Function at 0x10005dd6
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
xor edx, edx
push esi
mov eax, ecx
push edi
mov dword [esp + 0x14], eax
cmp dword [0x1003caf8], edx
jne case.0x10005b60.3
mov ebx, dword [ebp + 8]
mov ecx, 0x104
mov esi, 0x1003bab8
mov edi, 0x1003b298
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x104
mov esi, 0x1003bec8
mov edi, 0x1003b6a8
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x1003974c]
mov dword [0x10039748], ecx
mov ecx, dword [0x10039754]
mov dword [0x10039750], ecx
movzx ecx, byte [ebx]
cmp ecx, 0x65
ja case.0x10005b60.3
movzx ecx, byte [ecx + 0x10005f3c]
jmp dword [ecx*4 + 0x10005f08]
push 1
add eax, 0x21c
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
call fcn.10005fb0
mov edx, dword [esp + 0x14]
push edx
call fcn.100060b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0xc40
call fcn.10017fa7
add esp, 4
push 0xc40
mov edi, eax
push 0
push edi
mov dword [esp + 0x1c], edi
call fcn.10019790
lea esi, [ebx + 1]
mov ecx, 0x310
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x1003d7d0]
mov edi, dword [esp + 0x1c]
add esp, 0xc
mov esi, eax
cmp eax, dword [0x1003d7d4]
je 0x10005c1a
lea ecx, [ecx]
mov eax, dword [esi]
mov eax, dword [eax]
lea ecx, [edi + 4]
add eax, 4
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10005c06
test dx, dx
je 0x10005c02
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10005c06
add eax, 4
add ecx, 4
test dx, dx
jne 0x10005be0
xor eax, eax
jmp 0x10005c0b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10005c77
add esi, 4
cmp esi, dword [0x1003d7d4]
jne 0x10005bd0
push 0xc41
call fcn.1001818b
add esp, 4
mov esi, eax
push 0xc40
lea edx, [esi + 1]
push edi
mov byte [esi], 5
push edx
mov dword [edi + 0x400], 0
call fcn.10019420
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
add esp, 0xc
push 0xc41
push esi
call eax
push edi
call fcn.10017b4d
add esp, 4
push esi
call fcn.10017b4d
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edx, dword [esi]
mov eax, dword [edx]
lea ecx, [edi + 0x202]
push ecx
add eax, 0x202
push 0xff
push eax
call fcn.10018263
mov ecx, dword [esi]
add esp, 0xc
push 0
push 0
push ecx
push 0x10005620
push 0
push 0
call fcn.10018772
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call fcn.10017b4d
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0xc40
call fcn.10017fa7
add esp, 4
push 0xc40
mov edi, eax
push 0
push edi
mov dword [esp + 0x1c], edi
call fcn.10019790
lea esi, [ebx + 1]
mov ecx, 0x310
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebx + 0xc41]
add esp, 0xc
push esi
call fcn.1001818b
add esp, 4
push esi
add ebx, 0xc45
mov edi, eax
push ebx
push edi
call fcn.10019420
add esp, 0xc
push 8
call fcn.10017fa7
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov dword [eax + 4], edi
mov edx, dword [eax]
mov dword [esp + 0x18], eax
add esp, 4
lea eax, [esp + 0x14]
mov dword [edx + 0x404], esi
call fcn.10006cb0
mov eax, dword [esp + 0x14]
push 0
push 0
push eax
push 0x10005620
push 0
push 0
call fcn.10018772
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
call fcn.10005fb0
mov edi, dword [0x1003aa3c]
push 0x200
call fcn.10017fa7
add esp, 4
push 0x200
mov esi, eax
push 0
push esi
call fcn.10019790
add esp, 0xc
push 0x10031670
push 0x10031dd0
push str._s__s_n
lea ecx, [esi + 2]
push 0xff
push ecx
mov byte [esi], 1
call fcn.10018027
mov ecx, dword [edi + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
add esp, 0x14
push 0x200
push esi
call eax
push esi
call fcn.10017b4d
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0xc40
call fcn.10017fa7
add esp, 4
push 0xc40
mov esi, eax
push 0
push esi
call fcn.10019790
mov edi, dword [ebp + 0xc]
add esp, 0xc
dec edi
push edi
call fcn.1001818b
add esp, 4
push edi
inc ebx
push ebx
push eax
mov dword [esp + 0x20], eax
call fcn.10019420
add esp, 0xc
push 8
call fcn.10017fa7
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp + 0xc]
add esp, 4
mov dword [eax], esi
mov dword [eax + 4], ecx
dec edx
mov dword [esi + 0x404], edx
mov ecx, dword [eax]
mov dword [ecx], 2
jmp 0x10005d41
push eax
call fcn.100060b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebp + 0xc]
push edx
push eax
mov ecx, ebx
call fcn.10006290
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
lea eax, [esp + 0x14]
push eax
push edx
inc ebx
push ebx
push 0x100069c0
push edx
mov dword [esp + 0x28], edx
push edx
jmp 0x10005d4f
mov edi, dword [0x1003aa3c]
push 0x200
call fcn.10017fa7
add esp, 4
push 0x200
mov esi, eax
push 0
push esi
call fcn.10019790
add esp, 0xc
push 0x10031670
push 0x10031de0
jmp 0x10005d9b
movzx ecx, byte [ebx + 1]
sub ecx, edx
je 0x10005ece
dec ecx
jne case.0x10005b60.3
add ebx, 2
push ebx
mov edi, str.BEIZHU
call fcn.10006910
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
add ebx, 2
push ebx
mov edi, str.FENZU
call fcn.10006910
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov dword [0x1003caf8], 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov dword [0x1003caf8], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8