Function at 0x1000b6c0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xffffffffffffffff
push 0x10080628
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
mov ebp, dword [esp + 0x20]
push esi
push edi
push 0x250
mov eax, dword [ebp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
lea ecx, [esp + 0x10]
call fcn.10005870
mov dword [esp + 0x20], 0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x7d0
call esi
lea ecx, [esp + 0x10]
call fcn.100058b0
cmp eax, 9
jne 0x1000b786
call fcn.1001ae40
push 0x3e8
call esi
call fcn.1001ae40
push 0x7d0
call esi
push 0x1009458c
lea ecx, [esp + 0x14]
call fcn.10006690
test eax, eax
je 0x1000b72c
push 0x3e8
call esi
mov eax, dword [0x100ad7e8]
mov ecx, dword [eax + 0x118]
test ecx, ecx
je 0x1000b776
mov eax, dword [eax + 0x11c]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
push ecx
call esi
push 0
lea ecx, [esp + 0x14]
call fcn.10006a80
jmp 0x1000c1b8
push 0x1009458c
lea ecx, [esp + 0x14]
call fcn.10006690
test eax, eax
lea ecx, [esp + 0x10]
je 0x1000b7a8
push 0
call fcn.10006a80
jmp 0x1000c1b8
push 0x100947d4
call fcn.10006690
test eax, eax
je 0x1000b8e1
push 1
push 0
push 0x3f800000
push 0x41f80000
push 0x42340000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x3e8
call esi
push 0
call fcn.1002a490
add esp, 4
push 0x7d0
call esi
lea ecx, [esp + 0x10]
call fcn.10006bd0
cmp eax, 0xbbb1fac4
jne 0x1000b8b1
push 1
call fcn.1002a490
add esp, 4
push 0x7d0
call esi
call fcn.100479f4
mov edi, eax
push 0x1f4
call esi
call fcn.100479f4
sub eax, edi
cmp eax, 0x11170
jg 0x1000b857
push 0x100947cc
lea ecx, [esp + 0x14]
call fcn.10006690
test eax, eax
je 0x1000b81a
push 0x3e8
call esi
push 0x10094684
push 0x100947cc
jmp 0x1000c1b0
push 0xea60
call esi
push 0x3e8
call esi
push 0
call fcn.1002a490
add esp, 4
push 0x7d0
call esi
lea ecx, [esp + 0x10]
call fcn.10006bd0
cmp eax, 0xbbb1fac4
je 0x1000b857
push 0x10094684
call fcn.1001adb0
add esp, 4
push 0x3e8
call esi
push 0x10094684
lea ecx, [esp + 0x14]
call fcn.10006690
test eax, eax
je 0x1000b893
jmp 0x1000c1bf
push 0x10094684
call fcn.1001adb0
add esp, 4
push 0x3e8
call esi
push 0x10094684
lea ecx, [esp + 0x14]
call fcn.10006690
test eax, eax
je 0x1000b8be
push 0x1f4
jmp 0x1000c1bd
call fcn.1002af10
test eax, eax
je 0x1000b8f9
push 0
call fcn.10029ee0
add esp, 4
jmp 0x1000c1bf
mov eax, dword [ebp + 0x2b4]
lea ecx, [esp + 0x10]
test eax, eax
je 0x1000b991
push 0xbf800000
push 0xbf800000
push 0xffffffffffffffff
push pe_nt_image_headers32
call fcn.10005eb0
push 0x320
call esi
call fcn.10026f70
lea edi, [ebp + 0x2b8]
push 0x3e8
call esi
push 0
mov ecx, edi
call fcn.10079e45
push eax
call fcn.10020b00
add esp, 4
test eax, eax
je 0x1000b975
push 0xbf800000
push 0xbf800000
push 0xffffffffffffffff
push pe_nt_image_headers32
call fcn.10020a90
add esp, 0x10
push 0x320
call esi
call fcn.10026f70
push 0x10094684
lea ecx, [esp + 0x14]
call fcn.10006690
test eax, eax
je 0x1000b933
push 0x1f4
jmp 0x1000c1bd
call fcn.100067a0
cmp eax, 0xd2
jne 0x1000ba16
push 0xd1
push eax
call fcn.10025be0
add esp, 8
push 0x3e8
call esi
mov edx, dword [0x100ad5f4]
mov eax, dword [edx]
mov ecx, dword [eax + 0x32f8]
mov eax, dword [ecx + 0x264]
test eax, eax
jg 0x1000ba16
push 0xbf800000
push 0xbf800000
push 0xffffffffffffffff
push 0x16
lea ecx, [esp + 0x20]
call fcn.10005eb0
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ebx, eax
push 0x3e8
call esi
call edi
sub eax, ebx
cmp eax, 0x4e20
ja 0x1000ba0f
push 0x100947c4
lea ecx, [esp + 0x14]
call fcn.10006690
test eax, eax
je 0x1000b9eb
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0x100
jne 0x1000bae3
push 1
push 1
push 0x3f800000
push 0x42940000
push 0x41d00000
lea ecx, [esp + 0x24]
call fcn.10005ba0
lea ecx, [esp + 0x10]
call fcn.10006010
push 0x1f4
call esi
push 0x3e8
call esi
push 0x42a40000
push 0x41d00000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42a40000
push 0x41d00000
lea ecx, [esp + 0x1c]
call fcn.100065f0
test eax, eax
je 0x1000ba56
push 1
push 1
push 0x3f800000
push 0x42ae0000
push 0x41c80000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x42ba0000
push 0x41c80000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42ba0000
push 0x41c80000
lea ecx, [esp + 0x1c]
call fcn.100065f0
test eax, eax
je 0x1000ba92
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0xd7
jne 0x1000bb99
push 0x43690000
push 0x42f00000
call fcn.10029d00
add esp, 8
test eax, eax
je 0x1000bb87
push 1
lea ecx, [esp + 0x14]
call fcn.10005f50
push 0x1f4
call esi
push 1
push 1
push 0x3f800000
push 0x43690000
push 0x42ce0000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x1f4
call esi
lea ecx, [esp + 0x10]
call fcn.10006010
push 0x1f4
call esi
push 0x43690000
push 0x42b20000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43690000
push 0x42b20000
lea ecx, [esp + 0x1c]
call fcn.100065f0
test eax, eax
je 0x1000bb1f
push 1
lea ecx, [esp + 0x14]
call fcn.10005f50
push 0x1f4
call esi
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0xd8
jne 0x1000bc1b
push 1
lea ecx, [esp + 0x14]
call fcn.10005f50
push 0x7d0
call esi
push 0x435c0000
push 0x43000000
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000bc1b
push 0x43250000
push 0x43570000
lea ecx, [esp + 0x18]
call fcn.10005b20
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.100058b0
test eax, eax
jne 0x1000bbe4
push 0xbb8
call esi
push 0x3f800000
push 0x43570000
push 0x435f0000
lea ecx, [esp + 0x1c]
call fcn.100065f0
test eax, eax
je 0x1000bbd1
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0x124
jne 0x1000bca1
push 0x42200000
push 0x42840000
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000bca1
push 1
push 0x3f800000
push 0x42480000
push 0x43120000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
call fcn.100203b0
push 0x3e8
call esi
push 0x42400000
push 0x43040000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42400000
push 0x43040000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000bc6d
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0x107
jne 0x1000bda5
push 1
lea ecx, [esp + 0x14]
call fcn.10005f50
push 0x7d0
call esi
push 0x437f0000
push 0x435a0000
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000bda5
push 0x42200000
push 0x42fe0000
call fcn.10029d00
add esp, 8
test eax, eax
je 0x1000bda5
push 1
push 0x3f800000
push 0x42200000
push 0x42fe0000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
call fcn.100203b0
push 0x3e8
call esi
push 0x42200000
push 0x42e80000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42200000
push 0x42e80000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000bd27
push 1
push 0x3f800000
push 0x421c0000
push 0x42dc0000
call fcn.10020ca0
push 0x42200000
push 0x42c40000
call fcn.10028f60
add esp, 0x18
push 0x1770
call esi
push 0x40800000
push 0x42200000
push 0x42c40000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000bd5b
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0x106
jne 0x1000c196
push 1
lea ecx, [esp + 0x14]
call fcn.10005f50
push 0x7d0
call esi
push 0x43020000
push 0x42900000
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000bf95
push 0x42e40000
push 0x43330000
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000c04d
push 0x435e0000
push 0x43620000
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000c164
push 1
push 0x3f800000
push 0x42fc0000
push 0x41d80000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
call fcn.100203b0
push 0x3e8
call esi
push 0xbf800000
push 0xbf800000
push 0xffffffffffffffff
push pe_nt_image_headers32
call fcn.10020a90
add esp, 0x10
push 0x1388
call esi
push 0x43030000
push 0x41d80000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43030000
push 0x41d80000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000be65
push 1
push 0x3f800000
push 0x43090000
push 0x41d80000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x43080000
push 0x42080000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43080000
push 0x42080000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000be99
push 1
push 0x3f800000
push 0x43080000
push 0x42200000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x43070000
push 0x423c0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43070000
push 0x423c0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000beed
push 1
push 0x3f800000
push 0x43070000
push 0x424c0000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x43080000
push 0x427c0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43080000
push 0x427c0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000bf41
push 1
push 0x3f800000
push 0x42f60000
push 0x42ea0000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.10006010
push 0x320
call esi
push 0x42f40000
push 0x42fe0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42f40000
push 0x42fe0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000bf95
push 1
push 0x3f800000
push 0x42f40000
push 0x43120000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x42f40000
push 0x43180000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42f40000
push 0x43180000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000bff9
push 1
push 0x3f800000
push 0x42e40000
push 0x433c0000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.10006010
push 0x320
call esi
push 0x42e40000
push 0x43440000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e40000
push 0x43440000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000c04d
push 1
push 0x3f800000
push 0x42e40000
push 0x43490000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x42e40000
push 0x434f0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e40000
push 0x434f0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000c0b1
push 1
push 0x3f800000
push 0x42e40000
push 0x43550000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x42e60000
push 0x435f0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e60000
push 0x435f0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000c105
push 1
lea ecx, [esp + 0x14]
call fcn.10005f50
push 1
push 1
push 0x3f800000
push 0x436b0000
push 0x43620000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x3e8
call esi
push 7
lea ecx, [esp + 0x14]
call fcn.10006730
test eax, eax
je 0x1000c180
push 1
lea ecx, [esp + 0x14]
call fcn.10005f50
push 0x10094684
lea ecx, [esp + 0x14]
call fcn.10006240
push eax
call fcn.10028830
add esp, 8
push 0x3e8
call esi
push 0xbb8
call esi
push 0x1009467c
lea ecx, [esp + 0x14]
call fcn.10007600
push 0x3e8
call esi
push 0x10094670
call fcn.1001adb0
add esp, 4
push 0x7d0
call esi
push 0x1009466c
call fcn.1001adb0
add esp, 4
push 0x7d0
call esi
mov eax, dword [0x100ad84c]
test eax, eax
je 0x1000c2c3
push 1
push 1
push 0x40800000
push 0x43948000
push 0x43320000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x3e8
call esi
call fcn.1002f230
push 0x3e8
call esi
mov eax, dword [0x100ad7e0]
test eax, eax
je 0x1000c2c3
add eax, 0xec
push eax
call fcn.10027f60
add esp, 4
cmp eax, 0xffffffff
jne 0x1000c2bc
mov eax, dword [0x100ad850]
test eax, eax
je 0x1000c2bc
mov edx, dword [0x100ab358]
push 0
push 0xf120
push 0x112
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x100ab358]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ebx, dword [sym.imp.KERNEL32.dll_Beep]
mov edi, 4
push 0x3e8
push 0x3e8
call ebx
push 0x5dc
call esi
dec edi
jne 0x1000c294
push 0x1009479c
call fcn.1001b540
add esp, 4
jmp 0x1000ce8a
push 0x3e8
call esi
push 1
push 1
push 0x3f800000
push 0x439a0000
push 0x43660000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x100945f0
lea ecx, [esp + 0x14]
call fcn.10007600
push 0x3e8
call esi
call fcn.1001b9b0
push 0x3e8
call esi
mov eax, dword [0x100ad7e0]
test eax, eax
je 0x1000c31e
add eax, 0xf0
push eax
call fcn.10025030
add esp, 4
push 0x3e8
call esi
mov eax, dword [ebp + 0x23c]
test eax, eax
je 0x1000c3de
mov edi, dword [esp + 0x28]
push 0
lea ebx, [edi + 0x250]
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.10024d30
mov ecx, dword [edi + 0x260]
add esp, 4
cmp ecx, eax
jle 0x1000c3de
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.10024d30
mov ecx, edi
add esp, 4
mov edi, dword [ecx + 0x260]
sub edi, eax
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ebp, edx
test ebp, ebp
jle 0x1000c3b5
mov dword [esp + 0x14], ebp
push 0
push 0x14
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.1002a040
add esp, 0xc
push 0x1f4
call esi
mov eax, dword [esp + 0x14]
dec eax
mov dword [esp + 0x14], eax
jne 0x1000c38d
lea ecx, [ebp + ebp*4]
shl ecx, 2
sub edi, ecx
test edi, edi
jle 0x1000c3de
push 0
push edi
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.1002a040
add esp, 0xc
push 0x1f4
call esi
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x240]
test eax, eax
je 0x1000c4a0
mov edi, edx
push 0
lea ebx, [edi + 0x254]
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.10024d30
mov ecx, dword [edi + 0x264]
add esp, 4
cmp ecx, eax
jle 0x1000c4a0
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.10024d30
mov ecx, edi
add esp, 4
mov edi, dword [ecx + 0x264]
sub edi, eax
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ebp, edx
test ebp, ebp
jle 0x1000c477
mov dword [esp + 0x14], ebp
push 0
push 0x14
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.1002a040
add esp, 0xc
push 0x1f4
call esi
mov eax, dword [esp + 0x14]
dec eax
mov dword [esp + 0x14], eax
jne 0x1000c44f
lea ecx, [ebp + ebp*4]
shl ecx, 2
sub edi, ecx
test edi, edi
jle 0x1000c4a0
push 0
push edi
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.1002a040
add esp, 0xc
push 0x1f4
call esi
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x244]
test ecx, ecx
jne 0x1000c4bc
mov ecx, dword [eax + 0x26c]
test ecx, ecx
je 0x1000c692
push 1
push 1
push 0x3f800000
push 0x43950000
push 0x43898000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x100945cc
lea ecx, [esp + 0x14]
call fcn.10007600
push 0x3e8
call esi
push 0x100945a4
call fcn.1001adb0
add esp, 4
push 0x1f4
call esi
lea ecx, [esp + 0x10]
call fcn.10006c50
test eax, eax
je 0x1000c4fa
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x26c]
test eax, eax
je 0x1000c5d0
mov edi, edx
push 0
lea ebx, [edi + 0x25c]
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.10024d30
mov ecx, dword [edi + 0x270]
add esp, 4
cmp ecx, eax
jle 0x1000c5d0
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.10024d30
mov ecx, edi
add esp, 4
mov edi, dword [ecx + 0x270]
sub edi, eax
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ebp, edx
test ebp, ebp
jle 0x1000c5a7
mov dword [esp + 0x14], ebp
push 0
push 0x14
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.1002a040
add esp, 0xc
push 0x1f4
call esi
mov eax, dword [esp + 0x14]
dec eax
mov dword [esp + 0x14], eax
jne 0x1000c57f
lea ecx, [ebp + ebp*4]
shl ecx, 2
sub edi, ecx
test edi, edi
jle 0x1000c5d0
push 0
push edi
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.1002a040
add esp, 0xc
push 0x1f4
call esi
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x244]
test eax, eax
je 0x1000c692
mov edi, edx
push 0
lea ebx, [edi + 0x258]
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.10024d30
mov ecx, dword [edi + 0x268]
add esp, 4
cmp ecx, eax
jle 0x1000c692
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.10024d30
mov ecx, edi
add esp, 4
mov edi, dword [ecx + 0x268]
sub edi, eax
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ebp, edx
test ebp, ebp
jle 0x1000c669
mov dword [esp + 0x14], ebp
push 0
push 0x14
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.1002a040
add esp, 0xc
push 0x1f4
call esi
mov eax, dword [esp + 0x14]
dec eax
mov dword [esp + 0x14], eax
jne 0x1000c641
lea ecx, [ebp + ebp*4]
shl ecx, 2
sub edi, ecx
test edi, edi
jle 0x1000c692
push 0
push edi
push 0
mov ecx, ebx
call fcn.10079e45
push eax
call fcn.1002a040
add esp, 0xc
push 0x1f4
call esi
mov ebx, dword [esp + 0x28]
push 0
push 0x7d0
push 0x250
mov edx, dword [ebx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
push 0xfa0
call esi
mov eax, dword [ebx + 0x27c]
lea ecx, [esp + 0x10]
test eax, eax
push 1
je 0x1000c732
push 1
push 0x3f800000
push 0x43980000
push 0x43690000
call fcn.10005ba0
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.10006010
push 0x7d0
call esi
push 0x10094794
call fcn.1001ae00
add esp, 4
push 0x7d0
call esi
call fcn.1001ae90
lea edi, [ebx + 0x2b8]
push 0x3e8
call esi
push 0
mov ecx, edi
call fcn.10079e45
push eax
lea ecx, [esp + 0x14]
call fcn.10006690
test eax, eax
je 0x1000c70f
jmp 0x1000cdf0
call fcn.10005f50
push 0
lea ecx, [ebx + 0x2b8]
call fcn.10079e45
push eax
push 0x10094684
call fcn.10028830
add esp, 8
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0x100
jne 0x1000c826
push 1
push 1
push 0x3f800000
push 0x42ba0000
push 0x41d00000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.10006010
push 0x3e8
call esi
push 0x42aa0000
push 0x41d00000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42aa0000
push 0x41d00000
lea ecx, [esp + 0x1c]
call fcn.100065f0
test eax, eax
je 0x1000c799
push 1
push 1
push 0x3f800000
push 0x42a00000
push 0x41d00000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x42920000
push 0x41d00000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x3f800000
push 0x42920000
push 0x41d00000
lea ecx, [esp + 0x1c]
call fcn.100065f0
test eax, eax
je 0x1000c7d5
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0xd8
jne 0x1000c89a
mov eax, dword [ebx + 0x238]
mov ecx, dword [ebx + 0x234]
push eax
push ecx
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000c89a
push 0x43500000
push 0x435f0000
lea ecx, [esp + 0x18]
call fcn.10005b20
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.100058b0
test eax, eax
jne 0x1000c863
push 0xbb8
call esi
push 0x3f800000
push 0x43200000
push 0x43570000
lea ecx, [esp + 0x1c]
call fcn.100065f0
test eax, eax
je 0x1000c850
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0xd7
jne 0x1000c941
mov edx, dword [ebx + 0x238]
mov eax, dword [ebx + 0x234]
push edx
push eax
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000c92f
push 1
push 1
push 0x3f800000
push 0x436a0000
push 0x42b20000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x1f4
call esi
lea ecx, [esp + 0x10]
call fcn.10006010
push 0x1f4
call esi
push 0x436a0000
push 0x42cc0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x436a0000
push 0x42cc0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000c8c8
push 1
lea ecx, [esp + 0x14]
call fcn.10005f50
push 0x1f4
call esi
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0x107
jne 0x1000ca41
mov ecx, dword [ebx + 0x238]
mov edx, dword [ebx + 0x234]
push ecx
push edx
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000ca41
push 0x42200000
push 0x42c60000
call fcn.10029d00
add esp, 8
test eax, eax
je 0x1000ca41
push 1
push 0x3f800000
push 0x42200000
push 0x42c60000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
call fcn.100203b0
push 0x3e8
call esi
push 0x421c0000
push 0x42dc0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x421c0000
push 0x42dc0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000c9b9
push 1
push 0x3f800000
push 0x421c0000
push 0x42e40000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x42240000
push 0x43010000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42240000
push 0x43010000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000c9ed
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0x124
jne 0x1000cad6
mov eax, dword [ebx + 0x238]
mov ecx, dword [ebx + 0x234]
push eax
push ecx
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000cad6
push 1
push 1
push 0x3f800000
push 0x42400000
push 0x43060000
lea ecx, [esp + 0x24]
call fcn.10005ba0
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.10006010
push 0x320
call esi
push 0x42480000
push 0x430c0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42480000
push 0x430c0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000caa2
lea ecx, [esp + 0x10]
call fcn.100067a0
cmp eax, 0x106
jne 0x1000cdf0
mov edx, dword [ebx + 0x238]
mov eax, dword [ebx + 0x234]
push edx
push eax
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000cdf0
push 1
push 0x3d23d70a
push 0x42e80000
push 0x435b0000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
call fcn.100203b0
push 0x3e8
call esi
push 0x42e40000
push 0x43550000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e40000
push 0x43550000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000cb34
push 1
push 0x3f800000
push 0x42e40000
push 0x434f0000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x42e40000
push 0x43460000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e40000
push 0x43460000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000cb68
push 1
push 0x3f800000
push 0x42e40000
push 0x43430000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x42e60000
push 0x433b0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42e60000
push 0x433b0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000cbbc
mov ecx, dword [ebx + 0x238]
mov edx, dword [ebx + 0x234]
push ecx
push edx
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000cdf0
push 1
push 0x3f800000
push 0x42f40000
push 0x43180000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x42f40000
push 0x430c0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42f40000
push 0x430c0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000cc2e
push 1
push 0x3f800000
push 0x42f40000
push 0x42f80000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x42f40000
push 0x42ea0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42f40000
push 0x42ea0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000cc82
mov eax, dword [ebx + 0x238]
mov ecx, dword [ebx + 0x234]
push eax
push ecx
call fcn.10029d00
add esp, 8
test eax, eax
jne 0x1000cdf0
push 1
push 0x3f800000
push 0x43070000
push 0x426c0000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x43070000
push 0x424c0000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43070000
push 0x424c0000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000ccf4
push 1
push 0x3f800000
push 0x43070000
push 0x42300000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x43080000
push 0x42140000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x43080000
push 0x42140000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000cd48
push 1
push 0x3f800000
push 0x43070000
push 0x42040000
call fcn.10020ca0
add esp, 0x10
push 0x3e8
call esi
push 0x42fa0000
push 0x41f00000
call fcn.10028f60
add esp, 8
push 0x1770
call esi
push 0x40800000
push 0x42fa0000
push 0x41f00000
call fcn.10020bf0
add esp, 0xc
test eax, eax
je 0x1000cd9c
mov edx, dword [ebx + 0x238]
mov eax, dword [ebx + 0x234]
push 1
push 1
push 0x3f800000
push edx
push eax
lea ecx, [esp + 0x24]
call fcn.10005ba0
lea ecx, [esp + 0x10]
call fcn.10006010
push 0x3e8
call esi
lea ecx, [esp + 0x10]
call fcn.10006010
push 0x3e8
call esi
cmp dword [ebx + 0x228], 3
jne 0x1000ce74
lea ecx, [esp + 0x10]
call fcn.10006d60
cmp eax, 8
jne 0x1000ce74
lea ecx, [esp + 0x10]
call fcn.10006cd0
test eax, eax
jne 0x1000ce74
push 0xbf800000
push 0xbf800000
push 0xffffffffffffffff
push 0x1f1
call fcn.10020a90
add esp, 0x10
push 0xbb8
call esi
mov ecx, dword [ebx + 0x1c]
push 0x250
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.1000aed0
mov dword [esp + 0x20], 0xffffffff
lea ecx, [esp + 0x10]
call fcn.100058a0
mov ecx, dword [esp + 0x18]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret