Function at 0x10003e90
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10086755
mov eax, dword fs:[0]
push eax
mov eax, 0x1d78
call fcn.1001f860
mov eax, dword [0x100ab06c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 0
lea ecx, [ebp - 0x1c44]
mov dword [ebp - 0x1bd8], 0
call fcn.1005c957
lea ecx, [ebp - 0xa20]
mov dword [ebp - 4], 0
call fcn.1005d672
push 1
lea eax, [ebp - 0x1c44]
mov byte [ebp - 4], 1
push eax
push esi
lea ecx, [ebp - 0xa20]
call fcn.1005e3d0
test al, al
jne 0x10003f11
xor bl, bl
jmp 0x10006cb5
push 4
mov edx, 0x100a4a48
lea ecx, [ebp - 0x718]
call fcn.10002320
add esp, 4
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
jb 0x10003f32
mov eax, dword [eax]
lea ecx, [ebp - 0x538]
push ecx
push eax
lea ecx, [ebp - 0x1c44]
call fcn.1005cc29
mov ecx, eax
call fcn.1005cedb
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x704]
cmp eax, 0x10
jb 0x10003f6e
inc eax
lea ecx, [ebp - 0x718]
push eax
push dword [ebp - 0x718]
call fcn.1000b3e0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x704], 0xf
mov dword [ebp - 0x708], 0
mov byte [ebp - 0x718], 0
test eax, eax
je 0x10003fb7
cmp dword [ebp - 0x524], 0x10
lea ecx, [ebp - 0x538]
push 0x100aba68
cmovae ecx, dword [ebp - 0x538]
lea edx, [eax + ecx]
call fcn.1000efe0
add esp, 4
push ecx
lea ecx, [ebp - 0x1c34]
call fcn.10001ad0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x520]
xor eax, eax
mov dword [ebp - 0x510], 0
push eax
mov dword [ebp - 0x50c], 0
push 0x100a48ac
mov dword [ebp - 0x50c], 7
mov dword [ebp - 0x510], 0
mov word [ebp - 0x520], ax
call fcn.1000aac0
push 0xd
mov edx, 0x100a4a30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x670]
call fcn.10002320
add esp, 4
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 0x10
jb 0x1000402e
mov eax, dword [eax]
lea ecx, [ebp - 0x4f0]
push ecx
push eax
lea ecx, [ebp - 0x1c44]
call fcn.1005cc29
mov ecx, eax
call fcn.1005cedb
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x65c]
cmp eax, 0x10
jb 0x1000406a
inc eax
lea ecx, [ebp - 0x670]
push eax
push dword [ebp - 0x670]
call fcn.1000b3e0
cmp dword [ebp - 0x4e0], 0
mov dword [ebp - 0x65c], 0xf
mov dword [ebp - 0x660], 0
mov byte [ebp - 0x670], 0
je 0x100043a4
mov dword [ebp - 0x1bc4], reloc.WS2_32.dll_accept
mov dword [ebp - 0x1bc0], 0
mov dword [ebp - 0x1bbc], 0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1bc4]
cmp dword [0x100aeaec], 8
mov eax, 0x100aead8
push 0x2001f
cmovae eax, dword [0x100aead8]
push eax
call fcn.100130e0
mov edi, dword [0x10088790]
test eax, eax
jne 0x10004203
cmp dword [ebp - 0x4dc], 0x10
lea eax, [ebp - 0x4f0]
push 0
cmovae eax, dword [ebp - 0x4f0]
lea edx, [ebp - 0x1c7c]
mov dword [ebp - 0x1c7c], eax
lea ecx, [ebp - 0x808]
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x1c78], eax
call fcn.100118f0
push 0xd
mov edx, 0x100a4a30
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x928]
call fcn.10002350
add esp, 8
mov edx, eax
mov byte [ebp - 4], 0xc
lea esi, [ebp - 0x808]
cmp dword [ebp - 0x7f4], 8
cmovae esi, dword [ebp - 0x808]
cmp dword [edx + 0x14], 8
jb 0x1000415a
mov edx, dword [edx]
mov ecx, esi
lea ebx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10004160
sub ecx, ebx
sar ecx, 1
push ecx
lea eax, [ecx*2 + 2]
push eax
push esi
push edx
lea ecx, [ebp - 0x1bc4]
call fcn.10013390
lea ecx, [ebp - 0x928]
mov byte [ebp - 4], 0xb
call fcn.1000a380
lea ecx, [ebp - 0x808]
mov byte [ebp - 4], 0xa
call fcn.1000a380
push 6
mov edx, 0x100a490c
lea ecx, [ebp - 0x940]
call fcn.10002350
add esp, 4
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x14], 8
jb 0x100041c4
mov eax, dword [eax]
lea ecx, [ebp - 0x520]
push ecx
push eax
lea ecx, [ebp - 0x1bc4]
call fcn.100131e0
lea ecx, [ebp - 0x940]
mov byte [ebp - 4], 0xa
call fcn.1000a380
mov esi, dword [ebp - 0x1bc4]
test esi, esi
je 0x10004209
push esi
call edi
xor esi, esi
mov dword [ebp - 0x1bc4], esi
mov dword [ebp - 0x1bc0], esi
jmp 0x10004209
mov esi, dword [ebp - 0x1bc4]
push 2
push 0
lea eax, [ebp - 0x658]
push eax
lea ecx, [ebp - 0x4f0]
call fcn.1000a4c0
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 0x10
jb 0x1000422d
mov ecx, dword [eax]
jmp 0x1000422f
mov ecx, eax
mov edx, dword [eax + 0x10]
push 0x100adce0
lea edx, [edx + ecx]
call fcn.1000efe0
mov byte [ebp - 4], 0xa
add esp, 4
mov eax, dword [ebp - 0x644]
cmp eax, 0x10
jb 0x10004264
inc eax
lea ecx, [ebp - 0x658]
push eax
push dword [ebp - 0x658]
call fcn.1000b3e0
push 2
push 2
lea eax, [ebp - 0x640]
mov dword [ebp - 0x644], 0xf
push eax
lea ecx, [ebp - 0x4f0]
mov dword [ebp - 0x648], 0
mov byte [ebp - 0x658], 0
call fcn.1000a4c0
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], 0x10
jb 0x100042a3
mov ecx, dword [eax]
jmp 0x100042a5
mov ecx, eax
mov edx, dword [eax + 0x10]
push 0x100aba60
lea edx, [edx + ecx]
call fcn.1000efe0
mov byte [ebp - 4], 0xa
add esp, 4
mov eax, dword [ebp - 0x62c]
cmp eax, 0x10
jb 0x100042da
inc eax
lea ecx, [ebp - 0x640]
push eax
push dword [ebp - 0x640]
call fcn.1000b3e0
push 2
push 4
lea eax, [ebp - 0x628]
mov dword [ebp - 0x62c], 0xf
push eax
lea ecx, [ebp - 0x4f0]
mov dword [ebp - 0x630], 0
mov byte [ebp - 0x640], 0
call fcn.1000a4c0
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x14], 0x10
jb 0x10004319
mov ecx, dword [eax]
jmp 0x1000431b
mov ecx, eax
mov edx, dword [eax + 0x10]
push 0x100aba50
lea edx, [edx + ecx]
call fcn.1000efe0
mov byte [ebp - 4], 0xa
add esp, 4
mov eax, dword [ebp - 0x614]
cmp eax, 0x10
jb 0x10004350
inc eax
lea ecx, [ebp - 0x628]
push eax
push dword [ebp - 0x628]
call fcn.1000b3e0
mov dword [ebp - 0x614], 0xf
mov dword [ebp - 0x618], 0
mov byte [ebp - 0x628], 0
mov byte [ebp - 4], 9
test esi, esi
je 0x1000438a
push esi
call edi
mov dword [ebp - 0x1bc4], 0
mov dword [ebp - 0x1bc0], 0
mov ecx, dword [ebp - 0x1bbc]
mov dword [ebp - 0x1bbc], 0
test ecx, ecx
je 0x100043a4
mov eax, dword [ecx]
push 1
call dword [eax]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x4dc]
cmp eax, 0x10
jb 0x100043c6
inc eax
lea ecx, [ebp - 0x4f0]
push eax
push dword [ebp - 0x4f0]
call fcn.1000b3e0
mov dword [ebp - 0x4dc], 0xf
mov dword [ebp - 0x4e0], 0
mov byte [ebp - 0x4f0], 0
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x50c]
cmp eax, 8
jb 0x10004403
inc eax
lea ecx, [ebp - 0x520]
push eax
push dword [ebp - 0x520]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x50c], 7
mov dword [ebp - 0x510], 0
mov word [ebp - 0x520], ax
mov byte [ebp - 4], 0x11
mov esi, dword [ebp - 0x1c34]
mov edi, dword [sym.imp.ADVAPI32.dll_RevertToSelf]
test esi, esi
je 0x1000443d
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x100a4768
lea ecx, [ebp - 0x1cfc]
mov byte [ebp - 4], 4
call fcn.1005c92d
push 6
mov edx, 0x100a49f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x6d0]
call fcn.10002320
add esp, 4
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 0x10
jb 0x10004476
mov eax, dword [eax]
lea ecx, [ebp - 0x1cfc]
push ecx
push eax
lea eax, [ebp - 0x1c9c]
push eax
lea ecx, [ebp - 0x1c44]
call fcn.1005d303
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x6bc]
cmp eax, 0x10
jb 0x100044b2
inc eax
lea ecx, [ebp - 0x6d0]
push eax
push dword [ebp - 0x6d0]
call fcn.1000b3e0
mov dword [ebp - 0x6bc], 0xf
mov dword [ebp - 0x6c0], 0
mov byte [ebp - 0x6d0], 0
lea ecx, [ebp - 0x1cfc]
mov byte [ebp - 4], 0x16
call fcn.1005ca7d
lea ecx, [ebp - 0x1c9c]
call fcn.1005d328
test al, al
je 0x10005556
lea ecx, [ebp - 0x1c9c]
call fcn.1005d4cd
mov esi, eax
xor ebx, ebx
mov dword [ebp - 0x1b80], esi
mov dword [ebp - 0x1b98], ebx
test esi, esi
je 0x10005556
lea eax, [ebp - 0x478]
push eax
push ebx
lea ecx, [ebp - 0x1c9c]
call fcn.1005cb6a
mov ecx, eax
call fcn.1005cedb
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x468], 0
je 0x1000550a
cmp dword [0x100aea7c], 8
mov eax, 0x100aea68
cmovae eax, dword [0x100aea68]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x10004568
xor edx, edx
mov ecx, 0x100aea68
call fcn.10011520
xor eax, eax
mov dword [ebp - 0x480], 0
push 0xffffffffffffffff
push eax
mov dword [ebp - 0x47c], 0
lea ecx, [ebp - 0x490]
push 0x100aea68
mov dword [ebp - 0x47c], 7
mov dword [ebp - 0x480], 0
mov word [ebp - 0x490], ax
call fcn.1000abc0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x478]
cmp dword [ebp - 0x464], 0x10
lea edx, [ebp - 0x1c84]
push 0
cmovae eax, dword [ebp - 0x478]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x1c84], eax
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x1c80], eax
call fcn.100118f0
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x550]
cmp dword [ebp - 0x53c], 8
push ecx
cmovae eax, dword [ebp - 0x550]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [ebp - 0x540]
mov dword [ecx + 4], eax
lea ecx, [ebp - 0x598]
call fcn.10011ce0
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x53c]
cmp eax, 8
jb 0x1000463c
inc eax
lea ecx, [ebp - 0x550]
push eax
push dword [ebp - 0x550]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x53c], 7
mov word [ebp - 0x550], ax
lea ecx, [ebp - 0x598]
lea eax, [ebp - 0x778]
mov dword [ebp - 0x540], 0
push eax
call fcn.10012430
push eax
lea eax, [ebp - 0x790]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x490]
call fcn.100127c0
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x1d
cmp ecx, eax
je 0x1000469a
push 0xffffffffffffffff
push 0
push eax
call fcn.1000abc0
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0x77c]
cmp eax, 8
jb 0x100046bc
inc eax
lea ecx, [ebp - 0x790]
push eax
push dword [ebp - 0x790]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x77c], 7
mov word [ebp - 0x790], ax
mov dword [ebp - 0x780], 0
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x764]
cmp eax, 8
jb 0x100046fb
inc eax
lea ecx, [ebp - 0x778]
push eax
push dword [ebp - 0x778]
call fcn.1000b4f0
sub esp, 0x18
mov dword [ebp - 0x764], 7
mov ecx, esp
mov dword [ebp - 0x1b94], esp
xor eax, eax
mov dword [ebp - 0x768], 0
mov word [ebp - 0x778], ax
push 0xffffffffffffffff
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 7
push eax
mov word [ecx], ax
lea eax, [ebp - 0x490]
push eax
call fcn.1000abc0
mov byte [ebp - 4], 0x1e
mov eax, dword [0x100aea00]
test eax, 0xfffffffe
jne 0x1000478e
mov ecx, 1
xor eax, eax
mov edx, 0x100aea00
lock cmpxchg dword [edx], ecx
test eax, eax
je 0x10004784
mov eax, dword [0x100aea00]
cmp eax, 1
jne 0x1000478e
nop dword [eax]
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x100aea00]
cmp eax, 1
je 0x10004770
jmp 0x1000478e
mov dword [0x100aea00], 0x100aea04
mov eax, dword [0x100aea00]
mov byte [ebp - 4], 0x1b
call fcn.1001b630
push 3
mov edx, 0x100a48ec
lea ecx, [ebp - 0x748]
call fcn.10002350
add esp, 4
mov esi, eax
lea eax, [ebp - 0x760]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x598]
call fcn.10012530
mov byte [ebp - 4], 0x21
cmp dword [esi + 0x14], 8
jb 0x100047d7
mov edx, dword [esi]
jmp 0x100047d9
mov edx, esi
cmp dword [eax + 0x14], 8
jb 0x100047e3
mov ecx, dword [eax]
jmp 0x100047e5
mov ecx, eax
push dword [esi + 0x10]
push edx
push dword [eax + 0x10]
push ecx
call fcn.1000bf40
mov esi, eax
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x74c]
add esp, 0x10
cmp eax, 8
jb 0x10004819
inc eax
lea ecx, [ebp - 0x760]
push eax
push dword [ebp - 0x760]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x74c], 7
mov word [ebp - 0x760], ax
mov dword [ebp - 0x750], 0
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x734]
cmp eax, 8
jb 0x10004858
inc eax
lea ecx, [ebp - 0x748]
push eax
push dword [ebp - 0x748]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x734], 7
mov dword [ebp - 0x738], 0
mov word [ebp - 0x748], ax
test esi, esi
jne 0x1000529e
cmp dword [ebp - 0x464], 0x10
lea eax, [ebp - 0x478]
cmovae eax, dword [ebp - 0x478]
sub esp, 0x28
mov dword [ebp - 0x1c74], eax
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x1c70], eax
mov eax, esp
mov dword [ebp - 0x1b94], esp
mov dword [eax + 0x24], esi
push esi
lea edx, [ebp - 0x1c74]
