Function at 0x1005ad73
Capabilities:
Check for time delay via gettickcount
Check os version
Create directory
Create thread
Shutdown system
Terminate process
Write file on windows

Disassembly:
push 0x380
mov eax, 0x1008750b
call fcn.10083aac
mov eax, dword [0x35ed708]
cmp eax, 0x4b1
je 0x1005adcd
cmp eax, 0x321
je 0x1005adcd
cmp eax, 0x1c85
je 0x1005adcd
cmp eax, 0xfa1
je 0x1005adcd
cmp eax, 0x8fd
je 0x1005adcd
cmp eax, 0x907
je 0x1005adcd
cmp eax, 0x911
je 0x1005adcd
cmp eax, 0x91b
je 0x1005adcd
cmp eax, 0x925
je 0x1005adcd
cmp eax, 0x939
jne 0x1005adec
cmp byte [0x100a6c70], 1
jne 0x1005adec
cmp dword [0x103b64b8], 0
jbe 0x1005adec
cmp byte [0x10342a8e], 1
je 0x1005c53f
mov eax, dword [0x36208e4]
mov dword [ebp - 0x38c], eax
test eax, eax
je 0x1005c53f
mov ecx, dword [0x11f6b60]
test ecx, ecx
je 0x1005c53f
movzx eax, word [eax + 0x14]
imul eax, eax, 0x1cc
cmp dword [eax + 0xfbaf1a], 0
je 0x1005c53f
cmp byte [0x10342a8c], 0
jne 0x1005ae4d
cmp dword [ecx + 0x30], 0xffffffff
je 0x1005ae46
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x103428a4]
cmp eax, 0x1d4c0
jb 0x1005ae4d
mov byte [0x10342a8c], 1
mov al, al
mov eax, eax
mov cx, cx
cmp dword [0x103af80c], 1
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
jne 0x1005b1b1
mov dword [ebp - 0x384], 0x35f6378
mov ebx, 0x103bb40c
mov eax, dword [ebp - 0x384]
mov edi, dword [eax]
test edi, edi
je 0x1005af17
cmp byte [edi + 0x330], 0
je 0x1005af17
push 0x32
lea eax, [ebp - 0x5c]
push 0
push eax
call sub.MSVCR100.dll_memset
lea eax, [edi + 0x338]
push eax
lea eax, [ebp - 0x5c]
push eax
call sub.MSVCR100.dll_strcpy
and dword [ebp - 0x378], 0
add esp, 0x14
mov ecx, ebx
call fcn.100011d9
test eax, eax
jle 0x1005aefb
mov ecx, dword [ebp - 0x378]
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [0x103bb40c]
push dword [eax + ecx*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005b05c
inc dword [ebp - 0x378]
mov ecx, ebx
call fcn.100011d9
cmp dword [ebp - 0x378], eax
jl 0x1005aec5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
mov ecx, 0x103bb418
call fcn.10001182
lea eax, [ebp - 0x5c]
push eax
mov ecx, ebx
call fcn.1000110a
add dword [ebp - 0x384], 4
cmp dword [ebp - 0x384], 0x35f6394
jl 0x1005ae76
and dword [ebp - 0x378], 0
mov ecx, ebx
call fcn.100011d9
test eax, eax
jle 0x1005afcf
mov dword [ebp - 0x384], 0x35f6378
mov eax, dword [ebp - 0x384]
mov edi, dword [eax]
test edi, edi
je 0x1005afa2
cmp byte [edi + 0x330], 0
je 0x1005afa2
push 0x32
lea eax, [ebp - 0x5c]
push 0
push eax
call sub.MSVCR100.dll_memset
add edi, 0x338
lea eax, [ebp - 0x5c]
push edi
push eax
call sub.MSVCR100.dll_strcpy
mov ecx, dword [ebp - 0x378]
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [0x103bb40c]
push dword [eax + ecx*4]
call sub.MSVCR100.dll_strcmp
add esp, 0x1c
test eax, eax
je 0x1005b08a
add dword [ebp - 0x384], 4
cmp dword [ebp - 0x384], 0x35f6394
jl 0x1005af4e
mov edi, dword [ebp - 0x378]
inc edi
push edi
mov ecx, 0x103bb418
call fcn.100011dd
push edi
mov ecx, ebx
call fcn.10001068
and dword [ebp - 0x380], 0
mov ecx, ebx
call fcn.100011d9
test eax, eax
jle 0x1005b1b1
mov edi, 0x18b
xor eax, eax
push eax
push eax
push edi
push dword [0x103aedc0]
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x378], eax
call esi
test eax, eax
jle 0x1005b0b2
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x378]
push 0x189
push dword [0x103aedc0]
call esi
mov ecx, dword [ebp - 0x380]
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x103bb40c]
push dword [eax + ecx*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005b0a8
inc dword [ebp - 0x378]
push 0
push 0
push edi
push dword [0x103aedc0]
call esi
cmp dword [ebp - 0x378], eax
jl 0x1005b00b
jmp 0x1005b0b2
mov eax, 0xffff
cmp word [edi + 0x366], ax
je 0x1005af17
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103bb418]
mov edx, dword [ebp - 0x378]
mov ecx, dword [ecx + edx*4]
mov dword [ecx], eax
jmp 0x1005af17
inc dword [ebp - 0x378]
mov ecx, ebx
call fcn.100011d9
cmp dword [ebp - 0x378], eax
jl 0x1005af44
jmp 0x1005afcf
mov dword [ebp - 0x384], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x103bb418]
mov edx, dword [ebp - 0x380]
mov ecx, dword [ecx + edx*4]
sub eax, dword [ecx]
cmp eax, 0x1b7740
jb 0x1005b0d9
cmp dword [ebp - 0x384], 0
je 0x1005b0f7
inc dword [ebp - 0x380]
mov ecx, ebx
call fcn.100011d9
cmp dword [ebp - 0x380], eax
jl 0x1005afea
jmp 0x1005b1b1
mov eax, dword [0x103bb40c]
mov ecx, dword [ebp - 0x380]
push 2
push dword [eax + ecx*4]
call fcn.100394e4
pop ecx
pop ecx
xor eax, eax
push eax
push eax
push edi
push dword [0x103aee34]
mov dword [ebp - 0x378], eax
call esi
test eax, eax
jle 0x1005b17a
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x378]
push 0x189
push dword [0x103aee34]
call esi
mov eax, dword [0x103bb40c]
mov ecx, dword [ebp - 0x380]
push dword [eax + ecx*4]
lea eax, [ebp - 0x8c]
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005b197
inc dword [ebp - 0x378]
push 0
push 0
push edi
push dword [0x103aee34]
call esi
cmp dword [ebp - 0x378], eax
jl 0x1005b125
mov eax, dword [0x103bb40c]
mov ecx, dword [ebp - 0x380]
push dword [eax + ecx*4]
push 0
push 0x180
push dword [0x103aee34]
call esi
mov esi, dword [ebp - 0x380]
inc esi
push esi
mov ecx, 0x103bb418
call fcn.100011dd
push esi
mov ecx, ebx
call fcn.10001068
xor esi, esi
inc esi
cmp dword [0x103aed84], esi
je 0x1005b1cc
cmp dword [0x103aed88], esi
je 0x1005b1cc
cmp dword [0x103aed98], esi
jne 0x1005b1da
cmp dword [0x101123b0], 2
jne 0x1005b1da
call fcn.100587bf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
push 0x1008c714
mov dword [ebp - 0x384], edi
call fcn.10006485
pop ecx
cmp eax, esi
jne 0x1005b211
push 0x1008c6c4
call fcn.10006485
pop ecx
cmp eax, esi
jne 0x1005b211
push 0
push 2
call fcn.10039177
pop ecx
pop ecx
movzx eax, word [0x33cd04c]
xor esi, esi
cmp ax, si
je 0x1005b285
mov edx, dword [0x103d2794]
mov cl, byte [0x100e04b8]
cmp eax, edx
jle 0x1005b244
mov dword [0x103d2794], eax
mov eax, dword [0x100a6834]
movzx edx, cl
dec edx
cmp eax, edx
jge 0x1005b24b
inc eax
jmp 0x1005b24d
je 0x1005b234
mov dword [0x103d2794], eax
xor eax, eax
movzx ecx, cl
sub ecx, eax
mov dword [0x100a6834], eax
cmp ecx, esi
jle 0x1005b28b
cmp byte [eax + esi + 0x100e0418], 1
je 0x1005b26c
inc esi
cmp esi, ecx
jl 0x1005b25b
jmp 0x1005b28b
add eax, esi
movzx eax, word [eax*2 + 0x100e02d8]
push eax
call fcn.1003b1c8
add dword [0x100a6834], esi
pop ecx
jmp 0x1005b292
mov dword [0x103d2794], esi
or dword [0x100a6834], 0xffffffff
mov eax, dword [ebp - 0x38c]
mov eax, dword [eax + 0x1d48]
mov ecx, dword [0x103af6f0]
xor esi, esi
inc esi
mov ebx, 0x3e8
cmp dword [0x103aabf0], esi
je 0x1005b2bc
cmp ecx, esi
jne 0x1005b398
cmp eax, 2
je 0x1005b38b
cmp eax, 3
je 0x1005b38b
cmp eax, 5
je 0x1005b38b
cmp byte [0x10342a78], 1
je 0x1005b38b
test ecx, ecx
je 0x1005b330
cmp dword [0x101123b0], 2
je 0x1005b330
mov eax, edi
sub eax, dword [0x103428d4]
xor edx, edx
mov ecx, ebx
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x378], eax
fild dword [ebp - 0x378]
test eax, eax
jns 0x1005b31c
fadd dword [0x10098924]
fild dword [0x103af6ec]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005b330
call fcn.1003b697
cmp dword [0x103aabf0], esi
jne 0x1005b398
mov eax, edi
sub eax, dword [0x103428d4]
xor edx, edx
mov ecx, ebx
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x378], eax
fild dword [ebp - 0x378]
test eax, eax
jns 0x1005b363
fadd dword [0x10098924]
fild dword [0x103aafd8]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005b398
push 0
mov dword [0x103428d4], edi
push 0x1009ad04
call fcn.10069d6f
pop ecx
pop ecx
jmp 0x1005c53f
mov byte [0x10342a78], 0
mov dword [0x103428d4], edi
cmp dword [0x103aaff0], esi
jne 0x1005b3cc
mov eax, dword [0x33ccff0]
mov ecx, dword [0x33ccff4]
cmp eax, dword [0x10368778]
jne 0x1005b3bb
cmp ecx, dword [0x1036877c]
je 0x1005b428
mov dword [0x103428cc], edi
mov dword [0x10368778], eax
mov dword [0x1036877c], ecx
cmp dword [0x103a6e20], esi
jne 0x1005b59e
xor esi, esi
push esi
call dword [sym.imp.MSVCR100.dll__time64]
mov dword [ebp - 0x37c], eax
lea eax, [ebp - 0x37c]
push eax
mov dword [ebp - 0x378], edx
call dword [sym.imp.MSVCR100.dll__localtime64]
push eax
push 0x1009ad00
lea eax, [ebp - 0x24]
push 0x14
push eax
call dword [sym.imp.MSVCR100.dll_strftime]
lea eax, [ebp - 0x24]
push str.Sunday
push eax
call sub.MSVCR100.dll_strcmp
add esp, 0x20
test eax, eax
jne 0x1005b478
push 7
jmp 0x1005b507
mov eax, edi
sub eax, dword [0x103428cc]
xor edx, edx
mov ecx, ebx
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x378], eax
fild dword [ebp - 0x378]
test eax, eax
jns 0x1005b453
fadd dword [0x10098924]
fild dword [0x103aaff4]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005b3cc
push 0
mov dword [0x103428cc], edi
push 0x1009acdc
jmp 0x1005b37f
lea eax, [ebp - 0x24]
push str.Monday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b491
xor esi, esi
inc esi
jmp 0x1005b508
lea eax, [ebp - 0x24]
push str.Tuesday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b4a9
push 2
jmp 0x1005b507
lea eax, [ebp - 0x24]
push str.Wednesday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b4c1
push 3
jmp 0x1005b507
lea eax, [ebp - 0x24]
push str.Thursday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b4d9
push 4
jmp 0x1005b507
lea eax, [ebp - 0x24]
push str.Friday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b4f1
push 5
jmp 0x1005b507
lea eax, [ebp - 0x24]
push str.Saturday
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
jne 0x1005b508
push 6
pop esi
lea eax, [ebp - 0x360]
push eax
call dword [sym.imp.MSVCR100.dll__strtime]
push 2
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.1000616e
push 2
push 3
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.100061e7
mov eax, dword [0x103a6e14]
add esp, 0x20
inc eax
cmp esi, eax
jne 0x1005b59e
mov esi, dword [sym.imp.MSVCR100.dll_atoi]
lea eax, [ebp - 0xb8]
push eax
call esi
pop ecx
mov ecx, dword [0x103a6e18]
inc ecx
cmp eax, ecx
jne 0x1005b59e
lea eax, [ebp - 0xcc]
push eax
call esi
pop ecx
mov ecx, dword [0x103a6e1c]
inc ecx
cmp eax, ecx
jl 0x1005b59e
push 0x1009ac80
call fcn.10006dd0
pop ecx
mov ecx, dword [0x1011280c]
call fcn.1006e863
call fcn.100449ae
jmp 0x1005c53f
cmp byte [0x10342a86], 0
je 0x1005c53f
cmp dword [0x103b0ea4], 1
mov esi, dword [sym.imp.MSVCR100.dll_sprintf]
mov edi, 0x10111b20
jne 0x1005b6b6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
div ebx
xor edx, edx
mov ecx, eax
mov eax, dword [0x103428c4]
div ebx
sub ecx, eax
cmp ecx, 0xf
jb 0x1005b6b6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, ebx
push ebx
mov dword [0x103428c4], eax
call fcn.10011127
push edi
lea eax, [ebp - 0x2c0]
push 0x1009ac78
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x2c0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
jne 0x1005b627
push ebx
lea eax, [ebp - 0x2c0]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x33ccf58
push 0x10110ce0
push edi
lea eax, [ebp - 0x2c0]
push 0x1009ac64
push eax
call esi
add esp, 0x14
lea ecx, [ebp - 0x378]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x378]
push eax
mov ecx, 0x103b0e30
mov dword [ebp - 4], ebx
call sub.mfc100.dll_Ordinal_6970
lea eax, [ebp - 0x2c0]
push 0x1009ac60
push eax
call dword [sym.imp.MSVCR100.dll_fopen]
pop ecx
pop ecx
mov ebx, eax
push ebx
push 1
lea ecx, [ebp - 0x378]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push eax
lea ecx, [ebp - 0x378]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_fwrite]
push ebx
call dword [sym.imp.MSVCR100.dll_fclose]
or dword [ebp - 4], 0xffffffff
add esp, 0x14
lea ecx, [ebp - 0x378]
call dword [sym.imp.mfc100.dll_Ordinal_901]
cmp dword [0x103a6e4c], 1
jne 0x1005b6d6
mov eax, dword [0x103429e8]
cmp eax, dword [0x103a6e6c]
jl 0x1005b6d6
push 0x1009ac3c
jmp 0x1005b583
cmp dword [0x103a6e50], 1
jne 0x1005b6f6
mov eax, dword [0x103429ec]
cmp eax, dword [0x103a6e70]
jl 0x1005b6f6
push 0x1009ac18
jmp 0x1005b583
cmp dword [0x103a6f04], 1
jne 0x1005b73c
mov eax, dword [0x36208e4]
movzx eax, word [eax + 0x14]
mov ecx, dword [0x10112364]
imul eax, eax, 0x1cc
sub ecx, dword [eax + 0xfbafd0]
cmp ecx, dword [0x103a6f08]
jl 0x1005b73c
add eax, 0xfbaf1a
push eax
call sub.MSVCR100.dll_strlen
pop ecx
test eax, eax
je 0x1005b73c
push 0x1009abf4
jmp 0x1005b583
cmp dword [0x103a6e54], 1
jne 0x1005b767
mov eax, dword [0x103a6e74]
cdq
cmp dword [0x1034288c], edx
jl 0x1005b767
jg 0x1005b75d
cmp dword [0x10342888], eax
jb 0x1005b767
push 0x1009abcc
jmp 0x1005b583
cmp dword [0x103ac58c], 1
mov ebx, dword [sym.imp.WINMM.dll_PlaySoundA]
jne 0x1005b7c3
mov eax, dword [0x103429e8]
cmp eax, dword [0x103ac594]
jl 0x1005b7c3
push 0x1009aba4
call fcn.10006dd0
mov dword [esp], 0x1f4
call sub.mfc100.dll_Ordinal_265
push edi
push 0x10098d70
push eax
mov dword [ebp - 0x378], eax
call esi
add esp, 0x10
push 0x11
push 0
push dword [ebp - 0x378]
call ebx
push dword [ebp - 0x378]
call sub.mfc100.dll_Ordinal_1296
pop ecx
cmp dword [0x103ac590], 1
jne 0x1005b819
mov eax, dword [0x103429ec]
cmp eax, dword [0x103ac598]
jl 0x1005b819
push 0x1009ab7c
call fcn.10006dd0
mov dword [esp], 0x1f4
call sub.mfc100.dll_Ordinal_265
push edi
push 0x10098d70
push eax
mov dword [ebp - 0x378], eax
call esi
add esp, 0x10
push 0x11
push 0
push dword [ebp - 0x378]
call ebx
push dword [ebp - 0x378]
call sub.mfc100.dll_Ordinal_1296
pop ecx
mov eax, dword [0x103a6e40]
mov ecx, dword [0x103ac57c]
xor edx, edx
inc edx
cmp eax, edx
je 0x1005b833
cmp ecx, edx
jne 0x1005ba01
cmp byte [0x10342a8c], 1
jne 0x1005ba01
cmp eax, edx
jne 0x1005b9a5
mov ecx, dword [0x1011280c]
call fcn.1006e863
mov eax, dword [0x103a6e24]
xor edi, edi
inc edi
cmp eax, edi
jne 0x1005b8f3
lea eax, [ebp - 0x374]
push eax
mov dword [ebp - 0x374], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
push 2
pop ebx
cmp dword [ebp - 0x364], ebx
jne 0x1005b8de
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea ecx, [ebp - 0x38c]
push ecx
push 0x20
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
lea eax, [ebp - 0x37c]
push eax
push str.SeShutdownPrivilege
xor esi, esi
push esi
mov dword [ebp - 0x20], edi
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov eax, dword [ebp - 0x37c]
push esi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x378]
push esi
push esi
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x20]
push eax
push esi
push dword [ebp - 0x38c]
mov dword [ebp - 0x14], ebx
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
jmp 0x1005b8e0
xor esi, esi
push esi
push 8
call dword [sym.imp.USER32.dll_ExitWindowsEx]
push 0x1009ab74
jmp 0x1005bc5b
cmp eax, 2
jne 0x1005c53f
lea eax, [ebp - 0xa4]
push eax
movzx eax, byte [0x11f6d2e]
push eax
mov ebx, 0x10342ad0
push ebx
