Function at 0x1006ec51
Capabilities:
Check for time delay via gettickcount
Check os version
Create directory
Create thread
Shutdown system
Terminate process
Write file on windows

Disassembly:
push 0x384
mov eax, 0x10087360
call fcn.10083a29
mov eax, dword [0x3052d08]
cmp eax, 0x4b1
je 0x1006ecab
cmp eax, 0x321
je 0x1006ecab
cmp eax, 0x1c85
je 0x1006ecab
cmp eax, 0xfa1
je 0x1006ecab
cmp eax, 0x8fd
je 0x1006ecab
cmp eax, 0x907
je 0x1006ecab
cmp eax, 0x911
je 0x1006ecab
cmp eax, 0x91b
je 0x1006ecab
cmp eax, 0x925
je 0x1006ecab
cmp eax, 0x939
jne 0x1006ecca
cmp byte [0x100a7088], 1
jne 0x1006ecca
cmp dword [0x103d20c0], 0
jbe 0x1006ecca
cmp dword [0x1035ff94], 1
je 0x1007046b
mov ecx, dword [0x307809c]
mov dword [ebp - 0x388], ecx
test ecx, ecx
je 0x1007046b
mov eax, dword [0xf34f30]
test eax, eax
je 0x1007046b
movzx ecx, word [ecx + 0x14]
imul ecx, ecx, 0x1cc
cmp dword [ecx + 0x33fc073], 0
je 0x1007046b
cmp dword [0x1035ff8c], 0
jne 0x1006ed2e
cmp dword [eax + 0x30], 0xffffffff
je 0x1006ed24
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1035fd44]
cmp eax, 0x1d4c0
jb 0x1006ed2e
mov dword [0x1035ff8c], 1
mov al, al
mov eax, eax
mov cx, cx
cmp dword [0x103cb414], 1
jne 0x1006f001
mov ebx, 0x305b5c0
mov esi, dword [ebx]
xor edi, edi
cmp esi, edi
je 0x1006edc6
cmp byte [esi + 0x330], 0
je 0x1006edc6
push 0x32
lea eax, [ebp - 0x5c]
push edi
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea eax, [esi + 0x338]
push eax
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
cmp dword [0x103d7120], edi
jle 0x1006eda7
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [0x103d7118]
push dword [eax + edi*4]
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x1006eed1
inc edi
cmp edi, dword [0x103d7120]
jl 0x1006ed82
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
mov esi, 0x103d7124
call fcn.1000117c
lea eax, [ebp - 0x5c]
push eax
mov esi, 0x103d7118
call fcn.10001109
add ebx, 4
cmp ebx, 0x305b5dc
jl 0x1006ed47
xor edi, edi
cmp dword [0x103d7120], edi
jle 0x1006ee53
mov ebx, 0x305b5c0
mov esi, dword [ebx]
test esi, esi
je 0x1006ee31
cmp byte [esi + 0x330], 0
je 0x1006ee31
push 0x32
lea eax, [ebp - 0x5c]
push 0
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
add esi, 0x338
lea eax, [ebp - 0x5c]
push esi
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [0x103d7118]
push dword [eax + edi*4]
call dword [sym.imp.MSVCR100.dll_strcmp]
add esp, 0x10
test eax, eax
je 0x1006eef9
add ebx, 4
cmp ebx, 0x305b5dc
jl 0x1006ede4
inc edi
push edi
mov esi, 0x103d7124
call fcn.100011d0
push edi
mov esi, 0x103d7118
call fcn.10001062
and dword [ebp - 0x380], 0
cmp dword [0x103d7120], 0
jle 0x1006f001
mov edi, 0x18b
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
xor ebx, ebx
push ebx
push ebx
push edi
push dword [0x103ca9c8]
mov dword [ebp - 0x37c], ebx
call esi
test eax, eax
jle 0x1006ef15
lea eax, [ebp - 0x24]
push eax
push ebx
push 0x189
push dword [0x103ca9c8]
call esi
mov ecx, dword [ebp - 0x380]
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x103d7118]
push dword [eax + ecx*4]
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x1006ef0b
push 0
push 0
push edi
push dword [0x103ca9c8]
inc ebx
call esi
cmp ebx, eax
jl 0x1006ee8d
jmp 0x1006ef15
mov eax, 0xffff
cmp word [esi + 0x366], ax
je 0x1006edc6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103d7124]
mov ecx, dword [ecx + edi*4]
mov dword [ecx], eax
jmp 0x1006edc6
inc edi
cmp edi, dword [0x103d7120]
jl 0x1006eddf
jmp 0x1006ee53
mov dword [ebp - 0x37c], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x103d7124]
mov ecx, eax
mov eax, dword [ebp - 0x380]
mov edx, dword [edx + eax*4]
sub ecx, dword [edx]
cmp ecx, 0x1b7740
jb 0x1006ef3f
cmp dword [ebp - 0x37c], 0
je 0x1006ef57
inc eax
mov dword [ebp - 0x380], eax
cmp eax, dword [0x103d7120]
jl 0x1006ee6c
jmp 0x1006f001
mov eax, dword [0x103d7118]
mov ecx, dword [ebp - 0x380]
push 2
push dword [eax + ecx*4]
call fcn.1003bf35
pop ecx
pop ecx
xor ebx, ebx
push ebx
push ebx
push edi
push dword [0x103caa3c]
call esi
test eax, eax
jle 0x1006efc7
lea eax, [ebp - 0x8c]
push eax
push ebx
push 0x189
push dword [0x103caa3c]
call esi
mov eax, dword [0x103d7118]
mov ecx, dword [ebp - 0x380]
push dword [eax + ecx*4]
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x1006efe4
push 0
push 0
push edi
push dword [0x103caa3c]
inc ebx
call esi
cmp ebx, eax
jl 0x1006ef7f
mov eax, dword [0x103d7118]
mov ecx, dword [ebp - 0x380]
push dword [eax + ecx*4]
push 0
push 0x180
push dword [0x103caa3c]
call esi
mov edi, dword [ebp - 0x380]
inc edi
push edi
mov esi, 0x103d7124
call fcn.100011d0
push edi
mov esi, 0x103d7118
call fcn.10001062
xor esi, esi
inc esi
cmp dword [0x103ca98c], esi
je 0x1006f01c
cmp dword [0x103ca990], esi
je 0x1006f01c
cmp dword [0x103ca9a0], esi
jne 0x1006f036
cmp dword [0x3052d08], 0x4b1
je 0x1006f031
cmp dword [0x101127c4], 2
jne 0x1006f036
call fcn.1006d8ed
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
mov edi, 0x1008c7f0
mov dword [ebp - 0x384], ebx
call fcn.10006aa3
cmp eax, esi
jne 0x1006f06e
mov edi, 0x1008c83c
call fcn.10006aa3
cmp eax, esi
jne 0x1006f06e
xor edi, edi
push edi
push 2
call fcn.1003bb64
pop ecx
pop ecx
jmp 0x1006f070
xor edi, edi
movzx eax, word [0x3592f5c]
cmp ax, di
je 0x1006f160
mov edx, dword [0x103d8a78]
mov cl, byte [0x100e08d0]
cmp eax, edx
jle 0x1006f0a5
mov dword [0x103d8a78], eax
mov eax, dword [0x100a68f8]
movzx edx, cl
dec edx
cmp eax, edx
jge 0x1006f0ac
inc eax
jmp 0x1006f0ae
je 0x1006f095
mov dword [0x103d8a78], eax
xor eax, eax
movzx ecx, cl
sub ecx, eax
xor esi, esi
mov dword [0x100a68f8], eax
cmp ecx, edi
jle 0x1006f166
cmp byte [eax + esi + 0x100e0830], 1
je 0x1006f0d6
inc esi
cmp esi, ecx
jl 0x1006f0c2
jmp 0x1006f166
add eax, esi
movzx eax, word [eax*2 + 0x100e06f0]
push 0x5d
mov dword [ebp - 0x37c], eax
lea eax, [ebp - 0x85]
push edi
push eax
mov dword [ebp - 0x8c], 0
mov word [ebp - 0x88], 0x43
mov byte [ebp - 0x86], 0x58
call sub.MSVCR100.dll_memset
add esp, 0xc
push 2
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.MSVCR100.dll_memmove]
lea eax, [ebp - 0x8c]
add esp, 0xc
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x378], 0x66
push dword [ebp - 0x378]
push dword [ebp - 0x380]
mov ecx, 0xf34f30
mov ecx, dword [ecx]
mov eax, 0x6bdcb0
call eax
add dword [0x100a68f8], esi
jmp 0x1006f16d
mov dword [0x103d8a78], edi
or dword [0x100a68f8], 0xffffffff
mov eax, dword [ebp - 0x388]
mov eax, dword [eax + 0x1d44]
mov ecx, dword [0x103cb2f8]
xor esi, esi
inc esi
cmp dword [0x103c6708], esi
je 0x1006f192
cmp ecx, esi
jne 0x1006f271
cmp eax, 2
je 0x1006f265
cmp eax, 3
je 0x1006f265
cmp eax, 5
je 0x1006f265
cmp dword [0x1035ff3c], esi
je 0x1006f265
cmp ecx, edi
je 0x1006f208
cmp dword [0x101127c4], 2
je 0x1006f208
mov eax, ebx
sub eax, dword [0x1035fd7c]
xor edx, edx
mov ecx, 0x3e8
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x380], eax
fild dword [ebp - 0x380]
test eax, eax
jns 0x1006f1f4
fadd dword [0x1009ee18]
fild dword [0x103cb2f4]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1006f208
call fcn.1003e332
cmp dword [0x103c6708], esi
jne 0x1006f271
mov eax, ebx
sub eax, dword [0x1035fd7c]
xor edx, edx
mov ecx, 0x3e8
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x380], eax
fild dword [ebp - 0x380]
test eax, eax
jns 0x1006f23e
fadd dword [0x1009ee18]
fild dword [0x103c6af0]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1006f271
push edi
mov dword [0x1035fd7c], ebx
push 0x1009bee0
call fcn.1003788e
pop ecx
pop ecx
jmp 0x1007046b
mov dword [0x1035ff3c], edi
mov dword [0x1035fd7c], ebx
cmp dword [0x103c6b08], esi
jne 0x1006f2a9
mov eax, dword [0x3592f00]
mov ecx, dword [0x3592f04]
cmp eax, dword [0x103854d0]
jne 0x1006f298
cmp ecx, dword [0x103854d4]
je 0x1006f318
mov dword [0x1035fd74], ebx
mov dword [0x103854d0], eax
mov dword [0x103854d4], ecx
cmp dword [0x103c2938], esi
jne 0x1006f4b1
and dword [ebp - 0x378], 0
push 0
call dword [sym.imp.MSVCR100.dll__time64]
mov dword [ebp - 0x390], eax
pop ecx
lea eax, [ebp - 0x390]
push eax
mov dword [ebp - 0x38c], edx
call dword [sym.imp.MSVCR100.dll__localtime64]
pop ecx
push eax
push 0x1009b0a8
lea eax, [ebp - 0x24]
push 0x14
push eax
call dword [sym.imp.MSVCR100.dll_strftime]
mov esi, dword [sym.imp.MSVCR100.dll_strcmp]
lea eax, [ebp - 0x24]
push str.Sunday
push eax
call esi
add esp, 0x18
test eax, eax
jne 0x1006f36a
mov dword [ebp - 0x378], 7
jmp 0x1006f419
mov eax, ebx
sub eax, dword [0x1035fd74]
xor edx, edx
mov ecx, 0x3e8
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x380], eax
fild dword [ebp - 0x380]
test eax, eax
jns 0x1006f346
fadd dword [0x1009ee18]
fild dword [0x103c6b0c]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1006f2a9
push edi
mov dword [0x1035fd74], ebx
push 0x1009befc
jmp 0x1006f259
lea eax, [ebp - 0x24]
push str.Monday
push eax
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1006f38a
mov dword [ebp - 0x378], 1
jmp 0x1006f419
lea eax, [ebp - 0x24]
push str.Tuesday
push eax
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1006f3a7
mov dword [ebp - 0x378], 2
jmp 0x1006f419
lea eax, [ebp - 0x24]
push str.Wednesday
push eax
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1006f3c4
mov dword [ebp - 0x378], 3
jmp 0x1006f419
lea eax, [ebp - 0x24]
push str.Thursday
push eax
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1006f3e1
mov dword [ebp - 0x378], 4
jmp 0x1006f419
lea eax, [ebp - 0x24]
push str.Friday
push eax
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1006f3fe
mov dword [ebp - 0x378], 5
jmp 0x1006f419
lea eax, [ebp - 0x24]
push str.Saturday
push eax
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1006f419
mov dword [ebp - 0x378], 6
lea eax, [ebp - 0x360]
push eax
call dword [sym.imp.MSVCR100.dll__strtime]
pop ecx
lea eax, [ebp - 0x360]
push eax
push 2
pop edi
lea esi, [ebp - 0xb8]
call fcn.100064da
pop ecx
lea eax, [ebp - 0x360]
push eax
push 3
pop ebx
lea esi, [ebp - 0xcc]
call fcn.1000653e
mov eax, dword [0x103c292c]
inc eax
pop ecx
cmp dword [ebp - 0x378], eax
jne 0x1006f4b1
mov esi, dword [sym.imp.MSVCR100.dll_atoi]
lea eax, [ebp - 0xb8]
push eax
call esi
pop ecx
mov ecx, dword [0x103c2930]
inc ecx
cmp eax, ecx
jne 0x1006f4b1
lea eax, [ebp - 0xcc]
push eax
call esi
pop ecx
mov ecx, dword [0x103c2934]
inc ecx
cmp eax, ecx
jl 0x1006f4b1
push 0x1009bf54
call fcn.100060db
pop ecx
mov ecx, dword [0x1012fca4]
call fcn.10074697
call fcn.10068c61
jmp 0x1007046b
cmp dword [0x1035ff74], 0
je 0x1007046b
cmp dword [0x103ccaac], 1
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
mov edi, 0x10111f10
jne 0x1006f5c4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x3e8
div ecx
xor edx, edx
mov ebx, 0x3e8
mov ecx, eax
mov eax, dword [0x1035fd6c]
div ebx
sub ecx, eax
cmp ecx, 0xf
jb 0x1006f5c4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, ebx
push ebx
mov dword [0x1035fd6c], eax
call fcn.10010e4b
pop ecx
push edi
lea eax, [ebp - 0x2c0]
push 0x1009bf74
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x2c0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
jne 0x1006f545
push ebx
lea eax, [ebp - 0x2c0]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x3592e68
push 0x10111128
push edi
lea eax, [ebp - 0x2c0]
push 0x1009bf7c
push eax
call esi
add esp, 0x14
lea ecx, [ebp - 0x380]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x380]
push eax
mov ecx, 0x103cca38
mov dword [ebp - 4], ebx
call dword [sym.imp.mfc100.dll_Ordinal_6970]
lea eax, [ebp - 0x2c0]
push 0x1009bf90
push eax
call dword [sym.imp.MSVCR100.dll_fopen]
mov ebx, eax
mov eax, dword [ebp - 0x380]
mov ecx, dword [eax - 0xc]
push ebx
push 1
push ecx
push eax
call dword [sym.imp.MSVCR100.dll_fwrite]
push ebx
call dword [sym.imp.MSVCR100.dll_fclose]
or dword [ebp - 4], 0xffffffff
add esp, 0x1c
lea ecx, [ebp - 0x380]
call dword [sym.imp.mfc100.dll_Ordinal_901]
xor ebx, ebx
inc ebx
cmp dword [0x103c2964], ebx
jne 0x1006f5e6
mov eax, dword [0x1035fe98]
cmp eax, dword [0x103c2984]
jl 0x1006f5e6
push 0x1009bf94
jmp 0x1006f496
cmp dword [0x103c2968], ebx
jne 0x1006f605
mov eax, dword [0x1035fe9c]
cmp eax, dword [0x103c2988]
jl 0x1006f605
push 0x1009bfb8
jmp 0x1006f496
cmp dword [0x103c2a1c], ebx
jne 0x1006f64b
mov eax, dword [0x307809c]
movzx eax, word [eax + 0x14]
mov ecx, dword [0x10112778]
imul eax, eax, 0x1cc
sub ecx, dword [eax + 0x33fc129]
cmp ecx, dword [0x103c2a20]
jl 0x1006f64b
add eax, 0x33fc073
push eax
call dword [sym.imp.MSVCR100.dll_strlen]
pop ecx
test eax, eax
je 0x1006f64b
push 0x1009bfdc
jmp 0x1006f496
cmp dword [0x103c296c], ebx
jne 0x1006f675
mov eax, dword [0x103c298c]
cdq
cmp dword [0x1035fd24], edx
jl 0x1006f675
jg 0x1006f66b
cmp dword [0x1035fd20], eax
jb 0x1006f675
push 0x1009c000
jmp 0x1006f496
cmp dword [0x103c80a4], 1
mov ebx, dword [sym.imp.mfc100.dll_Ordinal_265]
jne 0x1006f6d4
mov eax, dword [0x1035fe98]
cmp eax, dword [0x103c80ac]
jl 0x1006f6d4
push 0x1009c028
call fcn.100060db
mov dword [esp], 0x1f4
call ebx
pop ecx
push edi
push 0x10098e90
push eax
mov dword [ebp - 0x378], eax
call esi
add esp, 0xc
push 0x11
push 0
push dword [ebp - 0x378]
call dword [sym.imp.WINMM.dll_PlaySoundA]
push dword [ebp - 0x378]
call dword [sym.imp.mfc100.dll_Ordinal_1296]
pop ecx
cmp dword [0x103c80a8], 1
jne 0x1006f72d
mov eax, dword [0x1035fe9c]
cmp eax, dword [0x103c80b0]
jl 0x1006f72d
push 0x1009c050
call fcn.100060db
mov dword [esp], 0x1f4
call ebx
pop ecx
push edi
push 0x10098e90
push eax
mov dword [ebp - 0x378], eax
call esi
add esp, 0xc
push 0x11
push 0
push dword [ebp - 0x378]
call dword [sym.imp.WINMM.dll_PlaySoundA]
push dword [ebp - 0x378]
call dword [sym.imp.mfc100.dll_Ordinal_1296]
pop ecx
mov eax, dword [0x103c2958]
mov ecx, dword [0x103c8094]
xor edx, edx
inc edx
cmp eax, edx
je 0x1006f747
cmp ecx, edx
jne 0x1006f908
cmp dword [0x1035ff8c], edx
jne 0x1006f908
cmp eax, edx
jne 0x1006f8b7
mov ecx, dword [0x1012fca4]
call fcn.10074697
mov eax, dword [0x103c293c]
xor edi, edi
inc edi
cmp eax, edi
jne 0x1006f806
lea eax, [ebp - 0x374]
push eax
mov dword [ebp - 0x374], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
push 2
pop ebx
cmp dword [ebp - 0x364], ebx
jne 0x1006f7f1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea ecx, [ebp - 0x388]
push ecx
push 0x20
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
lea eax, [ebp - 0x390]
push eax
push str.SeShutdownPrivilege
xor esi, esi
push esi
mov dword [ebp - 0x20], edi
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov eax, dword [ebp - 0x390]
push esi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x38c]
push esi
push esi
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x20]
push eax
push esi
push dword [ebp - 0x388]
mov dword [ebp - 0x14], ebx
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
jmp 0x1006f7f3
xor esi, esi
push esi
push 8
call dword [sym.imp.USER32.dll_ExitWindowsEx]
push 0x1009c078
jmp 0x1006fb76
cmp eax, 2
jne 0x1007046b
lea eax, [ebp - 0xa4]
push eax
movzx eax, byte [0x358e586]
push eax
mov edi, 0x1035fff4
call fcn.1003e384
lea eax, [ebp - 0xa4]
push 0x3059968
push eax
call dword [sym.imp.MSVCR100.dll_strcat]
add esp, 0x10
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push eax
push 0x291
push dword [0x100f415c]
call ebx
lea eax, [ebp - 0xa4]
push eax
movzx eax, byte [0x358e586]
push eax
call fcn.1003e384
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x360]
push 0x1009b904
push eax
call esi
add esp, 0x14
lea eax, [ebp - 0x360]
push eax
push dword [0x100dfd8c]
push 0x2712
push dword [0x100f415c]
call ebx
push 1
push dword [0x100e08d4]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x1007046b
cmp ecx, edx
jne 0x1006f908
cmp dword [0x103c938c], 0
jne 0x1006f8cf
mov ecx, dword [0x1012fca4]
call fcn.10074697
push 0x1009c080
call fcn.100060db
mov dword [esp], 0x1f4
call ebx
pop ecx
push edi
mov ebx, eax
push 0x10098e90
push ebx
call esi
add esp, 0xc
push 0x11
push 0
push ebx
call dword [sym.imp.WINMM.dll_PlaySoundA]
push ebx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
jmp 0x1006f25f
cmp dword [0x103c2950], edx
jne 0x1006f943
mov esi, dword [0x3592f00]
mov edi, dword [0x3592f04]
cmp esi, dword [0x103854c8]
jne 0x1006f92c
cmp edi, dword [0x103854cc]
je 0x1006f97a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1035fd78], eax
mov dword [0x103854c8], esi
mov dword [0x103854cc], edi
cmp dword [0x103c295c], 1
jne 0x1006f9c5
push 7
mov ecx, 0x305b5c0
xor edx, edx
pop esi
mov eax, dword [ecx]
test eax, eax
je 0x1006f966
cmp byte [eax + 0x330], 0
je 0x1006f966
inc edx
add ecx, 4
dec esi
jne 0x1006f956
test edx, edx
jne 0x1006f9c5
push 0x1009c0ac
jmp 0x1006f496
mov eax, dword [ebp - 0x384]
sub eax, dword [0x1035fd78]
xor edx, edx
mov ecx, 0x3e8
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x378], eax
fild dword [ebp - 0x378]
test eax, eax
jns 0x1006f9ac
fadd dword [0x1009ee18]
fild dword [0x103c2980]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1006f943
push 0x1009c08c
jmp 0x1006f496
cmp dword [0x103c2960], 1
mov ebx, 0x1009c0c8
jne 0x1006fa70
mov edx, dword [0x3059750]
xor edi, edi
mov dword [ebp - 0x378], edi
call fcn.100061b1
test eax, eax
je 0x1006fa24
lea esi, [edx + 0x53c]
mov eax, dword [esi]
test eax, eax
je 0x1006fa0b
add eax, 0x64
push eax
push ebx
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x1006fa1a
inc edi
add esi, 4
call fcn.100061b1
cmp edi, eax
jb 0x1006f9f4
jmp 0x1006fa24
mov dword [ebp - 0x378], 1
mov eax, dword [0x3059754]
xor edi, edi
lea esi, [eax + 0x53c]
mov eax, dword [esi]
test eax, eax
je 0x1006fa48
add eax, 0x64
push eax
push ebx
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x1006fa53
inc edi
add esi, 4
cmp edi, 0xf
jl 0x1006fa31
jmp 0x1006fa5d
mov dword [ebp - 0x378], 1
cmp dword [ebp - 0x378], 0
jne 0x1006fa70
push 0x1009c0d0
jmp 0x1006f496
cmp dword [0x103c299c], 1
jne 0x1006face
mov edx, dword [0x3059750]
xor ebx, ebx
call fcn.100061b1
mov edi, 0x1009aa34
test eax, eax
je 0x1006fab9
lea esi, [edx + 0x53c]
mov eax, dword [esi]
test eax, eax
je 0x1006faac
add eax, 0x64
push edi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x1006face
inc ebx
add esi, 4
call fcn.100061b1
cmp ebx, eax
jb 0x1006fa95
push edi
call fcn.1000648e
pop ecx
test eax, eax
jne 0x1006face
push 0x1009c0ec
jmp 0x1006f496
xor ebx, ebx
mov edi, 0xa7f9
cmp dword [0x3592ee8], ebx
jne 0x1006faff
cmp dword [0x3052d08], edi
jne 0x1006faff
xor esi, esi
inc esi
cmp dword [0x103c66ec], esi
jne 0x1006fb02
cmp dword [0x103c6984], ebx
jne 0x1006fb02
call fcn.1003bdb9
jmp 0x1006fb02
xor esi, esi
inc esi
cmp dword [0x3592ee8], ebx
jne 0x1006fc61
cmp dword [0x3052d08], edi
je 0x1006fc61
cmp dword [0x103c66ec], esi
jne 0x1006fbfd
cmp dword [0x103c6984], ebx
jne 0x1006fbbd
cmp dword [0x101127c4], 2
jne 0x1006fb80
mov dword [0x10112bec], ebx
mov dword [0x1035ff50], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1035fda0], eax
mov eax, dword [0x10114474]
push 0x1006e174
push 0xbb8
add eax, 0x45
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009c108
call fcn.100060db
jmp 0x1006f25f
call fcn.100744bd
mov dword [0x10112bec], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x1006e0b5
push dword [0x103c6af4]
mov dword [0x1035fda0], eax
mov eax, dword [0x10114474]
add eax, 0x44
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009c118
jmp 0x1006fb76
call fcn.100744bd
mov dword [0x10112bec], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x1006e038
push dword [0x103c6af4]
mov dword [0x1035fda0], eax
mov eax, dword [0x10114474]
add eax, 0x44
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009c128
jmp 0x1006fb76
cmp dword [0x103c66f0], esi
jne 0x1006fc61
cmp dword [0x103c6988], esi
jne 0x1006fc4c
call fcn.100744bd
mov dword [0x10112bec], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1035fda0], eax
mov eax, dword [0x10114474]
push 0x1006e038
push 0x12c
add eax, 0x44
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009c138
jmp 0x1006fb76
mov ecx, dword [0x1012fca4]
call fcn.10074697
push 0x1009c148
jmp 0x1006fb76
cmp dword [0x103c3eb8], esi
jne 0x1006fca8
mov eax, dword [0x3059754]
xor edi, edi
lea esi, [eax + 0x53c]
mov eax, dword [esi]
test eax, eax
je 0x1006fc91
add eax, 0x64
push eax
push 0x1009c0c8
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x1006fca8
inc edi
add esi, 4
cmp edi, 0xf
jl 0x1006fc76
push 0
push 0x1009c0c8
call fcn.100061e0
pop ecx
pop ecx
cmp dword [0x103c2970], 1
jne 0x1006fce2
push 7
mov ecx, 0x305b5c0
xor edx, edx
pop esi
mov eax, dword [ecx]
test eax, eax
je 0x1006fcca
cmp byte [eax + 0x330], bl
je 0x1006fcca
inc edx
add ecx, 4
dec esi
jne 0x1006fcbb
cmp edx, dword [0x103c2990]
jge 0x1006fce2
push 0x1009c15c
jmp 0x1006f496
cmp dword [0x103c88a4], 1
jne 0x1006fd1e
mov eax, dword [0x1035fd70]
xor edx, edx
mov esi, 0x3e8
mov ecx, esi
div ecx
mov ecx, dword [ebp - 0x384]
xor edx, edx
mov edi, eax
mov eax, ecx
div esi
sub eax, edi
cmp eax, 5
jb 0x1006fd1e
push 0x32
mov dword [0x1035fd70], ecx
call fcn.1006e2c8
pop ecx
cmp dword [0x103ca9a4], 1
mov esi, dword [sym.imp.mfc100.dll_Ordinal_6969]
jne 0x1006fd7d
push 0x14
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x103cabec
call esi
mov edi, 0x305b5c0
mov eax, dword [edi]
test eax, eax
je 0x1006fd63
cmp byte [eax + 0x330], bl
je 0x1006fd63
lea ecx, [ebp - 0x24]
push ecx
add eax, 0x338
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x1006fd70
add edi, 4
cmp edi, 0x305b5dc
jl 0x1006fd3f
jmp 0x1006fd7d
lea eax, [ebp - 0x24]
push 1
push eax
call fcn.1003bf35
pop ecx
pop ecx
cmp dword [0x103c92e4], 1
jne 0x1006fdc6
mov edi, dword [ebp - 0x388]
add edi, 0x4848
push edi
call dword [sym.imp.MSVCR100.dll_strlen]
pop ecx
test eax, eax
je 0x1006fdc6
push 0x32
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x103c9c44
call esi
lea eax, [ebp - 0x5c]
push edi
push eax
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x1006fdc6
lea eax, [ebp - 0x5c]
push eax
call fcn.1003c005
pop ecx
mov eax, dword [0x3059750]
add eax, 0x53c
mov dword [ebp - 0x380], eax
mov eax, dword [eax]
xor esi, esi
mov edi, 0x1008fd9c
cmp eax, esi
je 0x1006fdf8
add eax, 0x64
push edi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x100700d1
mov dword [ebp - 0x384], esi
mov dword [ebp - 0x378], esi
mov dword [ebp - 0x37c], esi
call fcn.100061b1
test eax, eax
je 0x1006fe73
mov ebx, dword [ebp - 0x380]
mov esi, dword [ebx]
test esi, esi
je 0x1006fe39
lea eax, [esi + 0x64]
push edi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1006fe39
cmp dword [esi + 0xe74], 0
jne 0x1006fe51
inc dword [ebp - 0x37c]
add ebx, 4
call fcn.100061b1
cmp dword [ebp - 0x37c], eax
jb 0x1006fe19
jmp 0x1006fe73
mov eax, dword [esi + 0xe44]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], 1
cmp dword [0x103ca270], 1
jne 0x1006ff0e
mov eax, dword [0x103ca2e8]
test eax, eax
jne 0x1006fe90
push 0x10098700
jmp 0x1006fea6
cmp eax, 1
jne 0x1006fe9c
push 0x1009870c
jmp 0x1006fea6
cmp eax, 2
jne 0x1006feb2
push 0x10098718
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.MSVCR100.dll_strcpy]
pop ecx
pop ecx
xor edi, edi
call fcn.100061b1
test eax, eax
je 0x1006ff0e
mov ebx, dword [ebp - 0x380]
mov esi, dword [ebx]
test esi, esi
je 0x1006ff01
lea eax, [ebp - 0x5c]
push eax
lea eax, [esi + 0x64]
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1006ff01
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x384]
jl 0x1006ff01
mov dword [ebp - 0x384], esi
mov dword [ebp - 0x37c], edi
mov dword [ebp - 0x378], 1
inc edi
add ebx, 4
call fcn.100061b1
cmp edi, eax
jb 0x1006fec3
cmp dword [ebp - 0x378], 0
jne 0x100700b2
xor edi, edi
call fcn.100061b1
test eax, eax
je 0x1006ff85
mov ebx, dword [ebp - 0x380]
mov esi, dword [ebx]
test esi, esi
je 0x1006ff6b
lea eax, [esi + 0x64]
push 0x1009c180
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1006ff6b
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x384]
jl 0x1006ff6b
mov dword [ebp - 0x384], esi
mov dword [ebp - 0x37c], edi
mov dword [ebp - 0x378], 1
inc edi
add ebx, 4
call fcn.100061b1
cmp edi, eax
jb 0x1006ff2c
cmp dword [ebp - 0x378], 0
jne 0x100700b2
xor edi, edi
call fcn.100061b1
test eax, eax
je 0x1006ffef
mov ebx, dword [ebp - 0x380]
mov esi, dword [ebx]
test esi, esi
je 0x1006ffd5
lea eax, [esi + 0x64]
push 0x10098718
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1006ffd5
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x384]
jl 0x1006ffd5
mov dword [ebp - 0x384], esi
mov dword [ebp - 0x37c], edi
mov dword [ebp - 0x378], 1
inc edi
add ebx, 4
call fcn.100061b1
cmp edi, eax
jb 0x1006ff96
cmp dword [ebp - 0x378], 0
jne 0x100700b2
xor edi, edi
call fcn.100061b1
test eax, eax
je 0x10070055
mov ebx, dword [ebp - 0x380]
mov esi, dword [ebx]
test esi, esi
je 0x1007003f
lea eax, [esi + 0x64]
push 0x1009870c
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1007003f
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x384]
jl 0x1007003f
mov dword [ebp - 0x384], esi
mov dword [ebp - 0x37c], edi
mov dword [ebp - 0x378], 1
inc edi
add ebx, 4
call fcn.100061b1
cmp edi, eax
jb 0x10070000
cmp dword [ebp - 0x378], 0
jne 0x100700b2
xor edi, edi
call fcn.100061b1
test eax, eax
je 0x100700d1
mov ebx, dword [ebp - 0x380]
mov esi, dword [ebx]
test esi, esi
je 0x100700a5
lea eax, [esi + 0x64]
push 0x10098700
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x100700a5
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x384]
jl 0x100700a5
mov dword [ebp - 0x384], esi
mov dword [ebp - 0x37c], edi
mov dword [ebp - 0x378], 1
inc edi
add ebx, 4
call fcn.100061b1
cmp edi, eax
jb 0x10070066
cmp dword [ebp - 0x378], 1
jne 0x100700d1
push 1
push 1
push 1
push 0
push dword [ebp - 0x37c]
call fcn.1003c09b
add esp, 0x14
or dword [ebp - 0x378], 0xffffffff
and dword [ebp - 0x37c], 0
call fcn.100061b1
test eax, eax
je 0x10070187
mov edi, dword [ebp - 0x380]
mov ebx, 0x1009c18c
mov esi, dword [edi]
test esi, esi
je 0x1007011f
lea eax, [esi + 0x64]
push ebx
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1007011f
xor eax, eax
inc eax
mov dword [ebp - 0x378], eax
cmp dword [esi + 0xef4], eax
je 0x10070137
inc dword [ebp - 0x37c]
add edi, 4
call fcn.100061b1
cmp dword [ebp - 0x37c], eax
jb 0x100700f7
jmp 0x1007013e
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x378], 1
jne 0x10070187
xor edi, edi
call fcn.100061b1
test eax, eax
je 0x10070187
mov esi, dword [ebp - 0x380]
mov eax, dword [esi]
test eax, eax
je 0x1007016f
add eax, 0x64
push ebx
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x1007017e
inc edi
add esi, 4
call fcn.100061b1
cmp edi, eax
jb 0x10070158
jmp 0x10070187
push edi
xor ecx, ecx
call fcn.1003adfb
pop ecx
cmp dword [0x103c3eb0], 1
jne 0x100702fb
mov eax, dword [ebp - 0x388]
mov esi, dword [0x3059750]
xor ebx, ebx
cmp dword [eax + 0x480c], ebx
jne 0x100701fe
call fcn.100061b1
test eax, eax
je 0x100702fb
lea edi, [esi + 0x53c]
mov esi, dword [edi]
test esi, esi
je 0x100701e6
lea eax, [esi + 0x64]
push 0x1009aab4
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x100701e6
mov eax, dword [esi + 0xd4c]
cmp eax, dword [0x103c6aec]
jg 0x100701f8
inc ebx
add edi, 4
call fcn.100061b1
cmp ebx, eax
jb 0x100701bd
jmp 0x100702fb
push ebx
jmp 0x100702f3
mov eax, dword [0x3059754]
mov eax, dword [eax + 0x56c]
cmp eax, ebx
je 0x100702fb
mov ebx, dword [sym.imp.MSVCR100.dll_strstr]
add eax, 0x64
push 0x1009aab4
push eax
call ebx
pop ecx
pop ecx
test eax, eax
je 0x100702fb
and dword [ebp - 0x37c], 0
call fcn.100061b1
test eax, eax
je 0x100702fb
lea edi, [esi + 0x53c]
mov eax, dword [edi]
test eax, eax
je 0x100702d1
lea esi, [eax + 0x64]
push 0x1009aa84
push esi
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x100702ed
push 0x1009aa8c
push esi
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x100702ed
push 0x1009aa94
push esi
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x100702ed
push 0x1009aa9c
push esi
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x100702ed
push 0x1009aaa4
push esi
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x100702ed
push 0x1009aaac
push esi
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x100702ed
push 0x1009aabc
push esi
call ebx
pop ecx
pop ecx
test eax, eax
jne 0x100702ed
inc dword [ebp - 0x37c]
add edi, 4
call fcn.100061b1
cmp dword [ebp - 0x37c], eax
jb 0x10070246
jmp 0x100702fb
push dword [ebp - 0x37c]
xor ecx, ecx
call fcn.1003adfb
pop ecx
mov eax, dword [ebp - 0x388]
cmp dword [eax + 0x51f8], 0
jne 0x10070313
cmp dword [eax + 0x2a60], 6
je 0x10070325
cmp dword [eax + 0x480c], 0
jne 0x10070379
cmp dword [eax + 0x2a60], 4
jne 0x10070379
xor edi, edi
lea esi, [ebp - 0x2e0]
mov ecx, edi
call fcn.10006348
xor esi, esi
cmp dword [0x103d7150], esi
jle 0x10070362
lea eax, [ebp - 0x2e0]
push eax
mov eax, dword [0x103d7148]
push dword [eax + esi*4]
call dword [sym.imp.MSVCR100.dll_strcmp]
pop ecx
pop ecx
test eax, eax
je 0x1007036a
inc esi
cmp esi, dword [0x103d7150]
jl 0x1007033e
inc edi
cmp edi, 0x14
jl 0x10070327
jmp 0x10070379
push 1
push dword [ebp - 0x2c4]
call fcn.1003c172
pop ecx
pop ecx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edi, 0x3e8
xor edx, edx
mov ecx, edi
div ecx
xor ebx, ebx
sub eax, dword [0x10360884]
cmp eax, dword [0x1035fed0]
jb 0x100703a3
push ebx
call fcn.100705ca
pop ecx
call esi
xor edx, edx
mov ecx, edi
div ecx
sub eax, dword [0x1035fd80]
cmp eax, 0x1194
jb 0x100703dc
push ebx
push ebx
push ebx
push 0x10070513
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
xor edx, edx
mov ecx, edi
div ecx
mov dword [0x1035fd80], eax
cmp dword [0x101127c4], 2
je 0x1007046b
cmp dword [0x1035ffac], ebx
jne 0x1007046b
cmp dword [0x103d72c4], 2
jne 0x1007046b
call fcn.1006e81c
cmp al, 1
jne 0x1007046b
call fcn.10038b91
mov dword [0x1035ffac], 1
call fcn.100744bd
push ebx
push ebx
push ebx
push ebx
mov dword [0x10112bf4], 0x7d0
call fcn.10070471
mov eax, dword [0x10114474]
push fcn.10070471
push edi
add eax, 0x4d
push eax
push dword [0x100dfd8c]
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [0x103d72bc]
mov ecx, dword [eax + 4]
fild dword [ecx]
mov eax, dword [eax]
sub esp, 0xc
fstp dword [esp + 8]
fldz
fstp dword [esp + 4]
fild dword [eax]
fstp dword [esp]
call fcn.1003a670
add esp, 0xc
call fcn.10083aac
ret