Function at 0x1005adbd
Capabilities:
Check for time delay via gettickcount
Check os version
Create directory
Create thread
Shutdown system
Terminate process
Write file on windows

Disassembly:
push 0x380
mov eax, 0x100878fb
call fcn.10083e9c
mov eax, dword [0x2f91a04]
cmp eax, 0x4b1
je 0x1005ae17
cmp eax, 0x321
je 0x1005ae17
cmp eax, 0x1c85
je 0x1005ae17
cmp eax, 0xfa1
je 0x1005ae17
cmp eax, 0x8fd
je 0x1005ae17
cmp eax, 0x907
je 0x1005ae17
cmp eax, 0x911
je 0x1005ae17
cmp eax, 0x91b
je 0x1005ae17
cmp eax, 0x925
je 0x1005ae17
cmp eax, 0x939
jne 0x1005ae36
cmp byte [0x100a6c70], 1
jne 0x1005ae36
cmp dword [0x103b64b8], 0
jbe 0x1005ae36
cmp byte [0x10342a8e], 1
je 0x1005c589
mov eax, dword [0x2fb6ac4]
mov dword [ebp - 0x38c], eax
test eax, eax
je 0x1005c589
mov ecx, dword [0xe76df8]
test ecx, ecx
je 0x1005c589
movzx eax, word [eax + 0x14]
imul eax, eax, 0x1cc
cmp dword [eax + 0x333aab2], 0
je 0x1005c589
cmp byte [0x10342a8c], 0
jne 0x1005ae97
cmp dword [ecx + 0x30], 0xffffffff
je 0x1005ae90
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x103428a4]
cmp eax, 0x1d4c0
jb 0x1005ae97
mov byte [0x10342a8c], 1
mov al, al
mov eax, eax
mov cx, cx
cmp dword [0x103af80c], 1
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
jne 0x1005b1fb
mov dword [ebp - 0x384], 0x2f9a2b0
mov ebx, 0x103bb40c
mov eax, dword [ebp - 0x384]
mov edi, dword [eax]
test edi, edi
je 0x1005af61
cmp byte [edi + 0x330], 0
je 0x1005af61
push 0x32
lea eax, [ebp - 0x5c]
push 0
push eax
call sub.MSVCR100.dll_memset
lea eax, [edi + 0x338]
push eax
lea eax, [ebp - 0x5c]
push eax
call sub.MSVCR100.dll_strcpy
and dword [ebp - 0x378], 0
add esp, 0x14
mov ecx, ebx
call fcn.10001036
test eax, eax
jle 0x1005af45
mov ecx, dword [ebp - 0x378]
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [0x103bb40c]
push dword [eax + ecx*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005b0a6
inc dword [ebp - 0x378]
mov ecx, ebx
call fcn.10001036
cmp dword [ebp - 0x378], eax
jl 0x1005af0f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
mov ecx, 0x103bb418
call fcn.10001186
lea eax, [ebp - 0x5c]
push eax
mov ecx, ebx
call fcn.100010dc
add dword [ebp - 0x384], 4
cmp dword [ebp - 0x384], 0x2f9a2cc
jl 0x1005aec0
and dword [ebp - 0x378], 0
mov ecx, ebx
call fcn.10001036
test eax, eax
jle 0x1005b019
mov dword [ebp - 0x384], 0x2f9a2b0
mov eax, dword [ebp - 0x384]
mov edi, dword [eax]
test edi, edi
je 0x1005afec
cmp byte [edi + 0x330], 0
je 0x1005afec
push 0x32
lea eax, [ebp - 0x5c]
push 0
push eax
call sub.MSVCR100.dll_memset
add edi, 0x338
lea eax, [ebp - 0x5c]
push edi
push eax
call sub.MSVCR100.dll_strcpy
mov ecx, dword [ebp - 0x378]
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [0x103bb40c]
push dword [eax + ecx*4]
call sub.MSVCR100.dll_strcmp
add esp, 0x1c
test eax, eax
je 0x1005b0d4
add dword [ebp - 0x384], 4
cmp dword [ebp - 0x384], 0x2f9a2cc
jl 0x1005af98
mov edi, dword [ebp - 0x378]
inc edi
push edi
mov ecx, 0x103bb418
call fcn.100011dd
push edi
mov ecx, ebx
call fcn.1000103a
and dword [ebp - 0x380], 0
mov ecx, ebx
call fcn.10001036
test eax, eax
jle 0x1005b1fb
mov edi, 0x18b
xor eax, eax
push eax
push eax
push edi
push dword [0x103aedc0]
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x378], eax
call esi
test eax, eax
jle 0x1005b0fc
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x378]
push 0x189
push dword [0x103aedc0]
call esi
mov ecx, dword [ebp - 0x380]
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x103bb40c]
push dword [eax + ecx*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005b0f2
inc dword [ebp - 0x378]
push 0
push 0
push edi
push dword [0x103aedc0]
call esi
