Function at 0x1000597d
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, ecx
xor edx, edx
push esi
push edi
mov dword [ebp - 4], eax
cmp dword [eax + 0x218], edx
je 0x100057cb
mov ecx, 0x104
mov esi, 0x100334b0
mov edi, 0x10032470
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x104
mov esi, 0x100338c0
mov edi, 0x10032880
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x100309c4]
mov dword [0x100309bc], ecx
mov ecx, dword [0x100309d0]
jmp 0x1000580b
cmp dword [0x10033cd0], edx
jne 0x10005bea
mov ecx, 0x104
mov esi, 0x10032c90
mov edi, 0x10032470
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x104
mov esi, 0x100330a0
mov edi, 0x10032880
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x100309c0]
mov dword [0x100309bc], ecx
mov ecx, dword [0x100309cc]
push ebx
mov ebx, dword [ebp + 8]
mov dword [0x100309c8], ecx
movzx ecx, byte [ebx]
cmp ecx, 0x65
ja case.0x10005828.3
movzx ecx, byte [ecx + 0x10005c28]
jmp dword [ecx*4 + 0x10005bf4]
push 1
add eax, 0x21c
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
cmp dword [ebp + 0xc], 0xc41
jne case.0x10005828.3
push 0xc40
call fcn.10011c87
push 0xc40
mov edi, eax
push 0
push edi
mov dword [ebp + 0xc], edi
call fcn.100134f0
lea esi, [ebx + 1]
mov ecx, 0x310
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x100349a8]
mov edi, dword [ebp + 0xc]
add esp, 0x10
mov esi, eax
cmp eax, dword [0x100349ac]
je 0x100058da
mov edi, edi
mov edx, dword [esi]
mov eax, dword [edx]
lea ecx, [edi + 4]
add eax, 4
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100058c6
test dx, dx
je 0x100058c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100058c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x100058a0
xor eax, eax
jmp 0x100058cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10005930
add esi, 4
cmp esi, dword [0x100349ac]
jne 0x10005890
push 0xc41
call fcn.10011e6b
mov esi, eax
push 0xc40
lea ecx, [esi + 1]
push edi
mov byte [esi], 5
push ecx
mov dword [edi + 0x400], 0
call fcn.100137f0
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
add esp, 0x10
push 0xc41
push esi
call edx
push edi
call fcn.1001182d
push esi
call fcn.1001182d
add esp, 8
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esi]
mov edx, dword [ecx]
lea eax, [edi + 0x202]
push eax
add edx, 0x202
push 0xff
push edx
call fcn.10011f43
mov eax, dword [esi]
push 0
push 0
push eax
push 0x10005270
push 0
push 0
call fcn.10012337
add esp, 0x24
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call fcn.1001182d
add esp, 4
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
push 0xc40
call fcn.10011c87
push 0xc40
mov edi, eax
push 0
push edi
mov dword [ebp + 8], edi
call fcn.100134f0
lea esi, [ebx + 1]
mov ecx, 0x310
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebx + 0xc41]
push esi
call fcn.10011e6b
push esi
add ebx, 0xc45
mov edi, eax
push ebx
push edi
call fcn.100137f0
push 8
call fcn.10011c87
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov dword [eax + 4], edi
mov edx, dword [eax]
mov dword [ebp + 0xc], eax
add esp, 0x24
lea eax, [ebp + 0xc]
mov dword [edx + 0x404], esi
call fcn.10006d00
mov eax, dword [ebp + 0xc]
push 0
push 0
push eax
push 0x10005270
push 0
push 0
call fcn.10012337
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
call fcn.10005c90
mov edi, dword [0x10031c18]
push 0x200
call fcn.10011c87
push 0x200
mov esi, eax
push 0
push esi
call fcn.100134f0
push 0x10027c10
push 0x100281b0
jmp 0x10005b5c
push 0xc40
call fcn.10011c87
push 0xc40
mov esi, eax
push 0
push esi
call fcn.100134f0
mov edi, dword [ebp + 0xc]
dec edi
push edi
call fcn.10011e6b
push edi
inc ebx
push ebx
push eax
mov dword [ebp + 8], eax
call fcn.100137f0
push 8
call fcn.10011c87
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push 0
push 0
push eax
mov dword [eax], esi
mov dword [eax + 4], ecx
dec edx
push 0x10005270
mov dword [esi + 0x404], edx
mov ecx, dword [eax]
push 0
push 0
mov dword [ecx], 2
call fcn.10012337
add esp, 0x3c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov ecx, eax
call fcn.10005d90
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebp + 0xc]
push edx
push eax
mov ecx, ebx
call fcn.10006010
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
lea eax, [ebp + 0xc]
push eax
push edx
inc ebx
push ebx
push 0x10006a10
push edx
push edx
mov dword [ebp + 0xc], edx
call fcn.10012337
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov ebx, dword [ebx + 1]
push ebx
mov esi, eax
call fcn.100066a0
mov edi, dword [0x10031c18]
push 0x200
test eax, eax
je 0x10005b3e
call fcn.10011c87
push 0x200
mov esi, eax
push 0
push esi
call fcn.100134f0
push 0x10027c10
push 0x100281c0
jmp 0x10005b5c
call fcn.10011c87
push 0x200
mov esi, eax
push 0
push esi
call fcn.100134f0
push 0x10027c10
push 0x100281cc
push str._s__s_n
lea ecx, [esi + 2]
push 0xff
push ecx
mov byte [esi], 1
call fcn.10011d07
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
add esp, 0x24
push 0x200
push esi
call eax
push esi
call fcn.1001182d
add esp, 4
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
movzx ecx, byte [ebx + 1]
sub ecx, edx
je 0x10005bb9
dec ecx
jne case.0x10005828.3
add ebx, 2
push ebx
mov edi, str.BEIZHU
call fcn.10006960
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
add ebx, 2
push ebx
mov edi, str.FENZU
call fcn.10006960
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
pop ebx
pop edi
mov dword [0x10033cd0], 1
pop esi
mov esp, ebp
pop ebp
ret 8
mov dword [0x10033cd0], edx
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8