Function at 0x100665d0
Capabilities:
Check for time delay via gettickcount
Check if file exists
Check os version
Decompress data using quicklz
Delete file
Get file attributes
Get number of processors
Read file on windows
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1014ba78
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x9994
call fcn.10132000
mov eax, dword [0x10177024]
xor eax, esp
mov dword [esp + 0x9990], eax
push ebx
push esi
push edi
mov eax, dword [0x10177024]
xor eax, esp
push eax
lea eax, [esp + 0x99a8]
mov dword fs:[0], eax
mov ebx, ecx
xor esi, esi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x58], esi
call sub.Comn.dll_GetObjectGpt
lea ecx, [esp + 0x3f4c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea eax, [esp + 0x3f4c]
push eax
mov dword [esp + 0x99b4], esi
call fcn.10003040
add esp, 4
push 0x10153118
lea ecx, [esp + 0x3f50]
call dword [0x1014c4e8]
lea ecx, [esp + 0x3fd8]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov byte [esp + 0x99b0], 3
mov eax, dword [esp + 0x3f50]
mov edi, 8
cmp dword [esp + 0x3f64], edi
jae 0x100666b7
lea eax, [esp + 0x3f50]
push eax
lea ecx, [esp + 0x3fdc]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
lea ecx, [esp + 0x3f68]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x3f68]
push ecx
mov byte [esp + 0x99b4], 4
call fcn.10003040
add esp, 4
push str.CurTaskState.ini
lea ecx, [esp + 0x3f6c]
call dword [0x1014c4e8]
cmp dword [esp + 0x3f80], edi
mov eax, dword [esp + 0x3f6c]
jae 0x10066713
lea eax, [esp + 0x3f6c]
push eax
lea ecx, [esp + 0x3fa4]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
cmp dword [esp + 0x3fb8], edi
mov eax, dword [esp + 0x3fa4]
jae 0x10066738
lea eax, [esp + 0x3fa4]
push eax
push 0x10158254
push 0x10158258
push str.TaskState
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, ebx
call fcn.10077b80
mov edx, dword [ebx]
mov eax, dword [edx + 0x24]
mov ecx, ebx
call eax
mov edi, dword [ebp + 8]
cmp edi, eax
jae 0x1006d146
mov ecx, dword [ebx + 8]
cmp ecx, esi
je 0x1006677a
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov dword [ebx + 8], esi
call sub.FuncLogic.dll_CreateFuncExecute
mov dword [ebx + 8], eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
push 0x1140
lea ecx, [ebx + 0x78]
push esi
push ecx
call sub.MSVCR80.dll_memset
mov edx, dword [ebx + 0x48]
add esp, 0xc
push 0xffffffffffffffff
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebx + 0x10]
cmp eax, esi
je 0x100667ca
mov ecx, dword [ebx + 0x14]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x100667d0
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov ecx, dword [ebx + 0x10]
lea eax, [edi + edi*2]
mov edx, dword [ecx + eax*8]
lea eax, [ecx + eax*8]
mov ecx, dword [eax + 4]
mov dword [esp + 0x3f34], edx
mov edx, dword [eax + 8]
mov dword [esp + 0x3f38], ecx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x3f3c], edx
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x3f40], ecx
mov ecx, dword [ebx + 0x48]
push ecx
mov dword [esp + 0x3f48], edx
mov dword [esp + 0x3f4c], eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebx + 0x24]
mov dword [esp + 0x14], esi
mov edx, dword [ecx]
mov edx, dword [edx]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x28]
push edi
mov ecx, ebx
call edx
cmp eax, esi
mov ecx, 1
mov dword [ebx + 0x74], eax
mov dword [ebx + 0x54], ecx
je 0x10066960
cmp eax, 0x20
je 0x10066960
cmp eax, 0x20000
je 0x10066960
cmp eax, 0x80000
je 0x10066960
cmp eax, 0x200
je 0x10066960
cmp dword [ebx + 0x50], esi
mov dword [ebx + 0x54], esi
jne 0x1006699e
lea esi, [ebx + 0x11c0]
call fcn.10064e90
test eax, eax
je 0x100668a4
mov eax, dword [esi]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x10066946
call sub.Comn.dll_GetObjectLog
mov ebx, eax
mov esi, dword [ebx]
push 0x1e1
mov edi, str..UiTaskMgr.cpp
add esi, 0xc
call fcn.10064bc0
mov ecx, dword [esi]
add esp, 4
push eax
push str._s:_reset_event_fail
push ebx
call ecx
add esp, 0xc
lea ecx, [esp + 0x3f68]
mov byte [esp + 0x99b0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fd8]
mov byte [esp + 0x99b0], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f4c]
mov dword [esp + 0x99b0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, 0x1e21002
jmp 0x1006e541
mov esi, dword [ebx + 0x11c4]
call fcn.10064f20
test eax, eax
je 0x1006699e
mov edx, dword [esi]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
jmp 0x1006699e
test byte [0x101c2978], cl
mov dword [ebx + 0x54], ecx
jne 0x1006698f
or dword [0x101c2978], ecx
push 0x1014bc80
mov dword [0x101c1f54], 0x10152118
mov byte [0x101c1f58], 0
call fcn.10130f6d
add esp, 4
mov eax, dword [0x101c1f54]
mov edx, dword [eax]
push esi
mov ecx, 0x101c1f54
call edx
xor eax, eax
lea esi, [ebx + 0x64]
mov dword [esp + 0x3f24], eax
mov dword [esp + 0x3f28], eax
mov dword [esp + 0x3f2c], eax
mov dword [esp + 0x3f30], eax
lea eax, [esp + 0x3f24]
mov ecx, esi
mov dword [esp + 0x80], esi
call fcn.1002f890
test eax, eax
jne 0x100669ff
mov eax, dword [esp + 0x3f24]
mov ecx, dword [esp + 0x3f28]
mov edx, dword [esp + 0x3f2c]
mov dword [esi], eax
mov eax, dword [esp + 0x3f30]
mov dword [esi + 4], ecx
mov dword [esi + 8], edx
mov dword [esi + 0xc], eax
lea ecx, [esp + 0x3fbc]
mov dword [ebx + 0x60], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x3fbc]
push ecx
mov byte [esp + 0x99b4], 5
call fcn.10003040
add esp, 4
push str.BRFunction.ini
lea ecx, [esp + 0x3fc0]
call dword [0x1014c4e8]
mov eax, dword [esp + 0x3fc0]
mov esi, 8
cmp dword [esp + 0x3fd4], esi
jae 0x10066a59
lea eax, [esp + 0x3fc0]
push eax
lea ecx, [esp + 0x3f88]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
cmp dword [esp + 0x3f9c], esi
mov eax, dword [esp + 0x3f88]
jae 0x10066a7e
lea eax, [esp + 0x3f88]
push eax
push 0x101582bc
push 0x101582c0
push str.FUNCTION
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, dword [ebx]
mov eax, dword [edx + 0x28]
push edi
mov ecx, ebx
mov dword [ebx + 0x11d4], edi
call eax
cmp eax, 0x80
ja 0x1006a4a3
je 0x1006a224
cmp eax, 0x40
ja case.0x10066ac5.1
movzx ecx, byte [eax + 0x1006e588]
jmp dword [ecx*4 + 0x1006e568]
mov esi, dword [esp + 0x3f34]
mov edx, dword [esi]
mov eax, dword [edx + 0x10]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x40], edi
call eax
imul eax, eax, 0x420
add eax, 0x21
push eax
mov dword [esp + 0x3c], eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov ecx, dword [esp + 0x3c]
add esp, 4
push ecx
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x44]
mov dword [esi + 4], eax
add eax, 0xffffffef
mov dword [esi + 0xc], eax
mov dword [esi], 0x50465242
mov dword [esi + 8], 2
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
add esp, 0xc
mov ecx, edi
call eax
mov ecx, dword [esi + 0x14]
xor ecx, eax
and ecx, 1
xor dword [esi + 0x14], ecx
mov edx, dword [esi + 0xc]
mov ecx, dword [esp + 0x3f34]
mov dword [esi + 0x10], edx
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
call edx
mov dword [esi + 0x18], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
mov ecx, edi
call edx
add eax, eax
add eax, eax
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 4
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x7c]
call eax
lea ecx, [eax*8]
xor ecx, dword [esi + 0x14]
and ecx, 8
xor dword [esi + 0x14], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x84]
mov ecx, edi
call eax
shl eax, 5
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x20
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x80]
call eax
shl eax, 4
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x10
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x74]
call eax
lea ecx, [eax + eax]
xor ecx, dword [esi + 0x14]
and ecx, 2
xor dword [esi + 0x14], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x88]
mov ecx, edi
call eax
shl eax, 6
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x40
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x90]
call eax
shl eax, 7
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x80
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x94]
call eax
shl eax, 8
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x100
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x5c4]
call eax
shl eax, 9
xor eax, dword [esi + 0x14]
mov ecx, edi
and eax, 0x200
xor dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
call eax
mov ecx, dword [esi + 0x1c]
xor ecx, eax
and ecx, 1
xor dword [esi + 0x1c], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x5ac]
mov ecx, edi
call eax
mov dword [ebx + 0x11bc], eax
mov eax, dword [esp + 0x3f34]
add eax, 0x214
mov dword [ebx + 0x28], 3
mov dword [esp + 0x18], 0
call fcn.10028990
test eax, eax
jbe 0x10066e14
mov ecx, esi
add ecx, 0x28
mov dword [esp + 0x1c], ecx
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x214
call fcn.10079090
mov ecx, dword [eax]
mov edx, dword [ecx]
mov edx, dword [edx]
lea eax, [esp + 0x924]
push eax
call edx
mov ecx, dword [esp + 0x1c]
add ecx, 0x1f8
lea edi, [ecx - 0x200]
mov esi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x214
call fcn.10079090
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x524]
push ecx
mov ecx, eax
call edx
mov edi, dword [esp + 0x1c]
mov esi, eax
mov eax, dword [esp + 0x1c]
movzx eax, word [eax]
add edi, 0x1f8
test eax, 0x100
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
je 0x10066d76
test al, 1
jne 0x10066d76
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x214
call fcn.10079090
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [esp + 0x1724]
push ecx
mov ecx, eax
call edx
mov edx, dword [eax + 0x8dc]
mov ecx, dword [esp + 0x1c]
add eax, 0x8dc
add ecx, 0x3f8
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [esp + 0x1c]
movzx eax, word [ecx + 0x200]
test eax, 0x100
je 0x10066de8
test al, 1
jne 0x10066de8
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x214
call fcn.10079090
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [esp + 0x2b24]
push ecx
mov ecx, eax
call edx
mov edx, dword [eax + 0x8dc]
mov ecx, dword [esp + 0x1c]
add eax, 0x8dc
add ecx, 0x408
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x3f34]
add dword [esp + 0x1c], 0x420
add esi, 1
add eax, 0x214
mov dword [esp + 0x18], esi
call fcn.10028990
cmp esi, eax
jb 0x10066c90
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x2c]
imul ecx, ecx, 0x420
lea eax, [ecx + edx + 0x220]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x28], eax
jmp 0x10066e40
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 0x228]
add ecx, 0x224
test eax, eax
je 0x10066f6a
mov ecx, dword [ecx + 8]
sub ecx, eax
mov eax, 0x3e0f83e1
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x18], eax
jae 0x10066f6a
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x1c]
add esi, 0x224
call fcn.100790b0
mov edi, dword [esp + 0x28]
add edi, 0xfffffe00
mov esi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x1c]
add esi, 0x224
call fcn.100790b0
mov edi, dword [esp + 0x28]
mov esi, eax
add esi, 0x210
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x1c]
add esi, 0x224
call fcn.100790b0
mov edx, dword [eax + 0x200]
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x3f34]
add eax, 0x200
add ecx, 0x200
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
add esi, 0x224
mov dword [ecx + 0xc], eax
call fcn.100790b0
mov edx, dword [eax + 0x410]
mov ecx, dword [esp + 0x28]
add eax, 0x410
mov dword [ecx + 0x210], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x214], edx
mov edx, dword [eax + 8]
mov dword [ecx + 0x218], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0x21c], eax
mov eax, 1
add dword [esp + 0x18], eax
add ecx, 0x420
add dword [esp + 0x1c], eax
mov dword [esp + 0x28], ecx
jmp 0x10066e40
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20043
add esi, 4
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x14]
test al, al
jns 0x10066fa5
call sub.Comn.dll_GetObjectLang
push str.40105
jmp 0x10066fbf
test al, 1
je 0x10066fb5
call sub.Comn.dll_GetObjectLang
push str.20054
jmp 0x10066fbf
call sub.Comn.dll_GetObjectLang
push str.20044
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov esi, dword [esp + 0x40]
mov dword [esp + 0x20], 0
mov eax, dword [esi]
mov edx, dword [eax + 0x174]
lea ecx, [esp + 0x184]
push ecx
mov ecx, esi
call edx
mov edx, dword [eax]
mov edi, dword [ebp + 8]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
lea ecx, [esp + 0x30]
push ecx
push 1
push edi
mov ecx, ebx
call fcn.10074b80
test eax, eax
jne 0x10067041
mov dword [ebx + 0x94], 0x24e105d
mov dword [esp + 0x24], 0x24f105d
jmp 0x100670db
mov eax, dword [esp + 0x3f34]
mov eax, dword [eax + 0x23c]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
push eax
mov eax, dword [esp + 0x3f38]
mov eax, dword [eax + 0x240]
push eax
call edx
mov edx, dword [esp + 0x38]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], 0
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
lea eax, [esp + 0x214]
push eax
mov ecx, esi
call edx
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
lea ecx, [esp + 0x30]
push ecx
push 2
push edi
mov ecx, ebx
call fcn.10074b80
test eax, eax
jne 0x1006710c
mov dword [ebx + 0x94], 0x25a1065
mov dword [esp + 0x24], 0x25b1065
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x20]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
push eax
lea esi, [ebx + 0x11c8]
call fcn.10065500
add esp, 8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
movzx ecx, word [esp + 0x24]
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x90]
push eax
call edx
jmp 0x1006e43f
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
mov edi, eax
push 0xf5d
mov dword [esp + 0x44], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0xf5d
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov ecx, dword [esp + 0x38]
mov dword [esi + 0xc], 0xf4c
mov dword [esi], 0x50465242
mov dword [esi + 4], 0xf5d
mov dword [esi + 8], 8
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0xc], 0
mov edx, dword [ecx + 0xc]
add esi, 0x10
mov dword [esi], edx
mov eax, dword [edi]
mov edx, dword [eax + 0x444]
add esp, 0xc
mov ecx, edi
mov dword [esp + 0x38], esi
call edx
add eax, eax
add eax, eax
add eax, eax
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 8
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x418]
call eax
mov ecx, dword [esi + 4]
xor ecx, eax
and ecx, 1
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x41c]
mov ecx, edi
call eax
lea ecx, [eax + eax]
xor ecx, dword [esi + 4]
and ecx, 2
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x458]
mov ecx, edi
call eax
shl eax, 9
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x200
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x420]
call eax
lea ecx, [eax*4]
xor ecx, dword [esi + 4]
and ecx, 4
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x44c]
mov ecx, edi
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 6
xor ecx, dword [esi + 4]
and ecx, 0x40
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov ecx, edi
mov eax, dword [edx + 0x448]
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 5
xor ecx, dword [esi + 4]
and ecx, 0x20
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x424]
mov ecx, edi
call eax
movzx ecx, ax
mov dword [esi + 8], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x454]
mov ecx, edi
call eax
shl eax, 8
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x100
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x45c]
call eax
mov ecx, dword [esi + 4]
and eax, 1
shl eax, 0xa
and ecx, 0xffffe3ff
or eax, ecx
mov dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x42c]
mov ecx, edi
call eax
mov dword [esi + 0xc], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x430]
lea eax, [esp + 0x1b4]
push eax
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x10], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x14], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x18], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1c], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.10065700
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x40]
lea ecx, [esp + 0xac]
push ecx
mov ecx, edi
call edx
mov byte [esp + 0x99b0], 6
test byte [esi + 4], 0x40
je 0x10067373
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax]
lea edx, [esp + 0xac]
lea esi, [esp + 0x64]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x64], edx
call fcn.1000b9b0
mov esi, dword [esp + 0x38]
mov edx, eax
add edx, 4
lea eax, [esi + 0x738]
call fcn.10004090
jmp 0x1006738f
mov eax, dword [edi]
mov edx, dword [eax + 0x48]
mov ecx, edi
call edx
lea ecx, [esi + 0x738]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x40]
mov edx, dword [edi]
mov eax, dword [edx + 0x434]
mov ecx, edi
call eax
lea ecx, [esi + 0x228]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x314]
mov ecx, edi
call eax
lea ecx, [esi + 0x530]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov edx, dword [edx + 0x438]
lea eax, [esi + 0xd40]
push eax
lea ecx, [esi + 0xb38]
push ecx
mov ecx, edi
call edx
lea ecx, [esi + 0x328]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x428]
mov ecx, edi
call eax
mov edx, eax
lea edi, [esi + 0x20]
mov eax, edi
call fcn.10004090
cmp dword [esp + 0xb4], 0
mov dword [ebx + 0x28], 2
jne 0x10067421
or dword [esi + 4], 8
jmp 0x10067432
and dword [esi + 4], 0xfffffff7
lea ecx, [esp + 0xac]
mov dword [esi + 0xf48], ecx
mov ecx, dword [esi + 0x10]
mov edx, dword [esp + 0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 0x14]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x18]
mov dword [eax + 8], ecx
mov ecx, dword [esi + 0x1c]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
test dword [esi + 4], 0x100
je 0x1006747e
call sub.Comn.dll_GetObjectLang
push str.20053
jmp 0x10067488
call sub.Comn.dll_GetObjectLang
push str.20046
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
mov eax, dword [esp + 0x3f34]
mov esi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push esi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
push 0xf5d
push edx
call eax
mov esi, eax
mov eax, ebx
mov dword [esp + 0x24], esi
call fcn.10065730
test esi, esi
jne 0x10067507
mov ecx, dword [ebx + 0x1c]
push 0x40
push ecx
mov ecx, dword [esp + 0x40]
call fcn.10040ac0
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
movzx ecx, si
mov dword [esp + 0xcc], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xcc]
push eax
call edx
lea esi, [esp + 0xac]
mov byte [esp + 0x99b0], 5
call fcn.1000ba00
jmp 0x1006e43f
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0x28]
mov ecx, edi
mov dword [esp + 0x20], esi
call edx
mov edi, eax
shl edi, 9
add edi, 0x1d85
push edi
mov dword [esp + 0x58], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push edi
push 0
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x38]
mov dword [eax + 4], edi
lea ecx, [edi - 0x11]
lea edi, [eax + 0x10]
mov dword [eax + 0xc], ecx
mov dword [eax], 0x50465242
mov dword [eax + 8], 0
mov dword [edi], ecx
mov eax, dword [esi]
mov edx, dword [eax + 0x134]
add esp, 0xc
mov ecx, esi
mov dword [esp + 0x28], edi
call edx
mov ecx, dword [edi + 4]
xor ecx, eax
and ecx, 1
xor dword [edi + 4], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x138]
mov ecx, esi
call eax
lea ecx, [eax + eax]
xor ecx, dword [edi + 4]
and ecx, 2
xor dword [edi + 4], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x13c]
mov ecx, esi
call eax
lea ecx, [eax*4]
xor ecx, dword [edi + 4]
and ecx, 4
xor dword [edi + 4], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x140]
mov ecx, esi
call eax
lea ecx, [eax*8]
xor ecx, dword [edi + 4]
and ecx, 8
xor dword [edi + 4], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x144]
mov ecx, esi
call eax
shl eax, 4
xor eax, dword [edi + 4]
mov ecx, esi
and eax, 0x10
xor dword [edi + 4], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x148]
call eax
shl eax, 5
xor eax, dword [edi + 4]
and eax, 0x20
xor dword [edi + 4], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x508]
mov ecx, esi
call eax
shl eax, 8
xor eax, dword [edi + 4]
mov ecx, esi
and eax, 0x100
xor dword [edi + 4], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x14c]
call eax
mov ecx, dword [edi + 4]
shl eax, 0xb
and ecx, 0x7ff
or eax, ecx
mov dword [edi + 4], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x150]
mov ecx, esi
call eax
mov dword [edi + 8], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x154]
mov ecx, esi
call eax
mov dword [edi + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x158]
mov ecx, esi
call eax
mov dword [edi + 0x10], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x15c]
mov ecx, esi
call eax
mov dword [edi + 0x14], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x160]
mov ecx, esi
call eax
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], edx
mov edx, dword [esi]
mov eax, dword [edx + 0x164]
mov ecx, esi
call eax
mov dword [edi + 0x20], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x168]
mov ecx, esi
call eax
mov ecx, dword [esp + 0x3f34]
mov dword [edi + 0x24], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov dword [edi + 0x1d70], eax
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
lea eax, [esp + 0x2e4]
push eax
mov ecx, esi
call edx
mov edx, dword [eax]
mov dword [edi + 0x2c], edx
mov edx, dword [eax + 4]
lea ecx, [edi + 0x2c]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x5cc]
mov dword [esp + 0x1c], ecx
mov ecx, esi
call eax
shl eax, 9
xor eax, dword [edi + 4]
and eax, 0x600
xor dword [edi + 4], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
mov eax, dword [esi]
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
mov edx, dword [eax + 0x170]
mov ecx, esi
call edx
shl eax, 6
xor eax, dword [edi + 4]
mov ecx, esi
and eax, 0x40
xor dword [edi + 4], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x130]
call edx
shl eax, 7
xor eax, dword [edi + 4]
mov ecx, esi
and eax, 0x80
xor dword [edi + 4], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x5ac]
call edx
mov dword [ebx + 0x11bc], eax
mov eax, dword [edi + 4]
test al, 0x40
je 0x100677c6
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 8], 0
jmp 0x100677e6
test al, al
jns 0x100677d9
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 8], 1
jmp 0x100677e6
mov edx, dword [ebx + 0x11dc]
mov dword [edx + 8], 2
mov dword [ebx + 0x28], 1
mov edx, dword [esi]
lea eax, [edi + 0x3c]
mov dword [esp + 0x5c], eax
mov eax, dword [edx + 0x188]
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x5c]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x17c]
mov ecx, esi
call eax
lea ecx, [edi + 0x344]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x180]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x54c]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x184]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x754]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x18c]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x95c]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x178]
lea ecx, [edi + 0x244]
mov dword [esp + 0x34], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x34]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x1a0]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x195c]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x1a4]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x1b64]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x3c]
mov ecx, esi
call eax
movzx ecx, al
push 0x7e
lea edx, [esp + 0x9512]
push 0
mov dword [edi + 0x1d6c], ecx
push edx
mov word [esp + 0x9518], 0
call sub.MSVCR80.dll_memset
mov eax, dword [esi]
mov edx, dword [eax + 0x174]
add esp, 0xc
lea ecx, [esp + 0x1a4]
push ecx
mov ecx, esi
call edx
mov dword [esp + 0x40], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x174]
lea ecx, [esp + 0x264]
push ecx
mov ecx, esi
call edx
movzx eax, byte [eax + 0xf]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x1c8]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 0xe]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x2cc]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 0xd]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x1f0]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 0xc]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x154]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 0xb]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x298]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 0xa]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x21c]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 9]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x320]
push eax
mov ecx, esi
call edx
movzx eax, byte [eax + 8]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x244]
push eax
mov ecx, esi
call edx
movzx eax, word [eax + 6]
mov edx, dword [esi]
mov edx, dword [edx + 0x174]
push eax
lea eax, [esp + 0x2c8]
push eax
mov ecx, esi
call edx
movzx eax, word [eax + 4]
push eax
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx]
push edx
lea eax, [esp + 0x9538]
push 0x101527d8
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
push 0x206
lea ecx, [esp + 0x979a]
push 0
push ecx
mov word [esp + 0x97a0], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x9794]
call fcn.10002ad0
push 0x1015719c
lea edx, [esp + 0x9798]
push 0x104
push edx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea eax, [esp + 0x950c]
push eax
lea ecx, [esp + 0x9798]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edx, [esp + 0x9794]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x10067b33
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea eax, [esp + 0x97ac]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x4c], eax
xor eax, eax
push 0x1f70
push eax
lea ecx, [esp + 0x5a48]
push ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x5a48], eax
call sub.MSVCR80.dll_memset
mov ecx, dword [esp + 0x58]
add esp, 0xc
push 0
lea edx, [esp + 0x44]
push edx
push 0x1f74
lea eax, [esp + 0x5a48]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, dword [esp + 0x4c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x5c80]
call fcn.10004090
lea edx, [esp + 0x6398]
lea eax, [edi + 0x95c]
call fcn.10004090
lea eax, [edi + 0x54c]
push 0x104
push eax
call fcn.10002390
lea eax, [edi + 0x754]
push 0x104
push eax
call fcn.10002390
mov ecx, dword [esp + 0x44]
add esp, 0x10
call fcn.10004070
test eax, eax
jle 0x10067b74
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0x3c], 1
jmp 0x10067b81
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x3c], 0
lea ecx, [edi + 0x95c]
call fcn.10004070
test eax, eax
jle 0x10067b9f
mov edx, dword [ebx + 0x11dc]
mov dword [edx + 4], 1
jmp 0x10067bac
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 4], 0
lea edx, [ebx + 0x11e0]
mov eax, 0x104
lea ecx, [edi + 0x54c]
mov dword [esp + 0x60], edx
call fcn.100040d0
mov ecx, dword [esp + 0x60]
cmp word [ecx], 0x5c
jne 0x10067d4a
cmp dword [edi + 0xc], 0
jne 0x10067d4a
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx + 0x438]
mov ecx, dword [ecx + 0x434]
push edx
mov edx, dword [esp + 0x34]
lea eax, [edi + 0x1b64]
push eax
mov eax, dword [esp + 0x68]
push eax
lea ebx, [edi + 0x195c]
call fcn.10075090
mov dword [esp + 0x24], eax
and eax, 0xffff
mov dword [esp + 0x18], eax
je 0x10067d46
mov ecx, dword [esp + 0x30]
cmp dword [ecx + 0x50], 0
je 0x10067d46
mov esi, dword [esp + 0x1c]
mov ebx, dword [esi]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov edx, ecx
mov ecx, dword [edx + 0x1c]
mov edx, dword [ecx]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0xc]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x10067c95
call sub.Comn.dll_GetObjectLog
mov ebx, eax
mov esi, dword [ebx]
push 0x430
mov edi, str..UiTaskMgr.cpp
add esi, 0xc
call fcn.10064bc0
mov ecx, dword [esi]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ebx
call ecx
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x34]
add esp, 0xc
mov ebx, dword [esi]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x1c]
call eax
mov eax, dword [edi + 4]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
shr eax, 8
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x5c]
mov eax, dword [eax + 4]
push edx
call eax
mov edi, dword [edi + 0xc]
call sub.Comn.dll_GetObjectLang
cmp edi, 1
jne 0x10067cf4
push str.20055
jmp 0x10067d05
cmp edi, 2
jne 0x10067d00
push str.20056
jmp 0x10067d05
push str.20052
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xc8], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xc8]
push eax
call edx
mov ebx, dword [esp + 0x30]
jmp 0x1006e43f
mov ebx, dword [esp + 0x30]
lea ecx, [edi + 0x54c]
call fcn.10030d70
mov eax, dword [esp + 0x60]
cmp word [eax], 0x5c
jne 0x10067d9e
push 0x206
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebx + 0x2c], 0
je 0x10067d9e
mov ecx, dword [esp + 0x60]
lea edi, [esp + 0x8d04]
call fcn.100751e0
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
mov dword [esp + 0x38], 0
call eax
test eax, eax
jbe 0x10067e11
add edi, 0x1d74
mov dword [esp + 0x4c], edi
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x38]
add esi, 0x218
call fcn.10078d50
mov esi, eax
mov eax, dword [esp + 0x4c]
mov edi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x3f34]
mov esi, dword [esp + 0x38]
mov edx, dword [ecx]
add eax, 0x200
mov dword [esp + 0x4c], eax
mov eax, dword [edx + 0x28]
add esi, 1
mov dword [esp + 0x38], esi
call eax
cmp esi, eax
jb 0x10067dc2
mov esi, dword [esp + 0x20]
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
cmp dword [ebx + 0x11b8], 0
jne 0x10067f0f
cmp dword [ebx + 0x50], 0
jne 0x10067f0f
mov edx, dword [esi]
mov eax, dword [edx + 0x110]
mov ecx, esi
call eax
test eax, eax
je 0x10067f0f
mov ecx, dword [esp + 0x2c]
push ecx
mov edx, esi
mov ecx, ebx
call fcn.10074700
lea edx, [esp + 0x3f34]
push edx
push ebx
call fcn.10066340
mov eax, ebx
call fcn.10065700
mov eax, dword [esp + 0x54]
mov edi, dword [esp + 0x2c]
push eax
push edi
call fcn.1006e5d0
push edi
mov esi, eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
lea ecx, [esp + 0x3fbc]
mov byte [esp + 0x99b0], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f68]
mov byte [esp + 0x99b0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fd8]
mov byte [esp + 0x99b0], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f4c]
mov dword [esp + 0x99b0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, esi
jmp 0x1006e541
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 0x434]
mov ecx, dword [ecx + 0x438]
mov edi, dword [esp + 0x1c]
mov dword [ebx + 0x11c8], ecx
mov ecx, dword [esp + 0x14]
mov dword [ebx + 0x11cc], eax
mov dword [ebx + 0x11d0], 0
mov edx, dword [ecx]
mov ecx, dword [edi]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov edx, dword [esp + 0x28]
mov edx, dword [edx + 4]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
shr edx, 8
and edx, 1
push edx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov edx, dword [edx + 4]
push eax
call edx
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0xc]
cmp eax, 1
jne 0x10067fc0
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20055
call eax
mov edx, dword [esp + 0x40]
jmp 0x1006800d
cmp eax, 2
jne 0x10067fea
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20056
call eax
mov edx, dword [esp + 0x40]
jmp 0x1006800d
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20052
call eax
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [edx]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x110]
mov ecx, esi
mov dword [esp + 0x24], 0
call eax
test eax, eax
je 0x10068236
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 1
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074b80
test eax, eax
jne 0x10068082
mov dword [ebx + 0x94], 0x48d105d
mov dword [esp + 0x24], 0x48e105d
jmp 0x100681ef
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi + 0x434]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
push eax
mov eax, dword [edi + 0x438]
push eax
call edx
mov edx, dword [esp + 0x54]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov ecx, dword [edi + 0x434]
mov edx, dword [esp + 0x28]
push ecx
push 0
push 0
push 0x21c
add edx, 0x28
push edx
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0x438]
push 0x116
call eax
mov eax, ebx
call fcn.10065730
cmp dword [esp + 0x24], 0
jne 0x10068224
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x1c]
push ecx
mov eax, edi
mov ecx, ebx
call fcn.1006f540
test eax, eax
jne 0x10068152
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x4a3
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064bc0
mov edx, dword [esp + 0x44]
add esp, 4
push eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push str._s:_PolicyManager_error.
push edx
call ecx
mov edi, dword [esp + 0x28]
add esp, 0xc
lea edx, [esp + 0x9794]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [esi]
mov edx, dword [eax + 0x12c]
mov ecx, esi
call edx
test eax, eax
je 0x100681a4
mov eax, dword [esi]
mov edx, dword [eax + 0x174]
lea ecx, [esp + 0x244]
push ecx
mov ecx, esi
call edx
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
call fcn.1006f520
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 2
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074b80
test eax, eax
jne 0x10068224
mov dword [ebx + 0x94], 0x4b21065
mov dword [esp + 0x24], 0x4b31065
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x18]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
push eax
lea esi, [ebx + 0x11c8]
call fcn.10065500
add esp, 8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [esp + 0x20]
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x20], 1
jmp 0x100682c6
push 0
push 0x82
push 2
push 0
push 0
push 0x40000000
lea edx, [esp + 0x97ac]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
push 0
lea eax, [esp + 0x44]
push eax
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
push ecx
push eax
push edi
mov dword [esp + 0x54], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x32
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov dword [ebx + 0x54], 0
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x14]
mov edi, dword [edx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20047
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0x20], 0
mov edi, dword [esp + 0x24]
movzx ecx, di
mov dword [esp + 0xd0], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xd0]
push eax
call edx
test edi, edi
jne 0x1006855d
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [esp + 0x28]
mov ecx, dword [ebx + 0x1c]
push eax
push ecx
mov ecx, esi
xor edx, edx
call fcn.10044af0
mov eax, dword [ebx + 0x1c]
mov edi, dword [esp + 0x1c]
mov edx, dword [eax]
mov ecx, dword [edi]
mov edx, dword [edx + 0xcc]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x1c]
call edx
cmp eax, 0xffffffff
mov dword [esp + 0x38], eax
jne 0x10068381
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x4d9
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064bc0
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
add esp, 4
push eax
mov eax, dword [esp + 0x44]
push str._s:_get_task_index_fail
push eax
call edx
mov edi, dword [esp + 0x28]
add esp, 0xc
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [esp + 0x38]
mov eax, dword [eax + 0x1b0]
push edx
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x620]
mov ecx, esi
call eax
test eax, eax
je 0x10068561
mov edx, dword [esi]
mov eax, dword [edx + 0x660]
mov ecx, esi
call eax
test eax, eax
je 0x10068561
mov edx, dword [esi]
mov eax, dword [edx + 0x11c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov dword [esp + 0x18], eax
mov eax, dword [edx + 0x628]
mov ecx, esi
call eax
test eax, eax
jne 0x1006843e
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x38]
call eax
test eax, eax
jne 0x1006843e
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x70]
call eax
cmp eax, 4
jne 0x10068420
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x98]
call eax
cmp eax, 4
jne 0x10068420
call fcn.100022a0
test eax, eax
je 0x1006843e
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x70]
call eax
cmp eax, 6
jne 0x100684d2
call fcn.10030220
jmp 0x100684d2
push 0x206
mov eax, 0x46
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20041
call eax
push eax
lea ecx, [esp + 0x8d08]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8d04]
call fcn.10001650
cmp dword [esp + 0x38], 0xffffffff
je 0x100684ce
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [ecx + 0x1c]
push eax
push edx
call fcn.1004a590
mov ebx, dword [esp + 0x30]
mov eax, 0x64
push 0x206
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
lea eax, [esp + 0x8b02]
push 0
push eax
mov dword [ebx + 0xa0], 1
mov word [esp + 0x8b08], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20042
call eax
push eax
lea ecx, [esp + 0x8b00]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8afc]
call fcn.10001650
mov eax, dword [esp + 0x18]
call fcn.10074a30
mov ebx, dword [esp + 0x30]
jmp 0x10068561
mov edi, dword [esp + 0x1c]
mov eax, dword [ebx + 0x1c]
mov edx, dword [eax]
mov ecx, dword [edi]
mov edx, dword [edx + 0xcc]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x1c]
call edx
cmp eax, 0xffffffff
mov dword [esp + 0x58], eax
jne 0x100685d3
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x510
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064bc0
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
add esp, 4
push eax
mov eax, dword [esp + 0x44]
push str._s:_get_task_index_fail
push eax
call edx
mov eax, dword [esp + 0x64]
add esp, 0xc
mov ecx, dword [esp + 0x28]
push ecx
mov ecx, esi
push eax
mov esi, ebx
call fcn.10076460
mov dword [ebx + 0x20], 1
jmp 0x1006e43f
mov edi, dword [esp + 0x3f34]
mov edx, dword [edi]
mov eax, dword [edx + 0x10]
mov ecx, edi
call eax
mov edx, dword [edi]
mov esi, eax
mov eax, dword [edx + 0x28]
mov ecx, edi
mov dword [esp + 0x1c], esi
call eax
mov edi, eax
imul edi, edi, 0xf2a
add edi, 0x21a7
push edi
mov dword [esp + 0x5c], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push edi
push 0
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x38]
mov dword [eax + 4], edi
lea ecx, [edi - 0x11]
mov dword [eax + 0xc], ecx
lea edi, [eax + 0x10]
mov dword [eax], 0x50465242
mov dword [eax + 8], 5
mov dword [edi], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x2d4]
add esp, 0xc
mov ecx, esi
mov dword [esp + 0x28], edi
call eax
mov dword [edi + 8], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2dc]
mov ecx, esi
call eax
mov dword [edi + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2d8]
mov ecx, esi
call eax
mov dword [edi + 0x10], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2e4]
mov ecx, esi
call eax
mov dword [edi + 0x14], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2e8]
mov ecx, esi
call eax
mov dword [edi + 0x18], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2ec]
mov ecx, esi
call eax
mov dword [edi + 0x1c], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2f0]
mov ecx, esi
call eax
mov dword [edi + 0x20], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2f4]
mov ecx, esi
call eax
mov dword [edi + 0x24], eax
mov dword [edi + 0x28], edx
mov edx, dword [esi]
mov eax, dword [edx + 0x2f8]
mov ecx, esi
call eax
mov dword [edi + 0x2c], eax
mov edx, dword [esi]
mov ecx, esi
mov eax, dword [edx + 0x2fc]
call eax
mov dword [edi + 0x30], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2e0]
mov ecx, esi
call eax
mov ecx, dword [esp + 0x3f34]
mov dword [edi + 4], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov dword [edi + 0x2192], eax
mov edx, dword [esi]
mov edx, dword [edx + 0x320]
lea eax, [esp + 0x174]
push eax
mov ecx, esi
call edx
mov edx, dword [eax]
mov dword [edi + 0x38], edx
mov edx, dword [eax + 4]
lea ecx, [edi + 0x38]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x508]
mov dword [esp + 0x20], ecx
mov ecx, esi
call eax
mov ecx, dword [edi + 0x252]
xor ecx, eax
and ecx, 1
xor dword [edi + 0x252], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x5cc]
mov ecx, esi
call eax
mov ecx, dword [edi + 0x252]
and eax, 3
add eax, eax
and ecx, 0xffffffe1
or eax, ecx
mov dword [edi + 0x252], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x5ac]
mov ecx, esi
call eax
mov ecx, dword [ebx + 0x11dc]
mov dword [ebx + 0x11bc], eax
mov eax, dword [esp + 0x20]
mov dword [ecx + 8], 3
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [esp + 0x3f24], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x3f28], ecx
mov dword [esp + 0x3f2c], edx
mov edx, dword [esi]
lea ecx, [edi + 0x48]
mov dword [esp + 0x3f30], eax
mov eax, dword [edx + 0x324]
mov dword [esp + 0x54], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x54]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x304]
mov ecx, esi
call eax
lea ecx, [edi + 0x356]
mov edx, eax
mov eax, ecx
call fcn.10004090
lea edx, [edi + 0x55e]
mov eax, dword [esi]
mov dword [esp + 0x34], edx
mov edx, dword [eax + 0x308]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x34]
call fcn.10004090
mov eax, dword [esi]
mov edx, dword [eax + 0x30c]
mov ecx, esi
call edx
mov edx, eax
lea eax, [edi + 0x766]
call fcn.10004090
mov eax, dword [esi]
mov edx, dword [eax + 0x310]
mov ecx, esi
call edx
mov edx, eax
lea eax, [edi + 0x96e]
call fcn.10004090
mov edx, dword [esi]
lea eax, [edi + 0x256]
mov dword [esp + 0x5c], eax
mov eax, dword [edx + 0x300]
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x5c]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x314]
mov ecx, esi
call eax
lea ecx, [edi + 0x196e]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x318]
mov ecx, esi
call eax
lea ecx, [edi + 0x1b76]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov eax, dword [esi]
lea edx, [edi + 0x1d7e]
mov dword [esp + 0x24], edx
mov edx, dword [eax + 0x1a0]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x24]
call fcn.10004090
mov edx, dword [esi]
lea eax, [edi + 0x1f86]
mov dword [esp + 0x4c], eax
mov eax, dword [edx + 0x1a4]
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x4c]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x3c]
mov ecx, esi
call eax
mov esi, dword [esp + 0x3f34]
movzx ecx, al
mov dword [edi + 0x218e], ecx
mov dword [ebx + 0x28], 1
mov edx, dword [esi]
mov eax, dword [edx + 0x4c]
mov ecx, esi
call eax
lea ecx, [esp + 0x70]
push ecx
mov ecx, eax
call fcn.10078de0
mov byte [esp + 0x99b0], 9
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x38], 0
call eax
test eax, eax
jbe 0x100689b2
mov ecx, edi
add ecx, 0x21a8
mov dword [esp + 0x18], ecx
jmp 0x10068960
mov edi, dword [esp + 0x38]
lea esi, [esp + 0x70]
call fcn.1005bfd0
mov edx, dword [esp + 0x18]
lea edi, [edx - 0x12]
mov esi, eax
mov ecx, 0x3ca
rep movsd dword es:[edi], dword [esi]
push 0x200
push edx
movsw word es:[edi], word [esi]
call fcn.10002390
mov ecx, dword [esp + 0x3f3c]
mov esi, dword [esp + 0x40]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add dword [esp + 0x20], 0xf2a
add esi, 1
add esp, 8
mov dword [esp + 0x38], esi
call eax
cmp esi, eax
jb 0x10068960
xor edi, edi
push 0x7e
lea ecx, [esp + 0x9492]
push edi
push ecx
mov word [esp + 0x9498], di
call sub.MSVCR80.dll_memset
mov esi, dword [esp + 0x34]
movzx edx, byte [esi + 0x47]
movzx eax, byte [esi + 0x46]
movzx ecx, byte [esi + 0x45]
add esp, 0xc
push edx
movzx edx, byte [esi + 0x44]
push eax
movzx eax, byte [esi + 0x43]
push ecx
movzx ecx, byte [esi + 0x42]
push edx
movzx edx, byte [esi + 0x41]
push eax
movzx eax, byte [esi + 0x40]
push ecx
movzx ecx, word [esi + 0x3e]
push edx
movzx edx, word [esi + 0x3c]
push eax
mov eax, dword [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
push ecx
lea edx, [esp + 0x94b8]
push 0x101527d8
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
push 0x206
lea eax, [esp + 0x9592]
push edi
push eax
mov word [esp + 0x9598], di
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x958c]
call fcn.10002ad0
mov edi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x1015719c
lea ecx, [esp + 0x9590]
push 0x104
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x948c]
push edx
lea eax, [esp + 0x9590]
push 0x104
push eax
call edi
add esp, 0xc
lea ecx, [esp + 0x958c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x10068b23
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea edx, [esp + 0x95a4]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
xor eax, eax
push 0x30bc
push eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x5a44], eax
lea eax, [esp + 0x5a48]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0
lea ecx, [esp + 0x44]
push ecx
push 0x30c0
lea edx, [esp + 0x5a48]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x5c92]
call fcn.10004090
lea edx, [esp + 0x63aa]
lea eax, [esi + 0x96e]
call fcn.10004090
mov eax, dword [esp + 0x34]
push 0x104
push eax
call fcn.10002390
lea eax, [esi + 0x766]
push 0x104
push eax
call fcn.10002390
mov ecx, dword [esp + 0x6c]
add esp, 0x10
call fcn.10004070
test eax, eax
jle 0x10068b62
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x3c], 1
jmp 0x10068b6f
mov edx, dword [ebx + 0x11dc]
mov dword [edx + 0x3c], 0
lea ecx, [esi + 0x96e]
call fcn.10004070
test eax, eax
jle 0x10068b8d
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 4], 1
jmp 0x10068b9a
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x34]
lea edx, [ebx + 0x11e0]
mov eax, 0x104
mov dword [esp + 0x60], edx
call fcn.100040d0
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
mov edx, dword [esp + 0x60]
cmp word [edx], 0x5c
jne 0x10068d74
cmp dword [esi + 0x18], 0
jne 0x10068d74
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x110]
call edx
test eax, eax
je 0x10068d74
mov eax, dword [esp + 0x3f34]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [esp + 0x38]
push ecx
mov ecx, dword [eax + 8]
call fcn.10075090
mov edi, eax
and edi, 0xffff
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], edi
je 0x10068d6c
mov edx, dword [esp + 0x30]
cmp dword [edx + 0x50], 0
je 0x10068d6c
mov esi, dword [esp + 0x20]
mov ebx, dword [esi]
mov eax, edx
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0xc]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x10068ca0
call sub.Comn.dll_GetObjectLog
mov ebx, dword [eax]
push 0x58b
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
add ebx, 0xc
call fcn.10064bc0
mov ecx, dword [esp + 0x44]
mov edx, dword [ebx]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov edi, dword [esp + 0x24]
add esp, 0xc
mov ebx, dword [esi]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x252]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x54]
mov eax, dword [eax + 4]
push edx
call eax
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x10068d03
call sub.Comn.dll_GetObjectLang
push str.20057
jmp 0x10068d1e
cmp eax, 2
jne 0x10068d14
call sub.Comn.dll_GetObjectLang
push str.20058
jmp 0x10068d1e
call sub.Comn.dll_GetObjectLang
push str.20048
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov dword [esp + 0xdc], edi
lea edx, [esp + 0xdc]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
call eax
lea esi, [esp + 0x70]
mov byte [esp + 0x99b0], 5
call fcn.10078ef0
mov ebx, dword [esp + 0x30]
jmp 0x1006e43f
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x20]
call fcn.10030d70
mov ecx, dword [esp + 0x60]
cmp word [ecx], 0x5c
jne 0x10068dce
push 0x206
lea edx, [esp + 0x8d0a]
push 0
push edx
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebx + 0x2c], 0
je 0x10068dce
mov ecx, dword [esp + 0x60]
lea edi, [esp + 0x8d04]
call fcn.100751e0
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
cmp dword [ebx + 0x11b8], 0
jne 0x10068ec0
cmp dword [ebx + 0x50], 0
jne 0x10068ec0
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x110]
call edx
test eax, eax
je 0x10068ec0
mov esi, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
push esi
mov ecx, ebx
call fcn.10074700
lea eax, [esp + 0x3f34]
push eax
push ebx
call fcn.10066340
mov ecx, dword [esp + 0x58]
push ecx
push esi
call fcn.1006e5d0
push esi
mov edi, eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
lea esi, [esp + 0x74]
add esp, 4
call fcn.10078ef0
lea ecx, [esp + 0x3fbc]
mov byte [esp + 0x99b0], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f68]
mov byte [esp + 0x99b0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fd8]
mov byte [esp + 0x99b0], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f4c]
mov dword [esp + 0x99b0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, edi
jmp 0x1006e541
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov edx, dword [esp + 0x14]
mov dword [ebx + 0x11c8], ecx
mov dword [ebx + 0x11cc], eax
mov dword [ebx + 0x11d0], 0
mov ecx, dword [edi]
mov edx, dword [edx]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x252]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
and edx, 1
push edx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x54]
mov edx, dword [edx + 4]
push eax
call edx
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x10068f5f
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20057
call eax
mov edx, dword [esp + 0x40]
jmp 0x10068fac
cmp eax, 2
jne 0x10068f89
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20058
call eax
mov edx, dword [esp + 0x40]
jmp 0x10068fac
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.20048
call eax
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [edx]
call eax
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
mov dword [esp + 0x24], 0
call eax
test eax, eax
je 0x100691a7
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 1
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074b80
test eax, eax
jne 0x10069023
mov dword [ebx + 0x94], 0x5d3105d
mov dword [esp + 0x24], 0x5d4105d
jmp 0x1006916e
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
push eax
mov eax, dword [edi + 0xc]
push eax
call edx
mov edx, dword [esp + 0x58]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov ecx, dword [edi + 8]
push ecx
push 0
push 0
push 0x21c
lea edx, [esi + 0x34]
push edx
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0xc]
push 0x116
call eax
mov eax, ebx
call fcn.10065730
cmp dword [esp + 0x24], 0
jne 0x10069198
mov ecx, dword [esp + 0x5c]
mov edi, dword [esp + 0x20]
push ecx
mov eax, edi
mov ecx, ebx
call fcn.1006f540
test eax, eax
jne 0x100690e3
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x5e4
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064bc0
mov edx, dword [esp + 0x44]
add esp, 4
push eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push str._s:_PolicyManager_error.
push edx
call ecx
mov edi, dword [esp + 0x2c]
add esp, 0xc
lea edx, [esp + 0x958c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x12c]
call edx
test eax, eax
je 0x10069123
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.1006f520
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 2
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074b80
test eax, eax
jne 0x10069198
mov dword [ebx + 0x94], 0x5f01065
mov dword [esp + 0x24], 0x5f11065
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x18]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
push eax
lea esi, [ebx + 0x11c8]
call fcn.10065500
mov esi, dword [esp + 0x30]
add esp, 8
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x20], 1
jmp 0x10069209
push 0
push 0x82
push 2
push 0
push 0
push 0x40000000
lea edx, [esp + 0x95a4]
push edx
mov dword [esp + 0x5c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, dword [esi]
push 0
mov edi, eax
lea eax, [esp + 0x44]
push eax
push ecx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebx + 0x11dc]
mov eax, 0x32
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
xor eax, eax
mov dword [ebx + 0x54], eax
mov dword [edx + 0x20], eax
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
movzx eax, di
mov dword [esp + 0x84], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x84]
push eax
call edx
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
jne 0x100694c9
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [ebx + 0x1c]
push esi
mov esi, dword [esp + 0x20]
push eax
mov ecx, esi
xor edx, edx
call fcn.100429b0
mov eax, dword [ebx + 0x1c]
mov edi, dword [esp + 0x20]
mov edx, dword [eax]
mov ecx, dword [edi]
mov edx, dword [edx + 0xcc]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x1c]
call edx
cmp eax, 0xffffffff
mov dword [esp + 0x3c], eax
jne 0x100692cf
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0x616
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
add esi, 0xc
call fcn.10064bc0
mov ecx, dword [esi]
add esp, 4
push eax
mov eax, dword [esp + 0x44]
push str._s:_get_task_index_fail
push eax
call ecx
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x48]
add esp, 0xc
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x1b0]
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x620]
mov ecx, esi
call eax
test eax, eax
je 0x100694cd
mov edx, dword [esi]
mov eax, dword [edx + 0x660]
mov ecx, esi
call eax
test eax, eax
je 0x100694cd
mov edx, dword [esi]
mov eax, dword [edx + 0x11c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x628]
mov ecx, esi
call eax
test eax, eax
jne 0x1006937e
mov edx, dword [edi]
mov eax, dword [edx + 0x38]
mov ecx, edi
call eax
test eax, eax
jne 0x1006937e
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 4
jne 0x10069362
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
mov ecx, edi
call eax
cmp eax, 4
jne 0x10069362
call fcn.100022a0
test eax, eax
je 0x1006937e
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 6
jne 0x10069442
call fcn.10030220
jmp 0x10069442
push 0x206
mov eax, 0x46
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20041
call eax
push eax
lea ecx, [esp + 0x8d08]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8d04]
call fcn.10001650
mov ebx, dword [esp + 0x30]
mov edx, dword [ebx + 0x1c]
mov esi, dword [edx]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x320]
lea edx, [esp + 0x194]
push edx
add esi, 0xcc
call eax
mov edx, dword [eax]
push edi
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [esi]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x1c]
call edx
push eax
mov eax, dword [ebx + 0x1c]
push eax
call fcn.1004a590
push 0x206
mov eax, 0x64
lea ecx, [esp + 0x8b02]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov dword [ebx + 0xa0], 1
mov word [esp + 0x8b08], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20042
call eax
push eax
lea ecx, [esp + 0x8b00]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8afc]
call fcn.10001650
mov eax, edi
call fcn.10074a30
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
mov esi, dword [edi]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 4]
mov dword [eax + 4], esi
mov esi, dword [edi + 8]
mov dword [eax + 8], esi
mov esi, dword [edi + 0xc]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
mov dword [esp + 0x3c], eax
jne 0x1006e416
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0x644
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
add esi, 0xc
call fcn.10064bc0
mov ecx, dword [esp + 0x44]
mov edx, dword [esi]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov eax, dword [esp + 0x48]
jmp 0x1006e413
mov esi, dword [esp + 0x3f34]
mov edx, dword [esi]
mov eax, dword [edx + 0x10]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x58], edi
call eax
mov esi, eax
imul esi, esi, 0x420
add esi, 0x955
push esi
mov dword [esp + 0x50], esi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push esi
push 0
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x38]
mov dword [eax + 4], esi
mov dword [eax], 0x50465242
mov dword [eax + 8], 1
add esi, 0xffffffef
mov dword [eax + 0xc], esi
mov ecx, eax
mov dword [ebx + 0x28], 2
mov edx, dword [ecx + 0xc]
lea esi, [eax + 0x10]
mov dword [esi], edx
mov eax, dword [edi]
mov edx, dword [eax + 0x1a8]
add esp, 0xc
mov ecx, edi
call edx
movzx ecx, byte [esi + 4]
xor cl, al
and ecx, 1
xor word [esi + 4], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x1ac]
mov ecx, edi
call eax
lea ecx, [eax + eax]
xor cl, byte [esi + 4]
and ecx, 2
xor word [esi + 4], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x1b0]
mov ecx, edi
call eax
lea ecx, [eax*4]
xor cl, byte [esi + 4]
and ecx, 4
xor word [esi + 4], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x1b4]
mov ecx, edi
call eax
lea ecx, [eax*8]
xor cl, byte [esi + 4]
and ecx, 8
xor word [esi + 4], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x1b8]
mov ecx, edi
call eax
shl eax, 4
xor al, byte [esi + 4]
mov ecx, edi
and eax, 0x10
xor word [esi + 4], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x1bc]
call eax
shl eax, 5
xor al, byte [esi + 4]
and eax, 0x20
xor word [esi + 4], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x1c0]
mov ecx, edi
call eax
movzx ecx, word [esi + 4]
and cx, 0x7ff
shl eax, 0xb
or cx, ax
mov word [esi + 4], cx
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov dword [esi + 0x940], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x1d4]
mov ecx, edi
call eax
shl eax, 6
xor al, byte [esi + 4]
mov ecx, edi
and eax, 0x40
xor word [esi + 4], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x1d8]
call eax
shl eax, 7
xor al, byte [esi + 4]
mov ecx, edi
and eax, 0x80
xor word [esi + 4], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x1e0]
call eax
xor ecx, ecx
mov ch, al
xor cx, word [esi + 4]
and cx, 0x100
xor word [esi + 4], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x1dc]
mov ecx, edi
call eax
mov word [esi + 6], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x5b4]
mov ecx, edi
call eax
shl eax, 0xa
xor ax, word [esi + 4]
mov ecx, edi
and ax, 0x400
xor word [esi + 4], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x1e4]
call eax
mov dword [esi + 8], eax
call sub.Comn.dll_GetObjectLog
movzx ecx, word [esi + 4]
shr ecx, 0xa
mov dword [esp + 0x40], eax
mov eax, dword [eax]
and ecx, 1
push ecx
add eax, 0xc
push 0xb20
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
call fcn.10064bc0
mov edx, dword [esp + 0x48]
add esp, 4
push eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push str._s:_IsDelEFIActive__d
push edx
call ecx
mov edi, dword [esp + 0x68]
add esp, 0x10
mov edx, dword [edi]
mov eax, dword [edx + 0x1c4]
mov ecx, edi
call eax
mov ecx, dword [eax + 4]
add eax, 4
mov dword [esi + 0x10], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x14], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x18], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1c], edx
mov eax, dword [edi]
mov edx, dword [eax + 0x1c4]
mov ecx, edi
call edx
mov eax, dword [eax]
mov dword [esi + 0xc], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x5ac]
mov ecx, edi
call eax
mov dword [ebx + 0x11bc], eax
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x18]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esp + 0x3f28], edx
mov dword [esp + 0x3f2c], eax
mov eax, dword [edi]
lea edx, [esi + 0x20]
mov dword [esp + 0x3f30], ecx
mov dword [esp + 0x58], edx
mov edx, dword [eax + 0x1c4]
mov ecx, edi
call edx
mov edx, eax
mov eax, dword [esp + 0x58]
add edx, 0x14
call fcn.10004090
mov eax, dword [edi]
mov edx, dword [eax + 0x1c8]
mov ecx, edi
call edx
lea ecx, [esi + 0x228]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov edx, dword [edx + 0x1cc]
lea eax, [esi + 0x738]
push eax
lea ecx, [esi + 0x530]
push ecx
mov ecx, edi
call edx
lea ecx, [esi + 0x328]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov eax, dword [esp + 0x3f34]
add eax, 0x228
mov dword [esp + 0x20], 0
call fcn.10028990
test eax, eax
jbe 0x10069ac1
mov eax, dword [esp + 0x2c]
add eax, 0x95c
mov dword [esp + 0x18], eax
lea esp, [esp]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x20]
add esi, 0x228
call fcn.10079090
mov ecx, dword [eax]
mov edx, dword [ecx]
mov edx, dword [edx]
lea eax, [esp + 0x724]
push eax
call edx
mov ecx, dword [esp + 0x18]
add ecx, 0x1f8
lea edi, [ecx - 0x200]
mov esi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x20]
add esi, 0x228
call fcn.10079090
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0xb24]
push ecx
mov ecx, eax
call edx
mov edi, dword [esp + 0x18]
mov esi, eax
mov eax, dword [esp + 0x18]
movzx eax, word [eax]
add edi, 0x1f8
test eax, 0x100
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
je 0x10069a23
test al, 1
jne 0x10069a23
mov ecx, dword [esp + 0x18]
test byte [ecx + 0x200], 1
jne 0x10069a23
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x20]
add esi, 0x228
call fcn.10079090
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x4c]
call eax
test eax, eax
je 0x10069a95
mov esi, dword [esp + 0x3f34]
add esi, 0x228
call fcn.10079090
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [esp + 0x3524]
push ecx
mov ecx, eax
call edx
mov esi, eax
mov ecx, 0x280
lea edi, [esp + 0x503c]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x20]
add esi, 0x228
call fcn.10079090
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [esp + 0x2124]
push ecx
mov ecx, eax
call edx
mov edx, dword [esp + 0x591c]
mov esi, eax
mov eax, dword [esp + 0x18]
mov ecx, 0x280
lea edi, [esp + 0x410c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x5918]
mov dword [eax + 0x3f8], ecx
mov ecx, dword [esp + 0x5920]
mov dword [eax + 0x3fc], edx
mov edx, dword [esp + 0x5924]
mov dword [eax + 0x400], ecx
mov ecx, dword [esp + 0x49e8]
mov dword [eax + 0x404], edx
mov edx, dword [esp + 0x49ec]
mov dword [eax + 0x408], ecx
mov ecx, dword [esp + 0x49f0]
mov dword [eax + 0x40c], edx
mov edx, dword [esp + 0x49f4]
mov dword [eax + 0x410], ecx
mov dword [eax + 0x414], edx
jmp 0x10069a95
mov eax, dword [esp + 0x18]
movzx eax, word [eax + 0x200]
test eax, 0x100
je 0x10069a95
test al, 1
jne 0x10069a95
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x20]
add esi, 0x228
call fcn.10079090
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x20]
call eax
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [esp + 0xd24]
push ecx
mov ecx, eax
call edx
mov edx, dword [eax + 0x8dc]
mov ecx, dword [esp + 0x18]
add eax, 0x8dc
add ecx, 0x408
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x3f34]
add dword [esp + 0x18], 0x420
add esi, 1
add eax, 0x228
mov dword [esp + 0x20], esi
call fcn.10028990
cmp esi, eax
jb 0x10069860
call sub.diskmgr.dll_CreateDdmManager
mov esi, eax
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
mov dword [esp + 0x40], esi
call eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x2c]
imul ecx, ecx, 0x420
add eax, 0x10
lea edx, [ecx + eax + 0xb44]
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], edx
lea esp, [esp]
mov eax, dword [esp + 0x3f34]
mov edx, dword [eax + 0x21c]
add eax, 0x218
test edx, edx
je 0x10069c2d
mov ecx, dword [eax + 8]
sub ecx, edx
mov eax, 0x3e0f83e1
imul ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x20], eax
jae 0x10069c2d
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x218
call fcn.100790b0
mov edi, dword [esp + 0x1c]
add edi, 0xfffffe00
mov esi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x218
call fcn.100790b0
mov edi, dword [esp + 0x1c]
mov esi, eax
add esi, 0x210
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x3f34]
mov edi, dword [esp + 0x18]
add esi, 0x218
call fcn.100790b0
mov edx, dword [eax + 0x200]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x3f34]
add eax, 0x200
add ecx, 0x200
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
add esi, 0x218
mov dword [ecx + 0xc], eax
call fcn.100790b0
mov edx, dword [eax + 0x410]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x40]
add eax, 0x410
mov dword [ecx + 0x210], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x214], edx
mov edx, dword [eax + 8]
mov dword [ecx + 0x218], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0x21c], eax
mov eax, 1
add dword [esp + 0x20], eax
add ecx, 0x420
add dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
jmp 0x10069b00
mov edx, dword [esi]
mov eax, dword [edx + 8]
mov ecx, esi
call eax
mov esi, dword [esp + 0x2c]
mov edi, dword [esi + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
add esi, 0x10
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x14]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x18]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x1c]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x58]
mov edx, dword [edx + 4]
push eax
call edx
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20049
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 0x444]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0x448]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov edx, dword [esp + 0x4c]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov ecx, dword [0x1014c96c]
mov edi, eax
test edi, edi
mov eax, dword [esp + 0x80]
mov dword [eax], ecx
mov edx, dword [0x1014c970]
mov dword [eax + 4], edx
mov ecx, dword [0x1014c974]
mov dword [eax + 8], ecx
mov edx, dword [0x1014c978]
mov dword [esp + 0x24], edi
mov dword [eax + 0xc], edx
jne 0x10069d24
mov eax, dword [ebx + 0x1c]
push 2
push eax
mov ecx, esi
call fcn.10040ac0
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
movzx ecx, di
mov dword [esp + 0xe4], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xe4]
push eax
call edx
jmp 0x1006e43f
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0x28]
mov ecx, edi
call edx
shl eax, 9
add eax, 0x63d
push eax
mov dword [esp + 0x58], eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov edi, eax
mov eax, dword [esp + 0x58]
add esp, 4
push eax
push 0
push edi
mov dword [esp + 0x38], edi
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x3f40]
mov dword [edi + 4], eax
add eax, 0xffffffef
mov dword [edi + 0xc], eax
mov dword [edi], 0x50465242
mov dword [edi + 8], 3
mov dword [edi + 0x10], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add esp, 0xc
call eax
mov dword [edi + 0x638], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x230]
mov ecx, esi
call eax
mov dword [edi + 0x14], eax
mov edx, dword [esi]
mov edx, dword [edx + 0x234]
lea eax, [esp + 0x164]
push eax
mov ecx, esi
call edx
mov ecx, dword [eax]
mov dword [edi + 0x18], ecx
mov edx, dword [eax + 4]
mov dword [edi + 0x1c], edx
mov ecx, dword [eax + 8]
mov dword [edi + 0x20], ecx
mov edx, dword [eax + 0xc]
mov dword [edi + 0x24], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.10065700
mov eax, dword [esi]
mov edx, dword [eax + 0x240]
mov ecx, esi
call edx
mov edi, dword [esp + 0x2c]
lea ecx, [edi + 0x330]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x23c]
mov ecx, esi
call eax
lea ecx, [edi + 0x230]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x238]
mov ecx, esi
call eax
mov edx, eax
lea eax, [edi + 0x28]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x1a0]
mov ecx, esi
call eax
lea ecx, [edi + 0x538]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x1a4]
mov ecx, esi
call eax
lea ecx, [edi + 0x5b8]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
mov dword [esp + 0x18], 0
call eax
test eax, eax
jbe 0x10069f5d
mov ecx, edi
add ecx, 0x67a
mov dword [esp + 0x5c], ecx
lea esp, [esp]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x3f34]
call fcn.100654c0
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x324]
push ecx
mov ecx, eax
call edx
mov edi, dword [esp + 0x5c]
add edi, 0xffffffc2
mov esi, eax
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x3f34]
call fcn.100654c0
cmp word [eax], 0
je 0x10069f38
call fcn.100654c0
mov ax, word [eax]
mov ecx, dword [esp + 0x5c]
mov word [ecx], ax
mov ecx, dword [esp + 0x3f34]
mov esi, dword [esp + 0x18]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add dword [esp + 0x5c], 0x200
add esi, 1
mov dword [esp + 0x18], esi
call eax
cmp esi, eax
jb 0x10069ee0
mov esi, dword [esp + 0x2c]
mov edi, dword [esi + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x1c]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x20]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x24]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
lea eax, [esi + 0x28]
push eax
mov eax, dword [edx + 4]
call eax
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20050
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
mov ecx, dword [ebx + 8]
test ecx, ecx
je 0x10069fd0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [ebx + 8], 0
call sub.FuncLogic.dll_CreateMountDisk
mov dword [ebx + 8], eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov edx, dword [esp + 0x54]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
push esi
call eax
movzx ecx, ax
mov dword [esp + 0x98], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x98]
push eax
call edx
jmp 0x1006e43f
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
mov edi, eax
push 0x639
mov dword [esp + 0x44], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0x639
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov eax, 0x628
mov dword [esi], 0x50465242
mov dword [esi + 4], 0x639
mov dword [esi + 8], 4
mov dword [esi + 0xc], eax
add esp, 0xc
mov dword [esi + 0x10], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x25c]
lea ecx, [esp + 0x1d4]
push ecx
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x18], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x1c], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x20], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x24], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.10065700
mov edi, dword [esp + 0x40]
mov eax, dword [edi]
mov edx, dword [eax + 0x258]
mov ecx, edi
call edx
mov dword [esi + 0x14], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x268]
mov ecx, edi
call edx
lea ecx, [esi + 0x330]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x264]
mov ecx, edi
call eax
lea ecx, [esi + 0x230]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x260]
mov ecx, edi
call eax
mov edx, eax
lea eax, [esi + 0x28]
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x1a0]
mov ecx, edi
call eax
lea ecx, [esi + 0x538]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x1a4]
mov ecx, edi
call eax
lea ecx, [esi + 0x5b8]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edi, dword [esi + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x1c]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x20]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x24]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
lea eax, [esi + 0x28]
push eax
mov eax, dword [edx + 4]
call eax
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20051
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 0xc]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0x10]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 0x639
push esi
call edx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
movzx eax, ax
mov dword [esp + 0xe0], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xe0]
push eax
call edx
jmp 0x1006e43f
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
mov edi, eax
push 0xa4b
mov dword [esp + 0x44], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0xa4b
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov eax, 0xa3a
mov dword [esi], 0x50465242
mov dword [esi + 4], 0xa4b
mov dword [esi + 8], 7
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x4d0]
add esp, 0xc
mov ecx, edi
call edx
movzx eax, ax
add eax, eax
add eax, eax
xor al, byte [esi + 0x14]
mov ecx, edi
and eax, 4
xor word [esi + 0x14], ax
mov edx, dword [edi]
mov eax, dword [edx + 0x4d8]
call eax
movzx ecx, byte [esi + 0x14]
movzx eax, ax
xor cl, al
and ecx, 1
xor word [esi + 0x14], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x4dc]
mov ecx, edi
call eax
movzx eax, ax
lea ecx, [eax + eax]
xor cl, byte [esi + 0x14]
and ecx, 2
xor word [esi + 0x14], cx
mov edx, dword [edi]
mov eax, dword [edx + 0x4e4]
mov ecx, edi
call eax
mov dword [esi + 0x16], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x4e8]
lea eax, [esp + 0x1f4]
push eax
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x1a], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x1e], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x22], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x26], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.10065700
mov edi, dword [esp + 0x40]
mov eax, dword [edi]
mov edx, dword [eax + 0x4d4]
mov ecx, edi
call edx
lea ecx, [esi + 0x742]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x4f0]
mov ecx, edi
call eax
lea ecx, [esi + 0x332]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x4f4]
mov ecx, edi
call eax
lea ecx, [esi + 0x53a]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x4ec]
mov ecx, edi
call eax
lea ecx, [esi + 0x232]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x4e0]
mov ecx, edi
call eax
mov edx, eax
lea eax, [esi + 0x2a]
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x1a0]
mov ecx, edi
call eax
lea ecx, [esi + 0x94a]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x1a4]
mov ecx, edi
call eax
lea ecx, [esi + 0x9ca]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edi, dword [esi + 0x1a]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x1e]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x22]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x26]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
lea eax, [esi + 0x2a]
push eax
mov eax, dword [edx + 4]
call eax
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
add edi, 8
push str.20045
mov ecx, eax
mov eax, dword [edx]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 0xa4b
push esi
call edx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
movzx eax, ax
mov dword [esp + 0xa0], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xa0]
push eax
call edx
jmp 0x1006e43f
cmp eax, 0x40000
ja 0x1006d11b
je 0x1006ccd9
cmp eax, 0x200
je 0x1006bd07
cmp eax, 0x400
je 0x1006b90f
cmp eax, 0x20000
jne case.0x10066ac5.1
mov dword [ebx + 0xa0], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [esp + 0x3f34]
mov dword [esp + 0x50], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov ecx, esi
call edx
mov edi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0x5c]
lea ecx, [esp + 0x124]
push ecx
mov ecx, esi
mov dword [esp + 0x20], edi
call edx
mov byte [esp + 0x99b0], 0xa
call fcn.1002a790
test eax, eax
mov eax, dword [esi]
je 0x1006a541
mov edx, dword [eax + 0x5c]
lea ecx, [esp + 0x104]
push ecx
mov ecx, esi
call edx
mov dword [esp + 0x58], 1
call fcn.1002a790
jmp 0x1006a548
mov edx, dword [eax + 0x28]
mov ecx, esi
call edx
sub eax, 1
mov dword [esp + 0x99b0], 0xa
test byte [esp + 0x58], 1
mov dword [esp + 0x4c], eax
je 0x1006a56d
lea esi, [esp + 0x104]
call fcn.10078ef0
lea esi, [esp + 0x124]
mov byte [esp + 0x99b0], 5
call fcn.10078ef0
mov eax, dword [esp + 0x4c]
imul eax, eax, 0xf2a
add eax, 0x30d1
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov esi, eax
mov eax, dword [esp + 0x38]
add esp, 4
push eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x40]
mov dword [esi + 4], eax
add eax, 0xffffffef
mov dword [esi + 0xc], eax
mov dword [esi], 0x50465242
mov dword [esi + 8], 6
add esi, 0x10
mov dword [esi], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2d4]
add esp, 0xc
mov ecx, edi
mov dword [esp + 0x20], esi
call eax
mov dword [esi + 8], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2dc]
mov ecx, edi
call eax
mov dword [esi + 0xc], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2d8]
mov ecx, edi
call eax
mov dword [esi + 0x10], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2e4]
mov ecx, edi
call eax
mov dword [esi + 0x14], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2e8]
mov ecx, edi
call eax
mov dword [esi + 0x18], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2ec]
mov ecx, edi
call eax
mov dword [esi + 0x1c], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2f0]
mov ecx, edi
call eax
mov dword [esi + 0x20], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2f4]
mov ecx, edi
call eax
mov dword [esi + 0x24], eax
mov dword [esi + 0x28], edx
mov edx, dword [edi]
mov eax, dword [edx + 0x2f8]
mov ecx, edi
call eax
mov dword [esi + 0x2c], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2fc]
mov ecx, edi
call eax
mov dword [esi + 0x30], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x2e0]
mov ecx, edi
call eax
mov ecx, dword [esp + 0x3f34]
mov dword [esi + 4], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x5c]
lea eax, [esp + 0xf4]
push eax
call edx
call fcn.1002a790
lea esi, [esp + 0xf4]
mov dword [esp + 0x40], eax
call fcn.10078ef0
cmp dword [esp + 0x40], 0
mov ecx, dword [esp + 0x3f34]
je 0x1006a6e3
mov eax, dword [ecx]
mov eax, dword [eax + 0x5c]
lea edx, [esp + 0x114]
push edx
call eax
call fcn.1002a790
mov ecx, dword [esp + 0x20]
lea esi, [esp + 0x114]
mov dword [ecx + 0x2192], eax
call fcn.10078ef0
jmp 0x1006a6f4
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [esp + 0x20]
mov dword [ecx + 0x2192], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x320]
lea eax, [esp + 0x154]
push eax
mov ecx, edi
call edx
mov edx, dword [eax]
mov esi, dword [esp + 0x20]
mov dword [esi + 0x38], edx
mov edx, dword [eax + 4]
lea ecx, [esi + 0x38]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x508]
mov dword [esp + 0x28], ecx
mov ecx, edi
call eax
mov ecx, dword [esi + 0x252]
xor ecx, eax
and ecx, 1
xor dword [esi + 0x252], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x5cc]
mov ecx, edi
call eax
mov ecx, dword [esi + 0x252]
and eax, 3
or eax, 4
add eax, eax
and ecx, 0xffffffe9
or eax, ecx
mov dword [esi + 0x252], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x5ac]
mov ecx, edi
call eax
mov ecx, dword [ebx + 0x11dc]
mov dword [ebx + 0x11bc], eax
mov eax, dword [esp + 0x28]
mov dword [ecx + 8], 6
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [esp + 0x3f24], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x3f28], ecx
mov dword [esp + 0x3f2c], edx
mov edx, dword [edi]
lea ecx, [esi + 0x48]
mov dword [esp + 0x3f30], eax
mov eax, dword [edx + 0x324]
mov dword [esp + 0x4c], ecx
mov ecx, edi
call eax
mov edx, eax
mov eax, dword [esp + 0x4c]
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x304]
mov ecx, edi
call eax
lea ecx, [esi + 0x356]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov eax, dword [edi]
lea edx, [esi + 0x55e]
mov dword [esp + 0x5c], edx
mov edx, dword [eax + 0x308]
mov ecx, edi
call edx
mov edx, eax
mov eax, dword [esp + 0x5c]
call fcn.10004090
mov edx, dword [edi]
lea eax, [esi + 0x766]
mov dword [esp + 0x24], eax
mov eax, dword [edx + 0x30c]
mov ecx, edi
call eax
mov edx, eax
mov eax, dword [esp + 0x24]
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x310]
lea ecx, [esi + 0x96e]
mov dword [esp + 0x60], ecx
mov ecx, edi
call eax
mov edx, eax
mov eax, dword [esp + 0x60]
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x300]
lea ecx, [esi + 0x256]
mov dword [esp + 0x38], ecx
mov ecx, edi
call eax
mov edx, eax
mov eax, dword [esp + 0x38]
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x314]
mov ecx, edi
call eax
lea ecx, [esi + 0x196e]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x318]
mov ecx, edi
call eax
lea ecx, [esi + 0x1b76]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov eax, dword [edi]
lea edx, [esi + 0x1d7e]
mov dword [esp + 0x40], edx
mov edx, dword [eax + 0x1a0]
mov ecx, edi
call edx
mov edx, eax
mov eax, dword [esp + 0x40]
call fcn.10004090
mov edx, dword [edi]
lea eax, [esi + 0x1f86]
mov dword [esp + 0x3c], eax
mov eax, dword [edx + 0x1a4]
mov ecx, edi
call eax
mov edx, eax
mov eax, dword [esp + 0x3c]
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x3c]
mov ecx, edi
call eax
movzx ecx, al
mov dword [esi + 0x218e], ecx
mov ecx, dword [esp + 0x3f34]
mov dword [ebx + 0x28], 1
mov edx, dword [ecx]
mov edx, dword [edx + 0x5c]
lea eax, [esp + 0x134]
push eax
call edx
call fcn.1002a790
test eax, eax
lea esi, [esp + 0x134]
setne byte [esp + 0x6f]
call fcn.10078ef0
cmp byte [esp + 0x6f], 0
je 0x1006ad50
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx]
mov eax, dword [eax + 0x5c]
lea edx, [esp + 0x70]
push edx
call eax
lea eax, [esp + 0x70]
mov byte [esp + 0x99b0], 0xc
mov dword [esp + 0x54], 0
call fcn.1002a790
test eax, eax
jbe 0x1006ad3a
mov ecx, dword [esp + 0x20]
add ecx, 0x2196
mov dword [esp + 0x18], ecx
mov ebx, dword [esp + 0x54]
lea eax, [esp + 0x70]
call fcn.10078d80
mov esi, dword [eax]
lea ecx, [esp + 0x4010]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
lea ecx, [esp + 0x3ff4]
mov byte [esp + 0x99b0], 0xd
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
push 0xf28
lea edx, [esp + 0x4112]
push 0
push edx
mov byte [esp + 0x99bc], 0xe
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x3fe
lea eax, [esp + 0x8d0a]
push 0
push eax
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
mov edx, dword [esi]
mov edx, dword [edx + 0x2c]
lea eax, [esp + 0x402c]
push eax
mov ecx, esi
call edx
push 0x101520e4
lea ecx, [esp + 0x4068]
mov byte [esp + 0x99b4], 0xf
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
lea eax, [esp + 0x402c]
push eax
lea ecx, [esp + 0x4068]
mov bl, 0x10
push ecx
lea edx, [esp + 0x4088]
mov byte [esp + 0x99b8], bl
mov edi, dword [sym.imp.MSVCP80.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
push edx
call edi
add esp, 0xc
lea eax, [esp + 0x4010]
push eax
lea ecx, [esp + 0x4084]
push ecx
lea edx, [esp + 0x4050]
push edx
mov byte [esp + 0x99bc], 0x11
call edi
add esp, 0xc
lea eax, [esp + 0x4048]
push eax
lea ecx, [esp + 0x4014]
mov byte [esp + 0x99b4], 0x12
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov edx, dword [esi]
mov eax, dword [edx + 0x3c]
mov ecx, esi
call eax
cmp eax, 4
mov edx, dword [esi]
mov ecx, esi
jne 0x1006aaa7
mov eax, dword [edx + 4]
call eax
mov esi, eax
jmp 0x1006ab94
mov edx, dword [edx + 0x54]
lea eax, [esp + 0x40d4]
push eax
call edx
push 0x101520e4
lea ecx, [esp + 0x40bc]
mov byte [esp + 0x99b4], 0x13
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
lea eax, [esp + 0x40d4]
push eax
lea ecx, [esp + 0x40bc]
push ecx
lea edx, [esp + 0x40a4]
push edx
mov byte [esp + 0x99bc], 0x14
call edi
add esp, 0xc
lea eax, [esp + 0x3ff4]
push eax
lea ecx, [esp + 0x40a0]
push ecx
lea edx, [esp + 0x40f8]
push edx
mov byte [esp + 0x99bc], 0x15
call edi
add esp, 0xc
lea eax, [esp + 0x40f0]
push eax
lea ecx, [esp + 0x3ff8]
mov byte [esp + 0x99b4], 0x16
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esp + 0x40f0]
mov esi, eax
mov byte [esp + 0x99b0], 0x15
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x409c]
mov byte [esp + 0x99b0], 0x14
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x40b8]
mov byte [esp + 0x99b0], 0x13
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x40d4]
mov byte [esp + 0x99b0], 0x12
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x4048]
mov byte [esp + 0x99b0], 0x11
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x4080]
mov byte [esp + 0x99b0], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x4064]
mov byte [esp + 0x99b0], 0xf
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x402c]
mov byte [esp + 0x99b0], 0xe
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
test esi, esi
jne 0x1006a9f0
push 1
push esi
lea ecx, [esp + 0x4018]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::erase_unsigned_int__unsigned_int_]
cmp dword [esp + 0x4028], 8
mov ecx, dword [esp + 0x4014]
jae 0x1006ac17
lea ecx, [esp + 0x4014]
lea edx, [esp + 0x8d04]
mov edi, edi
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x1006ac20
mov ebx, 0x200
lea edx, [esp + 0x8d04]
lea eax, [esp + 0x411e]
call fcn.10001650
push 1
push 0
lea ecx, [esp + 0x3ffc]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::erase_unsigned_int__unsigned_int_]
cmp dword [esp + 0x400c], 8
mov ecx, dword [esp + 0x3ff8]
jae 0x1006ac72
lea ecx, [esp + 0x3ff8]
lea edx, [esp + 0x8d04]
lea esp, [esp]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x1006ac80
sub esp, 0x1c
lea edx, [esp + 0x4010]
mov ecx, esp
mov dword [esp + 0x80], esp
push edx
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
mov edx, dword [eax + 0x5d8]
call edx
mov edx, 0x10153114
lea eax, [esp + 0x491e]
mov word [esp + 0x410c], 0x10
call fcn.10001650
mov edi, dword [esp + 0x18]
mov ecx, 0x3ca
lea esi, [esp + 0x410c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea ecx, [esp + 0x3ff4]
mov byte [esp + 0x99b0], 0xd
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x4010]
mov byte [esp + 0x99b0], 0xc
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov esi, dword [esp + 0x54]
add dword [esp + 0x18], 0xf2a
add esi, 1
lea eax, [esp + 0x70]
mov dword [esp + 0x54], esi
call fcn.1002a790
cmp esi, eax
jb 0x1006a97f
mov ebx, dword [esp + 0x30]
lea esi, [esp + 0x70]
mov byte [esp + 0x99b0], 5
call fcn.10078ef0
jmp 0x1006adf5
mov esi, dword [esp + 0x3f34]
mov eax, dword [esi]
mov edx, dword [eax + 0x4c]
mov ecx, esi
call edx
lea ecx, [esp + 0x70]
push ecx
mov ecx, eax
call fcn.10078de0
mov byte [esp + 0x99b0], 0x17
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x54], 0
call eax
test eax, eax
jbe 0x1006ade4
mov ecx, dword [esp + 0x20]
add ecx, 0x2196
mov dword [esp + 0x58], ecx
jmp 0x1006ada0
mov edi, dword [esp + 0x54]
lea esi, [esp + 0x70]
call fcn.1005bfd0
mov esi, eax
mov eax, dword [esp + 0x58]
mov edi, eax
mov ecx, 0x3ca
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x3f34]
movsw word es:[edi], word [esi]
mov esi, dword [esp + 0x54]
mov edx, dword [ecx]
add eax, 0xf2a
mov dword [esp + 0x58], eax
mov eax, dword [edx + 0x28]
add esi, 1
mov dword [esp + 0x54], esi
call eax
cmp esi, eax
jb 0x1006ada0
lea esi, [esp + 0x70]
mov byte [esp + 0x99b0], 5
call fcn.10078ef0
xor edi, edi
push 0x7e
lea ecx, [esp + 0x9312]
push edi
push ecx
mov word [esp + 0x9318], di
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x2c]
movzx edx, byte [eax + 0x47]
movzx ecx, byte [eax + 0x46]
add esp, 0xc
push edx
movzx edx, byte [eax + 0x45]
push ecx
movzx ecx, byte [eax + 0x44]
push edx
movzx edx, byte [eax + 0x43]
push ecx
movzx ecx, byte [eax + 0x42]
push edx
movzx edx, byte [eax + 0x41]
push ecx
movzx ecx, byte [eax + 0x40]
push edx
movzx edx, word [eax + 0x3e]
movzx eax, word [eax + 0x3c]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [ecx]
push eax
push edx
lea eax, [esp + 0x9338]
push 0x101527d8
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
push 0x206
lea ecx, [esp + 0x910a]
push edi
push ecx
mov word [esp + 0x9110], di
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x9104]
call fcn.10002ad0
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x1015719c
lea edx, [esp + 0x9108]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x930c]
push eax
lea ecx, [esp + 0x9108]
push 0x104
push ecx
call esi
add esp, 0xc
lea edx, [esp + 0x9104]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1006af5f
push edi
push 0x80
push 3
push edi
push 1
push SysReAllocString
lea eax, [esp + 0x911c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0x30bc
lea ecx, [esp + 0x5a44]
push edi
push ecx
mov esi, eax
mov dword [esp + 0x64], edi
mov dword [esp + 0x5a48], edi
call sub.MSVCR80.dll_memset
add esp, 0xc
push edi
lea edx, [esp + 0x5c]
push edx
push 0x30c0
lea eax, [esp + 0x5a48]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x5c92]
call fcn.10004090
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x63aa]
call fcn.10004090
mov ecx, dword [esp + 0x5c]
push 0x104
push ecx
call fcn.10002390
mov edx, dword [esp + 0x2c]
push 0x104
push edx
call fcn.10002390
mov ecx, dword [esp + 0x48]
add esp, 0x10
call fcn.10004070
test eax, eax
jle 0x1006af9c
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0x3c], 1
jmp 0x1006afa5
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x3c], edi
mov ecx, dword [esp + 0x60]
call fcn.10004070
test eax, eax
jle 0x1006afc1
mov edx, dword [ebx + 0x11dc]
mov dword [edx + 4], 1
jmp 0x1006afca
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 4], edi
mov ecx, dword [esp + 0x5c]
lea esi, [ebx + 0x11e0]
mov eax, 0x104
mov edx, esi
mov dword [esp + 0x60], esi
call fcn.100040d0
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
cmp word [esi], 0x5c
jne 0x1006b18d
mov ecx, dword [esp + 0x20]
cmp dword [ecx + 0x18], 0
jne 0x1006b18d
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
call eax
test eax, eax
je 0x1006b18d
mov eax, dword [esp + 0x3f34]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x40]
push ecx
mov ecx, dword [eax + 8]
push edx
mov edx, dword [esp + 0x38]
push esi
call fcn.10075090
mov edi, eax
and edi, 0xffff
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], edi
je 0x1006b189
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x50], 0
je 0x1006b189
mov esi, dword [esp + 0x28]
mov ebx, dword [esi]
mov ecx, eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0xc]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x1006b0ce
call sub.Comn.dll_GetObjectLog
mov ebx, dword [eax]
push 0x706
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
add ebx, 0xc
call fcn.10064bc0
mov ecx, dword [esp + 0x44]
mov edx, dword [ebx]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov edi, dword [esp + 0x24]
add esp, 0xc
mov ebx, dword [esi]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x252]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x4c]
mov eax, dword [eax + 4]
push edx
call eax
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x1006b131
call sub.Comn.dll_GetObjectLang
push str.12329
jmp 0x1006b14c
cmp eax, 2
jne 0x1006b142
call sub.Comn.dll_GetObjectLang
push str.12330
jmp 0x1006b14c
call sub.Comn.dll_GetObjectLang
push str.12331
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xd8], edi
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
lea edx, [esp + 0xd8]
push edx
call eax
mov ebx, dword [esp + 0x30]
jmp 0x1006e43f
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x28]
call fcn.10030d70
mov ecx, dword [esp + 0x60]
cmp word [ecx], 0x5c
jne 0x1006b1df
push 0x206
lea edx, [esp + 0x8d0a]
push 0
push edx
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebx + 0x2c], 0
je 0x1006b1df
mov ecx, dword [esp + 0x60]
lea edi, [esp + 0x8d04]
call fcn.100751e0
mov ebx, dword [esp + 0x30]
cmp dword [ebx + 0x11b8], 0
jne 0x1006b231
cmp dword [ebx + 0x50], 0
jne 0x1006b231
mov edi, dword [esp + 0x1c]
mov eax, dword [edi]
mov edx, dword [eax + 0x110]
mov ecx, edi
call edx
test eax, eax
je 0x1006b231
mov esi, dword [esp + 0x2c]
push esi
mov edx, edi
mov ecx, ebx
call fcn.10074700
lea eax, [esp + 0x3f34]
push eax
push ebx
call fcn.10066340
mov ecx, dword [esp + 0x34]
push ecx
push esi
call fcn.1006e5d0
mov edx, esi
push edx
jmp 0x10067e7d
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [ebx + 0x11cc], eax
mov eax, dword [esp + 0x14]
lea edi, [ebx + 0x11c8]
mov dword [edi], ecx
mov dword [edi + 8], 0
mov edx, dword [eax]
mov ecx, dword [esi]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [esi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [edx + 0x252]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
and edx, 1
push edx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x4c]
mov edx, dword [edx + 4]
push eax
call edx
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x18]
cmp eax, 1
jne 0x1006b2d7
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12329
call eax
mov edx, dword [esp + 0x40]
jmp 0x1006b324
cmp eax, 2
jne 0x1006b301
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12330
call eax
mov edx, dword [esp + 0x40]
jmp 0x1006b324
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x40], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12331
call eax
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [edx]
call eax
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
mov dword [esp + 0x24], 0
call eax
test eax, eax
je 0x1006b540
mov ecx, dword [esi]
mov edx, dword [esi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 8]
mov dword [eax + 4], edx
mov edx, dword [esi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 1
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074b80
test eax, eax
jne 0x1006b3b4
mov dword [ebx + 0x94], 0x75b105d
mov dword [esp + 0x24], 0x75c105d
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x18]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
mov esi, edi
jmp 0x1006b524
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov edx, dword [esp + 0x34]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov edx, dword [esp + 0x20]
mov edi, eax
mov eax, dword [esp + 0x3f34]
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
push ecx
push 0
push 0
push 0x21c
add edx, 0x34
push edx
push 0x116
mov dword [esp + 0x3c], edi
call eax
mov eax, ebx
mov dword [ebx + 0x94], edi
call fcn.10065730
test edi, edi
jne 0x1006b531
mov ecx, dword [esp + 0x38]
push ecx
mov eax, esi
mov ecx, ebx
call fcn.1006f540
test eax, eax
jne 0x1006b47c
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x771
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064bc0
mov edx, dword [esp + 0x44]
add esp, 4
push eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push str._s:_PolicyManager_error.
push edx
call ecx
add esp, 0xc
lea edx, [esp + 0x9104]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x12c]
call edx
test eax, eax
je 0x1006b4bc
mov ecx, dword [esi]
mov edx, dword [esi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 8]
mov dword [eax + 4], edx
mov edx, dword [esi + 0xc]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.1006f520
mov ecx, dword [esi]
mov edx, dword [esi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 8]
mov dword [eax + 4], edx
mov edx, dword [esi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x28]
push eax
push 2
push ecx
mov ecx, ebx
mov dword [esp + 0x34], 0
call fcn.10074b80
test eax, eax
jne 0x1006b531
mov dword [ebx + 0x94], 0x77e1065
mov dword [esp + 0x24], 0x77f1065
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x18]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
lea esi, [ebx + 0x11c8]
push eax
call fcn.10065500
mov esi, dword [esp + 0x30]
add esp, 8
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x20], 1
jmp 0x1006b5a6
push 0
push 0x82
push 2
push 0
push 0
push 0x40000000
lea edx, [esp + 0x911c]
push edx
mov dword [esp + 0x5c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
push 0
lea eax, [esp + 0x44]
push eax
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebx + 0x11dc]
mov eax, 0x32
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
xor eax, eax
mov dword [ebx + 0x54], eax
mov dword [edx + 0x20], eax
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
movzx eax, di
mov dword [esp + 0xa8], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xa8]
push eax
call edx
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
jne 0x1006b86b
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [ebx + 0x1c]
push eax
push ecx
mov ecx, dword [esp + 0x24]
xor edx, edx
call fcn.100429b0
mov edi, dword [esi]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 4]
mov dword [eax + 4], edi
mov edi, dword [esi + 8]
mov dword [eax + 8], edi
mov edi, dword [esi + 0xc]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
mov dword [esp + 0x58], eax
jne 0x1006b667
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x40], eax
mov eax, dword [eax]
add eax, 0xc
push 0x7a5
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x40], eax
call fcn.10064bc0
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
add esp, 4
push eax
mov eax, dword [edx]
push str._s:_get_task_index_fail
push ecx
call eax
mov eax, dword [esp + 0x64]
add esp, 0xc
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov edi, dword [esp + 0x1c]
push eax
mov eax, dword [edx + 0x1b0]
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0x620]
mov ecx, edi
call eax
test eax, eax
je 0x1006b86b
mov edx, dword [edi]
mov eax, dword [edx + 0x660]
mov ecx, edi
call eax
test eax, eax
je 0x1006b86b
mov esi, edi
mov edx, dword [esi]
mov eax, dword [edx + 0x11c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x628]
mov ecx, esi
call eax
test eax, eax
jne 0x1006b71c
mov edx, dword [edi]
mov eax, dword [edx + 0x38]
mov ecx, edi
call eax
test eax, eax
jne 0x1006b71c
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006b700
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006b700
call fcn.100022a0
test eax, eax
je 0x1006b71c
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 6
jne 0x1006b7e0
call fcn.10030220
jmp 0x1006b7e0
push 0x206
mov eax, 0x46
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20041
call eax
push eax
lea ecx, [esp + 0x8d08]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8d04]
call fcn.10001650
mov ebx, dword [esp + 0x30]
mov edx, dword [ebx + 0x1c]
mov esi, dword [edx]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x320]
lea edx, [esp + 0x234]
push edx
add esi, 0xcc
call eax
mov edx, dword [eax]
push edi
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [esi]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x1c]
call edx
push eax
mov eax, dword [ebx + 0x1c]
push eax
call fcn.1004a590
push 0x206
mov eax, 0x64
lea ecx, [esp + 0x8b02]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov dword [ebx + 0xa0], 1
mov word [esp + 0x8b08], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20042
call eax
push eax
lea ecx, [esp + 0x8b00]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8afc]
call fcn.10001650
mov eax, edi
call fcn.10074a30
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x28]
mov edi, dword [esi]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 4]
mov dword [eax + 4], edi
mov edi, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [eax + 8], edi
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
mov dword [esp + 0x3c], eax
jne 0x1006b8d2
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0x7d3
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
add esi, 0xc
call fcn.10064bc0
mov ecx, dword [esp + 0x44]
mov edx, dword [esi]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov eax, dword [esp + 0x48]
add esp, 0xc
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x20]
push eax
mov esi, ebx
call fcn.10076d80
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x50]
cmp eax, 0xbb8
jae 0x1006e43f
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebx + 0x20], 1
jmp 0x1006e43f
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
mov edi, eax
push 0xb79
mov dword [esp + 0x44], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0xb79
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov dword [esi], 0x50465242
mov dword [esi + 4], 0xb79
mov dword [esi + 8], 0xb
mov dword [esi + 0xc], 0xb68
add esi, 0x10
mov dword [esi], 0xb68
mov edx, dword [edi]
mov eax, dword [edx + 0x3f4]
add esp, 0xc
mov ecx, edi
call eax
mov dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x3fc]
mov ecx, edi
call eax
mov dword [esi + 8], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x3f8]
mov ecx, edi
call eax
mov ecx, dword [esp + 0x3f34]
mov dword [esi + 0xc], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov dword [esi + 0x1c], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x410]
lea eax, [esp + 0x254]
push eax
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x28], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x2c], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x30], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x34], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.10065700
mov edi, dword [esp + 0x40]
mov eax, dword [edi]
mov edx, dword [eax + 0x408]
mov ecx, edi
call edx
mov dword [esi + 0x18], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x404]
mov ecx, edi
call edx
mov dword [esi + 0x14], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x400]
mov ecx, edi
call edx
mov dword [esi + 0x10], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x5ac]
mov ecx, edi
call edx
mov ecx, dword [ebx + 0x1c]
mov dword [ebx + 0x11bc], eax
mov edi, dword [esi + 0x28]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x2c]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x30]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x34]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0xcc]
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x264]
call eax
test eax, eax
je 0x1006ba95
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0xc], 5
jmp 0x1006baa2
mov edx, dword [ebx + 0x11dc]
mov dword [edx + 0xc], 6
mov edi, dword [esp + 0x40]
mov eax, dword [edi]
mov edx, dword [eax + 0x11c]
mov ecx, edi
call edx
test eax, eax
je 0x1006bac4
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x70]
call eax
mov dword [esi + 0x20], eax
jmp 0x1006bacb
mov dword [esi + 0x20], 0
mov edx, dword [edi]
mov eax, dword [edx + 0x40c]
mov ecx, edi
call eax
mov edx, eax
lea eax, [esi + 0x38]
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x3f0]
mov ecx, edi
call eax
mov edx, eax
lea eax, [esi + 0x548]
call fcn.10004090
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
call eax
mov edx, eax
lea eax, [esi + 0x340]
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x414]
mov ecx, edi
call eax
lea ecx, [esi + 0x750]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x1a0]
mov ecx, edi
call eax
lea ecx, [esi + 0x240]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x1a4]
mov ecx, edi
call eax
lea ecx, [esi + 0x2c0]
mov edx, eax
mov eax, ecx
call fcn.10004090
cmp dword [esi + 0x14], 0
je 0x1006bb74
lea edx, [esi + 0x340]
jmp 0x1006bb82
mov edx, dword [edi]
mov eax, dword [edx + 0x3f0]
mov ecx, edi
call eax
mov edx, eax
lea eax, [esi + 0x548]
call fcn.10004090
mov edi, dword [esp + 0x3f34]
mov dword [ebx + 0x28], 2
mov edx, dword [edi]
mov edx, dword [edx + 0x50]
lea eax, [esp + 0x70]
push eax
mov ecx, edi
call edx
mov byte [esp + 0x99b0], 0x1a
mov eax, dword [edi]
mov edx, dword [eax + 0x40]
lea ecx, [esp + 0xe8]
push ecx
mov ecx, edi
call edx
mov byte [esp + 0x99b0], 0x1b
cmp dword [esp + 0xf0], 0
jne 0x1006bbdd
mov dword [esi + 0x18], 1
jmp 0x1006bbf1
lea eax, [esp + 0xe8]
mov dword [esi + 0xb60], eax
mov dword [esi + 0x18], 0
mov edi, dword [esi + 0x28]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x2c]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x30]
lea ecx, [esp + 0x80]
mov dword [esi + 0xb64], ecx
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x34]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
lea eax, [esi + 0x38]
push eax
mov eax, dword [edx + 4]
call eax
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20071
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
push 0xb79
push edx
call eax
mov ecx, dword [esp + 0x14]
mov edi, eax
and eax, 0xffff
cmp eax, 0x1043
mov dword [esp + 0x24], edi
jne 0x1006bcb1
mov dword [esp + 0x50], 0
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x50]
push eax
call edx
jmp 0x1006bcc7
mov dword [esp + 0xb8], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
lea edx, [esp + 0xb8]
push edx
call eax
test edi, edi
jne 0x1006bce5
mov ecx, dword [ebx + 0x1c]
push 0x400
push ecx
mov ecx, esi
call fcn.10040ac0
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
lea esi, [esp + 0xe8]
call fcn.1000ba00
lea esi, [esp + 0x70]
mov byte [esp + 0x99b0], 5
call fcn.1000ba00
jmp 0x1006e43f
mov edi, dword [esp + 0x3f34]
mov edx, dword [edi]
mov eax, dword [edx + 0x10]
mov ecx, edi
call eax
mov edx, dword [edi]
mov esi, eax
mov eax, dword [edx + 0x28]
mov ecx, edi
mov dword [esp + 0x1c], esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x620]
imul edi, edi, 0xf2a
add edi, 0x1c8b
mov ecx, esi
mov dword [esp + 0x38], edi
call eax
mov ecx, dword [ebx + 0x11dc]
push edi
mov dword [ecx], eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push edi
push 0
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x38]
mov dword [eax + 4], edi
lea ecx, [edi - 0x11]
mov dword [eax + 0xc], ecx
lea edi, [eax + 0x10]
mov dword [eax], 0x50465242
mov dword [eax + 8], 0xa
mov dword [edi], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x3a0]
add esp, 0xc
mov ecx, esi
mov dword [esp + 0x28], edi
call eax
mov dword [edi + 4], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x3a8]
mov ecx, esi
call eax
mov dword [edi + 8], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x3a4]
mov ecx, esi
call eax
mov dword [edi + 0xc], eax
xor eax, eax
mov dword [edi + 0x14], eax
mov dword [edi + 0x10], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x3a4]
mov ecx, esi
call eax
mov dword [edi + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x508]
mov ecx, esi
call eax
mov ecx, dword [edi + 0x20]
xor ecx, eax
and ecx, 1
xor dword [edi + 0x20], ecx
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov dword [edi + 0x1c76], eax
mov edx, dword [esi]
mov edx, dword [edx + 0x398]
lea eax, [esp + 0x274]
push eax
mov ecx, esi
call edx
mov ecx, dword [eax]
mov dword [edi + 0x2c], ecx
mov edx, dword [eax + 4]
mov dword [edi + 0x30], edx
mov ecx, dword [eax + 8]
mov dword [edi + 0x34], ecx
mov edx, dword [eax + 0xc]
mov dword [edi + 0x38], edx
mov eax, dword [esi]
mov edx, dword [eax + 0x380]
mov ecx, esi
call edx
mov dword [edi + 0x24], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x3b4]
mov ecx, esi
call edx
add eax, eax
add eax, eax
add eax, eax
xor eax, dword [edi + 0x20]
mov ecx, esi
and eax, 8
xor dword [edi + 0x20], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x3b8]
call eax
lea ecx, [eax*4]
xor ecx, dword [edi + 0x20]
and ecx, 4
xor dword [edi + 0x20], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x3c0]
mov ecx, esi
call eax
mov dword [edi + 0x1c72], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x3c4]
mov ecx, esi
call eax
mov dword [edi + 0x1c6e], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x5cc]
mov ecx, esi
call eax
shl eax, 4
xor eax, dword [edi + 0x20]
and eax, 0x30
xor dword [edi + 0x20], eax
mov dword [ebx + 0x28], 1
mov ecx, dword [edi + 0x2c]
mov eax, dword [edi + 0x34]
mov edx, dword [edi + 0x30]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [edi + 0x38]
mov dword [esp + 0x3f2c], eax
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f28], edx
mov dword [esp + 0x3f30], ecx
call fcn.10065700
mov edi, dword [esp + 0x28]
mov eax, dword [esi]
xor edx, edx
cmp dword [edi + 0x24], 6
mov ecx, esi
sete dl
mov dword [esp + 0x20], edx
mov edx, dword [eax + 0x11c]
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x70]
call eax
mov edx, dword [esi]
xor ecx, ecx
cmp eax, 6
mov eax, dword [edx + 0x5ac]
sete cl
or dword [esp + 0x20], ecx
mov ecx, esi
call eax
mov dword [ebx + 0x11bc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x39c]
lea ecx, [edi + 0x3c]
mov dword [esp + 0x54], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x54]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x388]
lea ecx, [edi + 0x246]
mov dword [esp + 0x34], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x34]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x38c]
lea ecx, [edi + 0x44e]
mov dword [esp + 0x40], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x40]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x390]
mov ecx, esi
call eax
lea ecx, [edi + 0x144e]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x394]
mov ecx, esi
call eax
lea ecx, [edi + 0x1656]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov eax, dword [esi]
lea edx, [edi + 0x185e]
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 0x1a0]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x3c]
call fcn.10004090
mov eax, dword [esi]
mov edx, dword [eax + 0x1a4]
add edi, 0x1a66
mov ecx, esi
mov dword [esp + 0x5c], edi
call edx
mov edx, eax
mov eax, edi
call fcn.10004090
mov ecx, dword [esp + 0x40]
call fcn.10004070
test eax, eax
jle 0x1006c017
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 4], 1
jmp 0x1006c024
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 4], 0
mov ecx, dword [esp + 0x34]
lea edx, [ebx + 0x11e0]
mov eax, 0x104
mov dword [esp + 0x60], edx
call fcn.100040d0
mov edx, dword [ebx + 0x11dc]
mov esi, dword [esp + 0x3f34]
mov dword [edx + 8], 4
mov eax, dword [esi]
mov edx, dword [eax + 0x48]
mov ecx, esi
call edx
lea ecx, [esp + 0x3f24]
push ecx
mov ecx, eax
call fcn.10078de0
mov byte [esp + 0x99b0], 0x19
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x4c], 0
call eax
test eax, eax
jbe 0x1006c17b
mov ecx, dword [esp + 0x28]
add ecx, 0x1c8c
mov dword [esp + 0x18], ecx
jmp 0x1006c0a0
mov edi, dword [esp + 0x4c]
lea esi, [esp + 0x3f24]
call fcn.1005bfd0
mov edx, dword [esp + 0x18]
lea edi, [edx - 0x12]
mov esi, eax
mov ecx, 0x3ca
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea esi, [edx + 0x400]
mov edx, dword [esp + 0x34]
mov eax, esi
call fcn.10004090
mov edi, dword [esp + 0x18]
push 0x200
push edi
call fcn.10002390
mov eax, edi
add esp, 8
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1006c0f0
sub eax, edx
sar eax, 1
cmp eax, 4
jae 0x1006c13f
push 0x204
lea edx, [esp + 0x8d0c]
push 0
push edx
mov dword [esp + 0x8d10], 0x41
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x24]
mov cx, word [eax]
add esp, 0xc
lea edx, [esp + 0x8d04]
mov word [esp + 0x8d04], cx
push edx
jmp 0x1006c14b
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov ecx, dword [esp + 0x3f34]
mov esi, dword [esp + 0x4c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add dword [esp + 0x18], 0xf2a
add esi, 1
mov dword [esp + 0x4c], esi
call eax
cmp esi, eax
jb 0x1006c0a0
xor esi, esi
push 0x7e
lea ecx, [esp + 0x9392]
push esi
push ecx
mov word [esp + 0x9398], si
call sub.MSVCR80.dll_memset
mov edi, dword [esp + 0x34]
movzx edx, byte [edi + 0x3b]
movzx eax, byte [edi + 0x3a]
movzx ecx, byte [edi + 0x39]
add esp, 0xc
push edx
movzx edx, byte [edi + 0x38]
push eax
movzx eax, byte [edi + 0x37]
push ecx
movzx ecx, byte [edi + 0x36]
push edx
movzx edx, byte [edi + 0x35]
push eax
movzx eax, byte [edi + 0x34]
push ecx
movzx ecx, word [edi + 0x32]
push edx
movzx edx, word [edi + 0x30]
push eax
mov eax, dword [edi + 0x2c]
push ecx
push edx
push eax
lea ecx, [esp + 0x93b8]
push 0x101527d8
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
push 0x206
lea edx, [esp + 0x8b02]
push esi
push edx
mov word [esp + 0x8b08], si
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x8afc]
call fcn.10002ad0
mov esi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x1015719c
lea eax, [esp + 0x8b00]
push 0x104
push eax
call esi
add esp, 0xc
lea ecx, [esp + 0x938c]
push ecx
lea edx, [esp + 0x8b00]
push 0x104
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x8afc]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1006c2d5
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [esp + 0x8b14]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
xor eax, eax
push 0x30bc
push eax
lea edx, [esp + 0x5a48]
push edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x5a48], eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0
lea eax, [esp + 0x54]
push eax
push 0x30c0
lea ecx, [esp + 0x5a48]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esp + 0x63aa]
lea eax, [edi + 0x44e]
call fcn.10004090
mov edx, dword [esp + 0x34]
push 0x104
push edx
call fcn.10002390
mov esi, dword [esp + 0x68]
add esp, 8
cmp word [esi], 0x5c
jne 0x1006c48f
mov eax, dword [esp + 0x3f34]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x3c]
push ecx
mov ecx, dword [eax + 8]
push edx
mov edx, dword [esp + 0x38]
push esi
call fcn.10075090
mov edi, eax
and edi, 0xffff
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], edi
je 0x1006c487
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x50], 0
je 0x1006c487
mov esi, dword [esp + 0x28]
mov ebx, dword [esi + 0x2c]
mov ecx, eax
mov ecx, dword [ecx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 0x30]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 0x34]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0x38]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x1006c3a4
call sub.Comn.dll_GetObjectLog
mov ebx, dword [eax]
push 0x98f
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x54], eax
add ebx, 0xc
call fcn.10064bc0
mov ecx, dword [esp + 0x54]
mov edx, dword [ebx]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov edi, dword [esp + 0x24]
add esp, 0xc
mov ebx, dword [esi + 0x2c]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 0x30]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 0x34]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0x38]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x20]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x54]
mov eax, dword [eax + 4]
push edx
call eax
mov esi, dword [esi + 0x24]
test esi, esi
je 0x1006c42c
cmp esi, 1
je 0x1006c42c
cmp esi, 3
jne 0x1006c40a
call sub.Comn.dll_GetObjectLang
push str.11952
jmp 0x1006c436
cmp esi, 4
jne 0x1006c41b
call sub.Comn.dll_GetObjectLang
push str.11953
jmp 0x1006c436
cmp esi, 6
jne 0x1006c450
call sub.Comn.dll_GetObjectLang
push str.11954
jmp 0x1006c436
call sub.Comn.dll_GetObjectLang
push str.11951
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xd4], edi
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
lea edx, [esp + 0xd4]
push edx
call eax
lea esi, [esp + 0x3f24]
mov byte [esp + 0x99b0], 5
call fcn.10078ef0
mov ebx, dword [esp + 0x30]
jmp 0x1006e43f
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
call fcn.10030d70
cmp word [esi], 0x5c
jne 0x1006c4db
push 0x206
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebx + 0x2c], 0
je 0x1006c4db
lea edi, [esp + 0x8d04]
mov ecx, esi
call fcn.100751e0
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
cmp dword [ebx + 0x11b8], 0
jne 0x1006c539
cmp dword [ebx + 0x50], 0
jne 0x1006c539
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
call eax
test eax, eax
je 0x1006c539
mov esi, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
push esi
mov ecx, ebx
call fcn.10074700
lea ecx, [esp + 0x3f34]
push ecx
push ebx
call fcn.10066340
mov edx, dword [esp + 0x38]
push edx
push esi
call fcn.1006e5d0
push esi
mov edi, eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
lea esi, [esp + 0x3f28]
jmp 0x10068e30
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [ebx + 0x11cc], eax
mov dword [ebx + 0x11c8], ecx
mov dword [ebx + 0x11d0], 1
mov esi, dword [edi + 0x2c]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 0x30]
mov dword [eax + 4], esi
mov esi, dword [edi + 0x34]
mov dword [eax + 8], esi
mov esi, dword [edi + 0x38]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
mov dword [esp + 0x5c], 0
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x15c]
push esi
call eax
xor ecx, ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x64], ecx
mov edx, dword [eax]
mov edx, dword [edx + 0xa8]
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x5c]
push ecx
mov ecx, eax
call edx
cmp dword [esp + 0x58], 1
mov ecx, str.RunOneTimeEveryDay
mov edx, str.BackupParam
lea eax, [esp + 0x3fd8]
jne 0x1006c5dc
push 0x101582bc
jmp 0x1006c5e1
push 0x10158254
call fcn.10065860
cmp dword [esp + 0x20], 0
mov dword [esp + 0x3c], 1
je 0x1006c669
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x3c4]
call edx
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x3c0]
call edx
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x3b8]
call edx
neg eax
sbb eax, eax
add eax, 1
cmp esi, 0xffffffff
mov dword [esp + 0x3c], eax
je 0x1006c669
mov eax, dword [ebx + 0x1c]
mov ecx, eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x84]
push esi
mov dword [esp + 0x44], ecx
call eax
mov ecx, dword [esp + 0x40]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x90]
push esi
call eax
push eax
call dword [sym.imp.MSVCR80.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x1006c669
mov dword [esp + 0x4c], 1
mov esi, dword [edi + 0x2c]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 0x30]
mov dword [eax + 4], esi
mov esi, dword [edi + 0x34]
mov dword [eax + 8], esi
mov esi, dword [edi + 0x38]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov eax, dword [edi + 0x20]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x54]
mov eax, dword [eax + 4]
push edx
call eax
mov eax, dword [edi + 0x24]
test eax, eax
je 0x1006c6f1
cmp eax, 1
je 0x1006c6f1
cmp eax, 3
jne 0x1006c6cf
call sub.Comn.dll_GetObjectLang
push str.11952
jmp 0x1006c6fb
cmp eax, 4
jne 0x1006c6e0
call sub.Comn.dll_GetObjectLang
push str.11953
jmp 0x1006c6fb
cmp eax, 6
jne 0x1006c715
call sub.Comn.dll_GetObjectLang
push str.11954
jmp 0x1006c6fb
call sub.Comn.dll_GetObjectLang
push str.11951
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x110]
xor esi, esi
mov dword [esp + 0x24], esi
call edx
test eax, eax
je 0x1006c894
cmp dword [esp + 0x20], esi
mov dword [esp + 0x34], esi
jne 0x1006c78e
mov ecx, dword [edi + 0x2c]
mov edx, dword [edi + 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 0x34]
mov dword [eax + 4], edx
mov edx, dword [edi + 0x38]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x44]
push eax
push 1
push ecx
mov ecx, ebx
call fcn.10074b80
test eax, eax
jne 0x1006c78e
mov dword [ebx + 0x94], 0xa06105d
mov dword [esp + 0x24], 0xa07105d
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x34]
push edx
jmp 0x1006c85a
mov esi, dword [esp + 0x3f34]
mov eax, dword [esi + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
push eax
mov eax, dword [esi + 0xc]
push eax
call edx
mov edx, dword [esp + 0x38]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov ecx, dword [esi + 8]
push ecx
push 0
push 0
push 0x21c
lea edx, [edi + 0x28]
push edx
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0xc]
push 0x116
call eax
cmp dword [esp + 0x24], 0
je 0x1006c7ef
test dword [esp + 0x24], 0xa131043
je 0x1006c885
lea ecx, [esp + 0x8afc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x20], 0
mov dword [esp + 0x34], 0
jne 0x1006c885
mov edx, dword [edi + 0x2c]
mov ecx, dword [edi + 0x30]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [edi + 0x34]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 0x38]
mov dword [eax + 8], edx
lea edx, [esp + 0x44]
push edx
mov dword [eax + 0xc], ecx
mov eax, dword [ebp + 8]
push 2
push eax
mov ecx, ebx
call fcn.10074b80
test eax, eax
jne 0x1006c885
mov dword [ebx + 0x94], 0xa1a1065
mov dword [esp + 0x24], 0xa1b1065
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x34]
push ecx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
push eax
lea esi, [ebx + 0x11c8]
call fcn.10065500
add esp, 8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [esp + 0x28]
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x20], 1
jmp 0x1006c8fc
cmp dword [esp + 0x20], esi
jne 0x1006c8fc
push 0
push 0x82
push 2
push 0
push 0
push 0x40000000
lea edx, [esp + 0x8b14]
push edx
mov dword [esp + 0x6c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, dword [edi]
push 0
mov esi, eax
lea eax, [esp + 0x54]
push eax
push ecx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebx + 0x11dc]
mov eax, 0x32
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
xor eax, eax
mov dword [ebx + 0x54], eax
mov dword [edx + 0x20], eax
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
and esi, 0xffff
cmp esi, 0x1043
mov dword [esp + 0x18], esi
jne 0x1006c92c
mov dword [esp + 0x50], 0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
lea edx, [esp + 0x50]
push edx
call eax
jmp 0x1006c942
mov dword [esp + 0x88], esi
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x88]
push eax
call edx
cmp dword [esp + 0x24], 0
je 0x1006c9ba
cmp esi, 0x1043
je 0x1006c9ba
mov esi, dword [edi + 0x2c]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 0x30]
mov dword [eax + 4], esi
mov esi, dword [edi + 0x34]
mov dword [eax + 8], esi
mov esi, dword [edi + 0x38]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x1006cc6b
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0xa7e
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x54], eax
add esi, 0xc
call fcn.10064bc0
mov ecx, dword [esp + 0x54]
mov edx, dword [esi]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
add esp, 0xc
jmp 0x1006cc6b
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [ebx + 0x1c]
push eax
push edi
call fcn.10040ee0
mov esi, dword [edi + 0x2c]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 0x30]
mov dword [eax + 4], esi
mov esi, dword [edi + 0x34]
mov dword [eax + 8], esi
mov esi, dword [edi + 0x38]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
call eax
mov esi, eax
cmp esi, 0xffffffff
jne 0x1006ca3c
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x50], eax
mov eax, dword [eax]
add eax, 0xc
push 0xa48
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x44], eax
call fcn.10064bc0
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x44]
add esp, 4
push eax
mov eax, dword [edx]
push str._s:_get_task_index_fail
push ecx
call eax
add esp, 0xc
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x1b0]
push esi
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov esi, dword [esp + 0x1c]
mov edx, dword [esi]
mov eax, dword [edx + 0x620]
mov ecx, esi
call eax
test eax, eax
je 0x1006cc6b
mov edx, dword [esi]
mov eax, dword [edx + 0x660]
mov ecx, esi
call eax
test eax, eax
je 0x1006cc6b
mov edx, dword [esi]
mov eax, dword [edx + 0x11c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x628]
mov ecx, esi
mov dword [esp + 0x40], edi
call eax
test eax, eax
jne 0x1006caec
mov edx, dword [edi]
mov eax, dword [edx + 0x38]
mov ecx, edi
call eax
test eax, eax
jne 0x1006caec
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006cad7
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006cad7
call fcn.100022a0
test eax, eax
je 0x1006caec
cmp dword [esp + 0x20], 0
je 0x1006cbb0
call fcn.10030220
jmp 0x1006cbb0
push 0x206
mov eax, 0x46
lea ecx, [esp + 0x8d0a]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov word [esp + 0x8d10], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20041
call eax
push eax
lea ecx, [esp + 0x8d08]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8d04]
call fcn.10001650
mov ebx, dword [esp + 0x30]
mov edx, dword [ebx + 0x1c]
mov esi, dword [edx]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x398]
lea edx, [esp + 0x294]
push edx
add esi, 0xcc
call eax
mov edx, dword [eax]
push edi
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [esi]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x1c]
call edx
push eax
mov eax, dword [ebx + 0x1c]
push eax
call fcn.1004a590
mov eax, 0x64
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov dword [ebx + 0xa0], 1
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0xa68
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x54], eax
add esi, 0xc
call fcn.10064bc0
mov ecx, dword [esp + 0x54]
mov edx, dword [esi]
add esp, 4
push eax
push str._s:_Finished
push ecx
call edx
add esp, 0xc
push 0x206
lea eax, [esp + 0x910a]
push 0
push eax
mov word [esp + 0x9110], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20042
call eax
push eax
lea ecx, [esp + 0x9108]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x9104]
call fcn.10001650
mov eax, dword [esp + 0x40]
call fcn.10074a30
mov ebx, dword [esp + 0x30]
mov edx, dword [esp + 0x28]
mov edi, dword [edx + 0x2c]
mov ecx, dword [ebx + 0x1c]
mov esi, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [edx + 0x30]
mov dword [eax + 4], edi
mov edi, dword [edx + 0x34]
mov edx, dword [edx + 0x38]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edx
mov eax, dword [esi + 0xcc]
call eax
mov ecx, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x20]
push eax
mov esi, ebx
call fcn.100775f0
cmp dword [esp + 0x4c], 0
mov dword [ebx + 0x20], 1
je 0x1006cccd
cmp dword [esp + 0x24], 0
je 0x1006ccc8
cmp dword [esp + 0x18], 0x1043
jne 0x1006cccd
call fcn.10002cb0
lea esi, [esp + 0x3f24]
jmp 0x1006e432
xor eax, eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x3f34]
mov edx, dword [ecx]
mov dword [esp + 0x50], eax
mov eax, dword [edx + 0x10]
call eax
mov edi, eax
push 0xf5d
mov dword [esp + 0x68], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0xf5d
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov edx, dword [esp + 0x38]
mov dword [esi + 0xc], 0xf4c
mov dword [esi], 0x50465242
mov dword [esi + 4], 0xf5d
mov dword [esi + 8], 9
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0xc], 4
mov eax, dword [edx + 0xc]
add esi, 0x10
mov dword [esi], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x444]
add esp, 0xc
mov ecx, edi
call eax
lea ecx, [eax*8]
xor ecx, dword [esi + 4]
and ecx, 8
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x418]
mov ecx, edi
call eax
mov ecx, dword [esi + 4]
xor ecx, eax
and ecx, 1
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x41c]
mov ecx, edi
call eax
lea ecx, [eax + eax]
xor ecx, dword [esi + 4]
and ecx, 2
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x458]
mov ecx, edi
call eax
shl eax, 9
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x200
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x420]
call eax
lea ecx, [eax*4]
xor ecx, dword [esi + 4]
and ecx, 4
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x44c]
mov ecx, edi
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 6
xor ecx, dword [esi + 4]
and ecx, 0x40
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x448]
mov ecx, edi
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 5
xor ecx, dword [esi + 4]
and ecx, 0x20
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x424]
mov ecx, edi
call eax
movzx ecx, ax
mov dword [esi + 8], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x454]
mov ecx, edi
call eax
shl eax, 8
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x100
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x45c]
call eax
mov ecx, dword [esi + 4]
and eax, 1
or eax, 2
shl eax, 0xa
and ecx, 0xffffebff
or eax, ecx
mov dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x42c]
mov ecx, edi
call eax
mov dword [esi + 0xc], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x430]
lea eax, [esp + 0x2b4]
push eax
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x10], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x14], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x18], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1c], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.10065700
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x40]
lea ecx, [esp + 0xbc]
push ecx
mov ecx, edi
call edx
mov byte [esp + 0x99b0], 7
test byte [esi + 4], 0x40
je 0x1006cf2b
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax]
lea edx, [esp + 0xbc]
lea esi, [esp + 0x40]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], edx
call fcn.1000b9b0
mov edx, eax
mov eax, dword [esp + 0x2c]
add edx, 4
add eax, 0x748
jmp 0x1006cf3e
mov eax, dword [edi]
mov edx, dword [eax + 0x48]
mov ecx, edi
call edx
lea ecx, [esi + 0x738]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov esi, dword [esp + 0x64]
mov edx, dword [esi]
mov eax, dword [edx + 0x434]
mov ecx, esi
call eax
mov edi, dword [esp + 0x2c]
add edi, 0x10
lea ecx, [edi + 0x228]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x314]
mov ecx, esi
call eax
lea ecx, [edi + 0x530]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [esi]
mov edx, dword [edx + 0x438]
lea eax, [edi + 0xd40]
push eax
lea ecx, [edi + 0xb38]
push ecx
mov ecx, esi
call edx
lea ecx, [edi + 0x328]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov eax, dword [esi]
lea edx, [edi + 0x20]
mov dword [esp + 0x40], edx
mov edx, dword [eax + 0x428]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x40]
call fcn.10004090
cmp dword [esp + 0xc4], 0
mov dword [ebx + 0x28], 2
jne 0x1006cfe2
or dword [edi + 4], 8
jmp 0x1006cff3
and dword [edi + 4], 0xfffffff7
lea eax, [esp + 0xbc]
mov dword [edi + 0xf48], eax
mov esi, dword [esp + 0x2c]
mov edi, dword [esi + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
add esi, 0x10
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esi + 0x14]
mov dword [eax + 4], edi
mov edi, dword [esi + 0x18]
mov dword [eax + 8], edi
mov edi, dword [esi + 0x1c]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x1c]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x40]
mov edx, dword [edx + 4]
push eax
call edx
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.12285
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
push 0xf5d
push edx
call eax
mov edi, eax
mov eax, ebx
mov dword [esp + 0x24], edi
call fcn.10065730
test edi, edi
jne 0x1006d0bb
mov ecx, dword [ebx + 0x1c]
push 0x40000
push ecx
mov ecx, esi
call fcn.10040ac0
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
movzx ecx, di
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x8c]
push eax
call edx
mov eax, 1
mov dword [ebx + 0x20], eax
mov dword [ebx + 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x50]
cmp eax, 0xbb8
jae 0x1006d102
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea esi, [esp + 0xbc]
mov byte [esp + 0x99b0], 5
call fcn.1000ba00
jmp 0x1006e43f
cmp eax, 0x80000
je 0x1006d5a6
cmp eax, 0x100000
je 0x1006d1bc
lea ecx, [esp + 0x3fbc]
mov byte [esp + 0x99b0], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f68]
mov byte [esp + 0x99b0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fd8]
mov byte [esp + 0x99b0], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f4c]
mov dword [esp + 0x99b0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, 1
jmp 0x1006e541
xor eax, eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x3f34]
mov dword [esp + 0x50], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
mov edi, eax
push 0xf5d
mov dword [esp + 0x68], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push 0xf5d
mov esi, eax
push 0
push esi
mov dword [esp + 0x38], esi
call sub.MSVCR80.dll_memset
mov ecx, dword [esp + 0x38]
mov dword [esi + 0xc], 0xf4c
mov dword [esi], 0x50465242
mov dword [esi + 4], 0xf5d
mov dword [esi + 8], 0xf
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0xc], 0
mov edx, dword [ecx + 0xc]
add esi, 0x10
mov dword [esi], edx
mov eax, dword [edi]
mov edx, dword [eax + 0x444]
add esp, 0xc
mov ecx, edi
call edx
add eax, eax
add eax, eax
add eax, eax
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 8
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x418]
call eax
mov ecx, dword [esi + 4]
xor ecx, eax
and ecx, 1
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x41c]
mov ecx, edi
call eax
lea ecx, [eax + eax]
xor ecx, dword [esi + 4]
and ecx, 2
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x458]
mov ecx, edi
call eax
shl eax, 9
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x200
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x420]
call eax
lea ecx, [eax*4]
xor ecx, dword [esi + 4]
and ecx, 4
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x44c]
mov ecx, edi
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 6
xor ecx, dword [esi + 4]
and ecx, 0x40
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x448]
mov ecx, edi
call eax
movzx eax, ax
movzx ecx, ax
shl ecx, 5
xor ecx, dword [esi + 4]
and ecx, 0x20
xor dword [esi + 4], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x424]
mov ecx, edi
call eax
movzx ecx, ax
mov dword [esi + 8], ecx
mov edx, dword [edi]
mov eax, dword [edx + 0x454]
mov ecx, edi
call eax
shl eax, 8
xor eax, dword [esi + 4]
mov ecx, edi
and eax, 0x100
xor dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x45c]
call eax
mov ecx, dword [esi + 4]
and eax, 1
or eax, 4
shl eax, 0xa
and ecx, 0xfffff3ff
or eax, ecx
mov dword [esi + 4], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x42c]
mov ecx, edi
call eax
mov dword [esi + 0xc], eax
mov edx, dword [edi]
mov edx, dword [edx + 0x430]
lea eax, [esp + 0x2d4]
push eax
mov ecx, edi
call edx
mov ecx, dword [eax]
mov dword [esi + 0x10], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x14], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x18], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1c], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x3f24], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x3f28], edx
mov edx, dword [eax + 0xc]
lea edi, [esp + 0x3f24]
mov eax, ebx
mov dword [esp + 0x3f2c], ecx
mov dword [esp + 0x3f30], edx
call fcn.10065700
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x40]
lea ecx, [esp + 0x40]
push ecx
mov ecx, edi
call edx
mov byte [esp + 0x99b0], 8
mov eax, dword [edi]
mov edx, dword [eax + 0x48]
mov ecx, edi
call edx
lea ecx, [esi + 0x738]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edi, dword [esp + 0x64]
mov edx, dword [edi]
mov eax, dword [edx + 0x434]
mov ecx, edi
call eax
lea ecx, [esi + 0x228]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x314]
mov ecx, edi
call eax
lea ecx, [esi + 0x530]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov edx, dword [edx + 0x438]
lea eax, [esi + 0xd40]
push eax
lea ecx, [esi + 0xb38]
push ecx
mov ecx, edi
call edx
lea ecx, [esi + 0x328]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [edi]
mov eax, dword [edx + 0x428]
mov ecx, edi
call eax
mov edx, eax
lea edi, [esi + 0x20]
mov eax, edi
call fcn.10004090
cmp dword [esp + 0x48], 0
mov dword [ebx + 0x28], 2
jne 0x1006d47a
or dword [esi + 4], 8
jmp 0x1006d488
and dword [esi + 4], 0xfffffff7
lea ecx, [esp + 0x40]
mov dword [esi + 0xf48], ecx
mov ecx, dword [esi + 0x10]
mov edx, dword [esp + 0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 0x14]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x18]
mov dword [eax + 8], ecx
mov ecx, dword [esi + 0x1c]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.12285
add edi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [edi]
push eax
call edx
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
mov eax, dword [esp + 0x3f34]
mov edi, dword [eax + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov eax, dword [eax + 0xc]
mov edx, dword [edx + 0x18]
push edi
push eax
call edx
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov edx, dword [esp + 0x2c]
mov eax, dword [eax + 0xc]
push 0xf5d
push edx
call eax
mov edi, eax
mov eax, ebx
mov dword [esp + 0x24], edi
call fcn.10065730
test edi, edi
jne 0x1006d549
mov ecx, dword [ebx + 0x1c]
push 0x100000
push ecx
mov ecx, esi
call fcn.10040ac0
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
movzx ecx, di
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x94]
push eax
call edx
mov eax, 1
mov dword [ebx + 0x20], eax
mov dword [ebx + 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x50]
cmp eax, 0xbb8
jae 0x1006d590
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
lea esi, [esp + 0x40]
mov byte [esp + 0x99b0], 5
call fcn.1000ba00
jmp 0x1006e43f
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
mov ecx, edi
call edx
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax + 0x28]
mov ecx, edi
mov dword [esp + 0x1c], esi
call edx
mov edi, eax
imul edi, edi, 0xf2a
add edi, 0x21a7
push edi
mov dword [esp + 0x5c], edi
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
add esp, 4
push edi
push 0
push eax
mov dword [esp + 0x38], eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x38]
mov dword [eax + 4], edi
lea ecx, [edi - 0x11]
lea edi, [eax + 0x10]
mov dword [eax + 0xc], ecx
mov dword [eax], 0x50465242
mov dword [eax + 8], 0xe
mov dword [edi], ecx
mov eax, dword [esi]
mov edx, dword [eax + 0x2d4]
add esp, 0xc
mov ecx, esi
mov dword [esp + 0x28], edi
call edx
mov dword [edi + 8], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2dc]
mov ecx, esi
call edx
mov dword [edi + 0xc], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2d8]
mov ecx, esi
call edx
mov dword [edi + 0x10], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2e4]
mov ecx, esi
call edx
mov dword [edi + 0x14], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2e8]
mov ecx, esi
call edx
mov dword [edi + 0x18], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2ec]
mov ecx, esi
call edx
mov dword [edi + 0x1c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2f0]
mov ecx, esi
call edx
mov dword [edi + 0x20], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2f4]
mov ecx, esi
call edx
mov dword [edi + 0x28], edx
mov dword [edi + 0x24], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2f8]
mov ecx, esi
call edx
mov dword [edi + 0x2c], eax
mov eax, dword [esi]
mov ecx, esi
mov edx, dword [eax + 0x2fc]
call edx
mov dword [edi + 0x30], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x2e0]
mov ecx, esi
call edx
mov ecx, dword [esp + 0x3f34]
mov dword [edi + 4], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
call edx
mov dword [edi + 0x2192], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x320]
lea ecx, [esp + 0x2f4]
push ecx
mov ecx, esi
call edx
mov edx, dword [eax]
mov dword [edi + 0x38], edx
mov edx, dword [eax + 4]
lea ecx, [edi + 0x38]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x508]
mov dword [esp + 0x20], ecx
mov ecx, esi
call eax
mov ecx, dword [edi + 0x252]
xor ecx, eax
and ecx, 1
xor dword [edi + 0x252], ecx
mov edx, dword [esi]
mov eax, dword [edx + 0x5cc]
mov ecx, esi
call eax
mov ecx, dword [edi + 0x252]
and eax, 3
or eax, 8
add eax, eax
and ecx, 0xfffffff1
or eax, ecx
mov dword [edi + 0x252], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x5ac]
mov ecx, esi
call eax
mov ecx, dword [ebx + 0x11dc]
mov dword [ebx + 0x11bc], eax
mov eax, dword [esp + 0x20]
mov dword [ecx + 8], 7
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [esp + 0x3f24], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x3f28], ecx
mov dword [esp + 0x3f2c], edx
mov edx, dword [esi]
lea ecx, [edi + 0x48]
mov dword [esp + 0x3f30], eax
mov eax, dword [edx + 0x324]
mov dword [esp + 0x34], ecx
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x34]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x304]
mov ecx, esi
call eax
lea ecx, [edi + 0x356]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov eax, dword [esi]
lea edx, [edi + 0x55e]
mov dword [esp + 0x38], edx
mov edx, dword [eax + 0x308]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x38]
call fcn.10004090
mov eax, dword [esi]
mov edx, dword [eax + 0x30c]
mov ecx, esi
call edx
mov edx, eax
lea eax, [edi + 0x766]
call fcn.10004090
mov eax, dword [esi]
mov edx, dword [eax + 0x310]
mov ecx, esi
call edx
mov edx, eax
lea eax, [edi + 0x96e]
call fcn.10004090
mov edx, dword [esi]
lea eax, [edi + 0x256]
mov dword [esp + 0x5c], eax
mov eax, dword [edx + 0x300]
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x5c]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x314]
mov ecx, esi
call eax
lea ecx, [edi + 0x196e]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x318]
mov ecx, esi
call eax
lea ecx, [edi + 0x1b76]
mov edx, eax
mov eax, ecx
call fcn.10004090
mov eax, dword [esi]
lea edx, [edi + 0x1d7e]
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 0x1a0]
mov ecx, esi
call edx
mov edx, eax
mov eax, dword [esp + 0x3c]
call fcn.10004090
mov edx, dword [esi]
lea eax, [edi + 0x1f86]
mov dword [esp + 0x40], eax
mov eax, dword [edx + 0x1a4]
mov ecx, esi
call eax
mov edx, eax
mov eax, dword [esp + 0x40]
call fcn.10004090
mov edx, dword [esi]
mov eax, dword [edx + 0x3c]
mov ecx, esi
call eax
mov esi, dword [esp + 0x3f34]
movzx ecx, al
mov dword [edi + 0x218e], ecx
mov dword [ebx + 0x28], 1
mov edx, dword [esi]
mov eax, dword [edx + 0x4c]
mov ecx, esi
call eax
lea ecx, [esp + 0x70]
push ecx
mov ecx, eax
call fcn.10078de0
mov byte [esp + 0x99b0], 0x18
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
mov dword [esp + 0x4c], 0
call eax
test eax, eax
jbe 0x1006d962
mov ecx, edi
add ecx, 0x21a8
mov dword [esp + 0x54], ecx
mov edi, dword [esp + 0x4c]
lea esi, [esp + 0x70]
call fcn.1005bfd0
mov edx, dword [esp + 0x54]
lea edi, [edx - 0x12]
mov esi, eax
mov ecx, 0x3ca
rep movsd dword es:[edi], dword [esi]
push 0x200
push edx
movsw word es:[edi], word [esi]
call fcn.10002390
mov ecx, dword [esp + 0x3f3c]
mov esi, dword [esp + 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add dword [esp + 0x5c], 0xf2a
add esi, 1
add esp, 8
mov dword [esp + 0x4c], esi
call eax
cmp esi, eax
jb 0x1006d910
xor edi, edi
push 0x7e
lea ecx, [esp + 0x9412]
push edi
push ecx
mov word [esp + 0x9418], di
call sub.MSVCR80.dll_memset
mov esi, dword [esp + 0x34]
movzx edx, byte [esi + 0x47]
movzx eax, byte [esi + 0x46]
movzx ecx, byte [esi + 0x45]
add esp, 0xc
push edx
movzx edx, byte [esi + 0x44]
push eax
movzx eax, byte [esi + 0x43]
push ecx
movzx ecx, byte [esi + 0x42]
push edx
movzx edx, byte [esi + 0x41]
push eax
movzx eax, byte [esi + 0x40]
push ecx
movzx ecx, word [esi + 0x3e]
push edx
movzx edx, word [esi + 0x3c]
push eax
mov eax, dword [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
push ecx
lea edx, [esp + 0x9438]
push 0x101527d8
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
push 0x206
lea eax, [esp + 0x8d0a]
push edi
push eax
mov word [esp + 0x8d10], di
call sub.MSVCR80.dll_memset
add esp, 0xc
lea ecx, [esp + 0x8d04]
call fcn.10002ad0
mov edi, dword [sym.imp.MSVCR80.dll_wcscat_s]
push 0x1015719c
lea ecx, [esp + 0x8d08]
push 0x104
push ecx
call edi
add esp, 0xc
lea edx, [esp + 0x940c]
push edx
lea eax, [esp + 0x8d08]
push 0x104
push eax
call edi
add esp, 0xc
lea ecx, [esp + 0x8d04]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1006dad3
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea edx, [esp + 0x8d1c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
xor eax, eax
push 0x30bc
push eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x5a44], eax
lea eax, [esp + 0x5a48]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0
lea ecx, [esp + 0x68]
push ecx
push 0x30c0
lea edx, [esp + 0x5a48]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x5c92]
call fcn.10004090
lea edx, [esp + 0x63aa]
lea eax, [esi + 0x96e]
call fcn.10004090
mov eax, dword [esp + 0x38]
push 0x104
push eax
call fcn.10002390
lea eax, [esi + 0x766]
push 0x104
push eax
call fcn.10002390
mov eax, dword [esp + 0x6c]
xor edx, edx
add esp, 0x10
cmp eax, edx
je 0x1006db25
xor ecx, ecx
cmp word [eax], dx
je 0x1006db25
add eax, 2
add ecx, 1
cmp word [eax], dx
jne 0x1006db07
cmp ecx, edx
jle 0x1006db25
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x3c], 1
jmp 0x1006db2e
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 0x3c], edx
lea eax, [esi + 0x96e]
cmp eax, edx
je 0x1006db5e
xor ecx, ecx
cmp word [eax], dx
je 0x1006db5e
nop
add eax, 2
add ecx, 1
cmp word [eax], dx
jne 0x1006db40
cmp ecx, edx
jle 0x1006db5e
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 4], 1
jmp 0x1006db67
mov eax, dword [ebx + 0x11dc]
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x38]
lea edx, [ebx + 0x11e0]
mov eax, 0x104
mov dword [esp + 0x60], edx
call fcn.100040d0
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
mov ecx, dword [esp + 0x60]
cmp word [ecx], 0x5c
jne 0x1006dd20
cmp dword [esi + 0x18], 0
jne 0x1006dd20
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
call eax
test eax, eax
je 0x1006dd20
mov eax, dword [esp + 0x3f34]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [esp + 0x38]
push ecx
mov ecx, dword [eax + 8]
call fcn.10075090
mov edi, eax
and edi, 0xffff
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], edi
je 0x1006dd18
mov edx, dword [esp + 0x30]
cmp dword [edx + 0x50], 0
je 0x1006dd18
mov esi, dword [esp + 0x20]
mov ebx, dword [esi]
mov eax, edx
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov dword [eax + 8], ebx
mov ebx, dword [esi + 0xc]
mov dword [eax + 0xc], ebx
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
jne 0x1006dc6d
call sub.Comn.dll_GetObjectLog
mov ebx, dword [eax]
push 0x854
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x68], eax
add ebx, 0xc
call fcn.10064bc0
mov ecx, dword [esp + 0x68]
mov edx, dword [ebx]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov edi, dword [esp + 0x24]
add esp, 0xc
mov ebx, dword [esi]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov ebx, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0x1c]
call eax
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x252]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
and eax, 1
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov edx, dword [esp + 0x34]
mov eax, dword [eax + 4]
push edx
call eax
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x1006dcd0
call sub.Comn.dll_GetObjectLang
push str.12329
jmp 0x1006dceb
cmp eax, 2
jne 0x1006dce1
call sub.Comn.dll_GetObjectLang
push str.12330
jmp 0x1006dceb
call sub.Comn.dll_GetObjectLang
push str.12331
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
add esi, 8
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
push eax
call edx
mov dword [esp + 0x9c], edi
lea edx, [esp + 0x9c]
jmp 0x10068d46
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0x20]
call fcn.10030d70
mov ecx, dword [esp + 0x60]
cmp word [ecx], 0x5c
jne 0x1006dd7a
push 0x206
lea edx, [esp + 0x8b02]
push 0
push edx
mov word [esp + 0x8b08], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
cmp dword [ebx + 0x2c], 0
je 0x1006dd7a
mov ecx, dword [esp + 0x60]
lea edi, [esp + 0x8afc]
call fcn.100751e0
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
cmp dword [ebx + 0x11b8], 0
jne 0x1006dd9f
cmp dword [ebx + 0x50], 0
jne 0x1006dd9f
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x110]
call edx
test eax, eax
jne 0x10068dfb
mov ecx, dword [esp + 0x3f34]
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov edx, dword [esp + 0x14]
mov dword [ebx + 0x11c8], ecx
mov dword [ebx + 0x11cc], eax
mov dword [ebx + 0x11d0], 0
mov ecx, dword [edi]
mov edx, dword [edx]
mov edx, dword [edx + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x24]
call edx
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x252]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
and edx, 1
push edx
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x34]
mov edx, dword [edx + 4]
push eax
call edx
mov eax, dword [esi + 0x18]
cmp eax, 1
jne 0x1006de3e
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x64], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12329
call eax
mov edx, dword [esp + 0x64]
jmp 0x1006de8b
cmp eax, 2
jne 0x1006de68
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x64], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12330
call eax
mov edx, dword [esp + 0x64]
jmp 0x1006de8b
call sub.Comn.dll_GetObjectLang
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov edx, dword [eax]
add ecx, 8
mov dword [esp + 0x64], ecx
mov ecx, eax
mov eax, dword [edx]
push str.12331
call eax
mov edx, dword [esp + 0x64]
mov ecx, dword [esp + 0x14]
push eax
mov eax, dword [edx]
call eax
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
mov dword [esp + 0x24], 0
call eax
test eax, eax
je 0x1006e086
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x44]
push eax
push 1
push ecx
mov ecx, ebx
mov dword [esp + 0x50], 0
call fcn.10074b80
test eax, eax
jne 0x1006df02
mov dword [ebx + 0x94], 0x8a2105d
mov dword [esp + 0x24], 0x8a3105d
jmp 0x1006e04d
lea edi, [esp + 0x3f24]
mov eax, ebx
call fcn.10065700
mov edi, dword [esp + 0x3f34]
mov eax, dword [edi + 8]
mov ecx, dword [ebx + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
push eax
mov eax, dword [edi + 0xc]
push eax
call edx
mov edx, dword [esp + 0x58]
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
push edx
mov edx, dword [esp + 0x30]
push edx
call eax
mov ecx, dword [edi + 8]
push ecx
push 0
push 0
push 0x21c
lea edx, [esi + 0x34]
push edx
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0xc]
push 0x116
call eax
mov eax, ebx
call fcn.10065730
cmp dword [esp + 0x24], 0
jne 0x1006e077
mov ecx, dword [esp + 0x5c]
mov edi, dword [esp + 0x20]
push ecx
mov eax, edi
mov ecx, ebx
call fcn.1006f540
test eax, eax
jne 0x1006dfc2
call sub.Comn.dll_GetObjectLog
mov dword [esp + 0x64], eax
mov eax, dword [eax]
add eax, 0xc
push 0x8b3
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x54], eax
call fcn.10064bc0
mov edx, dword [esp + 0x68]
add esp, 4
push eax
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
push str._s:_PolicyManager_error.
push edx
call ecx
mov edi, dword [esp + 0x2c]
add esp, 0xc
lea edx, [esp + 0x8d04]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x12c]
call edx
test eax, eax
je 0x1006e002
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
call fcn.1006f520
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 4], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 8]
mov dword [eax + 0xc], edx
lea eax, [esp + 0x44]
push eax
push 2
push ecx
mov ecx, ebx
mov dword [esp + 0x50], 0
call fcn.10074b80
test eax, eax
jne 0x1006e077
mov dword [ebx + 0x94], 0x8bf1065
mov dword [esp + 0x24], 0x8c01065
call sub.Comn.dll_GetObjectLang
mov edx, dword [esp + 0x34]
push edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.11606
call eax
push eax
lea esi, [ebx + 0x11c8]
call fcn.10065500
mov esi, dword [esp + 0x30]
add esp, 8
mov ecx, dword [ebx + 0x11dc]
mov dword [ecx + 0x20], 1
jmp 0x1006e0eb
push 0
push 0x82
push 2
push 0
push 0
push 0x40000000
lea edx, [esp + 0x8d1c]
push edx
mov dword [esp + 0x80], 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, dword [esi]
push 0
mov edi, eax
lea eax, [esp + 0x68]
push eax
push ecx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebx + 0x11dc]
mov eax, 0x32
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
xor eax, eax
mov dword [ebx + 0x54], eax
mov dword [edx + 0x20], eax
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
movzx eax, di
mov dword [esp + 0xa4], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xa4]
push eax
call edx
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
jne 0x1006e3ab
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [ebx + 0x1c]
push esi
mov esi, dword [esp + 0x20]
push eax
mov ecx, esi
xor edx, edx
call fcn.100429b0
mov eax, dword [ebx + 0x1c]
mov edi, dword [esp + 0x20]
mov edx, dword [eax]
mov ecx, dword [edi]
mov edx, dword [edx + 0xcc]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x1c]
call edx
cmp eax, 0xffffffff
mov dword [esp + 0x50], eax
jne 0x1006e1b1
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0x8e5
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x68], eax
add esi, 0xc
call fcn.10064bc0
mov ecx, dword [esi]
add esp, 4
push eax
mov eax, dword [esp + 0x68]
push str._s:_get_task_index_fail
push eax
call ecx
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x5c]
add esp, 0xc
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x1b0]
call eax
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x620]
mov ecx, esi
call eax
test eax, eax
je 0x1006e3af
mov edx, dword [esi]
mov eax, dword [edx + 0x660]
mov ecx, esi
call eax
test eax, eax
je 0x1006e3af
mov edx, dword [esi]
mov eax, dword [edx + 0x11c]
mov ecx, esi
call eax
mov edx, dword [esi]
mov edi, eax
mov eax, dword [edx + 0x628]
mov ecx, esi
call eax
test eax, eax
jne 0x1006e260
mov edx, dword [edi]
mov eax, dword [edx + 0x38]
mov ecx, edi
call eax
test eax, eax
jne 0x1006e260
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006e244
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
mov ecx, edi
call eax
cmp eax, 4
jne 0x1006e244
call fcn.100022a0
test eax, eax
je 0x1006e260
mov edx, dword [edi]
mov eax, dword [edx + 0x70]
mov ecx, edi
call eax
cmp eax, 6
jne 0x1006e324
call fcn.10030220
jmp 0x1006e324
push 0x206
mov eax, 0x46
lea ecx, [esp + 0x8b02]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov word [esp + 0x8b08], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20041
call eax
push eax
lea ecx, [esp + 0x8b00]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x8afc]
call fcn.10001650
mov ebx, dword [esp + 0x30]
mov edx, dword [ebx + 0x1c]
mov esi, dword [edx]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x320]
lea edx, [esp + 0x314]
push edx
add esi, 0xcc
call eax
mov edx, dword [eax]
push edi
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [esi]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x1c]
call edx
push eax
mov eax, dword [ebx + 0x1c]
push eax
call fcn.1004a590
push 0x206
mov eax, 0x64
lea ecx, [esp + 0x910a]
push 0
push ecx
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov dword [ebx + 0xa0], 1
mov word [esp + 0x9110], 0
call sub.MSVCR80.dll_memset
add esp, 0xc
call sub.Comn.dll_GetObjectLang
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push str.20042
call eax
push eax
lea ecx, [esp + 0x9108]
push 0x104
push ecx
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
lea eax, [ebx + 0x9a4]
add esp, 0xc
mov ebx, 0x400
lea edx, [esp + 0x9104]
call fcn.10001650
mov eax, edi
call fcn.10074a30
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
mov esi, dword [edi]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], esi
mov esi, dword [edi + 4]
mov dword [eax + 4], esi
mov esi, dword [edi + 8]
mov dword [eax + 8], esi
mov esi, dword [edi + 0xc]
mov dword [eax + 0xc], esi
mov eax, dword [edx + 0xcc]
call eax
cmp eax, 0xffffffff
mov dword [esp + 0x50], eax
jne 0x1006e416
call sub.Comn.dll_GetObjectLog
mov esi, dword [eax]
push 0x913
mov edi, str..UiTaskMgr.cpp
mov dword [esp + 0x68], eax
add esi, 0xc
call fcn.10064bc0
mov ecx, dword [esp + 0x68]
mov edx, dword [esi]
add esp, 4
push eax
push str._s:_get_task_index_fail
push ecx
call edx
mov eax, dword [esp + 0x5c]
add esp, 0xc
mov ecx, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x20]
push eax
mov esi, ebx
call fcn.10076d80
mov dword [ebx + 0x20], 1
lea esi, [esp + 0x70]
mov byte [esp + 0x99b0], 5
call fcn.10078ef0
mov ecx, dword [ebx + 0x24]
mov edx, dword [ecx]
mov eax, dword [esp + 0x14]
mov edx, dword [edx + 4]
push 0
push eax
call edx
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x2c]
push eax
mov esi, ebx
mov dword [ebx + 0x20], 1
call fcn.10076230
lea ecx, [esp + 0x3f34]
push ecx
push ebx
call fcn.10066340
mov eax, dword [ebx + 0x11dc]
test eax, eax
je 0x1006e492
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete_void__
add esp, 4
mov dword [ebx + 0x11dc], 0
mov edx, dword [0x1014c96c]
mov eax, dword [esp + 0x80]
mov dword [eax], edx
mov ecx, dword [0x1014c970]
mov dword [eax + 4], ecx
mov edx, dword [0x1014c974]
mov dword [eax + 8], edx
mov ecx, dword [0x1014c978]
mov dword [eax + 0xc], ecx
lea ecx, [esp + 0x3fbc]
mov byte [esp + 0x99b0], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f68]
mov byte [esp + 0x99b0], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fa0]
mov byte [esp + 0x99b0], 2
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f84]
mov byte [esp + 0x99b0], 1
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3fd8]
mov byte [esp + 0x99b0], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x3f4c]
mov dword [esp + 0x99b0], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x99a8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x9990]
xor ecx, esp
call fcn.10130e50
mov esp, ebp
pop ebp
ret 4