Function at 0x1000b5f0
Capabilities:
Check for time delay via gettickcount
Create directory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x2134
call fcn.10036fa0
mov eax, dword [0x1005d330]
push ebx
mov dword [esp + 0x2134], eax
mov eax, dword [0x100678f0]
test eax, eax
push esi
push edi
je 0x1000b8c4
mov ecx, 0x1005f364
call fcn.10001290
test byte [0x1005ed54], 1
jne 0x1000b641
or dword [0x1005ed54], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1005ed50], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x100678f4]
mov esi, dword [0x1005ed50]
imul ecx, ecx, 0xea60
add ecx, esi
cmp eax, ecx
jbe 0x1000b8b9
push 0x100674e0
mov dword [0x1005ed50], eax
lea edx, [esp + 0x24]
xor eax, eax
push 0x100506fc
mov byte [esp + 0x28], 0
mov ecx, 0x41
lea edi, [esp + 0x29]
push edx
rep stosd dword es:[edi], eax
call fcn.10036e11
add esp, 0xc
xor esi, esi
push esi
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor eax, eax
mov byte [esp + 0x1130], 0
mov ecx, 0x400
lea edi, [esp + 0x1131]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [esp + 0x16]
movzx eax, word [esp + 0x12]
movzx ecx, word [esp + 0x10]
push edx
push eax
push ecx
lea edx, [esp + 0x113c]
push str._04d_02d_02d
push edx
call fcn.10036e11
lea eax, [esp + 0x1144]
push eax
push 0x100674e0
lea ecx, [esp + 0x3c]
push str._sdata_s.txt
push ecx
call fcn.10036e11
lea edx, [esp + 0x44]
push 0x100506d8
push edx
call fcn.10037995
add esp, 0x2c
mov ecx, 0x1005f2cc
mov edi, eax
call fcn.10001290
cmp edi, esi
jne 0x1000b786
xor ebx, ebx
xor ecx, ecx
jmp 0x1000b730
mov edi, dword [0x1005f28c]
cmp edi, esi
jne 0x1000b73e
xor eax, eax
jmp 0x1000b757
mov edx, dword [0x1005f290]
sub edx, edi
mov eax, 0x2f149903
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jge 0x1000b78f
lea eax, [ecx + edi]
mov dword [eax + 0x178], esi
mov dword [eax + 0x17c], esi
mov eax, dword [0x1005f28c]
add eax, ecx
inc ebx
mov dword [eax + 0x170], esi
mov dword [eax + 0x174], esi
add ecx, 0x2b8
jmp 0x1000b730
push edi
call fcn.10037538
add esp, 4
lea ecx, [esp + 0x20]
push 0x10050c94
push ecx
call fcn.10037995
mov ebx, eax
add esp, 8
cmp ebx, esi
mov dword [esp + 0xc], ebx
je 0x1000b8ab
lea edx, [esp + 0x128]
xor eax, eax
push str.username_treceived_byte__tsent_byte__r_n
mov byte [esp + 0x12c], 0
mov ecx, 0x400
lea edi, [esp + 0x12d]
push edx
rep stosd dword es:[edi], eax
call fcn.10036e11
lea eax, [esp + 0x130]
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1000b7e6
push ebx
sub eax, edx
push 1
push eax
lea eax, [esp + 0x134]
push eax
call fcn.100385ee
add esp, 0x10
xor ebx, ebx
mov edi, dword [0x1005f28c]
test edi, edi
jne 0x1000b813
xor eax, eax
jmp 0x1000b82c
mov ecx, dword [0x1005f290]
sub ecx, edi
mov eax, 0x2f149903
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jge 0x1000b89e
mov ecx, dword [edi + ebx + 0x17c]
mov edx, dword [edi + ebx + 0x178]
lea eax, [edi + ebx]
push ecx
mov ecx, dword [eax + 0x174]
push edx
mov edx, dword [eax + 0x170]
push ecx
push edx
push eax
lea eax, [esp + 0x13c]
push 0x10050c58
push eax
call fcn.10036e11
lea eax, [esp + 0x144]
add esp, 0x1c
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1000b871
mov ecx, dword [esp + 0xc]
push ecx
sub eax, edx
push 1
push eax
lea edx, [esp + 0x134]
push edx
call fcn.100385ee
add esp, 0x10
inc esi
add ebx, 0x2b8
jmp 0x1000b805
mov eax, dword [esp + 0xc]
push eax
call fcn.10037538
add esp, 4
mov edx, dword [0x1005f2cc]
mov ecx, 0x1005f2cc
call dword [edx + 0x14]
push 0x1005f36c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, 0x1005f2cc
call fcn.10001290
mov ebx, dword [0x1005f28c]
xor eax, eax
mov dword [esp + 0xc], eax
mov esi, dword [0x1005f29c]
test esi, esi
mov dword [esp + 0x10], eax
jne 0x1000b8ec
xor eax, eax
jmp 0x1000b905
mov ecx, dword [0x1005f2a0]
sub ecx, esi
mov eax, 0x30c30c31
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0xc], eax
jge 0x1000ba41
mov edi, dword [ebp + 8]
mov eax, dword [esp + 0x10]
add edi, 8
mov ecx, 4
lea esi, [esi + eax + 0x13c]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x1000b980
xor esi, esi
xor edi, edi
nop
test ebx, ebx
jne 0x1000b938
xor eax, eax
jmp 0x1000b951
mov ecx, dword [0x1005f290]
sub ecx, ebx
mov eax, 0x2f149903
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jge 0x1000b980
mov eax, dword [0x1005f29c]
mov ecx, dword [esp + 0x10]
add eax, ecx
lea ecx, [ebx + edi]
push eax
push ecx
call fcn.1003ebdf
add esp, 8
test eax, eax
je 0x1000b997
mov ebx, dword [0x1005f28c]
inc esi
add edi, 0x2b8
jmp 0x1000b930
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
inc ecx
mov dword [esp + 0xc], ecx
add eax, 0x150
jmp 0x1000b8da
mov ebx, dword [ebp + 0x10]
test ebx, ebx
jne 0x1000b9f3
mov edx, dword [0x1005f28c]
mov eax, dword [ebp + 0xc]
mov ecx, esi
imul ecx, ecx, 0x2b8
lea edi, [ecx + edx + 0x178]
cdq
add dword [edi], eax
adc dword [edi + 4], edx
mov eax, dword [0x1005f28c]
lea edi, [ecx + eax]
cmp dword [edi + 0x164], 0xffffffff
jne 0x1000ba64
mov eax, dword [0x1005f2cc]
mov ecx, 0x1005f2cc
call dword [eax + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x213c]
call fcn.10036c09
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp ebx, 1
jne 0x1000ba9c
mov edx, dword [0x1005f28c]
mov eax, dword [ebp + 0xc]
mov ecx, esi
imul ecx, ecx, 0x2b8
lea edi, [ecx + edx + 0x170]
cdq
add dword [edi], eax
adc dword [edi + 4], edx
mov eax, dword [0x1005f28c]
lea edi, [ecx + eax]
cmp dword [edi + 0x160], 0xffffffff
je 0x1000ba7a
mov ecx, dword [edi + 0x180]
test ecx, ecx
jne 0x1000baa1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi + 0x180], eax
mov edx, dword [0x1005f2cc]
mov ecx, 0x1005f2cc
call dword [edx + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x213c]
call fcn.10036c09
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [edi + 0x184]
test ecx, ecx
jne 0x1000baa1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi + 0x184], eax
mov eax, dword [0x1005f2cc]
mov ecx, 0x1005f2cc
call dword [eax + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x213c]
call fcn.10036c09
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x1005f28c]
xor edi, edi
cmp ebx, 1
jne 0x1000bb0b
fild dword [ebp + 0xc]
imul esi, esi, 0x2b8
fmul qword [0x10050c50]
fidiv dword [esi + eax + 0x160]
lea edi, [esi + eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
fstp qword [esp + 0x10]
call ebx
sub eax, dword [edi + 0x180]
test eax, eax
mov dword [esp + 0xc], eax
fild dword [esp + 0xc]
jge 0x1000bae5
fadd qword [0x10050c48]
fsubr qword [esp + 0x10]
call fcn.10038694
mov ecx, dword [0x1005f28c]
lea edx, [esi + ecx]
mov edi, eax
mov dword [esp + 0xc], edx
call ebx
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x180], eax
jmp 0x1000bb74
test ebx, ebx
jne 0x1000bba3
fild dword [ebp + 0xc]
imul esi, esi, 0x2b8
fmul qword [0x10050c50]
fidiv dword [esi + eax + 0x164]
lea edi, [esi + eax]
fstp qword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x184]
test eax, eax
mov dword [esp + 0xc], eax
fild dword [esp + 0xc]
jge 0x1000bb4e
fadd qword [0x10050c48]
fsubr qword [esp + 0x10]
call fcn.10038694
mov edx, dword [0x1005f28c]
mov edi, eax
lea ebx, [esi + edx]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x184], eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
test edi, edi
jle 0x1000bba3
cmp dword [ebp + 0x10], 1
jne 0x1000bb91
mov eax, dword [0x1005f28c]
add esi, eax
call ebx
add eax, edi
mov dword [esi + 0x180], eax
jmp 0x1000bba3
mov ecx, dword [0x1005f28c]
add esi, ecx
call ebx
add eax, edi
mov dword [esi + 0x184], eax
mov edx, dword [0x1005f2cc]
mov ecx, 0x1005f2cc
call dword [edx + 0x14]
test edi, edi
jle 0x1000ba4f
cmp edi, 0x3e8
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
jle 0x1000bbea
push 0x3e8
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
sub edi, 0x3e8
cmp ecx, 2
jne 0x1000ba4f
cmp edi, 0x3e8
jg 0x1000bbc7
push edi
call esi
mov ecx, dword [esp + 0x213c]
xor eax, eax
call fcn.10036c09
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret