Function at 0x1007e50
Capabilities:
Check for time delay via gettickcount
Parse pe header
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5dc
mov eax, dword [0x102d280]
xor eax, esp
push ebx
push ebp
push esi
mov dword [esp + 0x5e4], eax
mov eax, dword [esp + 0x5f0]
mov esi, ecx
push edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x6c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, ebx
xor ecx, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
mov dword [0x102d61c], ebx
mov dword [0x102d62c], ebx
mov dword [0x102d620], esi
cmp word [esi], 0x5a4d
mov dword [esp + 0x80], eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x5c], 1
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x18], ecx
jne 0x10080a9
mov ecx, esi
mov eax, dword [ecx + 0x3c]
add eax, ecx
push 4
push eax
mov dword [0x102d624], eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10080a9
mov eax, dword [0x102d624]
cmp dword [eax], 0x4550
jne 0x10080a9
mov dword [0x102d61c], 1
movzx edx, word [eax + 0x14]
lea ecx, [edx + eax + 0x18]
mov dword [0x102d628], ecx
xor ecx, ecx
cmp word [eax + 0x18], 0x20b
sete cl
cmp ecx, ebx
mov dword [0x102d634], ecx
je 0x1007f8a
lea edx, [eax + 0x88]
mov dword [0x102d630], edx
mov ecx, dword [eax + 0x30]
mov dword [0x102d610], ecx
mov edx, dword [eax + 0x34]
mov dword [0x102d614], edx
jmp 0x1007fa2
lea ecx, [eax + 0x78]
mov dword [0x102d630], ecx
mov edx, dword [eax + 0x34]
mov dword [0x102d610], edx
mov dword [0x102d614], ebx
movzx ebp, word [eax + 6]
lea esi, [ebp + ebp*4]
add esi, esi
add esi, esi
add esi, esi
push esi
call fcn.0100d7bd
add esp, 4
cmp eax, ebx
mov dword [0x102d62c], eax
je 0x100809f
mov ecx, esi
mov esi, dword [0x102d628]
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
cmp ebp, ebx
rep movsb byte es:[edi], byte [esi]
jbe 0x10080a9
xor eax, eax
jmp 0x1007ff0
mov ecx, dword [0x102d62c]
cmp dword [eax + ecx + 8], ebx
lea edx, [eax + ecx + 8]
jne 0x100800c
mov ecx, dword [eax + ecx + 0x10]
mov dword [edx], ecx
mov ecx, dword [0x102d62c]
cmp dword [eax + ecx + 0x10], ebx
jne 0x100801c
mov dword [eax + ecx + 0x14], ebx
mov ecx, dword [0x102d62c]
cmp dword [eax + ecx + 0x14], ebx
jne 0x100802c
mov dword [eax + ecx + 0x10], ebx
mov ecx, dword [0x102d62c]
mov edx, dword [esp + 0x5f0]
cmp dword [eax + ecx + 0x14], edx
jbe 0x100804d
mov dword [eax + ecx + 0x10], ebx
mov ecx, dword [0x102d62c]
mov dword [eax + ecx + 0x14], ebx
mov ecx, dword [0x102d62c]
mov edx, dword [eax + ecx + 0x14]
mov edi, dword [eax + ecx + 0x10]
lea esi, [eax + ecx + 0x10]
add edi, edx
cmp edi, dword [esp + 0x5f0]
jbe 0x1008075
mov ecx, dword [esp + 0x5f0]
sub ecx, edx
mov dword [esi], ecx
mov ecx, dword [0x102d62c]
mov edx, dword [eax + ecx + 0x14]
and edx, 0x1ff
add dword [eax + ecx + 0x10], edx
mov ecx, dword [0x102d62c]
and dword [eax + ecx + 0x14], 0xfffffe00
add eax, 0x28
sub ebp, 1
jne 0x1007ff0
jmp 0x10080a9
mov eax, dword [0x102d628]
mov dword [0x102d62c], eax
push 0xa
push 0x10131c4
push 0xa
push 0x1013164
mov ecx, 0x1013208
lea eax, [esp + 0x50]
mov edx, 0x80
mov dword [0x102d618], ebx
call fcn.01003290
neg eax
sbb eax, eax
not eax
push 4
and eax, 0x10131ec
push eax
push 8
push 0x10131a4
mov ecx, 0x10132b8
lea eax, [esp + 0x74]
mov edx, 0x2000
call fcn.01003290
push 5
push 0x10131d8
push 8
push 0x1013144
mov ecx, 0x1013260
lea eax, [esp + 0x70]
mov edx, 0x80
call fcn.01003290
neg eax
sbb eax, eax
not eax
and eax, 0x10131f8
push eax
push 6
push 0x101318c
mov ecx, 0x1013320
lea eax, [esp + 0x90]
mov edx, 0x2000
call fcn.01003230
push 4
push 0x10120b4
push 4
push 0x101208c
mov ecx, 0x1012110
lea eax, [esp + 0xa0]
mov edx, 0x20002000
call fcn.01003290
add esp, 0x4c
neg eax
sbb eax, eax
not eax
push 5
and eax, 0x101209c
push eax
push 5
push 0x1012078
mov ecx, 0x10120c8
lea eax, [esp + 0x50]
mov edx, 0x80
call fcn.01003290
lea ebx, [esp + 0x64]
lea eax, [esp + 0x50]
call fcn.01001a70
lea ecx, [esp + 0x50]
push ecx
push 0
push 0x1012f98
push 0x80
push 0x20000400
push 2
push 0x1012f78
mov eax, 2
mov edx, 6
mov ecx, 0x1012e70
call fcn.010032c0
push 0x10122d8
push 0x10
push 0x10121f8
mov ecx, 0x101235c
lea eax, [esp + 0xb0]
mov edx, 0x80
call fcn.01003230
neg eax
sbb eax, eax
not eax
and eax, 0x10122e8
push eax
push 0x10
push 0x1012238
mov ecx, 0x1012394
lea eax, [esp + 0xa4]
mov edx, 0x20000400
call fcn.01003230
add esp, 0x44
push 0x1012314
push 0x20
push 0x1012178
mov ecx, 0x10123cc
lea eax, [esp + 0x6c]
mov edx, 0x20000400
call fcn.01003230
neg eax
sbb eax, eax
not eax
and eax, 0x1012300
push eax
push 8
push 0x1012154
mov ecx, 0x10123b4
lea eax, [esp + 0x90]
mov edx, 0x80
call fcn.01003230
push 0x1012328
push 0x10
push 0x1012278
mov ecx, 0x10123fc
lea eax, [esp + 0x94]
mov edx, 0x80
call fcn.01003230
push 0x1012338
push 8
push 0x10122b8
mov ecx, 0x1012434
lea eax, [esp + 0xa0]
mov edx, 0x80
call fcn.01003230
push 0x1012348
push 0x10
push 0x1012178
mov ecx, 0x1012464
lea eax, [esp + 0x9c]
mov edx, 0x20000400
call fcn.01003230
push 0
xor eax, eax
mov ecx, 0x20
mov edx, 0x1013648
call fcn.01003b50
add esp, 0x40
test eax, eax
je 0x10083bd
push 0x1013a18
push 0x1013648
lea eax, [esp + 0x34]
mov ecx, 0x1013708
mov edx, 0x80
call fcn.01003b90
push 0x10139ec
push 0x1013648
lea eax, [esp + 0x3c]
mov ecx, 0x10136f8
mov edx, 0x60
call fcn.01003b90
push 0x10139c0
push 0x1013648
lea eax, [esp + 0x44]
mov ecx, 0x10136e8
mov edx, 0x40
call fcn.01003b90
push 0x1013994
push 0x10136a8
lea eax, [esp + 0x4c]
mov ecx, 0x1013708
mov edx, 0x20
call fcn.01003b90
push 0x1013968
push 0x1013688
lea eax, [esp + 0x54]
mov ecx, 0x10136f8
mov edx, 0x20
call fcn.01003b90
push 0x101393c
push 0x1013668
lea eax, [esp + 0x5c]
mov ecx, 0x10136e8
mov edx, 0x20
call fcn.01003b90
push 0x1013910
push 0x1013648
lea eax, [esp + 0x64]
mov ecx, 0x10136d8
mov edx, 0x20
call fcn.01003b90
mov esi, dword [esp + 0x64]
add esp, 0x38
jmp 0x10083c1
mov esi, dword [esp + 0x48]
lea edx, [esp + 0x24]
push edx
push 0
push 0x1013728
push 0x101373c
push 0xfffffc00
push 0
push 0
push 0x40
push 0x1013388
mov edx, 0x10136c8
push 0x40
push 0x10133c8
mov ecx, edx
call fcn.01003bc0
add esp, 0x2c
test eax, eax
je 0x1008405
mov ebp, 1
mov edi, ebp
jmp 0x1008431
push 0
push 0x1013a44
push 0x1013718
lea eax, [esp + 0x1c]
push 0x1013408
push eax
mov eax, 0x10
call fcn.01007d00
mov edi, dword [esp + 0x50]
add esp, 0x14
mov ebp, 1
test esi, esi
jne 0x1008542
push esi
push esi
push esi
push 0x20000400
push esi
push esi
push esi
push esi
push 0x20
push 0x1013448
call fcn.01002c10
add esp, 0x28
test eax, eax
je 0x1008542
push 0x1013708
push 0x80
push 0x1013448
mov ecx, 0x10138d0
lea eax, [esp + 0x30]
mov edx, 0x20000400
call fcn.01003230
push 0x10136f8
push 0x60
push 0x1013448
mov ecx, 0x1013890
lea eax, [esp + 0x3c]
mov edx, 0x20000400
call fcn.01003230
push 0x10136e8
push 0x40
push 0x1013448
mov ecx, 0x1013850
lea eax, [esp + 0x48]
mov edx, 0x20000400
call fcn.01003230
push 0x1013708
push 0x20
push 0x10135c8
mov ecx, 0x1013810
lea eax, [esp + 0x54]
mov edx, 0x20000400
call fcn.01003230
push 0x10136f8
push 0x20
push 0x1013548
mov ecx, 0x10137d0
lea eax, [esp + 0x60]
mov edx, 0x20000400
call fcn.01003230
push 0x10136e8
push 0x20
push 0x10134c8
mov ecx, 0x1013790
lea eax, [esp + 0x6c]
mov edx, 0x20000400
call fcn.01003230
add esp, 0x48
push 0x10136d8
push 0x20
push 0x1013448
mov ecx, 0x1013750
lea eax, [esp + 0x30]
mov edx, 0x20000400
call fcn.01003230
mov esi, dword [esp + 0x30]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x10124e8
push ecx
mov eax, 0x10125b0
mov ecx, 0x1012538
mov edx, 0x50
call fcn.01007640
push 0
xor ecx, ecx
mov ebx, 0x20
mov edx, 0x1012498
call fcn.01002330
add esp, 0xc
test eax, eax
je 0x10085e0
push 0x1012610
mov eax, 0x1012550
mov ecx, 0x50
mov edx, 0x1012498
call fcn.01003620
add esp, 4
test eax, eax
jne 0x10085e0
test edi, edi
jne 0x10085e0
push 0x1012678
mov eax, 0x1012570
mov ecx, 0x48
mov edx, 0x1012498
call fcn.01003620
add esp, 4
test eax, eax
jne 0x10085e0
test esi, esi
jne 0x10085e0
lea edx, [esp + 0x10]
push 0x1012498
push edx
mov eax, 0x10126c0
mov ecx, 0x1012590
mov edx, ebx
call fcn.01007640
add esp, 8
push 0x10127c4
mov eax, 0x10127a0
mov ecx, 0x40
mov edx, 0x1012748
call fcn.01003620
add esp, 4
test eax, eax
jne 0x1008621
lea eax, [esp + 0x10]
push 0x1012708
push eax
mov eax, 0x10127b4
mov ecx, 0x1012788
mov edx, 0x40
call fcn.01007640
add esp, 8
push 0x1012ac8
mov eax, 0x1012a68
mov ecx, 0x80
mov edx, 0x10127d8
call fcn.01003b50
add esp, 4
test eax, eax
mov esi, ebp
jne 0x1008647
mov esi, dword [esp + 0x34]
push 0x1012b04
mov eax, 0x1012a74
mov ecx, 0x40
mov edx, 0x1012858
call fcn.01003b50
add esp, 4
test eax, eax
je 0x1008669
mov esi, ebp
push 0xf
push 0x1012898
mov eax, 0x1012b3c
mov ecx, 0x2000
mov edx, 0x1012a80
call fcn.01003200
add esp, 8
test eax, eax
jne 0x10086b6
test esi, esi
jne 0x100873a
lea ecx, [esp + 0x10]
push 0x10128d8
push ecx
mov eax, 0x1012b74
mov ecx, 0x1012a98
mov edx, 0x60
call fcn.01007640
add esp, 8
jmp 0x10086be
test esi, esi
jne 0x100873a
push 0x1012b58
mov eax, 0x1012a8c
mov ecx, 0x20
mov edx, 0x1012938
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x100873a
push 0x1012b80
mov eax, 0x1012a98
mov ecx, 0x10
mov edx, 0x1012968
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x100873a
push 0x1012b80
mov eax, 0x1012a98
mov ecx, 0x10
mov edx, 0x1012958
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x100873a
push 0x1012b90
mov eax, 0x1012aa4
mov ecx, 0x30
mov edx, 0x1012978
call fcn.01003b50
add esp, 4
push 0x1012bd0
push 0x1012ab8
push ebp
lea edx, [esp + 0x1c]
push 0x10129a8
push edx
mov ebx, 0x60
call fcn.010076f0
push 0x1012c18
push 0x1012ac0
push ebp
lea eax, [esp + 0x30]
push 0x1012a08
push eax
call fcn.010076f0
push 0x1012e40
push 0x1012e38
push ebp
lea ecx, [esp + 0x44]
push 0x1012c38
push ecx
mov ebx, pe_nt_image_headers32
call fcn.010076f0
push 0x1012e4c
push 0x1012e3c
push ebp
lea edx, [esp + 0x58]
push 0x1012d38
push edx
call fcn.010076f0
add esp, 0x50
push 0x1014b48
mov eax, 0x1014ad0
mov ecx, 0x20
mov edx, 0x1014a80
call fcn.01003b50
mov esi, eax
push 0x1014b7c
mov eax, 0x1014ae0
mov ecx, 0x20
mov edx, 0x1014aa0
call fcn.01003b50
add esp, 8
or eax, esi
jne 0x100884b
push 0x1014af8
mov eax, 0x1014ac0
mov ecx, 0x14
mov edx, 0x1014a44
call fcn.01003620
add esp, 4
test eax, eax
jne 0x100884b
push 0x1014af8
mov eax, 0x1014ac0
mov ecx, 0x14
mov edx, 0x1014a58
call fcn.01003620
add esp, 4
test eax, eax
jne 0x100884b
lea eax, [esp + 0x10]
push 0x1014a6c
push eax
mov eax, 0x1014af8
mov ecx, 0x1014ac0
mov edx, 0x14
call fcn.01007640
add esp, 8
push 0
xor eax, eax
mov ecx, 0x10
mov edx, 0x1014254
call fcn.01003620
add esp, 4
test eax, eax
je 0x1008886
lea ecx, [esp + 0x10]
push 0x1014244
push ecx
mov eax, 0x10144d4
mov ecx, 0x1014460
mov edx, 0x10
call fcn.01007640
add esp, 8
push 0x10144ac
mov eax, 0x1014450
mov ecx, 0x20
mov edx, 0x1014204
call fcn.01003620
add esp, 4
test eax, eax
jne 0x10088c7
lea edx, [esp + 0x10]
push 0x1014224
push edx
mov eax, 0x1014488
mov ecx, 0x1014440
mov edx, 0x20
call fcn.01007640
add esp, 8
push 0x10144f8
mov eax, 0x1014478
mov ecx, 0x84
mov edx, 0x1014298
call fcn.01003620
add esp, 4
test eax, eax
jne 0x1008968
push 0x10144e8
mov eax, 0x1014470
mov ecx, 0x10
mov edx, 0x1014264
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x1008968
lea eax, [esp + 0x10]
push 0x1014274
push eax
mov eax, 0x10144e8
mov ecx, 0x1014470
mov edx, 0x20
call fcn.01007640
lea ecx, [esp + 0x18]
push 0x1014320
push ecx
mov eax, 0x10144e8
mov ecx, 0x1014470
mov edx, 0x90
call fcn.01007640
lea edx, [esp + 0x20]
push 0x10143b0
push edx
mov eax, 0x10144e8
mov ecx, 0x1014470
mov edx, 0x90
call fcn.01007640
add esp, 0x18
push 0
xor ecx, ecx
mov ebx, 4
mov edx, 0x1012e88
call fcn.01002330
add esp, 4
test eax, eax
je 0x10089bb
push 8
push 0x1012e8c
mov eax, 0x1012fe4
mov ecx, 0x20000400
mov edx, 0x1012f7c
call fcn.01003200
push 8
push 0x1012eac
mov eax, 0x1013010
mov ecx, 0x20000400
mov edx, 0x1012f7c
call fcn.01003200
add esp, 0x10
push 0
push 0
push 0
push 0x400
push 0
push 0
push 0
push 0
push 2
push 0x1012ecc
call fcn.01002c10
add esp, 0x28
test eax, eax
je 0x1008a1a
push 0x14
push 0x1012ed8
mov eax, 0x1013058
mov ecx, 0x400
mov edx, 0x1012f80
call fcn.01003200
push 0x14
push 0x1012f28
mov eax, 0x101308c
mov ecx, 0x400
mov edx, 0x1012f8c
call fcn.01003200
add esp, 0x10
push 0
xor ecx, ecx
mov ebx, 4
mov edx, 0x10130d0
call fcn.01002330
add esp, 4
test eax, eax
je 0x1008a79
push 0x10
push 0x10130d0
mov eax, 0x1013134
mov ecx, 0x10
mov edx, 0x1013110
call fcn.01003200
add esp, 8
test eax, eax
jne 0x1008a79
push 0x1013110
push 2
push 0x10130c4
mov eax, 0x1013114
mov ecx, 0x400
mov edx, 2
call fcn.01003260
add esp, 0xc
push 0xc
push 0x1013c40
mov eax, 0x1013cd4
mov ecx, 0x10
mov edx, 0x1013ccc
call fcn.01003200
add esp, 8
test eax, eax
jne 0x1008adb
push eax
push eax
push eax
push 0x80
push eax
push eax
push eax
push eax
push 6
push 0x1013c70
call fcn.01002c10
add esp, 0x28
test eax, eax
je 0x1008adb
lea eax, [esp + 0x10]
push 0x1013c88
push eax
mov eax, 0x1013ce0
mov ecx, 0x1013ccc
mov edx, 0x40
call fcn.01007640
add esp, 8
push 0x101401c
mov eax, 0x1013fb0
mov ecx, 0x50
mov edx, 0x1013d10
call fcn.01003620
add esp, 4
test eax, eax
je 0x1008aff
mov dword [esp + 0x20], ebp
push 0x1014048
mov eax, 0x1013fb0
mov ecx, 0x40
mov edx, 0x1013da0
call fcn.01003620
add esp, 4
test eax, eax
jne 0x1008b45
cmp dword [esp + 0x20], eax
jne 0x1008b49
push 0x1014078
mov eax, 0x1013fb8
mov ecx, 4
mov edx, 0x1013de0
call fcn.01003620
add esp, 4
test eax, eax
je 0x1008b49
mov dword [esp + 0x20], ebp
push 0x10140ac
mov eax, 0x1013fc8
mov ecx, 0x40
mov edx, 0x1013d60
call fcn.01003620
add esp, 4
test eax, eax
jne 0x1008b8a
lea ecx, [esp + 0x10]
push 0x1013de4
push ecx
mov eax, 0x10140d8
mov ecx, 0x1013fd0
mov edx, 4
call fcn.01007640
add esp, 8
push 0x1014110
push 0x1013fe0
lea edx, [esp + 0x18]
push 0x1013de8
push edx
mov edi, 0x12
call fcn.01007bf0
push 0x1014140
push 0x1013fe8
push ebp
push 0x28
lea eax, [esp + 0x30]
push 0x1013e30
push eax
call fcn.01007a10
push 0x1014140
push 0x1013ff0
push ebp
push 0x28
lea ecx, [esp + 0x48]
push 0x1013e80
push ecx
call fcn.01007a10
add esp, 0x40
push 0x101416c
push 0x1013ffc
push ebp
push 0x28
lea edx, [esp + 0x20]
push 0x1013ed0
push edx
call fcn.01007a10
push 0x101416c
push 0x1014008
push ebp
push 0x28
lea eax, [esp + 0x38]
push 0x1013f20
push eax
call fcn.01007a10
push 0x10141a0
push 0x1013ff0
push ebp
push 0x10
lea ecx, [esp + 0x50]
push 0x1013f70
push ecx
call fcn.01007a10
add esp, 0x48
push 0x10141d0
push 0x1014008
push ebp
push 0x10
lea edx, [esp + 0x20]
push 0x1013f90
push edx
call fcn.01007a10
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
xor esi, esi
movzx eax, word [esi + 0x10146ae]
movzx ecx, byte [esi + 0x10146ad]
push eax
shl ecx, 8
push ecx
push 0x1014718
lea edx, [esp + 0xf4]
push 0x1011fa4
push edx
call edi
movzx eax, byte [esi + 0x10146ac]
mov ecx, dword [esi + 0x10146a8]
add eax, eax
push 0x1014710
add eax, eax
push eax
push ecx
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x10c]
call fcn.01007670
add esi, 8
add esp, 0x24
cmp esi, 0x68
jb 0x1008c61
lea eax, [esp + 0x10]
push 0x1014768
push eax
mov eax, 0x1014830
mov ecx, 0x1014828
mov edx, 0x60
call fcn.01007640
lea ecx, [esp + 0x18]
push 0x10147c8
push ecx
mov eax, 0x1014860
mov ecx, 0x1014828
mov edx, 0x60
call fcn.01007640
lea edx, [esp + 0x20]
push 0x10149a8
push edx
mov eax, 0x1014a30
mov ecx, 0x1014a28
mov edx, 0x80
call fcn.01007640
push 0xc
push 0x1014890
mov eax, 0x10148d8
mov ecx, 0x80
mov edx, 0x10148d0
call fcn.01003200
add esp, 0x20
test eax, eax
jne 0x1008d5a
push 0x1014904
push 0x10148d0
push eax
lea eax, [esp + 0x1c]
push 0x10148c0
push eax
mov ebx, 0x10
call fcn.010076f0
add esp, 0x14
lea ecx, [esp + 0x10]
push 0x1014928
push ecx
mov eax, 0x1014970
mov ecx, 0x1014968
mov edx, 0x40
call fcn.01007640
push 0x1013a98
mov eax, 0xd0
lea ecx, [esp + 0x1f4]
call fcn.010016e0
push 0
xor ecx, ecx
mov ebx, 0x18
mov edx, 0x1013a98
call fcn.01002330
mov edi, eax
add esp, 0x10
test edi, edi
je 0x1008f1e
mov eax, dword [esp + 0x1c]
mov ecx, 4
sub ecx, eax
mov dword [esp + 0x34], ecx
mov ecx, 8
sub ecx, eax
mov dword [esp + 0x3c], ecx
mov ecx, 0xc
sub ecx, eax
mov dword [esp + 0x48], ecx
mov ecx, 0x10
sub ecx, eax
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x5f0]
xor eax, eax
mov esi, edi
add edx, edi
lea ecx, [esp + 0x1f0]
lea esp, [esp]
mov ebp, dword [esp + 0x34]
add ebp, edx
cmp ebp, ebx
ja 0x1008ea5
mov ebp, dword [edx]
xor ebp, 0xc1c1c1c1
cmp ebp, dword [ecx - 8]
jne 0x1008ea5
mov ebp, dword [esp + 0x3c]
add ebp, edx
cmp ebp, ebx
ja 0x1008e8f
mov ebp, dword [esp + 0x1c]
mov ebp, dword [esi + ebp + 4]
xor ebp, 0xc1c1c1c1
cmp ebp, dword [ecx - 4]
jne 0x1008e8f
mov ebp, dword [esp + 0x48]
add ebp, edx
cmp ebp, ebx
ja 0x1008e97
mov ebp, dword [esp + 0x1c]
mov ebp, dword [esi + ebp + 8]
xor ebp, 0xc1c1c1c1
cmp ebp, dword [ecx]
jne 0x1008e97
mov ebp, dword [esp + 0x84]
add ebp, edx
cmp ebp, ebx
ja 0x1008e9f
mov ebp, dword [esp + 0x1c]
mov ebp, dword [esi + ebp + 0xc]
xor ebp, 0xc1c1c1c1
cmp ebp, dword [ecx + 4]
jne 0x1008e9f
add eax, 4
add ecx, 0x10
add esi, 0x10
add edx, 0x10
cmp eax, 0x34
jb 0x1008e00
jmp 0x1008ea5
add eax, 1
add esi, 4
jmp 0x1008ea5
add eax, 2
add esi, 8
jmp 0x1008ea5
add eax, 3
add esi, 0xc
cmp eax, 5
mov ecx, 0x1011f98
ja 0x1008eb4
mov ecx, 0x1011ffc
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
shr eax, 1
push 0x1013b68
sub eax, 1
push eax
push 0x1013b70
push ecx
lea eax, [esp + 0xb8]
push eax
call ebp
mov edx, dword [0x102d4d8]
push 0x1013bb4
push 0
lea ecx, [esp + 0xc4]
push ecx
push edi
push edx
xor edx, edx
xor ecx, ecx
call fcn.010028c0
push 0
lea ecx, [edi + 0x18]
mov ebx, 0x18
mov edx, 0x1013a98
call fcn.01002330
mov edi, eax
add esp, 0x2c
test edi, edi
jne 0x1008de1
test esi, esi
jne 0x1008f9a
push 0x1013b78
push 4
push 0x1013a84
mov eax, 0x1013bdc
mov ecx, 0x400
mov edx, 2
call fcn.01003260
add esp, 0xc
test eax, eax
jne 0x1008f93
push 0x1013b84
push 2
push 0x1013a74
mov eax, 0x1013bf8
mov ecx, 0x400
mov edx, 1
call fcn.01003260
add esp, 0xc
test eax, eax
jne 0x1008f93
push 0x1013b98
push 2
push 0x1013a7c
mov eax, 0x1013c14
mov ecx, 0x400
mov edx, 1
call fcn.01003260
add esp, 0xc
test eax, eax
je 0x1008fa0
mov edi, 1
jmp 0x1008fa4
mov edi, dword [esp + 0x68]
jmp 0x1008faa
mov edi, dword [esp + 0x68]
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
push 0x1017798
mov eax, 0x1017744
mov ecx, 0x60
mov edx, 0x1017680
call fcn.01003620
add esp, 4
test eax, eax
jne 0x1009003
push eax
xor ecx, ecx
mov ebx, 4
mov edx, 0x1017740
call fcn.01002330
add esp, 4
test eax, eax
je 0x1009038
push 0x10177b0
mov eax, 0x1017744
mov ecx, 0x40
mov edx, 0x10176e0
call fcn.01003620
add esp, 4
test eax, eax
je 0x1009008
mov edi, 1
push 0x101774c
push 2
push 0x1017720
mov eax, 0x10177c8
mov ecx, 0x2000
mov edx, 1
call fcn.01003260
add esp, 0xc
test eax, eax
je 0x1009042
mov edi, 1
mov esi, edi
jmp 0x1009046
mov dword [esp + 0x5c], 0
jmp 0x1009071
mov esi, dword [esp + 0x4c]
push 0x1017760
push 2
push 0x1017728
mov eax, 0x1017880
mov ecx, 0x2000
mov edx, 1
call fcn.01003260
add esp, 0xc
test eax, eax
jne 0x10090df
test esi, esi
jne 0x10090b4
push 0x101774c
push 2
push 0x1017730
mov eax, 0x1017820
mov ecx, 0x2000
mov edx, 1
call fcn.01003260
push 0x1017760
push 2
push 0x1017738
mov eax, 0x10178d8
mov ecx, 0x2000
mov edx, 1
call fcn.01003260
add esp, 0x18
test edi, edi
jne 0x10090df
cmp dword [esp + 0x5c], edi
je 0x10090df
lea eax, [esp + 0x10]
push 0x1017740
push eax
mov eax, 0x1017938
mov ecx, 0x1017774
mov edx, 4
call fcn.01007640
add esp, 8
push 0x1014d38
push 0x1014d10
push 0
lea ecx, [esp + 0x1c]
push 0x1014bb0
push ecx
mov ebx, 0x80
call fcn.010076f0
push 0x1014d8c
push 0x1014d1c
push 0
lea edx, [esp + 0x30]
push 0x1014c30
push edx
call fcn.010076f0
push 0
push 0
push 0x1014dbc
push 0x1014d9c
push 0
push 0
push 0
push 0x20
push 0x1014cb0
mov edx, 0x1014d24
push 0x1c
push 0x1014cb0
mov ecx, edx
call fcn.01003bc0
add esp, 0x54
lea eax, [esp + 0x10]
push 0x1014cd0
push eax
mov eax, 0x1014dc8
mov ecx, 0x1014d2c
mov edx, 0x40
call fcn.01007640
push 0x10150f0
mov eax, 0x10150ac
mov ecx, 0x60
mov edx, 0x1014fa0
call fcn.01003620
add esp, 0xc
test eax, eax
jne 0x10091ea
push 0x101510c
mov eax, 0x10150bc
mov ecx, 0x60
mov edx, 0x1015000
call fcn.01003620
add esp, 4
test eax, eax
jne 0x10091ea
push 0x1015128
mov eax, 0x10150cc
mov ecx, 9
mov edx, 0x10150a0
call fcn.01003620
add esp, 4
test eax, eax
jne 0x10091ea
lea ecx, [esp + 0x10]
push 0x1015060
push ecx
mov eax, 0x1015164
mov ecx, 0x10150e0
mov edx, 0x40
call fcn.01007640
add esp, 8
push 0x1014ef4
push 0x1014ed8
push 0
lea edx, [esp + 0x1c]
push 0x1014de4
push edx
mov ebx, 0x10
call fcn.010076f0
push 0x1014f20
push 0x1014edc
push 0
lea eax, [esp + 0x30]
push 0x1014df8
push eax
mov ebx, 0x80
call fcn.010076f0
lea ecx, [esp + 0x38]
push 0x1014e78
push ecx
mov eax, 0x1014f4c
mov ecx, 0x1014ee4
mov edx, 0x40
call fcn.01007640
lea edx, [esp + 0x40]
push 0x1014eb8
push edx
mov eax, 0x1014f84
mov ecx, 0x1014eec
mov edx, 0x20
call fcn.01007640
push 0x1015334
mov eax, 0x10152d8
mov ecx, 0x60
mov edx, 0x1015200
call fcn.01003620
add esp, 0x3c
test eax, eax
jne 0x10092a7
lea eax, [esp + 0x10]
push 0x1015180
push eax
mov eax, 0x10152f0
mov ecx, 0x10152c0
mov edx, 0x40
call fcn.01007640
add esp, 8
push 0x1015308
mov eax, 0x10152cc
mov ecx, 0x40
mov edx, 0x10151c0
call fcn.01003620
add esp, 4
test eax, eax
jne 0x10092e8
lea ecx, [esp + 0x10]
push 0x1015260
push ecx
mov eax, 0x1015368
mov ecx, 0x10152e4
mov edx, 0x60
call fcn.01007640
add esp, 8
push 0x1015468
mov eax, 0x1015448
mov ecx, 0x60
mov edx, 0x1015388
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x100932a
push 0x1015488
push 0x1015458
push eax
lea edx, [esp + 0x1c]
push 0x10153e8
push edx
mov ebx, 0x60
call fcn.010076f0
add esp, 0x14
push 0x101564c
push 0x10155d8
push 0
lea eax, [esp + 0x1c]
push 0x1015588
push eax
mov ebx, 0x40
call fcn.010076f0
push 0x10155ec
push 0x10155c8
push 0
lea ecx, [esp + 0x30]
push 0x10154a8
push ecx
mov ebx, 0x60
call fcn.010076f0
lea edx, [esp + 0x38]
push 0x1015508
push edx
mov eax, 0x1015614
mov ecx, 0x10155c8
mov edx, 0x80
call fcn.01007640
push 0x1015984
push 0x1015908
push 0
lea eax, [esp + 0x4c]
push 0x1015688
push eax
mov ebx, 0x40
call fcn.010076f0
add esp, 0x44
push 0x10159b0
push 0x1015920
push 0
lea ecx, [esp + 0x1c]
push 0x10156c8
push ecx
call fcn.010076f0
push 0x10159dc
mov eax, 0x101593c
mov ecx, 0x80
mov edx, 0x1015708
call fcn.01003620
add esp, 0x18
test eax, eax
jne 0x1009407
lea edx, [esp + 0x10]
push 0x1015788
push edx
mov eax, 0x1015a00
mov ecx, 0x101594c
mov edx, 0x80
call fcn.01007640
add esp, 8
push 0x1015a24
mov eax, 0x1015960
mov ecx, 0x80
mov edx, 0x1015808
call fcn.01003620
add esp, 4
test eax, eax
jne 0x1009448
lea eax, [esp + 0x10]
push 0x1015888
push eax
mov eax, 0x1015a48
mov ecx, 0x1015970
mov edx, 0x80
call fcn.01007640
add esp, 8
push 0x1015b44
mov eax, 0x1015b30
mov ecx, 0x40
mov edx, 0x1015a70
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x10094a9
push 0x1015b44
mov eax, 0x1015b30
mov ecx, 0x40
mov edx, 0x1015ab0
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x10094a9
lea ecx, [esp + 0x10]
push 0x1015af0
push ecx
mov eax, 0x1015b44
mov ecx, 0x1015b30
mov edx, 0x40
call fcn.01007640
add esp, 8
push 0
push 0
push 0x1015d00
push 0x1015d00
push 0xe0
push 0x20
push 0x1015c50
push 0x20
push 0x1015c30
push 0x40
push 0x1015bf0
mov edx, 0x1015c90
mov ecx, 0x1015ca0
call fcn.01003bc0
add esp, 0x2c
test eax, eax
jne 0x1009529
push 0x1015cb0
mov eax, 0x1015c70
mov ecx, 0x40
mov edx, 0x1015b70
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x1009529
push 0x1015cd4
push 0x1015c80
push eax
lea edx, [esp + 0x1c]
push 0x1015bb0
push edx
mov ebx, 0x40
call fcn.010076f0
add esp, 0x14
lea eax, [esp + 0x10]
push 0x1015d24
push eax
mov eax, 0x1015e60
mov ecx, 0x1015e48
mov edx, 0x30
call fcn.01007640
lea ecx, [esp + 0x18]
push 0x1015d54
push ecx
mov eax, 0x1015e98
mov ecx, 0x1015e54
mov edx, 0x30
call fcn.01007640
lea edx, [esp + 0x20]
push 0x1015d88
push edx
mov eax, 0x1015e60
mov ecx, 0x1015e48
mov edx, 0x60
call fcn.01007640
lea eax, [esp + 0x28]
push 0x1015de8
push eax
mov eax, 0x1015e98
mov ecx, 0x1015e54
mov edx, 0x60
call fcn.01007640
push 0x1015fa4
mov eax, 0x1015f7c
mov ecx, 0x40
mov edx, 0x1015ef0
call fcn.01003b50
add esp, 0x24
test eax, eax
jne 0x10095fe
push eax
push eax
push eax
push 0x10
push eax
push eax
push eax
push eax
push 0x10
push 0x1015f30
call fcn.01002c10
add esp, 0x28
test eax, eax
je 0x10095fe
lea ecx, [esp + 0x10]
push 0x1015ed0
push ecx
mov eax, 0x1015f8c
mov ecx, 0x1015f70
mov edx, 0x20
call fcn.01007640
add esp, 8
push 0x10162a4
mov eax, 0x1016278
mov ecx, 0x40
mov edx, 0x1016130
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x1009681
push 0x10162a4
mov eax, 0x1016278
mov ecx, 0x40
mov edx, 0x1016170
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x1009681
push 0x10162a4
mov eax, 0x1016268
mov ecx, 0x30
mov edx, 0x10161b0
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x1009681
push 0x1016260
push 8
push 0x10161e0
mov eax, 0x10162a4
mov ecx, 0x400
mov edx, 2
call fcn.01003260
add esp, 0xc
push 0x10162c0
mov eax, 0x1016294
mov ecx, 0x40
mov edx, 0x1016200
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x10096c4
push 0x1016288
push 8
push 0x1016240
mov eax, 0x10162c0
mov ecx, 0x400
mov edx, 2
call fcn.01003260
add esp, 0xc
push 6
push 0x10162e0
mov eax, 0x101633c
mov ecx, 0x2000
mov edx, 0x1016320
call fcn.01003200
push 5
push 0x10162f8
mov eax, 0x1016358
mov ecx, 0x400
mov edx, 0x1016324
call fcn.01003200
push 5
push 0x101630c
mov eax, 0x10163b0
mov ecx, 0x400
mov edx, 0x1016330
call fcn.01003200
push 0x10160e4
push 0x10160c0
push 0
lea edx, [esp + 0x34]
push 0x1015fc0
push edx
mov ebx, 0x80
call fcn.010076f0
push 0x1016104
push 0x10160d0
push 0
lea eax, [esp + 0x48]
push 0x1016040
push eax
call fcn.010076f0
add esp, 0x40
lea ecx, [esp + 0x10]
push 0x1016408
push ecx
mov eax, 0x10166e8
mov ecx, 0x1016680
mov edx, 0x40
call fcn.01007640
push 0x1016710
push 0x1016684
push 0
lea edx, [esp + 0x24]
push 0x1016448
push edx
mov ebx, 0x23
call fcn.010076f0
push 0x1016750
push 0x1016690
push 0
lea eax, [esp + 0x38]
push 0x1016470
push eax
mov ebx, 0x40
call fcn.010076f0
push 0x1016784
push 0x1016698
push 0
lea ecx, [esp + 0x4c]
push 0x10164b0
push ecx
call fcn.010076f0
add esp, 0x44
lea edx, [esp + 0x10]
push 0x10164f0
push edx
mov eax, 0x10167b8
mov ecx, 0x10166a4
mov edx, ebx
call fcn.01007640
lea eax, [esp + 0x18]
push 0x10165c0
push eax
mov eax, 0x1016804
mov ecx, 0x10166c0
mov edx, 0x80
call fcn.01007640
push 0x1016640
lea ecx, [esp + 0x24]
push ecx
mov eax, 0x1016824
mov ecx, 0x10166d0
mov edx, ebx
call fcn.01007640
lea edx, [esp + 0x28]
push 0x1016530
push edx
mov eax, 0x10167dc
mov ecx, 0x10166b4
mov edx, 0x20
call fcn.01007640
lea eax, [esp + 0x30]
push 0x1016550
push eax
mov eax, 0x101683c
mov ecx, 0x10166e0
mov edx, 0x24
call fcn.01007640
lea ecx, [esp + 0x38]
push 0x1016578
push ecx
mov eax, 0x1016860
mov ecx, 0x10166e4
mov edx, 0x48
call fcn.01007640
lea edx, [esp + 0x40]
push 0x1016888
push edx
mov eax, 0x10169c8
mov ecx, 0x1016990
mov edx, ebx
call fcn.01007640
lea eax, [esp + 0x48]
push 0x1016910
push eax
mov eax, 0x10169c8
mov ecx, 0x1016998
mov edx, ebx
call fcn.01007640
add esp, 0x40
lea ecx, [esp + 0x10]
push 0x1016950
push ecx
mov eax, 0x10169c8
mov ecx, 0x10169a8
mov edx, ebx
call fcn.01007640
push 0x10169c8
push 0x10169b8
push 1
push 0x24
lea edx, [esp + 0x28]
push 0x10168c8
push edx
call fcn.01007a10
lea eax, [esp + 0x30]
push 0x10169e8
push eax
mov eax, 0x1016b04
mov ecx, 0x1016ae8
mov edx, 0x80
call fcn.01007640
lea ecx, [esp + 0x38]
push 0x1016a68
push ecx
mov eax, 0x1016b28
mov ecx, 0x1016af0
mov edx, 0x80
call fcn.01007640
push 2
push 0x1016b70
mov eax, 0x1016be8
mov ecx, 0x400
mov edx, 0x1016bc8
call fcn.01003200
push 0x1016c04
push 0x1016bd8
push 0
push 0x1016b78
lea edx, [esp + 0x58]
push edx
mov ebx, 0x50
call fcn.010076f0
add esp, 0x4c
lea eax, [esp + 0x10]
push 0x1016c30
push eax
mov eax, 0x1016cb8
mov ecx, 0x1016cb0
mov edx, 0x80
call fcn.01007640
lea ecx, [esp + 0x18]
push 0x1016cc8
push ecx
mov eax, 0x1017178
mov ecx, 0x10170bc
mov edx, 0x60
call fcn.01007640
push 0x1017188
push 0x10170b4
push 0
lea edx, [esp + 0x2c]
push 0x1016d28
push edx
mov ebx, 0x28
call fcn.010076f0
push 0x1017198
push 0x10170c4
push 0
lea eax, [esp + 0x40]
push 0x1016d50
push eax
mov ebx, 0x30
call fcn.010076f0
push 0x10171ac
push 0x10170c4
push 0
lea ecx, [esp + 0x54]
push 0x1016d80
push ecx
call fcn.010076f0
add esp, 0x4c
lea edx, [esp + 0x10]
push 0x1016db0
push edx
mov eax, 0x10171bc
mov ecx, 0x10170cc
mov edx, 0x60
call fcn.01007640
push 0x10171e0
push 0x10170dc
push 0
lea eax, [esp + 0x24]
push 0x1016e10
push eax
mov ebx, 0x5f
call fcn.010076f0
push 0x10171f4
push 0x10170e8
push 1
push 0x40
lea ecx, [esp + 0x3c]
push 0x1016e70
push ecx
call fcn.01007a10
push 0x1017200
push 0x10170ec
push 0
lea edx, [esp + 0x50]
push 0x1016ef0
push edx
mov ebx, 0x30
call fcn.010076f0
add esp, 0x48
push 0x101721c
push 0x10170f4
push 0
push 0x1016f20
lea eax, [esp + 0x20]
push eax
mov ebx, 0x20
call fcn.010076f0
lea ecx, [esp + 0x24]
push 0x1016f40
push ecx
mov eax, 0x1017234
mov ecx, 0x10170fc
mov edx, 0x30
call fcn.01007640
lea edx, [esp + 0x2c]
push 0x1016f70
push edx
mov eax, 0x1017264
mov ecx, 0x1017104
mov edx, 0x14
call fcn.01007640
push 0x1017274
push 0x101710c
push 1
lea eax, [esp + 0x40]
push 0x1016f84
push eax
mov ebx, 0x10
call fcn.010076f0
push 0x1017280
push 0x1017114
push 0
lea ecx, [esp + 0x54]
push 0x1016f98
push ecx
mov ebx, 0x40
call fcn.010076f0
add esp, 0x4c
push 9
push 0x1016fd8
mov eax, 0x1017294
mov ecx, 0x80
mov edx, 0x101711c
call fcn.01003200
push 0xc
push 0x1016ffc
mov eax, 0x1017294
mov ecx, 0x80
mov edx, 0x1017124
call fcn.01003200
push 6
push 0x101702c
mov eax, 0x10172bc
mov ecx, 0x400
mov edx, 0x1017130
call fcn.01003200
push 5
push 0x1017044
mov eax, 0x10172d4
mov ecx, 0x2000
mov edx, 0x1017138
call fcn.01003200
push 4
push 0x1017058
mov eax, 0x10172f8
mov ecx, 0x80
mov edx, 0x1017148
call fcn.01003200
push 5
push 0x1017068
mov eax, 0x10172f8
mov ecx, 0x80
mov edx, 0x1017154
call fcn.01003200
push 8
push 0x101707c
mov eax, 0x1017314
mov ecx, 0x400
mov edx, 0x1017160
call fcn.01003200
push 2
push 0x101709c
mov eax, 0x1017330
mov ecx, 0x2000
mov edx, 0x1017168
call fcn.01003200
add esp, 0x40
push 2
push 0x10170a4
mov eax, 0x1017348
mov ecx, 0x400
mov edx, 0x1017170
call fcn.01003200
push 2
push 0x10170ac
mov eax, 0x1017368
mov ecx, 0x400
mov edx, 0x1017174
call fcn.01003200
push 8
push 0x10174d0
mov eax, 0x10174f8
mov ecx, 0x400
mov edx, 0x10174f0
call fcn.01003200
lea edx, [esp + 0x28]
push 0x10173b4
push edx
mov eax, 0x1017418
mov ecx, 0x101740c
mov edx, 0x28
call fcn.01007640
lea eax, [esp + 0x30]
push 0x10173dc
push eax
mov eax, 0x1017438
mov ecx, 0x1017410
mov edx, 0x30
call fcn.01007640
lea ecx, [esp + 0x38]
push 0x101747c
push ecx
mov eax, 0x10174b0
mov ecx, 0x10174ac
mov edx, 0x30
call fcn.01007640
lea edx, [esp + 0x40]
push 0x1017518
push edx
mov eax, 0x1017544
mov ecx, 0x101753c
mov edx, 0x24
call fcn.01007640
lea eax, [esp + 0x48]
push 0x101755c
push eax
mov eax, 0x1017594
mov ecx, 0x101758c
mov edx, 0x30
call fcn.01007640
add esp, 0x40
lea ecx, [esp + 0x10]
push 0x10175b0
push ecx
mov eax, 0x10175e4
mov ecx, 0x10175dc
mov edx, 0x2a
call fcn.01007640
lea edx, [esp + 0x18]
push 0x1017638
push edx
mov eax, 0x1017668
mov ecx, 0x101765c
mov edx, 0x24
call fcn.01007640
xor esi, esi
push esi
xor eax, eax
mov ecx, 0x10
mov edx, 0x10175f0
call fcn.01003b50
add esp, 0x14
test eax, eax
je 0x1009dbd
lea eax, [esp + 0x4c]
push eax
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x16
push 0x10175f0
xor edx, edx
xor ecx, ecx
mov dword [esp + 0x74], esi
mov dword [esp + 0x78], esi
call fcn.01003640
add esp, 0x28
test eax, eax
je 0x1009d9b
lea ecx, [esp + 0x4c]
push ecx
push esi
push esi
push esi
push esi
push esi
push 0x1017608
push esi
push 0x11
push 0x10175f0
mov edx, 0x1017610
xor ecx, ecx
call fcn.01003640
add esp, 0x28
lea esi, [esp + 0x4c]
call fcn.01001a40
jmp 0x1009dbd
push 0x1017610
push 0x1017608
push esi
lea edx, [esp + 0x1c]
push 0x10175f0
push edx
mov ebx, 0x11
call fcn.010076f0
add esp, 0x14
push 0
xor eax, eax
mov ecx, 0x14
mov edx, 0x1017994
call fcn.01003b70
add esp, 4
test eax, eax
je 0x1009e30
push 0
push 0
push 2
push 4
push 1
push 0
push 0x10179cc
push 1
push 0x35
push 0x1017994
mov edx, 0x10179f4
mov ecx, 0x1003f60
call fcn.01003640
add esp, 0x28
test eax, eax
jne 0x1009e30
push eax
push eax
push 2
push 4
push 1
push eax
push 0x10179dc
push 1
push 0x14
push 0x1017994
mov edx, 0x1017a10
mov ecx, 0x1003f60
call fcn.01003640
add esp, 0x28
push 0x1017ae8
mov eax, 0x1017ab0
mov ecx, 0x60
mov edx, 0x1017a30
call fcn.01003b50
add esp, 4
test eax, eax
jne 0x1009e6e
push 4
push 0x1017a90
mov eax, 0x1017b30
mov ecx, 0x80
mov edx, 0x1017ac0
call fcn.01003200
add esp, 8
cmp dword [esp + 0x20], 0
jne 0x1009e98
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
push 0x1017aac
call fcn.01002c10
add esp, 0x28
test eax, eax
je 0x1009eb6
push 3
push 0x1017aa0
mov eax, 0x1017b68
mov ecx, 0x80
mov edx, 0x1017ad8
call fcn.01003200
add esp, 8
push 0x1017c38
mov eax, 0x1017c0c
mov ecx, 0x30
mov edx, 0x1017b8c
call fcn.01003620
add esp, 4
test eax, eax
jne 0x1009f19
push 0x1017c6c
mov eax, 0x1017c1c
mov ecx, 0x30
mov edx, 0x1017bbc
call fcn.01003620
add esp, 4
test eax, eax
jne 0x1009f19
push 0x1017ca0
push 0x1017c2c
push 1
lea eax, [esp + 0x1c]
push 0x1017bec
push eax
mov ebx, 0x20
call fcn.010076f0
add esp, 0x14
push 0x1017d60
mov eax, 0x1017d18
mov ecx, 0x10
mov edx, 0x1017cf8
call fcn.01003620
add esp, 4
test eax, eax
jne 0x1009f5a
lea ecx, [esp + 0x10]
push 0x1017ce8
push ecx
mov eax, 0x1017d24
mov ecx, 0x1017d08
mov edx, 0x10
call fcn.01007640
add esp, 8
lea edx, [esp + 0x10]
push 0x1017d98
push edx
mov eax, 0x1017dc8
mov ecx, 0x1017db4
mov edx, 0x1a
call fcn.01007640
lea eax, [esp + 0x18]
push 0x1017df0
push eax
mov eax, 0x1017e40
mov ecx, 0x1017e30
mov edx, 0x40
call fcn.01007640
push 0x1017f08
push 0x1017ee8
push 0
push 0x1d
lea ecx, [esp + 0x30]
push 0x1017e70
push ecx
call fcn.01007a10
push 0x1017f08
push 0x1017ef8
push 0
push 0x1d
lea edx, [esp + 0x48]
push 0x1017eac
push edx
call fcn.01007a10
add esp, 0x40
push 0x1017f84
push 0x1017f78
push 0
push 0x10
lea eax, [esp + 0x20]
push 0x1017f58
push eax
call fcn.01007a10
push 0x1018040
push 0x1018038
push 0
push 0x3c
lea ecx, [esp + 0x38]
push 0x1017fc0
push ecx
call fcn.01007a10
push 0x1018094
push 0x101808c
push 0
push 8
lea edx, [esp + 0x50]
push 0x101807c
push edx
call fcn.01007a10
add esp, 0x48
lea eax, [esp + 0x10]
push 0x10180c8
push eax
mov eax, 0x1018100
mov ecx, 0x10180f8
mov edx, 0x11
call fcn.01007640
lea ecx, [esp + 0x18]
push 0x10180dc
push ecx
mov eax, 0x1018134
mov ecx, 0x10180f8
mov edx, 0x1b
call fcn.01007640
lea edx, [esp + 0x20]
push 0x101816c
push edx
mov eax, 0x10181a0
mov ecx, 0x1018198
mov edx, 0x12
call fcn.01007640
lea eax, [esp + 0x28]
push 0x1018180
push eax
mov eax, 0x10181a0
mov ecx, 0x1018198
mov edx, 0x15
call fcn.01007640
lea ecx, [esp + 0x30]
push 0x10181d8
push ecx
mov eax, 0x1018200
mov ecx, 0x10181f8
mov edx, 0x1e
call fcn.01007640
lea edx, [esp + 0x38]
push 0x1018224
push edx
mov eax, 0x101823c
mov ecx, 0x1018234
mov edx, 0x10
call fcn.01007640
push 0
push 1
push 0
push 0
lea ecx, [esp + 0x50]
call fcn.01004530
add esp, 0x40
call fcn.01005820
push 0
xor ecx, ecx
mov ebx, 8
mov edx, 0x102b99c
call fcn.01002330
add esp, 4
cmp eax, 1
jbe 0x100a147
mov ecx, dword [esp + 0x1c]
mov cl, byte [ecx + eax - 1]
cmp cl, 9
je 0x100a127
cmp cl, 0xa
jne 0x100a147
mov edx, dword [0x102d4d8]
push 0x102b9bc
push 0
push 0x102b9a8
push eax
push edx
xor edx, edx
xor ecx, ecx
call fcn.010028c0
add esp, 0x14
push 0
push 0
push 0x102b8e8
push 0
push 1
push 0x1004060
push 0x400
push 0
push 1
push 0x102b8e0
push 2
push 0x102b8d0
call fcn.010030f0
push 0
push 0
push 0x102b940
push 0
push 1
push 0x1004060
push 0x400
push 0
push 1
push 0x102b8e0
push 2
push 0x102b8d8
call fcn.010030f0
add esp, 0x60
mov ebx, 0x10274a0
mov esi, 0x2e
lea esp, [esp]
lea eax, [esp + 0x10]
push 0x1025940
push eax
call fcn.01007390
add esp, 8
add ebx, 0x14
sub esi, 1
jne 0x100a1b0
mov ebx, 0x102afd0
mov esi, 0x68
lea ecx, [esp + 0x10]
push 0x1025940
push ecx
call fcn.01007390
add esp, 8
add ebx, 0x14
sub esi, 1
jne 0x100a1d4
lea edx, [esp + 0x10]
push edx
mov ecx, 0x102b7f0
mov ebx, 0x102b83c
call fcn.01007510
lea eax, [esp + 0x14]
push 0x102b850
push eax
mov eax, 0x102b890
mov ecx, 0x102b884
mov edx, 0x32
call fcn.01007640
push 0
push 1
push 0
push 0
lea ecx, [esp + 0x2c]
call fcn.01004530
add esp, 0x1c
xor esi, esi
jmp 0x100a240
mov ecx, dword [esi + 0x101a520]
push ecx
push 0x101cbbc
lea edx, [esp + 0x90]
push 0x1011f90
push edx
call ebp
mov eax, dword [esi + 0x101a520]
push eax
push 0x10182e4
push 0x101cbc0
lea ecx, [esp + 0xc4]
push 0x1011f84
push ecx
call ebp
mov edx, dword [esi + 0x101a520]
push edx
push 0x101cc00
push 0x1018398
push 0x101cbd0
lea eax, [esp + 0x11c]
push 0x1011f78
push eax
call ebp
mov eax, dword [esi + 0x101a518]
push 1
lea ecx, [esp + 0xc8]
push ecx
lea edx, [esp + 0x12c]
push edx
push eax
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esi + 0x101a51c]
lea eax, [esp + 0xf8]
call fcn.01006900
add esi, 0xc
add esp, 0x50
cmp esi, 0x594
jb 0x100a240
xor esi, esi
mov edx, dword [esi + 0x101c6d8]
push edx
push 0x101cbbc
lea eax, [esp + 0x90]
push 0x1011f90
push eax
call ebp
mov ecx, dword [esi + 0x101c6d8]
push ecx
push 0x10182f0
push 0x101cbc0
lea edx, [esp + 0xc4]
push 0x1011f84
push edx
call ebp
mov eax, dword [esi + 0x101c6d8]
push eax
push 0x101cc00
push 0x10183a4
push 0x101cbd0
lea ecx, [esp + 0x11c]
push 0x1011f78
push ecx
call ebp
mov ecx, dword [esi + 0x101c6d0]
push 1
lea edx, [esp + 0xc8]
push edx
lea eax, [esp + 0x12c]
push eax
push ecx
mov ecx, dword [esi + 0x101c6d4]
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0xf8]
call fcn.01006900
add esi, 0xc
add esp, 0x50
cmp esi, 0x4ec
jb 0x100a2e4
xor esi, esi
jmp 0x100a390
mov eax, dword [esi + 0x101ce7c]
push eax
push 0x101ce28
lea ecx, [esp + 0xf0]
push 0x102bb4c
push ecx
call ebp
mov eax, dword [esi + 0x101ce74]
push 1
push 0
lea edx, [esp + 0x100]
push edx
push eax
lea ecx, [esp + 0x30]
push ecx
mov ecx, dword [esi + 0x101ce78]
mov eax, 0x101ce10
call fcn.01006c10
add esi, 0xc
add esp, 0x24
cmp esi, 0x30
jb 0x100a390
mov esi, 0x101e590
mov ebp, 0x73
mov eax, dword [esi + 0xc]
mov edx, eax
and dl, 0x30
cmp dl, 0x20
jne 0x100a40d
and eax, 0x300
sub eax, 0x100
neg eax
sbb al, al
and al, 0xf7
add al, 0x4b
mov byte [esp + 0x1c], al
jmp 0x100a412
mov byte [esp + 0x1c], 0x50
push esi
mov ebx, 0x101e570
mov edi, 0x101e568
lea ecx, [esp + 0x20]
lea edx, [esp + 0x14]
mov byte [esp + 0x21], 0x2d
mov byte [esp + 0x22], 0
call fcn.01007160
add esp, 4
add esi, 0x10
sub ebp, 1
jne 0x100a3e8
mov esi, 0x101ed68
mov edi, 6
lea esp, [esp]
lea eax, [esp + 0x10]
push eax
mov edx, 0x101ed48
mov ecx, 0x101ed3c
call fcn.01006ef0
add esp, 4
add esi, 0x10
sub edi, 1
jne 0x100a450
mov esi, 0x101ee58
mov edi, 5
lea esp, [esp]
lea ecx, [esp + 0x10]
push ecx
mov edx, 0x101ee44
mov ecx, 0x101ee34
call fcn.01006ef0
add esp, 4
add esi, 0x10
sub edi, 1
jne 0x100a480
mov esi, 0x101f918
mov edi, 0x4c
lea esp, [esp]
lea edx, [esp + 0x10]
push edx
mov edx, 0x101f8f8
mov ecx, 0x101f8f0
call fcn.01006ef0
add esp, 4
add esi, 0x10
sub edi, 1
jne 0x100a4b0
mov esi, 0x10206c8
mov edi, 0x55
lea esp, [esp]
lea eax, [esp + 0x10]
push eax
mov edx, 0x10206a4
mov ecx, 0x102069c
call fcn.01006ef0
add esp, 4
add esi, 0x10
sub edi, 1
jne 0x100a4e0
mov esi, 0x10237e8
mov ebp, 0xd2
lea esp, [esp]
push esi
mov ebx, 0x10237c0
mov edi, 0x10237bc
mov ecx, 0x10237b8
lea edx, [esp + 0x14]
call fcn.01007160
add esp, 4
add esi, 0x10
sub ebp, 1
jne 0x100a510
mov esi, 0x10246f8
mov edi, 9
mov edi, edi
lea ecx, [esp + 0x10]
push 0
push ecx
mov edx, 0x10246c8
mov ecx, 0x10246c0
call fcn.010071d0
add esp, 8
add esi, 0x10
sub edi, 1
jne 0x100a540
mov esi, 0x1025508
mov edi, 8
jmp 0x100a570
lea edx, [esp + 0x10]
push 0
push edx
mov edx, 0x10254b0
mov ecx, 0x10254a8
call fcn.010071d0
add esp, 8
add esi, 0x10
sub edi, 1
jne 0x100a570
push 0
push 0
lea eax, [esp + 0x40]
push 1
push eax
lea ecx, [esp + 0x20]
call fcn.01004530
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x24]
mov edx, 0x1e
call fcn.010058d0
lea edx, [esp + 0x24]
push edx
call fcn.01004440
mov eax, dword [esp + 0x50]
add esp, 0x18
test eax, eax
je 0x100a5d6
push eax
call fcn.0100d77e
add esp, 4
lea esi, [esp + 0x40]
call fcn.01001a40
lea esi, [esp + 0x54]
call fcn.01001a40
lea esi, [esp + 0x70]
call fcn.01001a40
lea esi, [esp + 0x78]
call fcn.01001a40
lea esi, [esp + 0x60]
call fcn.01001a40
lea esi, [esp + 0x2c]
call fcn.01001a40
lea esi, [esp + 0x24]
call fcn.01001a40
mov eax, dword [0x102d62c]
test eax, eax
je 0x100a62f
cmp eax, dword [0x102d628]
je 0x100a62f
push eax
call fcn.0100d77e
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x32
sub eax, dword [esp + 0x80]
add ecx, eax
mov eax, 0x10624dd3
mul ecx
mov esi, edx
shr esi, 6
mov edx, esi
shl edx, 6
sub edx, esi
add edx, edx
sub edx, esi
add edx, edx
add edx, edx
add edx, edx
sub ecx, edx
mov eax, 0x51eb851f
mul ecx
mov eax, dword [0x102d618]
shr edx, 5
test eax, eax
jne 0x100a68e
mov eax, dword [esp + 0x6c]
push edx
push esi
push 0x1011f48
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x100a6b4
cmp eax, 1
mov ecx, 0x1011f44
jg 0x100a69d
mov ecx, 0x102bbca
push edx
push esi
push ecx
mov ecx, dword [esp + 0x78]
push eax
push 0x1011f18
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov ecx, dword [esp + 0x5e8]
mov eax, dword [0x102d618]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0100ffd5
add esp, 0x5dc
ret