Function at 0x10066180
Capabilities:
Check for time delay via gettickcount
Check if file exists
Check os version
Decompress data using quicklz
Delete file
Get file attributes
Get number of processors
Read file on windows
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10145ab8
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x9994
call fcn.1012e520
mov eax, dword [0x10170024]
xor eax, esp
mov dword [esp + 0x9990], eax
push ebx
push esi
push edi
mov eax, dword [0x10170024]
xor eax, esp
push eax
lea eax, [esp + 0x99a8]
mov dword fs:[0], eax
mov ebx, ecx
xor esi, esi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x58], esi
call sub.Comn.dll_GetObjectGpt
lea ecx, [esp + 0x3f4c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea eax, [esp + 0x3f4c]
push eax
mov dword [esp + 0x99b4], esi
call fcn.10003040
add esp, 4
push 0x1014cde8
lea ecx, [esp + 0x3f50]
call dword [0x101464cc]
lea ecx, [esp + 0x3fd8]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov byte [esp + 0x99b0], 3
mov eax, dword [esp + 0x3f50]
mov edi, 8
cmp dword [esp + 0x3f64], edi
jae 0x10066267
lea eax, [esp + 0x3f50]
push eax
lea ecx, [esp + 0x3fdc]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
lea ecx, [esp + 0x3f68]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x3f68]
push ecx
mov byte [esp + 0x99b4], 4
call fcn.10003040
add esp, 4
push str.CurTaskState.ini
lea ecx, [esp + 0x3f6c]
call dword [0x101464cc]
cmp dword [esp + 0x3f80], edi
mov eax, dword [esp + 0x3f6c]
jae 0x100662c3
lea eax, [esp + 0x3f6c]
push eax
lea ecx, [esp + 0x3fa4]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
cmp dword [esp + 0x3fb8], edi
mov eax, dword [esp + 0x3fa4]
jae 0x100662e8
lea eax, [esp + 0x3fa4]
push eax
push 0x10151f24
push 0x10151f28
push str.TaskState
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, ebx
call fcn.10077730
mov edx, dword [ebx]
mov eax, dword [edx + 0x24]
mov ecx, ebx
call eax
mov edi, dword [ebp + 8]
cmp edi, eax
jae 0x1006ccf6
mov ecx, dword [ebx + 8]
cmp ecx, esi
je 0x1006632a
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov dword [ebx + 8], esi
call sub.FuncLogic.dll_CreateFuncExecute
mov dword [ebx + 8], eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
push 0x1140
lea ecx, [ebx + 0x78]
push esi
push ecx
call sub.MSVCR80.dll_memset
mov edx, dword [ebx + 0x48]
add esp, 0xc
push 0xffffffffffffffff
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebx + 0x10]
cmp eax, esi
je 0x1006637a
mov ecx, dword [ebx + 0x14]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x10066380
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov ecx, dword [ebx + 0x10]
lea eax, [edi + edi*2]
mov edx, dword [ecx + eax*8]
lea eax, [ecx + eax*8]
mov ecx, dword [eax + 4]
mov dword [esp + 0x3f34], edx
mov edx, dword [eax + 8]
mov dword [esp + 0x3f38], ecx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x3f3c], edx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x3f40], ecx
mov ecx, dword [ebx + 0x48]
push ecx
mov dword [esp + 0x3f48], edx
mov dword [esp + 0x3f4c], eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebx + 0x24]
mov dword [esp + 0x14], esi
mov edx, dword [ecx]
mov edx, dword [edx]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x28]
push edi
mov ecx, ebx
call edx
cmp eax, esi
mov ecx, 1
mov dword [ebx + 0x74], eax
mov dword [ebx + 0x54], ecx
je 0x10066510
cmp eax, 0x20
je 0x10066510
cmp eax, 0x20000
je 0x10066510
cmp eax, 0x80000
je 0x10066510
cmp eax, 0x200
je 0x10066510
cmp dword [ebx + 0x50], esi
mov dword [ebx + 0x54], esi
jne 0x1006654e
lea esi, [ebx + 0x11c0]
call fcn.10064a30
test eax, eax
je 0x10066454
mov eax, dword [esi]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x100664f6
call sub.Comn.dll_GetObjectLog
mov ebx, eax
mov esi, dword [ebx]
push 0x1e1
mov edi, str..UiTaskMgr.cpp
add esi, 0xc
call fcn.10064760
mov ecx, dword [esi]
add esp, 4
push eax
push str._s:_reset_event_fail
push ebx
call ecx
add esp, 0xc
lea ecx, [esp + 0x3f68]
mov byte [esp + 0x99b0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fd8]
mov byte [esp + 0x99b0], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f4c]
mov dword [esp + 0x99b0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, 0x1e21002
jmp 0x1006e0f1
mov esi, dword [ebx + 0x11c4]
call fcn.10064ac0
test eax, eax
je 0x1006654e
mov edx, dword [esi]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
jmp 0x1006654e
test byte [0x10189960], cl
mov dword [ebx + 0x54], ecx
jne 0x1006653f
or dword [0x10189960], ecx
push 0x10145c90
mov dword [0x10188f24], 0x1014bde8
mov byte [0x10188f28], 0
call fcn.1012d48d
add esp, 4
mov eax, dword [0x10188f24]
mov edx, dword [eax]
push esi
mov ecx, 0x10188f24
call edx
xor eax, eax
lea esi, [ebx + 0x64]
mov dword [esp + 0x3f24], eax
mov dword [esp + 0x3f28], eax
mov dword [esp + 0x3f2c], eax
mov dword [esp + 0x3f30], eax
lea eax, [esp + 0x3f24]
mov ecx, esi
mov dword [esp + 0x80], esi
call fcn.1002f730
test eax, eax
jne 0x100665af
mov eax, dword [esp + 0x3f24]
mov ecx, dword [esp + 0x3f28]
mov edx, dword [esp + 0x3f2c]
mov dword [esi], eax
mov eax, dword [esp + 0x3f30]
mov dword [esi + 4], ecx
mov dword [esi + 8], edx
mov dword [esi + 0xc], eax
lea ecx, [esp + 0x3fbc]
mov dword [ebx + 0x60], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x3fbc]
push ecx
mov byte [esp + 0x99b4], 5
call fcn.10003040
add esp, 4
push str.BRFunction.ini
lea ecx, [esp + 0x3fc0]
call dword [0x101464cc]
mov eax, dword [esp + 0x3fc0]
mov esi, 8
cmp dword [esp + 0x3fd4], esi
jae 0x10066609
lea eax, [esp + 0x3fc0]
push eax
lea ecx, [esp + 0x3f88]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
cmp dword [esp + 0x3f9c], esi
mov eax, dword [esp + 0x3f88]
jae 0x1006662e
lea eax, [esp + 0x3f88]
push eax
push 0x10151f8c
push 0x10151f90
push str.FUNCTION
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, dword [ebx]
mov eax, dword [edx + 0x28]
push edi
mov ecx, ebx
mov dword [ebx + 0x11d4], edi
call eax
cmp eax, 0x80
ja 0x1006a053
je 0x10069dd4
cmp eax, 0x40
ja case.0x10066675.1
movzx ecx, byte [eax + 0x1006e138]
jmp dword [ecx*4 + 0x1006e118]
mov esi, dword [esp + 0x3f34]
mov edx, dword [esi]
mov eax, dword [edx + 0x10]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x40], edi
call eax
imul eax, eax, 0x420
add eax, 0x21
push eax
mov dword [esp + 0x3c], eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov ecx, dword [esp + 0x3c]
add esp, 4
push ecx
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x44]
mov dword [esi + 4], eax
add eax, 0xffffffef
mov dword [esi + 0xc], eax
mov dword [esi], 0x50465242
mov dword [esi + 8], 2
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
add esp, 0xc
mov ecx, edi
call eax
mov ecx, dword [esi + 0x14]
xor ecx, eax
and ecx, 1
xor dword [esi + 0x14], ecx
mov edx, dword [esi + 0xc]
mov ecx, dword [esp + 0x3f34]
mov dword [esi + 0x10], edx
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
call edx
mov dword [esi + 0x18], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
mov ecx, edi
call edx
add eax, eax
add eax, eax
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 4
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x7c]
call eax
lea ecx, [eax*8]
xor ecx, dword [esi + 0x14]
and ecx, 8
xor dword [esi + 0x14], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x84]
mov ecx, edi
call eax
shl eax, 5
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x20
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x80]
call eax
shl eax, 4
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x10
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x74]
call eax
lea ecx, [eax + eax]
xor ecx, dword [esi + 0x14]
and ecx, 2
xor dword [esi + 0x14], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x88]
mov ecx, edi
call eax
shl eax, 6
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x40
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x90]
call eax
shl eax, 7
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x80
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x94]
call eax
shl eax, 8
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x100
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x5c4]
call eax
shl eax, 9
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x200
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [esi + 0x1c]
xor ecx, eax
and ecx, 1
xor dword [esi + 0x1c], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x5ac]
mov ecx, edi
call eax
mov dword [ebx + 0x11bc], eax
mov eax, dword [esp + 0x3f34]
add eax, 0x214
mov dword [ebx + 0x28], 3
mov dword [esp + 0x18], 0
call fcn.10028710
test eax, eax
jbe 0x100669c4
mov ecx, esi
add ecx, 0x28
mov dword [esp + 0x1c], ecx
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x214
call fcn.10078c90
mov ecx, dword [eax]
mov edx, dword [ecx]
mov edx, dword [edx]
lea eax, [esp + 0x924]
push eax
call edx
mov ecx, dword [esp + 0x1c]
add ecx, 0x1f8
lea edi, [ecx - 0x200]
mov esi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x214
call fcn.10078c90
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x524]
push ecx
mov ecx, eax
call edx
mov edi, dword [esp + 0x1c]
mov esi, eax
mov eax, dword [esp + 0x1c]
movzx eax, word [eax]
add edi, 0x1f8
test eax, 0x100
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
je 0x10066926
test al, 1
jne 0x10066926
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x214
call fcn.10078c90
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [esp + 0x1724]
push ecx
mov ecx, eax
call edx
mov edx, dword [eax + 0x8dc]
mov ecx, dword [esp + 0x1c]
add eax, 0x8dc
add ecx, 0x3f8
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [esp + 0x1c]
movzx eax, word [ecx + 0x200]
test eax, 0x100
je 0x10066998
test al, 1
jne 0x10066998
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x214
call fcn.10078c90
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [esp + 0x2b24]
push ecx
mov ecx, eax
call edx
mov edx, dword [eax + 0x8dc]
mov ecx, dword [esp + 0x1c]
add eax, 0x8dc
add ecx, 0x408
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x3f34]
add dword [esp + 0x1c], 0x420
add esi, 1
add eax, 0x214
mov dword [esp + 0x18], esi
call fcn.10028710
cmp esi, eax
jb 0x10066840
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x2c]
imul ecx, ecx, 0x420
lea eax, [ecx + edx + 0x220]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x28], eax
jmp 0x100669f0
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 0x228]
add ecx, 0x224
test eax, eax
je 0x10066b1a
mov ecx, dword [ecx + 8]
sub ecx, eax
mov eax, 0x3e0f83e1
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x18], eax
jae 0x10066b1a
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x1c]
add esi, 0x224
call fcn.10078cb0
mov edi, dword [esp + 0x28]
add edi, 0xfffffe00
mov esi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x1c]
add esi, 0x224
call fcn.10078cb0
mov edi, dword [esp + 0x28]
mov esi, eax
add esi, 0x210
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x1c]
add esi, 0x224
call fcn.10078cb0
mov edx, dword [eax + 0x200]
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x3f34]
add eax, 0x200
add ecx, 0x200
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
add esi, 0x224
mov dword [ecx + 0xc], eax
call fcn.10078cb0
mov edx, dword [eax + 0x410]
mov ecx, dword [esp + 0x28]
add eax, 0x410
mov dword [ecx + 0x210], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x214], edx
mov edx, dword [eax + 8]
mov dword [ecx + 0x218], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0x21c], eax
mov eax, 1
add dword [esp + 0x18], eax
add ecx, 0x420
add dword [esp + 0x1c], eax
mov dword [esp + 0x28], ecx
jmp 0x100669f0
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20043
add esi, 4
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x14]
test al, al
jns 0x10066b55
call sub.Comn.dll_GetObjectLang
push str.40105
jmp 0x10066b6f
test al, 1
je 0x10066b65
call sub.Comn.dll_GetObjectLang
push str.20054
jmp 0x10066b6f
call sub.Comn.dll_GetObjectLang
push str.20044
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov esi, dword [esp + 0x40]
mov dword [esp + 0x20], 0
mov eax, dword [esi]
mov edx, dword [eax + 0x174]
lea ecx, [esp + 0x184]
push ecx
mov ecx, esi
call edx
mov edx, dword [eax]
mov edi, dword [ebp + 8]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
lea ecx, [esp + 0x30]
push ecx
push 1
push edi
mov ecx, ebx
call fcn.10074730
test eax, eax
jne 0x10066bf1
mov dword [ebx + 0x94], 0x24e105d
mov dword [esp + 0x24], 0x24f105d
jmp 0x10066c8b
mov eax, dword [esp + 0x3f34]
mov eax, dword [eax + 0x23c]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
push eax
mov eax, dword [esp + 0x3f38]
mov eax, dword [eax + 0x240]
push eax
call edx
mov edx, dword [esp + 0x38]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], 0
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
lea eax, [esp + 0x214]
push eax
mov ecx, esi
call edx
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
lea ecx, [esp + 0x30]
push ecx
push 2
push edi
mov ecx, ebx
call fcn.10074730
test eax, eax
jne 0x10066cbc
mov dword [ebx + 0x94], 0x25a1065
mov dword [esp + 0x24], 0x25b1065
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x20]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
push eax
lea esi, [ebx + 0x11c8]
call fcn.100650b0
add esp, 8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
movzx ecx, word [esp + 0x24]
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x90]
push eax
call edx
jmp 0x1006dfef
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
mov edi, eax
push 0xf5d
mov dword [esp + 0x44], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0xf5d
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov ecx, dword [esp + 0x38]
mov dword [esi + 0xc], 0xf4c
mov dword [esi], 0x50465242
mov dword [esi + 4], 0xf5d
mov dword [esi + 8], 8
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0xc], 0
mov edx, dword [ecx + 0xc]
add esi, 0x10
mov dword [esi], edx
mov eax, dword [edi]
mov edx, dword [eax + 0x444]
add esp, 0xc
mov ecx, edi
mov dword [esp + 0x38], esi
call edx
add eax, eax
add eax, eax
add eax, eax
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 8
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x418]
call eax
mov ecx, dword [esi + 4]
xor ecx, eax
and ecx, 1
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x41c]
mov ecx, edi
call eax
lea ecx, [eax + eax]
xor ecx, dword [esi + 4]
and ecx, 2
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x458]
mov ecx, edi
call eax
shl eax, 9
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x200
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x420]
call eax
lea ecx, [eax*4]
xor ecx, dword [esi + 4]
and ecx, 4
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x44c]
mov ecx, edi
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 6
xor ecx, dword [esi + 4]
and ecx, 0x40
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov ecx, edi
mov eax, dword [edx + 0x448]
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 5
xor ecx, dword [esi + 4]
and ecx, 0x20
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x424]
mov ecx, edi
call eax
movzx ecx, ax
mov dword [esi + 8], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x454]
mov ecx, edi
call eax
shl eax, 8
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x100
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x45c]
call eax
mov ecx, dword [esi + 4]
and eax, 1
shl eax, 0xa
and ecx, 0xffffe3ff
or eax, ecx
mov dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x42c]
mov ecx, edi
call eax
mov dword [esi + 0xc], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x430]
lea eax, [esp + 0x1b4]
push eax
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x10], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x14], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x18], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1c], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.100652c0
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x40]
lea ecx, [esp + 0xac]
push ecx
mov ecx, edi
call edx
mov byte [esp + 0x99b0], 6
test byte [esi + 4], 0x40
je 0x10066f23
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax]
lea edx, [esp + 0xac]
lea esi, [esp + 0x64]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x64], edx
call fcn.1000b830
mov esi, dword [esp + 0x38]
mov edx, eax
add edx, 4
lea eax, [esi + 0x738]
call fcn.100040a0
jmp 0x10066f3f
mov eax, dword [edi]
mov edx, dword [eax + 0x48]
mov ecx, edi
call edx
lea ecx, [esi + 0x738]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x40]
mov edx, dword [edi]
mov eax, dword [edx + 0x434]
mov ecx, edi
call eax
lea ecx, [esi + 0x228]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x314]
mov ecx, edi
call eax
lea ecx, [esi + 0x530]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov edx, dword [edx + 0x438]
lea eax, [esi + 0xd40]
push eax
lea ecx, [esi + 0xb38]
push ecx
mov ecx, edi
call edx
lea ecx, [esi + 0x328]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x428]
mov ecx, edi
call eax
mov edx, eax
lea edi, [esi + 0x20]
mov eax, edi
call fcn.100040a0
cmp dword [esp + 0xb4], 0
mov dword [ebx + 0x28], 2
jne 0x10066fd1
or dword [esi + 4], 8
jmp 0x10066fe2
and dword [esi + 4], 0xfffffff7
lea ecx, [esp + 0xac]
mov dword [esi + 0xf48], ecx
mov ecx, dword [esi + 0x10]
mov edx, dword [esp + 0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 0x14]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x18]
mov dword [eax + 8], ecx
mov ecx, dword [esi + 0x1c]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
test dword [esi + 4], 0x100
je 0x1006702e
call sub.Comn.dll_GetObjectLang
push str.20053
jmp 0x10067038
call sub.Comn.dll_GetObjectLang
push str.20046
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
mov eax, dword [esp + 0x3f34]
mov esi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push esi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
push 0xf5d
push edx
call eax
mov esi, eax
mov eax, ebx
mov dword [esp + 0x24], esi
call fcn.100652f0
test esi, esi
jne 0x100670b7
mov ecx, dword [ebx + 0x1c]
push 0x40
push ecx
mov ecx, dword [esp + 0x40]
call fcn.10040970
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
movzx ecx, si
mov dword [esp + 0xcc], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xcc]
push eax
call edx
lea esi, [esp + 0xac]
mov byte [esp + 0x99b0], 5
call fcn.10064410
jmp 0x1006dfef
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0x28]
mov ecx, edi
mov dword [esp + 0x20], esi
call edx
mov edi, eax
shl edi, 9
add edi, 0x1d85
push edi
mov dword [esp + 0x58], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push edi
push 0
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x38]
mov dword [eax + 4], edi
lea ecx, [edi - 0x11]
lea edi, [eax + 0x10]
mov dword [eax + 0xc], ecx
mov dword [eax], 0x50465242
mov dword [eax + 8], 0
mov dword [edi], ecx
mov eax, dword [esi]
mov edx, dword [eax + 0x134]
add esp, 0xc
mov ecx, esi
mov dword [esp + 0x28], edi
call edx
mov ecx, dword [edi + 4]
xor ecx, eax
and ecx, 1
xor dword [edi + 4], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x138]
mov ecx, esi
call eax
lea ecx, [eax + eax]
xor ecx, dword [edi + 4]
and ecx, 2
xor dword [edi + 4], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x13c]
mov ecx, esi
call eax
lea ecx, [eax*4]
xor ecx, dword [edi + 4]
and ecx, 4
xor dword [edi + 4], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x140]
mov ecx, esi
call eax
lea ecx, [eax*8]
xor ecx, dword [edi + 4]
and ecx, 8
xor dword [edi + 4], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x144]
mov ecx, esi
call eax
shl eax, 4
xor eax, dword [edi + 4]
mov ecx, esi
and eax, 0x10
xor dword [edi + 4], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x148]
call eax
shl eax, 5
xor eax, dword [edi + 4]
and eax, 0x20
xor dword [edi + 4], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x508]
mov ecx, esi
call eax
shl eax, 8
xor eax, dword [edi + 4]
mov ecx, esi
and eax, 0x100
xor dword [edi + 4], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x14c]
call eax
mov ecx, dword [edi + 4]
shl eax, 0xb
and ecx, 0x7ff
or eax, ecx
mov dword [edi + 4], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x150]
mov ecx, esi
call eax
mov dword [edi + 8], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x154]
mov ecx, esi
call eax
mov dword [edi + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x158]
mov ecx, esi
call eax
mov dword [edi + 0x10], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x15c]
mov ecx, esi
call eax
mov dword [edi + 0x14], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x160]
mov ecx, esi
call eax
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], edx
mov edx, dword [esi]
mov eax, dword [edx + 0x164]
mov ecx, esi
call eax
mov dword [edi + 0x20], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x168]
mov ecx, esi
call eax
mov ecx, dword [esp + 0x3f34]
mov dword [edi + 0x24], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov dword [edi + 0x1d70], eax
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
lea eax, [esp + 0x2e4]
push eax
mov ecx, esi
call edx
mov edx, dword [eax]
mov dword [edi + 0x2c], edx
mov edx, dword [eax + 4]
lea ecx, [edi + 0x2c]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x5cc]
mov dword [esp + 0x1c], ecx
mov ecx, esi
call eax
shl eax, 9
xor eax, dword [edi + 4]
and eax, 0x600
xor dword [edi + 4], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
mov eax, dword [esi]
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
mov edx, dword [eax + 0x170]
mov ecx, esi
call edx
shl eax, 6
xor eax, dword [edi + 4]
mov ecx, esi
and eax, 0x40
xor dword [edi + 4], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x130]
call edx
shl eax, 7
xor eax, dword [edi + 4]
mov ecx, esi
and eax, 0x80
xor dword [edi + 4], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x5ac]
call edx
mov dword [ebx + 0x11bc], eax
mov eax, dword [edi + 4]
test al, 0x40
je 0x10067376
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 8], 0
jmp 0x10067396
test al, al
jns 0x10067389
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 8], 1
jmp 0x10067396
mov edx, dword [ebx + 0x11dc]
mov dword [edx + 8], 2
mov dword [ebx + 0x28], 1
mov edx, dword [esi]
lea eax, [edi + 0x3c]
mov dword [esp + 0x5c], eax
mov eax, dword [edx + 0x188]
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x5c]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x17c]
mov ecx, esi
call eax
lea ecx, [edi + 0x344]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x180]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x54c]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x184]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x754]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x18c]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x95c]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x178]
lea ecx, [edi + 0x244]
mov dword [esp + 0x34], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x34]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x1a0]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x195c]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x1a4]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x1b64]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x3c]
mov ecx, esi
call eax
movzx ecx, al
push 0x7e
lea edx, [esp + 0x9512]
push 0
mov dword [edi + 0x1d6c], ecx
push edx
mov word [esp + 0x9518], 0
call sub.MSVCR80.dll_memset
mov eax, dword [esi]
mov edx, dword [eax + 0x174]
add esp, 0xc
lea ecx, [esp + 0x1a4]
push ecx
mov ecx, esi
call edx
mov dword [esp + 0x40], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x174]
lea ecx, [esp + 0x264]
push ecx
mov ecx, esi
call edx
movzx eax, byte [eax + 0xf]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x1c8]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 0xe]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x2cc]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 0xd]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x1f0]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 0xc]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x154]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 0xb]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x298]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 0xa]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x21c]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 9]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x320]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 8]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x244]
push eax
mov ecx, esi
call edx
movzx eax, word [eax + 6]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x2c8]
push eax
mov ecx, esi
call edx
movzx eax, word [eax + 4]
push eax
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx]
push edx
lea eax, [esp + 0x9538]
push 0x1014c4a8
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
push 0x206
lea ecx, [esp + 0x979a]
push 0
push ecx
mov word [esp + 0x97a0], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x9794]
call fcn.10002ad0
push 0x10150e6c
lea edx, [esp + 0x9798]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea eax, [esp + 0x950c]
push eax
lea ecx, [esp + 0x9798]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edx, [esp + 0x9794]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x100676e3
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea eax, [esp + 0x97ac]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x4c], eax
xor eax, eax
push 0x1f70
push eax
lea ecx, [esp + 0x5a48]
push ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x5a48], eax
call sub.MSVCR80.dll_memset
mov ecx, dword [esp + 0x58]
add esp, 0xc
push 0
lea edx, [esp + 0x44]
push edx
push 0x1f74
lea eax, [esp + 0x5a48]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, dword [esp + 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x5c80]
call fcn.100040a0
lea edx, [esp + 0x6398]
lea eax, [edi + 0x95c]
call fcn.100040a0
lea eax, [edi + 0x54c]
push 0x104
push eax
call fcn.10002390
lea eax, [edi + 0x754]
push 0x104
push eax
call fcn.10002390
mov ecx, dword [esp + 0x44]
add esp, 0x10
call fcn.1002f880
test eax, eax
jle 0x10067724
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0x3c], 1
jmp 0x10067731
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x3c], 0
lea ecx, [edi + 0x95c]
call fcn.1002f880
test eax, eax
jle 0x1006774f
mov edx, dword [ebx + 0x11dc]
mov dword [edx + 4], 1
jmp 0x1006775c
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 4], 0
lea edx, [ebx + 0x11e0]
mov eax, 0x104
lea ecx, [edi + 0x54c]
mov dword [esp + 0x60], edx
call fcn.100040e0
mov ecx, dword [esp + 0x60]
cmp word [ecx], 0x5c
jne 0x100678fa
cmp dword [edi + 0xc], 0
jne 0x100678fa
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx + 0x438]
mov ecx, dword [ecx + 0x434]
push edx
mov edx, dword [esp + 0x34]
lea eax, [edi + 0x1b64]
push eax
mov eax, dword [esp + 0x68]
push eax
lea ebx, [edi + 0x195c]
call fcn.10074c40
mov dword [esp + 0x24], eax
and eax, 0xffff
mov dword [esp + 0x18], eax
je 0x100678f6
mov ecx, dword [esp + 0x30]
cmp dword [ecx + 0x50], 0
je 0x100678f6
mov esi, dword [esp + 0x1c]
mov ebx, dword [esi]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov edx, ecx
mov ecx, dword [edx + 0x1c]
mov edx, dword [ecx]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0xc]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x10067845
call sub.Comn.dll_GetObjectLog
mov ebx, eax
mov esi, dword [ebx]
push 0x430
mov edi, str..UiTaskMgr.cpp
add esi, 0xc
call fcn.10064760
mov ecx, dword [esi]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ebx
call ecx
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x34]
add esp, 0xc
mov ebx, dword [esi]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x1c]
call eax
mov eax, dword [edi + 4]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
shr eax, 8
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x5c]
mov eax, dword [eax + 4]
push edx
call eax
mov edi, dword [edi + 0xc]
call sub.Comn.dll_GetObjectLang
cmp edi, 1
jne 0x100678a4
push str.20055
jmp 0x100678b5
cmp edi, 2
jne 0x100678b0
push str.20056
jmp 0x100678b5
push str.20052
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xc8], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xc8]
push eax
call edx
mov ebx, dword [esp + 0x30]
jmp 0x1006dfef
mov ebx, dword [esp + 0x30]
lea ecx, [edi + 0x54c]
call fcn.10030c20
mov eax, dword [esp + 0x60]
cmp word [eax], 0x5c
jne 0x1006794e
push 0x206
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebx + 0x2c], 0
je 0x1006794e
mov ecx, dword [esp + 0x60]
lea edi, [esp + 0x8d04]
call fcn.10074d90
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
mov dword [esp + 0x38], 0
call eax
test eax, eax
jbe 0x100679c1
add edi, 0x1d74
mov dword [esp + 0x4c], edi
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x38]
add esi, 0x218
call fcn.10078900
mov esi, eax
mov eax, dword [esp + 0x4c]
mov edi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x3f34]
mov esi, dword [esp + 0x38]
mov edx, dword [ecx]
add eax, 0x200
mov dword [esp + 0x4c], eax
mov eax, dword [edx + 0x28]
add esi, 1
mov dword [esp + 0x38], esi
call eax
cmp esi, eax
jb 0x10067972
mov esi, dword [esp + 0x20]
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
cmp dword [ebx + 0x11b8], 0
jne 0x10067abf
cmp dword [ebx + 0x50], 0
jne 0x10067abf
mov edx, dword [esi]
mov eax, dword [edx + 0x110]
mov ecx, esi
call eax
test eax, eax
je 0x10067abf
mov ecx, dword [esp + 0x2c]
push ecx
mov edx, esi
mov ecx, ebx
call fcn.100742b0
lea edx, [esp + 0x3f34]
push edx
push ebx
call fcn.10065ef0
mov eax, ebx
call fcn.100652c0
mov eax, dword [esp + 0x54]
mov edi, dword [esp + 0x2c]
push eax
push edi
call fcn.1006e180
push edi
mov esi, eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
lea ecx, [esp + 0x3fbc]
mov byte [esp + 0x99b0], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f68]
mov byte [esp + 0x99b0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fd8]
mov byte [esp + 0x99b0], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f4c]
mov dword [esp + 0x99b0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, esi
jmp 0x1006e0f1
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 0x434]
mov ecx, dword [ecx + 0x438]
mov edi, dword [esp + 0x1c]
mov dword [ebx + 0x11c8], ecx
mov ecx, dword [esp + 0x14]
mov dword [ebx + 0x11cc], eax
mov dword [ebx + 0x11d0], 0
mov edx, dword [ecx]
mov ecx, dword [edi]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov edx, dword [esp + 0x28]
mov edx, dword [edx + 4]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
shr edx, 8
and edx, 1
push edx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov edx, dword [edx + 4]
push eax
call edx
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0xc]
cmp eax, 1
jne 0x10067b70
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20055
call eax
mov edx, dword [esp + 0x40]
jmp 0x10067bbd
cmp eax, 2
jne 0x10067b9a
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20056
call eax
mov edx, dword [esp + 0x40]
jmp 0x10067bbd
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20052
call eax
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [edx]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x110]
mov ecx, esi
mov dword [esp + 0x24], 0
call eax
test eax, eax
je 0x10067de6
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 1
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074730
test eax, eax
jne 0x10067c32
mov dword [ebx + 0x94], 0x48d105d
mov dword [esp + 0x24], 0x48e105d
jmp 0x10067d9f
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi + 0x434]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
push eax
mov eax, dword [edi + 0x438]
push eax
call edx
mov edx, dword [esp + 0x54]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov ecx, dword [edi + 0x434]
mov edx, dword [esp + 0x28]
push ecx
push 0
push 0
push 0x21c
add edx, 0x28
push edx
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0x438]
push 0x116
call eax
mov eax, ebx
call fcn.100652f0
cmp dword [esp + 0x24], 0
jne 0x10067dd4
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x1c]
push ecx
mov eax, edi
mov ecx, ebx
call fcn.1006f0f0
test eax, eax
jne 0x10067d02
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x4a3
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064760
mov edx, dword [esp + 0x44]
add esp, 4
push eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push str._s:_PolicyManager_error.
push edx
call ecx
mov edi, dword [esp + 0x28]
add esp, 0xc
lea edx, [esp + 0x9794]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esi]
mov edx, dword [eax + 0x12c]
mov ecx, esi
call edx
test eax, eax
je 0x10067d54
mov eax, dword [esi]
mov edx, dword [eax + 0x174]
lea ecx, [esp + 0x244]
push ecx
mov ecx, esi
call edx
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
call fcn.1006f0d0
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 2
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074730
test eax, eax
jne 0x10067dd4
mov dword [ebx + 0x94], 0x4b21065
mov dword [esp + 0x24], 0x4b31065
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x18]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
push eax
lea esi, [ebx + 0x11c8]
call fcn.100650b0
add esp, 8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [esp + 0x20]
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x20], 1
jmp 0x10067e76
push 0
push 0x82
push 2
push 0
push 0
push 0x40000000
lea edx, [esp + 0x97ac]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
push 0
lea eax, [esp + 0x44]
push eax
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
push ecx
push eax
push edi
mov dword [esp + 0x54], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x32
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov dword [ebx + 0x54], 0
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x14]
mov edi, dword [edx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20047
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0x20], 0
mov edi, dword [esp + 0x24]
movzx ecx, di
mov dword [esp + 0xd0], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xd0]
push eax
call edx
test edi, edi
jne 0x1006810d
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [esp + 0x28]
mov ecx, dword [ebx + 0x1c]
push eax
push ecx
mov ecx, esi
xor edx, edx
call fcn.100449a0
mov eax, dword [ebx + 0x1c]
mov edi, dword [esp + 0x1c]
mov edx, dword [eax]
mov ecx, dword [edi]
mov edx, dword [edx + 0xcc]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x1c]
call edx
cmp eax, 0xffffffff
mov dword [esp + 0x38], eax
jne 0x10067f31
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x4d9
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064760
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
add esp, 4
push eax
mov eax, dword [esp + 0x44]
push str._s:_get_task_index_fail
push eax
call edx
mov edi, dword [esp + 0x28]
add esp, 0xc
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [esp + 0x38]
mov eax, dword [eax + 0x1b0]
push edx
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x620]
mov ecx, esi
call eax
test eax, eax
je 0x10068111
mov edx, dword [esi]
mov eax, dword [edx + 0x660]
mov ecx, esi
call eax
test eax, eax
je 0x10068111
mov edx, dword [esi]
mov eax, dword [edx + 0x11c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov dword [esp + 0x18], eax
mov eax, dword [edx + 0x628]
mov ecx, esi
call eax
test eax, eax
jne 0x10067fee
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x38]
call eax
test eax, eax
jne 0x10067fee
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x70]
call eax
cmp eax, 4
jne 0x10067fd0
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x98]
call eax
cmp eax, 4
jne 0x10067fd0
call fcn.100022a0
test eax, eax
je 0x10067fee
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x70]
call eax
cmp eax, 6
jne 0x10068082
call fcn.100300d0
jmp 0x10068082
push 0x206
mov eax, 0x46
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20041
call eax
push eax
lea ecx, [esp + 0x8d08]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8d04]
call fcn.10001650
cmp dword [esp + 0x38], 0xffffffff
je 0x1006807e
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [ecx + 0x1c]
push eax
push edx
call fcn.1004a440
mov ebx, dword [esp + 0x30]
mov eax, 0x64
push 0x206
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
lea eax, [esp + 0x8b02]
push 0
push eax
mov dword [ebx + 0xa0], 1
mov word [esp + 0x8b08], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20042
call eax
push eax
lea ecx, [esp + 0x8b00]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8afc]
call fcn.10001650
mov eax, dword [esp + 0x18]
call fcn.100745e0
mov ebx, dword [esp + 0x30]
jmp 0x10068111
mov edi, dword [esp + 0x1c]
mov eax, dword [ebx + 0x1c]
mov edx, dword [eax]
mov ecx, dword [edi]
mov edx, dword [edx + 0xcc]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x1c]
call edx
cmp eax, 0xffffffff
mov dword [esp + 0x58], eax
jne 0x10068183
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x510
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064760
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
add esp, 4
push eax
mov eax, dword [esp + 0x44]
push str._s:_get_task_index_fail
push eax
call edx
mov eax, dword [esp + 0x64]
add esp, 0xc
mov ecx, dword [esp + 0x28]
push ecx
mov ecx, esi
push eax
mov esi, ebx
call fcn.10076010
mov dword [ebx + 0x20], 1
jmp 0x1006dfef
mov edi, dword [esp + 0x3f34]
mov edx, dword [edi]
mov eax, dword [edx + 0x10]
mov ecx, edi
call eax
mov edx, dword [edi]
mov esi, eax
mov eax, dword [edx + 0x28]
mov ecx, edi
mov dword [esp + 0x1c], esi
call eax
mov edi, eax
imul edi, edi, 0xf2a
add edi, 0x21a7
push edi
mov dword [esp + 0x5c], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push edi
push 0
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x38]
mov dword [eax + 4], edi
lea ecx, [edi - 0x11]
mov dword [eax + 0xc], ecx
lea edi, [eax + 0x10]
mov dword [eax], 0x50465242
mov dword [eax + 8], 5
mov dword [edi], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x2d4]
add esp, 0xc
mov ecx, esi
mov dword [esp + 0x28], edi
call eax
mov dword [edi + 8], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2dc]
mov ecx, esi
call eax
mov dword [edi + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2d8]
mov ecx, esi
call eax
mov dword [edi + 0x10], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2e4]
mov ecx, esi
call eax
mov dword [edi + 0x14], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2e8]
mov ecx, esi
call eax
mov dword [edi + 0x18], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2ec]
mov ecx, esi
call eax
mov dword [edi + 0x1c], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2f0]
mov ecx, esi
call eax
mov dword [edi + 0x20], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2f4]
mov ecx, esi
call eax
mov dword [edi + 0x24], eax
mov dword [edi + 0x28], edx
mov edx, dword [esi]
mov eax, dword [edx + 0x2f8]
mov ecx, esi
call eax
mov dword [edi + 0x2c], eax
mov edx, dword [esi]
mov ecx, esi
mov eax, dword [edx + 0x2fc]
call eax
mov dword [edi + 0x30], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2e0]
mov ecx, esi
call eax
mov ecx, dword [esp + 0x3f34]
mov dword [edi + 4], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov dword [edi + 0x2192], eax
mov edx, dword [esi]
mov edx, dword [edx + 0x320]
lea eax, [esp + 0x174]
push eax
mov ecx, esi
call edx
mov edx, dword [eax]
mov dword [edi + 0x38], edx
mov edx, dword [eax + 4]
lea ecx, [edi + 0x38]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x508]
mov dword [esp + 0x20], ecx
mov ecx, esi
call eax
mov ecx, dword [edi + 0x252]
xor ecx, eax
and ecx, 1
xor dword [edi + 0x252], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x5cc]
mov ecx, esi
call eax
mov ecx, dword [edi + 0x252]
and eax, 3
add eax, eax
and ecx, 0xffffffe1
or eax, ecx
mov dword [edi + 0x252], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x5ac]
mov ecx, esi
call eax
mov ecx, dword [ebx + 0x11dc]
mov dword [ebx + 0x11bc], eax
mov eax, dword [esp + 0x20]
mov dword [ecx + 8], 3
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [esp + 0x3f24], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x3f28], ecx
mov dword [esp + 0x3f2c], edx
mov edx, dword [esi]
lea ecx, [edi + 0x48]
mov dword [esp + 0x3f30], eax
mov eax, dword [edx + 0x324]
mov dword [esp + 0x54], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x54]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x304]
mov ecx, esi
call eax
lea ecx, [edi + 0x356]
mov edx, eax
mov eax, ecx
call fcn.100040a0
lea edx, [edi + 0x55e]
mov eax, dword [esi]
mov dword [esp + 0x34], edx
mov edx, dword [eax + 0x308]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x34]
call fcn.100040a0
mov eax, dword [esi]
mov edx, dword [eax + 0x30c]
mov ecx, esi
call edx
mov edx, eax
lea eax, [edi + 0x766]
call fcn.100040a0
mov eax, dword [esi]
mov edx, dword [eax + 0x310]
mov ecx, esi
call edx
mov edx, eax
lea eax, [edi + 0x96e]
call fcn.100040a0
mov edx, dword [esi]
lea eax, [edi + 0x256]
mov dword [esp + 0x5c], eax
mov eax, dword [edx + 0x300]
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x5c]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x314]
mov ecx, esi
call eax
lea ecx, [edi + 0x196e]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x318]
mov ecx, esi
call eax
lea ecx, [edi + 0x1b76]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov eax, dword [esi]
lea edx, [edi + 0x1d7e]
mov dword [esp + 0x24], edx
mov edx, dword [eax + 0x1a0]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x24]
call fcn.100040a0
mov edx, dword [esi]
lea eax, [edi + 0x1f86]
mov dword [esp + 0x4c], eax
mov eax, dword [edx + 0x1a4]
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x4c]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x3c]
mov ecx, esi
call eax
mov esi, dword [esp + 0x3f34]
movzx ecx, al
mov dword [edi + 0x218e], ecx
mov dword [ebx + 0x28], 1
mov edx, dword [esi]
mov eax, dword [edx + 0x4c]
mov ecx, esi
call eax
lea ecx, [esp + 0x70]
push ecx
mov ecx, eax
call fcn.10078990
mov byte [esp + 0x99b0], 9
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x38], 0
call eax
test eax, eax
jbe 0x10068562
mov ecx, edi
add ecx, 0x21a8
mov dword [esp + 0x18], ecx
jmp 0x10068510
mov edi, dword [esp + 0x38]
lea esi, [esp + 0x70]
call fcn.1005bef0
mov edx, dword [esp + 0x18]
lea edi, [edx - 0x12]
mov esi, eax
mov ecx, 0x3ca
rep movsd dword es:[edi], dword [esi]
push 0x200
push edx
movsw word es:[edi], word [esi]
call fcn.10002390
mov ecx, dword [esp + 0x3f3c]
mov esi, dword [esp + 0x40]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add dword [esp + 0x20], 0xf2a
add esi, 1
add esp, 8
mov dword [esp + 0x38], esi
call eax
cmp esi, eax
jb 0x10068510
xor edi, edi
push 0x7e
lea ecx, [esp + 0x9492]
push edi
push ecx
mov word [esp + 0x9498], di
call sub.MSVCR80.dll_memset
mov esi, dword [esp + 0x34]
movzx edx, byte [esi + 0x47]
movzx eax, byte [esi + 0x46]
movzx ecx, byte [esi + 0x45]
add esp, 0xc
push edx
movzx edx, byte [esi + 0x44]
push eax
movzx eax, byte [esi + 0x43]
push ecx
movzx ecx, byte [esi + 0x42]
push edx
movzx edx, byte [esi + 0x41]
push eax
movzx eax, byte [esi + 0x40]
push ecx
movzx ecx, word [esi + 0x3e]
push edx
movzx edx, word [esi + 0x3c]
push eax
mov eax, dword [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
push ecx
lea edx, [esp + 0x94b8]
push 0x1014c4a8
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
push 0x206
lea eax, [esp + 0x9592]
push edi
push eax
mov word [esp + 0x9598], di
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x958c]
call fcn.10002ad0
mov edi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10150e6c
lea ecx, [esp + 0x9590]
push 0x104
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x948c]
push edx
lea eax, [esp + 0x9590]
push 0x104
push eax
call edi
add esp, 0xc
lea ecx, [esp + 0x958c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x100686d3
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea edx, [esp + 0x95a4]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
xor eax, eax
push 0x30bc
push eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x5a44], eax
lea eax, [esp + 0x5a48]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0
lea ecx, [esp + 0x44]
push ecx
push 0x30c0
lea edx, [esp + 0x5a48]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x5c92]
call fcn.100040a0
lea edx, [esp + 0x63aa]
lea eax, [esi + 0x96e]
call fcn.100040a0
mov eax, dword [esp + 0x34]
push 0x104
push eax
call fcn.10002390
lea eax, [esi + 0x766]
push 0x104
push eax
call fcn.10002390
mov ecx, dword [esp + 0x6c]
add esp, 0x10
call fcn.1002f880
test eax, eax
jle 0x10068712
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x3c], 1
jmp 0x1006871f
mov edx, dword [ebx + 0x11dc]
mov dword [edx + 0x3c], 0
lea ecx, [esi + 0x96e]
call fcn.1002f880
test eax, eax
jle 0x1006873d
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 4], 1
jmp 0x1006874a
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x34]
lea edx, [ebx + 0x11e0]
mov eax, 0x104
mov dword [esp + 0x60], edx
call fcn.100040e0
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
mov edx, dword [esp + 0x60]
cmp word [edx], 0x5c
jne 0x10068924
cmp dword [esi + 0x18], 0
jne 0x10068924
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x110]
call edx
test eax, eax
je 0x10068924
mov eax, dword [esp + 0x3f34]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [esp + 0x38]
push ecx
mov ecx, dword [eax + 8]
call fcn.10074c40
mov edi, eax
and edi, 0xffff
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], edi
je 0x1006891c
mov edx, dword [esp + 0x30]
cmp dword [edx + 0x50], 0
je 0x1006891c
mov esi, dword [esp + 0x20]
mov ebx, dword [esi]
mov eax, edx
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0xc]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x10068850
call sub.Comn.dll_GetObjectLog
mov ebx, dword [eax]
push 0x58b
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
add ebx, 0xc
call fcn.10064760
mov ecx, dword [esp + 0x44]
mov edx, dword [ebx]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov edi, dword [esp + 0x24]
add esp, 0xc
mov ebx, dword [esi]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x252]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x54]
mov eax, dword [eax + 4]
push edx
call eax
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x100688b3
call sub.Comn.dll_GetObjectLang
push str.20057
jmp 0x100688ce
cmp eax, 2
jne 0x100688c4
call sub.Comn.dll_GetObjectLang
push str.20058
jmp 0x100688ce
call sub.Comn.dll_GetObjectLang
push str.20048
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov dword [esp + 0xdc], edi
lea edx, [esp + 0xdc]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
call eax
lea esi, [esp + 0x70]
mov byte [esp + 0x99b0], 5
call fcn.10029f90
mov ebx, dword [esp + 0x30]
jmp 0x1006dfef
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x20]
call fcn.10030c20
mov ecx, dword [esp + 0x60]
cmp word [ecx], 0x5c
jne 0x1006897e
push 0x206
lea edx, [esp + 0x8d0a]
push 0
push edx
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebx + 0x2c], 0
je 0x1006897e
mov ecx, dword [esp + 0x60]
lea edi, [esp + 0x8d04]
call fcn.10074d90
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
cmp dword [ebx + 0x11b8], 0
jne 0x10068a70
cmp dword [ebx + 0x50], 0
jne 0x10068a70
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x110]
call edx
test eax, eax
je 0x10068a70
mov esi, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
push esi
mov ecx, ebx
call fcn.100742b0
lea eax, [esp + 0x3f34]
push eax
push ebx
call fcn.10065ef0
mov ecx, dword [esp + 0x58]
push ecx
push esi
call fcn.1006e180
push esi
mov edi, eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
lea esi, [esp + 0x74]
add esp, 4
call fcn.10029f90
lea ecx, [esp + 0x3fbc]
mov byte [esp + 0x99b0], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f68]
mov byte [esp + 0x99b0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fd8]
mov byte [esp + 0x99b0], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f4c]
mov dword [esp + 0x99b0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, edi
jmp 0x1006e0f1
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov edx, dword [esp + 0x14]
mov dword [ebx + 0x11c8], ecx
mov dword [ebx + 0x11cc], eax
mov dword [ebx + 0x11d0], 0
mov ecx, dword [edi]
mov edx, dword [edx]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x252]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
and edx, 1
push edx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x54]
mov edx, dword [edx + 4]
push eax
call edx
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x10068b0f
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20057
call eax
mov edx, dword [esp + 0x40]
jmp 0x10068b5c
cmp eax, 2
jne 0x10068b39
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20058
call eax
mov edx, dword [esp + 0x40]
jmp 0x10068b5c
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20048
call eax
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [edx]
call eax
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
mov dword [esp + 0x24], 0
call eax
test eax, eax
je 0x10068d57
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 1
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074730
test eax, eax
jne 0x10068bd3
mov dword [ebx + 0x94], 0x5d3105d
mov dword [esp + 0x24], 0x5d4105d
jmp 0x10068d1e
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
push eax
mov eax, dword [edi + 0xc]
push eax
call edx
mov edx, dword [esp + 0x58]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov ecx, dword [edi + 8]
push ecx
push 0
push 0
push 0x21c
lea edx, [esi + 0x34]
push edx
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0xc]
push 0x116
call eax
mov eax, ebx
call fcn.100652f0
cmp dword [esp + 0x24], 0
jne 0x10068d48
mov ecx, dword [esp + 0x5c]
mov edi, dword [esp + 0x20]
push ecx
mov eax, edi
mov ecx, ebx
call fcn.1006f0f0
test eax, eax
jne 0x10068c93
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x5e4
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064760
mov edx, dword [esp + 0x44]
add esp, 4
push eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push str._s:_PolicyManager_error.
push edx
call ecx
mov edi, dword [esp + 0x2c]
add esp, 0xc
lea edx, [esp + 0x958c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x12c]
call edx
test eax, eax
je 0x10068cd3
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.1006f0d0
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 2
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074730
test eax, eax
jne 0x10068d48
mov dword [ebx + 0x94], 0x5f01065
mov dword [esp + 0x24], 0x5f11065
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x18]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
push eax
lea esi, [ebx + 0x11c8]
call fcn.100650b0
mov esi, dword [esp + 0x30]
add esp, 8
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x20], 1
jmp 0x10068db9
push 0
push 0x82
push 2
push 0
push 0
push 0x40000000
lea edx, [esp + 0x95a4]
push edx
mov dword [esp + 0x5c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, dword [esi]
push 0
mov edi, eax
lea eax, [esp + 0x44]
push eax
push ecx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebx + 0x11dc]
mov eax, 0x32
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
xor eax, eax
mov dword [ebx + 0x54], eax
mov dword [edx + 0x20], eax
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
movzx eax, di
mov dword [esp + 0x84], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x84]
push eax
call edx
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
jne 0x10069079
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [ebx + 0x1c]
push esi
mov esi, dword [esp + 0x20]
push eax
mov ecx, esi
xor edx, edx
call fcn.10042860
mov eax, dword [ebx + 0x1c]
mov edi, dword [esp + 0x20]
mov edx, dword [eax]
mov ecx, dword [edi]
mov edx, dword [edx + 0xcc]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x1c]
call edx
cmp eax, 0xffffffff
mov dword [esp + 0x3c], eax
jne 0x10068e7f
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0x616
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
add esi, 0xc
call fcn.10064760
mov ecx, dword [esi]
add esp, 4
push eax
mov eax, dword [esp + 0x44]
push str._s:_get_task_index_fail
push eax
call ecx
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x48]
add esp, 0xc
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x1b0]
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x620]
mov ecx, esi
call eax
test eax, eax
je 0x1006907d
mov edx, dword [esi]
mov eax, dword [edx + 0x660]
mov ecx, esi
call eax
test eax, eax
je 0x1006907d
mov edx, dword [esi]
mov eax, dword [edx + 0x11c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x628]
mov ecx, esi
call eax
test eax, eax
jne 0x10068f2e
mov edx, dword [edi]
mov eax, dword [edx + 0x38]
mov ecx, edi
call eax
test eax, eax
jne 0x10068f2e
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 4
jne 0x10068f12
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
mov ecx, edi
call eax
cmp eax, 4
jne 0x10068f12
call fcn.100022a0
test eax, eax
je 0x10068f2e
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 6
jne 0x10068ff2
call fcn.100300d0
jmp 0x10068ff2
push 0x206
mov eax, 0x46
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20041
call eax
push eax
lea ecx, [esp + 0x8d08]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8d04]
call fcn.10001650
mov ebx, dword [esp + 0x30]
mov edx, dword [ebx + 0x1c]
mov esi, dword [edx]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x320]
lea edx, [esp + 0x194]
push edx
add esi, 0xcc
call eax
mov edx, dword [eax]
push edi
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [esi]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x1c]
call edx
push eax
mov eax, dword [ebx + 0x1c]
push eax
call fcn.1004a440
push 0x206
mov eax, 0x64
lea ecx, [esp + 0x8b02]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov dword [ebx + 0xa0], 1
mov word [esp + 0x8b08], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20042
call eax
push eax
lea ecx, [esp + 0x8b00]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8afc]
call fcn.10001650
mov eax, edi
call fcn.100745e0
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
mov esi, dword [edi]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 4]
mov dword [eax + 4], esi
mov esi, dword [edi + 8]
mov dword [eax + 8], esi
mov esi, dword [edi + 0xc]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
mov dword [esp + 0x3c], eax
jne 0x1006dfc6
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0x644
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
add esi, 0xc
call fcn.10064760
mov ecx, dword [esp + 0x44]
mov edx, dword [esi]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov eax, dword [esp + 0x48]
jmp 0x1006dfc3
mov esi, dword [esp + 0x3f34]
mov edx, dword [esi]
mov eax, dword [edx + 0x10]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x58], edi
call eax
mov esi, eax
imul esi, esi, 0x420
add esi, 0x955
push esi
mov dword [esp + 0x50], esi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push esi
push 0
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x38]
mov dword [eax + 4], esi
mov dword [eax], 0x50465242
mov dword [eax + 8], 1
add esi, 0xffffffef
mov dword [eax + 0xc], esi
mov ecx, eax
mov dword [ebx + 0x28], 2
mov edx, dword [ecx + 0xc]
lea esi, [eax + 0x10]
mov dword [esi], edx
mov eax, dword [edi]
mov edx, dword [eax + 0x1a8]
add esp, 0xc
mov ecx, edi
call edx
movzx ecx, byte [esi + 4]
xor cl, al
and ecx, 1
xor word [esi + 4], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x1ac]
mov ecx, edi
call eax
lea ecx, [eax + eax]
xor cl, byte [esi + 4]
and ecx, 2
xor word [esi + 4], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x1b0]
mov ecx, edi
call eax
lea ecx, [eax*4]
xor cl, byte [esi + 4]
and ecx, 4
xor word [esi + 4], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x1b4]
mov ecx, edi
call eax
lea ecx, [eax*8]
xor cl, byte [esi + 4]
and ecx, 8
xor word [esi + 4], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x1b8]
mov ecx, edi
call eax
shl eax, 4
xor al, byte [esi + 4]
mov ecx, edi
and eax, 0x10
xor word [esi + 4], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x1bc]
call eax
shl eax, 5
xor al, byte [esi + 4]
and eax, 0x20
xor word [esi + 4], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x1c0]
mov ecx, edi
call eax
movzx ecx, word [esi + 4]
and cx, 0x7ff
shl eax, 0xb
or cx, ax
mov word [esi + 4], cx
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov dword [esi + 0x940], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x1d4]
mov ecx, edi
call eax
shl eax, 6
xor al, byte [esi + 4]
mov ecx, edi
and eax, 0x40
xor word [esi + 4], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x1d8]
call eax
shl eax, 7
xor al, byte [esi + 4]
mov ecx, edi
and eax, 0x80
xor word [esi + 4], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x1e0]
call eax
xor ecx, ecx
mov ch, al
xor cx, word [esi + 4]
and cx, 0x100
xor word [esi + 4], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x1dc]
mov ecx, edi
call eax
mov word [esi + 6], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x5b4]
mov ecx, edi
call eax
shl eax, 0xa
xor ax, word [esi + 4]
mov ecx, edi
and ax, 0x400
xor word [esi + 4], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x1e4]
call eax
mov dword [esi + 8], eax
call sub.Comn.dll_GetObjectLog
movzx ecx, word [esi + 4]
shr ecx, 0xa
mov dword [esp + 0x40], eax
mov eax, dword [eax]
and ecx, 1
push ecx
add eax, 0xc
push 0xb20
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
call fcn.10064760
mov edx, dword [esp + 0x48]
add esp, 4
push eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push str._s:_IsDelEFIActive__d
push edx
call ecx
mov edi, dword [esp + 0x68]
add esp, 0x10
mov edx, dword [edi]
mov eax, dword [edx + 0x1c4]
mov ecx, edi
call eax
mov ecx, dword [eax + 4]
add eax, 4
mov dword [esi + 0x10], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x14], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x18], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1c], edx
mov eax, dword [edi]
mov edx, dword [eax + 0x1c4]
mov ecx, edi
call edx
mov eax, dword [eax]
mov dword [esi + 0xc], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x5ac]
mov ecx, edi
call eax
mov dword [ebx + 0x11bc], eax
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x18]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esp + 0x3f28], edx
mov dword [esp + 0x3f2c], eax
mov eax, dword [edi]
lea edx, [esi + 0x20]
mov dword [esp + 0x3f30], ecx
mov dword [esp + 0x58], edx
mov edx, dword [eax + 0x1c4]
mov ecx, edi
call edx
mov edx, eax
mov eax, dword [esp + 0x58]
add edx, 0x14
call fcn.100040a0
mov eax, dword [edi]
mov edx, dword [eax + 0x1c8]
mov ecx, edi
call edx
lea ecx, [esi + 0x228]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov edx, dword [edx + 0x1cc]
lea eax, [esi + 0x738]
push eax
lea ecx, [esi + 0x530]
push ecx
mov ecx, edi
call edx
lea ecx, [esi + 0x328]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov eax, dword [esp + 0x3f34]
add eax, 0x228
mov dword [esp + 0x20], 0
call fcn.10028710
test eax, eax
jbe 0x10069671
mov eax, dword [esp + 0x2c]
add eax, 0x95c
mov dword [esp + 0x18], eax
lea esp, [esp]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x20]
add esi, 0x228
call fcn.10078c90
mov ecx, dword [eax]
mov edx, dword [ecx]
mov edx, dword [edx]
lea eax, [esp + 0x724]
push eax
call edx
mov ecx, dword [esp + 0x18]
add ecx, 0x1f8
lea edi, [ecx - 0x200]
mov esi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x20]
add esi, 0x228
call fcn.10078c90
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0xb24]
push ecx
mov ecx, eax
call edx
mov edi, dword [esp + 0x18]
mov esi, eax
mov eax, dword [esp + 0x18]
movzx eax, word [eax]
add edi, 0x1f8
test eax, 0x100
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
je 0x100695d3
test al, 1
jne 0x100695d3
mov ecx, dword [esp + 0x18]
test byte [ecx + 0x200], 1
jne 0x100695d3
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x20]
add esi, 0x228
call fcn.10078c90
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x4c]
call eax
test eax, eax
je 0x10069645
mov esi, dword [esp + 0x3f34]
add esi, 0x228
call fcn.10078c90
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [esp + 0x3524]
push ecx
mov ecx, eax
call edx
mov esi, eax
mov ecx, 0x280
lea edi, [esp + 0x503c]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x20]
add esi, 0x228
call fcn.10078c90
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [esp + 0x2124]
push ecx
mov ecx, eax
call edx
mov edx, dword [esp + 0x591c]
mov esi, eax
mov eax, dword [esp + 0x18]
mov ecx, 0x280
lea edi, [esp + 0x410c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x5918]
mov dword [eax + 0x3f8], ecx
mov ecx, dword [esp + 0x5920]
mov dword [eax + 0x3fc], edx
mov edx, dword [esp + 0x5924]
mov dword [eax + 0x400], ecx
mov ecx, dword [esp + 0x49e8]
mov dword [eax + 0x404], edx
mov edx, dword [esp + 0x49ec]
mov dword [eax + 0x408], ecx
mov ecx, dword [esp + 0x49f0]
mov dword [eax + 0x40c], edx
mov edx, dword [esp + 0x49f4]
mov dword [eax + 0x410], ecx
mov dword [eax + 0x414], edx
jmp 0x10069645
mov eax, dword [esp + 0x18]
movzx eax, word [eax + 0x200]
test eax, 0x100
je 0x10069645
test al, 1
jne 0x10069645
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x20]
add esi, 0x228
call fcn.10078c90
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [esp + 0xd24]
push ecx
mov ecx, eax
call edx
mov edx, dword [eax + 0x8dc]
mov ecx, dword [esp + 0x18]
add eax, 0x8dc
add ecx, 0x408
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x3f34]
add dword [esp + 0x18], 0x420
add esi, 1
add eax, 0x228
mov dword [esp + 0x20], esi
call fcn.10028710
cmp esi, eax
jb 0x10069410
call sub.diskmgr.dll_CreateDdmManager
mov esi, eax
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
mov dword [esp + 0x40], esi
call eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x2c]
imul ecx, ecx, 0x420
add eax, 0x10
lea edx, [ecx + eax + 0xb44]
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], edx
lea esp, [esp]
mov eax, dword [esp + 0x3f34]
mov edx, dword [eax + 0x21c]
add eax, 0x218
test edx, edx
je 0x100697dd
mov ecx, dword [eax + 8]
sub ecx, edx
mov eax, 0x3e0f83e1
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x20], eax
jae 0x100697dd
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x218
call fcn.10078cb0
mov edi, dword [esp + 0x1c]
add edi, 0xfffffe00
mov esi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x218
call fcn.10078cb0
mov edi, dword [esp + 0x1c]
mov esi, eax
add esi, 0x210
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x218
call fcn.10078cb0
mov edx, dword [eax + 0x200]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x3f34]
add eax, 0x200
add ecx, 0x200
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
add esi, 0x218
mov dword [ecx + 0xc], eax
call fcn.10078cb0
mov edx, dword [eax + 0x410]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x40]
add eax, 0x410
mov dword [ecx + 0x210], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x214], edx
mov edx, dword [eax + 8]
mov dword [ecx + 0x218], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0x21c], eax
mov eax, 1
add dword [esp + 0x20], eax
add ecx, 0x420
add dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
jmp 0x100696b0
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov esi, dword [esp + 0x2c]
mov edi, dword [esi + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
add esi, 0x10
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x14]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x18]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x1c]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x58]
mov edx, dword [edx + 4]
push eax
call edx
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20049
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 0x444]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0x448]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov edx, dword [esp + 0x4c]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov ecx, dword [0x1014692c]
mov edi, eax
test edi, edi
mov eax, dword [esp + 0x80]
mov dword [eax], ecx
mov edx, dword [0x10146930]
mov dword [eax + 4], edx
mov ecx, dword [0x10146934]
mov dword [eax + 8], ecx
mov edx, dword [0x10146938]
mov dword [esp + 0x24], edi
mov dword [eax + 0xc], edx
jne 0x100698d4
mov eax, dword [ebx + 0x1c]
push 2
push eax
mov ecx, esi
call fcn.10040970
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
movzx ecx, di
mov dword [esp + 0xe4], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xe4]
push eax
call edx
jmp 0x1006dfef
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0x28]
mov ecx, edi
call edx
shl eax, 9
add eax, 0x63d
push eax
mov dword [esp + 0x58], eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov edi, eax
mov eax, dword [esp + 0x58]
add esp, 4
push eax
push 0
push edi
mov dword [esp + 0x38], edi
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x3f40]
mov dword [edi + 4], eax
add eax, 0xffffffef
mov dword [edi + 0xc], eax
mov dword [edi], 0x50465242
mov dword [edi + 8], 3
mov dword [edi + 0x10], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add esp, 0xc
call eax
mov dword [edi + 0x638], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x230]
mov ecx, esi
call eax
mov dword [edi + 0x14], eax
mov edx, dword [esi]
mov edx, dword [edx + 0x234]
lea eax, [esp + 0x164]
push eax
mov ecx, esi
call edx
mov ecx, dword [eax]
mov dword [edi + 0x18], ecx
mov edx, dword [eax + 4]
mov dword [edi + 0x1c], edx
mov ecx, dword [eax + 8]
mov dword [edi + 0x20], ecx
mov edx, dword [eax + 0xc]
mov dword [edi + 0x24], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.100652c0
mov eax, dword [esi]
mov edx, dword [eax + 0x240]
mov ecx, esi
call edx
mov edi, dword [esp + 0x2c]
lea ecx, [edi + 0x330]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x23c]
mov ecx, esi
call eax
lea ecx, [edi + 0x230]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x238]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x28]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x1a0]
mov ecx, esi
call eax
lea ecx, [edi + 0x538]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x1a4]
mov ecx, esi
call eax
lea ecx, [edi + 0x5b8]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
mov dword [esp + 0x18], 0
call eax
test eax, eax
jbe 0x10069b0d
mov ecx, edi
add ecx, 0x67a
mov dword [esp + 0x5c], ecx
lea esp, [esp]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x3f34]
call fcn.10065070
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x324]
push ecx
mov ecx, eax
call edx
mov edi, dword [esp + 0x5c]
add edi, 0xffffffc2
mov esi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x3f34]
call fcn.10065070
cmp word [eax], 0
je 0x10069ae8
call fcn.10065070
mov ax, word [eax]
mov ecx, dword [esp + 0x5c]
mov word [ecx], ax
mov ecx, dword [esp + 0x3f34]
mov esi, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add dword [esp + 0x5c], 0x200
add esi, 1
mov dword [esp + 0x18], esi
call eax
cmp esi, eax
jb 0x10069a90
mov esi, dword [esp + 0x2c]
mov edi, dword [esi + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x1c]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x20]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x24]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
lea eax, [esi + 0x28]
push eax
mov eax, dword [edx + 4]
call eax
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20050
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
mov ecx, dword [ebx + 8]
test ecx, ecx
je 0x10069b80
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [ebx + 8], 0
call sub.FuncLogic.dll_CreateMountDisk
mov dword [ebx + 8], eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov edx, dword [esp + 0x54]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
push esi
call eax
movzx ecx, ax
mov dword [esp + 0x98], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x98]
push eax
call edx
jmp 0x1006dfef
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
mov edi, eax
push 0x639
mov dword [esp + 0x44], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0x639
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov eax, 0x628
mov dword [esi], 0x50465242
mov dword [esi + 4], 0x639
mov dword [esi + 8], 4
mov dword [esi + 0xc], eax
add esp, 0xc
mov dword [esi + 0x10], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x25c]
lea ecx, [esp + 0x1d4]
push ecx
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x18], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x1c], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x20], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x24], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.100652c0
mov edi, dword [esp + 0x40]
mov eax, dword [edi]
mov edx, dword [eax + 0x258]
mov ecx, edi
call edx
mov dword [esi + 0x14], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x268]
mov ecx, edi
call edx
lea ecx, [esi + 0x330]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x264]
mov ecx, edi
call eax
lea ecx, [esi + 0x230]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x260]
mov ecx, edi
call eax
mov edx, eax
lea eax, [esi + 0x28]
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x1a0]
mov ecx, edi
call eax
lea ecx, [esi + 0x538]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x1a4]
mov ecx, edi
call eax
lea ecx, [esi + 0x5b8]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edi, dword [esi + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x1c]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x20]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x24]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
lea eax, [esi + 0x28]
push eax
mov eax, dword [edx + 4]
call eax
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20051
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 0xc]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0x10]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 0x639
push esi
call edx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
movzx eax, ax
mov dword [esp + 0xe0], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xe0]
push eax
call edx
jmp 0x1006dfef
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
mov edi, eax
push 0xa4b
mov dword [esp + 0x44], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0xa4b
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov eax, 0xa3a
mov dword [esi], 0x50465242
mov dword [esi + 4], 0xa4b
mov dword [esi + 8], 7
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x4d0]
add esp, 0xc
mov ecx, edi
call edx
movzx eax, ax
add eax, eax
add eax, eax
xor al, byte [esi + 0x14]
mov ecx, edi
and eax, 4
xor word [esi + 0x14], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x4d8]
call eax
movzx ecx, byte [esi + 0x14]
movzx eax, ax
xor cl, al
and ecx, 1
xor word [esi + 0x14], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x4dc]
mov ecx, edi
call eax
movzx eax, ax
lea ecx, [eax + eax]
xor cl, byte [esi + 0x14]
and ecx, 2
xor word [esi + 0x14], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x4e4]
mov ecx, edi
call eax
mov dword [esi + 0x16], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x4e8]
lea eax, [esp + 0x1f4]
push eax
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x1a], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x1e], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x22], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x26], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.100652c0
mov edi, dword [esp + 0x40]
mov eax, dword [edi]
mov edx, dword [eax + 0x4d4]
mov ecx, edi
call edx
lea ecx, [esi + 0x742]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x4f0]
mov ecx, edi
call eax
lea ecx, [esi + 0x332]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x4f4]
mov ecx, edi
call eax
lea ecx, [esi + 0x53a]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x4ec]
mov ecx, edi
call eax
lea ecx, [esi + 0x232]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x4e0]
mov ecx, edi
call eax
mov edx, eax
lea eax, [esi + 0x2a]
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x1a0]
mov ecx, edi
call eax
lea ecx, [esi + 0x94a]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x1a4]
mov ecx, edi
call eax
lea ecx, [esi + 0x9ca]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edi, dword [esi + 0x1a]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x1e]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x22]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x26]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
lea eax, [esi + 0x2a]
push eax
mov eax, dword [edx + 4]
call eax
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
add edi, 8
push str.20045
mov ecx, eax
mov eax, dword [edx]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 0xa4b
push esi
call edx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
movzx eax, ax
mov dword [esp + 0xa0], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xa0]
push eax
call edx
jmp 0x1006dfef
cmp eax, 0x40000
ja 0x1006cccb
je 0x1006c889
cmp eax, 0x200
je 0x1006b8b7
cmp eax, 0x400
je 0x1006b4bf
cmp eax, 0x20000
jne case.0x10066675.1
mov dword [ebx + 0xa0], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [esp + 0x3f34]
mov dword [esp + 0x50], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov ecx, esi
call edx
mov edi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0x5c]
lea ecx, [esp + 0x124]
push ecx
mov ecx, esi
mov dword [esp + 0x20], edi
call edx
mov byte [esp + 0x99b0], 0xa
call fcn.10078cf0
test eax, eax
mov eax, dword [esi]
je 0x1006a0f1
mov edx, dword [eax + 0x5c]
lea ecx, [esp + 0x104]
push ecx
mov ecx, esi
call edx
mov dword [esp + 0x58], 1
call fcn.10078cf0
jmp 0x1006a0f8
mov edx, dword [eax + 0x28]
mov ecx, esi
call edx
sub eax, 1
mov dword [esp + 0x99b0], 0xa
test byte [esp + 0x58], 1
mov dword [esp + 0x4c], eax
je 0x1006a11d
lea esi, [esp + 0x104]
call fcn.10029f90
lea esi, [esp + 0x124]
mov byte [esp + 0x99b0], 5
call fcn.10029f90
mov eax, dword [esp + 0x4c]
imul eax, eax, 0xf2a
add eax, 0x30d1
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov esi, eax
mov eax, dword [esp + 0x38]
add esp, 4
push eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x40]
mov dword [esi + 4], eax
add eax, 0xffffffef
mov dword [esi + 0xc], eax
mov dword [esi], 0x50465242
mov dword [esi + 8], 6
add esi, 0x10
mov dword [esi], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2d4]
add esp, 0xc
mov ecx, edi
mov dword [esp + 0x20], esi
call eax
mov dword [esi + 8], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2dc]
mov ecx, edi
call eax
mov dword [esi + 0xc], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2d8]
mov ecx, edi
call eax
mov dword [esi + 0x10], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2e4]
mov ecx, edi
call eax
mov dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2e8]
mov ecx, edi
call eax
mov dword [esi + 0x18], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2ec]
mov ecx, edi
call eax
mov dword [esi + 0x1c], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2f0]
mov ecx, edi
call eax
mov dword [esi + 0x20], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2f4]
mov ecx, edi
call eax
mov dword [esi + 0x24], eax
mov dword [esi + 0x28], edx
mov edx, dword [edi]
mov eax, dword [edx + 0x2f8]
mov ecx, edi
call eax
mov dword [esi + 0x2c], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2fc]
mov ecx, edi
call eax
mov dword [esi + 0x30], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2e0]
mov ecx, edi
call eax
mov ecx, dword [esp + 0x3f34]
mov dword [esi + 4], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x5c]
lea eax, [esp + 0xf4]
push eax
call edx
call fcn.10078cf0
lea esi, [esp + 0xf4]
mov dword [esp + 0x40], eax
call fcn.10029f90
cmp dword [esp + 0x40], 0
mov ecx, dword [esp + 0x3f34]
je 0x1006a293
mov eax, dword [ecx]
mov eax, dword [eax + 0x5c]
lea edx, [esp + 0x114]
push edx
call eax
call fcn.10078cf0
mov ecx, dword [esp + 0x20]
lea esi, [esp + 0x114]
mov dword [ecx + 0x2192], eax
call fcn.10029f90
jmp 0x1006a2a4
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [esp + 0x20]
mov dword [ecx + 0x2192], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x320]
lea eax, [esp + 0x154]
push eax
mov ecx, edi
call edx
mov edx, dword [eax]
mov esi, dword [esp + 0x20]
mov dword [esi + 0x38], edx
mov edx, dword [eax + 4]
lea ecx, [esi + 0x38]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x508]
mov dword [esp + 0x28], ecx
mov ecx, edi
call eax
mov ecx, dword [esi + 0x252]
xor ecx, eax
and ecx, 1
xor dword [esi + 0x252], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x5cc]
mov ecx, edi
call eax
mov ecx, dword [esi + 0x252]
and eax, 3
or eax, 4
add eax, eax
and ecx, 0xffffffe9
or eax, ecx
mov dword [esi + 0x252], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x5ac]
mov ecx, edi
call eax
mov ecx, dword [ebx + 0x11dc]
mov dword [ebx + 0x11bc], eax
mov eax, dword [esp + 0x28]
mov dword [ecx + 8], 6
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [esp + 0x3f24], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x3f28], ecx
mov dword [esp + 0x3f2c], edx
mov edx, dword [edi]
lea ecx, [esi + 0x48]
mov dword [esp + 0x3f30], eax
mov eax, dword [edx + 0x324]
mov dword [esp + 0x4c], ecx
mov ecx, edi
call eax
mov edx, eax
mov eax, dword [esp + 0x4c]
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x304]
mov ecx, edi
call eax
lea ecx, [esi + 0x356]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov eax, dword [edi]
lea edx, [esi + 0x55e]
mov dword [esp + 0x5c], edx
mov edx, dword [eax + 0x308]
mov ecx, edi
call edx
mov edx, eax
mov eax, dword [esp + 0x5c]
call fcn.100040a0
mov edx, dword [edi]
lea eax, [esi + 0x766]
mov dword [esp + 0x24], eax
mov eax, dword [edx + 0x30c]
mov ecx, edi
call eax
mov edx, eax
mov eax, dword [esp + 0x24]
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x310]
lea ecx, [esi + 0x96e]
mov dword [esp + 0x60], ecx
mov ecx, edi
call eax
mov edx, eax
mov eax, dword [esp + 0x60]
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x300]
lea ecx, [esi + 0x256]
mov dword [esp + 0x38], ecx
mov ecx, edi
call eax
mov edx, eax
mov eax, dword [esp + 0x38]
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x314]
mov ecx, edi
call eax
lea ecx, [esi + 0x196e]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x318]
mov ecx, edi
call eax
lea ecx, [esi + 0x1b76]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov eax, dword [edi]
lea edx, [esi + 0x1d7e]
mov dword [esp + 0x40], edx
mov edx, dword [eax + 0x1a0]
mov ecx, edi
call edx
mov edx, eax
mov eax, dword [esp + 0x40]
call fcn.100040a0
mov edx, dword [edi]
lea eax, [esi + 0x1f86]
mov dword [esp + 0x3c], eax
mov eax, dword [edx + 0x1a4]
mov ecx, edi
call eax
mov edx, eax
mov eax, dword [esp + 0x3c]
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x3c]
mov ecx, edi
call eax
movzx ecx, al
mov dword [esi + 0x218e], ecx
mov ecx, dword [esp + 0x3f34]
mov dword [ebx + 0x28], 1
mov edx, dword [ecx]
mov edx, dword [edx + 0x5c]
lea eax, [esp + 0x134]
push eax
call edx
call fcn.10078cf0
test eax, eax
lea esi, [esp + 0x134]
setne byte [esp + 0x6f]
call fcn.10029f90
cmp byte [esp + 0x6f], 0
je 0x1006a900
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx]
mov eax, dword [eax + 0x5c]
lea edx, [esp + 0x70]
push edx
call eax
lea eax, [esp + 0x70]
mov byte [esp + 0x99b0], 0xc
mov dword [esp + 0x54], 0
call fcn.10078cf0
test eax, eax
jbe 0x1006a8ea
mov ecx, dword [esp + 0x20]
add ecx, 0x2196
mov dword [esp + 0x18], ecx
mov ebx, dword [esp + 0x54]
lea eax, [esp + 0x70]
call fcn.10078930
mov esi, dword [eax]
lea ecx, [esp + 0x4010]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x3ff4]
mov byte [esp + 0x99b0], 0xd
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
push 0xf28
lea edx, [esp + 0x4112]
push 0
push edx
mov byte [esp + 0x99bc], 0xe
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x3fe
lea eax, [esp + 0x8d0a]
push 0
push eax
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
mov edx, dword [esi]
mov edx, dword [edx + 0x2c]
lea eax, [esp + 0x402c]
push eax
mov ecx, esi
call edx
push 0x1014bdb4
lea ecx, [esp + 0x4068]
mov byte [esp + 0x99b4], 0xf
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
lea eax, [esp + 0x402c]
push eax
lea ecx, [esp + 0x4068]
mov bl, 0x10
push ecx
lea edx, [esp + 0x4088]
mov byte [esp + 0x99b8], bl
mov edi, dword [sym.imp.MSVCP80.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
push edx
call edi
add esp, 0xc
lea eax, [esp + 0x4010]
push eax
lea ecx, [esp + 0x4084]
push ecx
lea edx, [esp + 0x4050]
push edx
mov byte [esp + 0x99bc], 0x11
call edi
add esp, 0xc
lea eax, [esp + 0x4048]
push eax
lea ecx, [esp + 0x4014]
mov byte [esp + 0x99b4], 0x12
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov edx, dword [esi]
mov eax, dword [edx + 0x3c]
mov ecx, esi
call eax
cmp eax, 4
mov edx, dword [esi]
mov ecx, esi
jne 0x1006a657
mov eax, dword [edx + 4]
call eax
mov esi, eax
jmp 0x1006a744
mov edx, dword [edx + 0x54]
lea eax, [esp + 0x40d4]
push eax
call edx
push 0x1014bdb4
lea ecx, [esp + 0x40bc]
mov byte [esp + 0x99b4], 0x13
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
lea eax, [esp + 0x40d4]
push eax
lea ecx, [esp + 0x40bc]
push ecx
lea edx, [esp + 0x40a4]
push edx
mov byte [esp + 0x99bc], 0x14
call edi
add esp, 0xc
lea eax, [esp + 0x3ff4]
push eax
lea ecx, [esp + 0x40a0]
push ecx
lea edx, [esp + 0x40f8]
push edx
mov byte [esp + 0x99bc], 0x15
call edi
add esp, 0xc
lea eax, [esp + 0x40f0]
push eax
lea ecx, [esp + 0x3ff8]
mov byte [esp + 0x99b4], 0x16
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esp + 0x40f0]
mov esi, eax
mov byte [esp + 0x99b0], 0x15
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x409c]
mov byte [esp + 0x99b0], 0x14
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x40b8]
mov byte [esp + 0x99b0], 0x13
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x40d4]
mov byte [esp + 0x99b0], 0x12
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x4048]
mov byte [esp + 0x99b0], 0x11
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x4080]
mov byte [esp + 0x99b0], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x4064]
mov byte [esp + 0x99b0], 0xf
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x402c]
mov byte [esp + 0x99b0], 0xe
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
test esi, esi
jne 0x1006a5a0
push 1
push esi
lea ecx, [esp + 0x4018]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::erase_unsigned_int__unsigned_int_]
cmp dword [esp + 0x4028], 8
mov ecx, dword [esp + 0x4014]
jae 0x1006a7c7
lea ecx, [esp + 0x4014]
lea edx, [esp + 0x8d04]
mov edi, edi
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x1006a7d0
mov ebx, 0x200
lea edx, [esp + 0x8d04]
lea eax, [esp + 0x411e]
call fcn.10001650
push 1
push 0
lea ecx, [esp + 0x3ffc]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::erase_unsigned_int__unsigned_int_]
cmp dword [esp + 0x400c], 8
mov ecx, dword [esp + 0x3ff8]
jae 0x1006a822
lea ecx, [esp + 0x3ff8]
lea edx, [esp + 0x8d04]
lea esp, [esp]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x1006a830
sub esp, 0x1c
lea edx, [esp + 0x4010]
mov ecx, esp
mov dword [esp + 0x80], esp
push edx
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
mov edx, dword [eax + 0x5d8]
call edx
mov edx, 0x1014cde4
lea eax, [esp + 0x491e]
mov word [esp + 0x410c], 0x10
call fcn.10001650
mov edi, dword [esp + 0x18]
mov ecx, 0x3ca
lea esi, [esp + 0x410c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea ecx, [esp + 0x3ff4]
mov byte [esp + 0x99b0], 0xd
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x4010]
mov byte [esp + 0x99b0], 0xc
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov esi, dword [esp + 0x54]
add dword [esp + 0x18], 0xf2a
add esi, 1
lea eax, [esp + 0x70]
mov dword [esp + 0x54], esi
call fcn.10078cf0
cmp esi, eax
jb 0x1006a52f
mov ebx, dword [esp + 0x30]
lea esi, [esp + 0x70]
mov byte [esp + 0x99b0], 5
call fcn.10029f90
jmp 0x1006a9a5
mov esi, dword [esp + 0x3f34]
mov eax, dword [esi]
mov edx, dword [eax + 0x4c]
mov ecx, esi
call edx
lea ecx, [esp + 0x70]
push ecx
mov ecx, eax
call fcn.10078990
mov byte [esp + 0x99b0], 0x17
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x54], 0
call eax
test eax, eax
jbe 0x1006a994
mov ecx, dword [esp + 0x20]
add ecx, 0x2196
mov dword [esp + 0x58], ecx
jmp 0x1006a950
mov edi, dword [esp + 0x54]
lea esi, [esp + 0x70]
call fcn.1005bef0
mov esi, eax
mov eax, dword [esp + 0x58]
mov edi, eax
mov ecx, 0x3ca
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x3f34]
movsw word es:[edi], word [esi]
mov esi, dword [esp + 0x54]
mov edx, dword [ecx]
add eax, 0xf2a
mov dword [esp + 0x58], eax
mov eax, dword [edx + 0x28]
add esi, 1
mov dword [esp + 0x54], esi
call eax
cmp esi, eax
jb 0x1006a950
lea esi, [esp + 0x70]
mov byte [esp + 0x99b0], 5
call fcn.10029f90
xor edi, edi
push 0x7e
lea ecx, [esp + 0x9312]
push edi
push ecx
mov word [esp + 0x9318], di
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x2c]
movzx edx, byte [eax + 0x47]
movzx ecx, byte [eax + 0x46]
add esp, 0xc
push edx
movzx edx, byte [eax + 0x45]
push ecx
movzx ecx, byte [eax + 0x44]
push edx
movzx edx, byte [eax + 0x43]
push ecx
movzx ecx, byte [eax + 0x42]
push edx
movzx edx, byte [eax + 0x41]
push ecx
movzx ecx, byte [eax + 0x40]
push edx
movzx edx, word [eax + 0x3e]
movzx eax, word [eax + 0x3c]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [ecx]
push eax
push edx
lea eax, [esp + 0x9338]
push 0x1014c4a8
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
push 0x206
lea ecx, [esp + 0x910a]
push edi
push ecx
mov word [esp + 0x9110], di
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x9104]
call fcn.10002ad0
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10150e6c
lea edx, [esp + 0x9108]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x930c]
push eax
lea ecx, [esp + 0x9108]
push 0x104
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x9104]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1006ab0f
push edi
push 0x80
push 3
push edi
push 1
push SysReAllocString
lea eax, [esp + 0x911c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0x30bc
lea ecx, [esp + 0x5a44]
push edi
push ecx
mov esi, eax
mov dword [esp + 0x64], edi
mov dword [esp + 0x5a48], edi
call sub.MSVCR80.dll_memset
add esp, 0xc
push edi
lea edx, [esp + 0x5c]
push edx
push 0x30c0
lea eax, [esp + 0x5a48]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x5c92]
call fcn.100040a0
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x63aa]
call fcn.100040a0
mov ecx, dword [esp + 0x5c]
push 0x104
push ecx
call fcn.10002390
mov edx, dword [esp + 0x2c]
push 0x104
push edx
call fcn.10002390
mov ecx, dword [esp + 0x48]
add esp, 0x10
call fcn.1002f880
test eax, eax
jle 0x1006ab4c
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0x3c], 1
jmp 0x1006ab55
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x3c], edi
mov ecx, dword [esp + 0x60]
call fcn.1002f880
test eax, eax
jle 0x1006ab71
mov edx, dword [ebx + 0x11dc]
mov dword [edx + 4], 1
jmp 0x1006ab7a
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 4], edi
mov ecx, dword [esp + 0x5c]
lea esi, [ebx + 0x11e0]
mov eax, 0x104
mov edx, esi
mov dword [esp + 0x60], esi
call fcn.100040e0
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
cmp word [esi], 0x5c
jne 0x1006ad3d
mov ecx, dword [esp + 0x20]
cmp dword [ecx + 0x18], 0
jne 0x1006ad3d
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
call eax
test eax, eax
je 0x1006ad3d
mov eax, dword [esp + 0x3f34]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x40]
push ecx
mov ecx, dword [eax + 8]
push edx
mov edx, dword [esp + 0x38]
push esi
call fcn.10074c40
mov edi, eax
and edi, 0xffff
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], edi
je 0x1006ad39
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x50], 0
je 0x1006ad39
mov esi, dword [esp + 0x28]
mov ebx, dword [esi]
mov ecx, eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0xc]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x1006ac7e
call sub.Comn.dll_GetObjectLog
mov ebx, dword [eax]
push 0x706
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
add ebx, 0xc
call fcn.10064760
mov ecx, dword [esp + 0x44]
mov edx, dword [ebx]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov edi, dword [esp + 0x24]
add esp, 0xc
mov ebx, dword [esi]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x252]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x4c]
mov eax, dword [eax + 4]
push edx
call eax
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x1006ace1
call sub.Comn.dll_GetObjectLang
push str.12329
jmp 0x1006acfc
cmp eax, 2
jne 0x1006acf2
call sub.Comn.dll_GetObjectLang
push str.12330
jmp 0x1006acfc
call sub.Comn.dll_GetObjectLang
push str.12331
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xd8], edi
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
lea edx, [esp + 0xd8]
push edx
call eax
mov ebx, dword [esp + 0x30]
jmp 0x1006dfef
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x28]
call fcn.10030c20
mov ecx, dword [esp + 0x60]
cmp word [ecx], 0x5c
jne 0x1006ad8f
push 0x206
lea edx, [esp + 0x8d0a]
push 0
push edx
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebx + 0x2c], 0
je 0x1006ad8f
mov ecx, dword [esp + 0x60]
lea edi, [esp + 0x8d04]
call fcn.10074d90
mov ebx, dword [esp + 0x30]
cmp dword [ebx + 0x11b8], 0
jne 0x1006ade1
cmp dword [ebx + 0x50], 0
jne 0x1006ade1
mov edi, dword [esp + 0x1c]
mov eax, dword [edi]
mov edx, dword [eax + 0x110]
mov ecx, edi
call edx
test eax, eax
je 0x1006ade1
mov esi, dword [esp + 0x2c]
push esi
mov edx, edi
mov ecx, ebx
call fcn.100742b0
lea eax, [esp + 0x3f34]
push eax
push ebx
call fcn.10065ef0
mov ecx, dword [esp + 0x34]
push ecx
push esi
call fcn.1006e180
mov edx, esi
push edx
jmp 0x10067a2d
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [ebx + 0x11cc], eax
mov eax, dword [esp + 0x14]
lea edi, [ebx + 0x11c8]
mov dword [edi], ecx
mov dword [edi + 8], 0
mov edx, dword [eax]
mov ecx, dword [esi]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [esi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [edx + 0x252]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
and edx, 1
push edx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x4c]
mov edx, dword [edx + 4]
push eax
call edx
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x18]
cmp eax, 1
jne 0x1006ae87
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12329
call eax
mov edx, dword [esp + 0x40]
jmp 0x1006aed4
cmp eax, 2
jne 0x1006aeb1
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12330
call eax
mov edx, dword [esp + 0x40]
jmp 0x1006aed4
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12331
call eax
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [edx]
call eax
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
mov dword [esp + 0x24], 0
call eax
test eax, eax
je 0x1006b0f0
mov ecx, dword [esi]
mov edx, dword [esi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 8]
mov dword [eax + 4], edx
mov edx, dword [esi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 1
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074730
test eax, eax
jne 0x1006af64
mov dword [ebx + 0x94], 0x75b105d
mov dword [esp + 0x24], 0x75c105d
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x18]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
mov esi, edi
jmp 0x1006b0d4
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov edx, dword [esp + 0x34]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov edx, dword [esp + 0x20]
mov edi, eax
mov eax, dword [esp + 0x3f34]
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
push ecx
push 0
push 0
push 0x21c
add edx, 0x34
push edx
push 0x116
mov dword [esp + 0x3c], edi
call eax
mov eax, ebx
mov dword [ebx + 0x94], edi
call fcn.100652f0
test edi, edi
jne 0x1006b0e1
mov ecx, dword [esp + 0x38]
push ecx
mov eax, esi
mov ecx, ebx
call fcn.1006f0f0
test eax, eax
jne 0x1006b02c
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x771
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064760
mov edx, dword [esp + 0x44]
add esp, 4
push eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push str._s:_PolicyManager_error.
push edx
call ecx
add esp, 0xc
lea edx, [esp + 0x9104]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x12c]
call edx
test eax, eax
je 0x1006b06c
mov ecx, dword [esi]
mov edx, dword [esi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 8]
mov dword [eax + 4], edx
mov edx, dword [esi + 0xc]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.1006f0d0
mov ecx, dword [esi]
mov edx, dword [esi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 8]
mov dword [eax + 4], edx
mov edx, dword [esi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 2
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074730
test eax, eax
jne 0x1006b0e1
mov dword [ebx + 0x94], 0x77e1065
mov dword [esp + 0x24], 0x77f1065
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x18]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
lea esi, [ebx + 0x11c8]
push eax
call fcn.100650b0
mov esi, dword [esp + 0x30]
add esp, 8
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x20], 1
jmp 0x1006b156
push 0
push 0x82
push 2
push 0
push 0
push 0x40000000
lea edx, [esp + 0x911c]
push edx
mov dword [esp + 0x5c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
push 0
lea eax, [esp + 0x44]
push eax
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebx + 0x11dc]
mov eax, 0x32
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
xor eax, eax
mov dword [ebx + 0x54], eax
mov dword [edx + 0x20], eax
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
movzx eax, di
mov dword [esp + 0xa8], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xa8]
push eax
call edx
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
jne 0x1006b41b
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [ebx + 0x1c]
push eax
push ecx
mov ecx, dword [esp + 0x24]
xor edx, edx
call fcn.10042860
mov edi, dword [esi]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 4]
mov dword [eax + 4], edi
mov edi, dword [esi + 8]
mov dword [eax + 8], edi
mov edi, dword [esi + 0xc]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
mov dword [esp + 0x58], eax
jne 0x1006b217
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x7a5
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064760
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
add esp, 4
push eax
mov eax, dword [edx]
push str._s:_get_task_index_fail
push ecx
call eax
mov eax, dword [esp + 0x64]
add esp, 0xc
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov edi, dword [esp + 0x1c]
push eax
mov eax, dword [edx + 0x1b0]
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0x620]
mov ecx, edi
call eax
test eax, eax
je 0x1006b41b
mov edx, dword [edi]
mov eax, dword [edx + 0x660]
mov ecx, edi
call eax
test eax, eax
je 0x1006b41b
mov esi, edi
mov edx, dword [esi]
mov eax, dword [edx + 0x11c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x628]
mov ecx, esi
call eax
test eax, eax
jne 0x1006b2cc
mov edx, dword [edi]
mov eax, dword [edx + 0x38]
mov ecx, edi
call eax
test eax, eax
jne 0x1006b2cc
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006b2b0
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006b2b0
call fcn.100022a0
test eax, eax
je 0x1006b2cc
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 6
jne 0x1006b390
call fcn.100300d0
jmp 0x1006b390
push 0x206
mov eax, 0x46
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20041
call eax
push eax
lea ecx, [esp + 0x8d08]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8d04]
call fcn.10001650
mov ebx, dword [esp + 0x30]
mov edx, dword [ebx + 0x1c]
mov esi, dword [edx]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x320]
lea edx, [esp + 0x234]
push edx
add esi, 0xcc
call eax
mov edx, dword [eax]
push edi
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [esi]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x1c]
call edx
push eax
mov eax, dword [ebx + 0x1c]
push eax
call fcn.1004a440
push 0x206
mov eax, 0x64
lea ecx, [esp + 0x8b02]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov dword [ebx + 0xa0], 1
mov word [esp + 0x8b08], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20042
call eax
push eax
lea ecx, [esp + 0x8b00]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8afc]
call fcn.10001650
mov eax, edi
call fcn.100745e0
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x28]
mov edi, dword [esi]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 4]
mov dword [eax + 4], edi
mov edi, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [eax + 8], edi
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
mov dword [esp + 0x3c], eax
jne 0x1006b482
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0x7d3
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
add esi, 0xc
call fcn.10064760
mov ecx, dword [esp + 0x44]
mov edx, dword [esi]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov eax, dword [esp + 0x48]
add esp, 0xc
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x20]
push eax
mov esi, ebx
call fcn.10076930
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x50]
cmp eax, 0xbb8
jae 0x1006dfef
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebx + 0x20], 1
jmp 0x1006dfef
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
mov edi, eax
push 0xb79
mov dword [esp + 0x44], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0xb79
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov dword [esi], 0x50465242
mov dword [esi + 4], 0xb79
mov dword [esi + 8], 0xb
mov dword [esi + 0xc], 0xb68
add esi, 0x10
mov dword [esi], 0xb68
mov edx, dword [edi]
mov eax, dword [edx + 0x3f4]
add esp, 0xc
mov ecx, edi
call eax
mov dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x3fc]
mov ecx, edi
call eax
mov dword [esi + 8], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x3f8]
mov ecx, edi
call eax
mov ecx, dword [esp + 0x3f34]
mov dword [esi + 0xc], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov dword [esi + 0x1c], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x410]
lea eax, [esp + 0x254]
push eax
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x28], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x2c], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x30], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x34], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.100652c0
mov edi, dword [esp + 0x40]
mov eax, dword [edi]
mov edx, dword [eax + 0x408]
mov ecx, edi
call edx
mov dword [esi + 0x18], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x404]
mov ecx, edi
call edx
mov dword [esi + 0x14], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x400]
mov ecx, edi
call edx
mov dword [esi + 0x10], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x5ac]
mov ecx, edi
call edx
mov ecx, dword [ebx + 0x1c]
mov dword [ebx + 0x11bc], eax
mov edi, dword [esi + 0x28]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x2c]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x30]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x34]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0xcc]
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x264]
call eax
test eax, eax
je 0x1006b645
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0xc], 5
jmp 0x1006b652
mov edx, dword [ebx + 0x11dc]
mov dword [edx + 0xc], 6
mov edi, dword [esp + 0x40]
mov eax, dword [edi]
mov edx, dword [eax + 0x11c]
mov ecx, edi
call edx
test eax, eax
je 0x1006b674
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x70]
call eax
mov dword [esi + 0x20], eax
jmp 0x1006b67b
mov dword [esi + 0x20], 0
mov edx, dword [edi]
mov eax, dword [edx + 0x40c]
mov ecx, edi
call eax
mov edx, eax
lea eax, [esi + 0x38]
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x3f0]
mov ecx, edi
call eax
mov edx, eax
lea eax, [esi + 0x548]
call fcn.100040a0
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
call eax
mov edx, eax
lea eax, [esi + 0x340]
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x414]
mov ecx, edi
call eax
lea ecx, [esi + 0x750]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x1a0]
mov ecx, edi
call eax
lea ecx, [esi + 0x240]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x1a4]
mov ecx, edi
call eax
lea ecx, [esi + 0x2c0]
mov edx, eax
mov eax, ecx
call fcn.100040a0
cmp dword [esi + 0x14], 0
je 0x1006b724
lea edx, [esi + 0x340]
jmp 0x1006b732
mov edx, dword [edi]
mov eax, dword [edx + 0x3f0]
mov ecx, edi
call eax
mov edx, eax
lea eax, [esi + 0x548]
call fcn.100040a0
mov edi, dword [esp + 0x3f34]
mov dword [ebx + 0x28], 2
mov edx, dword [edi]
mov edx, dword [edx + 0x50]
lea eax, [esp + 0x70]
push eax
mov ecx, edi
call edx
mov byte [esp + 0x99b0], 0x1a
mov eax, dword [edi]
mov edx, dword [eax + 0x40]
lea ecx, [esp + 0xe8]
push ecx
mov ecx, edi
call edx
mov byte [esp + 0x99b0], 0x1b
cmp dword [esp + 0xf0], 0
jne 0x1006b78d
mov dword [esi + 0x18], 1
jmp 0x1006b7a1
lea eax, [esp + 0xe8]
mov dword [esi + 0xb60], eax
mov dword [esi + 0x18], 0
mov edi, dword [esi + 0x28]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x2c]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x30]
lea ecx, [esp + 0x80]
mov dword [esi + 0xb64], ecx
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x34]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
lea eax, [esi + 0x38]
push eax
mov eax, dword [edx + 4]
call eax
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20071
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
push 0xb79
push edx
call eax
mov ecx, dword [esp + 0x14]
mov edi, eax
and eax, 0xffff
cmp eax, 0x1043
mov dword [esp + 0x24], edi
jne 0x1006b861
mov dword [esp + 0x50], 0
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x50]
push eax
call edx
jmp 0x1006b877
mov dword [esp + 0xb8], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
lea edx, [esp + 0xb8]
push edx
call eax
test edi, edi
jne 0x1006b895
mov ecx, dword [ebx + 0x1c]
push 0x400
push ecx
mov ecx, esi
call fcn.10040970
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
lea esi, [esp + 0xe8]
call fcn.10064410
lea esi, [esp + 0x70]
mov byte [esp + 0x99b0], 5
call fcn.10064410
jmp 0x1006dfef
mov edi, dword [esp + 0x3f34]
mov edx, dword [edi]
mov eax, dword [edx + 0x10]
mov ecx, edi
call eax
mov edx, dword [edi]
mov esi, eax
mov eax, dword [edx + 0x28]
mov ecx, edi
mov dword [esp + 0x1c], esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x620]
imul edi, edi, 0xf2a
add edi, 0x1c8b
mov ecx, esi
mov dword [esp + 0x38], edi
call eax
mov ecx, dword [ebx + 0x11dc]
push edi
mov dword [ecx], eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push edi
push 0
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x38]
mov dword [eax + 4], edi
lea ecx, [edi - 0x11]
mov dword [eax + 0xc], ecx
lea edi, [eax + 0x10]
mov dword [eax], 0x50465242
mov dword [eax + 8], 0xa
mov dword [edi], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x3a0]
add esp, 0xc
mov ecx, esi
mov dword [esp + 0x28], edi
call eax
mov dword [edi + 4], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x3a8]
mov ecx, esi
call eax
mov dword [edi + 8], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x3a4]
mov ecx, esi
call eax
mov dword [edi + 0xc], eax
xor eax, eax
mov dword [edi + 0x14], eax
mov dword [edi + 0x10], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x3a4]
mov ecx, esi
call eax
mov dword [edi + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x508]
mov ecx, esi
call eax
mov ecx, dword [edi + 0x20]
xor ecx, eax
and ecx, 1
xor dword [edi + 0x20], ecx
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov dword [edi + 0x1c76], eax
mov edx, dword [esi]
mov edx, dword [edx + 0x398]
lea eax, [esp + 0x274]
push eax
mov ecx, esi
call edx
mov ecx, dword [eax]
mov dword [edi + 0x2c], ecx
mov edx, dword [eax + 4]
mov dword [edi + 0x30], edx
mov ecx, dword [eax + 8]
mov dword [edi + 0x34], ecx
mov edx, dword [eax + 0xc]
mov dword [edi + 0x38], edx
mov eax, dword [esi]
mov edx, dword [eax + 0x380]
mov ecx, esi
call edx
mov dword [edi + 0x24], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x3b4]
mov ecx, esi
call edx
add eax, eax
add eax, eax
add eax, eax
xor eax, dword [edi + 0x20]
mov ecx, esi
and eax, 8
xor dword [edi + 0x20], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x3b8]
call eax
lea ecx, [eax*4]
xor ecx, dword [edi + 0x20]
and ecx, 4
xor dword [edi + 0x20], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x3c0]
mov ecx, esi
call eax
mov dword [edi + 0x1c72], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x3c4]
mov ecx, esi
call eax
mov dword [edi + 0x1c6e], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x5cc]
mov ecx, esi
call eax
shl eax, 4
xor eax, dword [edi + 0x20]
and eax, 0x30
xor dword [edi + 0x20], eax
mov dword [ebx + 0x28], 1
mov ecx, dword [edi + 0x2c]
mov eax, dword [edi + 0x34]
mov edx, dword [edi + 0x30]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [edi + 0x38]
mov dword [esp + 0x3f2c], eax
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f28], edx
mov dword [esp + 0x3f30], ecx
call fcn.100652c0
mov edi, dword [esp + 0x28]
mov eax, dword [esi]
xor edx, edx
cmp dword [edi + 0x24], 6
mov ecx, esi
sete dl
mov dword [esp + 0x20], edx
mov edx, dword [eax + 0x11c]
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x70]
call eax
mov edx, dword [esi]
xor ecx, ecx
cmp eax, 6
mov eax, dword [edx + 0x5ac]
sete cl
or dword [esp + 0x20], ecx
mov ecx, esi
call eax
mov dword [ebx + 0x11bc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x39c]
lea ecx, [edi + 0x3c]
mov dword [esp + 0x54], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x54]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x388]
lea ecx, [edi + 0x246]
mov dword [esp + 0x34], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x34]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x38c]
lea ecx, [edi + 0x44e]
mov dword [esp + 0x40], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x40]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x390]
mov ecx, esi
call eax
lea ecx, [edi + 0x144e]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x394]
mov ecx, esi
call eax
lea ecx, [edi + 0x1656]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov eax, dword [esi]
lea edx, [edi + 0x185e]
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 0x1a0]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x3c]
call fcn.100040a0
mov eax, dword [esi]
mov edx, dword [eax + 0x1a4]
add edi, 0x1a66
mov ecx, esi
mov dword [esp + 0x5c], edi
call edx
mov edx, eax
mov eax, edi
call fcn.100040a0
mov ecx, dword [esp + 0x40]
call fcn.1002f880
test eax, eax
jle 0x1006bbc7
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 4], 1
jmp 0x1006bbd4
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x34]
lea edx, [ebx + 0x11e0]
mov eax, 0x104
mov dword [esp + 0x60], edx
call fcn.100040e0
mov edx, dword [ebx + 0x11dc]
mov esi, dword [esp + 0x3f34]
mov dword [edx + 8], 4
mov eax, dword [esi]
mov edx, dword [eax + 0x48]
mov ecx, esi
call edx
lea ecx, [esp + 0x3f24]
push ecx
mov ecx, eax
call fcn.10078990
mov byte [esp + 0x99b0], 0x19
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x4c], 0
call eax
test eax, eax
jbe 0x1006bd2b
mov ecx, dword [esp + 0x28]
add ecx, 0x1c8c
mov dword [esp + 0x18], ecx
jmp 0x1006bc50
mov edi, dword [esp + 0x4c]
lea esi, [esp + 0x3f24]
call fcn.1005bef0
mov edx, dword [esp + 0x18]
lea edi, [edx - 0x12]
mov esi, eax
mov ecx, 0x3ca
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea esi, [edx + 0x400]
mov edx, dword [esp + 0x34]
mov eax, esi
call fcn.100040a0
mov edi, dword [esp + 0x18]
push 0x200
push edi
call fcn.10002390
mov eax, edi
add esp, 8
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1006bca0
sub eax, edx
sar eax, 1
cmp eax, 4
jae 0x1006bcef
push 0x204
lea edx, [esp + 0x8d0c]
push 0
push edx
mov dword [esp + 0x8d10], 0x41
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x24]
mov cx, word [eax]
add esp, 0xc
lea edx, [esp + 0x8d04]
mov word [esp + 0x8d04], cx
push edx
jmp 0x1006bcfb
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, dword [esp + 0x3f34]
mov esi, dword [esp + 0x4c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add dword [esp + 0x18], 0xf2a
add esi, 1
mov dword [esp + 0x4c], esi
call eax
cmp esi, eax
jb 0x1006bc50
xor esi, esi
push 0x7e
lea ecx, [esp + 0x9392]
push esi
push ecx
mov word [esp + 0x9398], si
call sub.MSVCR80.dll_memset
mov edi, dword [esp + 0x34]
movzx edx, byte [edi + 0x3b]
movzx eax, byte [edi + 0x3a]
movzx ecx, byte [edi + 0x39]
add esp, 0xc
push edx
movzx edx, byte [edi + 0x38]
push eax
movzx eax, byte [edi + 0x37]
push ecx
movzx ecx, byte [edi + 0x36]
push edx
movzx edx, byte [edi + 0x35]
push eax
movzx eax, byte [edi + 0x34]
push ecx
movzx ecx, word [edi + 0x32]
push edx
movzx edx, word [edi + 0x30]
push eax
mov eax, dword [edi + 0x2c]
push ecx
push edx
push eax
lea ecx, [esp + 0x93b8]
push 0x1014c4a8
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
push 0x206
lea edx, [esp + 0x8b02]
push esi
push edx
mov word [esp + 0x8b08], si
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x8afc]
call fcn.10002ad0
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10150e6c
lea eax, [esp + 0x8b00]
push 0x104
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x938c]
push ecx
lea edx, [esp + 0x8b00]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x8afc]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1006be85
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [esp + 0x8b14]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
xor eax, eax
push 0x30bc
push eax
lea edx, [esp + 0x5a48]
push edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x5a48], eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0
lea eax, [esp + 0x54]
push eax
push 0x30c0
lea ecx, [esp + 0x5a48]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esp + 0x63aa]
lea eax, [edi + 0x44e]
call fcn.100040a0
mov edx, dword [esp + 0x34]
push 0x104
push edx
call fcn.10002390
mov esi, dword [esp + 0x68]
add esp, 8
cmp word [esi], 0x5c
jne 0x1006c03f
mov eax, dword [esp + 0x3f34]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x3c]
push ecx
mov ecx, dword [eax + 8]
push edx
mov edx, dword [esp + 0x38]
push esi
call fcn.10074c40
mov edi, eax
and edi, 0xffff
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], edi
je 0x1006c037
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x50], 0
je 0x1006c037
mov esi, dword [esp + 0x28]
mov ebx, dword [esi + 0x2c]
mov ecx, eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 0x30]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 0x34]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0x38]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x1006bf54
call sub.Comn.dll_GetObjectLog
mov ebx, dword [eax]
push 0x98f
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x54], eax
add ebx, 0xc
call fcn.10064760
mov ecx, dword [esp + 0x54]
mov edx, dword [ebx]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov edi, dword [esp + 0x24]
add esp, 0xc
mov ebx, dword [esi + 0x2c]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 0x30]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 0x34]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0x38]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x20]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x54]
mov eax, dword [eax + 4]
push edx
call eax
mov esi, dword [esi + 0x24]
test esi, esi
je 0x1006bfdc
cmp esi, 1
je 0x1006bfdc
cmp esi, 3
jne 0x1006bfba
call sub.Comn.dll_GetObjectLang
push str.11952
jmp 0x1006bfe6
cmp esi, 4
jne 0x1006bfcb
call sub.Comn.dll_GetObjectLang
push str.11953
jmp 0x1006bfe6
cmp esi, 6
jne 0x1006c000
call sub.Comn.dll_GetObjectLang
push str.11954
jmp 0x1006bfe6
call sub.Comn.dll_GetObjectLang
push str.11951
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xd4], edi
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
lea edx, [esp + 0xd4]
push edx
call eax
lea esi, [esp + 0x3f24]
mov byte [esp + 0x99b0], 5
call fcn.10029f90
mov ebx, dword [esp + 0x30]
jmp 0x1006dfef
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
call fcn.10030c20
cmp word [esi], 0x5c
jne 0x1006c08b
push 0x206
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebx + 0x2c], 0
je 0x1006c08b
lea edi, [esp + 0x8d04]
mov ecx, esi
call fcn.10074d90
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
cmp dword [ebx + 0x11b8], 0
jne 0x1006c0e9
cmp dword [ebx + 0x50], 0
jne 0x1006c0e9
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
call eax
test eax, eax
je 0x1006c0e9
mov esi, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
push esi
mov ecx, ebx
call fcn.100742b0
lea ecx, [esp + 0x3f34]
push ecx
push ebx
call fcn.10065ef0
mov edx, dword [esp + 0x38]
push edx
push esi
call fcn.1006e180
push esi
mov edi, eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
lea esi, [esp + 0x3f28]
jmp 0x100689e0
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [ebx + 0x11cc], eax
mov dword [ebx + 0x11c8], ecx
mov dword [ebx + 0x11d0], 1
mov esi, dword [edi + 0x2c]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 0x30]
mov dword [eax + 4], esi
mov esi, dword [edi + 0x34]
mov dword [eax + 8], esi
mov esi, dword [edi + 0x38]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
mov dword [esp + 0x5c], 0
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x15c]
push esi
call eax
xor ecx, ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x64], ecx
mov edx, dword [eax]
mov edx, dword [edx + 0xa8]
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x5c]
push ecx
mov ecx, eax
call edx
cmp dword [esp + 0x58], 1
mov ecx, str.RunOneTimeEveryDay
mov edx, str.BackupParam
lea eax, [esp + 0x3fd8]
jne 0x1006c18c
push 0x10151f8c
jmp 0x1006c191
push 0x10151f24
call fcn.10065410
cmp dword [esp + 0x20], 0
mov dword [esp + 0x3c], 1
je 0x1006c219
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x3c4]
call edx
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x3c0]
call edx
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x3b8]
call edx
neg eax
sbb eax, eax
add eax, 1
cmp esi, 0xffffffff
mov dword [esp + 0x3c], eax
je 0x1006c219
mov eax, dword [ebx + 0x1c]
mov ecx, eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x84]
push esi
mov dword [esp + 0x44], ecx
call eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x90]
push esi
call eax
push eax
call dword [sym.imp.MSVCR80.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x1006c219
mov dword [esp + 0x4c], 1
mov esi, dword [edi + 0x2c]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 0x30]
mov dword [eax + 4], esi
mov esi, dword [edi + 0x34]
mov dword [eax + 8], esi
mov esi, dword [edi + 0x38]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov eax, dword [edi + 0x20]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x54]
mov eax, dword [eax + 4]
push edx
call eax
mov eax, dword [edi + 0x24]
test eax, eax
je 0x1006c2a1
cmp eax, 1
je 0x1006c2a1
cmp eax, 3
jne 0x1006c27f
call sub.Comn.dll_GetObjectLang
push str.11952
jmp 0x1006c2ab
cmp eax, 4
jne 0x1006c290
call sub.Comn.dll_GetObjectLang
push str.11953
jmp 0x1006c2ab
cmp eax, 6
jne 0x1006c2c5
call sub.Comn.dll_GetObjectLang
push str.11954
jmp 0x1006c2ab
call sub.Comn.dll_GetObjectLang
push str.11951
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x110]
xor esi, esi
mov dword [esp + 0x24], esi
call edx
test eax, eax
je 0x1006c444
cmp dword [esp + 0x20], esi
mov dword [esp + 0x34], esi
jne 0x1006c33e
mov ecx, dword [edi + 0x2c]
mov edx, dword [edi + 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 0x34]
mov dword [eax + 4], edx
mov edx, dword [edi + 0x38]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x44]
push eax
push 1
push ecx
mov ecx, ebx
call fcn.10074730
test eax, eax
jne 0x1006c33e
mov dword [ebx + 0x94], 0xa06105d
mov dword [esp + 0x24], 0xa07105d
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x34]
push edx
jmp 0x1006c40a
mov esi, dword [esp + 0x3f34]
mov eax, dword [esi + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
push eax
mov eax, dword [esi + 0xc]
push eax
call edx
mov edx, dword [esp + 0x38]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov ecx, dword [esi + 8]
push ecx
push 0
push 0
push 0x21c
lea edx, [edi + 0x28]
push edx
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0xc]
push 0x116
call eax
cmp dword [esp + 0x24], 0
je 0x1006c39f
test dword [esp + 0x24], 0xa131043
je 0x1006c435
lea ecx, [esp + 0x8afc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x20], 0
mov dword [esp + 0x34], 0
jne 0x1006c435
mov edx, dword [edi + 0x2c]
mov ecx, dword [edi + 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [edi + 0x34]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 0x38]
mov dword [eax + 8], edx
lea edx, [esp + 0x44]
push edx
mov dword [eax + 0xc], ecx
mov eax, dword [ebp + 8]
push 2
push eax
mov ecx, ebx
call fcn.10074730
test eax, eax
jne 0x1006c435
mov dword [ebx + 0x94], 0xa1a1065
mov dword [esp + 0x24], 0xa1b1065
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x34]
push ecx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
push eax
lea esi, [ebx + 0x11c8]
call fcn.100650b0
add esp, 8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [esp + 0x28]
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x20], 1
jmp 0x1006c4ac
cmp dword [esp + 0x20], esi
jne 0x1006c4ac
push 0
push 0x82
push 2
push 0
push 0
push 0x40000000
lea edx, [esp + 0x8b14]
push edx
mov dword [esp + 0x6c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, dword [edi]
push 0
mov esi, eax
lea eax, [esp + 0x54]
push eax
push ecx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebx + 0x11dc]
mov eax, 0x32
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
xor eax, eax
mov dword [ebx + 0x54], eax
mov dword [edx + 0x20], eax
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
and esi, 0xffff
cmp esi, 0x1043
mov dword [esp + 0x18], esi
jne 0x1006c4dc
mov dword [esp + 0x50], 0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
lea edx, [esp + 0x50]
push edx
call eax
jmp 0x1006c4f2
mov dword [esp + 0x88], esi
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x88]
push eax
call edx
cmp dword [esp + 0x24], 0
je 0x1006c56a
cmp esi, 0x1043
je 0x1006c56a
mov esi, dword [edi + 0x2c]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 0x30]
mov dword [eax + 4], esi
mov esi, dword [edi + 0x34]
mov dword [eax + 8], esi
mov esi, dword [edi + 0x38]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x1006c81b
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0xa7e
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x54], eax
add esi, 0xc
call fcn.10064760
mov ecx, dword [esp + 0x54]
mov edx, dword [esi]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
add esp, 0xc
jmp 0x1006c81b
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [ebx + 0x1c]
push eax
push edi
call fcn.10040d90
mov esi, dword [edi + 0x2c]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 0x30]
mov dword [eax + 4], esi
mov esi, dword [edi + 0x34]
mov dword [eax + 8], esi
mov esi, dword [edi + 0x38]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
call eax
mov esi, eax
cmp esi, 0xffffffff
jne 0x1006c5ec
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x50], eax
mov eax, dword [eax]
add eax, 0xc
push 0xa48
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
call fcn.10064760
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x44]
add esp, 4
push eax
mov eax, dword [edx]
push str._s:_get_task_index_fail
push ecx
call eax
add esp, 0xc
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1b0]
push esi
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov esi, dword [esp + 0x1c]
mov edx, dword [esi]
mov eax, dword [edx + 0x620]
mov ecx, esi
call eax
test eax, eax
je 0x1006c81b
mov edx, dword [esi]
mov eax, dword [edx + 0x660]
mov ecx, esi
call eax
test eax, eax
je 0x1006c81b
mov edx, dword [esi]
mov eax, dword [edx + 0x11c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x628]
mov ecx, esi
mov dword [esp + 0x40], edi
call eax
test eax, eax
jne 0x1006c69c
mov edx, dword [edi]
mov eax, dword [edx + 0x38]
mov ecx, edi
call eax
test eax, eax
jne 0x1006c69c
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006c687
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006c687
call fcn.100022a0
test eax, eax
je 0x1006c69c
cmp dword [esp + 0x20], 0
je 0x1006c760
call fcn.100300d0
jmp 0x1006c760
push 0x206
mov eax, 0x46
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20041
call eax
push eax
lea ecx, [esp + 0x8d08]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8d04]
call fcn.10001650
mov ebx, dword [esp + 0x30]
mov edx, dword [ebx + 0x1c]
mov esi, dword [edx]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x398]
lea edx, [esp + 0x294]
push edx
add esi, 0xcc
call eax
mov edx, dword [eax]
push edi
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [esi]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x1c]
call edx
push eax
mov eax, dword [ebx + 0x1c]
push eax
call fcn.1004a440
mov eax, 0x64
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov dword [ebx + 0xa0], 1
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0xa68
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x54], eax
add esi, 0xc
call fcn.10064760
mov ecx, dword [esp + 0x54]
mov edx, dword [esi]
add esp, 4
push eax
push str._s:_Finished
push ecx
call edx
add esp, 0xc
push 0x206
lea eax, [esp + 0x910a]
push 0
push eax
mov word [esp + 0x9110], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20042
call eax
push eax
lea ecx, [esp + 0x9108]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x9104]
call fcn.10001650
mov eax, dword [esp + 0x40]
call fcn.100745e0
mov ebx, dword [esp + 0x30]
mov edx, dword [esp + 0x28]
mov edi, dword [edx + 0x2c]
mov ecx, dword [ebx + 0x1c]
mov esi, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [edx + 0x30]
mov dword [eax + 4], edi
mov edi, dword [edx + 0x34]
mov edx, dword [edx + 0x38]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edx
mov eax, dword [esi + 0xcc]
call eax
mov ecx, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x20]
push eax
mov esi, ebx
call fcn.100771a0
cmp dword [esp + 0x4c], 0
mov dword [ebx + 0x20], 1
je 0x1006c87d
cmp dword [esp + 0x24], 0
je 0x1006c878
cmp dword [esp + 0x18], 0x1043
jne 0x1006c87d
call fcn.10002cb0
lea esi, [esp + 0x3f24]
jmp 0x1006dfe2
xor eax, eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov dword [esp + 0x50], eax
mov eax, dword [edx + 0x10]
call eax
mov edi, eax
push 0xf5d
mov dword [esp + 0x68], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0xf5d
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov edx, dword [esp + 0x38]
mov dword [esi + 0xc], 0xf4c
mov dword [esi], 0x50465242
mov dword [esi + 4], 0xf5d
mov dword [esi + 8], 9
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0xc], 4
mov eax, dword [edx + 0xc]
add esi, 0x10
mov dword [esi], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x444]
add esp, 0xc
mov ecx, edi
call eax
lea ecx, [eax*8]
xor ecx, dword [esi + 4]
and ecx, 8
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x418]
mov ecx, edi
call eax
mov ecx, dword [esi + 4]
xor ecx, eax
and ecx, 1
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x41c]
mov ecx, edi
call eax
lea ecx, [eax + eax]
xor ecx, dword [esi + 4]
and ecx, 2
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x458]
mov ecx, edi
call eax
shl eax, 9
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x200
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x420]
call eax
lea ecx, [eax*4]
xor ecx, dword [esi + 4]
and ecx, 4
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x44c]
mov ecx, edi
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 6
xor ecx, dword [esi + 4]
and ecx, 0x40
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x448]
mov ecx, edi
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 5
xor ecx, dword [esi + 4]
and ecx, 0x20
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x424]
mov ecx, edi
call eax
movzx ecx, ax
mov dword [esi + 8], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x454]
mov ecx, edi
call eax
shl eax, 8
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x100
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x45c]
call eax
mov ecx, dword [esi + 4]
and eax, 1
or eax, 2
shl eax, 0xa
and ecx, 0xffffebff
or eax, ecx
mov dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x42c]
mov ecx, edi
call eax
mov dword [esi + 0xc], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x430]
lea eax, [esp + 0x2b4]
push eax
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x10], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x14], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x18], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1c], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.100652c0
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x40]
lea ecx, [esp + 0xbc]
push ecx
mov ecx, edi
call edx
mov byte [esp + 0x99b0], 7
test byte [esi + 4], 0x40
je 0x1006cadb
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax]
lea edx, [esp + 0xbc]
lea esi, [esp + 0x40]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], edx
call fcn.1000b830
mov edx, eax
mov eax, dword [esp + 0x2c]
add edx, 4
add eax, 0x748
jmp 0x1006caee
mov eax, dword [edi]
mov edx, dword [eax + 0x48]
mov ecx, edi
call edx
lea ecx, [esi + 0x738]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov esi, dword [esp + 0x64]
mov edx, dword [esi]
mov eax, dword [edx + 0x434]
mov ecx, esi
call eax
mov edi, dword [esp + 0x2c]
add edi, 0x10
lea ecx, [edi + 0x228]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x314]
mov ecx, esi
call eax
lea ecx, [edi + 0x530]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [esi]
mov edx, dword [edx + 0x438]
lea eax, [edi + 0xd40]
push eax
lea ecx, [edi + 0xb38]
push ecx
mov ecx, esi
call edx
lea ecx, [edi + 0x328]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov eax, dword [esi]
lea edx, [edi + 0x20]
mov dword [esp + 0x40], edx
mov edx, dword [eax + 0x428]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x40]
call fcn.100040a0
cmp dword [esp + 0xc4], 0
mov dword [ebx + 0x28], 2
jne 0x1006cb92
or dword [edi + 4], 8
jmp 0x1006cba3
and dword [edi + 4], 0xfffffff7
lea eax, [esp + 0xbc]
mov dword [edi + 0xf48], eax
mov esi, dword [esp + 0x2c]
mov edi, dword [esi + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
add esi, 0x10
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x14]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x18]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x1c]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x40]
mov edx, dword [edx + 4]
push eax
call edx
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.12285
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
push 0xf5d
push edx
call eax
mov edi, eax
mov eax, ebx
mov dword [esp + 0x24], edi
call fcn.100652f0
test edi, edi
jne 0x1006cc6b
mov ecx, dword [ebx + 0x1c]
push 0x40000
push ecx
mov ecx, esi
call fcn.10040970
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
movzx ecx, di
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x8c]
push eax
call edx
mov eax, 1
mov dword [ebx + 0x20], eax
mov dword [ebx + 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x50]
cmp eax, 0xbb8
jae 0x1006ccb2
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea esi, [esp + 0xbc]
mov byte [esp + 0x99b0], 5
call fcn.10064410
jmp 0x1006dfef
cmp eax, 0x80000
je 0x1006d156
cmp eax, 0x100000
je 0x1006cd6c
lea ecx, [esp + 0x3fbc]
mov byte [esp + 0x99b0], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f68]
mov byte [esp + 0x99b0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fd8]
mov byte [esp + 0x99b0], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f4c]
mov dword [esp + 0x99b0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, 1
jmp 0x1006e0f1
xor eax, eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x3f34]
mov dword [esp + 0x50], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
mov edi, eax
push 0xf5d
mov dword [esp + 0x68], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0xf5d
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov ecx, dword [esp + 0x38]
mov dword [esi + 0xc], 0xf4c
mov dword [esi], 0x50465242
mov dword [esi + 4], 0xf5d
mov dword [esi + 8], 0xf
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0xc], 0
mov edx, dword [ecx + 0xc]
add esi, 0x10
mov dword [esi], edx
mov eax, dword [edi]
mov edx, dword [eax + 0x444]
add esp, 0xc
mov ecx, edi
call edx
add eax, eax
add eax, eax
add eax, eax
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 8
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x418]
call eax
mov ecx, dword [esi + 4]
xor ecx, eax
and ecx, 1
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x41c]
mov ecx, edi
call eax
lea ecx, [eax + eax]
xor ecx, dword [esi + 4]
and ecx, 2
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x458]
mov ecx, edi
call eax
shl eax, 9
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x200
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x420]
call eax
lea ecx, [eax*4]
xor ecx, dword [esi + 4]
and ecx, 4
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x44c]
mov ecx, edi
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 6
xor ecx, dword [esi + 4]
and ecx, 0x40
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x448]
mov ecx, edi
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 5
xor ecx, dword [esi + 4]
and ecx, 0x20
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x424]
mov ecx, edi
call eax
movzx ecx, ax
mov dword [esi + 8], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x454]
mov ecx, edi
call eax
shl eax, 8
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x100
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x45c]
call eax
mov ecx, dword [esi + 4]
and eax, 1
or eax, 4
shl eax, 0xa
and ecx, 0xfffff3ff
or eax, ecx
mov dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x42c]
mov ecx, edi
call eax
mov dword [esi + 0xc], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x430]
lea eax, [esp + 0x2d4]
push eax
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x10], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x14], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x18], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1c], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.100652c0
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x40]
lea ecx, [esp + 0x40]
push ecx
mov ecx, edi
call edx
mov byte [esp + 0x99b0], 8
mov eax, dword [edi]
mov edx, dword [eax + 0x48]
mov ecx, edi
call edx
lea ecx, [esi + 0x738]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edi, dword [esp + 0x64]
mov edx, dword [edi]
mov eax, dword [edx + 0x434]
mov ecx, edi
call eax
lea ecx, [esi + 0x228]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x314]
mov ecx, edi
call eax
lea ecx, [esi + 0x530]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov edx, dword [edx + 0x438]
lea eax, [esi + 0xd40]
push eax
lea ecx, [esi + 0xb38]
push ecx
mov ecx, edi
call edx
lea ecx, [esi + 0x328]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [edi]
mov eax, dword [edx + 0x428]
mov ecx, edi
call eax
mov edx, eax
lea edi, [esi + 0x20]
mov eax, edi
call fcn.100040a0
cmp dword [esp + 0x48], 0
mov dword [ebx + 0x28], 2
jne 0x1006d02a
or dword [esi + 4], 8
jmp 0x1006d038
and dword [esi + 4], 0xfffffff7
lea ecx, [esp + 0x40]
mov dword [esi + 0xf48], ecx
mov ecx, dword [esi + 0x10]
mov edx, dword [esp + 0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 0x14]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x18]
mov dword [eax + 8], ecx
mov ecx, dword [esi + 0x1c]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.12285
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
push 0xf5d
push edx
call eax
mov edi, eax
mov eax, ebx
mov dword [esp + 0x24], edi
call fcn.100652f0
test edi, edi
jne 0x1006d0f9
mov ecx, dword [ebx + 0x1c]
push 0x100000
push ecx
mov ecx, esi
call fcn.10040970
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
movzx ecx, di
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x94]
push eax
call edx
mov eax, 1
mov dword [ebx + 0x20], eax
mov dword [ebx + 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x50]
cmp eax, 0xbb8
jae 0x1006d140
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea esi, [esp + 0x40]
mov byte [esp + 0x99b0], 5
call fcn.10064410
jmp 0x1006dfef
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0x28]
mov ecx, edi
mov dword [esp + 0x1c], esi
call edx
mov edi, eax
imul edi, edi, 0xf2a
add edi, 0x21a7
push edi
mov dword [esp + 0x5c], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push edi
push 0
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x38]
mov dword [eax + 4], edi
lea ecx, [edi - 0x11]
lea edi, [eax + 0x10]
mov dword [eax + 0xc], ecx
mov dword [eax], 0x50465242
mov dword [eax + 8], 0xe
mov dword [edi], ecx
mov eax, dword [esi]
mov edx, dword [eax + 0x2d4]
add esp, 0xc
mov ecx, esi
mov dword [esp + 0x28], edi
call edx
mov dword [edi + 8], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2dc]
mov ecx, esi
call edx
mov dword [edi + 0xc], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2d8]
mov ecx, esi
call edx
mov dword [edi + 0x10], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2e4]
mov ecx, esi
call edx
mov dword [edi + 0x14], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2e8]
mov ecx, esi
call edx
mov dword [edi + 0x18], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2ec]
mov ecx, esi
call edx
mov dword [edi + 0x1c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2f0]
mov ecx, esi
call edx
mov dword [edi + 0x20], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2f4]
mov ecx, esi
call edx
mov dword [edi + 0x28], edx
mov dword [edi + 0x24], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2f8]
mov ecx, esi
call edx
mov dword [edi + 0x2c], eax
mov eax, dword [esi]
mov ecx, esi
mov edx, dword [eax + 0x2fc]
call edx
mov dword [edi + 0x30], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2e0]
mov ecx, esi
call edx
mov ecx, dword [esp + 0x3f34]
mov dword [edi + 4], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
call edx
mov dword [edi + 0x2192], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x320]
lea ecx, [esp + 0x2f4]
push ecx
mov ecx, esi
call edx
mov edx, dword [eax]
mov dword [edi + 0x38], edx
mov edx, dword [eax + 4]
lea ecx, [edi + 0x38]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x508]
mov dword [esp + 0x20], ecx
mov ecx, esi
call eax
mov ecx, dword [edi + 0x252]
xor ecx, eax
and ecx, 1
xor dword [edi + 0x252], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x5cc]
mov ecx, esi
call eax
mov ecx, dword [edi + 0x252]
and eax, 3
or eax, 8
add eax, eax
and ecx, 0xfffffff1
or eax, ecx
mov dword [edi + 0x252], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x5ac]
mov ecx, esi
call eax
mov ecx, dword [ebx + 0x11dc]
mov dword [ebx + 0x11bc], eax
mov eax, dword [esp + 0x20]
mov dword [ecx + 8], 7
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [esp + 0x3f24], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x3f28], ecx
mov dword [esp + 0x3f2c], edx
mov edx, dword [esi]
lea ecx, [edi + 0x48]
mov dword [esp + 0x3f30], eax
mov eax, dword [edx + 0x324]
mov dword [esp + 0x34], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x34]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x304]
mov ecx, esi
call eax
lea ecx, [edi + 0x356]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov eax, dword [esi]
lea edx, [edi + 0x55e]
mov dword [esp + 0x38], edx
mov edx, dword [eax + 0x308]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x38]
call fcn.100040a0
mov eax, dword [esi]
mov edx, dword [eax + 0x30c]
mov ecx, esi
call edx
mov edx, eax
lea eax, [edi + 0x766]
call fcn.100040a0
mov eax, dword [esi]
mov edx, dword [eax + 0x310]
mov ecx, esi
call edx
mov edx, eax
lea eax, [edi + 0x96e]
call fcn.100040a0
mov edx, dword [esi]
lea eax, [edi + 0x256]
mov dword [esp + 0x5c], eax
mov eax, dword [edx + 0x300]
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x5c]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x314]
mov ecx, esi
call eax
lea ecx, [edi + 0x196e]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x318]
mov ecx, esi
call eax
lea ecx, [edi + 0x1b76]
mov edx, eax
mov eax, ecx
call fcn.100040a0
mov eax, dword [esi]
lea edx, [edi + 0x1d7e]
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 0x1a0]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x3c]
call fcn.100040a0
mov edx, dword [esi]
lea eax, [edi + 0x1f86]
mov dword [esp + 0x40], eax
mov eax, dword [edx + 0x1a4]
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x40]
call fcn.100040a0
mov edx, dword [esi]
mov eax, dword [edx + 0x3c]
mov ecx, esi
call eax
mov esi, dword [esp + 0x3f34]
movzx ecx, al
mov dword [edi + 0x218e], ecx
mov dword [ebx + 0x28], 1
mov edx, dword [esi]
mov eax, dword [edx + 0x4c]
mov ecx, esi
call eax
lea ecx, [esp + 0x70]
push ecx
mov ecx, eax
call fcn.10078990
mov byte [esp + 0x99b0], 0x18
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x4c], 0
call eax
test eax, eax
jbe 0x1006d512
mov ecx, edi
add ecx, 0x21a8
mov dword [esp + 0x54], ecx
mov edi, dword [esp + 0x4c]
lea esi, [esp + 0x70]
call fcn.1005bef0
mov edx, dword [esp + 0x54]
lea edi, [edx - 0x12]
mov esi, eax
mov ecx, 0x3ca
rep movsd dword es:[edi], dword [esi]
push 0x200
push edx
movsw word es:[edi], word [esi]
call fcn.10002390
mov ecx, dword [esp + 0x3f3c]
mov esi, dword [esp + 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add dword [esp + 0x5c], 0xf2a
add esi, 1
add esp, 8
mov dword [esp + 0x4c], esi
call eax
cmp esi, eax
jb 0x1006d4c0
xor edi, edi
push 0x7e
lea ecx, [esp + 0x9412]
push edi
push ecx
mov word [esp + 0x9418], di
call sub.MSVCR80.dll_memset
mov esi, dword [esp + 0x34]
movzx edx, byte [esi + 0x47]
movzx eax, byte [esi + 0x46]
movzx ecx, byte [esi + 0x45]
add esp, 0xc
push edx
movzx edx, byte [esi + 0x44]
push eax
movzx eax, byte [esi + 0x43]
push ecx
movzx ecx, byte [esi + 0x42]
push edx
movzx edx, byte [esi + 0x41]
push eax
movzx eax, byte [esi + 0x40]
push ecx
movzx ecx, word [esi + 0x3e]
push edx
movzx edx, word [esi + 0x3c]
push eax
mov eax, dword [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
push ecx
lea edx, [esp + 0x9438]
push 0x1014c4a8
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
push 0x206
lea eax, [esp + 0x8d0a]
push edi
push eax
mov word [esp + 0x8d10], di
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x8d04]
call fcn.10002ad0
mov edi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x10150e6c
lea ecx, [esp + 0x8d08]
push 0x104
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x940c]
push edx
lea eax, [esp + 0x8d08]
push 0x104
push eax
call edi
add esp, 0xc
lea ecx, [esp + 0x8d04]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1006d683
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea edx, [esp + 0x8d1c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
xor eax, eax
push 0x30bc
push eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x5a44], eax
lea eax, [esp + 0x5a48]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0
lea ecx, [esp + 0x68]
push ecx
push 0x30c0
lea edx, [esp + 0x5a48]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x5c92]
call fcn.100040a0
lea edx, [esp + 0x63aa]
lea eax, [esi + 0x96e]
call fcn.100040a0
mov eax, dword [esp + 0x38]
push 0x104
push eax
call fcn.10002390
lea eax, [esi + 0x766]
push 0x104
push eax
call fcn.10002390
mov eax, dword [esp + 0x6c]
xor edx, edx
add esp, 0x10
cmp eax, edx
je 0x1006d6d5
xor ecx, ecx
cmp word [eax], dx
je 0x1006d6d5
add eax, 2
add ecx, 1
cmp word [eax], dx
jne 0x1006d6b7
cmp ecx, edx
jle 0x1006d6d5
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x3c], 1
jmp 0x1006d6de
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0x3c], edx
lea eax, [esi + 0x96e]
cmp eax, edx
je 0x1006d70e
xor ecx, ecx
cmp word [eax], dx
je 0x1006d70e
nop
add eax, 2
add ecx, 1
cmp word [eax], dx
jne 0x1006d6f0
cmp ecx, edx
jle 0x1006d70e
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 4], 1
jmp 0x1006d717
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x38]
lea edx, [ebx + 0x11e0]
mov eax, 0x104
mov dword [esp + 0x60], edx
call fcn.100040e0
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
mov ecx, dword [esp + 0x60]
cmp word [ecx], 0x5c
jne 0x1006d8d0
cmp dword [esi + 0x18], 0
jne 0x1006d8d0
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
call eax
test eax, eax
je 0x1006d8d0
mov eax, dword [esp + 0x3f34]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [esp + 0x38]
push ecx
mov ecx, dword [eax + 8]
call fcn.10074c40
mov edi, eax
and edi, 0xffff
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], edi
je 0x1006d8c8
mov edx, dword [esp + 0x30]
cmp dword [edx + 0x50], 0
je 0x1006d8c8
mov esi, dword [esp + 0x20]
mov ebx, dword [esi]
mov eax, edx
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0xc]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x1006d81d
call sub.Comn.dll_GetObjectLog
mov ebx, dword [eax]
push 0x854
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x68], eax
add ebx, 0xc
call fcn.10064760
mov ecx, dword [esp + 0x68]
mov edx, dword [ebx]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov edi, dword [esp + 0x24]
add esp, 0xc
mov ebx, dword [esi]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x252]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x34]
mov eax, dword [eax + 4]
push edx
call eax
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x1006d880
call sub.Comn.dll_GetObjectLang
push str.12329
jmp 0x1006d89b
cmp eax, 2
jne 0x1006d891
call sub.Comn.dll_GetObjectLang
push str.12330
jmp 0x1006d89b
call sub.Comn.dll_GetObjectLang
push str.12331
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov dword [esp + 0x9c], edi
lea edx, [esp + 0x9c]
jmp 0x100688f6
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0x20]
call fcn.10030c20
mov ecx, dword [esp + 0x60]
cmp word [ecx], 0x5c
jne 0x1006d92a
push 0x206
lea edx, [esp + 0x8b02]
push 0
push edx
mov word [esp + 0x8b08], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebx + 0x2c], 0
je 0x1006d92a
mov ecx, dword [esp + 0x60]
lea edi, [esp + 0x8afc]
call fcn.10074d90
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
cmp dword [ebx + 0x11b8], 0
jne 0x1006d94f
cmp dword [ebx + 0x50], 0
jne 0x1006d94f
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x110]
call edx
test eax, eax
jne 0x100689ab
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov edx, dword [esp + 0x14]
mov dword [ebx + 0x11c8], ecx
mov dword [ebx + 0x11cc], eax
mov dword [ebx + 0x11d0], 0
mov ecx, dword [edi]
mov edx, dword [edx]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x252]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
and edx, 1
push edx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x34]
mov edx, dword [edx + 4]
push eax
call edx
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x1006d9ee
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x64], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12329
call eax
mov edx, dword [esp + 0x64]
jmp 0x1006da3b
cmp eax, 2
jne 0x1006da18
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x64], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12330
call eax
mov edx, dword [esp + 0x64]
jmp 0x1006da3b
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x64], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12331
call eax
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [edx]
call eax
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
mov dword [esp + 0x24], 0
call eax
test eax, eax
je 0x1006dc36
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x44]
push eax
push 1
push ecx
mov ecx, ebx
mov dword [esp + 0x50], 0
call fcn.10074730
test eax, eax
jne 0x1006dab2
mov dword [ebx + 0x94], 0x8a2105d
mov dword [esp + 0x24], 0x8a3105d
jmp 0x1006dbfd
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.100652c0
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
push eax
mov eax, dword [edi + 0xc]
push eax
call edx
mov edx, dword [esp + 0x58]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov ecx, dword [edi + 8]
push ecx
push 0
push 0
push 0x21c
lea edx, [esi + 0x34]
push edx
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0xc]
push 0x116
call eax
mov eax, ebx
call fcn.100652f0
cmp dword [esp + 0x24], 0
jne 0x1006dc27
mov ecx, dword [esp + 0x5c]
mov edi, dword [esp + 0x20]
push ecx
mov eax, edi
mov ecx, ebx
call fcn.1006f0f0
test eax, eax
jne 0x1006db72
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x64], eax
mov eax, dword [eax]
add eax, 0xc
push 0x8b3
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x54], eax
call fcn.10064760
mov edx, dword [esp + 0x68]
add esp, 4
push eax
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
push str._s:_PolicyManager_error.
push edx
call ecx
mov edi, dword [esp + 0x2c]
add esp, 0xc
lea edx, [esp + 0x8d04]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x12c]
call edx
test eax, eax
je 0x1006dbb2
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.1006f0d0
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x44]
push eax
push 2
push ecx
mov ecx, ebx
mov dword [esp + 0x50], 0
call fcn.10074730
test eax, eax
jne 0x1006dc27
mov dword [ebx + 0x94], 0x8bf1065
mov dword [esp + 0x24], 0x8c01065
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x34]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
push eax
lea esi, [ebx + 0x11c8]
call fcn.100650b0
mov esi, dword [esp + 0x30]
add esp, 8
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x20], 1
jmp 0x1006dc9b
push 0
push 0x82
push 2
push 0
push 0
push 0x40000000
lea edx, [esp + 0x8d1c]
push edx
mov dword [esp + 0x80], 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, dword [esi]
push 0
mov edi, eax
lea eax, [esp + 0x68]
push eax
push ecx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebx + 0x11dc]
mov eax, 0x32
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
xor eax, eax
mov dword [ebx + 0x54], eax
mov dword [edx + 0x20], eax
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
movzx eax, di
mov dword [esp + 0xa4], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xa4]
push eax
call edx
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
jne 0x1006df5b
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [ebx + 0x1c]
push esi
mov esi, dword [esp + 0x20]
push eax
mov ecx, esi
xor edx, edx
call fcn.10042860
mov eax, dword [ebx + 0x1c]
mov edi, dword [esp + 0x20]
mov edx, dword [eax]
mov ecx, dword [edi]
mov edx, dword [edx + 0xcc]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x1c]
call edx
cmp eax, 0xffffffff
mov dword [esp + 0x50], eax
jne 0x1006dd61
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0x8e5
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x68], eax
add esi, 0xc
call fcn.10064760
mov ecx, dword [esi]
add esp, 4
push eax
mov eax, dword [esp + 0x68]
push str._s:_get_task_index_fail
push eax
call ecx
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x5c]
add esp, 0xc
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x1b0]
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x620]
mov ecx, esi
call eax
test eax, eax
je 0x1006df5f
mov edx, dword [esi]
mov eax, dword [edx + 0x660]
mov ecx, esi
call eax
test eax, eax
je 0x1006df5f
mov edx, dword [esi]
mov eax, dword [edx + 0x11c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x628]
mov ecx, esi
call eax
test eax, eax
jne 0x1006de10
mov edx, dword [edi]
mov eax, dword [edx + 0x38]
mov ecx, edi
call eax
test eax, eax
jne 0x1006de10
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006ddf4
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006ddf4
call fcn.100022a0
test eax, eax
je 0x1006de10
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 6
jne 0x1006ded4
call fcn.100300d0
jmp 0x1006ded4
push 0x206
mov eax, 0x46
lea ecx, [esp + 0x8b02]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov word [esp + 0x8b08], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20041
call eax
push eax
lea ecx, [esp + 0x8b00]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8afc]
call fcn.10001650
mov ebx, dword [esp + 0x30]
mov edx, dword [ebx + 0x1c]
mov esi, dword [edx]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x320]
lea edx, [esp + 0x314]
push edx
add esi, 0xcc
call eax
mov edx, dword [eax]
push edi
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [esi]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x1c]
call edx
push eax
mov eax, dword [ebx + 0x1c]
push eax
call fcn.1004a440
push 0x206
mov eax, 0x64
lea ecx, [esp + 0x910a]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov dword [ebx + 0xa0], 1
mov word [esp + 0x9110], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20042
call eax
push eax
lea ecx, [esp + 0x9108]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x9104]
call fcn.10001650
mov eax, edi
call fcn.100745e0
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
mov esi, dword [edi]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 4]
mov dword [eax + 4], esi
mov esi, dword [edi + 8]
mov dword [eax + 8], esi
mov esi, dword [edi + 0xc]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
mov dword [esp + 0x50], eax
jne 0x1006dfc6
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0x913
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x68], eax
add esi, 0xc
call fcn.10064760
mov ecx, dword [esp + 0x68]
mov edx, dword [esi]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov eax, dword [esp + 0x5c]
add esp, 0xc
mov ecx, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x20]
push eax
mov esi, ebx
call fcn.10076930
mov dword [ebx + 0x20], 1
lea esi, [esp + 0x70]
mov byte [esp + 0x99b0], 5
call fcn.10029f90
mov ecx, dword [ebx + 0x24]
mov edx, dword [ecx]
mov eax, dword [esp + 0x14]
mov edx, dword [edx + 4]
push 0
push eax
call edx
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x2c]
push eax
mov esi, ebx
mov dword [ebx + 0x20], 1
call fcn.10075de0
lea ecx, [esp + 0x3f34]
push ecx
push ebx
call fcn.10065ef0
mov eax, dword [ebx + 0x11dc]
test eax, eax
je 0x1006e042
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete_void__
add esp, 4
mov dword [ebx + 0x11dc], 0
mov edx, dword [0x1014692c]
mov eax, dword [esp + 0x80]
mov dword [eax], edx
mov ecx, dword [0x10146930]
mov dword [eax + 4], ecx
mov edx, dword [0x10146934]
mov dword [eax + 8], edx
mov ecx, dword [0x10146938]
mov dword [eax + 0xc], ecx
lea ecx, [esp + 0x3fbc]
mov byte [esp + 0x99b0], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f68]
mov byte [esp + 0x99b0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fd8]
mov byte [esp + 0x99b0], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f4c]
mov dword [esp + 0x99b0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x99a8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x9990]
xor ecx, esp
call fcn.1012d370
mov esp, ebp
pop ebp
ret 4