Function at 0x1005d650
Capabilities:
Check for time delay via gettickcount
Check os version
Create directory
Shutdown system
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008eb9c
mov eax, dword fs:[0]
push eax
sub esp, 0x340
mov eax, dword [0x100ae8c8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x35ec500]
cmp eax, 0x4b1
je 0x1005d6c9
cmp eax, 0x321
je 0x1005d6c9
cmp eax, 0x1c85
je 0x1005d6c9
cmp eax, 0xfa1
je 0x1005d6c9
cmp eax, 0x8fd
je 0x1005d6c9
cmp eax, 0x907
je 0x1005d6c9
cmp eax, 0x911
je 0x1005d6c9
cmp eax, 0x91b
je 0x1005d6c9
cmp eax, 0x925
je 0x1005d6c9
cmp eax, 0x939
jne 0x1005d6e8
cmp byte [0x100b12e0], 1
jne 0x1005d6e8
cmp dword [0x1019e5c8], 0
jbe 0x1005d6e8
cmp byte [0x1012d412], 1
je 0x1005eaed
mov edi, dword [0x361f6dc]
mov dword [ebp - 0x34c], edi
test edi, edi
je 0x1005eaed
mov eax, dword [0x11f5ae0]
test eax, eax
je 0x1005eaed
movzx ecx, word [edi + 0x14]
imul ecx, ecx, 0x1cc
cmp dword [ecx + 0xfb9e9a], 0
je 0x1005eaed
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
or esi, 0xffffffff
cmp byte [0x1012d410], 0
jne 0x1005d74d
cmp dword [eax + 0x30], esi
je 0x1005d746
call ebx
sub eax, dword [0x1012d22c]
cmp eax, 0x1d4c0
jb 0x1005d74d
mov byte [0x1012d410], 1
mov eax, 1
cmp dword [0x10197254], eax
je 0x1005d76a
cmp dword [0x10197258], eax
je 0x1005d76a
cmp dword [0x10197268], eax
jne 0x1005d778
cmp dword [0x1011cd68], 2
jne 0x1005d778
call fcn.1005a680
call ebx
mov ebx, eax
push 0x1009460c
mov dword [ebp - 0x33c], ebx
call fcn.100072f0
add esp, 4
cmp eax, 1
jne 0x1005d7b2
push 0x100945bc
call fcn.100072f0
add esp, 4
cmp eax, 1
jne 0x1005d7b2
push 0
push 2
call fcn.100396f0
add esp, 8
movzx eax, word [0x33cbe44]
test ax, ax
je 0x1005d836
mov ecx, dword [0x101b8cfc]
mov dl, byte [0x100eaf28]
cmp eax, ecx
jle 0x1005d7e3
mov dword [0x101b8cfc], eax
mov eax, dword [0x100ae778]
movzx ecx, dl
dec ecx
cmp eax, ecx
jge 0x1005d7ea
inc eax
jmp 0x1005d7ec
je 0x1005d7d3
mov dword [0x101b8cfc], eax
xor eax, eax
movzx ecx, dl
sub ecx, eax
xor esi, esi
mov dword [0x100ae778], eax
test ecx, ecx
jle 0x1005d80f
lea esp, [esp]
cmp byte [eax + esi + 0x100eae88], 1
je 0x1005d81b
inc esi
cmp esi, ecx
jl 0x1005d800
mov dword [0x100ae778], 0xffffffff
jmp 0x1005d846
add eax, esi
movzx edx, word [eax*2 + 0x100ead48]
push edx
call fcn.1003b5f0
add esp, 4
add dword [0x100ae778], esi
jmp 0x1005d846
mov dword [0x101b8cfc], 0
mov dword [0x100ae778], esi
cmp dword [0x10194010], 1
mov eax, dword [edi + 0x1d48]
mov ecx, dword [0x10197bc0]
je 0x1005d864
cmp ecx, 1
jne 0x1005d950
cmp eax, 2
je 0x1005d943
cmp eax, 3
je 0x1005d943
cmp eax, 5
je 0x1005d943
cmp byte [0x1012d3fe], 1
je 0x1005d943
test ecx, ecx
je 0x1005d8df
cmp dword [0x1011cd68], 2
je 0x1005d8df
mov ecx, ebx
sub ecx, dword [0x1012d25c]
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov eax, 0x88888889
mul edx
shr edx, 5
mov dword [ebp - 0x278], edx
fild dword [ebp - 0x278]
test edx, edx
jns 0x1005d8cb
fadd dword [0x1009e6e0]
fild dword [0x10197bbc]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005d8df
call fcn.1003ba40
cmp dword [0x10194010], 1
jne 0x1005d950
mov edx, ebx
sub edx, dword [0x1012d25c]
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov eax, 0x88888889
mul edx
shr edx, 5
mov dword [ebp - 0x278], edx
fild dword [ebp - 0x278]
test edx, edx