cmp dword [ebp - 0x378], eax
jl 0x1005b055
jmp 0x1005b0fc
mov eax, 0xffff
cmp word [edi + 0x366], ax
je 0x1005af61
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103bb418]
mov edx, dword [ebp - 0x378]
mov ecx, dword [ecx + edx*4]
mov dword [ecx], eax
jmp 0x1005af61
inc dword [ebp - 0x378]
mov ecx, ebx
call fcn.10001036
cmp dword [ebp - 0x378], eax
jl 0x1005af8e
jmp 0x1005b019
mov dword [ebp - 0x384], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103bb418]
mov edx, dword [ebp - 0x380]
mov ecx, dword [ecx + edx*4]
sub eax, dword [ecx]
cmp eax, 0x1b7740
jb 0x1005b123
cmp dword [ebp - 0x384], 0
je 0x1005b141
inc dword [ebp - 0x380]
mov ecx, ebx
call fcn.10001036
cmp dword [ebp - 0x380], eax
jl 0x1005b034
jmp 0x1005b1fb
mov eax, dword [0x103bb40c]
mov ecx, dword [ebp - 0x380]
push 2
push dword [eax + ecx*4]
call fcn.100395e4
pop ecx
pop ecx
xor eax, eax
push eax
push eax
push edi
push dword [0x103aee34]
mov dword [ebp - 0x378], eax
call esi
test eax, eax
jle 0x1005b1c4
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x378]
push 0x189
push dword [0x103aee34]
call esi
mov eax, dword [0x103bb40c]
mov ecx, dword [ebp - 0x380]
push dword [eax + ecx*4]
lea eax, [ebp - 0x8c]
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005b1e1
inc dword [ebp - 0x378]
push 0
push 0
push edi
push dword [0x103aee34]
call esi
cmp dword [ebp - 0x378], eax
jl 0x1005b16f
mov eax, dword [0x103bb40c]
mov ecx, dword [ebp - 0x380]
push dword [eax + ecx*4]
push 0
push 0x180
push dword [0x103aee34]
call esi
mov esi, dword [ebp - 0x380]
inc esi
push esi
mov ecx, 0x103bb418
call fcn.100011dd
push esi
mov ecx, ebx
call fcn.1000103a
xor esi, esi
inc esi
cmp dword [0x103aed84], esi
je 0x1005b216
cmp dword [0x103aed88], esi
je 0x1005b216
cmp dword [0x103aed98], esi
jne 0x1005b224
cmp dword [0x101123b0], 2
jne 0x1005b224
call fcn.10058853
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
push 0x1008c738
mov dword [ebp - 0x384], edi
call fcn.10006509
pop ecx
cmp eax, esi
jne 0x1005b25b
push 0x1008c6e8
call fcn.10006509
pop ecx
cmp eax, esi
jne 0x1005b25b
push 0
push 2
call fcn.10039277
pop ecx
pop ecx
movzx eax, word [0x34d19dc]
xor esi, esi
cmp ax, si
je 0x1005b2cf
mov edx, dword [0x103d279c]
mov cl, byte [0x100e04b8]
cmp eax, edx
jle 0x1005b28e
mov dword [0x103d279c], eax
mov eax, dword [0x100a6834]
movzx edx, cl
dec edx
cmp eax, edx
jge 0x1005b295
inc eax
jmp 0x1005b297
je 0x1005b27e
mov dword [0x103d279c], eax
xor eax, eax
movzx ecx, cl
sub ecx, eax
mov dword [0x100a6834], eax
cmp ecx, esi
jle 0x1005b2d5
cmp byte [eax + esi + 0x100e0418], 1
je 0x1005b2b6
inc esi
cmp esi, ecx
jl 0x1005b2a5
jmp 0x1005b2d5
add eax, esi
movzx eax, word [eax*2 + 0x100e02d8]
push eax
call fcn.1003b2c8
add dword [0x100a6834], esi
pop ecx
jmp 0x1005b2dc
mov dword [0x103d279c], esi
or dword [0x100a6834], 0xffffffff
mov eax, dword [ebp - 0x38c]
mov eax, dword [eax + 0x1d44]
mov ecx, dword [0x103af6f0]
xor esi, esi
inc esi
mov ebx, 0x3e8
cmp dword [0x103aabf0], esi
je 0x1005b306
cmp ecx, esi
jne 0x1005b3e2
cmp eax, 2
je 0x1005b3d5
cmp eax, 3
je 0x1005b3d5
cmp eax, 5
je 0x1005b3d5
cmp byte [0x10342a78], 1
je 0x1005b3d5
test ecx, ecx
je 0x1005b37a
cmp dword [0x101123b0], 2
je 0x1005b37a
mov eax, edi
sub eax, dword [0x103428d4]
xor edx, edx
mov ecx, ebx
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x378], eax
fild dword [ebp - 0x378]
test eax, eax
jns 0x1005b366
fadd dword [0x10098964]
fild dword [0x103af6ec]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005b37a
call fcn.1003b789
cmp dword [0x103aabf0], esi
jne 0x1005b3e2
mov eax, edi
sub eax, dword [0x103428d4]
xor edx, edx
mov ecx, ebx
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x378], eax
fild dword [ebp - 0x378]
test eax, eax
jns 0x1005b3ad
fadd dword [0x10098964]
fild dword [0x103aafd8]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005b3e2
push 0
mov dword [0x103428d4], edi
push 0x1009ad44
call fcn.1006a0c6
pop ecx
pop ecx
jmp 0x1005c589
mov byte [0x10342a78], 0
mov dword [0x103428d4], edi
cmp dword [0x103aaff0], esi
jne 0x1005b416
mov eax, dword [0x34d1980]
mov ecx, dword [0x34d1984]
cmp eax, dword [0x10368778]
jne 0x1005b405
cmp ecx, dword [0x1036877c]
je 0x1005b472
mov dword [0x103428cc], edi
mov dword [0x10368778], eax
mov dword [0x1036877c], ecx
cmp dword [0x103a6e20], esi
jne 0x1005b5e8
xor esi, esi
push esi
call dword [sym.imp.MSVCR100.dll__time64]
mov dword [ebp - 0x37c], eax
lea eax, [ebp - 0x37c]
push eax
mov dword [ebp - 0x378], edx
call dword [sym.imp.MSVCR100.dll__localtime64]
push eax
push 0x1009ad40
lea eax, [ebp - 0x24]
push 0x14
push eax
call dword [sym.imp.MSVCR100.dll_strftime]
lea eax, [ebp - 0x24]
push str.Sunday
push eax
call sub.MSVCR100.dll_strcmp
add esp, 0x20
test eax, eax
jne 0x1005b4c2
push 7
jmp 0x1005b551
mov eax, edi
sub eax, dword [0x103428cc]
xor edx, edx
mov ecx, ebx
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x378], eax
fild dword [ebp - 0x378]
test eax, eax
jns 0x1005b49d
fadd dword [0x10098964]
fild dword [0x103aaff4]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005b416
push 0
mov dword [0x103428cc], edi
push 0x1009ad1c
jmp 0x1005b3c9
lea eax, [ebp - 0x24]
push str.Monday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b4db
xor esi, esi
inc esi
jmp 0x1005b552
lea eax, [ebp - 0x24]
push str.Tuesday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b4f3
push 2
jmp 0x1005b551
lea eax, [ebp - 0x24]
push str.Wednesday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b50b
push 3
jmp 0x1005b551
lea eax, [ebp - 0x24]
push str.Thursday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b523
push 4
jmp 0x1005b551
lea eax, [ebp - 0x24]
push str.Friday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b53b
push 5
jmp 0x1005b551
lea eax, [ebp - 0x24]
push str.Saturday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b552
push 6
pop esi
lea eax, [ebp - 0x360]
push eax
call dword [sym.imp.MSVCR100.dll__strtime]
push 2
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100061f2
push 2
push 3
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.1000626b
mov eax, dword [0x103a6e14]
add esp, 0x20
inc eax
cmp esi, eax
jne 0x1005b5e8
mov esi, dword [sym.imp.MSVCR100.dll_atoi]
lea eax, [ebp - 0xb8]
push eax
call esi
pop ecx
mov ecx, dword [0x103a6e18]
inc ecx
cmp eax, ecx
jne 0x1005b5e8
lea eax, [ebp - 0xcc]
push eax
call esi
pop ecx
mov ecx, dword [0x103a6e1c]
inc ecx
cmp eax, ecx
jl 0x1005b5e8
push 0x1009acc0
call fcn.10006e54
pop ecx
mov ecx, dword [0x1011280c]
call fcn.1006eb87
call fcn.10044a55
jmp 0x1005c589
cmp byte [0x10342a86], 0
je 0x1005c589
cmp dword [0x103b0ea4], 1
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
mov edi, 0x10111b20
jne 0x1005b700
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
div ebx
xor edx, edx
mov ecx, eax
mov eax, dword [0x103428c4]
div ebx
sub ecx, eax
cmp ecx, 0xf
jb 0x1005b700
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, ebx
push ebx
mov dword [0x103428c4], eax
call fcn.100111b0
push edi
lea eax, [ebp - 0x2c0]
push 0x1009acb8
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x2c0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
jne 0x1005b671
push ebx
lea eax, [ebp - 0x2c0]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x34d18e8
push 0x10110ce0
push edi
lea eax, [ebp - 0x2c0]
push 0x1009aca4
push eax
call esi
add esp, 0x14
lea ecx, [ebp - 0x378]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x378]
push eax
mov ecx, 0x103b0e30
mov dword [ebp - 4], ebx
call sub.mfc100.dll_Ordinal_6970
lea eax, [ebp - 0x2c0]
push 0x1009aca0
push eax
call dword [sym.imp.MSVCR100.dll_fopen]
pop ecx
pop ecx
mov ebx, eax
push ebx
push 1
lea ecx, [ebp - 0x378]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push eax
lea ecx, [ebp - 0x378]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_fwrite]
push ebx
call dword [sym.imp.MSVCR100.dll_fclose]
or dword [ebp - 4], 0xffffffff
add esp, 0x14
lea ecx, [ebp - 0x378]
call dword [sym.imp.mfc100.dll_Ordinal_901]
cmp dword [0x103a6e4c], 1
jne 0x1005b720
mov eax, dword [0x103429e8]
cmp eax, dword [0x103a6e6c]
jl 0x1005b720
push 0x1009ac7c
jmp 0x1005b5cd
cmp dword [0x103a6e50], 1
jne 0x1005b740
mov eax, dword [0x103429ec]
cmp eax, dword [0x103a6e70]
jl 0x1005b740
push 0x1009ac58
jmp 0x1005b5cd
cmp dword [0x103a6f04], 1
jne 0x1005b786
mov eax, dword [0x2fb6ac4]
movzx eax, word [eax + 0x14]
mov ecx, dword [0x10112364]
imul eax, eax, 0x1cc
sub ecx, dword [eax + 0x333ab68]
cmp ecx, dword [0x103a6f08]
jl 0x1005b786
add eax, 0x333aab2
push eax
call sub.MSVCR100.dll_strlen
pop ecx
test eax, eax
je 0x1005b786
push 0x1009ac34
jmp 0x1005b5cd
cmp dword [0x103a6e54], 1
jne 0x1005b7b1
mov eax, dword [0x103a6e74]
cdq
cmp dword [0x1034288c], edx
jl 0x1005b7b1
jg 0x1005b7a7
cmp dword [0x10342888], eax
jb 0x1005b7b1
push 0x1009ac0c
jmp 0x1005b5cd
cmp dword [0x103ac58c], 1
mov ebx, dword [sym.imp.WINMM.dll_PlaySoundA]
jne 0x1005b80d
mov eax, dword [0x103429e8]
cmp eax, dword [0x103ac594]
jl 0x1005b80d
push 0x1009abe4
call fcn.10006e54
mov dword [esp], 0x1f4
call sub.mfc100.dll_Ordinal_265
push edi
push 0x10098db0
push eax
mov dword [ebp - 0x378], eax
call esi
add esp, 0x10
push 0x11
push 0
push dword [ebp - 0x378]
call ebx
push dword [ebp - 0x378]
call sub.mfc100.dll_Ordinal_1296
pop ecx
cmp dword [0x103ac590], 1
jne 0x1005b863
mov eax, dword [0x103429ec]
cmp eax, dword [0x103ac598]
jl 0x1005b863
push 0x1009abbc
call fcn.10006e54
mov dword [esp], 0x1f4
call sub.mfc100.dll_Ordinal_265
push edi
push 0x10098db0
push eax
mov dword [ebp - 0x378], eax
call esi
add esp, 0x10
push 0x11
push 0
push dword [ebp - 0x378]
call ebx
push dword [ebp - 0x378]
call sub.mfc100.dll_Ordinal_1296
pop ecx
mov eax, dword [0x103a6e40]
mov ecx, dword [0x103ac57c]
xor edx, edx
inc edx
cmp eax, edx
je 0x1005b87d
cmp ecx, edx
jne 0x1005ba4b
cmp byte [0x10342a8c], 1
jne 0x1005ba4b
cmp eax, edx
jne 0x1005b9ef
mov ecx, dword [0x1011280c]
call fcn.1006eb87
mov eax, dword [0x103a6e24]
xor edi, edi
inc edi
cmp eax, edi
jne 0x1005b93d
lea eax, [ebp - 0x374]
push eax
mov dword [ebp - 0x374], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
push 2
pop ebx
cmp dword [ebp - 0x364], ebx
jne 0x1005b928
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea ecx, [ebp - 0x38c]
push ecx
push 0x20
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
lea eax, [ebp - 0x37c]
push eax
push str.SeShutdownPrivilege
xor esi, esi
push esi
mov dword [ebp - 0x20], edi
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov eax, dword [ebp - 0x37c]
push esi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x378]
push esi
push esi
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x20]
push eax
push esi
push dword [ebp - 0x38c]
mov dword [ebp - 0x14], ebx
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
jmp 0x1005b92a
xor esi, esi
push esi
push 8
call dword [sym.imp.USER32.dll_ExitWindowsEx]
push 0x1009abb4
jmp 0x1005bca5
cmp eax, 2
jne 0x1005c589
lea eax, [ebp - 0xa4]
push eax
