Function at 0x1000ad00
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xffffffffffffffff
push 0x10082328
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
mov ebp, dword [esp + 0x20]
push esi
push edi
push 0x250
mov eax, dword [ebp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
lea ecx, [esp + 0x10]
call fcn.10004f00
mov dword [esp + 0x20], 0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x7d0
call esi
lea ecx, [esp + 0x10]
call fcn.10004f40
cmp eax, 9
jne 0x1000adc6
call fcn.1001b440
push 0x3e8
call esi
call fcn.1001b440
push 0x7d0
call esi
push 0x10096554
lea ecx, [esp + 0x14]
call fcn.10005d20
test eax, eax
je 0x1000ad6c
push 0x3e8
call esi
mov eax, dword [0x100afd58]
mov ecx, dword [eax + 0x118]
test ecx, ecx
je 0x1000adb6
mov eax, dword [eax + 0x11c]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
push ecx
call esi
push 0
lea ecx, [esp + 0x14]
call fcn.10006110
jmp 0x1000b7f8
push 0x10096554
lea ecx, [esp + 0x14]
call fcn.10005d20
test eax, eax
lea ecx, [esp + 0x10]
je 0x1000ade8
push 0
call fcn.10006110
jmp 0x1000b7f8
push 0x1009679c
call fcn.10005d20
test eax, eax
je 0x1000af21
push 1
push 0
push 0x3f800000
push 0x41f80000
push 0x42340000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x3e8
call esi
push 0
call fcn.1002b420
add esp, 4
push 0x7d0
call esi
lea ecx, [esp + 0x10]
call fcn.10006250
cmp eax, 0xbbb1fac4
jne 0x1000aef1
push 1
call fcn.1002b420
add esp, 4
push 0x7d0
call esi
call fcn.10049164
mov edi, eax
push 0x1f4
call esi
call fcn.10049164
sub eax, edi
cmp eax, 0x11170
jg 0x1000ae97
push 0x10096794
lea ecx, [esp + 0x14]
call fcn.10005d20
test eax, eax
je 0x1000ae5a
push 0x3e8
call esi
push 0x1009664c
push 0x10096794
jmp 0x1000b7f0
push 0xea60
call esi
push 0x3e8
call esi
push 0
call fcn.1002b420
add esp, 4
push 0x7d0
call esi
lea ecx, [esp + 0x10]
call fcn.10006250
cmp eax, 0xbbb1fac4
je 0x1000ae97
push 0x1009664c
call fcn.1001b3b0
add esp, 4
push 0x3e8
call esi
push 0x1009664c
lea ecx, [esp + 0x14]
call fcn.10005d20
test eax, eax
je 0x1000aed3
jmp 0x1000b7ff
push 0x1009664c
call fcn.1001b3b0
add esp, 4
push 0x3e8
call esi
push 0x1009664c
lea ecx, [esp + 0x14]
call fcn.10005d20
test eax, eax
je 0x1000aefe
push 0x1f4
jmp 0x1000b7fd
call fcn.1002bea0
test eax, eax
je 0x1000af39
push 0
call fcn.1002ae80
add esp, 4
jmp 0x1000b7ff
mov eax, dword [ebp + 0x2b4]
lea ecx, [esp + 0x10]
test eax, eax
je 0x1000afd1
push 0xbf800000
push 0xbf800000
push 0xffffffffffffffff
push 0xf8
call fcn.10005540
push 0x320
call esi
call fcn.10027d70
lea edi, [ebp + 0x2b8]
push 0x3e8
call esi
push 0
mov ecx, edi
call fcn.1007bc3c
push eax
call fcn.10021bc0
add esp, 4
test eax, eax
je 0x1000afb5
push 0xbf800000
push 0xbf800000
push 0xffffffffffffffff
push 0xf8
call fcn.10021b50
add esp, 0x10
push 0x320
call esi
call fcn.10027d70
push 0x1009664c
lea ecx, [esp + 0x14]
call fcn.10005d20
test eax, eax
je 0x1000af73
push 0x1f4
jmp 0x1000b7fd
call fcn.10005e30
cmp eax, 0xd2
jne 0x1000b056
push 0xd1
push eax
call fcn.100269e0
add esp, 8
push 0x3e8
call esi
mov edx, dword [0x100afb3c]
mov eax, dword [edx]
mov ecx, dword [eax + 0x32f8]
mov eax, dword [ecx + 0x264]
test eax, eax
jg 0x1000b056
push 0xbf800000
push 0xbf800000
push 0xffffffffffffffff
push 0x16
lea ecx, [esp + 0x20]
call fcn.10005540
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ebx, eax
push 0x3e8
call esi
call edi
sub eax, ebx
cmp eax, 0x4e20
ja 0x1000b04f
push 0x1009678c
lea ecx, [esp + 0x14]
call fcn.10005d20
test eax, eax
je 0x1000b02b
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0x100
jne 0x1000b123
push 1
push 1
push 0x3f800000
push 0x42940000
push 0x41d00000
lea ecx, [esp + 0x24]
call fcn.10005230
lea ecx, [esp + 0x10]
call fcn.100056a0
push 0x1f4
call esi
push 0x3e8
call esi
push 0x42a40000
push 0x41d00000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42a40000
push 0x41d00000
lea ecx, [esp + 0x1c]
call fcn.10005c80
test eax, eax
je 0x1000b096
push 1
push 1
push 0x3f800000
push 0x42ae0000
push 0x41c80000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x42ba0000
push 0x41c80000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42ba0000
push 0x41c80000
lea ecx, [esp + 0x1c]
call fcn.10005c80
test eax, eax
je 0x1000b0d2
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0xd7
jne 0x1000b1d9
push 0x43690000
push 0x42f00000
call fcn.1002aca0
add esp, 8
test eax, eax
je 0x1000b1c7
push 1
lea ecx, [esp + 0x14]
call fcn.100055e0
push 0x1f4
call esi
push 1
push 1
push 0x3f800000
push 0x43690000
push 0x42ce0000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x1f4
call esi
lea ecx, [esp + 0x10]
call fcn.100056a0
push 0x1f4
call esi
push 0x43690000
push 0x42b20000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43690000
push 0x42b20000
lea ecx, [esp + 0x1c]
call fcn.10005c80
test eax, eax
je 0x1000b15f
push 1
lea ecx, [esp + 0x14]
call fcn.100055e0
push 0x1f4
call esi
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0xd8
jne 0x1000b25b
push 1
lea ecx, [esp + 0x14]
call fcn.100055e0
push 0x7d0
call esi
push 0x435c0000
push 0x43000000
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000b25b
push 0x43250000
push 0x43570000
lea ecx, [esp + 0x18]
call fcn.100051b0
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.10004f40
test eax, eax
jne 0x1000b224
push 0xbb8
call esi
push 0x3f800000
push 0x43570000
push 0x435f0000
lea ecx, [esp + 0x1c]
call fcn.10005c80
test eax, eax
je 0x1000b211
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0x124
jne 0x1000b2e1
push 0x42200000
push 0x42840000
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000b2e1
push 1
push 0x3f800000
push 0x42480000
push 0x43120000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
call fcn.10021470
push 0x3e8
call esi
push 0x42400000
push 0x43040000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42400000
push 0x43040000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b2ad
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0x107
jne 0x1000b3e5
push 1
lea ecx, [esp + 0x14]
call fcn.100055e0
push 0x7d0
call esi
push 0x437f0000
push 0x435a0000
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000b3e5
push 0x42200000
push 0x42fe0000
call fcn.1002aca0
add esp, 8
test eax, eax
je 0x1000b3e5
push 1
push 0x3f800000
push 0x42200000
push 0x42fe0000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
call fcn.10021470
push 0x3e8
call esi
push 0x42200000
push 0x42e80000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42200000
push 0x42e80000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b367
push 1
push 0x3f800000
push 0x421c0000
push 0x42dc0000
call fcn.10021d60
push 0x42200000
push 0x42c40000
call fcn.10029f00
add esp, 0x18
push 0x1770
call esi
push 0x40800000
push 0x42200000
push 0x42c40000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b39b
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0x106
jne 0x1000b7d6
push 1
lea ecx, [esp + 0x14]
call fcn.100055e0
push 0x7d0
call esi
push 0x43020000
push 0x42900000
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000b5d5
push 0x42e40000
push 0x43330000
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000b68d
push 0x435e0000
push 0x43620000
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000b7a4
push 1
push 0x3f800000
push 0x42fc0000
push 0x41d80000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
call fcn.10021470
push 0x3e8
call esi
push 0xbf800000
push 0xbf800000
push 0xffffffffffffffff
push 0xf8
call fcn.10021b50
add esp, 0x10
push 0x1388
call esi
push 0x43030000
push 0x41d80000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43030000
push 0x41d80000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b4a5
push 1
push 0x3f800000
push 0x43090000
