Function at 0x200352f6
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov eax, 0x2009e023
call fcn.2007d394
sub esp, 0x244
mov eax, dword [0x200cc84c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0xcc], edi
cmp dword [ebp + 8], 0x3e8
jne 0x2003644b
xor ebx, ebx
push ebx
push ebx
push 0xb
push dword [edi + 0xa0]
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [edi + 0xd8]
cmp ecx, ebx
je 0x20035356
call fcn.2005eedf
mov dword [ebp - 0xc8], eax
cmp eax, ebx
jne 0x20035366
lea ecx, [edi + 0x84]
call fcn.20008632
jmp 0x2003643a
push dword [edi + 0x1c]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x2003643a
push dword [edi + 0x1c]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x2003643a
lea ecx, [edi + 0xd4]
push 0x200a4a9c
call fcn.20003052
lea ecx, [ebp - 0x130]
call fcn.200352d0
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0xc8]
call fcn.2005cfe0
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xd4], ebx
fldz
fstp dword [ebp - 0xc4]
fldz
fstp dword [ebp - 0xb8]
lea ecx, [ebp - 0x110]
call fcn.20013786
mov byte [ebp - 4], 1
push 0xf
pop esi
mov dword [ebp - 0x50], esi
push ebx
lea ecx, [ebp - 0x68]
call fcn.20001bc0
mov byte [ebp - 4], 2
mov dword [ebp - 0x18], esi
push ebx
lea ecx, [ebp - 0x30]
call fcn.20001bc0
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0x12c]
je 0x20036297
add eax, 0x28
mov dword [ebp - 0xe4], eax
mov ecx, dword [eax + 8]
mov ecx, dword [ecx]
mov dword [ebp - 0xb4], ecx
mov ecx, dword [ebp - 0xb4]
cmp ecx, dword [eax + 8]
je 0x20036281
push 0x200a4a9c
lea ecx, [ebp - 0x30]
call fcn.20003a20
mov byte [ebp - 4], 4
wait
lea ecx, [ebp - 0x88]
call fcn.200026bf
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0xb4]
add eax, 8
mov dword [ebp - 0x1a0], eax
push eax
lea ecx, [ebp - 0xf0]
call fcn.20020cb6
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0xf0]
mov dword [ebp - 0x150], esi
lea eax, [esi + 0x88]
mov dword [ebp - 0x124], eax
cmp dword [eax], ebx
jne 0x200354d9
inc dword [ebp - 0xd4]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xf0]
call fcn.20001efb
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x88]
call fcn.200026ee
wait
mov byte [ebp - 4], 3
jmp 0x20036265
mov byte [ebp - 0xa0], 0x2e
lea edi, [esi + 0x98]
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.20016160
mov dword [ebp - 0x118], eax
mov byte [ebp - 0x9c], 0x3a
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x9c]
push eax
mov ecx, edi
call fcn.20016160
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x118]
inc eax
push eax
push ebx
lea eax, [ebp - 0x234]
push eax
mov ecx, edi
call fcn.200039ea
mov dword [ebp - 0x158], eax
mov byte [ebp - 4], 7
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x30]
call fcn.20002fc3
mov byte [ebp - 4], 6
push ebx
push 1
lea ecx, [ebp - 0x234]
call fcn.2000275e
push 0x200a4c04
lea ecx, [ebp - 0x30]
call fcn.20008f58
push 0xffffffffffffffff
push dword [ebp - 0xe8]
lea eax, [ebp - 0x1fc]
push eax
mov ecx, edi
call fcn.200039ea
mov dword [ebp - 0x160], eax
mov byte [ebp - 4], 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x30]
call fcn.20008e33
mov byte [ebp - 4], 6
push ebx
push 1
lea ecx, [ebp - 0x1fc]
call fcn.2000275e
cmp byte [esi + 0x1e4], bl
je 0x200355bc
push 0x200a7460
lea ecx, [ebp - 0x30]
call fcn.20008f58
mov dword [ebp - 0x1e0], 2
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x200355d2
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x1dc], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x110]
call fcn.200135de
mov edi, dword [ebp - 0xcc]
add edi, 0x84
mov dword [ebp - 0x90], edi
push 0xffffffffffffffff
lea eax, [ebp - 0x1e0]
push eax
mov ecx, edi
call fcn.20030e39
mov dword [ebp - 0x8c], eax
cmp eax, 0xffffffff
jne 0x20035651
mov ecx, edi
call fcn.20008607
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x20035634
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0xd0]
mov ecx, edi
call fcn.2000861a
mov dword [ebp - 0xd0], eax
push eax
push eax
mov ecx, edi
call fcn.2003478d
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
cmp eax, 2
je 0x20035663
cmp eax, 3
jne 0x200356a7
mov ecx, dword [esi + 0xc4]
fild dword [esi + 0xc4]
test ecx, ecx
jge 0x20035679
fadd dword [0x200a6f40]
fadd dword [ebp - 0xb8]
fstp dword [ebp - 0xb8]
mov ecx, dword [esi + 0xc8]
fild dword [esi + 0xc8]
test ecx, ecx
jge 0x2003569b
fadd dword [0x200a6f40]
fadd dword [ebp - 0xc4]
fstp dword [ebp - 0xc4]
mov dword [ebp - 0xe0], ebx
sub eax, ebx
je 0x200357b2
dec eax
je 0x2003578b
dec eax
je 0x200356fe
dec eax
jne 0x20035881
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0xc]
xor edx, edx
mov ecx, 0x3e8
div ecx
push eax
push 0x200a8874
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0xc
inc dword [ebp - 0xb0]
inc dword [ebp - 0xa4]
jmp 0x20035881
cmp byte [esi + 0xfa], bl
je 0x20035735
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0xc]
xor edx, edx
mov ecx, 0x3e8
div ecx
push eax
push 0x200a8874
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0xc
inc dword [ebp - 0xb0]
jmp 0x20035762
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0xc]
xor edx, edx
mov ecx, 0x3e8
div ecx
push eax
push 0x200a8868
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0xc
inc dword [ebp - 0xd8]
inc dword [ebp - 0xa4]
cmp byte [esi + 0x1e4], bl
je 0x20035881
lea eax, [esi + 0xbf]
cmp byte [eax], 3
je 0x20035881
mov byte [eax], 2
jmp 0x20035881
movzx eax, word [esi + 0x66]
push eax
movzx eax, word [esi + 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x10]
xor edx, edx
mov ecx, 0x3e8
div ecx
push eax
push 0x200a8854
jmp 0x20035872
cmp dword [esi + 0x14], ebx
jne 0x200357cc
push 0x200a884c
lea ecx, [ebp - 0x88]
call fcn.20003052
jmp 0x20035881
mov dword [ebp - 0xe0], 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xac], eax
mov eax, dword [esi + 0x60]
mov ecx, dword [esi + 0x14]
add eax, ecx
cmp dword [ebp - 0xac], eax
jbe 0x200357f8
mov dword [ebp - 0xac], eax
mov ecx, dword [esi + 0x1b8]
mov dword [ebp - 0x1b0], ecx
cmp ecx, ebx
je 0x20035853
lea ecx, [esi + 0x1a4]
mov dword [ebp - 0x1b8], ecx
cmp dword [ecx + 0x18], 0x10
jb 0x2003581f
mov ecx, dword [ecx + 4]
jmp 0x20035822
add ecx, 4
push ecx
movzx ecx, word [esi + 0x66]
push ecx
movzx ecx, word [esi + 0x64]
push ecx
sub eax, dword [ebp - 0xac]
xor edx, edx
mov ecx, 0x3e8
div ecx
push eax
push 0x200a8838
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0x18
jmp 0x20035881
movzx ecx, word [esi + 0x66]
push ecx
movzx ecx, word [esi + 0x64]
push ecx
sub eax, dword [ebp - 0xac]
xor edx, edx
mov ecx, 0x3e8
div ecx
push eax
push 0x200a8824
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0x14
push 4
push dword [ebp - 0xe0]
push dword [ebp - 0x8c]
mov ecx, edi
call fcn.2008e7cf
cmp byte [esi + 0xcd], bl
je 0x200358de
lea eax, [ebp - 0x88]
push eax
push 0x200a8820
lea eax, [ebp - 0x120]
push eax
call fcn.200282bb
add esp, 0xc
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x88]
call fcn.20015e97
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x120]
call fcn.200026ee
cmp dword [esi + 0x78], ebx
je 0x20035989
lea ecx, [ebp - 0xc0]
call fcn.200026bf
mov byte [ebp - 4], 0xa
mov edi, dword [esi + 0x74]
mov dword [ebp - 0x184], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x220]
xor edx, edx
mov ecx, 0x3e8
div ecx
push eax
push dword [esi + 0x7c]
push edi
movzx eax, byte [esi + 0x80]
push eax
push str._d_d._d._d
lea eax, [ebp - 0xc0]
push eax
call fcn.2000379b
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.20031c38
add esp, 0x24
mov dword [ebp - 0x14c], eax
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x88]
call fcn.20015e97
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xfc]
call fcn.200026ee
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xc0]
call fcn.200026ee
mov edi, dword [ebp - 0x90]
push dword [ebp - 0x88]
push 2
push dword [ebp - 0x8c]
mov ecx, edi
call fcn.2008e7fa
push 0x200a4a9c
lea ecx, [ebp - 0x88]
call fcn.20003052
movzx eax, byte [esi + 0xbf]
sub eax, ebx
je 0x20035a08
dec eax
je 0x200359dd
dec eax
je 0x200359d6
lea ecx, [ebp - 0x88]
dec eax
je 0x200359cf
push 0x200a8808
jmp 0x20035a13
push 0x200a8800
jmp 0x20035a13
push 0x200a8800
jmp 0x20035a0d
push 0x200a87f8
lea ecx, [ebp - 0x88]
call fcn.20003052
cmp byte [esi + 0xbd], 1
jne 0x20035a18
push 0x200a87f4
lea ecx, [ebp - 0x88]
call fcn.200037d8
jmp 0x20035a18
push 0x200a87ec
lea ecx, [ebp - 0x88]
call fcn.20003052
lea ecx, [ebp - 0x88]
cmp byte [esi + 0x1e4], bl
je 0x20035a2d
push str._TCP
jmp 0x20035a32
push 0x200a87d4
call fcn.200037d8
push dword [ebp - 0x88]
push 1
push dword [ebp - 0x8c]
mov ecx, edi
call fcn.2008e7fa
lea ecx, [ebp - 0x94]
call fcn.200026bf
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x98]
call fcn.200026bf
mov byte [ebp - 4], 0xd
fld dword [esi + 0xd8]
fcomp dword [0x200a87d0]
fnstsw ax
push ecx
push ecx
test ah, 0x41
jp 0x20035a8f
fld dword [esi + 0xd8]
fstp qword [esp]
push 0x200a87c8
jmp 0x20035ac6
fld dword [esi + 0xd8]
fcomp dword [0x200a87c4]
fnstsw ax
fld dword [esi + 0xd8]
test ah, 0x41
jp 0x20035ab8
fmul dword [0x200a77a4]
fstp qword [esp]
push 0x200a87bc
jmp 0x20035ac6
fmul dword [0x200a87b8]
fstp qword [esp]
push str._.1fM
lea eax, [ebp - 0x94]
push eax
call fcn.2000379b
add esp, 0x10
fld dword [esi + 0xdc]
fcomp dword [0x200a87d0]
fnstsw ax
push ecx
push ecx
test ah, 0x41
jp 0x20035afa
fld dword [esi + 0xdc]
fstp qword [esp]
push 0x200a87c8
jmp 0x20035b31
fld dword [esi + 0xdc]
fcomp dword [0x200a87c4]
fnstsw ax
fld dword [esi + 0xdc]
test ah, 0x41
jp 0x20035b23
fmul dword [0x200a77a4]
fstp qword [esp]
push 0x200a87bc
jmp 0x20035b31
fmul dword [0x200a87b8]
fstp qword [esp]
push str._.1fM
lea eax, [ebp - 0x98]
push eax
call fcn.2000379b
add esp, 0x10
push dword [ebp - 0x98]
push dword [ebp - 0x94]
mov edi, str._s__s
push edi
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0x10
push dword [ebp - 0x88]
push 4
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
mov eax, dword [esi + 0xc4]
cmp eax, 0x400
ja 0x20035b9e
push eax
push 0x200a4c68
lea eax, [ebp - 0x94]
push eax
call fcn.2000379b
add esp, 0xc
jmp 0x20035c02
cmp eax, 0x100000
ja 0x20035bcd
mov dword [ebp - 0x1ac], eax
fild dword [ebp - 0x1ac]
test eax, eax
jge 0x20035bbb
fadd dword [0x200a6f40]
fmul dword [0x200a77a4]
push ecx
push ecx
fstp qword [esp]
push 0x200a87bc
jmp 0x20035bf3
mov dword [ebp - 0x154], eax
fild dword [ebp - 0x154]
test eax, eax
jge 0x20035be3
fadd dword [0x200a6f40]
fmul dword [0x200a87b8]
push ecx
push ecx
fstp qword [esp]
push str._.1fM
lea eax, [ebp - 0x94]
push eax
call fcn.2000379b
add esp, 0x10
mov eax, dword [esi + 0xc8]
cmp eax, 0x400
ja 0x20035c26
push eax
push 0x200a4c68
lea eax, [ebp - 0x98]
push eax
call fcn.2000379b
add esp, 0xc
jmp 0x20035c8a
cmp eax, 0x100000
ja 0x20035c55
mov dword [ebp - 0x19c], eax
fild dword [ebp - 0x19c]
test eax, eax
jge 0x20035c43
fadd dword [0x200a6f40]
fmul dword [0x200a77a4]
push ecx
push ecx
fstp qword [esp]
push 0x200a87bc
jmp 0x20035c7b
mov dword [ebp - 0x15c], eax
fild dword [ebp - 0x15c]
test eax, eax
jge 0x20035c6b
fadd dword [0x200a6f40]
fmul dword [0x200a87b8]
push ecx
push ecx
fstp qword [esp]
push str._.1fM
lea eax, [ebp - 0x98]
push eax
call fcn.2000379b
add esp, 0x10
push dword [ebp - 0x98]
push dword [ebp - 0x94]
push edi
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0x10
push dword [ebp - 0x88]
push 3
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
push dword [esi + 0xd0]
push dword [esi + 0xd4]
push str._d__d
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0x10
push dword [ebp - 0x88]
push 5
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
cmp dword [esi + 0x20], ebx
jne 0x20035d04
push 0x200a8808
jmp 0x20035d6d
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ebx
push str._H:_M:_S
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x138]
call fcn.20004f86
mov byte [ebp - 4], 0xe
movzx ecx, byte [esi + 0xf7]
push ecx
push dword [eax]
push str._s__d___
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0x10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x114]
call fcn.200026ee
push dword [ebp - 0x88]
push 7
mov ecx, dword [ebp - 0x90]
push dword [ebp - 0x8c]
call fcn.2008e7fa
cmp dword [esi + 0x24], ebx
jne 0x20035da2
push 0x200a8808
push 8
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
jmp 0x20035e2f
mov eax, dword [esi + 0x24]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ebx
push str._H:_M:_S
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x140]
call fcn.20004f86
mov edi, eax
mov byte [ebp - 4], 0xf
push dword [esi + 0x24]
mov ecx, dword [ebp - 0xc8]
call fcn.2003afc0
movzx eax, al
push eax
push dword [edi]
push str._s__d___
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0x10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xf4]
call fcn.200026ee
push dword [ebp - 0x88]
push 8
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
mov edi, str._s__s
fld dword [esi + 0xf0]
fcomp dword [0x200a87d0]
fnstsw ax
push ecx
push ecx
test ah, 0x41
jp 0x20035e54
fld dword [esi + 0xf0]
fstp qword [esp]
push 0x200a87bc
jmp 0x20035e8b
fld dword [esi + 0xf0]
fcomp dword [0x200a87c4]
fnstsw ax
fld dword [esi + 0xf0]
test ah, 0x41
jp 0x20035e7d
fmul dword [0x200a77a4]
fstp qword [esp]
push str._.1fM
jmp 0x20035e8b
fmul dword [0x200a87b8]
fstp qword [esp]
push str._.1fG
lea eax, [ebp - 0x94]
push eax
call fcn.2000379b
add esp, 0x10
fld dword [esi + 0xec]
fcomp dword [0x200a87d0]
fnstsw ax
push ecx
push ecx
test ah, 0x41
jp 0x20035ebf
fld dword [esi + 0xec]
fstp qword [esp]
push 0x200a87bc
jmp 0x20035ef6
fld dword [esi + 0xec]
fcomp dword [0x200a87c4]
fnstsw ax
fld dword [esi + 0xec]
test ah, 0x41
jp 0x20035ee8
fmul dword [0x200a77a4]
fstp qword [esp]
push str._.1fM
jmp 0x20035ef6
fmul dword [0x200a87b8]
fstp qword [esp]
push str._.1fG
lea eax, [ebp - 0x98]
push eax
call fcn.2000379b
add esp, 0x10
push dword [ebp - 0x98]
push dword [ebp - 0x94]
push edi
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0x10
push dword [ebp - 0x88]
push 0xa
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
mov ax, word [esi + 0xea]
cmp ax, 0x400
movzx eax, ax
ja 0x20035f64
shl eax, 3
push eax
push str._dKbps
lea eax, [ebp - 0x94]
push eax
call fcn.2000379b
add esp, 0xc
jmp 0x20035f8f
mov dword [ebp - 0xf8], eax
fild dword [ebp - 0xf8]
fmul dword [0x200a6ba4]
push ecx
push ecx
fstp qword [esp]
push str._.1fMbps
lea eax, [ebp - 0x94]
push eax
call fcn.2000379b
add esp, 0x10
mov ax, word [esi + 0xe8]
cmp ax, 0x400
movzx eax, ax
ja 0x20035fb9
shl eax, 3
push eax
push str._dKbps
lea eax, [ebp - 0x98]
push eax
call fcn.2000379b
add esp, 0xc
jmp 0x20035fe4
mov dword [ebp - 0x100], eax
fild dword [ebp - 0x100]
fmul dword [0x200a6ba4]
push ecx
push ecx
fstp qword [esp]
push str._.1fMbps
lea eax, [ebp - 0x98]
push eax
call fcn.2000379b
add esp, 0x10
push dword [ebp - 0x98]
push dword [ebp - 0x94]
push edi
lea eax, [ebp - 0x88]
push eax
call fcn.2000379b
add esp, 0x10
push dword [ebp - 0x88]
push 9
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
mov eax, dword [esi + 0x1d4]
mov dword [ebp - 0x1bc], eax
cmp eax, ebx
je 0x2003605b
lea eax, [esi + 0x1c0]
mov dword [ebp - 0x164], eax
push 0x10
pop edi
cmp dword [eax + 0x18], edi
jb 0x20036042
mov eax, dword [eax + 4]
jmp 0x20036045
add eax, 4
push eax
push 0xc
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
jmp 0x20036076
push 0x200a8808
push 0xc
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
push 0x10
pop edi
lea eax, [esi + 0x134]
mov dword [ebp - 0x180], eax
cmp dword [eax + 0x18], edi
jb 0x2003608c
mov eax, dword [eax + 4]
jmp 0x2003608f
add eax, 4
push eax
push 0xd
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
lea eax, [esi + 0x118]
mov dword [ebp - 0x170], eax
cmp dword [eax + 0x18], edi
jb 0x200360b9
mov eax, dword [eax + 4]
jmp 0x200360bc
add eax, 4
push eax
push 0xe
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
lea eax, [esi + 0x150]
mov dword [ebp - 0x188], eax
cmp dword [eax + 0x18], edi
jb 0x200360e6
mov eax, dword [eax + 4]
jmp 0x200360e9
add eax, 4
push eax
push 0xf
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
mov eax, dword [esi + 0x180]
mov dword [ebp - 0x17c], eax
cmp eax, ebx
je 0x200361a8
mov ecx, dword [esi + 0x19c]
mov dword [ebp - 0x190], ecx
cmp ecx, ebx
je 0x200361a8
push 0x200a63ec
lea eax, [esi + 0x16c]
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.20014e68
mov byte [ebp - 4], 0x10
add esi, 0x188
push esi
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.2001626b
add esp, 0x18
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x18], edi
jb 0x2003616c
mov eax, dword [eax + 4]
jmp 0x2003616f
add eax, 4
push eax
push edi
push dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
call fcn.2008e7fa
mov byte [ebp - 4], 0x10
push ebx
push 1
lea ecx, [ebp - 0x218]
call fcn.2000275e
mov byte [ebp - 4], 0xd
push ebx
push 1
lea ecx, [ebp - 0x250]
call fcn.2000275e
jmp 0x200361fc
mov dword [ebp - 0x1a4], eax
cmp eax, ebx
je 0x200361c8
add esi, 0x16c
mov dword [ebp - 0x18c], esi
cmp dword [esi + 0x18], edi
jb 0x200361e6
mov esi, dword [esi + 4]
jmp 0x200361e9
mov eax, dword [esi + 0x19c]
mov dword [ebp - 0x1b4], eax
cmp eax, ebx
je 0x200361fc
add esi, 0x188
mov dword [ebp - 0x194], esi
jmp 0x200361be
add esi, 4
push esi
push edi
mov ecx, dword [ebp - 0x90]
push dword [ebp - 0x8c]
call fcn.2008e7fa
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x98]
call fcn.200026ee
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x94]
call fcn.200026ee
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xf0]
call fcn.20001efb
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x88]
call fcn.200026ee
wait
jmp 0x20036258
mov dword [ebp - 4], 3
mov edi, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
push 0xf
pop esi
mov eax, dword [ebp - 0xe4]
jmp 0x20035440
lea ecx, [ebp - 0xdc]
call fcn.2003492d
mov eax, dword [ebp - 0xdc]
jmp 0x20035420
lea ecx, [edi + 0x84]
call fcn.20008607
mov dword [ebp - 0xa8], eax
cmp eax, ebx
je 0x2003634d
dec dword [ebp - 0xa8]
push ebx
push dword [ebp - 0xa8]
lea eax, [ebp - 0x104]
push eax
lea ecx, [edi + 0x84]
call fcn.2008ea4c
mov byte [ebp - 4], 0x13
push dword [eax]
lea ecx, [ebp - 0x84]
call fcn.20003c27
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x104]
call fcn.200026ee
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x110]
call fcn.2001304d
mov ecx, dword [ebp - 0x11c]
cmp dword [eax], ecx
jne 0x2003632f
push dword [ebp - 0xa8]
lea ecx, [edi + 0x84]
call fcn.200347a6
mov byte [ebp - 4], 3
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.2000275e
cmp dword [ebp - 0xa8], ebx
jne 0x200362b0
mov dword [ebp - 0x34], esi
push ebx
lea ecx, [ebp - 0x4c]
call fcn.20001bc0
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0xc8]
call fcn.20044117
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x20036378
lea eax, [ebp - 0x48]
lea esi, [edi + 0xd4]
push eax
mov ecx, esi
call fcn.20003052
lea ecx, [ebp - 0xbc]
call fcn.200026bf
mov byte [ebp - 4], 0x17
fld dword [ebp - 0xb8]
fmul dword [0x200a77a4]
sub esp, 0x10
fstp qword [esp + 8]
fld dword [ebp - 0xc4]
fmul dword [0x200a77a4]
fstp qword [esp]
push 0x200a8750
lea eax, [ebp - 0xbc]
push eax
call fcn.2000379b
add esp, 0x18
lea eax, [ebp - 0xbc]
push eax
mov ecx, esi
call fcn.20008751
push ebx
mov ecx, edi
call fcn.200913d7
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xbc]
call fcn.200026ee
mov byte [ebp - 4], 3
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.2000275e
mov byte [ebp - 4], 2
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.2000275e
mov byte [ebp - 4], 1
push ebx
push 1
lea ecx, [ebp - 0x68]
call fcn.2000275e
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x110]
call fcn.20013728
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.200352ad
push ebx
push 1
push 0xb
push dword [edi + 0xa0]
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.2007c9ae
leave
ret 4