jns 0x1005d91a
fadd dword [0x1009e6e0]
fild dword [0x101943f8]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005d950
push 0
push 0x100a05d8
mov dword [0x1012d25c], ebx
call fcn.10069f30
add esp, 8
jmp 0x1005eaed
mov byte [0x1012d3fe], 0
mov dword [0x1012d25c], ebx
cmp dword [0x10194410], 1
jne 0x1005d985
mov eax, dword [0x33cbde8]
mov ecx, dword [0x33cbdec]
cmp eax, dword [0x10152780]
jne 0x1005d974
cmp ecx, dword [0x10152784]
je 0x1005d9f1
mov dword [0x1012d254], ebx
mov dword [0x10152780], eax
mov dword [0x10152784], ecx
cmp dword [0x10190e28], 1
jne 0x1005dc5c
xor esi, esi
push esi
call dword [sym.imp.MSVCR100.dll__time64]
mov dword [ebp - 0x278], edx
lea edx, [ebp - 0x27c]
push edx
mov dword [ebp - 0x27c], eax
call dword [sym.imp.MSVCR100.dll__localtime64]
push eax
push 0x100a05d4
lea eax, [ebp - 0x24]
push 0x14
push eax
call dword [sym.imp.MSVCR100.dll_strftime]
add esp, 0x18
mov ecx, str.Sunday
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005da50
test dl, dl
je 0x1005d9ed
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005da50
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005d9d1
xor eax, eax
jmp 0x1005da55
mov ecx, ebx
sub ecx, dword [0x1012d254]
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov eax, 0x88888889
mul edx
shr edx, 5
mov dword [ebp - 0x278], edx
fild dword [ebp - 0x278]
test edx, edx
jns 0x1005da23
fadd dword [0x1009e6e0]
fild dword [0x10194414]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005d985
push 0
push 0x100a05b0
mov dword [0x1012d254], ebx
call fcn.10069f30
add esp, 8
jmp 0x1005eaed
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1005da61
lea esi, [eax + 7]
jmp 0x1005dbcc
mov ecx, str.Monday
lea eax, [ebp - 0x24]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005da90
test dl, dl
je 0x1005da8c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005da90
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005da70
xor eax, eax
jmp 0x1005da95
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1005daa1
lea esi, [eax + 1]
jmp 0x1005dbcc
mov ecx, str.Tuesday
lea eax, [ebp - 0x24]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005dad0
test dl, dl
je 0x1005dacc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005dad0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005dab0
xor eax, eax
jmp 0x1005dad5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1005dae1
lea esi, [eax + 2]
jmp 0x1005dbcc
mov ecx, str.Wednesday
lea eax, [ebp - 0x24]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005db10
test dl, dl
je 0x1005db0c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005db10
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005daf0
xor eax, eax
jmp 0x1005db15
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1005db21
lea esi, [eax + 3]
jmp 0x1005dbcc
mov ecx, str.Thursday
lea eax, [ebp - 0x24]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005db50
test dl, dl
je 0x1005db4c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005db50
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005db30
xor eax, eax
jmp 0x1005db55
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1005db5e
lea esi, [eax + 4]
jmp 0x1005dbcc
mov ecx, str.Friday
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005db86
test dl, dl
je 0x1005db82
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005db86
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005db66
xor eax, eax
jmp 0x1005db8b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1005db94
lea esi, [eax + 5]
jmp 0x1005dbcc
mov ecx, str.Saturday
lea eax, [ebp - 0x24]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005dbc0
test dl, dl
je 0x1005dbbc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005dbc0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005dba0
xor eax, eax
jmp 0x1005dbc5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1005dbcc
lea esi, [eax + 6]
lea ecx, [ebp - 0x324]
push ecx
call dword [sym.imp.MSVCR100.dll__strtime]
push 2
lea edx, [ebp - 0x324]
push edx
lea eax, [ebp - 0x6c]
push eax
call fcn.10006d50
push 2
push 3
lea ecx, [ebp - 0x324]
push ecx
lea edx, [ebp - 0x80]
push edx
call fcn.10006e00
mov eax, dword [0x10190e1c]
inc eax
add esp, 0x20
cmp esi, eax
jne 0x1005dc5c
mov esi, dword [sym.imp.MSVCR100.dll_atoi]
lea ecx, [ebp - 0x6c]
push ecx
call esi
mov edx, dword [0x10190e20]
inc edx
add esp, 4
cmp eax, edx
jne 0x1005dc5c
lea eax, [ebp - 0x80]
push eax
call esi
mov ecx, dword [0x10190e24]
inc ecx
add esp, 4
cmp eax, ecx
jl 0x1005dc5c
push 0x100a0554
call fcn.10008090
mov ecx, dword [0x1011d1bc]
add esp, 4
call fcn.1006e770
call fcn.10045aa0
jmp 0x1005eaed
mov edi, dword [sym.imp.MSVCR100.dll_sprintf]
mov ebx, 1
cmp dword [0x10199274], ebx
jne 0x1005dd7f
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov ecx, edx
mov eax, 0x10624dd3
mul dword [0x1012d24c]
shr edx, 6
sub ecx, edx
cmp ecx, 0xf
jb 0x1005dd7f
call esi
push 0
mov dword [0x1012d24c], eax
call fcn.10012f60
push 0x1011c4d0
lea edx, [ebp - 0x274]
push 0x100a054c
push edx
call edi
add esp, 0x10
lea eax, [ebp - 0x274]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
jne 0x1005dce5
push eax
lea ecx, [ebp - 0x274]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x33cbd50
push 0x1011b6e8
push 0x1011c4d0
lea edx, [ebp - 0x274]
push 0x100a0538
push edx
call edi
add esp, 0x14
lea ecx, [ebp - 0x278]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x278]
push eax
mov ecx, 0x10199200
mov dword [ebp - 4], 0
call sub.mfc100.dll_Ordinal_6970
lea ecx, [ebp - 0x274]
push 0x100a0534
push ecx
call dword [sym.imp.MSVCR100.dll_fopen]
add esp, 8
mov esi, eax
push esi
push ebx
lea ecx, [ebp - 0x278]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push eax
lea ecx, [ebp - 0x278]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_fwrite]
push esi
call dword [sym.imp.MSVCR100.dll_fclose]
add esp, 0x14
lea ecx, [ebp - 0x278]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov ecx, dword [0x1012d37c]
cmp dword [0x10190e54], ebx
jne 0x1005dd9f
cmp ecx, dword [0x10190e74]
jl 0x1005dd9f
push 0x100a0510
jmp 0x1005dc3f
cmp dword [0x10190e58], ebx
jne 0x1005ddbf
mov edx, dword [0x1012d380]
cmp edx, dword [0x10190e78]
jl 0x1005ddbf
push 0x100a04ec
jmp 0x1005dc3f
cmp dword [0x10190f0c], ebx
jne 0x1005ddf3
mov eax, dword [0x361f6dc]
movzx edx, word [eax + 0x14]
mov eax, dword [0x1011cd1c]
imul edx, edx, 0x1cc
sub eax, dword [edx + 0xfb9f50]
cmp eax, dword [0x10190f10]
jl 0x1005ddf3
push 0x100a04c8
jmp 0x1005dc3f
cmp dword [0x10190e5c], ebx
jne 0x1005de1f
mov eax, dword [0x10190e7c]
cdq
cmp dword [0x1012d2a4], edx
jl 0x1005de1f
jg 0x1005de15
mov edx, dword [0x1012d2a0]
cmp edx, eax
jb 0x1005de1f
push 0x100a04a0
jmp 0x1005dc3f
mov ebx, dword [sym.imp.WINMM.dll_PlaySoundA]
mov esi, 1
cmp dword [0x1019525c], esi
jne 0x1005de75
cmp ecx, dword [0x10195264]
jl 0x1005de75
push 0x100a0478
call fcn.10008090
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1011c4d0
mov esi, eax
push 0x100a0468
push esi
call edi
add esp, 0x14
push 0x11
push 0
push esi
call ebx
push esi
call sub.mfc100.dll_Ordinal_1296
add esp, 4
mov esi, 1
cmp dword [0x10195260], esi
jne 0x1005dec5
mov eax, dword [0x1012d380]
cmp eax, dword [0x10195268]
jl 0x1005dec5
push 0x100a0440
call fcn.10008090
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1011c4d0
mov esi, eax
push 0x100a0468
push esi
call edi
add esp, 0x14
push 0x11
push 0
push esi
call ebx
push esi
call sub.mfc100.dll_Ordinal_1296
add esp, 4
mov esi, 1
mov eax, dword [0x10190e48]
mov ecx, dword [0x1019524c]
cmp eax, esi
je 0x1005dedc
cmp ecx, esi
jne 0x1005e005
cmp byte [0x1012d410], 1
jne 0x1005e005
cmp eax, esi
jne 0x1005dfb2
mov ecx, dword [0x1011d1bc]
call fcn.1006e770
cmp dword [0x10190e2c], esi
jne 0x1005eaed
lea ecx, [ebp - 0x338]
push ecx
mov dword [ebp - 0x338], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov edi, 2
cmp dword [ebp - 0x328], edi
jne 0x1005df96
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea edx, [ebp - 0x34c]
push edx
push 0x20
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
lea eax, [ebp - 0x340]
push eax
push str.SeShutdownPrivilege
push 0
mov dword [ebp - 0x284], esi
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov ecx, dword [ebp - 0x340]
mov edx, dword [ebp - 0x33c]
push 0
push 0
push 0
lea eax, [ebp - 0x284]
push eax
mov dword [ebp - 0x280], ecx
mov ecx, dword [ebp - 0x34c]
push 0
push ecx
mov dword [ebp - 0x27c], edx
mov dword [ebp - 0x278], edi
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push 0
push 8
call dword [sym.imp.USER32.dll_ExitWindowsEx]
push 0x100a0438
call fcn.10008090
add esp, 4
jmp 0x1005eaed
cmp ecx, esi
jne 0x1005e005
cmp dword [0x101961a4], 0
jne 0x1005dfca
mov ecx, dword [0x1011d1bc]
call fcn.1006e770
push 0x100a042c
call fcn.10008090
push 0x1f4
call sub.mfc100.dll_Ordinal_265
push 0x1011c4d0
mov esi, eax
push 0x100a0468
push esi
call edi
add esp, 0x14
push 0x11
push 0
push esi
call ebx
push esi
call sub.mfc100.dll_Ordinal_1296
add esp, 4
jmp 0x1005eaed
cmp dword [0x10190e40], esi
jne 0x1005e040
mov edi, dword [0x33cbde8]
mov ebx, dword [0x33cbdec]
cmp edi, dword [0x10152778]
jne 0x1005e029
cmp ebx, dword [0x1015277c]
je 0x1005e078
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1012d258], eax
mov dword [0x10152778], edi
mov dword [0x1015277c], ebx
cmp dword [0x10190e4c], esi
jne 0x1005e0c7
xor edx, edx
mov eax, 0x35f5170
lea edi, [edx + 7]
mov ecx, dword [eax]
test ecx, ecx
je 0x1005e063
cmp byte [ecx + 0x330], 0
je 0x1005e063
add edx, esi
add eax, 4
sub edi, esi
jne 0x1005e052
test edx, edx
jne 0x1005e0c7
push 0x100a0410
jmp 0x1005dc3f
mov edx, dword [ebp - 0x33c]
sub edx, dword [0x1012d258]
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov eax, 0x88888889
mul edx
shr edx, 5
mov dword [ebp - 0x278], edx
fild dword [ebp - 0x278]
test edx, edx
jns 0x1005e0ae
fadd dword [0x1009e6e0]
fild dword [0x10190e70]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005e040
push 0x100a03f0
jmp 0x1005dc3f
cmp dword [0x10190e50], esi
jne 0x1005e198
mov edi, dword [0x35f30a4]
xor esi, esi
xor ebx, ebx
call fcn.10006a90
test eax, eax
je 0x1005e13d
add edi, 0x53c
lea esp, [esp]
mov eax, dword [edi]
test eax, eax
je 0x1005e129
lea ecx, [eax + 0x64]
mov eax, 0x100a03e8
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005e120
test dl, dl
je 0x1005e11c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005e120
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005e100
xor eax, eax
jmp 0x1005e125
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1005e138
inc ebx
add edi, 4
call fcn.10006a90
cmp ebx, eax
jb 0x1005e0f0
jmp 0x1005e13d
mov esi, 1
mov eax, dword [0x35f30a0]
xor edi, edi
lea ebx, [eax + 0x53c]
mov eax, dword [ebx]
test eax, eax
je 0x1005e181
lea ecx, [eax + 0x64]
mov eax, 0x100a03e8
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005e178
test dl, dl
je 0x1005e174
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005e178
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005e158
xor eax, eax
jmp 0x1005e17d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1005e198
inc edi
add ebx, 4
cmp edi, 0xf
jl 0x1005e14a
test esi, esi
jne 0x1005e198
push 0x100a03cc
jmp 0x1005dc3f
cmp dword [0x10190e8c], 1
mov esi, dword [sym.imp.MSVCR100.dll_strstr]
jne 0x1005e200
mov ebx, dword [0x35f30a4]
xor edi, edi
call fcn.10006a90
test eax, eax
je 0x1005e1e5
add ebx, 0x53c
mov edi, edi
mov eax, dword [ebx]
test eax, eax
je 0x1005e1d8
add eax, 0x64
push 0x1009ead0
push eax
call esi
add esp, 8
test eax, eax
jne 0x1005e200
inc edi
add ebx, 4
call fcn.10006a90
cmp edi, eax
jb 0x1005e1c0
push 0x1009ead0
call fcn.10006cf0
add esp, 4
test eax, eax
jne 0x1005e200
push 0x100a03b0
jmp 0x1005dc3f
xor esi, esi
lea ebx, [esi + 1]
cmp dword [0x33cbdd0], esi
jne 0x1005e383
cmp dword [0x10193ff4], ebx
jne 0x1005e30d
cmp dword [0x1019428c], esi
jne 0x1005e2c5
cmp dword [0x1011cd68], 2
jne 0x1005e27b
mov dword [0x1011d19c], esi
mov byte [0x1012d403], bl
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x100eaf2c]
mov dword [0x1012d26c], eax
mov eax, dword [0x101a46dc]
push 0x100468d0
push 0x12c
add eax, 0x45
push eax
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
push 0x100a03a0
call fcn.10008090
add esp, 4
jmp 0x1005eaed
call fcn.1006e640
mov dword [0x1011d19c], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x101943fc]
mov ecx, dword [0x100eaf2c]
mov dword [0x1012d26c], eax
mov eax, dword [0x101a46dc]
push 0x1005d580
push edx
add eax, 0x44
push eax
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
push 0x100a0390
call fcn.10008090
add esp, 4
jmp 0x1005eaed
call fcn.1006e640
mov dword [0x1011d19c], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x101a46dc]
push 0x10046830
push 0x1f4
add edx, 0x44
mov dword [0x1012d26c], eax
mov eax, dword [0x100eaf2c]
push edx
push eax
call dword [sym.imp.USER32.dll_SetTimer]
push 0x100a0380
call fcn.10008090
add esp, 4
jmp 0x1005eaed
cmp dword [0x10193ff8], ebx
jne 0x1005e383
cmp dword [0x10194290], ebx
jne 0x1005e366
call fcn.1006e640
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x101a46dc]
mov edx, dword [0x100eaf2c]
push 0x10046830
push 0x1f4
add ecx, 0x44
push ecx
push edx
mov dword [0x1012d26c], eax
mov dword [0x1011d19c], esi
call dword [sym.imp.USER32.dll_SetTimer]
push 0x100a0370
call fcn.10008090
add esp, 4
jmp 0x1005eaed
mov ecx, dword [0x1011d1bc]
call fcn.1006e770
push 0x100a035c
call fcn.10008090
add esp, 4
jmp 0x1005eaed
cmp dword [0x10191a00], ebx
jne 0x1005e3e8
mov eax, dword [0x35f30a0]
xor esi, esi
lea edi, [eax + 0x53c]
mov eax, dword [edi]
test eax, eax
je 0x1005e3cf
lea ecx, [eax + 0x64]
mov eax, 0x100a03e8
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005e3c6
test dl, dl
je 0x1005e3c2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005e3c6
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005e3a6
xor eax, eax
jmp 0x1005e3cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1005e3e8
add esi, ebx
add edi, 4
cmp esi, 0xf
jl 0x1005e398
push 0
push 0x100a03e8
call fcn.10006ac0
add esp, 8
cmp dword [0x10190e60], ebx
jne 0x1005e42a
xor edx, edx
mov eax, 0x35f5170
lea edi, [edx + 7]
lea ebx, [ebx]
mov ecx, dword [eax]
test ecx, ecx
je 0x1005e411
cmp byte [ecx + 0x330], 0
je 0x1005e411
add edx, ebx
add eax, 4
sub edi, ebx
jne 0x1005e400
cmp edx, dword [0x10190e80]
jge 0x1005e42a
push 0x100a0338
jmp 0x1005dc3f
cmp dword [0x101956bc], ebx
jne 0x1005e469
mov ecx, dword [ebp - 0x33c]
mov eax, 0x10624dd3
mul dword [0x1012d250]
shr edx, 6
mov esi, edx
mov eax, 0x10624dd3
mul ecx
shr edx, 6
sub edx, esi
cmp edx, 5
jb 0x1005e469
push 0x32
mov dword [0x1012d250], ecx
call fcn.1005a9c0
add esp, 4
cmp dword [0x1019726c], ebx
jne 0x1005e4e2
push 0x14
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x101974b4
call sub.mfc100.dll_Ordinal_6969
mov esi, 0x35f5170
mov eax, dword [esi]
test eax, eax
je 0x1005e4c9
cmp byte [eax + 0x330], 0
je 0x1005e4c9
lea ecx, [ebp - 0x24]
add eax, 0x338
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005e4c0
test dl, dl
je 0x1005e4bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005e4c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005e4a0
xor eax, eax
jmp 0x1005e4c5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1005e4d6
add esi, 4
cmp esi, 0x35f518c
jl 0x1005e486
jmp 0x1005e4e2
lea ecx, [ebp - 0x24]
push ecx
call fcn.10039a10
add esp, 4
cmp dword [0x101960fc], ebx
jne 0x1005e559
mov edi, dword [ebp - 0x34c]
lea eax, [edi + 0x483c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1005e500
sub eax, edx
je 0x1005e559
push 0x32
lea edx, [ebp - 0x58]
push edx
mov ecx, 0x10196a5c
call sub.mfc100.dll_Ordinal_6969
lea ecx, [edi + 0x483c]
lea eax, [ebp - 0x58]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005e544
test dl, dl
je 0x1005e540
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005e544
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005e524
xor eax, eax
jmp 0x1005e549
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1005e559
lea eax, [ebp - 0x58]
push eax
call fcn.10039b00
add esp, 4
mov eax, dword [0x35f30a4]
lea esi, [eax + 0x53c]
mov eax, dword [esi]
mov dword [ebp - 0x348], esi
test eax, eax
jle 0x1005e58a
add eax, 0x64
push 0x10097ca8
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
jne 0x1005e8df
xor edi, edi
xor ebx, ebx
mov dword [ebp - 0x344], edi
call fcn.10006a90
test eax, eax
je 0x1005e5f6
mov dword [ebp - 0x278], esi
mov ecx, dword [ebp - 0x278]
mov esi, dword [ecx]
test esi, esi
je 0x1005e5cd
lea edx, [esi + 0x64]
push 0x10097ca8
push edx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1005e5cd
cmp dword [esi + 0xe74], ebx
jg 0x1005e5e0
add dword [ebp - 0x278], 4
inc edi
call fcn.10006a90
cmp edi, eax
jb 0x1005e5a3
jmp 0x1005e5f6
mov ebx, dword [esi + 0xe44]
mov dword [ebp - 0x278], edi
mov dword [ebp - 0x344], 1
cmp dword [0x10197088], 1
jne 0x1005e6ee
mov eax, dword [0x10197100]
test eax, eax
jne 0x1005e632
mov eax, dword [0x1009e2c4]
mov ecx, dword [0x1009e2c8]
mov dx, word [0x1009e2cc]
mov dword [ebp - 0x58], eax
mov al, byte [0x1009e2ce]
mov dword [ebp - 0x54], ecx
mov word [ebp - 0x50], dx
mov byte [ebp - 0x4e], al
jmp 0x1005e688
cmp eax, 1
jne 0x1005e65e
mov ecx, dword [0x1009e2b8]
mov edx, dword [0x1009e2bc]
mov ax, word [0x1009e2c0]
mov dword [ebp - 0x58], ecx
mov cl, byte [0x1009e2c2]
mov dword [ebp - 0x54], edx
mov word [ebp - 0x50], ax
mov byte [ebp - 0x4e], cl
jmp 0x1005e688
cmp eax, 2
jne 0x1005e688
mov edx, dword [0x1009e2ac]
mov eax, dword [0x1009e2b0]
mov cx, word [0x1009e2b4]
mov dword [ebp - 0x58], edx
mov dl, byte [0x1009e2b6]
mov dword [ebp - 0x54], eax
mov word [ebp - 0x50], cx
mov byte [ebp - 0x4e], dl
xor edi, edi
call fcn.10006a90
test eax, eax
je 0x1005e6ee
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x33c], eax
nop
mov ecx, dword [ebp - 0x33c]
mov esi, dword [ecx]
test esi, esi
je 0x1005e6dd
lea edx, [ebp - 0x58]
push edx
lea eax, [esi + 0x64]
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1005e6dd
mov eax, dword [esi + 0xe44]
cmp eax, ebx
jl 0x1005e6dd
mov ebx, eax
mov dword [ebp - 0x278], edi
mov dword [ebp - 0x344], 1
add dword [ebp - 0x33c], 4
inc edi
call fcn.10006a90
cmp edi, eax
jb 0x1005e6a0
cmp dword [ebp - 0x344], 0
jne 0x1005e8bf
xor edi, edi
call fcn.10006a90
test eax, eax
je 0x1005e76e
mov ecx, dword [ebp - 0x348]
mov dword [ebp - 0x33c], ecx
mov edx, dword [ebp - 0x33c]
mov esi, dword [edx]
test esi, esi
je 0x1005e750
lea eax, [esi + 0x64]
push 0x100a032c
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1005e750
mov eax, dword [esi + 0xe44]
cmp eax, ebx
jl 0x1005e750
mov ebx, eax
mov dword [ebp - 0x278], edi
mov dword [ebp - 0x344], 1
add dword [ebp - 0x33c], 4
inc edi
call fcn.10006a90
cmp edi, eax
jb 0x1005e712
cmp dword [ebp - 0x344], 0
jne 0x1005e8bf
xor edi, edi
call fcn.10006a90
test eax, eax
je 0x1005e7e1
mov ecx, dword [ebp - 0x348]
mov dword [ebp - 0x33c], ecx
mov edx, dword [ebp - 0x33c]
mov esi, dword [edx]
test esi, esi
je 0x1005e7c3
lea eax, [esi + 0x64]
push 0x1009e2ac
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1005e7c3
mov eax, dword [esi + 0xe44]
cmp eax, ebx
jl 0x1005e7c3
mov ebx, eax
mov dword [ebp - 0x278], edi
mov dword [ebp - 0x344], 1
add dword [ebp - 0x33c], 4
inc edi
call fcn.10006a90
cmp edi, eax
jb 0x1005e785
cmp dword [ebp - 0x344], 0
jne 0x1005e8bf
xor edi, edi
call fcn.10006a90
test eax, eax
je 0x1005e858
mov ecx, dword [ebp - 0x348]
mov dword [ebp - 0x33c], ecx
jmp 0x1005e800
mov edx, dword [ebp - 0x33c]
mov esi, dword [edx]
test esi, esi
je 0x1005e83e
lea eax, [esi + 0x64]
push 0x1009e2b8
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1005e83e
mov eax, dword [esi + 0xe44]
cmp eax, ebx
jl 0x1005e83e
mov ebx, eax
mov dword [ebp - 0x278], edi
mov dword [ebp - 0x344], 1
add dword [ebp - 0x33c], 4
inc edi
call fcn.10006a90
cmp edi, eax
jb 0x1005e800
cmp dword [ebp - 0x344], 0
jne 0x1005e8bf
xor edi, edi
call fcn.10006a90
test eax, eax
je 0x1005e8df
mov ecx, dword [ebp - 0x348]
mov dword [ebp - 0x33c], ecx
nop
mov edx, dword [ebp - 0x33c]
mov esi, dword [edx]
test esi, esi
je 0x1005e8ae
lea eax, [esi + 0x64]
push 0x1009e2c4
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1005e8ae
mov eax, dword [esi + 0xe44]
cmp eax, ebx
jl 0x1005e8ae
mov ebx, eax
mov dword [ebp - 0x278], edi
mov dword [ebp - 0x344], 1
add dword [ebp - 0x33c], 4
inc edi
call fcn.10006a90
cmp edi, eax
jb 0x1005e870
cmp dword [ebp - 0x344], 1
jne 0x1005e8df
mov ecx, dword [ebp - 0x278]
push 1
push 1
push 1
push 0
push ecx
call fcn.10039bc0
add esp, 0x14
mov dword [ebp - 0x33c], 0xffffffff
xor edi, edi
call fcn.10006a90
test eax, eax
je 0x1005e992
mov ebx, dword [ebp - 0x348]
mov edi, edi
mov esi, dword [ebx]
test esi, esi
je 0x1005e92f
lea edx, [esi + 0x64]
push 0x100a0324
push edx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x1005e92f
mov eax, 1
mov dword [ebp - 0x33c], eax
cmp dword [esi + 0xef4], eax
je 0x1005e992
inc edi
add ebx, 4
call fcn.10006a90
cmp edi, eax
jb 0x1005e900
cmp dword [ebp - 0x33c], 1
jne 0x1005e992
xor esi, esi
call fcn.10006a90
test eax, eax
je 0x1005e992
mov edi, dword [ebp - 0x348]
mov ebx, dword [sym.imp.MSVCR100.dll_strstr]
lea esp, [esp]
mov eax, dword [edi]
test eax, eax
je 0x1005e978
add eax, 0x64
push 0x100a0324
push eax
call ebx
add esp, 8
test eax, eax
jne 0x1005e987
inc esi
add edi, 4
call fcn.10006a90
cmp esi, eax
jb 0x1005e960
jmp 0x1005e992
push 0
push esi
call fcn.10038350
add esp, 8
mov eax, dword [ebp - 0x34c]
cmp dword [eax + 0x51fc], 0
jne 0x1005e9aa
cmp dword [eax + 0x2a58], 6
je 0x1005e9c4
cmp dword [eax + 0x4800], 0
jne 0x1005ea53
cmp dword [eax + 0x2a58], 4
jne 0x1005ea53
xor edi, edi
lea eax, [ebp - 0x2a4]
push eax
push edi
call fcn.10006ba0
add esp, 8
mov ecx, 0x1019ca14
xor esi, esi
call fcn.10001240
test eax, eax
jle 0x1005ea49
jmp 0x1005e9f0
mov edx, dword [0x1019ca14]
mov eax, dword [edx + esi*4]
lea ecx, [ebp - 0x2a4]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005ea20
test dl, dl
je 0x1005ea1c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005ea20
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005ea00
xor eax, eax
jmp 0x1005ea25
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1005ea3a
mov eax, dword [ebp - 0x288]
push 1
push eax
call fcn.10039c90
add esp, 8
mov ecx, 0x1019ca14
inc esi
call fcn.10001240
cmp esi, eax
jl 0x1005e9f0
inc edi
cmp edi, 0xa
jl 0x1005e9c6
cmp dword [0x1011cd68], 2
je 0x1005eaed
cmp byte [0x1012d419], 0
jne 0x1005eaed
mov ecx, 0x101a211c
call fcn.10001240
cmp eax, 2
jne 0x1005eaed
call fcn.10046a40
cmp al, 1
jne 0x1005eaed
mov byte [0x1012d419], al
call fcn.1006e640
push 0
push 0
push 0
push 0
mov dword [0x1011d1a4], 0x7d0
call fcn.10046e10
mov ecx, dword [0x101a46dc]
mov edx, dword [0x100eaf2c]
push fcn.10046e10
push 0x5dc
add ecx, 0x4d
push ecx
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [0x101a211c]
mov ecx, dword [eax + 4]
fild dword [ecx]
mov edx, dword [eax]
sub esp, 0xc
fstp dword [esp + 8]
fldz
fstp dword [esp + 4]
fild dword [edx]
fstp dword [esp]
call fcn.10037ba0
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10085dc6
mov esp, ebp
pop ebp
ret