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5c8]
call fcn.100118f0
add esp, 4
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x490]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x5c8]
push eax
call fcn.1005b73b
mov bl, al
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x5b4]
add esp, 0x30
cmp eax, 8
jb 0x1000490c
inc eax
lea ecx, [ebp - 0x5c8]
push eax
push dword [ebp - 0x5c8]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x5b4], 7
mov dword [ebp - 0x5b8], 0
mov word [ebp - 0x5c8], ax
test bl, bl
je 0x1000547a
call fcn.10004936
push ecx
lea ecx, [ebp - 0x1c30]
call fcn.10001ad0
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0x4ac], 0xf
mov dword [ebp - 0x4b0], 0
mov byte [ebp - 0x4c0], 0
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x478]
cmp dword [ebp - 0x464], 0x10
lea edx, [ebp - 0x1c6c]
push 0
cmovae eax, dword [ebp - 0x478]
lea ecx, [ebp - 0x5e0]
mov dword [ebp - 0x1c6c], eax
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x1c68], eax
call fcn.100118f0
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x4c0]
mov esi, dword [ebp - 0x1bd8]
push eax
lea eax, [ebp - 0x5e0]
or esi, 1
push eax
mov dword [ebp - 0x1bd8], esi
call fcn.1005b855
add esp, 0xc
test al, al
je 0x10005354
cmp dword [ebp - 0x4b0], 0
je 0x10005354
mov bl, 1
jmp 0x10005356
xor bl, bl
mov dword [ebp - 4], 0x27
and esi, 0xfffffffe
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x1bd8], esi
cmp eax, 8
jb 0x10005384
inc eax
lea ecx, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5e0]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x5cc], 7
mov dword [ebp - 0x5d0], 0
mov word [ebp - 0x5e0], ax
test bl, bl
je 0x10005422
cmp dword [ebp - 0x4ac], 0x10
lea ecx, [ebp - 0x4c0]
mov edx, dword [ebp - 0x4b0]
cmovae ecx, dword [ebp - 0x4c0]
sub esp, 0x18
call fcn.1000ca90
mov esi, eax
add esp, 0x18
test esi, esi
je 0x1000541b
push 6
mov edx, 0x100a48f4
lea ecx, [ebp - 0x8f8]
call fcn.10002320
add esp, 4
mov byte [ebp - 4], 0x29
cmp dword [eax + 0x14], 0x10
jb 0x100053f5
mov eax, dword [eax]
mov edx, eax
mov ecx, esi
call fcn.1000cd70
lea ecx, [ebp - 0x8f8]
mov byte [ebp - 4], 0x27
mov edi, eax
call fcn.1000a640
test edi, edi
je 0x10005415
call edi
mov edi, dword [sym.imp.ADVAPI32.dll_RevertToSelf]
mov ecx, esi
call fcn.1000cea0
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x4ac]
cmp eax, 0x10
jb 0x10005444
inc eax
lea ecx, [ebp - 0x4c0]
push eax
push dword [ebp - 0x4c0]
call fcn.1000b3e0
mov dword [ebp - 0x4ac], 0xf
mov dword [ebp - 0x4b0], 0
mov byte [ebp - 0x4c0], 0
mov byte [ebp - 4], 0x2a
mov esi, dword [ebp - 0x1c30]
test esi, esi
je 0x10005476
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x584]
cmp eax, 8
jb 0x1000549c
inc eax
lea ecx, [ebp - 0x598]
push eax
push dword [ebp - 0x598]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x584], 7
mov word [ebp - 0x598], ax
mov dword [ebp - 0x588], 0
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x47c]
cmp eax, 8
jb 0x100054db
inc eax
lea ecx, [ebp - 0x490]
push eax
push dword [ebp - 0x490]
call fcn.1000b4f0
mov ebx, dword [ebp - 0x1b98]
xor eax, eax
mov edi, dword [sym.imp.ADVAPI32.dll_RevertToSelf]
mov esi, dword [ebp - 0x1b80]
mov dword [ebp - 0x47c], 7
mov dword [ebp - 0x480], 0
mov word [ebp - 0x490], ax
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x464]
cmp eax, 0x10
jb 0x1000552c
inc eax
lea ecx, [ebp - 0x478]
push eax
push dword [ebp - 0x478]
call fcn.1000b3e0
inc ebx
mov dword [ebp - 0x464], 0xf
mov dword [ebp - 0x468], 0
mov byte [ebp - 0x478], 0
mov dword [ebp - 0x1b98], ebx
cmp ebx, esi
jb 0x10004512
push 6
mov edx, 0x100a4980
lea ecx, [ebp - 0x730]
call fcn.10002320
add esp, 4
mov byte [ebp - 4], 0x2b
cmp dword [eax + 0x14], 0x10
jb 0x10005577
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x1c44]
call fcn.1005d330
mov bl, al
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x71c]
cmp eax, 0x10
jb 0x100055a7
inc eax
lea ecx, [ebp - 0x730]
push eax
push dword [ebp - 0x730]
call fcn.1000b3e0
mov dword [ebp - 0x71c], 0xf
mov dword [ebp - 0x720], 0
mov byte [ebp - 0x730], 0
test bl, bl
je 0x10006c67
push 6
mov edx, 0x100a4980
lea ecx, [ebp - 0x6e8]
call fcn.10002320
add esp, 4
mov byte [ebp - 4], 0x2c
cmp dword [eax + 0x14], 0x10
jb 0x100055eb
mov eax, dword [eax]
lea ecx, [ebp - 0x438]
push ecx
push eax
lea ecx, [ebp - 0x1c44]
call fcn.1005cc29
mov ecx, eax
call fcn.1005cedb
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x6d4]
cmp eax, 0x10
jb 0x10005627
inc eax
lea ecx, [ebp - 0x6e8]
push eax
push dword [ebp - 0x6e8]
call fcn.1000b3e0
cmp dword [ebp - 0x428], 0
mov dword [ebp - 0x6d4], 0xf
mov dword [ebp - 0x6d8], 0
mov byte [ebp - 0x6e8], 0
je 0x10006c2a
push 0xffffffffffffffff
push 0xa
lea eax, [ebp - 0x6b8]
push eax
lea ecx, [ebp - 0x438]
call fcn.1000a4c0
push eax
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x2f
call fcn.1000a680
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x6a4]
cmp eax, 0x10
jb 0x10005697
inc eax
lea ecx, [ebp - 0x6b8]
push eax
push dword [ebp - 0x6b8]
call fcn.1000b3e0
cmp dword [ebp - 0x424], 0x10
lea eax, [ebp - 0x438]
lea edx, [ebp - 0x438]
mov dword [ebp - 0x6a4], 0xf
cmovae eax, dword [ebp - 0x438]
lea ecx, [ebp - 0x1c5c]
mov dword [ebp - 0x1c5c], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x6a8], 0
mov byte [ebp - 0x6b8], 0
mov dword [ebp - 0x1c58], eax
call fcn.10012ef0
mov esi, dword [ebp - 0x424]
lea eax, [ebp - 0x438]
mov edi, dword [ebp - 0x438]
lea ecx, [ebp - 0x1c54]
mov ebx, dword [ebp - 0x428]
cmp esi, 0x10
mov dword [ebp - 0x1c50], ebx
cmovae eax, edi
mov dword [ebp - 0x1c54], eax
call fcn.10010140
test al, al
je 0x100057fe
cmp esi, 0x10
mov dword [ebp - 0x1c48], ebx
lea eax, [ebp - 0x438]
cmovae eax, edi
lea edx, [ebp - 0x1c4c]
push 0xfde9
lea ecx, [ebp - 0x5f8]
mov dword [ebp - 0x1c4c], eax
call fcn.100118f0
lea edx, [ebp - 0x5f8]
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x610]
call fcn.100119d0
add esp, 4
lea eax, [ebp - 0x610]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x438]
call fcn.1000a680
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x5fc]
cmp eax, 0x10
jb 0x100057a4
inc eax
lea ecx, [ebp - 0x610]
push eax
push dword [ebp - 0x610]
call fcn.1000b3e0
mov dword [ebp - 0x5fc], 0xf
mov dword [ebp - 0x600], 0
mov byte [ebp - 0x610], 0
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x5e4]
cmp eax, 8
jb 0x100057e1
inc eax
lea ecx, [ebp - 0x5f8]
push eax
push dword [ebp - 0x5f8]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x5e4], 7
mov dword [ebp - 0x5e8], 0
mov word [ebp - 0x5f8], ax
push 0
lea ecx, [ebp - 0x1c24]
call fcn.1005c957
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0x32
call fcn.1005d672
push 1
lea eax, [ebp - 0x1c24]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x9b0]
call fcn.1005e3d0
test al, al
je 0x10006cf4
lea ecx, [ebp - 0x1c24]
call fcn.1005d328
test al, al
je 0x10006cf4
push 0
mov ebx, 0x100aeb38
push 0x100a4768
mov ecx, ebx
call fcn.1000afc0
lea ecx, [ebp - 0x1c24]
call fcn.1005d4cd
mov esi, eax
mov dword [ebp - 0x1b90], 0
mov dword [ebp - 0x1b94], esi
test esi, esi
je 0x10006b99
nop dword [eax]
mov eax, dword [0x100adcdc]
cmp eax, dword [0x100aba64]
jg 0x10006b94
jl 0x100058b4
mov eax, dword [0x100adcd8]
cmp eax, dword [0x100aba60]
jae 0x10006b94
lea eax, [ebp - 0x1c24]
mov dword [ebp - 0x1c64], eax
lea ecx, [ebp - 0x1c64]
lea eax, [ebp - 0x1b90]
mov dword [ebp - 0x1c60], eax
call fcn.10006d60
test al, al
jne 0x10006b7f
push 2
mov edx, 0x100a4950
lea ecx, [ebp - 0x910]
call fcn.10002320
add esp, 4
mov byte [ebp - 4], 0x34
cmp dword [eax + 0x14], 0x10
jb 0x10005900
mov eax, dword [eax]
lea ecx, [ebp - 0x4d8]
push ecx
push eax
push dword [ebp - 0x1b90]
lea ecx, [ebp - 0x1c24]
call fcn.1005cb6a
mov ecx, eax
call fcn.1005cc29
mov ecx, eax
call fcn.1005cedb
lea ecx, [ebp - 0x910]
mov byte [ebp - 4], 0x36
call fcn.1000a640
push 1
mov edx, 0x100a49a0
lea ecx, [ebp - 0x880]
call fcn.10002320
add esp, 4
mov byte [ebp - 4], 0x37
cmp dword [eax + 0x14], 0x10
jb 0x10005957
mov eax, dword [eax]
lea ecx, [ebp - 0x5b0]
push ecx
push eax
push dword [ebp - 0x1b90]
lea ecx, [ebp - 0x1c24]
call fcn.1005cb6a
mov ecx, eax
call fcn.1005cc29
mov ecx, eax
call fcn.1005cedb
lea ecx, [ebp - 0x880]
mov byte [ebp - 4], 0x39
call fcn.1000a640
push 4
mov edx, 0x100a49f8
lea ecx, [ebp - 0x8e0]
call fcn.10002320
add esp, 4
mov byte [ebp - 4], 0x3a
cmp dword [eax + 0x14], 0x10
jb 0x100059ae
mov eax, dword [eax]
lea ecx, [ebp - 0x7f0]
push ecx
push eax
push dword [ebp - 0x1b90]
lea ecx, [ebp - 0x1c24]
call fcn.1005cb6a
mov ecx, eax
call fcn.1005cc29
mov ecx, eax
call fcn.1005cedb
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 4], 0x3c
call fcn.1000a640
cmp dword [ebp - 0x59c], 0x10
lea eax, [ebp - 0x5b0]
lea edx, [ebp - 0x1c8c]
cmovae eax, dword [ebp - 0x5b0]
sub esp, 0x18
mov dword [ebp - 0x1c8c], eax
mov ecx, esp
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x1b80], esp
push 0
mov dword [ebp - 0x1c88], eax
call fcn.100118f0
add esp, 4
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0x3c
call fcn.10008370
add esp, 0x18
test al, al
je 0x10006b52
cmp dword [ebp - 0x4c8], 0
je 0x10006b52
push 0x100aea68
call fcn.10011300
add esp, 4
test al, al
jne 0x10005a67
xor edx, edx
mov ecx, 0x100aea68
call fcn.10011520
push 3
mov edx, 0x100a48ec
lea ecx, [ebp - 0x8c8]
call fcn.10002320
add esp, 4
mov byte [ebp - 4], 0x3e
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x10005a8b
mov eax, dword [eax]
push ecx
push 0
push eax
lea ecx, [ebp - 0x4d8]
call fcn.1000ae90
cmp eax, 0xffffffff
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x8c8]
sete bl
call fcn.1000a640
test bl, bl
je 0x10005ade
sub esp, 0x18
lea esi, [ebp - 0x4d8]
mov eax, esi
mov dword [ebp - 0x1b80], esp
mov ecx, esp
push eax
call fcn.1000a810
mov byte [ebp - 4], 0x3f
mov ecx, esi
mov byte [ebp - 4], 0x3c
call fcn.10003220
add esp, 0x18
xor eax, eax
mov dword [ebp - 0x498], 0
push 0xffffffffffffffff
push eax
mov dword [ebp - 0x494], 0
lea ecx, [ebp - 0x4a8]
push 0x100aea68
mov dword [ebp - 0x494], 7
mov dword [ebp - 0x498], 0
mov word [ebp - 0x4a8], ax
call fcn.1000abc0
mov byte [ebp - 4], 0x40
xor eax, eax
mov dword [ebp - 0x450], 0
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x44c], 7
mov dword [ebp - 0x450], 0
mov word [ebp - 0x460], ax
push 7
mov edx, 0x100a4a28
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x568]
call fcn.10002320
push 3
mov edx, 0x100a48ec
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x508]
call fcn.10002320
add esp, 8
mov byte [ebp - 4], 0x43
lea eax, [ebp - 0x568]
push dword [ebp - 0x558]
cmp dword [ebp - 0x554], 0x10
lea ecx, [ebp - 0x4d8]
push 0
cmovae eax, dword [ebp - 0x568]
push eax
call fcn.1000ae90
lea ecx, [ebp - 0x4d8]
cmp eax, 0xffffffff
je 0x10005ce8
push dword [ebp - 0x558]
cmp dword [ebp - 0x554], 0x10
lea eax, [ebp - 0x568]
push 0
cmovae eax, dword [ebp - 0x568]
push eax
call fcn.1000ae90
push dword [ebp - 0x4f8]
mov edi, eax
lea ecx, [ebp - 0x4d8]
add edi, dword [ebp - 0x558]
lea eax, [ebp - 0x508]
cmp dword [ebp - 0x4f4], 0x10
push edi
cmovae eax, dword [ebp - 0x508]
push eax
call fcn.1000ae90
mov esi, eax
lea ecx, [ebp - 0x1cbc]
lea eax, [ebp - 0x4d8]
push eax
call fcn.1000a250
push 0
lea edx, [ebp - 0x1cbc]
lea ecx, [ebp - 0x838]
call fcn.100118f0
add esp, 4
push esi
push edi
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 0x44
push eax
lea ecx, [ebp - 0x838]
call fcn.1000a2c0
sub esp, 8
mov byte [ebp - 4], 0x45
mov ecx, esp
push eax
call fcn.1000a220
lea ecx, [ebp - 0x700]
call fcn.10011ce0
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 0x46
cmp ecx, eax
je 0x10005c86
push 0xffffffffffffffff
push 0
push eax
call fcn.1000abc0
mov byte [ebp - 4], 0x45
mov eax, dword [ebp - 0x6ec]
cmp eax, 8
jb 0x10005ca8
inc eax
lea ecx, [ebp - 0x700]
push eax
push dword [ebp - 0x700]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x6ec], 7
mov dword [ebp - 0x6f0], 0
lea ecx, [ebp - 0x8b0]
mov word [ebp - 0x700], ax
mov byte [ebp - 4], 0x44
call fcn.1000a380
lea ecx, [ebp - 0x838]
mov byte [ebp - 4], 0x43
call fcn.1000a380
jmp 0x10005f52
push dword [ebp - 0x4f8]
cmp dword [ebp - 0x4f4], 0x10
lea eax, [ebp - 0x508]
push 0
cmovae eax, dword [ebp - 0x508]
push eax
call fcn.1000ae90
cmp eax, 0xffffffff
je 0x10005e40
push dword [ebp - 0x4f8]
cmp dword [ebp - 0x4f4], 0x10
lea eax, [ebp - 0x508]
push 0
cmovae eax, dword [ebp - 0x508]
lea ecx, [ebp - 0x4d8]
push eax
call fcn.1000ae90
mov esi, eax
cmp esi, 0xffffffff
je 0x10005f52
push ecx
push esi
lea eax, [ebp - 0x1b8c]
mov byte [ebp - 0x1b8c], 0x2f
push eax
lea ecx, [ebp - 0x4d8]
call fcn.1000ae20
mov ecx, eax
mov eax, dword [ebp - 0x4f8]
sub eax, ecx
dec eax
add eax, esi
push eax
lea eax, [ecx + 1]
push eax
lea eax, [ebp - 0x898]
push eax
lea ecx, [ebp - 0x4d8]
call fcn.1000a4c0
push eax
lea ecx, [ebp - 0x1cc4]
mov byte [ebp - 4], 0x47
call fcn.1000a250
push 0
lea edx, [ebp - 0x1cc4]
lea ecx, [ebp - 0x850]
call fcn.100118f0
push ecx
lea eax, [ebp - 0x850]
mov byte [ebp - 4], 0x48
mov ecx, esp
push eax
call fcn.1000a220
lea ecx, [ebp - 0x7a8]
call fcn.10011ce0
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 0x49
cmp ecx, eax
je 0x10005dde
push 0xffffffffffffffff
push 0
push eax
call fcn.1000abc0
mov byte [ebp - 4], 0x48
mov eax, dword [ebp - 0x794]
cmp eax, 8
jb 0x10005e00
inc eax
lea ecx, [ebp - 0x7a8]
push eax
push dword [ebp - 0x7a8]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x794], 7
mov dword [ebp - 0x798], 0
lea ecx, [ebp - 0x850]
mov word [ebp - 0x7a8], ax
mov byte [ebp - 4], 0x47
call fcn.1000a380
lea ecx, [ebp - 0x898]
mov byte [ebp - 4], 0x43
call fcn.1000a640
jmp 0x10005f52
lea eax, [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0x1cec]
call fcn.1000a250
push 0
lea edx, [ebp - 0x1cec]
lea ecx, [ebp - 0x868]
call fcn.100118f0
push ecx
lea eax, [ebp - 0x868]
mov byte [ebp - 4], 0x4a
mov ecx, esp
push eax
call fcn.1000a220
lea ecx, [ebp - 0x7c0]
call fcn.10011ce0
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 0x4b
cmp ecx, eax
je 0x10005e9b
push 0xffffffffffffffff
push 0
push eax
call fcn.1000abc0
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0x7ac]
cmp eax, 8
jb 0x10005ebd
inc eax
lea ecx, [ebp - 0x7c0]
push eax
push dword [ebp - 0x7c0]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x7ac], 7
mov dword [ebp - 0x7b0], 0
lea ecx, [ebp - 0x868]
mov word [ebp - 0x7c0], ax
mov byte [ebp - 4], 0x43
call fcn.1000a380
lea eax, [ebp - 0x688]
push eax
lea ecx, [ebp - 0x460]
call fcn.10012430
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 0x4c
cmp ecx, eax
je 0x10005f13
push 0xffffffffffffffff
push 0
push eax
call fcn.1000abc0
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x674]
cmp eax, 8
jb 0x10005f35
inc eax
lea ecx, [ebp - 0x688]
push eax
push dword [ebp - 0x688]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x674], 7
mov dword [ebp - 0x678], 0
mov word [ebp - 0x688], ax
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x6a0]
push eax
lea ecx, [ebp - 0x4a8]
call fcn.100127c0
lea ecx, [ebp - 0x4a8]
mov byte [ebp - 4], 0x4d
cmp ecx, eax
je 0x10005f83
push 0xffffffffffffffff
push 0
push eax
call fcn.1000abc0
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x68c]
cmp eax, 8
jb 0x10005fa5
inc eax
lea ecx, [ebp - 0x6a0]
push eax
push dword [ebp - 0x6a0]
call fcn.1000b4f0
sub esp, 0x18
mov dword [ebp - 0x68c], 7
mov ecx, esp
mov dword [ebp - 0x1b80], esp
xor eax, eax
mov dword [ebp - 0x690], 0
mov word [ebp - 0x6a0], ax
push 0xffffffffffffffff
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 7
push eax
mov word [ecx], ax
lea eax, [ebp - 0x4a8]
push eax
call fcn.1000abc0
mov byte [ebp - 4], 0x4e
mov eax, dword [0x100aea00]
test eax, 0xfffffffe
jne 0x10006035
mov ecx, 1
xor eax, eax
mov edx, 0x100aea00
lock cmpxchg dword [edx], ecx
test eax, eax
je 0x1000602b
mov eax, dword [0x100aea00]
cmp eax, 1
jne 0x10006035
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x100aea00]
cmp eax, 1
je 0x10006017
jmp 0x10006035
mov dword [0x100aea00], 0x100aea04
mov eax, dword [0x100aea00]
mov byte [ebp - 4], 0x43
call fcn.1001b630
lea eax, [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0x1ca4]
call fcn.1000a250
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x1b80], esp
mov dword [eax + 0x24], 0
push 0
lea edx, [ebp - 0x1ca4]
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x820]
call fcn.100118f0
add esp, 4
mov byte [ebp - 4], 0x51
lea eax, [ebp - 0x4a8]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x820]
push eax
call fcn.1005b73b
add esp, 0x30
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x820]
mov bl, al
call fcn.1000a380
test bl, bl
je 0x10006ab0
push ecx
lea edx, [ebp - 0x4a8]
lea ecx, [ebp - 0x7d8]
call fcn.100119d0
add esp, 4
mov byte [ebp - 4], 0x53
cmp dword [ebp - 0x7e0], 0
je 0x100060fc
push str.__0z
lea ecx, [ebp - 0x7d8]
call fcn.1000a500
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x7f0]
push ecx
mov ecx, eax
call fcn.1000a540
call fcn.10006101
lea ecx, [ebp - 0x508]
mov byte [ebp - 4], 0x42
call fcn.1000a640
lea ecx, [ebp - 0x568]
mov byte [ebp - 4], 0x41
call fcn.1000a640
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0x44c]
cmp eax, 8
jb 0x10006af0
inc eax
lea ecx, [ebp - 0x460]
push eax
push dword [ebp - 0x460]
call fcn.1000b4f0
xor eax, eax
mov dword [ebp - 0x44c], 7
mov word [ebp - 0x460], ax
mov dword [ebp - 0x450], 0
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x494]
cmp eax, 8
jb 0x10006b2f
inc eax
lea ecx, [ebp - 0x4a8]
push eax
push dword [ebp - 0x4a8]
call fcn.1000b4f0
mov esi, dword [ebp - 0x1b94]
xor eax, eax
mov dword [ebp - 0x494], 7
mov dword [ebp - 0x498], 0
mov word [ebp - 0x4a8], ax
lea ecx, [ebp - 0x7f0]
mov byte [ebp - 4], 0x39
call fcn.1000a640
lea ecx, [ebp - 0x5b0]
mov byte [ebp - 4], 0x36
call fcn.1000a640
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 0x33
call fcn.1000a640
mov eax, dword [ebp - 0x1b90]
inc eax
mov dword [ebp - 0x1b90], eax
cmp eax, esi
jb 0x10005890
mov ebx, 0x100aeb38
mov edx, dword [0x100aeb48]
test edx, edx
je 0x10006c0c
lea ecx, [edx - 1]
cmp edx, ecx
ja 0x10006bb4
push str.invalid_string_position
call fcn.1001dc0f
mov esi, dword [0x100aeb4c]
mov eax, ebx
mov edi, dword [0x100aeb38]
cmp esi, 0x10
cmovae eax, edi
cmp byte [eax + ecx], 0x2c
jne 0x10006bf0
cmp ecx, edx
ja 0x10006be4
cmp esi, 0x10
mov dword [0x100aeb48], ecx
cmovae ebx, edi
mov byte [ebx + ecx], 0
jmp 0x10006bf0
sub ecx, edx
push 0
push ecx
mov ecx, ebx
call fcn.1000b930
call fcn.10006bf5
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0x32
call fcn.100072b0
lea ecx, [ebp - 0x1c24]
mov byte [ebp - 4], 0x2e
call fcn.1005ca7d
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x424]
cmp eax, 0x10
jb 0x10006c4c
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.1000b3e0
mov dword [ebp - 0x424], 0xf
mov dword [ebp - 0x428], 0
mov byte [ebp - 0x438], 0
mov bl, 1
lea ecx, [ebp - 0x1c9c]
mov byte [ebp - 4], 4
call fcn.1005ca7d
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x524]
cmp eax, 0x10
jb 0x10006c9a
inc eax
lea ecx, [ebp - 0x538]
push eax
push dword [ebp - 0x538]
call fcn.1000b3e0
mov dword [ebp - 0x524], 0xf
mov dword [ebp - 0x528], 0
mov byte [ebp - 0x538], 0
lea ecx, [ebp - 0xa20]
mov byte [ebp - 4], 0
call fcn.100072b0
lea ecx, [ebp - 0x1c44]
mov dword [ebp - 4], 0xffffffff
call fcn.1005ca7d
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001ecda
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0x32
call fcn.100072b0
lea ecx, [ebp - 0x1c24]
mov byte [ebp - 4], 0x2e
call fcn.1005ca7d
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x424]
cmp eax, 0x10
jb 0x10006d34
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.1000b3e0
mov dword [ebp - 0x424], 0xf
xor bl, bl
mov dword [ebp - 0x428], 0
mov byte [ebp - 0x438], 0
jmp 0x10006c69