Function at 0x100051ce
Capabilities:
Check for time delay via gettickcount
Create thread
Get file size
Identify system language via api
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x290
push ebx
mov ebx, ecx
push esi
push edi
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x3c], ebx
call fcn.1000f0cb
lea ecx, [ebp - 0x4c]
call fcn.10001000
lea ecx, [ebp - 8]
call fcn.10001000
cmp byte [ebp + 8], 0
mov esi, 0x1001759c
je 0x10006a54
mov eax, dword [ebx + 0x84]
push 0
push 0x80
push 4
push 0
push 1
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
je 0x10006a54
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
lea eax, [edi + 2]
push eax
call fcn.1000f5d0
pop ecx
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x5c]
push 0
push ecx
push edi
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [ebp - 0x20]
push eax
and byte [eax + edi], 0
lea edi, [ebx + 0x40]
mov ecx, edi
call fcn.10001576
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x20]
call fcn.1000f588
pop ecx
mov ecx, edi
call fcn.100013ec
test al, al
jne 0x10006e71
push str.DWNM_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x1000538f
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
mov ecx, eax
mov eax, dword [0x10019e20]
xor edx, edx
div ecx
lea eax, [ebp - 8]
inc edx
push edx
push 0x10017258
push eax
call fcn.10001882
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x18]
push 0x10017590
push eax
call fcn.100016d2
add esp, 0x1c
lea ecx, [ebp - 8]
push eax
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
lea eax, [ebp - 8]
push 0x1001758c
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1000169b
add esp, 0xc
mov ecx, edi
push dword [eax + 4]
call fcn.10001504
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.10001171
push dword [ebp + 8]
mov ecx, edi
push esi
call fcn.10001512
lea ecx, [ebp - 8]
mov dword [ebp - 0x1c], eax
call fcn.100013e2
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp + 8]
inc eax
inc eax
sub ecx, eax
add eax, edx
sub ecx, edx
push ecx
push eax
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
call fcn.10001766
push eax
lea ecx, [ebx + 0x48]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push dword [0x1001ae5c]
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x5c], 1
call fcn.1000f14e
push str.DWORD
push str.IELD
lea ecx, [ebp - 0x290]
call fcn.1000f12f
lea eax, [ebp - 0x5c]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f2db
lea ecx, [ebx + 0x58]
call fcn.10001392
push dword [0x1001ae54]
lea ecx, [ebp - 0x290]
call fcn.1000f14e
push str.STP_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x10005454
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 5
sub eax, 5
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebx + 0x58]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push str.CString
push str.stpg
lea ecx, [ebp - 0x290]
call fcn.1000f12f
push 1
lea eax, [ebx + 0x58]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f227
push str.BIP_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x1000549c
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 5
sub eax, 5
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
mov ecx, 0x10019e28
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push str.FQLI_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x1000550a
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebx + 0x58]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push str.CString
push str.FQLI
lea ecx, [ebp - 0x290]
call fcn.1000f12f
push 1
lea eax, [ebx + 0x58]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f227
push str.TANM_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x100056c1
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
mov dword [esp], str.DWORD
push str.TANM
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x20], eax
call fcn.1000f12f
lea eax, [ebp - 0x2c]
push 1
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f2db
cmp dword [ebp - 0x20], 0
jne 0x1000559e
lea eax, [ebp - 0x20]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f2db
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2c], eax
inc dword [ebp - 0x2c]
jb 0x100055b0
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], eax