movzx eax, byte [0x34ccfc6]
push eax
mov ebx, 0x10342ad0
push ebx
call fcn.1003b7c7
lea eax, [ebp - 0xa4]
push 0x2f98cb0
push eax
call sub.MSVCR100.dll_strcat
add esp, 0x14
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
push 0x291
push dword [0x1010eafc]
call edi
lea eax, [ebp - 0xa4]
push eax
movzx eax, byte [0x34ccfc6]
push eax
push ebx
call fcn.1003b7c7
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x360]
push 0x10099298
push eax
call esi
add esp, 0x18
lea eax, [ebp - 0x360]
push eax
push dword [0x100e04bc]
push 0x2712
push dword [0x1010eafc]
call edi
push 1
push dword [0x100f3d44]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x1005c589
cmp ecx, edx
jne 0x1005ba4b
cmp dword [0x103ad874], 0
jne 0x1005ba07
mov ecx, dword [0x1011280c]
call fcn.1006eb87
push 0x1009aba8
call fcn.10006e54
mov dword [esp], 0x1f4
call sub.mfc100.dll_Ordinal_265
push edi
push 0x10098db0
push eax
mov dword [ebp - 0x38c], eax
call esi
add esp, 0x10
push 0x11
push 0
push dword [ebp - 0x38c]
call ebx
push dword [ebp - 0x38c]
call sub.mfc100.dll_Ordinal_1296
jmp 0x1005b3cf
cmp dword [0x103a6e38], edx
jne 0x1005ba86
mov esi, dword [0x34d1980]
mov edi, dword [0x34d1984]
cmp esi, dword [0x10368770]
jne 0x1005ba6f
cmp edi, dword [0x10368774]
je 0x1005babd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x103428d0], eax
mov dword [0x10368770], esi
mov dword [0x10368774], edi
cmp dword [0x103a6e44], 1
jne 0x1005bb08
push 7
mov ecx, 0x2f9a2b0
xor edx, edx
pop esi
mov eax, dword [ecx]
test eax, eax
je 0x1005baa9
cmp byte [eax + 0x330], 0
je 0x1005baa9
inc edx
add ecx, 4
dec esi
jne 0x1005ba99
test edx, edx
jne 0x1005bb08
push 0x1009ab8c
jmp 0x1005b5cd
mov eax, dword [ebp - 0x384]
sub eax, dword [0x103428d0]
xor edx, edx
mov ecx, 0x3e8
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x378], eax
fild dword [ebp - 0x378]
test eax, eax
jns 0x1005baef
fadd dword [0x10098964]
fild dword [0x103a6e68]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005ba86
push 0x1009ab6c
jmp 0x1005b5cd
cmp dword [0x103a6e48], 1
jne 0x1005bb9d
mov esi, dword [0x2f98458]
xor ebx, ebx
xor edi, edi
call fcn.10005f8c
test eax, eax
je 0x1005bb5a
add esi, 0x53c
mov eax, dword [esi]
test eax, eax
je 0x1005bb48
add eax, 0x64
push eax
push 0x1009ab64
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005bb57
inc edi
add esi, 4
call fcn.10005f8c
cmp edi, eax
jb 0x1005bb2e
jmp 0x1005bb5a
xor ebx, ebx
inc ebx
mov eax, dword [0x2f9845c]
xor edi, edi
lea esi, [eax + 0x53c]
mov eax, dword [esi]
test eax, eax
je 0x1005bb81
add eax, 0x64
push eax
push 0x1009ab64
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005bb8c
inc edi
add esi, 4
cmp edi, 0xf
jl 0x1005bb67
jmp 0x1005bb8f
xor ebx, ebx
inc ebx
test ebx, ebx
jne 0x1005bb9d
push 0x1009ab48
jmp 0x1005b5cd
cmp dword [0x103a6e84], 1
jne 0x1005bbfb
mov esi, dword [0x2f98458]
xor ebx, ebx
call fcn.10005f8c
mov edi, 0x1009ab40
test eax, eax
je 0x1005bbe6
add esi, 0x53c
mov eax, dword [esi]
test eax, eax
je 0x1005bbd9
add eax, 0x64
push edi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x1005bbfb
inc ebx
add esi, 4
call fcn.10005f8c
cmp ebx, eax
jb 0x1005bbc2
push edi
call fcn.100061a6
pop ecx
test eax, eax
jne 0x1005bbfb
push 0x1009ab24
jmp 0x1005b5cd
xor edi, edi
mov esi, 0xa7f9
cmp dword [0x34d1968], edi
jne 0x1005bd92
cmp dword [0x2f91a04], esi
jne 0x1005bc2f
cmp dword [0x103aabd4], 1
jne 0x1005bc2f
cmp dword [0x103aae6c], edi
jne 0x1005bc2f
push 1
call fcn.1003948c
pop ecx
cmp dword [0x34d1968], edi
jne 0x1005bd92
cmp dword [0x2f91a04], esi
je 0x1005bd92
cmp dword [0x103aabd4], 1
jne 0x1005bd2c
cmp dword [0x103aae6c], edi
jne 0x1005bcec
cmp dword [0x101123b0], 2
jne 0x1005bcaf
mov dword [0x101127ec], edi
mov byte [0x10342a7d], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x103428f4], eax
mov eax, dword [0x103be1c0]
push 0x1004557c
push 0xbb8
add eax, 0x45
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009ab14
call fcn.10006e54
jmp 0x1005b3cf
call fcn.1006ea6d
mov dword [0x101127ec], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x1005acff
push dword [0x103aafdc]
mov dword [0x103428f4], eax
mov eax, dword [0x103be1c0]
add eax, 0x44
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009ab04
jmp 0x1005bca5
call fcn.1006ea6d
mov dword [0x101127ec], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x100454ff
push dword [0x103aafdc]
mov dword [0x103428f4], eax
mov eax, dword [0x103be1c0]
add eax, 0x44
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009aaf4
jmp 0x1005bca5
cmp dword [0x103aabd8], 1
jne 0x1005bd92
cmp dword [0x103aae70], 1
jne 0x1005bd7d
call fcn.1006ea6d
mov dword [0x101127ec], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x103428f4], eax
mov eax, dword [0x103be1c0]
push 0x100454ff
push 0x12c
add eax, 0x44
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009aae4
jmp 0x1005bca5
mov ecx, dword [0x1011280c]
call fcn.1006eb87
push 0x1009aad0
jmp 0x1005bca5
cmp dword [0x103a83a0], 1
jne 0x1005bdd4
mov eax, dword [0x2f9845c]
lea esi, [eax + 0x53c]
mov ebx, 0x1009ab64
mov eax, dword [esi]
test eax, eax
je 0x1005bdc1
add eax, 0x64
push eax
push ebx
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005bdd4
inc edi
add esi, 4
cmp edi, 0xf
jl 0x1005bdab
push 0
push ebx
call fcn.10005fbb
pop ecx
pop ecx
xor edi, edi
inc edi
cmp dword [0x103a6e58], edi
jne 0x1005be11
push 7
mov ecx, 0x2f9a2b0
xor edx, edx
pop esi
mov eax, dword [ecx]
test eax, eax
je 0x1005bdf9
cmp byte [eax + 0x330], 0
je 0x1005bdf9
inc edx
add ecx, 4
dec esi
jne 0x1005bde9
cmp edx, dword [0x103a6e78]
jge 0x1005be11
push 0x1009aaac
jmp 0x1005b5cd
cmp dword [0x103acd8c], edi
jne 0x1005be4c
mov eax, dword [0x103428c8]
xor edx, edx
mov esi, 0x3e8
mov ecx, esi
div ecx
mov ecx, dword [ebp - 0x384]
xor edx, edx
mov ebx, eax
mov eax, ecx
div esi
sub eax, ebx
cmp eax, 5
jb 0x1005be4c
push 0x32
mov dword [0x103428c8], ecx
call fcn.10058b4e
pop ecx
cmp dword [0x103aed9c], edi
jne 0x1005bea6
push 0x14
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x103aefe4
call sub.mfc100.dll_Ordinal_6969
mov esi, 0x2f9a2b0
mov eax, dword [esi]
test eax, eax
je 0x1005be8d
cmp byte [eax + 0x330], 0
je 0x1005be8d
lea ecx, [ebp - 0x24]
push ecx
add eax, 0x338
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005be9a
add esi, 4
cmp esi, 0x2f9a2cc
jl 0x1005be69
jmp 0x1005bea6
lea eax, [ebp - 0x24]
push edi
push eax
call fcn.100395e4
pop ecx
pop ecx
cmp dword [0x103ad7cc], edi
jne 0x1005beef
mov esi, dword [ebp - 0x38c]
add esi, 0x4834
push esi
call sub.MSVCR100.dll_strlen
pop ecx
test eax, eax
je 0x1005beef
push 0x32
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x103ae12c
call sub.mfc100.dll_Ordinal_6969
lea eax, [ebp - 0x5c]
push esi
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005beef
lea eax, [ebp - 0x5c]
push eax
call fcn.1003969c
pop ecx
mov eax, dword [0x2f98458]
add eax, 0x53c
mov dword [ebp - 0x384], eax
mov eax, dword [eax]
xor esi, esi
mov edi, 0x1008ff40
cmp eax, esi
je 0x1005bf21
add eax, 0x64
push edi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x1005c1f9
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x380], esi
mov dword [ebp - 0x378], esi
call fcn.10005f8c
test eax, eax
je 0x1005bf9c
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005bf62
lea eax, [esi + 0x64]
push edi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005bf62
cmp dword [esi + 0xe74], 0
jne 0x1005bf7a
inc dword [ebp - 0x378]
add ebx, 4
call fcn.10005f8c
cmp dword [ebp - 0x378], eax
jb 0x1005bf42
jmp 0x1005bf9c
mov eax, dword [esi + 0xe44]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x380], 1
cmp dword [0x103ae758], 1
jne 0x1005c036
mov eax, dword [0x103ae7d0]
test eax, eax
jne 0x1005bfb9
push 0x10098530
jmp 0x1005bfcf
cmp eax, 1
jne 0x1005bfc5
push 0x10098524
jmp 0x1005bfcf
cmp eax, 2
jne 0x1005bfda
push 0x10098518
lea eax, [ebp - 0x5c]
push eax
call sub.MSVCR100.dll_strcpy
pop ecx
pop ecx
xor edi, edi
call fcn.10005f8c
test eax, eax
je 0x1005c036
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005c029
lea eax, [ebp - 0x5c]
push eax
lea eax, [esi + 0x64]
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c029
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x388]
jl 0x1005c029
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x380], 1
inc edi
add ebx, 4
call fcn.10005f8c
cmp edi, eax
jb 0x1005bfeb
cmp dword [ebp - 0x380], 0
jne 0x1005c1da
xor edi, edi
call fcn.10005f8c
test eax, eax
je 0x1005c0ad
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005c093
lea eax, [esi + 0x64]
push 0x1009aaa0
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c093
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x388]
jl 0x1005c093
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x380], 1
inc edi
add ebx, 4
call fcn.10005f8c
cmp edi, eax
jb 0x1005c054
cmp dword [ebp - 0x380], 0
jne 0x1005c1da
xor edi, edi
call fcn.10005f8c
test eax, eax
je 0x1005c117
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005c0fd
lea eax, [esi + 0x64]
push 0x10098518
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c0fd
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x388]
jl 0x1005c0fd
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x380], 1
inc edi
add ebx, 4
call fcn.10005f8c
cmp edi, eax
jb 0x1005c0be
cmp dword [ebp - 0x380], 0
jne 0x1005c1da
xor edi, edi
call fcn.10005f8c
test eax, eax
je 0x1005c17d
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005c167
lea eax, [esi + 0x64]
push 0x10098524
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c167
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x388]
jl 0x1005c167
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x380], 1
inc edi
add ebx, 4
call fcn.10005f8c
cmp edi, eax
jb 0x1005c128
cmp dword [ebp - 0x380], 0
jne 0x1005c1da
xor edi, edi
call fcn.10005f8c
test eax, eax
je 0x1005c1f9
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005c1cd
lea eax, [esi + 0x64]
push 0x10098530
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c1cd
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x388]
jl 0x1005c1cd
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x380], 1
inc edi
add ebx, 4
call fcn.10005f8c
cmp edi, eax
jb 0x1005c18e
cmp dword [ebp - 0x380], 1
jne 0x1005c1f9
push 1
push 1
push 1
push 0
push dword [ebp - 0x378]
call fcn.10039730
add esp, 0x14
or dword [ebp - 0x380], 0xffffffff
and dword [ebp - 0x378], 0
call fcn.10005f8c
test eax, eax
je 0x1005c2b0
mov edi, dword [ebp - 0x384]
mov ebx, 0x1009aa98
mov esi, dword [edi]
test esi, esi
je 0x1005c247
lea eax, [esi + 0x64]
push ebx
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c247
xor eax, eax
inc eax
mov dword [ebp - 0x380], eax
cmp dword [esi + 0xef4], eax
je 0x1005c25f
inc dword [ebp - 0x378]
add edi, 4
call fcn.10005f8c
cmp dword [ebp - 0x378], eax
jb 0x1005c21f
jmp 0x1005c266
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 1
jne 0x1005c2b0
xor edi, edi
call fcn.10005f8c
test eax, eax
je 0x1005c2b0
mov esi, dword [ebp - 0x384]
mov eax, dword [esi]
test eax, eax
je 0x1005c297
add eax, 0x64
push ebx
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x1005c2a6
inc edi
add esi, 4
call fcn.10005f8c
cmp edi, eax
jb 0x1005c280
jmp 0x1005c2b0
push 0
push edi
call fcn.100385a4
pop ecx
pop ecx
cmp dword [0x103a8398], 1
jne 0x1005c409
call fcn.10005f8c
mov eax, dword [ebp - 0x38c]
mov esi, dword [0x2f98458]
xor ebx, ebx
cmp dword [eax + 0x47f8], ebx
jne 0x1005c32a
call fcn.10005f8c
test eax, eax
je 0x1005c409
lea edi, [esi + 0x53c]
mov esi, dword [edi]
test esi, esi
je 0x1005c318
lea eax, [esi + 0x64]
push 0x10098e4c
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c318
mov eax, dword [esi + 0xd4c]
cmp eax, dword [0x103aafd4]
jg 0x1005c3ff
inc ebx
add edi, 4
call fcn.10005f8c
cmp ebx, eax
jb 0x1005c2eb
jmp 0x1005c409
mov eax, dword [0x2f9845c]
mov eax, dword [eax + 0x56c]
cmp eax, ebx
je 0x1005c409
add eax, 0x64
push 0x10098e4c
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c409
xor ebx, ebx
call fcn.10005f8c
test eax, eax
je 0x1005c409
lea edi, [esi + 0x53c]
mov eax, dword [edi]
test eax, eax
je 0x1005c3ec
lea esi, [eax + 0x64]
push 0x10098e7c
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3ff
push 0x10098e74
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3ff
push 0x10098e6c
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3ff
push 0x10098e64
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3ff
push 0x10098e5c
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3ff
push 0x10098e54
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3ff
push 0x10098e44
push esi
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x1005c3ff
inc ebx
add edi, 4
call fcn.10005f8c
cmp ebx, eax
jb 0x1005c36b
jmp 0x1005c409
push 0
push ebx
call fcn.100385a4
pop ecx
pop ecx
mov eax, dword [ebp - 0x38c]
cmp dword [eax + 0x51e4], 0
jne 0x1005c421
cmp dword [eax + 0x2a50], 6
je 0x1005c433
cmp dword [eax + 0x47f8], 0
jne 0x1005c493
cmp dword [eax + 0x2a50], 4
jne 0x1005c493
xor ebx, ebx
mov esi, 0x103bb43c
lea eax, [ebp - 0x2e0]
push eax
push ebx
call fcn.100060a1
pop ecx
pop ecx
mov ecx, esi
xor edi, edi
call fcn.10001036
test eax, eax
jle 0x1005c47c
lea eax, [ebp - 0x2e0]
push eax
mov eax, dword [0x103bb43c]
push dword [eax + edi*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c484
mov ecx, esi
inc edi
call fcn.10001036
cmp edi, eax
jl 0x1005c456
inc ebx
cmp ebx, 0x14
jl 0x1005c43a
jmp 0x1005c493
push 1
push dword [ebp - 0x2c4]
call fcn.100397f3
pop ecx
pop ecx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edi, 0x3e8
xor edx, edx
mov ecx, edi
div ecx
xor ebx, ebx
sub eax, dword [0x103434f4]
cmp eax, dword [0x10342a20]
jb 0x1005c4bd
push ebx
call fcn.10045bcf
pop ecx
call esi
xor edx, edx
mov ecx, edi
div ecx
sub eax, dword [0x101123c4]
cmp eax, 0x1194
jb 0x1005c4f6
push ebx
push ebx
push ebx
push 0x1005910e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
xor edx, edx
mov ecx, edi
div ecx
mov dword [0x101123c4], eax
cmp dword [0x101123b0], 2
je 0x1005c589
cmp byte [0x10342a94], 0
jne 0x1005c589
mov ecx, 0x103bb5b0
call fcn.10001036
cmp eax, 2
jne 0x1005c589
call fcn.100456cf
cmp al, 1
jne 0x1005c589
call fcn.10037deb
mov byte [0x10342a94], 1
call fcn.1006ea6d
push ebx
push ebx
push ebx
push ebx
mov dword [0x101127f4], 0x7d0
call fcn.10045b2d
mov eax, dword [0x103be1c0]
push fcn.10045b2d
push edi
add eax, 0x4d
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [0x103bb5b0]
mov ecx, dword [eax + 4]
fild dword [ecx]
mov eax, dword [eax]
sub esp, 0xc
fstp dword [esp + 8]
fldz
fstp dword [esp + 4]
fild dword [eax]
fstp dword [esp]
call fcn.1003823d
add esp, 0xc
call fcn.10083f1f
ret