfdb
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x105c920
call fcn.01009900
mov eax, 0x1388
call fcn.010476c0
push ebx
call 0x105d00a
jmp 0x105d00f
pushal
call 0x105d015
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
sub esp, 8
fld qword [str.ffffff]
fstp qword [esp]
push 0
lea eax, [ebp - 0x68c]
push eax
lea ecx, [ebp - 0x67c]
push ecx
push 0
push str.000000
call fcn.01009900
mov edx, dword [eax + 0x14]
push edx
call fcn.01009900
mov eax, dword [eax + 0x10]
push eax
push 0
push 0
mov ecx, 0x10ec780
call fcn.01038770
cmp eax, 0xffffffff
jne 0x105d6e0
sub esp, 8
fld qword [str.ffffff]
fstp qword [esp]
push 0
lea ecx, [ebp - 0x68c]
push ecx
lea edx, [ebp - 0x67c]
push edx
push 0
push str.000000
call fcn.01009900
mov eax, dword [eax + 0x14]
push eax
call fcn.01009900
mov ecx, dword [eax + 0x10]
push ecx
push 0
push 0
mov ecx, 0x10dc868
call fcn.01038770
cmp eax, 0xffffffff
je 0x105d0fb
mov edx, dword [ebp - 0x684]
add edx, 0xffffff80
push edx
mov eax, dword [ebp - 0x674]
add eax, 0xffffff93
push eax
push 0
call fcn.01009900
mov ecx, eax
add ecx, 8
call fcn.01049f70
push ebx
call 0x105d0e1
jmp 0x105d0e6
pushal
call 0x105d0ec
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
jmp 0x105d145
sub esp, 8
fld qword [str.ffffff]
fstp qword [esp]
push 0
lea ecx, [ebp - 0x68c]
push ecx
lea edx, [ebp - 0x67c]
push edx
push 0
push str.000000
call fcn.01009900
mov eax, dword [eax + 0x14]
push eax
call fcn.01009900
mov ecx, dword [eax + 0x10]
push ecx
push 0
push 0
mov ecx, 0x10ec958
call fcn.01038770
jmp 0x105d145
mov ebx, 1
push 0x10ec968
push 8
call fcn.0100dab0
add esp, 8
push ebx
call 0x105d15a
jmp 0x105d15f
pushal
call 0x105d165
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.01056820
test eax, eax
jne 0x105d270
call fcn.01009900
cmp dword [eax + 0x7b0], 0
je 0x105d233
sub esp, 8
fld qword [0x10edd28]
fstp qword [esp]
push 0xffffff
lea edx, [ebp - 0x68c]
push edx
lea eax, [ebp - 0x67c]
push eax
push 2
push 0x10ec974
push 0x258
push 0x320
push 0x12c
push 0
mov ecx, 0x10ec97c
call fcn.01038770
cmp eax, 0xffffffff
je 0x105d206
push 0x10dd328
push 8
call fcn.0100dab0
add esp, 8
push ebx
call 0x105d1ec
jmp 0x105d1f1
pushal
call 0x105d1f7
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
jmp 0x105d233
push 0x10dd320
push 8
call fcn.0100dab0
add esp, 8
push ebx
call 0x105d21b
jmp 0x105d220
pushal
call 0x105d226
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0x10ec988
push 8
call fcn.0100dab0
add esp, 8
push ebx
call 0x105d248
jmp 0x105d24d
pushal
call 0x105d253
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x105c920
call fcn.01009900
cmp dword [eax + 0x7b0], 0
je 0x105d32a
push 0
mov eax, 0x10ec6e0
mov edx, 0x10dc26c
call fcn.0103a130
add esp, 4
mov esi, eax
call fcn.0105bdb0
sub esi, eax
push ebx
call 0x105d2a5
jmp 0x105d2aa
pushal
call 0x105d2b0
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
test esi, esi
jle 0x105d2ef
xor ecx, ecx
cmp esi, 2
setge cl
inc ecx
push ecx
push edi
call fcn.01055e40
push ebx
call 0x105d2d7
jmp 0x105d2dc
pushal
call 0x105d2e2
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.0105bdb0
test eax, eax
je 0x105d307
cmp esi, 2
jl 0x105d32a
call fcn.0105bdb0
cmp eax, 2
jge 0x105d32a
push ebx
call 0x105d30d
jmp 0x105d312
pushal
call 0x105d318
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
jmp 0x105d270
cmp byte [0x10fa7c4], 0
je 0x105c9b5
call fcn.01009900
cmp dword [eax + 0x7b0], 0
je 0x105c9b5
push 0
mov eax, 0x10ec6e0
mov edx, 0x10dc26c
call fcn.0103a130
add esp, 4
mov dword [edi], eax
push ebx
call 0x105d365
jmp 0x105d36a
pushal
call 0x105d370
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.0105bdb0
push ebx
call 0x105d388
jmp 0x105d38d
pushal
call 0x105d393
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [edi]
cmp ecx, eax
jge 0x105d3a8
mov eax, ecx
mov dword [edi], eax
push ebx
call 0x105d3b0
jmp 0x105d3b5
pushal
call 0x105d3bb
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0
mov eax, 0x10dc2f0
mov edx, 0x10dbc50
call fcn.0103a130
add esp, 4
mov dword [0x10faae4], eax
push ebx
call 0x105d3e7
jmp 0x105d3ec
pushal
call 0x105d3f2
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
cmp dword [0x10faae4], 0xffffffff
jne 0x105d461
push 0
mov edi, ebx
mov esi, 0x10dc2f0
call fcn.01039c90
add esp, 4
push ebx
call 0x105d41f
jmp 0x105d424
pushal
call 0x105d42a
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov dword [0x10faae4], ebx
push ebx
call 0x105d443
jmp 0x105d448
pushal
call 0x105d44e
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov edi, dword [ebp - 0x65c]
call fcn.010579b0
test eax, eax
jne 0x105d554
call fcn.01009900
cmp dword [eax + 0x7b0], 0
je 0x105d522
sub esp, 8
fld qword [0x10edd28]
fstp qword [esp]
push 0xffffff
lea edx, [ebp - 0x68c]
push edx
lea eax, [ebp - 0x67c]
push eax
push 2
push 0x10ec974
push 0x258
push 0x320
push 0x12c
push 0
mov ecx, 0x10ec97c
call fcn.01038770
cmp eax, 0xffffffff
je 0x105d4f5
push 0x10dd328
push 8
call fcn.0100dab0
add esp, 8
push ebx
call 0x105d4db
jmp 0x105d4e0
pushal
call 0x105d4e6
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
jmp 0x105d522
push 0x10dd320
push 8
call fcn.0100dab0
add esp, 8
push ebx
call 0x105d50a
jmp 0x105d50f
pushal
call 0x105d515
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0x10ec998
push 8
call fcn.0100dab0
add esp, 8
push ebx
call 0x105d537
jmp 0x105d53c
pushal
call 0x105d542
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
jmp 0x105d32a
cmp dword [ebp - 0x668], 0
jne 0x105d6e0
call fcn.01009900
mov eax, 0x1770
call fcn.010476c0
push ebx
call 0x105d576
jmp 0x105d57b
pushal
call 0x105d581
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
sub esp, 8
fld qword [str.ffffff]
fstp qword [esp]
push 0
lea ecx, [ebp - 0x68c]
push ecx
lea edx, [ebp - 0x67c]
push edx
push 0
push str.101010
push 0x258
push 0x320
push 0
push 0
mov ecx, 0x10dd930
call fcn.01038770
cmp eax, 0xffffffff
je 0x105d608
push 0x10dd314
push 8
call fcn.0100dab0
add esp, 8
push ebx
call 0x105d5e3
jmp 0x105d5e8
pushal
call 0x105d5ee
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x105c920
push 0
mov eax, 0x10ec9a8
mov edx, 0x10dc26c
call fcn.0103a130
add esp, 4
mov esi, eax
mov dword [ebp - 0x668], esi
push ebx
call 0x105d62a
jmp 0x105d62f
pushal
call 0x105d635
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0x10ec9b8
push 8
call fcn.0100dab0
add esp, 8
push ebx
call 0x105d657
jmp 0x105d65c
pushal
call 0x105d662
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esi - 6]
cmp eax, 0x36
jg 0x105d67b
test eax, eax
jge 0x105d6a9
mov dword [ebp - 0x668], 0x36
push ebx
call 0x105d68b
jmp 0x105d690
pushal
call 0x105d696
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov esi, dword [ebp - 0x668]
call fcn.01009900
mov eax, esi
imul eax, eax, 0x3e8
call fcn.010476c0
push ebx
call 0x105d6c1
jmp 0x105d6c6
pushal
call 0x105d6cc
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
jmp 0x105d6e0
mov ebx, 1
push 0xffffffffffffffff
lea eax, [ebp - 0x660]
push eax
xor ecx, ecx
xor edx, edx
call fcn.0100d400
add esp, 8
push ebx
call 0x105d6fb
jmp 0x105d700
pushal
call 0x105d706
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov byte [ebp - 0x32c], 0
push 0xc7
push 0
lea ecx, [ebp - 0x32b]
push ecx
call fcn.0109a300
add esp, 0xc
push ebx
call 0x105d736
jmp 0x105d73b
pushal
call 0x105d741
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov edx, dword [0x10faae4]
push edx
mov eax, dword [0x10fad28]
push eax
push 0x10ec9c4
lea ecx, [ebp - 0x32c]
push ecx
call fcn.01094420
add esp, 0x10
push ebx
call 0x105d775
jmp 0x105d77a
pushal
call 0x105d780
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
lea edx, [ebp - 0x32c]
push edx
push 0xb
call fcn.0100dab0
add esp, 8
push ebx
call 0x105d7a4
jmp 0x105d7a9
pushal
call 0x105d7af
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
cmp dword [ebp - 0x664], 0
je 0x105d32a
mov dword [edi + 8], ebx
push ebx
call 0x105d7d2
jmp 0x105d7d7
pushal
call 0x105d7dd
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0xb
lea eax, [ebp - 0x660]
push eax
xor ecx, ecx
xor edx, edx
call fcn.0100d400
add esp, 8
push ebx
call 0x105d805
jmp 0x105d80a
pushal
call 0x105d810
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.01009900
mov ecx, dword [ebp - 0x660]
mov edx, dword [ecx + 4]
mov dword [eax + 0x780], edx
push ebx
call 0x105d837
jmp 0x105d83c
pushal
call 0x105d842
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 8
lea eax, [ebp - 0x660]
push eax
xor ecx, ecx
xor edx, edx
call fcn.0100d400
add esp, 8
push ebx
call 0x105d86a
jmp 0x105d86f
pushal
call 0x105d875
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.01009900
mov ecx, dword [ebp - 0x660]
mov edx, dword [ecx + 4]
mov dword [eax + 0x19438], edx
push ebx
call 0x105d89c
jmp 0x105d8a1
pushal
call 0x105d8a7
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0
mov eax, 0x10dc3fc
mov edx, 0x10dbc50
call fcn.0103a130
add esp, 4
push ebx
call 0x105d8ce
jmp 0x105d8d3
pushal
call 0x105d8d9
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
test eax, eax
je 0x105d900
cmp eax, 0xffffffff
je 0x105d900
call fcn.01009900
cmp dword [eax + 0x19438], ebx
jne 0x105da3c
call fcn.01009900
mov ecx, eax
add ecx, 0x1b28
call fcn.01013b40
push ebx
call 0x105d918
jmp 0x105d91d
pushal
call 0x105d923
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.01009900
mov ecx, eax
add ecx, 0x1b28
call fcn.01012af0
push ebx
call 0x105d948
jmp 0x105d94d
pushal
call 0x105d953
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.01009900
cmp dword [eax + 0x7b0], 0
je 0x105da3c
push 0
mov eax, 0x10dd310
mov edx, 0x10eaf38
call fcn.0103a130
add esp, 4
push ebx
call 0x105d98c
jmp 0x105d991
pushal
call 0x105d997
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0
mov esi, 0x10dd310
cmp eax, 0x9c
ja 0x105d9dc
mov edi, eax
call fcn.01039c90
add esp, 4
push ebx
call 0x105d9c2
jmp 0x105d9c7
pushal
call 0x105d9cd
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
jmp 0x105da07
mov edi, 0x9c
call fcn.01039c90
add esp, 4
push ebx
call 0x105d9ef
jmp 0x105d9f4
pushal
call 0x105d9fa
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0
mov edi, ebx
mov esi, 0x10dc3fc
call fcn.01039c90
add esp, 4
push ebx
call 0x105da1e
jmp 0x105da23
pushal
call 0x105da29
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov edi, dword [ebp - 0x65c]
call fcn.01009900
xor esi, esi
cmp dword [eax + 0x7b0], esi
je 0x105da9e
call fcn.01009900
push 5
push 5
push 0x5f
push 0x5f
call fcn.01038a00
push ebx
call 0x105da63
jmp 0x105da68
pushal
call 0x105da6e
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.01059ac0
push ebx
call 0x105da86
jmp 0x105da8b
pushal
call 0x105da91
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.0101c890
mov dword [edi + 8], esi
push ebx
call 0x105daac
jmp 0x105dab1
pushal
call 0x105dab7
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.01009900
mov dword [eax + 0x7b4], esi
push ebx
call 0x105dad5
jmp 0x105dada
pushal
call 0x105dae0
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0x10ec9dc
push 8
call fcn.0100dab0
add esp, 8
push ebx
call 0x105db02
jmp 0x105db07
pushal
call 0x105db0d
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.01009900
cmp dword [eax + 0x7b0], esi
je 0x105d32a
call fcn.01009900
push 5
push 5
push 0x5f
push 0x5f
call fcn.01038a00
push ebx
call 0x105db43
jmp 0x105db48
pushal
call 0x105db4e
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.01059ac0
push ebx
call 0x105db66
jmp 0x105db6b
pushal
call 0x105db71
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.010588e0
push ebx
call 0x105db89
jmp 0x105db8e
pushal
call 0x105db94
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.01009900
cmp dword [eax + 0x7b0], esi
je 0x105d32a
push 0x10dc7d4
mov ecx, 0x10dc7d4
call fcn.0100d250
add esp, 4
push ebx
call 0x105dbca
jmp 0x105dbcf
pushal
call 0x105dbd5
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
cmp eax, esi
je 0x105d32a
push 0x10ec9e8
push 0xa
call fcn.0100dab0
add esp, 8
push ebx
call 0x105dbff
jmp 0x105dc04
pushal
call 0x105dc0a
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0
xor edi, edi
mov esi, 0x10dc3fc
call fcn.01039c90
add esp, 4
push ebx
call 0x105dc2e
jmp 0x105dc33
pushal
call 0x105dc39
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov eax, 0xc8
call fcn.0100ec90
push ebx
call 0x105dc56
jmp 0x105dc5b
pushal
call 0x105dc61
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
add dword [0x10faae4], ebx
push ebx
call 0x105dc7a
jmp 0x105dc7f
pushal
call 0x105dc85
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov edi, dword [0x10faae4]
mov eax, dword [ebp - 0x65c]
push 0
mov esi, 0x10dc2f0
cmp edi, dword [eax]
jg 0x105dd07
call fcn.01039c90
add esp, 4
push ebx
call 0x105dcb7
jmp 0x105dcbc
pushal
call 0x105dcc2
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.0100ea20
call fcn.0105ab40
push ebx
call 0x105dcdf
jmp 0x105dce4
pushal
call 0x105dcea
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov ebx, 1
mov edi, dword [ebp - 0x65c]
jmp 0x105d32a
mov edi, ebx
call fcn.01039c90
add esp, 4
push ebx
call 0x105dd17
jmp 0x105dd1c
pushal
call 0x105dd22
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov eax, 0xc8
call fcn.0100ec90
push ebx
call 0x105dd3f
jmp 0x105dd44
pushal
call 0x105dd4a
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
add dword [0x10fad28], ebx
push ebx
call 0x105dd63
jmp 0x105dd68
pushal
call 0x105dd6e
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
push 0
mov edi, dword [0x10fad28]
mov esi, 0x10dc298
call fcn.01039c90
add esp, 4
push ebx
call 0x105dd96
jmp 0x105dd9b
pushal
call 0x105dda1
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.0100ea20
mov eax, 0xc8
call fcn.0100ec90
push ebx
call 0x105ddc3
jmp 0x105ddc8
pushal
call 0x105ddce
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov ebx, 2
call fcn.0105ab40
push ebx
call 0x105ddeb
jmp 0x105ddf0
pushal
call 0x105ddf6
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
call fcn.0105bfa0
push ebx
call 0x105de0e
jmp 0x105de13
pushal
call 0x105de19
pop ebx
add ebx, 0xffffffa2
push 0xa11000
pop ebx
popal
pop ebx
pop ebx
mov edi, dword [ebp - 0x65c]
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x105c920
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.01090090
mov esp, ebp
pop ebp
ret