ja 0x100056c1
push dword [ebp - 0x2c]
lea eax, [ebp - 8]
push 0x10017258
push eax
call fcn.10001882
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x18]
push str.TANC
push eax
call fcn.100016d2
add esp, 0x18
lea ecx, [ebp - 8]
push eax
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push 1
push dword [ebp - 4]
call fcn.10001e6a
pop ecx
test eax, eax
mov eax, dword [ebp - 0x20]
pop ecx
je 0x1000560b
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jbe 0x100055b9
cmp dword [ebp - 0x2c], eax
ja 0x100056c1
lea eax, [ebp - 8]
push 0x1001758c
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1000169b
add esp, 0xc
mov ecx, edi
push dword [eax + 4]
call fcn.10001504
lea ecx, [ebp - 0x18]
mov dword [ebp + 8], eax
call fcn.10001171
cmp dword [ebp + 8], 0xffffffff
jle 0x100056c1
push dword [ebp + 8]
mov ecx, edi
push esi
call fcn.10001512
lea ecx, [ebp - 8]
mov dword [ebp - 0x1c], eax
call fcn.100013e2
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp + 8]
sub ecx, eax
sub ecx, edx
lea eax, [eax + edx + 2]
dec ecx
dec ecx
push ecx
push eax
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
lea eax, [ebp - 0x2c]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f2db
push str.CString
push str.TAST
lea ecx, [ebp - 0x290]
call fcn.1000f12f
push 1
lea eax, [ebp - 8]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f227
push str.TBUL_
mov ecx, edi
call fcn.10001504
mov ecx, 0x1001ae00
mov dword [ebp + 8], eax
call fcn.10001392
cmp dword [ebp + 8], 0xffffffff
jle 0x10005716
push dword [ebp + 8]
mov ecx, edi
push esi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
mov ecx, 0x1001ae00
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push str.CString
push str.TBUL
lea ecx, [ebp - 0x290]
call fcn.1000f12f
push 1
push 0
push 0x1001ae00
lea ecx, [ebp - 0x290]
call fcn.1000f227
push str.ALZH_
mov ecx, edi
call fcn.10001504
mov ecx, 0x1001adf8
mov dword [ebp + 8], eax
call fcn.10001392
cmp dword [ebp + 8], 0xffffffff
jle 0x10005794
push dword [ebp + 8]
mov ecx, edi
push esi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
mov ecx, 0x1001adf8
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push str.CString
push str.ALZH
lea ecx, [ebp - 0x290]
call fcn.1000f12f
push 1
push 0
push 0x1001adf8
lea ecx, [ebp - 0x290]
call fcn.1000f227
push str.DKEG_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x1000582b
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebx + 0x58]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push str.CString
push str.DKEG
lea ecx, [ebp - 0x290]
call fcn.1000f12f
push 1
lea eax, [ebx + 0x58]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f227
and dword [ebp - 0x50], 0
push str.MTON_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x10005881
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
pop ecx
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push str.DWORD
push str.MTON
lea ecx, [ebp - 0x290]
mov dword [0x1001aef4], eax
call fcn.1000f12f
lea eax, [ebp - 0x50]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f2db
lea eax, [ebp - 0x6c]
push 1
push eax
push str.ABZH
push str.ALNM
lea eax, [ebp - 0x290]
push edi
push eax
call fcn.10006e93
lea eax, [ebp - 0x68]
push 1
push eax
push str.MTZH
push str.MBNM
lea eax, [ebp - 0x290]
push edi
push eax
call fcn.10006e93
lea eax, [ebp - 0x68]
push 0
push eax
push str.MSZH
push str.MSNM
lea eax, [ebp - 0x290]
push edi
push eax
call fcn.10006e93
add esp, 0x48
lea eax, [ebp - 0x290]
push 0
push 0x1001ab84
push str.NGZH
push str.GGNM
push edi
push eax
call fcn.10006e93
push 0
push 0x1001ab8c
push str.NTZH
push str.SGNM
lea eax, [ebp - 0x290]
push edi
push eax
call fcn.10006e93
push 0
push 0x1001ab88
push str.NBZH
push str.BDNM
lea eax, [ebp - 0x290]
push edi
push eax
call fcn.10006e93
add esp, 0x48
mov ecx, edi
push str.BTDL_
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x100059d4
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebx + 0x58]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push str.CString
push str.BTDL
lea ecx, [ebp - 0x290]
call fcn.1000f12f
push 1
lea eax, [ebx + 0x58]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f227
push str.NGVE_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x10005a50
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebx + 0x58]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push str.CString
push str.NGVE
lea ecx, [ebp - 0x290]
call fcn.1000f12f
push 1
lea eax, [ebx + 0x58]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f227
push dword [ebx + 0x5c]
call fcn.100106e3
pop ecx
mov dword [0x10017678], eax
push str.VERX_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x10005aae
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
cmp dword [0x1001af1c], eax
pop ecx
jne 0x10005aae
mov byte [0x1001adcf], 1
push str.MSTM_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x10005b08
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
imul eax, eax, 0x3e8
pop ecx
mov dword [0x10017138], eax
push str.ADTM_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x10005b62
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
imul eax, eax, 0x3e8
pop ecx
mov dword [0x1001713c], eax
push str.TJPR_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x10005baa
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x18]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
mov ecx, 0x10019e78
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
and dword [0x1001aff4], 0
call fcn.100097e7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x3e8
div ecx
cmp edx, dword [0x1001aff4]
ja 0x10005bdb
mov ecx, 0x1001ae08
call fcn.100013ec
test al, al
je 0x10005bf0
mov eax, dword [0x1001af20]
mov ecx, 0x1001ae08
add eax, 0x21d
push eax
call fcn.10001576
lea ecx, [ebp - 0x28]
call fcn.10001000
mov ecx, 0x10019eb8
call fcn.10001392
mov ecx, 0x10019ec8
call fcn.10001392
mov ecx, 0x10019ea8
call fcn.10001392
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
cmp ax, 0x804
jne 0x100066c5
lea ecx, [ebp - 0x64]
call fcn.10001000
lea ecx, [ebp - 0x44]
call fcn.10001000
push 1
push str.GGDA
call fcn.10001e6a
pop ecx
test eax, eax
pop ecx
jne 0x10006091
mov eax, dword [0x1001ab84]
test eax, eax
jbe 0x10006091
push eax
lea eax, [ebp - 0x28]
push 0x10017258
push eax
call fcn.10001882
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push 0x100171e8
push eax
call fcn.100016d2
add esp, 0x18
mov ecx, 0x10019e70
push eax
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push 0x1001758c
lea eax, [ebp - 0x18]
push 0x10019e70
push eax
call fcn.1000169b
add esp, 0xc
lea ecx, [ebp - 0x28]
push eax
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push dword [ebp - 0x24]
mov ecx, edi
call fcn.10001504
lea ecx, [ebp - 0x28]
mov dword [ebp + 8], eax
call fcn.100013e2
cmp dword [ebp + 8], 0xffffffff
mov dword [ebp - 0x20], eax
jle 0x10006091
push dword [ebp + 8]
mov ecx, edi
push esi
call fcn.10001512
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp + 8]
sub eax, edx
add edx, ecx
sub eax, ecx
mov ecx, edi
push eax
lea eax, [ebp - 0x58]
push edx
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x58]
call fcn.10001171
push 0x2c
lea ecx, [ebp - 8]
call fcn.10001476
mov dword [ebp + 8], eax
inc eax
push eax
push 0x2c
lea ecx, [ebp - 8]
mov dword [ebp - 0x2c], eax
call fcn.100014d1
inc eax
lea ecx, [ebp - 8]
push eax
push 0x2c
call fcn.100014d1
lea ecx, [ebp - 8]
mov dword [ebp - 0x1c], eax
call fcn.100013e2
mov ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
dec ecx
inc eax
push ecx
push eax
lea eax, [ebp - 0x18]
lea ecx, [ebp - 8]
push eax
call fcn.10001766
push str.CString
lea ecx, [ebp - 0x290]
push dword [0x10019e74]
call fcn.1000f12f
push 1
lea eax, [ebp - 0x18]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f227
push dword [ebp + 8]
lea eax, [ebp - 0x58]
lea ecx, [ebp - 8]
push 0
push eax
call fcn.10001766
push dword [eax + 4]
call fcn.100106e3
pop ecx
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x58]
call fcn.10001171
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x64
xor edx, edx
pop ecx
div ecx
cmp dword [ebp - 0x1c], edx
jbe 0x10006089
push dword [ebp - 0x2c]
lea ecx, [ebp - 8]
push 0x2c
call fcn.100014d1
mov dword [ebp - 0x1c], eax
sub eax, dword [ebp + 8]
lea ecx, [ebp - 8]
mov dword [ebp - 0x20], 1
dec eax
push eax
lea eax, [ebp - 0x38]
push dword [ebp - 0x2c]
push eax
call fcn.10001766
push dword [eax + 4]
call fcn.100106e3
pop ecx
xor edx, edx
mov ecx, eax
mov eax, dword [0x10019e20]
mov ebx, 0x2710
div ebx
cmp ecx, edx
lea ecx, [ebp - 0x38]
seta bl
call fcn.10001171
test bl, bl
je 0x10005e15
and dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 8]
mov dword [ebp + 8], eax
lea ebx, [eax + 1]
push ebx
push 0x2c
call fcn.100014d1
mov dword [ebp - 0x1c], eax
sub eax, dword [ebp + 8]
lea ecx, [ebp - 8]
dec eax
push eax
lea eax, [ebp - 0x38]
push ebx
push eax
call fcn.10001766
mov ebx, 0x10019eb8
push eax
mov ecx, ebx
call fcn.10001553
lea ecx, [ebp - 0x38]
call fcn.10001171
push 0x2f
mov ecx, ebx
call fcn.10001476
cmp eax, 0xffffffff
jle 0x10005e9e
mov eax, dword [ebp - 0x1c]
and byte [0x10017133], 0
lea ecx, [ebp - 8]
lea ebx, [eax + 1]
push ebx
push 0x2c
call fcn.100014d1
sub eax, dword [ebp - 0x1c]
lea ecx, [ebp - 8]
dec eax
push eax
lea eax, [ebp - 0x38]
push ebx
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 0x64]
call fcn.10001553
lea ecx, [ebp - 0x38]
call fcn.10001171
jmp 0x10005ea5
mov byte [0x10017133], 1
mov eax, dword [0x10019e20]
push 5
xor edx, edx
pop ecx
div ecx
push ecx
push ecx
mov eax, esp
push dword [ebp - 0x2c]
lea ecx, [ebp - 8]
push eax
mov dword [ebp + 8], edx
call fcn.10001742
mov ebx, dword [ebp - 0x3c]
mov ecx, ebx
call fcn.10008d6f
test al, al
jne 0x10005edc
add dword [ebp + 8], 5
and byte [0x10017131], al
cmp byte [0x10017133], 0
je 0x10005f9f
push dword [ebp + 8]
lea eax, [ebp - 0x28]
push 0x10017258
push eax
call fcn.10001882
add esp, 0xc
lea eax, [ebp - 0x28]
push str..agp
push eax
lea eax, [ebp - 0x30]
push 0x10019eb8
push eax
call fcn.10001661
add esp, 0xc
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000169b
add esp, 0xc
lea ecx, [ebp - 0x44]
push eax
call fcn.10001553
lea ecx, [ebp - 0x38]
call fcn.10001171
lea ecx, [ebp - 0x30]
call fcn.10001171
lea eax, [ebp - 0x44]
mov ecx, 0x1001ae60
push eax
push str.ent_
push 0x2f
call fcn.10001484
inc eax
mov ecx, 0x1001ae60
push eax
lea eax, [ebp - 0x10]
push 0
push eax
call fcn.10001766
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.1000169b
add esp, 0xc
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.10001661
add esp, 0xc
lea ecx, [ebp - 0x44]
push eax
call fcn.10001553
lea ecx, [ebp - 0x38]
call fcn.10001171
lea ecx, [ebp - 0x30]
call fcn.10001171
lea ecx, [ebp - 0x10]
jmp 0x10006023
push str..agp
push 0x10019eb8
lea eax, [ebp - 0x64]
push 0x10017450
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.1000169b
add esp, 0xc
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.10001661
add esp, 0xc
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1000169b
add esp, 0xc
lea ecx, [ebp - 0x44]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea ecx, [ebp - 0x38]
call fcn.10001171
lea ecx, [ebp - 0x30]
call fcn.10001171
push 0x2f
mov ecx, 0x10019eb8
call fcn.10001484
inc eax
mov ecx, 0x10019eb8
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10001742
push eax
mov ecx, 0x10019eb8
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea ecx, [ebp - 8]
mov byte [0x1001adcd], 1
call fcn.100013e2
mov ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
dec ecx
inc eax
push ecx
push eax
lea eax, [ebp - 0x10]
lea ecx, [ebp - 8]
push eax
call fcn.10001766
push eax
mov ecx, 0x10019eb0
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
cmp dword [ebp - 0x20], 0
je 0x1000607f
lea eax, [ebp - 0x54]
push eax
xor eax, eax
push eax
push 1
push 0x100034db
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x10006089
push dword [ebp - 0x40]
mov ecx, ebx
call fcn.1000763b
lea ecx, [ebp - 0x18]
call fcn.10001171
push 1
push str.SGDA
call fcn.10001e6a
pop ecx
test eax, eax
pop ecx
jne 0x100063ad
cmp dword [0x1001ab8c], eax
jbe 0x100063ad
lea ecx, [ebp - 0x58]
call fcn.10001000
push dword [0x1001ab8c]
lea eax, [ebp - 0x28]
push 0x10017258
push eax
call fcn.10001882
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push 0x1001744c
push eax
call fcn.100016d2
add esp, 0x18
mov ecx, 0x10019e60
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push 0x1001758c
lea eax, [ebp - 0x10]
push 0x10019e60
push eax
call fcn.1000169b
add esp, 0xc
lea ecx, [ebp - 0x28]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push dword [ebp - 0x24]
mov ecx, edi
call fcn.10001504
lea ecx, [ebp - 0x28]
mov dword [ebp + 8], eax
call fcn.100013e2
cmp dword [ebp + 8], 0xffffffff
mov dword [ebp - 0x20], eax
jle 0x100063a5
push dword [ebp + 8]
mov ecx, edi
push esi
call fcn.10001512
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp + 8]
sub eax, edx
add edx, ecx
sub eax, ecx
mov ecx, edi
push eax
lea eax, [ebp - 0x10]
push edx
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push 0x2c
lea ecx, [ebp - 8]
call fcn.10001476
mov dword [ebp + 8], eax
push eax
lea eax, [ebp - 0x10]
push 0
push eax
lea ecx, [ebp - 8]
call fcn.10001766
push dword [eax + 4]
call fcn.100106e3
pop ecx
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x10]
call fcn.10001171
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x64
xor edx, edx
pop ecx
div ecx
cmp dword [ebp - 0x1c], edx
jbe 0x100063a5
mov eax, dword [ebp + 8]
lea ecx, [ebp - 8]
lea ebx, [eax + 1]
push ebx
push 0x2c
mov dword [ebp - 0x2c], ebx
call fcn.100014d1
mov dword [ebp - 0x1c], eax
sub eax, dword [ebp + 8]
lea ecx, [ebp - 8]
mov dword [ebp - 0x20], 1
dec eax
push eax
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.10001766
push dword [eax + 4]
call fcn.100106e3
pop ecx
xor edx, edx
mov ecx, eax
mov eax, dword [0x10019e20]
mov ebx, 0x2710
div ebx
cmp ecx, edx
lea ecx, [ebp - 0x10]
seta bl
call fcn.10001171
test bl, bl
je 0x10006219
and dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 8]
mov dword [ebp + 8], eax
lea ebx, [eax + 1]
push ebx
push 0x2c
call fcn.100014d1
mov dword [ebp - 0x1c], eax
sub eax, dword [ebp + 8]
lea ecx, [ebp - 8]
dec eax
push eax
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.10001766
push eax
mov ecx, 0x10019ec8
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
mov eax, dword [0x10019e20]
push 5
xor edx, edx
pop ecx
div ecx
push ecx
push ecx
mov eax, esp
push dword [ebp - 0x2c]
lea ecx, [ebp - 8]
push eax
mov dword [ebp + 8], edx
call fcn.10001742
mov ebx, dword [ebp - 0x3c]
mov ecx, ebx
call fcn.10008d6f
test al, al
jne 0x1000628c
add dword [ebp + 8], 5
and byte [0x10017130], al
push dword [ebp + 8]
lea eax, [ebp - 0x28]
push 0x10017258
push eax
call fcn.10001882
add esp, 0xc
lea ecx, [ebp - 8]
mov byte [0x1001adcc], 1
call fcn.100013e2
mov ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
dec ecx
inc eax
push ecx
push eax
lea eax, [ebp - 0x10]
lea ecx, [ebp - 8]
push eax
call fcn.10001766
push eax
mov ecx, 0x10019ec0
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
cmp dword [ebp - 0x20], 0
jne 0x10006387
lea eax, [ebp - 0x28]
push str..agp
push eax
lea eax, [ebp - 0x38]
push 0x10019ec8
push eax
call fcn.10001661
add esp, 0xc
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1000169b
add esp, 0xc
lea ecx, [ebx + 0x60]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea ecx, [ebp - 0x38]
call fcn.10001171
lea eax, [ebx + 0x60]
mov ecx, 0x1001ae60
push eax
push str.ent_
push 0x2f
call fcn.10001484
inc eax
mov ecx, 0x1001ae60
push eax
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10001766
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000169b
add esp, 0xc
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10001661
add esp, 0xc
lea ecx, [ebx + 0x60]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea ecx, [ebp - 0x38]
call fcn.10001171
lea ecx, [ebp - 0x18]
call fcn.10001171
jmp 0x100063a5
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 8]
push eax
xor eax, eax
push eax
push 1
push 0x100034db
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [ebp - 0x58]
call fcn.10001171
push 1
push str.BDDA
call fcn.10001e6a
pop ecx
test eax, eax
pop ecx
jne 0x100066b5
mov eax, dword [0x1001ab88]
test eax, eax
jbe 0x100066b5
push eax
lea eax, [ebp - 0x28]
push 0x10017258
push eax
call fcn.10001882
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push 0x10017440
push eax
call fcn.100016d2
add esp, 0x18
mov ecx, 0x10019e68
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push 0x1001758c
lea eax, [ebp - 0x10]
push 0x10019e68
push eax
call fcn.1000169b
add esp, 0xc
lea ecx, [ebp - 0x28]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push dword [ebp - 0x24]
mov ecx, edi
call fcn.10001504
lea ecx, [ebp - 0x28]
mov dword [ebp + 8], eax
call fcn.100013e2
cmp dword [ebp + 8], 0xffffffff
mov dword [ebp - 0x20], eax
jle 0x100066b5
push dword [ebp + 8]
mov ecx, edi
push esi
call fcn.10001512
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp + 8]
sub eax, edx
add edx, ecx
sub eax, ecx
mov ecx, edi
push eax
lea eax, [ebp - 0x10]
push edx
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push 0x2c
lea ecx, [ebp - 8]
call fcn.10001476
mov dword [ebp + 8], eax
push eax
lea eax, [ebp - 0x10]
push 0
push eax
lea ecx, [ebp - 8]
call fcn.10001766
push dword [eax + 4]
call fcn.100106e3
pop ecx
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x10]
call fcn.10001171
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x64
xor edx, edx
pop ecx
div ecx
cmp dword [ebp - 0x1c], edx
jbe 0x100066b5
mov eax, dword [ebp + 8]
lea ecx, [ebp - 8]
lea ebx, [eax + 1]
push ebx
push 0x2c
mov dword [ebp - 0x2c], ebx
call fcn.100014d1
mov dword [ebp - 0x1c], eax
sub eax, dword [ebp + 8]
lea ecx, [ebp - 8]
mov dword [ebp - 0x20], 1
dec eax
push eax
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.10001766
push dword [eax + 4]
call fcn.100106e3
pop ecx
xor edx, edx
mov ecx, eax
mov eax, dword [0x10019e20]
mov ebx, 0x2710
div ebx
cmp ecx, edx
lea ecx, [ebp - 0x10]
seta bl
call fcn.10001171
test bl, bl
je 0x10006529
and dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 8]
mov dword [ebp + 8], eax
lea ebx, [eax + 1]
push ebx
push 0x2c
call fcn.100014d1
mov dword [ebp - 0x1c], eax
sub eax, dword [ebp + 8]
lea ecx, [ebp - 8]
dec eax
push eax
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.10001766
push eax
mov ecx, 0x10019ea8
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
mov eax, dword [0x10019e20]
push 5
xor edx, edx
pop ecx
div ecx
push ecx
push ecx
mov eax, esp
push dword [ebp - 0x2c]
lea ecx, [ebp - 8]
push eax
mov dword [ebp + 8], edx
call fcn.10001742
mov ebx, dword [ebp - 0x3c]
mov ecx, ebx
call fcn.10008d6f
test al, al
jne 0x1000659c
add dword [ebp + 8], 5
and byte [0x10017132], al
push dword [ebp + 8]
lea eax, [ebp - 0x28]
push 0x10017258
push eax
call fcn.10001882
add esp, 0xc
lea ecx, [ebp - 8]
mov byte [0x1001adce], 1
call fcn.100013e2
mov ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
dec ecx
inc eax
push ecx
push eax
lea eax, [ebp - 0x10]
lea ecx, [ebp - 8]
push eax
call fcn.10001766
push eax
mov ecx, 0x10019ea0
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
cmp dword [ebp - 0x20], 0
jne 0x10006697
lea eax, [ebp - 0x28]
push str..agp
push eax
lea eax, [ebp - 0x38]
push 0x10019ea8
push eax
call fcn.10001661
add esp, 0xc
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1000169b
add esp, 0xc
lea ecx, [ebx + 0x68]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea ecx, [ebp - 0x38]
call fcn.10001171
lea eax, [ebx + 0x68]
mov ecx, 0x1001ae60
push eax
push str.ent_
push 0x2f
call fcn.10001484
inc eax
mov ecx, 0x1001ae60
push eax
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10001766
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000169b
add esp, 0xc
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10001661
add esp, 0xc
lea ecx, [ebx + 0x68]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea ecx, [ebp - 0x38]
call fcn.10001171
lea ecx, [ebp - 0x18]
call fcn.10001171
jmp 0x100066b5
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 8]
push eax
xor eax, eax
push eax
push 1
push 0x100034db
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [ebp - 0x44]
call fcn.10001171
lea ecx, [ebp - 0x64]
call fcn.10001171
push str.RNTM_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x1000672b
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x10]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
imul eax, eax, 0xea60
pop ecx
add eax, 0xa
push 0
push eax
push 5
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetTimer]
push str.COKB_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x10006795
mov ebx, eax
mov ecx, edi
push ebx
push esi
call fcn.10001512
sub eax, ebx
add ebx, 6
sub eax, 6
mov ecx, edi
push eax
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
pop ecx
xor edx, edx
push 0x64
mov ecx, eax
mov eax, dword [0x10019e20]
pop ebx
div ebx
mov ebx, dword [ebp - 0x3c]
cmp ecx, edx
jbe 0x10006795
mov ecx, ebx
call fcn.100088ba
push 0
push 0x64
push 2
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0x32
push 4
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0x4e20
push 3
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetTimer]
push str.BDUD_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
jle 0x100067dd
mov ecx, ebx
call fcn.10008941
push dword [0x1001ae5c]
lea ecx, [ebp - 0x290]
call fcn.1000f14e
push str.RTNM_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x10006954
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x10]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
mov dword [esp], str.DWORD
push str.RTNM
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x3c], eax
call fcn.1000f12f
lea eax, [ebp - 0x3c]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f2db
cmp dword [ebp - 0x3c], 0
jbe 0x10006954
push dword [ebp - 0x3c]
lea eax, [ebp - 8]
push 0x10017258
push eax
call fcn.10001882
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push str.RTUL
push eax
call fcn.100016d2
add esp, 0x18
lea ecx, [ebp - 8]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea eax, [ebp - 8]
push 0x1001758c
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000169b
add esp, 0xc
mov ecx, edi
push dword [eax + 4]
call fcn.10001504
lea ecx, [ebp - 0x38]
mov dword [ebp + 8], eax
call fcn.10001171
push dword [ebp + 8]
mov ecx, edi
push esi
call fcn.10001512
lea ecx, [ebp - 8]
mov dword [ebp - 0x1c], eax
call fcn.100013e2
mov ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp + 8]
sub eax, ecx
lea ecx, [ebp - 8]
dec eax
dec eax
push eax
call fcn.100013e2
mov ecx, dword [ebp + 8]
lea eax, [eax + ecx + 2]
mov ecx, edi
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 0x4c]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push str.CString
lea ecx, [ebp - 0x290]
push dword [ebp - 4]
call fcn.1000f12f
push 1
lea eax, [ebp - 0x4c]
push 0
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f227
dec dword [ebp - 0x3c]
jne 0x10006875
push str.RNNM_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x100069a6
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x10]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
pop ecx
mov dword [ebx + 0x28], eax
push str.RNBL_
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x100069fa
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x10]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
pop ecx
mov dword [0x1001712c], eax
push 0x100173f8
mov ecx, edi
call fcn.10001504
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jle 0x10006a4c
push eax
push esi
mov ecx, edi
call fcn.10001512
mov ecx, dword [ebp + 8]
sub eax, ecx
add ecx, 6
sub eax, 6
push eax
lea eax, [ebp - 0x10]
push ecx
push eax
mov ecx, edi
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push dword [ebp - 4]
call fcn.100106e3
pop ecx
mov dword [ebx + 0x30], eax
lea ecx, [ebp - 0x28]
call fcn.10001171
push dword [0x1001ae5c]
lea ecx, [ebp - 0x290]
call fcn.1000f14e
cmp dword [ebx + 0x70], 0
jne 0x10006e71
mov eax, dword [ebx + 0x28]
test eax, eax
jle 0x10006c80
cmp byte [0x1001add0], 0
je 0x10006c80
cmp eax, 5
jne 0x10006a9b
push 0x100173f4
lea ecx, [ebp - 8]
call fcn.10001576
jmp 0x10006ac5
cmp eax, 4
jne 0x10006aa7
push 0x100173f0
jmp 0x10006a91
cmp eax, 3
jne 0x10006ab3
push 0x100173ec
jmp 0x10006a91
push eax
lea eax, [ebp - 8]
push 0x10017258
push eax
call fcn.10001882
add esp, 0xc
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push str.DWRN
push eax
call fcn.100016d2
add esp, 0xc
lea ecx, [ebp - 8]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea eax, [ebp - 8]
push 0x1001758c
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000169b
mov eax, dword [eax + 4]
add esp, 0xc
lea ecx, [ebx + 0x40]
push eax
call fcn.10001504
lea ecx, [ebp - 0x38]
mov dword [ebp + 8], eax
call fcn.10001171
cmp dword [ebp + 8], 0xffffffff
jle 0x10006bcb
push dword [ebp + 8]
lea ecx, [ebx + 0x40]
push esi
call fcn.10001512
lea ecx, [ebp - 0x44]
mov edi, eax
call fcn.10001000
lea ecx, [ebp - 8]
call fcn.100013e2
mov ecx, edi
sub ecx, dword [ebp + 8]
sub ecx, eax
dec ecx
dec ecx
push ecx
lea ecx, [ebp - 8]
call fcn.100013e2
mov ecx, dword [ebp + 8]
lea eax, [eax + ecx + 2]
lea ecx, [ebx + 0x40]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 0x44]
call fcn.10001553
lea ecx, [ebp - 0x18]
call fcn.10001171
push str.CString
lea ecx, [ebp - 0x290]
push dword [ebp - 4]
call fcn.1000f12f
push 1
lea eax, [ebp - 0x4c]
push 1
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f227
test eax, eax
je 0x10006baf
push dword [ebp - 0x40]
lea ecx, [ebp - 0x4c]
call fcn.10001860
test eax, eax
je 0x10006bc3
mov eax, dword [0x10019e20]
push 0x64
xor edx, edx
pop ecx
div ecx
cmp dword [0x1001712c], edx
ja 0x10006bd3
lea ecx, [ebp - 0x44]
call fcn.10001171
dec dword [ebx + 0x28]
jmp 0x10006a65
lea eax, [edi + 2]
lea ecx, [ebx + 0x40]
push eax
push esi
mov dword [ebp + 8], eax
call fcn.10001512
push 0xfffffffffffffffe
pop ecx
sub ecx, edi
add eax, ecx
lea ecx, [ebx + 0x40]
push eax
lea eax, [ebp - 0x10]
push dword [ebp + 8]
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push 0x2f
lea ecx, [ebp - 8]
call fcn.10001484
lea ecx, [ebp - 8]
mov edi, eax
call fcn.100013e2
sub eax, edi
lea ecx, [ebp - 8]
dec eax
inc edi
push eax
lea eax, [ebp - 0x10]
push edi
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea eax, [ebp - 8]
push eax
lea eax, [ebx + 0x48]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10001661
add esp, 0xc
lea ecx, [ebx + 0x50]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push dword [ebx + 0x54]
mov ecx, ebx
call fcn.1000763b
mov dword [ebx + 0x20], 1
lea ecx, [ebp - 0x44]
call fcn.10001171
cmp dword [ebx + 0x70], 0
jne 0x10006e71
cmp dword [ebx + 0x30], 0
jle 0x10006e71
cmp byte [0x1001add0], 0
je 0x10006e71
lea ecx, [ebp - 0x28]
call fcn.10001000
lea ecx, [ebp - 0x18]
call fcn.10001000
lea ecx, [ebp - 0x44]
call fcn.10001000
mov eax, dword [ebx + 0x30]
add eax, 0xe
push eax
lea eax, [ebp - 8]
push 0x10017258
push eax
call fcn.10001882
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push str.DWAX
push eax
call fcn.100016d2
add esp, 0x18
lea ecx, [ebp - 0x44]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea eax, [ebp - 0x44]
push 0x1001758c
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.1000169b
mov eax, dword [eax + 4]
add esp, 0xc
lea ecx, [ebx + 0x40]
push eax
call fcn.10001504
lea ecx, [ebp - 0x38]
mov dword [ebp + 8], eax
call fcn.10001171
cmp dword [ebp + 8], 0xffffffff
jle 0x10006d99
push dword [ebp + 8]
lea ecx, [ebx + 0x40]
push esi
call fcn.10001512
mov edi, eax
mov eax, dword [ebp + 8]
mov ecx, edi
sub ecx, eax
add eax, 8
sub ecx, 8
push ecx
push eax
lea eax, [ebp - 0x64]
lea ecx, [ebx + 0x40]
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 0x28]
call fcn.10001553
lea ecx, [ebp - 0x64]
call fcn.10001171
push str.CString
lea ecx, [ebp - 0x290]
push dword [ebp - 0x40]
call fcn.1000f12f
push 1
lea eax, [ebp - 0x4c]
push 1
push eax
lea ecx, [ebp - 0x290]
call fcn.1000f227
test eax, eax
je 0x10006db4
push dword [ebp - 0x24]
lea ecx, [ebp - 0x4c]
call fcn.10001860
test eax, eax
jne 0x10006db4
dec dword [ebx + 0x30]
lea ecx, [ebp - 0x44]
call fcn.10001171
lea ecx, [ebp - 0x18]
call fcn.10001171
lea ecx, [ebp - 0x28]
jmp 0x10006c7b
lea eax, [edi + 2]
lea ecx, [ebx + 0x40]
push eax
push esi
mov dword [ebp + 8], eax
call fcn.10001512
push 0xfffffffffffffffe
pop ecx
sub ecx, edi
add eax, ecx
lea ecx, [ebx + 0x40]
push eax
lea eax, [ebp - 0x10]
push dword [ebp + 8]
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push 0x2f
lea ecx, [ebp - 8]
call fcn.10001484
lea ecx, [ebp - 8]
mov esi, eax
call fcn.100013e2
sub eax, esi
lea ecx, [ebp - 8]
dec eax
inc esi
push eax
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.10001766
push eax
lea ecx, [ebp - 8]
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
lea eax, [ebp - 8]
push eax
lea eax, [ebx + 0x48]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10001661
add esp, 0xc
lea ecx, [ebx + 0x50]
push eax
call fcn.10001553
lea ecx, [ebp - 0x10]
call fcn.10001171
push dword [ebx + 0x54]
mov ecx, ebx
call fcn.1000763b
lea ecx, [ebp - 0x44]
mov dword [ebx + 0x1c], 1
call fcn.10001171
lea ecx, [ebp - 0x18]
call fcn.10001171
lea ecx, [ebp - 0x28]
call fcn.10001171
lea ecx, [ebp - 8]
call fcn.10001171
lea ecx, [ebp - 0x4c]
call fcn.10001171
lea ecx, [ebp - 0x290]
call fcn.1000f10c
pop edi
pop esi
pop ebx
leave
ret 4