call fcn.1003b6d5
lea eax, [ebp - 0xa4]
push 0x35f46f0
push eax
call sub.MSVCR100.dll_strcat
add esp, 0x14
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
push 0x291
push dword [0x1010eafc]
call edi
lea eax, [ebp - 0xa4]
push eax
movzx eax, byte [0x11f6d2e]
push eax
push ebx
call fcn.1003b6d5
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x360]
push 0x10099258
push eax
call esi
add esp, 0x18
lea eax, [ebp - 0x360]
push eax
push dword [0x100e04bc]
push 0x2712
push dword [0x1010eafc]
call edi
push 1
push dword [0x100f3d44]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x1005c53f
cmp ecx, edx
jne 0x1005ba01
cmp dword [0x103ad874], 0
jne 0x1005b9bd
mov ecx, dword [0x1011280c]
call fcn.1006e863
push 0x1009ab68
call fcn.10006dd0
mov dword [esp], 0x1f4
call sub.mfc100.dll_Ordinal_265
push edi
push 0x10098d70
push eax
mov dword [ebp - 0x38c], eax
call esi
add esp, 0x10
push 0x11
push 0
push dword [ebp - 0x38c]
call ebx
push dword [ebp - 0x38c]
call sub.mfc100.dll_Ordinal_1296
jmp 0x1005b385
cmp dword [0x103a6e38], edx
jne 0x1005ba3c
mov esi, dword [0x33ccff0]
mov edi, dword [0x33ccff4]
cmp esi, dword [0x10368770]
jne 0x1005ba25
cmp edi, dword [0x10368774]
je 0x1005ba73
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x103428d0], eax
mov dword [0x10368770], esi
mov dword [0x10368774], edi
cmp dword [0x103a6e44], 1
jne 0x1005babe
push 7
mov ecx, 0x35f6378
xor edx, edx
pop esi
mov eax, dword [ecx]
test eax, eax
je 0x1005ba5f
cmp byte [eax + 0x330], 0
je 0x1005ba5f
inc edx
add ecx, 4
dec esi
jne 0x1005ba4f
test edx, edx
jne 0x1005babe
push 0x1009ab4c
jmp 0x1005b583
mov eax, dword [ebp - 0x384]
sub eax, dword [0x103428d0]
xor edx, edx
mov ecx, 0x3e8
div ecx
push 0x3c
xor edx, edx
pop ecx
div ecx
mov dword [ebp - 0x378], eax
fild dword [ebp - 0x378]
test eax, eax
jns 0x1005baa5
fadd dword [0x10098924]
fild dword [0x103a6e68]
fcompp
fnstsw ax
test ah, 0x41
jp 0x1005ba3c
push 0x1009ab2c
jmp 0x1005b583
cmp dword [0x103a6e48], 1
jne 0x1005bb53
mov esi, dword [0x35f42ac]
xor ebx, ebx
xor edi, edi
call fcn.10005f4e
test eax, eax
je 0x1005bb10
add esi, 0x53c
mov eax, dword [esi]
test eax, eax
je 0x1005bafe
add eax, 0x64
push eax
push 0x1009ab24
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005bb0d
inc edi
add esi, 4
call fcn.10005f4e
cmp edi, eax
jb 0x1005bae4
jmp 0x1005bb10
xor ebx, ebx
inc ebx
mov eax, dword [0x35f42a8]
xor edi, edi
lea esi, [eax + 0x53c]
mov eax, dword [esi]
test eax, eax
je 0x1005bb37
add eax, 0x64
push eax
push 0x1009ab24
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005bb42
inc edi
add esi, 4
cmp edi, 0xf
jl 0x1005bb1d
jmp 0x1005bb45
xor ebx, ebx
inc ebx
test ebx, ebx
jne 0x1005bb53
push 0x1009ab08
jmp 0x1005b583
cmp dword [0x103a6e84], 1
jne 0x1005bbb1
mov esi, dword [0x35f42ac]
xor ebx, ebx
call fcn.10005f4e
mov edi, 0x1009ab00
test eax, eax
je 0x1005bb9c
add esi, 0x53c
mov eax, dword [esi]
test eax, eax
je 0x1005bb8f
add eax, 0x64
push edi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x1005bbb1
inc ebx
add esi, 4
call fcn.10005f4e
cmp ebx, eax
jb 0x1005bb78
push edi
call fcn.10006122
pop ecx
test eax, eax
jne 0x1005bbb1
push 0x1009aae4
jmp 0x1005b583
xor edi, edi
mov esi, 0xa7f9
cmp dword [0x33ccfd8], edi
jne 0x1005bd48
cmp dword [0x35ed708], esi
jne 0x1005bbe5
cmp dword [0x103aabd4], 1
jne 0x1005bbe5
cmp dword [0x103aae6c], edi
jne 0x1005bbe5
push 1
call fcn.1003938c
pop ecx
cmp dword [0x33ccfd8], edi
jne 0x1005bd48
cmp dword [0x35ed708], esi
je 0x1005bd48
cmp dword [0x103aabd4], 1
jne 0x1005bce2
cmp dword [0x103aae6c], edi
jne 0x1005bca2
cmp dword [0x101123b0], 2
jne 0x1005bc65
mov dword [0x101127ec], edi
mov byte [0x10342a7d], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x103428f4], eax
mov eax, dword [0x103be1bc]
push 0x100454d5
push 0xbb8
add eax, 0x45
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009aad4
call fcn.10006dd0
jmp 0x1005b385
call fcn.1006e74d
mov dword [0x101127ec], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x1005acb5
push dword [0x103aafdc]
mov dword [0x103428f4], eax
mov eax, dword [0x103be1bc]
add eax, 0x44
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009aac4
jmp 0x1005bc5b
call fcn.1006e74d
mov dword [0x101127ec], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x10045458
push dword [0x103aafdc]
mov dword [0x103428f4], eax
mov eax, dword [0x103be1bc]
add eax, 0x44
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009aab4
jmp 0x1005bc5b
cmp dword [0x103aabd8], 1
jne 0x1005bd48
cmp dword [0x103aae70], 1
jne 0x1005bd33
call fcn.1006e74d
mov dword [0x101127ec], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x103428f4], eax
mov eax, dword [0x103be1bc]
push 0x10045458
push 0xbb8
add eax, 0x44
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
push 0x1009aaa4
jmp 0x1005bc5b
mov ecx, dword [0x1011280c]
call fcn.1006e863
push 0x1009aa90
jmp 0x1005bc5b
cmp dword [0x103a83a0], 1
jne 0x1005bd8a
mov eax, dword [0x35f42a8]
lea esi, [eax + 0x53c]
mov ebx, 0x1009ab24
mov eax, dword [esi]
test eax, eax
je 0x1005bd77
add eax, 0x64
push eax
push ebx
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005bd8a
inc edi
add esi, 4
cmp edi, 0xf
jl 0x1005bd61
push 0
push ebx
call fcn.10005f7d
pop ecx
pop ecx
xor edi, edi
inc edi
cmp dword [0x103a6e58], edi
jne 0x1005bdc7
push 7
mov ecx, 0x35f6378
xor edx, edx
pop esi
mov eax, dword [ecx]
test eax, eax
je 0x1005bdaf
cmp byte [eax + 0x330], 0
je 0x1005bdaf
inc edx
add ecx, 4
dec esi
jne 0x1005bd9f
cmp edx, dword [0x103a6e78]
jge 0x1005bdc7
push 0x1009aa6c
jmp 0x1005b583
cmp dword [0x103acd8c], edi
jne 0x1005be02
mov eax, dword [0x103428c8]
xor edx, edx
mov esi, 0x3e8
mov ecx, esi
div ecx
mov ecx, dword [ebp - 0x384]
xor edx, edx
mov ebx, eax
mov eax, ecx
div esi
sub eax, ebx
cmp eax, 5
jb 0x1005be02
push 0x32
mov dword [0x103428c8], ecx
call fcn.10058aba
pop ecx
cmp dword [0x103aed9c], edi
jne 0x1005be5c
push 0x14
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x103aefe4
call sub.mfc100.dll_Ordinal_6969
mov esi, 0x35f6378
mov eax, dword [esi]
test eax, eax
je 0x1005be43
cmp byte [eax + 0x330], 0
je 0x1005be43
lea ecx, [ebp - 0x24]
push ecx
add eax, 0x338
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005be50
add esi, 4
cmp esi, 0x35f6394
jl 0x1005be1f
jmp 0x1005be5c
lea eax, [ebp - 0x24]
push edi
push eax
call fcn.100394e4
pop ecx
pop ecx
cmp dword [0x103ad7cc], edi
jne 0x1005bea5
mov esi, dword [ebp - 0x38c]
add esi, 0x483c
push esi
call sub.MSVCR100.dll_strlen
pop ecx
test eax, eax
je 0x1005bea5
push 0x32
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x103ae12c
call sub.mfc100.dll_Ordinal_6969
lea eax, [ebp - 0x5c]
push esi
push eax
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005bea5
lea eax, [ebp - 0x5c]
push eax
call fcn.1003959c
pop ecx
mov eax, dword [0x35f42ac]
add eax, 0x53c
mov dword [ebp - 0x384], eax
mov eax, dword [eax]
xor esi, esi
mov edi, 0x1008ff20
cmp eax, esi
je 0x1005bed7
add eax, 0x64
push edi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x1005c1af
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x380], esi
mov dword [ebp - 0x378], esi
call fcn.10005f4e
test eax, eax
je 0x1005bf52
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005bf18
lea eax, [esi + 0x64]
push edi
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005bf18
cmp dword [esi + 0xe74], 0
jne 0x1005bf30
inc dword [ebp - 0x378]
add ebx, 4
call fcn.10005f4e
cmp dword [ebp - 0x378], eax
jb 0x1005bef8
jmp 0x1005bf52
mov eax, dword [esi + 0xe44]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x380], 1
cmp dword [0x103ae758], 1
jne 0x1005bfec
mov eax, dword [0x103ae7d0]
test eax, eax
jne 0x1005bf6f
push 0x100984f0
jmp 0x1005bf85
cmp eax, 1
jne 0x1005bf7b
push 0x100984e4
jmp 0x1005bf85
cmp eax, 2
jne 0x1005bf90
push 0x100984d8
lea eax, [ebp - 0x5c]
push eax
call sub.MSVCR100.dll_strcpy
pop ecx
pop ecx
xor edi, edi
call fcn.10005f4e
test eax, eax
je 0x1005bfec
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005bfdf
lea eax, [ebp - 0x5c]
push eax
lea eax, [esi + 0x64]
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005bfdf
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x388]
jl 0x1005bfdf
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x380], 1
inc edi
add ebx, 4
call fcn.10005f4e
cmp edi, eax
jb 0x1005bfa1
cmp dword [ebp - 0x380], 0
jne 0x1005c190
xor edi, edi
call fcn.10005f4e
test eax, eax
je 0x1005c063
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005c049
lea eax, [esi + 0x64]
push 0x1009aa60
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c049
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x388]
jl 0x1005c049
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x380], 1
inc edi
add ebx, 4
call fcn.10005f4e
cmp edi, eax
jb 0x1005c00a
cmp dword [ebp - 0x380], 0
jne 0x1005c190
xor edi, edi
call fcn.10005f4e
test eax, eax
je 0x1005c0cd
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005c0b3
lea eax, [esi + 0x64]
push 0x100984d8
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c0b3
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x388]
jl 0x1005c0b3
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x380], 1
inc edi
add ebx, 4
call fcn.10005f4e
cmp edi, eax
jb 0x1005c074
cmp dword [ebp - 0x380], 0
jne 0x1005c190
xor edi, edi
call fcn.10005f4e
test eax, eax
je 0x1005c133
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005c11d
lea eax, [esi + 0x64]
push 0x100984e4
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c11d
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x388]
jl 0x1005c11d
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x380], 1
inc edi
add ebx, 4
call fcn.10005f4e
cmp edi, eax
jb 0x1005c0de
cmp dword [ebp - 0x380], 0
jne 0x1005c190
xor edi, edi
call fcn.10005f4e
test eax, eax
je 0x1005c1af
mov ebx, dword [ebp - 0x384]
mov esi, dword [ebx]
test esi, esi
je 0x1005c183
lea eax, [esi + 0x64]
push 0x100984f0
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c183
mov esi, dword [esi + 0xe44]
cmp esi, dword [ebp - 0x388]
jl 0x1005c183
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x380], 1
inc edi
add ebx, 4
call fcn.10005f4e
cmp edi, eax
jb 0x1005c144
cmp dword [ebp - 0x380], 1
jne 0x1005c1af
push 1
push 1
push 1
push 0
push dword [ebp - 0x378]
call fcn.10039630
add esp, 0x14
or dword [ebp - 0x380], 0xffffffff
and dword [ebp - 0x378], 0
call fcn.10005f4e
test eax, eax
je 0x1005c266
mov edi, dword [ebp - 0x384]
mov ebx, 0x1009aa58
mov esi, dword [edi]
test esi, esi
je 0x1005c1fd
lea eax, [esi + 0x64]
push ebx
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c1fd
xor eax, eax
inc eax
mov dword [ebp - 0x380], eax
cmp dword [esi + 0xef4], eax
je 0x1005c215
inc dword [ebp - 0x378]
add edi, 4
call fcn.10005f4e
cmp dword [ebp - 0x378], eax
jb 0x1005c1d5
jmp 0x1005c21c
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 1
jne 0x1005c266
xor edi, edi
call fcn.10005f4e
test eax, eax
je 0x1005c266
mov esi, dword [ebp - 0x384]
mov eax, dword [esi]
test eax, eax
je 0x1005c24d
add eax, 0x64
push ebx
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x1005c25c
inc edi
add esi, 4
call fcn.10005f4e
cmp edi, eax
jb 0x1005c236
jmp 0x1005c266
push 0
push edi
call fcn.100384b0
pop ecx
pop ecx
cmp dword [0x103a8398], 1
jne 0x1005c3bf
call fcn.10005f4e
mov eax, dword [ebp - 0x38c]
mov esi, dword [0x35f42ac]
xor ebx, ebx
cmp dword [eax + 0x4800], ebx
jne 0x1005c2e0
call fcn.10005f4e
test eax, eax
je 0x1005c3bf
lea edi, [esi + 0x53c]
mov esi, dword [edi]
test esi, esi
je 0x1005c2ce
lea eax, [esi + 0x64]
push 0x10098e0c
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c2ce
mov eax, dword [esi + 0xd4c]
cmp eax, dword [0x103aafd4]
jg 0x1005c3b5
inc ebx
add edi, 4
call fcn.10005f4e
cmp ebx, eax
jb 0x1005c2a1
jmp 0x1005c3bf
mov eax, dword [0x35f42a8]
mov eax, dword [eax + 0x56c]
cmp eax, ebx
je 0x1005c3bf
add eax, 0x64
push 0x10098e0c
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
je 0x1005c3bf
xor ebx, ebx
call fcn.10005f4e
test eax, eax
je 0x1005c3bf
lea edi, [esi + 0x53c]
mov eax, dword [edi]
test eax, eax
je 0x1005c3a2
lea esi, [eax + 0x64]
push 0x10098e3c
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3b5
push 0x10098e34
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3b5
push 0x10098e2c
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3b5
push 0x10098e24
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3b5
push 0x10098e1c
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3b5
push 0x10098e14
push esi
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c3b5
push 0x10098e04
push esi
call dword [sym.imp.MSVCR100.dll_strstr]
pop ecx
pop ecx
test eax, eax
jne 0x1005c3b5
inc ebx
add edi, 4
call fcn.10005f4e
cmp ebx, eax
jb 0x1005c321
jmp 0x1005c3bf
push 0
push ebx
call fcn.100384b0
pop ecx
pop ecx
mov eax, dword [ebp - 0x38c]
cmp dword [eax + 0x51fc], 0
jne 0x1005c3d7
cmp dword [eax + 0x2a58], 6
je 0x1005c3e9
cmp dword [eax + 0x4800], 0
jne 0x1005c449
cmp dword [eax + 0x2a58], 4
jne 0x1005c449
xor ebx, ebx
mov esi, 0x103bb43c
lea eax, [ebp - 0x2e0]
push eax
push ebx
call fcn.1000601d
pop ecx
pop ecx
mov ecx, esi
xor edi, edi
call fcn.100011d9
test eax, eax
jle 0x1005c432
lea eax, [ebp - 0x2e0]
push eax
mov eax, dword [0x103bb43c]
push dword [eax + edi*4]
call sub.MSVCR100.dll_strcmp
pop ecx
pop ecx
test eax, eax
je 0x1005c43a
mov ecx, esi
inc edi
call fcn.100011d9
cmp edi, eax
jl 0x1005c40c
inc ebx
cmp ebx, 0x14
jl 0x1005c3f0
jmp 0x1005c449
push 1
push dword [ebp - 0x2c4]
call fcn.100396f3
pop ecx
pop ecx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov edi, 0x3e8
xor edx, edx
mov ecx, edi
div ecx
xor ebx, ebx
sub eax, dword [0x103434f4]
cmp eax, dword [0x10342a20]
jb 0x1005c473
push ebx
call fcn.10045b28
pop ecx
call esi
xor edx, edx
mov ecx, edi
div ecx
sub eax, dword [0x101123c4]
cmp eax, 0x1194
jb 0x1005c4ac
push ebx
push ebx
push ebx
push 0x100590cb
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
xor edx, edx
mov ecx, edi
div ecx
mov dword [0x101123c4], eax
cmp dword [0x101123b0], 2
je 0x1005c53f
cmp byte [0x10342a94], 0
jne 0x1005c53f
mov ecx, 0x103bb5b0
call fcn.100011d9
cmp eax, 2
jne 0x1005c53f
call fcn.10045628
cmp al, 1
jne 0x1005c53f
call fcn.10037d23
mov byte [0x10342a94], 1
call fcn.1006e74d
push ebx
push ebx
push ebx
push ebx
mov dword [0x101127f4], 0x7d0
call fcn.10045a86
mov eax, dword [0x103be1bc]
push fcn.10045a86
push edi
add eax, 0x4d
push eax
push dword [0x100e04bc]
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [0x103bb5b0]
mov ecx, dword [eax + 4]
fild dword [ecx]
mov eax, dword [eax]
sub esp, 0xc
fstp dword [esp + 8]
fldz
fstp dword [esp + 4]
fild dword [eax]
fstp dword [esp]
call fcn.1003815c
add esp, 0xc
call fcn.10083b2f
ret