Function at 0x100385e0
Capabilities:
Contain obfuscated stackstrings
Get process image filename

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006bfcd
mov eax, dword fs:[0]
push eax
mov eax, 0x1324
call fcn.100457c0
mov eax, dword [0x100a7084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xd24], ecx
mov dword [ebp - 0xd58], 0
call fcn.10041b20
mov dword [ebp - 0xd5c], eax
mov dword [ebp - method.AutoLock.virtual_0], vtable.AutoLock.0
mov eax, dword [ebp - 0xd24]
add eax, 0x30
mov dword [ebp - 0xc3c], eax
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0xefc], ecx
mov edx, dword [ebp - 0xefc]
add edx, 4
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0xc74], eax
mov ecx, dword [ebp - 0xd24]
add ecx, 0x4c
mov dword [ebp - 0xf10], ecx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0xc74]
push eax
mov ecx, dword [ebp - 0xf10]
call fcn.100361f0
mov ecx, dword [ebp - 0xd24]
add ecx, 0x4c
mov dword [ebp - 0xf34], ecx
mov edx, dword [ebp - 0xf34]
add edx, 4
mov dword [ebp - 0xd74], edx
mov eax, dword [ebp - 0xf7c]
mov dword [ebp - 0xf38], eax
mov ecx, dword [ebp - 0xd74]
mov dword [ebp - 0xf38], ecx
mov edx, dword [ebp - 0xd74]
mov eax, dword [edx]
mov dword [ebp - 0xf3c], eax
mov ecx, dword [ebp - 0xf3c]
mov dword [ebp - 0xf40], ecx
lea edx, [ebp - 0xf40]
mov dword [ebp - 0xf44], edx
mov eax, dword [ebp - 0xf44]
mov ecx, dword [ebp - 0xc74]
cmp ecx, dword [eax]
jne 0x1003870b
mov dword [ebp - 0xd78], 1
jmp 0x10038715
mov dword [ebp - 0xd78], 0
mov dl, byte [ebp - 0xd78]
mov byte [ebp - 0xd26], dl
movzx eax, byte [ebp - 0xd26]
test eax, eax
jne 0x1003876b
mov byte [ebp - 0xd27], 0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - method.AutoLock.virtual_0], vtable.AutoLock.0
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0xf48], ecx
mov edx, dword [ebp - 0xf48]
add edx, 4
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [ebp - 0xd27]
jmp 0x10039e18
push str.COMMON
lea ecx, [ebp - 0xca4]
call fcn.1001fed0
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
push eax
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0xd30], eax
cmp dword [ebp - 0xd30], 0
je 0x1003899b
mov cx, word [0x10092128]
mov word [ebp - 0x420], cx
push 0x206
push 0
lea edx, [ebp - 0x41e]
push edx
call fcn.10047f50
add esp, 0xc
push 0x104
lea eax, [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0xd30]
push ecx
call sub.KERNEL32.dll_K32GetProcessImageFileNameW
mov dword [ebp - 0xf4c], eax
cmp dword [ebp - 0xf4c], 0
je 0x1003899b
mov dx, word [0x1009212c]
mov word [ebp - 0x830], dx
push 0x206
push 0
lea eax, [ebp - 0x82e]
push eax
call fcn.10047f50
add esp, 0xc
mov cx, word [0x10092130]
mov word [ebp - 0x628], cx
push 0x206
push 0
lea edx, [ebp - 0x626]
push edx
call fcn.10047f50
add esp, 0xc
mov ax, word [0x10092134]
mov word [ebp - 0x218], ax
push 0x206
push 0
lea ecx, [ebp - 0x216]
push ecx
call fcn.10047f50
add esp, 0xc
mov dx, word [0x10092138]
mov word [ebp - 0xc38], dx
push 0x206
push 0
lea eax, [ebp - 0xc36]
push eax
call fcn.10047f50
add esp, 0xc
push 0x104
lea ecx, [ebp - 0xc38]
push ecx
push 0x104
lea edx, [ebp - 0x218]
push edx
push 0x104
lea eax, [ebp - 0x628]
push eax
push 0x104
lea ecx, [ebp - 0x830]
push ecx
lea edx, [ebp - 0x420]
push edx
call fcn.10051808
add esp, 0x24
lea eax, [ebp - 0x218]
mov dword [ebp - 0xd3c], eax
mov ecx, dword [ebp - 0xd3c]
add ecx, 2
mov dword [ebp - 0xf50], ecx
mov edx, dword [ebp - 0xd3c]
mov ax, word [edx]
mov word [ebp - 0xd70], ax
add dword [ebp - 0xd3c], 2
cmp word [ebp - 0xd70], 0
jne 0x100388db
mov ecx, dword [ebp - 0xd3c]
sub ecx, dword [ebp - 0xf50]
sar ecx, 1
mov dword [ebp - 0xf54], ecx
mov edx, dword [ebp - 0xf54]
mov dword [ebp - 0xf58], edx
mov eax, dword [ebp - 0xf58]
mov dword [ebp - 0xf5c], eax
mov ecx, dword [ebp - 0xf5c]
push ecx
lea edx, [ebp - 0x218]
push edx
lea ecx, [ebp - 0xca4]
call fcn.10022880
xor eax, eax
mov byte [ebp - 0xd28], al
mov cl, byte [ebp - 0xd28]
mov byte [ebp - 0xd29], cl
lea edx, [ebp - 0xf80]
push edx
lea ecx, [ebp - 0xca4]
call fcn.10028700
mov eax, dword [eax]
mov dword [ebp - 0xf60], eax
movzx ecx, byte [ebp - 0xd29]
push ecx
push 0x100515cb
mov edx, dword [ebp - 0xf60]
push edx
lea eax, [ebp - 0xca4]
push eax
lea ecx, [ebp - 0x1198]
push ecx
mov ecx, 0x10091a76
call fcn.10034ee0
xor edx, edx
mov dword [ebp - 0xc58], edx
mov dword [ebp - 0xc54], edx
mov dword [ebp - 0xc50], edx
mov dword [ebp - 0xc4c], edx
mov dword [ebp - 0xc48], edx
mov dword [ebp - 0xc44], edx
call fcn.10041b20
mov dword [ebp - 0xf68], eax
lea ecx, [ebp - 0xca4]
call fcn.100228f0
mov dword [ebp - 0xf64], eax
mov eax, dword [ebp - 0xf64]
push eax
lea ecx, [ebp - 0xc58]
push ecx
mov ecx, dword [ebp - 0xf68]
call fcn.1003f700
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc58]
call fcn.1001a460
movzx edx, al
test edx, edx
je 0x10038a76
mov eax, dword [ebp - 0xd30]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0xd2a], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc58]
call fcn.100165a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xca4]
call fcn.100223b0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - method.AutoLock.virtual_0], vtable.AutoLock.0
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0xd88], ecx
mov edx, dword [ebp - 0xd88]
add edx, 4
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [ebp - 0xd2a]
jmp 0x10039e18
sub esp, 8
mov eax, esp
mov dword [ebp - 0xf84], esp
mov dword [ebp - 0xd7c], eax
mov ecx, dword [ebp - 0xd7c]
mov dword [ecx], 0x1009213c
mov dword [ebp - 0xd38], 0x1009213c
mov edx, dword [ebp - 0xd38]
add edx, 1
mov dword [ebp - 0xd8c], edx
mov eax, dword [ebp - 0xd38]
mov cl, byte [eax]
mov byte [ebp - 0xd15], cl
add dword [ebp - 0xd38], 1
cmp byte [ebp - 0xd15], 0
jne 0x10038aac
mov edx, dword [ebp - 0xd38]
sub edx, dword [ebp - 0xd8c]
mov dword [ebp - 0xd90], edx
mov eax, dword [ebp - 0xd90]
mov dword [ebp - 0xd94], eax
mov ecx, dword [ebp - 0xd7c]
mov edx, dword [ebp - 0xd94]
mov dword [ecx + 4], edx
lea eax, [ebp - 0xd08]
push eax
call fcn.10034910
add esp, 0xc
mov dword [ebp - 0xf98], eax
mov byte [ebp - 4], 3
xor ecx, ecx
mov dword [ebp - 0xc70], ecx
mov dword [ebp - 0xc6c], ecx
mov dword [ebp - 0xc68], ecx
mov dword [ebp - 0xc64], ecx
mov dword [ebp - 0xc60], ecx
mov dword [ebp - 0xc5c], ecx
call fcn.10041b20
mov dword [ebp - 0xd9c], eax
lea ecx, [ebp - 0xd08]
call fcn.100228f0
mov dword [ebp - 0xd98], eax
mov edx, dword [ebp - 0xd98]
push edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xd9c]
call fcn.1003f700
mov byte [ebp - 4], 4
sub esp, 8
movsd xmm0, qword [0x10090a68]
movsd qword [esp], xmm0
lea ecx, [ebp - 0xfd0]
call fcn.10015b90
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xfd0]
push ecx
push 0x1009214c
lea edx, [ebp - 0x1210]
push edx
lea ecx, [ebp - 0xc70]
call fcn.1001a8d0
mov dword [ebp - 0xda0], eax
mov eax, dword [ebp - 0xda0]
mov dword [ebp - 0xda4], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xda4]
call fcn.10018730
fstp qword [ebp - 0xf94]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1210]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xfd0]
call fcn.100165a0
sub esp, 8
movsd xmm0, qword [0x10090a98]
movsd qword [esp], xmm0
lea ecx, [ebp - 0xfe8]
call fcn.10015b90
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xfe8]
push ecx
push 0x10092158
lea edx, [ebp - 0x12a0]
push edx
lea ecx, [ebp - 0xc70]
call fcn.1001a8d0
mov dword [ebp - 0xda8], eax
mov eax, dword [ebp - 0xda8]
mov dword [ebp - 0xdac], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xdac]
call fcn.10018730
fstp qword [ebp - 0xf8c]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x12a0]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xfe8]
call fcn.100165a0
sub esp, 8
movsd xmm0, qword [0x100923a8]
movsd qword [esp], xmm0
lea ecx, [ebp - 0x1000]
call fcn.10015b90
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1000]
push ecx
push 0x10092170
lea edx, [ebp - 0x12b8]
push edx
lea ecx, [ebp - 0xc70]
call fcn.1001a8d0
mov dword [ebp - 0xdb0], eax
mov eax, dword [ebp - 0xdb0]
mov dword [ebp - 0xdb4], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0xdb4]
call fcn.10018730
fstp qword [ebp - 0xfa0]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x12b8]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1000]
call fcn.100165a0
sub esp, 8
movsd xmm0, qword [0x10090a58]
movsd qword [esp], xmm0
lea ecx, [ebp - 0x1018]
call fcn.10015b90
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1018]
push ecx
push 0x10092188
lea edx, [ebp - 0x12d0]
push edx
lea ecx, [ebp - 0xc70]
call fcn.1001a8d0
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0xdb8]
mov dword [ebp - 0xdbc], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xdbc]
call fcn.10018730
fstp qword [ebp - 0xfa8]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x12d0]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1018]
call fcn.100165a0
push 1
lea ecx, [ebp - 0x1030]
call fcn.10016040
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1030]
push ecx
push 0x10092194
lea edx, [ebp - 0x12e8]
push edx
lea ecx, [ebp - 0xc70]
call fcn.1001a8d0
mov dword [ebp - 0xdc0], eax
mov eax, dword [ebp - 0xdc0]
mov dword [ebp - 0xdc4], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0xdc4]
call fcn.100182d0
mov byte [ebp - 0xd16], al
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x12e8]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1030]
call fcn.100165a0
push 0
lea ecx, [ebp - 0x1048]
call fcn.10016040
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1048]
push ecx
push 0x1009219c
lea edx, [ebp - 0x1300]
push edx
lea ecx, [ebp - 0xc70]
call fcn.1001a8d0
mov dword [ebp - 0xdc8], eax
mov eax, dword [ebp - 0xdc8]
mov dword [ebp - 0xdcc], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0xdcc]
call fcn.100182d0
mov byte [ebp - 0xd25], al
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1300]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1048]
call fcn.100165a0
push 0
lea ecx, [ebp - 0x1060]
call fcn.10016040
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1060]
push ecx
push 0x100921a4
lea edx, [ebp - 0x1318]
push edx
lea ecx, [ebp - 0xc70]
call fcn.1001a8d0
mov dword [ebp - 0xdd0], eax
mov eax, dword [ebp - 0xdd0]
mov dword [ebp - 0xdd4], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0xdd4]
call fcn.100182d0
mov byte [ebp - 0xd17], al
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1318]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1060]
call fcn.100165a0
push 0
lea ecx, [ebp - 0x1078]
call fcn.10016040
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1078]
push ecx
push 0x100921b0
lea edx, [ebp - 0x11b0]
push edx
lea ecx, [ebp - 0xc70]
call fcn.1001a8d0
mov dword [ebp - 0xdd8], eax
mov eax, dword [ebp - 0xdd8]
mov dword [ebp - 0xddc], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xddc]
call fcn.100182d0
mov byte [ebp - 0xd18], al
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x11b0]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1078]
call fcn.100165a0
sub esp, 8
movsd xmm0, qword [ebp - 0xf94]
movsd qword [esp], xmm0
lea ecx, [ebp - 0x1090]
call fcn.10015b90
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1090]
push ecx
push 0x100921c0
lea edx, [ebp - 0x11c8]
push edx
lea ecx, [ebp - 0xc58]
call fcn.1001a8d0
mov dword [ebp - 0xde0], eax
mov eax, dword [ebp - 0xde0]
mov dword [ebp - 0xde4], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0xde4]
call fcn.10018730
fstp qword [ebp - 0xfb8]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x11c8]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1090]
call fcn.100165a0
sub esp, 8
movsd xmm0, qword [ebp - 0xf8c]
movsd qword [esp], xmm0
lea ecx, [ebp - 0x10a8]
call fcn.10015b90
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x10a8]
push ecx
push 0x100921cc
lea edx, [ebp - 0x11e0]
push edx
lea ecx, [ebp - 0xc58]
call fcn.1001a8d0
mov dword [ebp - 0xde8], eax
mov eax, dword [ebp - 0xde8]
mov dword [ebp - 0xdec], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0xdec]
call fcn.10018730
fstp qword [ebp - 0xf28]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x11e0]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10a8]
call fcn.100165a0
sub esp, 8
movsd xmm0, qword [ebp - 0xfa0]
movsd qword [esp], xmm0
lea ecx, [ebp - 0x10c0]
call fcn.10015b90
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10c0]
push ecx
push str.EvaluationTimeoutSec
lea edx, [ebp - 0x11f8]
push edx
lea ecx, [ebp - 0xc58]
call fcn.1001a8d0
mov dword [ebp - 0xdf0], eax
mov eax, dword [ebp - 0xdf0]
mov dword [ebp - 0xdf4], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0xdf4]
call fcn.10018730
fstp qword [ebp - 0xf30]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x11f8]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10c0]
call fcn.100165a0
sub esp, 8
movsd xmm0, qword [ebp - 0xfa8]
movsd qword [esp], xmm0
lea ecx, [ebp - 0x10d8]
call fcn.10015b90
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x10d8]
push ecx
push 0x100921fc
lea edx, [ebp - 0x1330]
push edx
lea ecx, [ebp - 0xc58]
call fcn.1001a8d0
mov dword [ebp - 0xdf8], eax
mov eax, dword [ebp - 0xdf8]
mov dword [ebp - 0xdfc], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0xdfc]
call fcn.10018730
fstp qword [ebp - 0xfb0]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1330]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10d8]
call fcn.100165a0
movzx ecx, byte [ebp - 0xd16]
push ecx
lea ecx, [ebp - 0x1170]
call fcn.10016040
mov byte [ebp - 4], 0x1d
lea edx, [ebp - 0x1170]
push edx
push 0x10092208
lea eax, [ebp - 0x1228]
push eax
lea ecx, [ebp - 0xc58]
call fcn.1001a8d0
mov dword [ebp - 0xe00], eax
mov ecx, dword [ebp - 0xe00]
mov dword [ebp - 0xe04], ecx
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0xe04]
call fcn.100182d0
mov byte [ebp - 0xd1d], al
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1228]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1170]
call fcn.100165a0
movzx edx, byte [ebp - 0xd25]
push edx
lea ecx, [ebp - 0x10f0]
call fcn.10016040
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x10f0]
push eax
push 0x10092210
lea ecx, [ebp - 0x1240]
push ecx
lea ecx, [ebp - 0xc58]
call fcn.1001a8d0
mov dword [ebp - 0xe08], eax
mov edx, dword [ebp - 0xe08]
mov dword [ebp - 0xe0c], edx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0xe0c]
call fcn.100182d0
mov byte [ebp - 0xd1e], al
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1240]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10f0]
call fcn.100165a0
movzx eax, byte [ebp - 0xd17]
push eax
lea ecx, [ebp - 0x1108]
call fcn.10016040
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1108]
push ecx
push 0x10092218
lea edx, [ebp - 0x1258]
push edx
lea ecx, [ebp - 0xc58]
call fcn.1001a8d0
mov dword [ebp - 0xe10], eax
mov eax, dword [ebp - 0xe10]
mov dword [ebp - 0xe14], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0xe14]
call fcn.100182d0
mov byte [ebp - 0xd0d], al
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1258]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1108]
call fcn.100165a0
movzx ecx, byte [ebp - 0xd18]
push ecx
lea ecx, [ebp - 0x1120]
call fcn.10016040
mov byte [ebp - 4], 0x23
lea edx, [ebp - 0x1120]
push edx
push str.ReportLoadtime0
lea eax, [ebp - 0x1270]
push eax
lea ecx, [ebp - 0xc58]
call fcn.1001a8d0
mov dword [ebp - 0xe18], eax
mov ecx, dword [ebp - 0xe18]
mov dword [ebp - 0xe1c], ecx
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0xe1c]
call fcn.100182d0
mov byte [ebp - 0xd1f], al
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1270]
call fcn.100165a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1120]
call fcn.100165a0
movsd xmm0, qword [0x1008f958]
comisd xmm0, xmmword [ebp - 0xf28]
ja 0x1003935f
movsd xmm0, qword [0x1008f958]
comisd xmm0, xmmword [ebp - 0xf30]
jbe 0x10039427
mov edx, dword [ebp - 0xd24]
add edx, 0x4c
mov dword [ebp - 0xe20], edx
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x1158]
push ecx
mov ecx, dword [ebp - 0xe20]
call fcn.10035860
mov edx, dword [eax]
mov dword [edx + 0xc], 0
mov eax, dword [ebp - 0xd30]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10092238
push 0xfffffffffffffff0
mov ecx, dword [ebp - 0xd5c]
call fcn.1003ae30
mov byte [ebp - 0xd19], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc70]
call fcn.100165a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd08]
call fcn.100223b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc58]
call fcn.100165a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xca4]
call fcn.100223b0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - method.AutoLock.virtual_0], vtable.AutoLock.0
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0xe24], ecx
mov edx, dword [ebp - 0xe24]
add edx, 4
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [ebp - 0xd19]
jmp 0x10039e18
movsd xmm0, qword [ebp - 0xf28]
comisd xmm0, xmmword [ebp - 0xf30]
jbe 0x10039505
mov eax, dword [ebp - 0xd24]
add eax, 0x4c
mov dword [ebp - 0xe28], eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x1178]
push edx
mov ecx, dword [ebp - 0xe28]
call fcn.10035860
mov eax, dword [eax]
mov dword [eax + 0xc], 0
mov ecx, dword [ebp - 0xd30]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.Attenuation_timeout_should_be_less_or_equal_to_final_timeout
push 0xfffffffffffffff0
mov ecx, dword [ebp - 0xd5c]
call fcn.1003ae30
mov byte [ebp - 0xd1a], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc70]
call fcn.100165a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd08]
call fcn.100223b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc58]
call fcn.100165a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xca4]
call fcn.100223b0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - method.AutoLock.virtual_0], vtable.AutoLock.0
mov edx, dword [ebp - 0xc3c]
mov dword [ebp - 0xe2c], edx
mov eax, dword [ebp - 0xe2c]
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [ebp - 0xd1a]
jmp 0x10039e18
push 0x190
call fcn.10044cf0
add esp, 4
mov dword [ebp - 0xd60], eax
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0xd60], 0
je 0x1003954e
push 0x190
push 0
mov ecx, dword [ebp - 0xd60]
push ecx
call fcn.10047f50
add esp, 0xc
mov ecx, dword [ebp - 0xd60]
call fcn.10026170
mov dword [ebp - 0xd80], eax
jmp 0x10039558
mov dword [ebp - 0xd80], 0
mov edx, dword [ebp - 0xd80]
mov dword [ebp - 0xe30], edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0xe30]
mov dword [ebp - 0xd14], eax
lea ecx, [ebp - 0xccc]
mov dword [ebp - 0xe34], ecx
mov ecx, dword [ebp - 0xe34]
call fcn.100042d0
lea edx, [ebp - 0xccc]
mov dword [ebp - 0xf74], edx
lea ecx, [ebp - 0xccc]
call fcn.10022500
mov byte [ebp - 4], 0x26
movzx eax, byte [ebp - 0xd0d]
test eax, eax
je 0x10039ca6
lea ecx, [ebp - 0xc8c]
mov dword [ebp - 0xe38], ecx
mov ecx, dword [ebp - 0xe38]
call fcn.100042d0
lea edx, [ebp - 0xc8c]
mov dword [ebp - 0xf78], edx
lea ecx, [ebp - 0xc8c]
call fcn.10022500
mov byte [ebp - 4], 0x27
mov dword [ebp - 0xd0c], 0
lea eax, [ebp - 0xd0c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
lea edx, [ebp - 0x1288]
push edx
mov ecx, dword [ebp - 0xd5c]
call fcn.1003f4a0
mov dword [ebp - 0xe3c], eax
mov eax, dword [ebp - 0xe3c]
push eax
lea ecx, [ebp - 0xccc]
call fcn.10036a90
lea ecx, [ebp - 0x1288]
call fcn.100223b0
lea ecx, [ebp - 0xccc]
mov dword [ebp - 0xe40], ecx
lea edx, [ebp - 0xc8c]
cmp edx, dword [ebp - 0xe40]
je 0x10039673
xor eax, eax
mov byte [ebp - 0xd1b], al
movzx ecx, byte [ebp - 0xd1b]
push ecx
lea edx, [ebp - 0xccc]
push edx
lea ecx, [ebp - 0xc8c]
call fcn.10037340
mov dword [ebp - 0xd34], 0x10092234
mov eax, dword [ebp - 0xd34]
add eax, 2
mov dword [ebp - 0xe44], eax
mov ecx, dword [ebp - 0xd34]
mov dx, word [ecx]
mov word [ebp - 0xd6e], dx
add dword [ebp - 0xd34], 2
cmp word [ebp - 0xd6e], 0
jne 0x1003968c
mov eax, dword [ebp - 0xd34]
sub eax, dword [ebp - 0xe44]
sar eax, 1
mov dword [ebp - 0xe48], eax
mov ecx, dword [ebp - 0xe48]
mov dword [ebp - 0xe4c], ecx
mov edx, dword [ebp - 0xe4c]
mov dword [ebp - 0xe50], edx
mov eax, dword [ebp - 0xe50]
push eax
push 0x10092234
lea ecx, [ebp - 0xc8c]
call fcn.10028590
mov dword [ebp - 0xe54], eax
lea ecx, [ebp - 0xca4]
push ecx
mov ecx, dword [ebp - 0xe54]
call fcn.10028550
mov dword [ebp - 0xe68], eax
mov dword [ebp - 0xd40], str._ALT__
mov edx, dword [ebp - 0xd40]
add edx, 2
mov dword [ebp - 0xe58], edx
mov eax, dword [ebp - 0xd40]
mov cx, word [eax]
mov word [ebp - 0xd6a], cx
add dword [ebp - 0xd40], 2
cmp word [ebp - 0xd6a], 0
jne 0x10039727
mov edx, dword [ebp - 0xd40]
sub edx, dword [ebp - 0xe58]
sar edx, 1
mov dword [ebp - 0xe5c], edx
mov eax, dword [ebp - 0xe5c]
mov dword [ebp - 0xe60], eax
mov ecx, dword [ebp - 0xe60]
mov dword [ebp - 0xe64], ecx
mov edx, dword [ebp - 0xe64]
push edx
push str._ALT__
mov ecx, dword [ebp - 0xe68]
call fcn.10028590
mov dword [ebp - 0xe78], eax
mov eax, dword [ebp - 0xd0c]
mov dword [ebp - 0xe6c], eax
mov ecx, dword [ebp - 0xe6c]
push ecx
lea edx, [ebp - 0x1138]
push edx
call fcn.10035d70
add esp, 8
mov eax, dword [ebp - 0xd58]
or eax, 2
mov dword [ebp - 0xd58], eax
lea ecx, [ebp - 0x1138]
mov dword [ebp - 0xe70], ecx
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0xe70]
mov dword [ebp - 0xe74], edx
mov eax, dword [ebp - 0xe74]
push eax
mov ecx, dword [ebp - 0xe78]
call fcn.10028550
mov dword [ebp - 0xe8c], eax
mov dword [ebp - 0xd44], 0x10092314
mov ecx, dword [ebp - 0xd44]
add ecx, 2
mov dword [ebp - 0xe7c], ecx
mov edx, dword [ebp - 0xd44]
mov ax, word [edx]
mov word [ebp - 0xd68], ax
add dword [ebp - 0xd44], 2
cmp word [ebp - 0xd68], 0
jne 0x1003980f
mov ecx, dword [ebp - 0xd44]
sub ecx, dword [ebp - 0xe7c]
sar ecx, 1
mov dword [ebp - 0xe80], ecx
mov edx, dword [ebp - 0xe80]
mov dword [ebp - 0xe84], edx
mov eax, dword [ebp - 0xe84]
mov dword [ebp - 0xe88], eax
mov ecx, dword [ebp - 0xe88]
push ecx
push 0x10092314
mov ecx, dword [ebp - 0xe8c]
call fcn.10028590
mov dword [ebp - 0xe90], eax
lea edx, [ebp - 0xca4]
push edx
mov ecx, dword [ebp - 0xe90]
call fcn.10028550
mov dword [ebp - 0xea4], eax
mov dword [ebp - 0xd48], 0x1009231c
mov eax, dword [ebp - 0xd48]
add eax, 2
mov dword [ebp - 0xe94], eax
mov ecx, dword [ebp - 0xd48]
mov dx, word [ecx]
mov word [ebp - 0xd66], dx
add dword [ebp - 0xd48], 2
cmp word [ebp - 0xd66], 0
jne 0x100398aa
mov eax, dword [ebp - 0xd48]
sub eax, dword [ebp - 0xe94]
sar eax, 1
mov dword [ebp - 0xe98], eax
mov ecx, dword [ebp - 0xe98]
mov dword [ebp - 0xe9c], ecx
mov edx, dword [ebp - 0xe9c]
mov dword [ebp - 0xea0], edx
mov eax, dword [ebp - 0xea0]
push eax
push 0x1009231c
mov ecx, dword [ebp - 0xea4]
call fcn.10028590
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1138]
call fcn.100223b0
mov ecx, dword [ebp + 8]
mov dword [ebp - 0xea8], ecx
mov edx, dword [ebp - 0xea8]
push edx
lea eax, [ebp - 0x1150]
push eax
call fcn.10035d70
add esp, 8
mov ecx, dword [ebp - 0xd58]
or ecx, 4
mov dword [ebp - 0xd58], ecx
lea edx, [ebp - 0x1150]
mov dword [ebp - 0xeac], edx
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xeac]
push eax
lea ecx, [ebp - 0xc8c]
call fcn.10028550
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1150]
call fcn.100223b0
mov dword [ebp - 0xd4c], 0x10092320
mov ecx, dword [ebp - 0xd4c]
add ecx, 2
mov dword [ebp - 0xeb0], ecx
mov edx, dword [ebp - 0xd4c]
mov ax, word [edx]
mov word [ebp - 0xd64], ax
add dword [ebp - 0xd4c], 2
cmp word [ebp - 0xd64], 0
jne 0x10039995
mov ecx, dword [ebp - 0xd4c]
sub ecx, dword [ebp - 0xeb0]
sar ecx, 1
mov dword [ebp - 0xeb4], ecx
mov edx, dword [ebp - 0xeb4]
mov dword [ebp - 0xeb8], edx
mov eax, dword [ebp - 0xeb8]
mov dword [ebp - 0xebc], eax
mov ecx, dword [ebp - 0xebc]
push ecx
push 0x10092320
lea ecx, [ebp - 0xc8c]
call fcn.10028590
call fcn.1004449f
mov dword [ebp - 0xf04], eax
mov dword [ebp - 0xf00], edx
mov edx, dword [ebp - 0xf04]
mov eax, dword [ebp - 0xf00]
mov dword [ebp - 0xf0c], edx
mov dword [ebp - 0xf08], eax
mov ecx, dword [ebp - 0xf0c]
mov edx, dword [ebp - 0xf08]
mov dword [ebp - 0xcac], ecx
mov dword [ebp - 0xca8], edx
mov eax, dword [ebp - 0xcac]
mov ecx, dword [ebp - 0xca8]
mov dword [ebp - 0xf70], eax
mov dword [ebp - 0xf6c], ecx
lea edx, [ebp - 0xf70]
mov dword [ebp - 0xec0], edx
mov eax, dword [ebp - 0xec0]
push eax
lea ecx, [ebp - 0x1180]
push ecx
call fcn.100360e0
add esp, 8
mov dword [ebp - 0xec4], eax
mov edx, dword [ebp - 0xec4]
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [ebp - 0xf18], eax
mov dword [ebp - 0xf14], ecx
mov edx, dword [ebp - 0xf18]
mov eax, dword [ebp - 0xf14]
mov dword [ebp - 0xf20], edx
mov dword [ebp - 0xf1c], eax
mov ecx, dword [ebp - 0xf20]
mov edx, dword [ebp - 0xf1c]
mov dword [ebp - 0xcb4], ecx
mov dword [ebp - 0xcb0], edx
xor eax, eax
mov dword [ebp - 0xcf0], eax
mov dword [ebp - 0xcec], eax
mov dword [ebp - 0xce8], eax
mov dword [ebp - 0xce4], eax
mov dword [ebp - 0xce0], eax
mov dword [ebp - 0xcdc], eax
mov dword [ebp - 0xcd8], eax
mov dword [ebp - 0xcd4], eax
mov dword [ebp - 0xcd0], eax
lea ecx, [ebp - 0xcb4]
push ecx
lea edx, [ebp - 0xcf0]
push edx
call fcn.10052d04
add esp, 8
lea eax, [ebp - 0xcf0]
push eax
push 0x10092324
push 0x200
lea ecx, [ebp - 0xa30]
push ecx
call fcn.10052a56
add esp, 0x10
lea edx, [ebp - 0xa30]
mov dword [ebp - 0xd50], edx
mov eax, dword [ebp - 0xd50]
add eax, 2
mov dword [ebp - 0xec8], eax
mov ecx, dword [ebp - 0xd50]
mov dx, word [ecx]
mov word [ebp - 0xd6c], dx
add dword [ebp - 0xd50], 2
cmp word [ebp - 0xd6c], 0
jne 0x10039b4a
mov eax, dword [ebp - 0xd50]
sub eax, dword [ebp - 0xec8]
sar eax, 1
mov dword [ebp - 0xecc], eax
mov ecx, dword [ebp - 0xecc]
mov dword [ebp - 0xed0], ecx
mov edx, dword [ebp - 0xed0]
mov dword [ebp - 0xed4], edx
mov eax, dword [ebp - 0xed4]
push eax
lea ecx, [ebp - 0xa30]
push ecx
lea ecx, [ebp - 0xc8c]
call fcn.10028590
mov dword [ebp - 0xee8], eax
mov dword [ebp - 0xd54], str..log
mov edx, dword [ebp - 0xd54]
add edx, 2
mov dword [ebp - 0xed8], edx
mov eax, dword [ebp - 0xd54]
mov cx, word [eax]
mov word [ebp - 0xd62], cx
add dword [ebp - 0xd54], 2
cmp word [ebp - 0xd62], 0
jne 0x10039bcf
mov edx, dword [ebp - 0xd54]
sub edx, dword [ebp - 0xed8]
sar edx, 1
mov dword [ebp - 0xedc], edx
mov eax, dword [ebp - 0xedc]
mov dword [ebp - 0xee0], eax
mov ecx, dword [ebp - 0xee0]
mov dword [ebp - 0xee4], ecx
mov edx, dword [ebp - 0xee4]
push edx
push str..log
mov ecx, dword [ebp - 0xee8]
call fcn.10028590
lea eax, [ebp - 0xca4]
push eax
lea ecx, [ebp - 0xccc]
push ecx
mov ecx, dword [ebp - 0xd14]
call fcn.10028af0
mov edx, dword [ebp - 0xd14]
add edx, 4
mov dword [ebp - 0xd84], edx
lea eax, [ebp - 0xc8c]
mov dword [ebp - 0xeec], eax
mov ecx, dword [ebp - 0xd84]
cmp ecx, dword [ebp - 0xeec]
je 0x10039c97
xor edx, edx
mov byte [ebp - 0xd1c], dl
movzx eax, byte [ebp - 0xd1c]
push eax
lea ecx, [ebp - 0xc8c]
push ecx
mov ecx, dword [ebp - 0xd84]
call fcn.10037340
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xc8c]
call fcn.100223b0
mov eax, dword [ebp - 0xd14]
movsd xmm0, qword [ebp - 0xfb0]
movsd qword [eax + 0x160], xmm0
mov ecx, dword [ebp - 0xd14]
movsd xmm0, qword [ebp - 0xf28]
movsd qword [ecx + 0x150], xmm0
mov edx, dword [ebp - 0xd14]
movsd xmm0, qword [ebp - 0xf30]
movsd qword [edx + 0x158], xmm0
mov eax, dword [ebp - 0xd14]
movsd xmm0, qword [ebp - 0xfb8]
movsd qword [eax + 0x168], xmm0
mov ecx, dword [ebp - 0xd14]
mov dl, byte [ebp - 0xd1d]
mov byte [ecx + 1], dl
mov eax, dword [ebp - 0xd14]
mov cl, byte [ebp - 0xd1e]
mov byte [eax + 2], cl
mov edx, dword [ebp - 0xd14]
mov al, byte [ebp - 0xd1f]
mov byte [edx + 0x1c], al
mov ecx, dword [ebp - 0xd24]
add ecx, 0x4c
mov dword [ebp - 0xef0], ecx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x1188]
push eax
mov ecx, dword [ebp - 0xef0]
call fcn.10035860
mov ecx, dword [eax]
mov edx, dword [ebp - 0xd14]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0xd24]
add eax, 0x6c
mov dword [ebp - 0xef4], eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x1190]
push edx
mov ecx, dword [ebp - 0xef4]
call fcn.10035ac0
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd30]
mov dword [eax + 0xc], ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xccc]
call fcn.100223b0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc70]
call fcn.100165a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd08]
call fcn.100223b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc58]
call fcn.100165a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xca4]
call fcn.100223b0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - method.AutoLock.virtual_0], vtable.AutoLock.0
mov edx, dword [ebp - 0xc3c]
mov dword [ebp - 0xef8], edx
mov eax, dword [ebp - 0xef8]
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 1
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xd5c]
call fcn.1002a2d0
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10044f41
mov esp, ebp
pop ebp
ret 4