push 0x41d80000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x43080000
push 0x42080000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43080000
push 0x42080000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b4d9
push 1
push 0x3f800000
push 0x43080000
push 0x42200000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x43070000
push 0x423c0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43070000
push 0x423c0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b52d
push 1
push 0x3f800000
push 0x43070000
push 0x424c0000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x43080000
push 0x427c0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43080000
push 0x427c0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b581
push 1
push 0x3f800000
push 0x42f60000
push 0x42ea0000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.100056a0
push 0x320
call esi
push 0x42f40000
push 0x42fe0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42f40000
push 0x42fe0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b5d5
push 1
push 0x3f800000
push 0x42f40000
push 0x43120000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x42f40000
push 0x43180000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42f40000
push 0x43180000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b639
push 1
push 0x3f800000
push 0x42e40000
push 0x433c0000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.100056a0
push 0x320
call esi
push 0x42e40000
push 0x43440000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e40000
push 0x43440000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b68d
push 1
push 0x3f800000
push 0x42e40000
push 0x43490000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x42e40000
push 0x434f0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e40000
push 0x434f0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b6f1
push 1
push 0x3f800000
push 0x42e40000
push 0x43550000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x42e60000
push 0x435f0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e60000
push 0x435f0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000b745
push 1
lea ecx, [esp + 0x14]
call fcn.100055e0
push 1
push 1
push 0x3f800000
push 0x436b0000
push 0x43620000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x3e8
call esi
push 7
lea ecx, [esp + 0x14]
call fcn.10005dc0
test eax, eax
je 0x1000b7c0
push 1
lea ecx, [esp + 0x14]
call fcn.100055e0
push 0x1009664c
lea ecx, [esp + 0x14]
call fcn.100058d0
push eax
call fcn.100297d0
add esp, 8
push 0x3e8
call esi
push 0xbb8
call esi
push 0x10096644
lea ecx, [esp + 0x14]
call fcn.10006c80
push 0x3e8
call esi
push 0x10096638
call fcn.1001b3b0
add esp, 4
push 0x7d0
call esi
push 0x10096634
call fcn.1001b3b0
add esp, 4
push 0x7d0
call esi
mov eax, dword [0x100afdb8]
test eax, eax
je 0x1000b903
push 1
push 1
push 0x40800000
push 0x43948000
push 0x43320000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x3e8
call esi
call fcn.10030410
push 0x3e8
call esi
mov eax, dword [0x100afd50]
test eax, eax
je 0x1000b903
add eax, 0xec
push eax
call fcn.10028f00
add esp, 4
cmp eax, 0xffffffff
jne 0x1000b8fc
mov eax, dword [0x100afdbc]
test eax, eax
je 0x1000b8fc
mov edx, dword [0x100ad8a4]
push 0
push 0xf120
push 0x112
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x100ad8a4]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ebx, dword [sym.imp.KERNEL32.dll_Beep]
mov edi, 4
push 0x3e8
push 0x3e8
call ebx
push 0x5dc
call esi
dec edi
jne 0x1000b8d4
push 0x10096764
call fcn.1001bb40
add esp, 4
jmp 0x1000c4ba
push 0x3e8
call esi
push 1
push 1
push 0x3f800000
push 0x439a0000
push 0x43660000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x100965b8
lea ecx, [esp + 0x14]
call fcn.10006c80
push 0x3e8
call esi
call fcn.1001bfb0
push 0x3e8
call esi
mov eax, dword [0x100afd50]
test eax, eax
je 0x1000b95e
add eax, 0xf0
push eax
call fcn.10025e40
add esp, 4
push 0x3e8
call esi
mov eax, dword [ebp + 0x23c]
test eax, eax
je 0x1000ba1a
mov edi, dword [esp + 0x28]
push 0
lea ebx, [edi + 0x250]
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.10025b40
mov ecx, dword [edi + 0x260]
add esp, 4
cmp ecx, eax
jle 0x1000ba1a
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.10025b40
mov ecx, edi
add esp, 4
mov edi, dword [ecx + 0x260]
sub edi, eax
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ebp, edx
test ebp, ebp
jle 0x1000b9f3
mov dword [esp + 0x14], ebp
push 0x14
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.1002afe0
add esp, 8
push 0x1f4
call esi
mov eax, dword [esp + 0x14]
dec eax
mov dword [esp + 0x14], eax
jne 0x1000b9cd
lea ecx, [ebp + ebp*4]
shl ecx, 2
sub edi, ecx
test edi, edi
jle 0x1000ba1a
push edi
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.1002afe0
add esp, 8
push 0x1f4
call esi
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x240]
test eax, eax
je 0x1000bad8
mov edi, edx
push 0
lea ebx, [edi + 0x254]
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.10025b40
mov ecx, dword [edi + 0x264]
add esp, 4
cmp ecx, eax
jle 0x1000bad8
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.10025b40
mov ecx, edi
add esp, 4
mov edi, dword [ecx + 0x264]
sub edi, eax
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ebp, edx
test ebp, ebp
jle 0x1000bab1
mov dword [esp + 0x14], ebp
push 0x14
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.1002afe0
add esp, 8
push 0x1f4
call esi
mov eax, dword [esp + 0x14]
dec eax
mov dword [esp + 0x14], eax
jne 0x1000ba8b
lea ecx, [ebp + ebp*4]
shl ecx, 2
sub edi, ecx
test edi, edi
jle 0x1000bad8
push edi
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.1002afe0
add esp, 8
push 0x1f4
call esi
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x244]
test ecx, ecx
jne 0x1000baf4
mov ecx, dword [eax + 0x26c]
test ecx, ecx
je 0x1000bcc2
push 1
push 1
push 0x3f800000
push 0x43950000
push 0x43898000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x10096594
lea ecx, [esp + 0x14]
call fcn.10006c80
push 0x3e8
call esi
push 0x1009656c
call fcn.1001b3b0
add esp, 4
push 0x1f4
call esi
lea ecx, [esp + 0x10]
call fcn.100062d0
test eax, eax
je 0x1000bb32
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x26c]
test eax, eax
je 0x1000bc04
mov edi, edx
push 0
lea ebx, [edi + 0x25c]
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.10025b40
mov ecx, dword [edi + 0x270]
add esp, 4
cmp ecx, eax
jle 0x1000bc04
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.10025b40
mov ecx, edi
add esp, 4
mov edi, dword [ecx + 0x270]
sub edi, eax
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ebp, edx
test ebp, ebp
jle 0x1000bbdd
mov dword [esp + 0x14], ebp
push 0x14
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.1002afe0
add esp, 8
push 0x1f4
call esi
mov eax, dword [esp + 0x14]
dec eax
mov dword [esp + 0x14], eax
jne 0x1000bbb7
lea ecx, [ebp + ebp*4]
shl ecx, 2
sub edi, ecx
test edi, edi
jle 0x1000bc04
push edi
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.1002afe0
add esp, 8
push 0x1f4
call esi
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x244]
test eax, eax
je 0x1000bcc2
mov edi, edx
push 0
lea ebx, [edi + 0x258]
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.10025b40
mov ecx, dword [edi + 0x268]
add esp, 4
cmp ecx, eax
jle 0x1000bcc2
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.10025b40
mov ecx, edi
add esp, 4
mov edi, dword [ecx + 0x268]
sub edi, eax
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ebp, edx
test ebp, ebp
jle 0x1000bc9b
mov dword [esp + 0x14], ebp
push 0x14
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.1002afe0
add esp, 8
push 0x1f4
call esi
mov eax, dword [esp + 0x14]
dec eax
mov dword [esp + 0x14], eax
jne 0x1000bc75
lea ecx, [ebp + ebp*4]
shl ecx, 2
sub edi, ecx
test edi, edi
jle 0x1000bcc2
push edi
push 0
mov ecx, ebx
call fcn.1007bc3c
push eax
call fcn.1002afe0
add esp, 8
push 0x1f4
call esi
mov ebx, dword [esp + 0x28]
push 0
push 0x7d0
push 0x250
mov edx, dword [ebx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
push 0xfa0
call esi
mov eax, dword [ebx + 0x27c]
lea ecx, [esp + 0x10]
test eax, eax
push 1
je 0x1000bd62
push 1
push 0x3f800000
push 0x43980000
push 0x43690000
call fcn.10005230
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.100056a0
push 0x7d0
call esi
push 0x1009675c
call fcn.1001b400
add esp, 4
push 0x7d0
call esi
call fcn.1001b490
lea edi, [ebx + 0x2b8]
push 0x3e8
call esi
push 0
mov ecx, edi
call fcn.1007bc3c
push eax
lea ecx, [esp + 0x14]
call fcn.10005d20
test eax, eax
je 0x1000bd3f
jmp 0x1000c420
call fcn.100055e0
push 0
lea ecx, [ebx + 0x2b8]
call fcn.1007bc3c
push eax
push 0x1009664c
call fcn.100297d0
add esp, 8
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0x100
jne 0x1000be56
push 1
push 1
push 0x3f800000
push 0x42ba0000
push 0x41d00000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.100056a0
push 0x3e8
call esi
push 0x42aa0000
push 0x41d00000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42aa0000
push 0x41d00000
lea ecx, [esp + 0x1c]
call fcn.10005c80
test eax, eax
je 0x1000bdc9
push 1
push 1
push 0x3f800000
push 0x42a00000
push 0x41d00000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x42920000
push 0x41d00000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x3f800000
push 0x42920000
push 0x41d00000
lea ecx, [esp + 0x1c]
call fcn.10005c80
test eax, eax
je 0x1000be05
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0xd8
jne 0x1000beca
mov eax, dword [ebx + 0x238]
mov ecx, dword [ebx + 0x234]
push eax
push ecx
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000beca
push 0x43500000
push 0x435f0000
lea ecx, [esp + 0x18]
call fcn.100051b0
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.10004f40
test eax, eax
jne 0x1000be93
push 0xbb8
call esi
push 0x3f800000
push 0x43200000
push 0x43570000
lea ecx, [esp + 0x1c]
call fcn.10005c80
test eax, eax
je 0x1000be80
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0xd7
jne 0x1000bf71
mov edx, dword [ebx + 0x238]
mov eax, dword [ebx + 0x234]
push edx
push eax
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000bf5f
push 1
push 1
push 0x3f800000
push 0x436a0000
push 0x42b20000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x1f4
call esi
lea ecx, [esp + 0x10]
call fcn.100056a0
push 0x1f4
call esi
push 0x436a0000
push 0x42cc0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x436a0000
push 0x42cc0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000bef8
push 1
lea ecx, [esp + 0x14]
call fcn.100055e0
push 0x1f4
call esi
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0x107
jne 0x1000c071
mov ecx, dword [ebx + 0x238]
mov edx, dword [ebx + 0x234]
push ecx
push edx
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000c071
push 0x42200000
push 0x42c60000
call fcn.1002aca0
add esp, 8
test eax, eax
je 0x1000c071
push 1
push 0x3f800000
push 0x42200000
push 0x42c60000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
call fcn.10021470
push 0x3e8
call esi
push 0x421c0000
push 0x42dc0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x421c0000
push 0x42dc0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000bfe9
push 1
push 0x3f800000
push 0x421c0000
push 0x42e40000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x42240000
push 0x43010000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42240000
push 0x43010000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000c01d
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0x124
jne 0x1000c106
mov eax, dword [ebx + 0x238]
mov ecx, dword [ebx + 0x234]
push eax
push ecx
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000c106
push 1
push 1
push 0x3f800000
push 0x42400000
push 0x43060000
lea ecx, [esp + 0x24]
call fcn.10005230
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.100056a0
push 0x320
call esi
push 0x42480000
push 0x430c0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42480000
push 0x430c0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000c0d2
lea ecx, [esp + 0x10]
call fcn.10005e30
cmp eax, 0x106
jne 0x1000c420
mov edx, dword [ebx + 0x238]
mov eax, dword [ebx + 0x234]
push edx
push eax
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000c420
push 1
push 0x3d23d70a
push 0x42e80000
push 0x435b0000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
call fcn.10021470
push 0x3e8
call esi
push 0x42e40000
push 0x43550000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e40000
push 0x43550000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000c164
push 1
push 0x3f800000
push 0x42e40000
push 0x434f0000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x42e40000
push 0x43460000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e40000
push 0x43460000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000c198
push 1
push 0x3f800000
push 0x42e40000
push 0x43430000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x42e60000
push 0x433b0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e60000
push 0x433b0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000c1ec
mov ecx, dword [ebx + 0x238]
mov edx, dword [ebx + 0x234]
push ecx
push edx
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000c420
push 1
push 0x3f800000
push 0x42f40000
push 0x43180000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x42f40000
push 0x430c0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42f40000
push 0x430c0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000c25e
push 1
push 0x3f800000
push 0x42f40000
push 0x42f80000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x42f40000
push 0x42ea0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42f40000
push 0x42ea0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000c2b2
mov eax, dword [ebx + 0x238]
mov ecx, dword [ebx + 0x234]
push eax
push ecx
call fcn.1002aca0
add esp, 8
test eax, eax
jne 0x1000c420
push 1
push 0x3f800000
push 0x43070000
push 0x426c0000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x43070000
push 0x424c0000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43070000
push 0x424c0000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000c324
push 1
push 0x3f800000
push 0x43070000
push 0x42300000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x43080000
push 0x42140000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43080000
push 0x42140000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000c378
push 1
push 0x3f800000
push 0x43070000
push 0x42040000
call fcn.10021d60
add esp, 0x10
push 0x3e8
call esi
push 0x42fa0000
push 0x41f00000
call fcn.10029f00
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42fa0000
push 0x41f00000
call fcn.10021cb0
add esp, 0xc
test eax, eax
je 0x1000c3cc
mov edx, dword [ebx + 0x238]
mov eax, dword [ebx + 0x234]
push 1
push 1
push 0x3f800000
push edx
push eax
lea ecx, [esp + 0x24]
call fcn.10005230
lea ecx, [esp + 0x10]
call fcn.100056a0
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.100056a0
push 0x3e8
call esi
cmp dword [ebx + 0x228], 3
jne 0x1000c4a4
lea ecx, [esp + 0x10]
call fcn.100063e0
cmp eax, 8
jne 0x1000c4a4
lea ecx, [esp + 0x10]
call fcn.10006350
test eax, eax
jne 0x1000c4a4
push 0xbf800000
push 0xbf800000
push 0xffffffffffffffff
push 0x1f1
call fcn.10021b50
add esp, 0x10
push 0xbb8
call esi
mov ecx, dword [ebx + 0x1c]
push 0x250
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.1000a510
mov dword [esp + 0x20], 0xffffffff
lea ecx, [esp + 0x10]
call fcn.10004f30
mov ecx, dword [esp + 0x18]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret