Function at 0x10005f4a
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, ecx
xor edx, edx
push esi
push edi
mov dword [ebp - 4], eax
cmp dword [eax + 0x218], edx
je 0x10005c3b
mov ecx, 0x104
mov esi, 0x10030d30
mov edi, 0x1002fcf0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x104
mov esi, 0x10031140
mov edi, 0x10030100
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x1002e36c]
mov dword [0x1002deac], ecx
mov ecx, dword [0x1002e378]
jmp 0x10005c7b
cmp dword [0x10031550], edx
jne 0x10006059
mov ecx, 0x104
mov esi, 0x10030510
mov edi, 0x1002fcf0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x104
mov esi, 0x10030920
mov edi, 0x10030100
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x1002e368]
mov dword [0x1002deac], ecx
mov ecx, dword [0x1002e374]
push ebx
mov ebx, dword [ebp + 8]
mov dword [0x1002e370], ecx
movzx ecx, byte [ebx]
cmp ecx, 0x65
ja case.0x10005c98.3
movzx ecx, byte [ecx + 0x10006098]
jmp dword [ecx*4 + 0x10006064]
push 1
add eax, 0x21c
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
cmp dword [ebp + 0xc], 0xc41
jne case.0x10005c98.3
push 0xc40
call fcn.10010127
push 0xc40
mov edi, eax
push 0
push edi
mov dword [ebp + 0xc], edi
call fcn.100119a0
lea esi, [ebx + 1]
mov ecx, 0x310
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x10032228]
mov edi, dword [ebp + 0xc]
add esp, 0x10
mov esi, eax
cmp eax, dword [0x1003222c]
je 0x10005d4a
mov edi, edi
mov edx, dword [esi]
mov eax, dword [edx]
lea ecx, [edi + 4]
add eax, 4
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10005d36
test dx, dx
je 0x10005d32
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10005d36
add eax, 4
add ecx, 4
test dx, dx
jne 0x10005d10
xor eax, eax
jmp 0x10005d3b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10005da0
add esi, 4
cmp esi, dword [0x1003222c]
jne 0x10005d00
push 0xc41
call fcn.1001030b
mov esi, eax
push 0xc40
lea ecx, [esi + 1]
push edi
mov byte [esi], 5
push ecx
mov dword [edi + 0x400], 0
call fcn.10011ca0
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
add esp, 0x10
push 0xc41
push esi
call edx
push edi
call fcn.1000fccd
push esi
call fcn.1000fccd
add esp, 8
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esi]
mov edx, dword [ecx]
lea eax, [edi + 0x202]
push eax
add edx, 0x202
push 0xff
push edx
call fcn.100103e9
mov eax, dword [esi]
push 0
push 0
push eax
push 0x100056e0
push 0
push 0
call fcn.10010679
add esp, 0x24
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call fcn.1000fccd
add esp, 4
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
push 0xc40
call fcn.10010127
push 0xc40
mov edi, eax
push 0
push edi
mov dword [ebp + 8], edi
call fcn.100119a0
lea esi, [ebx + 1]
mov ecx, 0x310
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebx + 0xc41]
push esi
call fcn.1001030b
push esi
add ebx, 0xc45
mov edi, eax
push ebx
push edi
call fcn.10011ca0
push 8
call fcn.10010127
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov dword [eax + 4], edi
mov edx, dword [eax]
mov dword [ebp + 0xc], eax
add esp, 0x24
lea eax, [ebp + 0xc]
mov dword [edx + 0x404], esi
call fcn.100071b0
mov eax, dword [ebp + 0xc]
push 0
push 0
push eax
push 0x100056e0
push 0
push 0
call fcn.10010679
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
call fcn.10006100
mov edi, dword [0x1002f498]
push 0x200
call fcn.10010127
push 0x200
mov esi, eax
push 0
push esi
call fcn.100119a0
push 0x10025a8c
push 0x100261d4
jmp 0x10005fcb
push 0xc40
call fcn.10010127
push 0xc40
mov esi, eax
push 0
push esi
call fcn.100119a0
mov edi, dword [ebp + 0xc]
dec edi
push edi
call fcn.1001030b
push edi
inc ebx
push ebx
push eax
mov dword [ebp + 8], eax
call fcn.10011ca0
push 8
call fcn.10010127
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push 0
push 0
push eax
mov dword [eax], esi
mov dword [eax + 4], ecx
dec edx
push 0x100056e0
mov dword [esi + 0x404], edx
mov ecx, dword [eax]
push 0
push 0
mov dword [ecx], 2
call fcn.10010679
add esp, 0x3c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
push eax
call fcn.10006200
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebp + 0xc]
push edx
push eax
mov ecx, ebx
call fcn.100064c0
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
lea eax, [ebp + 0xc]
push eax
push edx
inc ebx
push ebx
push 0x10006ec0
push edx
push edx
mov dword [ebp + 0xc], edx
call fcn.10010679
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov ebx, dword [ebx + 1]
push ebx
mov esi, eax
call fcn.10006b50
mov edi, dword [0x1002f498]
push 0x200
test eax, eax
je 0x10005fad
call fcn.10010127
push 0x200
mov esi, eax
push 0
push esi
call fcn.100119a0
push 0x10025a8c
push 0x100261e4
jmp 0x10005fcb
call fcn.10010127
push 0x200
mov esi, eax
push 0
push esi
call fcn.100119a0
push 0x10025a8c
push 0x100261f0
push str._s__s_n
lea ecx, [esi + 2]
push 0xff
push ecx
mov byte [esi], 1
call fcn.100101a7
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
add esp, 0x24
push 0x200
push esi
call eax
push esi
call fcn.1000fccd
add esp, 4
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
movzx ecx, byte [ebx + 1]
sub ecx, edx
je 0x10006028
dec ecx
jne case.0x10005c98.3
add ebx, 2
push ebx
mov edi, str.BEIZHU
call fcn.10006e10
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
add ebx, 2
push ebx
mov edi, str.FENZU
call fcn.10006e10
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
pop ebx
pop edi
mov dword [0x10031550], 1
pop esi
mov esp, ebp
pop ebp
ret 8
mov dword [0x10031550], edx
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8