Function at 0x1001f700
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc8
mov byte [ebp - 1], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x9c], ecx
cmp dword [ebp - 0x9c], 0
jne 0x1001f747
mov dl, byte [ebp - 1]
mov byte [ebp - 9], dl
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0xa0]
call fcn.10003260
mov al, byte [ebp - 9]
jmp 0x100204d1
push 6
lea ecx, [ebp - 0xa8]
push ecx
lea ecx, [ebp + 8]
call fcn.1002ef20
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
push edx
lea ecx, [ebp + 8]
call fcn.10030240
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xac], eax
mov ecx, dword [ebp - 0xac]
call fcn.10003260
push str._B001_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001f7a1
mov dword [ebp - 0x20], 1
jmp 0x1001f7a8
mov dword [ebp - 0x20], 0
movzx ecx, byte [ebp - 0x20]
test ecx, ecx
je 0x1001f7de
cmp dword [0x1006bdb0], 0
jne 0x1001f7c3
mov dword [0x1006bdb0], 1
push 1
call fcn.1000e770
add esp, 4
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B002_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001f7f8
mov dword [ebp - 0x24], 1
jmp 0x1001f7ff
mov dword [ebp - 0x24], 0
movzx edx, byte [ebp - 0x24]
test edx, edx
je 0x1001f835
cmp dword [0x1006bdb0], 0
jne 0x1001f81a
mov dword [0x1006bdb0], 1
push 1
call fcn.1000e770
add esp, 4
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B003_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001f84f
mov dword [ebp - 0x28], 1
jmp 0x1001f856
mov dword [ebp - 0x28], 0
movzx eax, byte [ebp - 0x28]
test eax, eax
je 0x1001f8a1
cmp dword [ebp + 0xc], 0x66
jge 0x1001f872
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001f89c
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001f890
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001f89c
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B004_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001f8bb
mov dword [ebp - 0x2c], 1
jmp 0x1001f8c2
mov dword [ebp - 0x2c], 0
movzx edx, byte [ebp - 0x2c]
test edx, edx
je 0x1001f910
cmp dword [ebp + 0xc], 0xe6
jge 0x1001f8e1
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001f90b
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001f8ff
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001f90b
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B005_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001f92a
mov dword [ebp - 0x30], 1
jmp 0x1001f931
mov dword [ebp - 0x30], 0
movzx edx, byte [ebp - 0x30]
test edx, edx
je 0x1001f968
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001f957
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001f963
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B006_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001f982
mov dword [ebp - 0x34], 1
jmp 0x1001f989
mov dword [ebp - 0x34], 0
movzx edx, byte [ebp - 0x34]
test edx, edx
je 0x1001f9d7
cmp dword [ebp + 0x10], 0xf0
jge 0x1001f9a8
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x1001f9d2
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001f9c6
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001f9d2
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B007_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001f9f1
mov dword [ebp - 0x38], 1
jmp 0x1001f9f8
mov dword [ebp - 0x38], 0
movzx edx, byte [ebp - 0x38]
test edx, edx
je 0x1001fa49
call fcn.100076c0
movzx eax, al
test eax, eax
je 0x1001fa1a
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fa44
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fa38
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fa44
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B008_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fa63
mov dword [ebp - 0x3c], 1
jmp 0x1001fa6a
mov dword [ebp - 0x3c], 0
movzx edx, byte [ebp - 0x3c]
test edx, edx
je 0x1001fafa
movzx eax, byte [0x1006be31]
test eax, eax
jne 0x1001facb
cmp dword [ebp + 0x24], 0x1a4
jl 0x1001fa9f
mov byte [0x1006be31], 1
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x1001fac9
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fabd
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fac9
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x1001faf5
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fae9
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001faf5
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B009_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fb14
mov dword [ebp - 0x40], 1
jmp 0x1001fb1b
mov dword [ebp - 0x40], 0
movzx edx, byte [ebp - 0x40]
test edx, edx
je 0x1001fb48
cmp dword [ebp + 0x24], 3
jl 0x1001fb37
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x1001fb43
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B010_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fb62
mov dword [ebp - 0x44], 1
jmp 0x1001fb69
mov dword [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x1001fba0
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fb8f
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fb9b
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B011_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fbba
mov dword [ebp - 0x48], 1
jmp 0x1001fbc1
mov dword [ebp - 0x48], 0
movzx edx, byte [ebp - 0x48]
test edx, edx
je 0x1001fbf8
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fbe7
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fbf3
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B012_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fc12
mov dword [ebp - 0x4c], 1
jmp 0x1001fc19
mov dword [ebp - 0x4c], 0
movzx edx, byte [ebp - 0x4c]
test edx, edx
je 0x1001fc50
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fc3f
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fc4b
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B013_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fc6a
mov dword [ebp - 0x50], 1
jmp 0x1001fc71
mov dword [ebp - 0x50], 0
movzx edx, byte [ebp - 0x50]
test edx, edx
je 0x1001fcbf
cmp dword [ebp + 0x20], 0x30d40
jge 0x1001fc90
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fcba
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fcae
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fcba
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B014_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fcd9
mov dword [ebp - 0x54], 1
jmp 0x1001fce0
mov dword [ebp - 0x54], 0
movzx edx, byte [ebp - 0x54]
test edx, edx
je 0x1001fd16
cmp dword [0x1006bdb0], 0
jne 0x1001fcfb
mov dword [0x1006bdb0], 1
push 1
call fcn.1000e770
add esp, 4
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B015_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fd30
mov dword [ebp - 0x58], 1
jmp 0x1001fd37
mov dword [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x1001fd85
cmp dword [ebp + 0x20], 0x3d090
jge 0x1001fd56
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fd80
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fd74
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fd80
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B016_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fd9f
mov dword [ebp - 0x5c], 1
jmp 0x1001fda6
mov dword [ebp - 0x5c], 0
movzx edx, byte [ebp - 0x5c]
test edx, edx
je 0x1001fdf4
cmp dword [ebp + 0x20], 0x186a0
jge 0x1001fdc5
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fdef
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fde3
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fdef
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B017_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fe0e
mov dword [ebp - 0x60], 1
jmp 0x1001fe15
mov dword [ebp - 0x60], 0
movzx edx, byte [ebp - 0x60]
test edx, edx
je 0x1001fe65
mov eax, dword [ebp + 0x18]
sub eax, dword [ebp + 0x1c]
cmp eax, 0x64
jge 0x1001fe36
push 1
push 4
call fcn.1001d3c0
add esp, 8
jmp 0x1001fe60
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fe54
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fe60
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._B018_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fe7f
mov dword [ebp - 0x64], 1
jmp 0x1001fe86
mov dword [ebp - 0x64], 0
movzx edx, byte [ebp - 0x64]
test edx, edx
je 0x1001fed6
mov eax, dword [ebp + 0x14]
sub eax, dword [ebp + 0x18]
cmp eax, 0x64
jge 0x1001fea7
push 1
push 3
call fcn.1001d3c0
add esp, 8
jmp 0x1001fed1
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001fec5
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001fed1
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._H028_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fef0
mov dword [ebp - 0x68], 1
jmp 0x1001fef7
mov dword [ebp - 0x68], 0
movzx edx, byte [ebp - 0x68]
test edx, edx
je 0x1001ff45
cmp dword [ebp + 0x20], 0x186a0
jge 0x1001ff16
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001ff40
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001ff34
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001ff40
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._H029_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001ff5f
mov dword [ebp - 0x6c], 1
jmp 0x1001ff66
mov dword [ebp - 0x6c], 0
movzx edx, byte [ebp - 0x6c]
test edx, edx
je 0x1001ffa3
cmp dword [ebp + 0x24], 0x5a
jge 0x1001ff9e
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1001ff92
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1001ff9e
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._H030_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001ffbd
mov dword [ebp - 0x70], 1
jmp 0x1001ffc4
mov dword [ebp - 0x70], 0
movzx edx, byte [ebp - 0x70]
test edx, edx
je 0x1001ffdd
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._H031_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1001fff7
mov dword [ebp - 0x74], 1
jmp 0x1001fffe
mov dword [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x10020017
push 0
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._H032_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10020031
mov dword [ebp - 0x78], 1
jmp 0x10020038
mov dword [ebp - 0x78], 0
movzx ecx, byte [ebp - 0x78]
test ecx, ecx
je 0x1002006b
cmp dword [ebp + 0x1c], 0x64
jle 0x10020066
cmp dword [ebp + 0x24], 3
jl 0x1002005a
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x10020066
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push str._H033_
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10020085
mov dword [ebp - 0x7c], 1
jmp 0x1002008c
mov dword [ebp - 0x7c], 0
movzx edx, byte [ebp - 0x7c]
test edx, edx
je 0x100200c3
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x100200b2
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x100200be
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push 0x100651d0
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100200dd
mov dword [ebp - 0x80], 1
jmp 0x100200e4
mov dword [ebp - 0x80], 0
movzx edx, byte [ebp - 0x80]
test edx, edx
je 0x1002012f
cmp dword [ebp + 0x10], 2
jge 0x10020100
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x1002012a
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x1002011e
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x1002012a
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push 0x100651e0
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1002014c
mov dword [ebp - 0x84], 1
jmp 0x10020156
mov dword [ebp - 0x84], 0
movzx edx, byte [ebp - 0x84]
test edx, edx
je 0x10020196
cmp dword [ebp + 0x28], 2
jle 0x10020191
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x10020185
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10020191
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push 0x100651f0
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x100201b3
mov dword [ebp - 0x88], 1
jmp 0x100201bd
mov dword [ebp - 0x88], 0
movzx edx, byte [ebp - 0x88]
test edx, edx
je 0x1002020b
cmp dword [ebp + 0x28], 0
jle 0x100201dc
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10020206
mov eax, dword [ebp + 0x24]
cdq
mov ecx, 3
idiv ecx
cmp edx, 1
je 0x100201fa
push 1
push 1
call fcn.1001d3c0
add esp, 8
jmp 0x10020206
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push 0x10065200
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x10020228
mov dword [ebp - 0x8c], 1
jmp 0x10020232
mov dword [ebp - 0x8c], 0
movzx edx, byte [ebp - 0x8c]
test edx, edx
je 0x1002024e
push 1
push 4
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
push 0x10065210
lea ecx, [ebp + 8]
call fcn.1002f5e0
test eax, eax
jne 0x1002026b
mov dword [ebp - 0x90], 1
jmp 0x10020275
mov dword [ebp - 0x90], 0
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x10020491
cmp dword [0x1006bdac], 8
jge 0x10020483
cmp dword [0x1006bdec], 0
jne 0x100202c1
push 0x3a98
push 0x2710
call fcn.10004950
add esp, 8
mov dword [0x1006bdec], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1006bd54], eax
jmp 0x10020483
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1006bd54]
cmp eax, dword [0x1006bdec]
jbe 0x10020483
mov ecx, dword [0x1006bdac]
add ecx, 1
mov dword [0x1006bdac], ecx
push 0x10065220
lea ecx, [ebp - 0x10]
call fcn.1002fa80
mov edx, dword [ebp - 0x10]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x10020440
mov ecx, dword [ebp - 0x18]
push ecx
push 0x2d4f9d8
call fcn.10003a80
test eax, eax
jne 0x10020440
mov dword [ebp - 8], 0
jmp 0x10020330
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x18]
jge 0x10020436
mov ecx, dword [ebp - 8]
add ecx, 0x2d4f9d8
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], 0
push 1
mov edx, dword [ebp - 0x94]
push edx
call fcn.10003990
test eax, eax
jne 0x100203a3
lea eax, [ebp - 0x98]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x14], 0
jmp 0x10020385
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 1
jge 0x100203a3
mov edx, dword [ebp - 0xb0]
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x14]
mov cl, byte [eax]
mov byte [edx], cl
jmp 0x1002037c
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 8], 0
jl 0x100203cc
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0xb4]
jle 0x100203d6
push 0x80070057
call fcn.10002e80
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
mov dx, word [eax + ecx*2]
mov word [ebp - 0x1a], dx
movzx eax, word [ebp - 0x1a]
cmp dword [ebp - 0xb8], eax
je 0x10020431
cmp dword [ebp - 8], 0
jl 0x1002040d
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx - 0xc]
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0xbc]
jle 0x10020417
push 0x80070057
call fcn.10002e80
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
mov ax, word [ecx + edx*2]
mov word [ebp - 0x1c], ax
mov ecx, dword [ebp - 8]
mov dl, byte [ebp - 0x1c]
mov byte [ecx + 0x2d4f9d8], dl
jmp 0x10020327
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x2d4f9d8], 0
mov ecx, dword [ebp - 0x10]
sub ecx, 0x10
mov dword [ebp - 0xc0], ecx
mov ecx, dword [ebp - 0xc0]
call fcn.10003260
push 0xd
call fcn.10004970
add esp, 4
push 0x1388
push 0xbb8
call fcn.10004950
add esp, 8
mov dword [0x1006bdec], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1006bd54], eax
push 1
push 2
call fcn.1001d3c0
add esp, 8
jmp 0x100204b3
mov dl, byte [ebp - 1]
mov byte [ebp - 0xa], dl
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
call fcn.10003260
mov al, byte [ebp - 0xa]
jmp 0x100204d1
mov byte [ebp - 0xb], 1
mov ecx, dword [ebp + 8]
sub ecx, 0x10
mov dword [ebp - 0xc8], ecx
mov ecx, dword [ebp - 0xc8]
call fcn.10003260
mov al, byte [ebp - 0xb]
mov esp, ebp
pop ebp
ret