Function at 0x10037986
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004f523
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x10cfc
call fcn.10026a20
mov eax, dword [0x1005a030]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x10aa0], ecx
mov dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [ebp - 0x10aa0]
mov dl, byte [ecx + 0x118]
mov byte [eax + 0x4cc], dl
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [ebp - 0x10aa0]
mov edx, dword [ecx + 0x11c]
mov dword [eax + 0x4ce], edx
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [ebp - 0x10aa0]
mov edx, dword [ecx + 0x120]
mov dword [eax + 0x4d2], edx
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [ebp - 0x10aa0]
mov dl, byte [ecx + 0x16a]
mov byte [eax + 0x4d6], dl
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [ebp - 0x10aa0]
mov dl, byte [ecx + 0x16b]
mov byte [eax + 0x4d7], dl
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [ebp - 0x10aa0]
mov dl, byte [ecx + 0x16c]
mov byte [eax + 0x4d8], dl
mov eax, dword [ebp - 0x10aa0]
movzx ecx, byte [eax + 0x1365f]
mov edx, dword [ebp - 0x10aa0]
mov dword [edx + 0x4d9], ecx
mov eax, dword [ebp - 0x10aa0]
add eax, 0x4e9
mov dword [ebp - 0x554], eax
push 0xcc
push 0
lea ecx, [ebp - 0x310]
push ecx
call fcn.1001c970
add esp, 0xc
push 0x46
mov edx, dword [ebp - 0x10aa0]
add edx, 0x124
push edx
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [eax + 0x38]
push ecx
call fcn.100290e0
add esp, 0xc
push 0x64
lea edx, [ebp - 0x310]
push edx
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [eax + 0x3c]
push ecx
call fcn.100290e0
add esp, 0xc
push 0x50
lea edx, [ebp - 0x2ac]
push edx
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [eax + 0x40]
push ecx
call fcn.100290e0
add esp, 0xc
push 0x14
lea edx, [ebp - 0x25c]
push edx
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [eax + 0x44]
push ecx
call fcn.100290e0
add esp, 0xc
mov dword [ebp - 0x550], 0
push 0x219
push 0
lea edx, [ebp - 0x240]
push edx
call fcn.1001c970
add esp, 0xc
lea eax, [ebp - 0x310]
mov dword [ebp - 0x10aa4], eax
mov ecx, dword [ebp - 0x10aa4]
add ecx, 1
mov dword [ebp - 0x10aa8], ecx
mov edx, dword [ebp - 0x10aa4]
mov al, byte [edx]
mov byte [ebp - 0x10aa9], al
add dword [ebp - 0x10aa4], 1
cmp byte [ebp - 0x10aa9], 0
jne 0x100372c3
mov ecx, dword [ebp - 0x10aa4]
sub ecx, dword [ebp - 0x10aa8]
mov dword [ebp - 0x10ab0], ecx
mov dl, byte [ebp - 0x10ab0]
mov byte [ebp - 0x23e], dl
lea eax, [ebp - 0x2ac]
mov dword [ebp - 0x10ab4], eax
mov ecx, dword [ebp - 0x10ab4]
add ecx, 1
mov dword [ebp - 0x10ab8], ecx
mov edx, dword [ebp - 0x10ab4]
mov al, byte [edx]
mov byte [ebp - 0x10ab9], al
add dword [ebp - 0x10ab4], 1
cmp byte [ebp - 0x10ab9], 0
jne 0x1003731a
mov ecx, dword [ebp - 0x10ab4]
sub ecx, dword [ebp - 0x10ab8]
mov dword [ebp - 0x10ac0], ecx
mov dl, byte [ebp - 0x10ac0]
mov byte [ebp - 0x23d], dl
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x10ac4], eax
mov ecx, dword [ebp - 0x10ac4]
add ecx, 1
mov dword [ebp - 0x10ac8], ecx
mov edx, dword [ebp - 0x10ac4]
mov al, byte [edx]
mov byte [ebp - 0x10ac9], al
add dword [ebp - 0x10ac4], 1
cmp byte [ebp - 0x10ac9], 0
jne 0x10037371
mov ecx, dword [ebp - 0x10ac4]
sub ecx, dword [ebp - 0x10ac8]
mov dword [ebp - 0x10ad0], ecx
mov dl, byte [ebp - 0x10ad0]
mov byte [ebp - 0x23c], dl
mov eax, dword [ebp - 0x10aa0]
add eax, 0x124
mov dword [ebp - 0x10ad4], eax
mov ecx, dword [ebp - 0x10ad4]
add ecx, 1
mov dword [ebp - 0x10ad8], ecx
mov edx, dword [ebp - 0x10ad4]
mov al, byte [edx]
mov byte [ebp - 0x10ad9], al
add dword [ebp - 0x10ad4], 1
cmp byte [ebp - 0x10ad9], 0
jne 0x100373cd
mov ecx, dword [ebp - 0x10ad4]
sub ecx, dword [ebp - 0x10ad8]
mov dword [ebp - 0x10ae0], ecx
mov dl, byte [ebp - 0x10ae0]
mov byte [ebp - 0x23b], dl
mov eax, dword [ebp - 0x10aa0]
add eax, 0x461
mov dword [ebp - 0x10ae4], eax
mov ecx, dword [ebp - 0x10ae4]
add ecx, 1
mov dword [ebp - 0x10ae8], ecx
mov edx, dword [ebp - 0x10ae4]
mov al, byte [edx]
mov byte [ebp - 0x10ae9], al
add dword [ebp - 0x10ae4], 1
cmp byte [ebp - 0x10ae9], 0
jne 0x10037429
mov ecx, dword [ebp - 0x10ae4]
sub ecx, dword [ebp - 0x10ae8]
mov dword [ebp - 0x10af0], ecx
mov dl, byte [ebp - 0x10af0]
mov byte [ebp - 0x23a], dl
mov eax, dword [ebp - 0x10aa0]
add eax, 0x49d
mov dword [ebp - 0x10af4], eax
mov ecx, dword [ebp - 0x10af4]
add ecx, 1
mov dword [ebp - 0x10af8], ecx
mov edx, dword [ebp - 0x10af4]
mov al, byte [edx]
mov byte [ebp - 0x10af9], al
add dword [ebp - 0x10af4], 1
cmp byte [ebp - 0x10af9], 0
jne 0x10037485
mov ecx, dword [ebp - 0x10af4]
sub ecx, dword [ebp - 0x10af8]
mov dword [ebp - 0x10b00], ecx
mov dl, byte [ebp - 0x10b00]
mov byte [ebp - 0x239], dl
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [eax + 0x135f4]
mov dword [ebp - 0x238], ecx
mov ecx, dword [ebp - 0x10aa0]
call fcn.10030160
mov byte [ebp - 0x234], al
mov edx, dword [ebp - 0x10aa0]
mov eax, dword [edx + 0x27c]
mov dword [ebp - 0x233], eax
movzx ecx, byte [ebp - 0x23e]
push ecx
lea edx, [ebp - 0x310]
push edx
lea eax, [ebp - 0x22f]
push eax
call fcn.1001d000
add esp, 0xc
movzx ecx, byte [ebp - 0x23e]
add ecx, dword [ebp - 0x550]
mov dword [ebp - 0x550], ecx
movzx edx, byte [ebp - 0x23d]
push edx
lea eax, [ebp - 0x2ac]
push eax
mov ecx, dword [ebp - 0x550]
lea edx, [ebp + ecx - 0x22f]
push edx
call fcn.1001d000
add esp, 0xc
movzx eax, byte [ebp - 0x23d]
add eax, dword [ebp - 0x550]
mov dword [ebp - 0x550], eax
movzx ecx, byte [ebp - 0x23c]
push ecx
lea edx, [ebp - 0x25c]
push edx
mov eax, dword [ebp - 0x550]
lea ecx, [ebp + eax - 0x22f]
push ecx
call fcn.1001d000
add esp, 0xc
movzx edx, byte [ebp - 0x23c]
add edx, dword [ebp - 0x550]
mov dword [ebp - 0x550], edx
movzx eax, byte [ebp - 0x23b]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x124
push ecx
mov edx, dword [ebp - 0x550]
lea eax, [ebp + edx - 0x22f]
push eax
call fcn.1001d000
add esp, 0xc
movzx ecx, byte [ebp - 0x23b]
add ecx, dword [ebp - 0x550]
mov dword [ebp - 0x550], ecx
movzx edx, byte [ebp - 0x23a]
push edx
mov eax, dword [ebp - 0x10aa0]
add eax, 0x461
push eax
mov ecx, dword [ebp - 0x550]
lea edx, [ebp + ecx - 0x22f]
push edx
call fcn.1001d000
add esp, 0xc
movzx eax, byte [ebp - 0x23a]
add eax, dword [ebp - 0x550]
mov dword [ebp - 0x550], eax
movzx ecx, byte [ebp - 0x239]
push ecx
mov edx, dword [ebp - 0x10aa0]
add edx, 0x49d
push edx
mov eax, dword [ebp - 0x550]
lea ecx, [ebp + eax - 0x22f]
push ecx
call fcn.1001d000
add esp, 0xc
movzx edx, byte [ebp - 0x239]
add edx, dword [ebp - 0x550]
mov dword [ebp - 0x550], edx
mov eax, dword [ebp - 0x550]
add eax, 0x11
mov dword [ebp - 0x550], eax
mov cx, word [ebp - 0x550]
mov word [ebp - 0x240], cx
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x10aa0]
lea ecx, [eax + edx + 0x4e9]
mov dword [ebp - 0x558], ecx
mov edx, dword [ebp - 0x550]
push edx
lea eax, [ebp - 0x240]
push eax
mov ecx, dword [ebp - 0x570]
mov edx, dword [ebp - 0x10aa0]
lea eax, [edx + ecx + 0x4e9]
push eax
call fcn.1001d000
add esp, 0xc
mov ecx, dword [ebp - 0x570]
add ecx, dword [ebp - 0x550]
mov dword [ebp - 0x570], ecx
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x10aa0]
lea ecx, [eax + edx + 0x4e9]
mov dword [ebp - 0x54c], ecx
mov edx, dword [ebp - 0x10aa0]
cmp dword [edx + 0x1351c], 0
je 0x100376f1
xor eax, eax
jmp 0x1003a747
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xa38]
call fcn.100495d0
mov dword [ebp - 0x10b04], eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x10aa0]
add eax, 0x136ac
push eax
lea ecx, [ebp - 0xa70]
call fcn.10001b30
mov dword [ebp - 0x10b08], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa70]
call fcn.10001b90
push eax
lea ecx, [ebp - 0xa54]
push ecx
call fcn.10049890
add esp, 8
mov dword [ebp - 0x10b0c], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa90]
call fcn.100073c0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa70]
call fcn.10001b90
push eax
lea ecx, [ebp - 0xa38]
call fcn.10049600
mov dword [ebp - 0x10b10], eax
cmp dword [ebp - 0x10b10], 0
je 0x100377de
mov edx, dword [ebp - 0x10aa0]
add edx, 0x13b54
push edx
lea eax, [ebp - 0x107f0]
push eax
lea ecx, [ebp - 0xa38]
call fcn.10049750
mov dword [ebp - 0x10b14], eax
mov ecx, dword [ebp - 0x10b14]
mov dword [ebp - 0x10b18], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x10b18]
push edx
lea ecx, [ebp - 0xa90]
call fcn.1000b190
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x107f0]
call fcn.10001b60
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x136ac
call fcn.10001b90
mov dword [ebp - 0x10b1c], eax
mov eax, dword [ebp - 0x10aa0]
add eax, 0x174
mov dword [ebp - 0x10b20], eax
mov ecx, dword [ebp - 0x10b20]
mov dword [ebp - 0x10b24], ecx
mov edx, dword [ebp - 0x10b1c]
mov al, byte [edx]
mov byte [ebp - 0x10b25], al
mov ecx, dword [ebp - 0x10b20]
mov dl, byte [ebp - 0x10b25]
mov byte [ecx], dl
mov eax, dword [ebp - 0x10b1c]
add eax, 1
mov dword [ebp - 0x10b1c], eax
mov ecx, dword [ebp - 0x10b20]
add ecx, 1
mov dword [ebp - 0x10b20], ecx
cmp byte [ebp - 0x10b25], 0
jne 0x10037812
push 0x14
lea ecx, [ebp - 0xa54]
call fcn.10001b90
push eax
mov edx, dword [ebp - 0x10aa0]
add edx, 0x280
push edx
call fcn.10030060
add esp, 0xc
push 0x50
lea ecx, [ebp - 0xa90]
call fcn.10001b90
push eax
mov eax, dword [ebp - 0x10aa0]
add eax, 0x294
push eax
call fcn.10030060
add esp, 0xc
lea ecx, [ebp - 0xa74]
call fcn.10047df0
mov dword [ebp - 0x10b2c], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xaac]
call fcn.100073c0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x136ac
call fcn.10001b90
push eax
lea ecx, [ebp - 0xa74]
call fcn.10048860
mov dword [ebp - 0x10b30], eax
mov ecx, dword [ebp - 0x10b30]
push ecx
lea ecx, [ebp - 0xaac]
call fcn.10035370
push 0x21
lea ecx, [ebp - 0xaac]
call fcn.10001b90
push eax
mov edx, dword [ebp - 0x10aa0]
add edx, 0x2e4
push edx
call fcn.10030060
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xaac]
call fcn.10001b60
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa74]
call fcn.10047e00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa90]
call fcn.10001b60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa54]
call fcn.10001b60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa70]
call fcn.10001b60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa38]
call fcn.100495e0
jmp 0x1003797f
mov dword [ebp - 4], 0xffffffff
push 0x22f
push 0
lea eax, [ebp - 0x9f8]
push eax
call fcn.1001c970
add esp, 0xc
mov dword [ebp - 0x594], 0
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x174
mov dword [ebp - 0x10b34], ecx
mov edx, dword [ebp - 0x10b34]
add edx, 1
mov dword [ebp - 0x10b38], edx
mov eax, dword [ebp - 0x10b34]
mov cl, byte [eax]
mov byte [ebp - 0x10b39], cl
add dword [ebp - 0x10b34], 1
cmp byte [ebp - 0x10b39], 0
jne 0x100379c7
mov edx, dword [ebp - 0x10b34]
sub edx, dword [ebp - 0x10b38]
mov dword [ebp - 0x10b40], edx
mov al, byte [ebp - 0x10b40]
mov byte [ebp - 0x9f6], al
mov ecx, dword [ebp - 0x10aa0]
mov dl, byte [ecx + 0x278]
mov byte [ebp - 0x9f5], dl
mov eax, dword [ebp - 0x10aa0]
add eax, 0x280
mov dword [ebp - 0x10b44], eax
mov ecx, dword [ebp - 0x10b44]
add ecx, 1
mov dword [ebp - 0x10b48], ecx
mov edx, dword [ebp - 0x10b44]
mov al, byte [edx]
mov byte [ebp - 0x10b49], al
add dword [ebp - 0x10b44], 1
cmp byte [ebp - 0x10b49], 0
jne 0x10037a35
mov ecx, dword [ebp - 0x10b44]
sub ecx, dword [ebp - 0x10b48]
mov dword [ebp - 0x10b50], ecx
mov dl, byte [ebp - 0x10b50]
mov byte [ebp - 0x9f4], dl
mov eax, dword [ebp - 0x10aa0]
add eax, 0x294
mov dword [ebp - 0x10b54], eax
mov ecx, dword [ebp - 0x10b54]
add ecx, 1
mov dword [ebp - 0x10b58], ecx
mov edx, dword [ebp - 0x10b54]
mov al, byte [edx]
mov byte [ebp - 0x10b59], al
add dword [ebp - 0x10b54], 1
cmp byte [ebp - 0x10b59], 0
jne 0x10037a91
mov ecx, dword [ebp - 0x10b54]
sub ecx, dword [ebp - 0x10b58]
mov dword [ebp - 0x10b60], ecx
mov dl, byte [ebp - 0x10b60]
mov byte [ebp - 0x9f3], dl
mov esi, dword [ebp - 0x10aa0]
add esi, 0x2e4
mov ecx, 8
lea edi, [ebp - 0x9f2]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
movzx eax, byte [ebp - 0x9f6]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x174
push ecx
lea edx, [ebp - 0x9d1]
push edx
call fcn.1001d000
add esp, 0xc
movzx eax, byte [ebp - 0x9f6]
add eax, dword [ebp - 0x594]
mov dword [ebp - 0x594], eax
movzx ecx, byte [ebp - 0x9f4]
push ecx
mov edx, dword [ebp - 0x10aa0]
add edx, 0x280
push edx
mov eax, dword [ebp - 0x594]
lea ecx, [ebp + eax - 0x9d1]
push ecx
call fcn.1001d000
add esp, 0xc
movzx edx, byte [ebp - 0x9f4]
add edx, dword [ebp - 0x594]
mov dword [ebp - 0x594], edx
movzx eax, byte [ebp - 0x9f3]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x294
push ecx
mov edx, dword [ebp - 0x594]
lea eax, [ebp + edx - 0x9d1]
push eax
call fcn.1001d000
add esp, 0xc
movzx ecx, byte [ebp - 0x9f3]
add ecx, dword [ebp - 0x594]
mov dword [ebp - 0x594], ecx
mov edx, dword [ebp - 0x594]
add edx, 0x27
mov dword [ebp - 0x594], edx
mov ax, word [ebp - 0x594]
mov word [ebp - 0x9f8], ax
mov ecx, dword [ebp - 0x594]
push ecx
lea edx, [ebp - 0x9f8]
push edx
mov eax, dword [ebp - 0x570]
mov ecx, dword [ebp - 0x10aa0]
lea edx, [ecx + eax + 0x4e9]
push edx
call fcn.1001d000
add esp, 0xc
mov eax, dword [ebp - 0x570]
mov ecx, dword [ebp - 0x10aa0]
lea edx, [ecx + eax + 0x4e9]
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0x570]
add eax, dword [ebp - 0x594]
mov dword [ebp - 0x570], eax
push 0x22f
push 0
lea ecx, [ebp - 0x7c8]
push ecx
call fcn.1001c970
add esp, 0xc
mov dword [ebp - 0x580], 0
mov edx, dword [ebp - 0x10aa0]
add edx, 0x308
mov dword [ebp - 0x10b64], edx
mov eax, dword [ebp - 0x10b64]
add eax, 1
mov dword [ebp - 0x10b68], eax
mov ecx, dword [ebp - 0x10b64]
mov dl, byte [ecx]
mov byte [ebp - 0x10b69], dl
add dword [ebp - 0x10b64], 1
cmp byte [ebp - 0x10b69], 0
jne 0x10037c4d
mov eax, dword [ebp - 0x10b64]
sub eax, dword [ebp - 0x10b68]
mov dword [ebp - 0x10b70], eax
mov cl, byte [ebp - 0x10b70]
mov byte [ebp - 0x7c6], cl
mov edx, dword [ebp - 0x10aa0]
add edx, 0x40c
mov dword [ebp - 0x10b74], edx
mov eax, dword [ebp - 0x10b74]
add eax, 1
mov dword [ebp - 0x10b78], eax
mov ecx, dword [ebp - 0x10b74]
mov dl, byte [ecx]
mov byte [ebp - 0x10b79], dl
add dword [ebp - 0x10b74], 1
cmp byte [ebp - 0x10b79], 0
jne 0x10037caa
mov eax, dword [ebp - 0x10b74]
sub eax, dword [ebp - 0x10b78]
mov dword [ebp - 0x10b80], eax
mov cl, byte [ebp - 0x10b80]
mov byte [ebp - 0x7c5], cl
mov edx, dword [ebp - 0x10aa0]
add edx, 0x420
mov dword [ebp - 0x10b84], edx
mov eax, dword [ebp - 0x10b84]
add eax, 1
mov dword [ebp - 0x10b88], eax
mov ecx, dword [ebp - 0x10b84]
mov dl, byte [ecx]
mov byte [ebp - 0x10b89], dl
add dword [ebp - 0x10b84], 1
cmp byte [ebp - 0x10b89], 0
jne 0x10037d07
mov eax, dword [ebp - 0x10b84]
sub eax, dword [ebp - 0x10b88]
mov dword [ebp - 0x10b90], eax
mov cl, byte [ebp - 0x10b90]
mov byte [ebp - 0x7c4], cl
movzx edx, byte [ebp - 0x7c6]
push edx
mov eax, dword [ebp - 0x10aa0]
add eax, 0x308
push eax
lea ecx, [ebp - 0x7a1]
push ecx
call fcn.1001d000
add esp, 0xc
movzx edx, byte [ebp - 0x7c6]
add edx, dword [ebp - 0x580]
mov dword [ebp - 0x580], edx
movzx eax, byte [ebp - 0x7c5]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x40c
push ecx
mov edx, dword [ebp - 0x580]
lea eax, [ebp + edx - 0x7a1]
push eax
call fcn.1001d000
add esp, 0xc
movzx ecx, byte [ebp - 0x7c5]
add ecx, dword [ebp - 0x580]
mov dword [ebp - 0x580], ecx
movzx edx, byte [ebp - 0x7c4]
push edx
mov eax, dword [ebp - 0x10aa0]
add eax, 0x420
push eax
mov ecx, dword [ebp - 0x580]
lea edx, [ebp + ecx - 0x7a1]
push edx
call fcn.1001d000
add esp, 0xc
movzx eax, byte [ebp - 0x7c4]
add eax, dword [ebp - 0x580]
mov dword [ebp - 0x580], eax
mov esi, dword [ebp - 0x10aa0]
add esi, 0x42c
mov ecx, 8
lea edi, [ebp - 0x7c3]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x580]
add ecx, 0x27
mov dword [ebp - 0x580], ecx
mov dx, word [ebp - 0x580]
mov word [ebp - 0x7c8], dx
mov eax, dword [ebp - 0x580]
push eax
lea ecx, [ebp - 0x7c8]
push ecx
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x10aa0]
lea ecx, [eax + edx + 0x4e9]
push ecx
call fcn.1001d000
add esp, 0xc
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x10aa0]
lea ecx, [eax + edx + 0x4e9]
mov dword [ebp - 0x56c], ecx
mov edx, dword [ebp - 0x570]
add edx, dword [ebp - 0x580]
mov dword [ebp - 0x570], edx
mov byte [ebp - 0x58c], 0x73
mov byte [ebp - 0x58b], 0x79
mov byte [ebp - 0x58a], 0x73
mov byte [ebp - 0x589], 0x74
mov byte [ebp - 0x588], 0x65
mov byte [ebp - 0x587], 0x6d
mov byte [ebp - 0x586], 0x33
mov byte [ebp - 0x585], 0x32
mov byte [ebp - 0x584], 0
mov byte [ebp - 0x20], 0x73
mov byte [ebp - 0x1f], 0x79
mov byte [ebp - 0x1e], 0x73
mov byte [ebp - 0x1d], 0x77
mov byte [ebp - 0x1c], 0x6f
mov byte [ebp - 0x1b], 0x77
mov byte [ebp - 0x1a], 0x36
mov byte [ebp - 0x19], 0x34
mov byte [ebp - 0x18], 0
mov byte [ebp - 0x57c], 0x4d
mov byte [ebp - 0x57b], 0x69
mov byte [ebp - 0x57a], 0x63
mov byte [ebp - 0x579], 0x72
mov byte [ebp - 0x578], 0x6f
mov byte [ebp - 0x577], 0x73
mov byte [ebp - 0x576], 0x6f
mov byte [ebp - 0x575], 0x66
mov byte [ebp - 0x574], 0x74
mov byte [ebp - 0x573], 0
mov byte [ebp - 0x568], 0x4c
mov byte [ebp - 0x567], 0x65
mov byte [ebp - 0x566], 0x67
mov byte [ebp - 0x565], 0x61
mov byte [ebp - 0x564], 0x6c
mov byte [ebp - 0x563], 0x43
mov byte [ebp - 0x562], 0x6f
mov byte [ebp - 0x561], 0x70
mov byte [ebp - 0x560], 0x79
mov byte [ebp - 0x55f], 0x72
mov byte [ebp - 0x55e], 0x69
mov byte [ebp - 0x55d], 0x67
mov byte [ebp - 0x55c], 0x68
mov byte [ebp - 0x55b], 0x74
mov byte [ebp - 0x55a], 0
mov dword [ebp - 4], 9
mov byte [ebp - 0xfc38], 0
push 0x103
push 0
lea eax, [ebp - 0xfc37]
push eax
call fcn.1001c970
add esp, 0xc
push 0x706c
push 0
lea ecx, [ebp - 0xfb34]
push ecx
call fcn.1001c970
add esp, 0xc
mov dword [ebp - 0x6950], 0
jmp 0x10037fe7
mov edx, dword [ebp - 0x6950]
add edx, 1
mov dword [ebp - 0x6950], edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13644
call fcn.10032960
cmp dword [ebp - 0x6950], eax
jae 0x10038440
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10aa0]
cmp dword [eax + 0x1351c], 0
je 0x10038022
xor eax, eax
jmp 0x1003a747
cmp dword [ebp - 0x6950], 0x3b
jbe 0x10038030
jmp 0x10038440
mov ecx, dword [ebp - 0x6950]
push ecx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13644
call fcn.10032980
push eax
lea ecx, [ebp - 0xfc74]
call fcn.10001af0
mov dword [ebp - 0x10b94], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xfc74]
call fcn.10001b90
push eax
lea edx, [ebp - 0xfcf0]
push edx
call fcn.10049890
add esp, 8
mov dword [ebp - 0x10b98], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xfcd4]
call fcn.100073c0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xfc54]
call fcn.100073c0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xfcb8]
call fcn.100495d0
mov dword [ebp - 0x10b9c], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xfc74]
call fcn.10001b90
push eax
lea ecx, [ebp - 0xfcb8]
call fcn.10049600
mov dword [ebp - 0x10ba0], eax
cmp dword [ebp - 0x10ba0], 0
je 0x10038185
mov eax, dword [ebp - 0x10aa0]
add eax, 0x13b54
push eax
lea ecx, [ebp - 0x1080c]
push ecx
lea ecx, [ebp - 0xfcb8]
call fcn.10049750
mov dword [ebp - 0x10ba4], eax
mov edx, dword [ebp - 0x10ba4]
mov dword [ebp - 0x10ba8], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x10ba8]
push eax
lea ecx, [ebp - 0xfcd4]
call fcn.1000b190
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1080c]
call fcn.10001b60
lea ecx, [ebp - 0x568]
push ecx
lea edx, [ebp - 0x10828]
push edx
lea ecx, [ebp - 0xfcb8]
call fcn.10049750
mov dword [ebp - 0x10bac], eax
mov eax, dword [ebp - 0x10bac]
mov dword [ebp - 0x10bb0], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x10bb0]
push ecx
lea ecx, [ebp - 0xfc54]
call fcn.1000b190
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x10828]
call fcn.10001b60
mov esi, dword [ebp - 0x6950]
imul esi, esi, 0x1e4
mov edx, dword [ebp - 0x6950]
push edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13644
call fcn.10032980
mov al, byte [eax + 0x104]
mov byte [ebp + esi - 0xfb34], al
mov esi, dword [ebp - 0x6950]
imul esi, esi, 0x1e4
mov ecx, dword [ebp - 0x6950]
push ecx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13644
call fcn.10032980
mov dl, byte [eax + 0x105]
mov byte [ebp + esi - 0xfb33], dl
mov esi, dword [ebp - 0x6950]
imul esi, esi, 0x1e4
mov eax, dword [ebp - 0x6950]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13644
call fcn.10032980
mov ecx, dword [eax + 0x108]
mov dword [ebp + esi - 0xfb30], ecx
lea ecx, [ebp - 0xfc74]
call fcn.10001b90
mov dword [ebp - 0x10bb4], eax
mov edx, dword [ebp - 0x6950]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0xfc38]
mov dword [ebp - 0x10bb8], eax
mov ecx, dword [ebp - 0x10bb8]
mov dword [ebp - 0x10bbc], ecx
mov edx, dword [ebp - 0x10bb4]
mov al, byte [edx]
mov byte [ebp - 0x10bbd], al
mov ecx, dword [ebp - 0x10bb8]
mov dl, byte [ebp - 0x10bbd]
mov byte [ecx], dl
mov eax, dword [ebp - 0x10bb4]
add eax, 1
mov dword [ebp - 0x10bb4], eax
mov ecx, dword [ebp - 0x10bb8]
add ecx, 1
mov dword [ebp - 0x10bb8], ecx
cmp byte [ebp - 0x10bbd], 0
jne 0x1003824e
push 0x14
lea ecx, [ebp - 0xfcf0]
call fcn.10001b90
push eax
mov edx, dword [ebp - 0x6950]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0xfb2c]
push eax
call fcn.10030060
add esp, 0xc
push 0x50
lea ecx, [ebp - 0xfcd4]
call fcn.10001b90
push eax
mov ecx, dword [ebp - 0x6950]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0xfb18]
push edx
call fcn.10030060
add esp, 0xc
push 0x50
lea ecx, [ebp - 0xfc54]
call fcn.10001b90
push eax
mov eax, dword [ebp - 0x6950]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0xfaa7]
push ecx
call fcn.10030060
add esp, 0xc
lea ecx, [ebp - 0xfc58]
call fcn.10047df0
mov dword [ebp - 0x10bc4], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xfd0c]
call fcn.100073c0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xfc74]
call fcn.10001b90
push eax
lea ecx, [ebp - 0xfc58]
call fcn.10048860
mov dword [ebp - 0x10bc8], eax
mov edx, dword [ebp - 0x10bc8]
push edx
lea ecx, [ebp - 0xfd0c]
call fcn.10035370
lea ecx, [ebp - 0xfd0c]
call fcn.10032950
movzx eax, al
test eax, eax
jne 0x100383d2
push 0x21
lea ecx, [ebp - 0xfd0c]
call fcn.10001b90
push eax
mov ecx, dword [ebp - 0x6950]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0xfac8]
push edx
call fcn.10030060
add esp, 0xc
push 0x21
lea ecx, [ebp - 0xfd0c]
call fcn.10001b90
push eax
mov eax, dword [ebp - 0x6950]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13644
call fcn.10032980
add eax, 0x170
push eax
call fcn.10030060
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xfd0c]
call fcn.10001b60
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xfc58]
call fcn.10047e00
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xfcb8]
call fcn.100495e0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xfc54]
call fcn.10001b60
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xfcd4]
call fcn.10001b60
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xfcf0]
call fcn.10001b60
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xfc74]
call fcn.10001b60
jmp 0x10037fd8
mov dword [ebp - 0x694c], 0
mov dword [ebp - 0x8ac8], 0
jmp 0x10038465
mov ecx, dword [ebp - 0x8ac8]
add ecx, 1
mov dword [ebp - 0x8ac8], ecx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13614
call fcn.10032960
cmp dword [ebp - 0x8ac8], eax
jae 0x100389b1
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x10aa0]
cmp dword [edx + 0x1351c], 0
je 0x100384a0
xor eax, eax
jmp 0x1003a747
mov eax, dword [ebp - 0x694c]
add eax, dword [ebp - 0x6950]
cmp eax, 0x3b
jbe 0x100384b6
jmp 0x100389b1
lea ecx, [ebp - 0xfdd0]
call fcn.10033970
mov dword [ebp - 0xfd4c], 0
lea ecx, [ebp - 0x10830]
push ecx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13644
call fcn.100342f0
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0xfdd0], edx
mov dword [ebp - 0xfdcc], eax
lea ecx, [ebp - 0x10838]
push ecx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13644
call fcn.10034320
push eax
lea ecx, [ebp - 0xfdd0]
call fcn.10033450
movzx edx, al
test edx, edx
je 0x10038587
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x8ac8]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13614
call fcn.10032980
add eax, 0x170
push eax
lea ecx, [ebp - 0xfdd0]
call fcn.10033980
add eax, 0x170
push eax
call fcn.1002fd20
add esp, 8
test eax, eax
jne 0x1003856e
mov dword [ebp - 0xfd4c], 1
jmp 0x10038587
push 0
lea ecx, [ebp - 0x10840]
push ecx
lea ecx, [ebp - 0xfdd0]
call fcn.100338e0
jmp 0x100384f4
cmp dword [ebp - 0xfd4c], 0
je 0x10038595
jmp 0x10038456
mov edx, dword [ebp - 0x8ac8]
push edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13614
call fcn.10032980
push eax
lea ecx, [ebp - 0xfd48]
call fcn.10001af0
mov dword [ebp - 0x10bcc], eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xfd48]
call fcn.10001b90
push eax
lea eax, [ebp - 0xfdc8]
push eax
call fcn.10049890
add esp, 8
mov dword [ebp - 0x10bd0], eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xfdac]
call fcn.100073c0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xfd28]
call fcn.100073c0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xfd90]
call fcn.100495d0
mov dword [ebp - 0x10bd4], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xfd48]
call fcn.10001b90
push eax
lea ecx, [ebp - 0xfd90]
call fcn.10049600
mov dword [ebp - 0x10bd8], eax
cmp dword [ebp - 0x10bd8], 0
je 0x100386eb
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13b54
push ecx
lea edx, [ebp - 0x1085c]
push edx
lea ecx, [ebp - 0xfd90]
call fcn.10049750
mov dword [ebp - 0x10bdc], eax
mov eax, dword [ebp - 0x10bdc]
mov dword [ebp - 0x10be0], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x10be0]
push ecx
lea ecx, [ebp - 0xfdac]
call fcn.1000b190
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1085c]
call fcn.10001b60
lea edx, [ebp - 0x568]
push edx
lea eax, [ebp - 0x10878]
push eax
lea ecx, [ebp - 0xfd90]
call fcn.10049750
mov dword [ebp - 0x10be4], eax
mov ecx, dword [ebp - 0x10be4]
mov dword [ebp - 0x10be8], ecx
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x10be8]
push edx
lea ecx, [ebp - 0xfd28]
call fcn.1000b190
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x10878]
call fcn.10001b60
mov esi, dword [ebp - 0x694c]
add esi, dword [ebp - 0x6950]
imul esi, esi, 0x1e4
mov eax, dword [ebp - 0x8ac8]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13614
call fcn.10032980
mov cl, byte [eax + 0x104]
mov byte [ebp + esi - 0xfb34], cl
mov esi, dword [ebp - 0x694c]
add esi, dword [ebp - 0x6950]
imul esi, esi, 0x1e4
mov edx, dword [ebp - 0x8ac8]
push edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13614
call fcn.10032980
mov al, byte [eax + 0x105]
mov byte [ebp + esi - 0xfb33], al
mov esi, dword [ebp - 0x694c]
add esi, dword [ebp - 0x6950]
imul esi, esi, 0x1e4
mov ecx, dword [ebp - 0x8ac8]
push ecx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13614
call fcn.10032980
mov edx, dword [eax + 0x108]
mov dword [ebp + esi - 0xfb30], edx
lea ecx, [ebp - 0xfd48]
call fcn.10001b90
mov dword [ebp - 0x10bec], eax
mov eax, dword [ebp - 0x694c]
add eax, dword [ebp - 0x6950]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0xfc38]
mov dword [ebp - 0x10bf0], ecx
mov edx, dword [ebp - 0x10bf0]
mov dword [ebp - 0x10bf4], edx
mov eax, dword [ebp - 0x10bec]
mov cl, byte [eax]
mov byte [ebp - 0x10bf5], cl
mov edx, dword [ebp - 0x10bf0]
mov al, byte [ebp - 0x10bf5]
mov byte [edx], al
mov ecx, dword [ebp - 0x10bec]
add ecx, 1
mov dword [ebp - 0x10bec], ecx
mov edx, dword [ebp - 0x10bf0]
add edx, 1
mov dword [ebp - 0x10bf0], edx
cmp byte [ebp - 0x10bf5], 0
jne 0x100387cc
push 0x14
lea ecx, [ebp - 0xfdc8]
call fcn.10001b90
push eax
mov eax, dword [ebp - 0x694c]
add eax, dword [ebp - 0x6950]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0xfb2c]
push ecx
call fcn.10030060
add esp, 0xc
push 0x50
lea ecx, [ebp - 0xfdac]
call fcn.10001b90
push eax
mov edx, dword [ebp - 0x694c]
add edx, dword [ebp - 0x6950]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0xfb18]
push eax
call fcn.10030060
add esp, 0xc
push 0x50
lea ecx, [ebp - 0xfd28]
call fcn.10001b90
push eax
mov ecx, dword [ebp - 0x694c]
add ecx, dword [ebp - 0x6950]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0xfaa7]
push edx
call fcn.10030060
add esp, 0xc
lea ecx, [ebp - 0xfd2c]
call fcn.10047df0
mov dword [ebp - 0x10bfc], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xfdec]
call fcn.100073c0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xfd48]
call fcn.10001b90
push eax
lea ecx, [ebp - 0xfd2c]
call fcn.10048860
mov dword [ebp - 0x10c00], eax
mov eax, dword [ebp - 0x10c00]
push eax
lea ecx, [ebp - 0xfdec]
call fcn.10035370
lea ecx, [ebp - 0xfdec]
call fcn.10032950
movzx ecx, al
test ecx, ecx
jne 0x10038934
push 0x21
lea ecx, [ebp - 0xfdec]
call fcn.10001b90
push eax
mov edx, dword [ebp - 0x694c]
add edx, dword [ebp - 0x6950]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0xfac8]
push eax
call fcn.10030060
add esp, 0xc
mov ecx, dword [ebp - 0x694c]
add ecx, 1
mov dword [ebp - 0x694c], ecx
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xfdec]
call fcn.10001b60
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xfd2c]
call fcn.10047e00
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xfd90]
call fcn.100495e0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xfd28]
call fcn.10001b60
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xfdac]
call fcn.10001b60
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xfdc8]
call fcn.10001b60
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xfd48]
call fcn.10001b60
jmp 0x10038456
mov edx, dword [ebp - 0x6950]
add edx, dword [ebp - 0x694c]
mov dword [ebp - 0x6944], edx
mov dword [ebp - 0xab4], 0
mov dword [ebp - 0xfdf0], 0
jmp 0x100389e8
mov eax, dword [ebp - 0xfdf0]
add eax, 1
mov dword [ebp - 0xfdf0], eax
mov ecx, dword [ebp - 0xfdf0]
cmp ecx, dword [ebp - 0x6944]
jge 0x10038e49
mov edx, dword [ebp - 0x10aa0]
cmp dword [edx + 0x1351c], 0
je 0x10038a10
xor eax, eax
jmp 0x1003a747
cmp dword [ebp - 0xfdf0], 0x3b
jle 0x10038a1e
jmp 0x10038e49
mov eax, dword [ebp - 0xfdf0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0xfc38]
mov dword [ebp - 0x10c04], ecx
mov edx, dword [ebp - 0x10c04]
add edx, 1
mov dword [ebp - 0x10c08], edx
mov eax, dword [ebp - 0x10c04]
mov cl, byte [eax]
mov byte [ebp - 0x10c09], cl
add dword [ebp - 0x10c04], 1
cmp byte [ebp - 0x10c09], 0
jne 0x10038a46
mov edx, dword [ebp - 0x10c04]
sub edx, dword [ebp - 0x10c08]
mov dword [ebp - 0x10c10], edx
mov eax, dword [ebp - 0x10c10]
add eax, 1
push eax
mov ecx, dword [ebp - 0xfdf0]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0xfc38]
push edx
call fcn.1004a91d
add esp, 8
lea eax, [ebp - 0x58c]
push eax
mov ecx, dword [ebp - 0xfdf0]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0xfc38]
push edx
call fcn.10029190
add esp, 8
test eax, eax
jne 0x10038ae7
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0xfdf0]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0xfc38]
push edx
call fcn.10029190
add esp, 8
test eax, eax
je 0x10038b2b
mov eax, dword [ebp - 0xfdf0]
imul eax, eax, 0x1e4
movsx ecx, byte [ebp + eax - 0xfb2c]
test ecx, ecx
je 0x10038b2b
lea edx, [ebp - 0x57c]
push edx
mov eax, dword [ebp - 0xfdf0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0xfaa7]
push ecx
call fcn.10029190
add esp, 8
test eax, eax
je 0x10038b2b
jmp 0x100389d9
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x234
push 0
lea edx, [ebp - 0x548]
push edx
call fcn.1001c970
add esp, 0xc
mov dword [ebp - 0xfdf4], 0
mov eax, dword [ebp - 0xfdf0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0xfc38]
mov dword [ebp - 0x10c14], ecx
mov edx, dword [ebp - 0x10c14]
add edx, 1
mov dword [ebp - 0x10c18], edx
mov eax, dword [ebp - 0x10c14]
mov cl, byte [eax]
mov byte [ebp - 0x10c19], cl
add dword [ebp - 0x10c14], 1
cmp byte [ebp - 0x10c19], 0
jne 0x10038b7b
mov edx, dword [ebp - 0x10c14]
sub edx, dword [ebp - 0x10c18]
mov dword [ebp - 0x10c20], edx
mov al, byte [ebp - 0x10c20]
mov byte [ebp - 0x546], al
mov ecx, dword [ebp - 0xfdf0]
imul ecx, ecx, 0x1e4
mov dl, byte [ebp + ecx - 0xfb34]
mov byte [ebp - 0x545], dl
mov eax, dword [ebp - 0xfdf0]
imul eax, eax, 0x1e4
mov cl, byte [ebp + eax - 0xfb33]
mov byte [ebp - 0x544], cl
mov edx, dword [ebp - 0xfdf0]
imul edx, edx, 0x1e4
mov eax, dword [ebp + edx - 0xfb30]
mov dword [ebp - 0x543], eax
mov ecx, dword [ebp - 0xfdf0]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0xfb2c]
mov dword [ebp - 0x10c24], edx
mov eax, dword [ebp - 0x10c24]
add eax, 1
mov dword [ebp - 0x10c28], eax
mov ecx, dword [ebp - 0x10c24]
mov dl, byte [ecx]
mov byte [ebp - 0x10c29], dl
add dword [ebp - 0x10c24], 1
cmp byte [ebp - 0x10c29], 0
jne 0x10038c2a
mov eax, dword [ebp - 0x10c24]
sub eax, dword [ebp - 0x10c28]
mov dword [ebp - 0x10c30], eax
mov cl, byte [ebp - 0x10c30]
mov byte [ebp - 0x53f], cl
mov edx, dword [ebp - 0xfdf0]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0xfb18]
mov dword [ebp - 0x10c34], eax
mov ecx, dword [ebp - 0x10c34]
add ecx, 1
mov dword [ebp - 0x10c38], ecx
mov edx, dword [ebp - 0x10c34]
mov al, byte [edx]
mov byte [ebp - 0x10c39], al
add dword [ebp - 0x10c34], 1
cmp byte [ebp - 0x10c39], 0
jne 0x10038c8e
mov ecx, dword [ebp - 0x10c34]
sub ecx, dword [ebp - 0x10c38]
mov dword [ebp - 0x10c40], ecx
mov dl, byte [ebp - 0x10c40]
mov byte [ebp - 0x53e], dl
mov eax, dword [ebp - 0xfdf0]
imul eax, eax, 0x1e4
lea esi, [ebp + eax - 0xfac8]
mov ecx, 8
lea edi, [ebp - 0x53d]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
movzx ecx, byte [ebp - 0x546]
push ecx
mov edx, dword [ebp - 0xfdf0]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0xfc38]
push eax
lea ecx, [ebp - 0x51c]
push ecx
call fcn.1001d000
add esp, 0xc
movzx edx, byte [ebp - 0x546]
add edx, dword [ebp - 0xfdf4]
mov dword [ebp - 0xfdf4], edx
movzx eax, byte [ebp - 0x53f]
push eax
mov ecx, dword [ebp - 0xfdf0]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0xfb2c]
push edx
mov eax, dword [ebp - 0xfdf4]
lea ecx, [ebp + eax - 0x51c]
push ecx
call fcn.1001d000
add esp, 0xc
movzx edx, byte [ebp - 0x53f]
add edx, dword [ebp - 0xfdf4]
mov dword [ebp - 0xfdf4], edx
movzx eax, byte [ebp - 0x53e]
push eax
mov ecx, dword [ebp - 0xfdf0]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0xfb18]
push edx
mov eax, dword [ebp - 0xfdf4]
lea ecx, [ebp + eax - 0x51c]
push ecx
call fcn.1001d000
add esp, 0xc
movzx edx, byte [ebp - 0x53e]
add edx, dword [ebp - 0xfdf4]
mov dword [ebp - 0xfdf4], edx
mov eax, dword [ebp - 0xfdf4]
add eax, 0x2c
mov word [ebp - 0x548], ax
mov ecx, dword [ebp - 0xfdf4]
add ecx, 0x2c
mov dword [ebp - 0xfdf4], ecx
mov dx, word [ebp - 0xfdf4]
mov word [ebp - 0x548], dx
mov eax, dword [ebp - 0xfdf4]
push eax
lea ecx, [ebp - 0x548]
push ecx
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x10aa0]
lea ecx, [eax + edx + 0x4e9]
push ecx
call fcn.1001d000
add esp, 0xc
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x10aa0]
lea ecx, [eax + edx + 0x4e9]
mov dword [ebp - 0xfdf8], ecx
mov edx, dword [ebp - 0x570]
add edx, dword [ebp - 0xfdf4]
mov dword [ebp - 0x570], edx
mov eax, dword [ebp - 0xab4]
add eax, 1
mov dword [ebp - 0xab4], eax
jmp 0x100389d9
mov ecx, dword [ebp - 0x10aa0]
mov edx, dword [ebp - 0xab4]
mov dword [ecx + 0x4b8], edx
lea ecx, [ebp - 0x8abc]
call fcn.10033970
lea eax, [ebp - 0x10880]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.100342f0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x8abc], ecx
mov dword [ebp - 0x8ab8], edx
lea eax, [ebp - 0x10888]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.10034320
push eax
lea ecx, [ebp - 0x8abc]
call fcn.10033450
movzx ecx, al
test ecx, ecx
je 0x1003901d
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x10aa0]
cmp dword [edx + 0x1351c], 0
je 0x10038edc
xor eax, eax
jmp 0x1003a747
lea ecx, [ebp - 0xfdfc]
call fcn.10047df0
mov dword [ebp - 0x10c44], eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xfe18]
call fcn.100073c0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x8abc]
call fcn.10033980
push eax
lea ecx, [ebp - 0xfdfc]
call fcn.10048860
mov dword [ebp - 0x10c48], eax
mov eax, dword [ebp - 0x10c48]
push eax
lea ecx, [ebp - 0xfe18]
call fcn.10035370
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x42c
push ecx
lea edx, [ebp - 0xfe18]
push edx
call fcn.100339c0
add esp, 8
mov byte [ebp - 0x10c49], al
movzx eax, byte [ebp - 0x10c49]
test eax, eax
je 0x10038fad
mov ecx, dword [ebp - 0x8abc]
mov dword [ebp - 0x10890], ecx
mov edx, dword [ebp - 0x8ab8]
mov dword [ebp - 0x1088c], edx
mov eax, dword [ebp - 0x1088c]
push eax
mov ecx, dword [ebp - 0x10890]
push ecx
lea edx, [ebp - 0x10898]
push edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.10034e30
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x8abc], ecx
mov dword [ebp - 0x8ab8], edx
jmp 0x10038ffa
lea ecx, [ebp - 0xfe18]
call fcn.10032950
movzx eax, al
test eax, eax
jne 0x10038fe6
push 0x21
lea ecx, [ebp - 0xfe18]
call fcn.10001b90
push eax
lea ecx, [ebp - 0x8abc]
call fcn.10033980
add eax, 0x170
push eax
call fcn.10030060
add esp, 0xc
push 0
lea ecx, [ebp - 0x108a0]
push ecx
lea ecx, [ebp - 0x8abc]
call fcn.100338e0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xfe18]
call fcn.10001b60
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xfdfc]
call fcn.10047e00
jmp 0x10038e8f
mov edx, dword [ebp - 0x10aa0]
movsx eax, byte [edx + 0x13661]
mov ecx, dword [ebp - 0x10aa0]
movsx edx, byte [ecx + 0x13660]
add edx, eax
mov eax, dword [ebp - 0x10aa0]
mov byte [eax + 0x278], dl
mov byte [ebp - 0x6940], 0
push 0x103
push 0
lea ecx, [ebp - 0x693f]
push ecx
call fcn.1001c970
add esp, 0xc
push 0x5d84
push 0
lea edx, [ebp - 0x683c]
push edx
call fcn.1001c970
add esp, 0xc
mov dword [ebp - 0x8ac4], 0
mov dword [ebp - 0x6b5c], 0
jmp 0x1003909d
mov eax, dword [ebp - 0x6b5c]
add eax, 1
mov dword [ebp - 0x6b5c], eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x135fc
call fcn.10032960
cmp dword [ebp - 0x6b5c], eax
jae 0x1003953f
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x10aa0]
cmp dword [ecx + 0x1351c], 0
je 0x100390d8
xor eax, eax
jmp 0x1003a747
cmp dword [ebp - 0x8ac4], 0x31
jbe 0x100390e6
jmp 0x1003953f
lea ecx, [ebp - 0xfed8]
call fcn.10033970
mov dword [ebp - 0xfe54], 0
lea edx, [ebp - 0x108a8]
push edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.100342f0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0xfed8], ecx
mov dword [ebp - 0xfed4], edx
lea eax, [ebp - 0x108b0]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.10034320
push eax
lea ecx, [ebp - 0xfed8]
call fcn.10033450
movzx ecx, al
test ecx, ecx
je 0x100391b7
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x6b5c]
push edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x135fc
call fcn.10032980
add eax, 0x170
push eax
lea ecx, [ebp - 0xfed8]
call fcn.10033980
add eax, 0x170
push eax
call fcn.1002fd20
add esp, 8
test eax, eax
jne 0x1003919e
mov dword [ebp - 0xfe54], 1
jmp 0x100391b7
push 0
lea eax, [ebp - 0x108b8]
push eax
lea ecx, [ebp - 0xfed8]
call fcn.100338e0
jmp 0x10039124
cmp dword [ebp - 0xfe54], 0
je 0x100391c5
jmp 0x1003908e
mov ecx, dword [ebp - 0x6b5c]
push ecx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x135fc
call fcn.10032980
push eax
lea ecx, [ebp - 0xfe50]
call fcn.10001af0
mov dword [ebp - 0x10c50], eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xfe50]
call fcn.10001b90
push eax
lea edx, [ebp - 0xfed0]
push edx
call fcn.10049890
add esp, 8
mov dword [ebp - 0x10c54], eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xfeb4]
call fcn.100073c0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xfe34]
call fcn.100073c0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xfe98]
call fcn.100495d0
mov dword [ebp - 0x10c58], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xfe50]
call fcn.10001b90
push eax
lea ecx, [ebp - 0xfe98]
call fcn.10049600
mov dword [ebp - 0x10c5c], eax
cmp dword [ebp - 0x10c5c], 0
je 0x1003931a
mov eax, dword [ebp - 0x10aa0]
add eax, 0x13b54
push eax
lea ecx, [ebp - 0x108d4]
push ecx
lea ecx, [ebp - 0xfe98]
call fcn.10049750
mov dword [ebp - 0x10c60], eax
mov edx, dword [ebp - 0x10c60]
mov dword [ebp - 0x10c64], edx
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x10c64]
push eax
lea ecx, [ebp - 0xfeb4]
call fcn.1000b190
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x108d4]
call fcn.10001b60
lea ecx, [ebp - 0x568]
push ecx
lea edx, [ebp - 0x108f0]
push edx
lea ecx, [ebp - 0xfe98]
call fcn.10049750
mov dword [ebp - 0x10c68], eax
mov eax, dword [ebp - 0x10c68]
mov dword [ebp - 0x10c6c], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x10c6c]
push ecx
lea ecx, [ebp - 0xfe34]
call fcn.1000b190
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x108f0]
call fcn.10001b60
mov esi, dword [ebp - 0x8ac4]
imul esi, esi, 0x1e4
mov edx, dword [ebp - 0x6b5c]
push edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x135fc
call fcn.10032980
mov al, byte [eax + 0x104]
mov byte [ebp + esi - 0x683c], al
mov esi, dword [ebp - 0x8ac4]
imul esi, esi, 0x1e4
mov ecx, dword [ebp - 0x6b5c]
push ecx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x135fc
call fcn.10032980
mov dl, byte [eax + 0x105]
mov byte [ebp + esi - 0x683b], dl
mov esi, dword [ebp - 0x8ac4]
imul esi, esi, 0x1e4
mov eax, dword [ebp - 0x6b5c]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x135fc
call fcn.10032980
mov ecx, dword [eax + 0x108]
mov dword [ebp + esi - 0x6838], ecx
lea ecx, [ebp - 0xfe50]
call fcn.10001b90
mov dword [ebp - 0x10c70], eax
mov edx, dword [ebp - 0x8ac4]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0x6940]
mov dword [ebp - 0x10c74], eax
mov ecx, dword [ebp - 0x10c74]
mov dword [ebp - 0x10c78], ecx
mov edx, dword [ebp - 0x10c70]
mov al, byte [edx]
mov byte [ebp - 0x10c79], al
mov ecx, dword [ebp - 0x10c74]
mov dl, byte [ebp - 0x10c79]
mov byte [ecx], dl
mov eax, dword [ebp - 0x10c70]
add eax, 1
mov dword [ebp - 0x10c70], eax
mov ecx, dword [ebp - 0x10c74]
add ecx, 1
mov dword [ebp - 0x10c74], ecx
cmp byte [ebp - 0x10c79], 0
jne 0x100393e3
push 0x14
lea ecx, [ebp - 0xfed0]
call fcn.10001b90
push eax
mov edx, dword [ebp - 0x8ac4]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0x6834]
push eax
call fcn.10030060
add esp, 0xc
push 0x50
lea ecx, [ebp - 0xfeb4]
call fcn.10001b90
push eax
mov ecx, dword [ebp - 0x8ac4]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0x6820]
push edx
call fcn.10030060
add esp, 0xc
push 0x21
mov eax, dword [ebp - 0x6b5c]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x135fc
call fcn.10032980
add eax, 0x170
push eax
mov ecx, dword [ebp - 0x8ac4]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0x67d0]
push edx
call fcn.10030060
add esp, 0xc
push 0x50
lea ecx, [ebp - 0xfe34]
call fcn.10001b90
push eax
mov eax, dword [ebp - 0x8ac4]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x67af]
push ecx
call fcn.10030060
add esp, 0xc
mov edx, dword [ebp - 0x8ac4]
add edx, 1
mov dword [ebp - 0x8ac4], edx
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xfe98]
call fcn.100495e0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xfe34]
call fcn.10001b60
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xfeb4]
call fcn.10001b60
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xfed0]
call fcn.10001b60
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xfe50]
call fcn.10001b60
jmp 0x1003908e
mov dword [ebp - 0x6950], 0
jmp 0x1003955a
mov eax, dword [ebp - 0x6950]
add eax, 1
mov dword [ebp - 0x6950], eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.10032960
cmp dword [ebp - 0x6950], eax
jae 0x1003993f
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x10aa0]
cmp dword [ecx + 0x1351c], 0
je 0x10039595
xor eax, eax
jmp 0x1003a747
cmp dword [ebp - 0x6950], 0x31
jbe 0x100395a3
jmp 0x1003993f
mov edx, dword [ebp - 0x6950]
push edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.10032980
push eax
lea ecx, [ebp - 0xff50]
call fcn.10001af0
mov dword [ebp - 0x10c80], eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xff50]
call fcn.10001b90
push eax
lea eax, [ebp - 0xff88]
push eax
call fcn.10049890
add esp, 8
mov dword [ebp - 0x10c84], eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xff6c]
call fcn.100073c0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xff34]
call fcn.100073c0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xff18]
call fcn.100495d0
mov dword [ebp - 0x10c88], eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xff50]
call fcn.10001b90
push eax
lea ecx, [ebp - 0xff18]
call fcn.10049600
mov dword [ebp - 0x10c8c], eax
cmp dword [ebp - 0x10c8c], 0
je 0x100396f9
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13b54
push ecx
lea edx, [ebp - 0x1090c]
push edx
lea ecx, [ebp - 0xff18]
call fcn.10049750
mov dword [ebp - 0x10c90], eax
mov eax, dword [ebp - 0x10c90]
mov dword [ebp - 0x10c94], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x10c94]
push ecx
lea ecx, [ebp - 0xff6c]
call fcn.1000b190
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1090c]
call fcn.10001b60
lea edx, [ebp - 0x568]
push edx
lea eax, [ebp - 0x10928]
push eax
lea ecx, [ebp - 0xff18]
call fcn.10049750
mov dword [ebp - 0x10c98], eax
mov ecx, dword [ebp - 0x10c98]
mov dword [ebp - 0x10c9c], ecx
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x10c9c]
push edx
lea ecx, [ebp - 0xff34]
call fcn.1000b190
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x10928]
call fcn.10001b60
mov esi, dword [ebp - 0x8ac4]
add esi, dword [ebp - 0x6950]
imul esi, esi, 0x1e4
mov eax, dword [ebp - 0x6950]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.10032980
mov cl, byte [eax + 0x104]
mov byte [ebp + esi - 0x683c], cl
mov esi, dword [ebp - 0x8ac4]
add esi, dword [ebp - 0x6950]
imul esi, esi, 0x1e4
mov edx, dword [ebp - 0x6950]
push edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.10032980
mov al, byte [eax + 0x105]
mov byte [ebp + esi - 0x683b], al
mov esi, dword [ebp - 0x8ac4]
add esi, dword [ebp - 0x6950]
imul esi, esi, 0x1e4
mov ecx, dword [ebp - 0x6950]
push ecx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.10032980
mov edx, dword [eax + 0x108]
mov dword [ebp + esi - 0x6838], edx
lea ecx, [ebp - 0xff50]
call fcn.10001b90
mov dword [ebp - 0x10ca0], eax
mov eax, dword [ebp - 0x8ac4]
add eax, dword [ebp - 0x6950]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x6940]
mov dword [ebp - 0x10ca4], ecx
mov edx, dword [ebp - 0x10ca4]
mov dword [ebp - 0x10ca8], edx
mov eax, dword [ebp - 0x10ca0]
mov cl, byte [eax]
mov byte [ebp - 0x10ca9], cl
mov edx, dword [ebp - 0x10ca4]
mov al, byte [ebp - 0x10ca9]
mov byte [edx], al
mov ecx, dword [ebp - 0x10ca0]
add ecx, 1
mov dword [ebp - 0x10ca0], ecx
mov edx, dword [ebp - 0x10ca4]
add edx, 1
mov dword [ebp - 0x10ca4], edx
cmp byte [ebp - 0x10ca9], 0
jne 0x100397da
push 0x14
lea ecx, [ebp - 0xff88]
call fcn.10001b90
push eax
mov eax, dword [ebp - 0x8ac4]
add eax, dword [ebp - 0x6950]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x6834]
push ecx
call fcn.10030060
add esp, 0xc
push 0x50
lea ecx, [ebp - 0xff6c]
call fcn.10001b90
push eax
mov edx, dword [ebp - 0x8ac4]
add edx, dword [ebp - 0x6950]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0x6820]
push eax
call fcn.10030060
add esp, 0xc
push 0x21
mov ecx, dword [ebp - 0x6950]
push ecx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x1362c
call fcn.10032980
add eax, 0x170
push eax
mov edx, dword [ebp - 0x8ac4]
add edx, dword [ebp - 0x6950]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0x67d0]
push eax
call fcn.10030060
add esp, 0xc
push 0x50
lea ecx, [ebp - 0xff34]
call fcn.10001b90
push eax
mov ecx, dword [ebp - 0x8ac4]
add ecx, dword [ebp - 0x6950]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0x67af]
push edx
call fcn.10030060
add esp, 0xc
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xff18]
call fcn.100495e0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xff34]
call fcn.10001b60
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xff6c]
call fcn.10001b60
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xff88]
call fcn.10001b60
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xff50]
call fcn.10001b60
jmp 0x1003954b
mov dword [ebp - 0x8ab0], 0
mov dword [ebp - 0xff8c], 0
jmp 0x10039964
mov eax, dword [ebp - 0xff8c]
add eax, 1
mov dword [ebp - 0xff8c], eax
mov ecx, dword [ebp - 0x10aa0]
mov edx, dword [ebp - 0xff8c]
cmp edx, dword [ecx + 0x13b78]
jae 0x10039b81
mov dword [ebp - 0xff90], 0
jmp 0x10039997
mov eax, dword [ebp - 0xff90]
add eax, 1
mov dword [ebp - 0xff90], eax
mov ecx, dword [ebp - 0xff8c]
imul ecx, ecx, 0x2e8
mov edx, dword [ebp - 0x10aa0]
mov eax, dword [ebp - 0xff90]
cmp eax, dword [edx + ecx + 0x13c80]
jae 0x10039b7c
mov byte [ebp - 0xffe8], 0
push 0x50
push 0
lea ecx, [ebp - 0xffe7]
push ecx
call fcn.1001c970
add esp, 0xc
push 0x28
lea edx, [ebp - 0xffe8]
push edx
mov eax, dword [ebp - 0xff90]
imul eax, eax, 0x30
mov ecx, dword [ebp - 0xff8c]
imul ecx, ecx, 0x2e8
mov edx, dword [ebp - 0x10aa0]
lea ecx, [edx + ecx + 0x13b7c]
lea edx, [ecx + eax + 0x110]
push edx
call fcn.10048cc0
add esp, 0xc
mov eax, dword [ebp - 0x8ac4]
add eax, dword [ebp - 0x6950]
add eax, dword [ebp - 0x8ab0]
imul eax, eax, 0x1e4
mov byte [ebp + eax - 0x683c], 2
mov ecx, dword [ebp - 0x8ac4]
add ecx, dword [ebp - 0x6950]
add ecx, dword [ebp - 0x8ab0]
imul ecx, ecx, 0x1e4
mov byte [ebp + ecx - 0x683b], 0xfa
mov edx, dword [ebp - 0x8ac4]
add edx, dword [ebp - 0x6950]
add edx, dword [ebp - 0x8ab0]
imul edx, edx, 0x1e4
mov eax, dword [ebp - 0xff90]
imul eax, eax, 0x30
mov ecx, dword [ebp - 0xff8c]
imul ecx, ecx, 0x2e8
mov esi, dword [ebp - 0x10aa0]
lea ecx, [esi + ecx + 0x13b7c]
mov eax, dword [ecx + eax + 0x108]
mov dword [ebp + edx - 0x6838], eax
push 0x104
mov ecx, dword [ebp - 0xff8c]
imul ecx, ecx, 0x2e8
mov edx, dword [ebp - 0x10aa0]
lea eax, [edx + ecx + 0x13b7c]
push eax
mov ecx, dword [ebp - 0x8ac4]
add ecx, dword [ebp - 0x6950]
add ecx, dword [ebp - 0x8ab0]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0x6940]
push edx
call fcn.10030060
add esp, 0xc
mov eax, dword [ebp - 0xff90]
imul eax, eax, 0x30
mov ecx, dword [ebp - 0xff8c]
imul ecx, ecx, 0x2e8
mov edx, dword [ebp - 0x10aa0]
lea ecx, [edx + ecx + 0x13b7c]
mov edx, dword [ecx + eax + 0x10c]
push edx
push str.RVA:0x_x
mov eax, dword [ebp - 0x8ac4]
add eax, dword [ebp - 0x6950]
add eax, dword [ebp - 0x8ab0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x6834]
push ecx
call fcn.1001aa93
add esp, 0xc
push 0x4f
lea edx, [ebp - 0xffe8]
push edx
mov eax, dword [ebp - 0x8ac4]
add eax, dword [ebp - 0x6950]
add eax, dword [ebp - 0x8ab0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x6820]
push ecx
call fcn.10030060
add esp, 0xc
mov edx, dword [ebp - 0x8ab0]
add edx, 1
mov dword [ebp - 0x8ab0], edx
jmp 0x10039988
jmp 0x10039955
cmp dword [0x1005d060], 0
je 0x10039d49
push 0x1e4
push 0
lea eax, [ebp - 0x103b8]
push eax
call fcn.1001c970
add esp, 0xc
push 0x1e4
push 0
lea ecx, [ebp - 0x101d0]
push ecx
call fcn.1001c970
add esp, 0xc
mov edx, dword [0x1005d060]
push edx
lea eax, [ebp - 0x107b8]
push eax
push 0x1005d068
call fcn.10048cc0
add esp, 0xc
mov dword [ebp - 0x107bc], 0xff
mov ecx, dword [ebp - 0x107bc]
push ecx
lea edx, [ebp - 0x107b8]
push edx
lea eax, [ebp - 0x103b8]
push eax
call fcn.1001af50
add esp, 0xc
push 0x4f
mov ecx, dword [ebp - 0x107bc]
lea edx, [ebp + ecx - 0x107b8]
push edx
lea eax, [ebp - 0x10298]
push eax
call fcn.1001af50
add esp, 0xc
mov ecx, dword [ebp - 0x107bc]
add ecx, 0x4f
mov dword [ebp - 0x107bc], ecx
push 0xff
mov edx, dword [ebp - 0x107bc]
lea eax, [ebp + edx - 0x107b8]
push eax
lea ecx, [ebp - 0x101d0]
push ecx
call fcn.1001af50
add esp, 0xc
mov edx, dword [ebp - 0x107bc]
add edx, 0xff
mov dword [ebp - 0x107bc], edx
lea eax, [ebp - 0x107b8]
mov dword [ebp - 0x10cb0], eax
mov ecx, dword [ebp - 0x10cb0]
add ecx, 1
mov dword [ebp - 0x10cb4], ecx
mov edx, dword [ebp - 0x10cb0]
mov al, byte [edx]
mov byte [ebp - 0x10cb5], al
add dword [ebp - 0x10cb0], 1
cmp byte [ebp - 0x10cb5], 0
jne 0x10039c79
mov ecx, dword [ebp - 0x10cb0]
sub ecx, dword [ebp - 0x10cb4]
mov dword [ebp - 0x10cbc], ecx
mov edx, dword [ebp - 0x10cbc]
sub edx, dword [ebp - 0x107bc]
push edx
mov eax, dword [ebp - 0x107bc]
lea ecx, [ebp + eax - 0x107b8]
push ecx
lea edx, [ebp - 0x100b0]
push edx
call fcn.1001af50
add esp, 0xc
mov eax, dword [ebp - 0x8ac4]
add eax, dword [ebp - 0x6950]
add eax, dword [ebp - 0x8ab0]
imul eax, eax, 0x1e4
lea edi, [ebp + eax - 0x6940]
mov ecx, 0x79
lea esi, [ebp - 0x103b8]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x8ab0]
add ecx, 1
mov dword [ebp - 0x8ab0], ecx
mov edx, dword [ebp - 0x8ac4]
add edx, dword [ebp - 0x6950]
add edx, dword [ebp - 0x8ab0]
imul edx, edx, 0x1e4
lea edi, [ebp + edx - 0x6940]
mov ecx, 0x79
lea esi, [ebp - 0x101d0]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x8ab0]
add eax, 1
mov dword [ebp - 0x8ab0], eax
mov ecx, dword [ebp - 0x8ac4]
add ecx, dword [ebp - 0x6950]
add ecx, dword [ebp - 0x8ab0]
mov dword [ebp - 0x8ab4], ecx
mov dword [ebp - 0x8aac], 0
mov dword [ebp - 0x107c0], 0
jmp 0x10039d86
mov edx, dword [ebp - 0x107c0]
add edx, 1
mov dword [ebp - 0x107c0], edx
mov eax, dword [ebp - 0x107c0]
cmp eax, dword [ebp - 0x8ab4]
jge 0x1003a1d6
mov ecx, dword [ebp - 0x10aa0]
cmp dword [ecx + 0x1351c], 0
je 0x10039dae
xor eax, eax
jmp 0x1003a747
cmp dword [ebp - 0x8ac4], 0x31
jbe 0x10039dbc
jmp 0x1003a1d6
mov edx, dword [ebp - 0x107c0]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0x6940]
mov dword [ebp - 0x10cc0], eax
mov ecx, dword [ebp - 0x10cc0]
add ecx, 1
mov dword [ebp - 0x10cc4], ecx
mov edx, dword [ebp - 0x10cc0]
mov al, byte [edx]
mov byte [ebp - 0x10cc5], al
add dword [ebp - 0x10cc0], 1
cmp byte [ebp - 0x10cc5], 0
jne 0x10039de4
mov ecx, dword [ebp - 0x10cc0]
sub ecx, dword [ebp - 0x10cc4]
mov dword [ebp - 0x10ccc], ecx
mov edx, dword [ebp - 0x10ccc]
add edx, 1
push edx
mov eax, dword [ebp - 0x107c0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x6940]
push ecx
call fcn.1004a91d
add esp, 8
lea edx, [ebp - 0x58c]
push edx
mov eax, dword [ebp - 0x107c0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x6940]
push ecx
call fcn.10029190
add esp, 8
test eax, eax
jne 0x10039e85
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x107c0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x6940]
push ecx
call fcn.10029190
add esp, 8
test eax, eax
je 0x10039ec9
mov edx, dword [ebp - 0x107c0]
imul edx, edx, 0x1e4
movsx eax, byte [ebp + edx - 0x6834]
test eax, eax
je 0x10039ec9
lea ecx, [ebp - 0x57c]
push ecx
mov edx, dword [ebp - 0x107c0]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0x67af]
push eax
call fcn.10029190
add esp, 8
test eax, eax
je 0x10039ec9
jmp 0x10039d77
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x234
push 0
lea ecx, [ebp - 0x548]
push ecx
call fcn.1001c970
add esp, 0xc
mov dword [ebp - 0x107c8], 0
mov edx, dword [ebp - 0x107c0]
imul edx, edx, 0x1e4
lea eax, [ebp + edx - 0x6940]
mov dword [ebp - 0x10cd0], eax
mov ecx, dword [ebp - 0x10cd0]
add ecx, 1
mov dword [ebp - 0x10cd4], ecx
mov edx, dword [ebp - 0x10cd0]
mov al, byte [edx]
mov byte [ebp - 0x10cd5], al
add dword [ebp - 0x10cd0], 1
cmp byte [ebp - 0x10cd5], 0
jne 0x10039f19
mov ecx, dword [ebp - 0x10cd0]
sub ecx, dword [ebp - 0x10cd4]
mov dword [ebp - 0x10cdc], ecx
mov dl, byte [ebp - 0x10cdc]
mov byte [ebp - 0x546], dl
mov eax, dword [ebp - 0x107c0]
imul eax, eax, 0x1e4
mov cl, byte [ebp + eax - 0x683c]
mov byte [ebp - 0x545], cl
mov edx, dword [ebp - 0x107c0]
imul edx, edx, 0x1e4
mov al, byte [ebp + edx - 0x683b]
mov byte [ebp - 0x544], al
mov ecx, dword [ebp - 0x107c0]
imul ecx, ecx, 0x1e4
mov edx, dword [ebp + ecx - 0x6838]
mov dword [ebp - 0x543], edx
mov eax, dword [ebp - 0x107c0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x6834]
mov dword [ebp - 0x10ce0], ecx
mov edx, dword [ebp - 0x10ce0]
add edx, 1
mov dword [ebp - 0x10ce4], edx
mov eax, dword [ebp - 0x10ce0]
mov cl, byte [eax]
mov byte [ebp - 0x10ce5], cl
add dword [ebp - 0x10ce0], 1
cmp byte [ebp - 0x10ce5], 0
jne 0x10039fc8
mov edx, dword [ebp - 0x10ce0]
sub edx, dword [ebp - 0x10ce4]
mov dword [ebp - 0x10cec], edx
mov al, byte [ebp - 0x10cec]
mov byte [ebp - 0x53f], al
mov ecx, dword [ebp - 0x107c0]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0x6820]
mov dword [ebp - 0x10cf0], edx
mov eax, dword [ebp - 0x10cf0]
add eax, 1
mov dword [ebp - 0x10cf4], eax
mov ecx, dword [ebp - 0x10cf0]
mov dl, byte [ecx]
mov byte [ebp - 0x10cf5], dl
add dword [ebp - 0x10cf0], 1
cmp byte [ebp - 0x10cf5], 0
jne 0x1003a02c
mov eax, dword [ebp - 0x10cf0]
sub eax, dword [ebp - 0x10cf4]
mov dword [ebp - 0x10cfc], eax
mov cl, byte [ebp - 0x10cfc]
mov byte [ebp - 0x53e], cl
mov edx, dword [ebp - 0x107c0]
imul edx, edx, 0x1e4
lea esi, [ebp + edx - 0x67d0]
mov ecx, 8
lea edi, [ebp - 0x53d]
rep movsd dword es:[edi], dword [esi]
movzx eax, byte [ebp - 0x546]
push eax
mov ecx, dword [ebp - 0x107c0]
imul ecx, ecx, 0x1e4
lea edx, [ebp + ecx - 0x6940]
push edx
lea eax, [ebp - 0x51c]
push eax
call fcn.1001d000
add esp, 0xc
movzx ecx, byte [ebp - 0x546]
add ecx, dword [ebp - 0x107c8]
mov dword [ebp - 0x107c8], ecx
movzx edx, byte [ebp - 0x53f]
push edx
mov eax, dword [ebp - 0x107c0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x6834]
push ecx
mov edx, dword [ebp - 0x107c8]
lea eax, [ebp + edx - 0x51c]
push eax
call fcn.1001d000
add esp, 0xc
movzx ecx, byte [ebp - 0x53f]
add ecx, dword [ebp - 0x107c8]
mov dword [ebp - 0x107c8], ecx
movzx edx, byte [ebp - 0x53e]
push edx
mov eax, dword [ebp - 0x107c0]
imul eax, eax, 0x1e4
lea ecx, [ebp + eax - 0x6820]
push ecx
mov edx, dword [ebp - 0x107c8]
lea eax, [ebp + edx - 0x51c]
push eax
call fcn.1001d000
add esp, 0xc
movzx ecx, byte [ebp - 0x53e]
add ecx, dword [ebp - 0x107c8]
mov dword [ebp - 0x107c8], ecx
mov edx, dword [ebp - 0x107c8]
add edx, 0x2c
mov dword [ebp - 0x107c8], edx
mov ax, word [ebp - 0x107c8]
mov word [ebp - 0x548], ax
mov ecx, dword [ebp - 0x107c8]
push ecx
lea edx, [ebp - 0x548]
push edx
mov eax, dword [ebp - 0x570]
mov ecx, dword [ebp - 0x10aa0]
lea edx, [ecx + eax + 0x4e9]
push edx
call fcn.1001d000
add esp, 0xc
mov eax, dword [ebp - 0x570]
mov ecx, dword [ebp - 0x10aa0]
lea edx, [ecx + eax + 0x4e9]
mov dword [ebp - 0x107c4], edx
mov eax, dword [ebp - 0x570]
add eax, dword [ebp - 0x107c8]
mov dword [ebp - 0x570], eax
mov ecx, dword [ebp - 0x8aac]
add ecx, 1
mov dword [ebp - 0x8aac], ecx
jmp 0x10039d77
mov edx, dword [ebp - 0x10aa0]
mov eax, dword [ebp - 0x8aac]
mov dword [edx + 0x4bc], eax
mov byte [ebp - 0x8aa8], 0
push 0x1f3f
push 0
lea ecx, [ebp - 0x8aa7]
push ecx
call fcn.1001c970
add esp, 0xc
lea ecx, [ebp - 0x6b64]
call fcn.10033970
mov dword [ebp - 0x6948], 0
lea edx, [ebp - 0x10930]
push edx
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13694
call fcn.10007f90
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x6b64], ecx
mov dword [ebp - 0x6b60], edx
lea eax, [ebp - 0x10938]
push eax
mov ecx, dword [ebp - 0x10aa0]
add ecx, 0x13694
call fcn.10007fc0
push eax
lea ecx, [ebp - 0x6b64]
call fcn.10009c60
movzx ecx, al
test ecx, ecx
je 0x1003a2f7
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x10aa0]
cmp dword [edx + 0x1351c], 0
je 0x1003a290
xor eax, eax
jmp 0x1003a747
cmp dword [ebp - 0x6948], 0x27
jle 0x1003a29b
jmp 0x1003a2f7
push 0xc8
lea ecx, [ebp - 0x6b64]
call fcn.10033980
mov ecx, eax
call fcn.10001b90
push eax
mov eax, dword [ebp - 0x6948]
imul eax, eax, 0xc8
lea ecx, [ebp + eax - 0x8aa8]
push ecx
call fcn.10030060
add esp, 0xc
push 0
lea edx, [ebp - 0x10940]
push edx
lea ecx, [ebp - 0x6b64]
call fcn.10033930
mov eax, dword [ebp - 0x6948]
add eax, 1
mov dword [ebp - 0x6948], eax
jmp 0x1003a243
mov ecx, dword [ebp - 0x6948]
mov dword [ebp - 0x8ac0], ecx
mov dword [ebp - 0x6b54], 0
mov dword [ebp - 0x107cc], 0
jmp 0x1003a328
mov edx, dword [ebp - 0x107cc]
add edx, 1
mov dword [ebp - 0x107cc], edx
mov eax, dword [ebp - 0x107cc]
cmp eax, dword [ebp - 0x8ac0]
jge 0x1003a4ae
mov ecx, dword [ebp - 0x10aa0]
cmp dword [ecx + 0x1351c], 0
je 0x1003a350
xor eax, eax
jmp 0x1003a747
cmp dword [ebp - 0x107cc], 0x27
jle 0x1003a35e
jmp 0x1003a4ae
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xcb
push 0
lea edx, [ebp - 0x6b50]
push edx
call fcn.1001c970
add esp, 0xc
mov dword [ebp - 0x107d4], 0
mov eax, dword [ebp - 0x107cc]
imul eax, eax, 0xc8
lea ecx, [ebp + eax - 0x8aa8]
mov dword [ebp - 0x10d00], ecx
mov edx, dword [ebp - 0x10d00]
add edx, 1
mov dword [ebp - 0x10d04], edx
mov eax, dword [ebp - 0x10d00]
mov cl, byte [eax]
mov byte [ebp - 0x10d05], cl
add dword [ebp - 0x10d00], 1
cmp byte [ebp - 0x10d05], 0
jne 0x1003a3ae
mov edx, dword [ebp - 0x10d00]
sub edx, dword [ebp - 0x10d04]
mov dword [ebp - 0x10d0c], edx
mov al, byte [ebp - 0x10d0c]
mov byte [ebp - 0x6b4e], al
movzx ecx, byte [ebp - 0x6b4e]
push ecx
mov edx, dword [ebp - 0x107cc]
imul edx, edx, 0xc8
lea eax, [ebp + edx - 0x8aa8]
push eax
lea ecx, [ebp - 0x6b4d]
push ecx
call fcn.1001d000
add esp, 0xc
movzx edx, byte [ebp - 0x6b4e]
add edx, dword [ebp - 0x107d4]
mov dword [ebp - 0x107d4], edx
mov eax, dword [ebp - 0x107d4]
add eax, 3
mov dword [ebp - 0x107d4], eax
mov cx, word [ebp - 0x107d4]
mov word [ebp - 0x6b50], cx
mov edx, dword [ebp - 0x107d4]
push edx
lea eax, [ebp - 0x6b50]
push eax
mov ecx, dword [ebp - 0x570]
mov edx, dword [ebp - 0x10aa0]
lea eax, [edx + ecx + 0x4e9]
push eax
call fcn.1001d000
add esp, 0xc
mov ecx, dword [ebp - 0x570]
mov edx, dword [ebp - 0x10aa0]
lea eax, [edx + ecx + 0x4e9]
mov dword [ebp - 0x107d0], eax
mov ecx, dword [ebp - 0x570]
add ecx, dword [ebp - 0x107d4]
mov dword [ebp - 0x570], ecx
mov edx, dword [ebp - 0x6b54]
add edx, 1
mov dword [ebp - 0x6b54], edx
jmp 0x1003a319
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [ebp - 0x6b54]
mov dword [eax + 0x4c0], ecx
mov dword [ebp - 0x6b58], 0xffff03b4
mov edx, dword [ebp - 0x570]
add edx, dword [ebp - 0x550]
mov dword [ebp - 0x570], edx
mov eax, dword [ebp - 0x570]
add eax, 0x25
mov dword [ebp - 0xab0], eax
mov ecx, dword [ebp - 0x10aa0]
mov edx, dword [ebp - 0x10aa0]
mov eax, dword [edx + 0x4b8]
mov dword [ecx + 0x4dd], eax
mov ecx, dword [ebp - 0x10aa0]
mov edx, dword [ebp - 0x10aa0]
mov eax, dword [edx + 0x4bc]
mov dword [ecx + 0x4e1], eax
mov ecx, dword [ebp - 0x10aa0]
mov edx, dword [ebp - 0x10aa0]
mov eax, dword [edx + 0x4c0]
mov dword [ecx + 0x4e5], eax
mov byte [ebp - 0x6a80], 0
push 0x12b
push 0
lea ecx, [ebp - 0x6a7f]
push ecx
call fcn.1001c970
add esp, 0xc
mov edx, dword [ebp - 0x10aa0]
mov eax, dword [edx + 0x4e5]
push eax
mov ecx, dword [ebp - 0x10aa0]
mov edx, dword [ecx + 0x4e1]
push edx
mov eax, dword [ebp - 0x10aa0]
mov ecx, dword [eax + 0x4dd]
push ecx
push str.iModule:_d__iProcess:_d__iWindow:_d
lea edx, [ebp - 0x6a80]
push edx
call fcn.1001aa93
add esp, 0x14
mov eax, dword [ebp - 0xab0]
jmp 0x1003a747
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1001a63f
mov esp, ebp
pop ebp
ret