Function at 0x1003ecf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007af02
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x100a600c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100a7804]
push 0x100aa080
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x1c], 0x9182c6eb
mov eax, dword [esi + 0x1830]
test al, 1
jne 0x1003ed9c
or eax, 1
mov dword [esi + 0x1830], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2d0c], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x2d08], al
add ecx, 1
adc edx, 0
jne 0x1003ed88
cmp ecx, 4
jb 0x1003ed70
push 0x1008a990
call fcn.100738a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2d08]
mov ecx, edi
call fcn.10068610
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003edc0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x74]
call fcn.10070610
mov dword [ebp - 4], 1
movaps xmm0, xmmword [0x10098930]
mov eax, dword [esi + 0x93c]
mov word [ebp - 0x24], 0x90a8
mov byte [ebp - 0x22], 0xbf
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003ee49
or eax, 1
mov dword [esi + 0x93c], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x49b7], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x49a4], al
add ecx, 1
adc edx, 0
jne 0x1003ee38
cmp ecx, 0x13
jb 0x1003ee20
push 0x1008a9e0
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x49a4]
mov ecx, edi
call fcn.10068670
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ee70
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10070610
push 0x100a6a88
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa4]
call fcn.100707b0
add esp, 4
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x8c]
call fcn.10071ef0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x8c]
push 0x100a6ea8
call fcn.100707b0
add esp, 4
mov byte [ebp - 4], 6
mov eax, dword [esi + 0x3ee8]
mov dword [ebp - 0x44], 0xe3d6c5be
mov dword [ebp - 0x40], 0x86789506
mov dword [ebp - 0x3c], 0xfcd0cee3
mov byte [ebp - 0x38], 0x69
test al, 1
jne 0x1003ef49
or eax, 1
mov dword [esi + 0x3ee8], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2b5d], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x2b50], al
add ecx, 1
adc edx, 0
jne 0x1003ef38
cmp ecx, 0xd
jb 0x1003ef20
push 0x1008aa30
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x2b50]
mov ecx, edi
call fcn.100686d0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ef71
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10070610
mov ecx, dword [0x100acb38]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x78]
cmp edx, 0x10
jb 0x1003efcd
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003efc3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f0ae
push edx
push ecx
call fcn.100737f0
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp edx, 0x10
jb 0x1003f020
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f016
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f0ae
push edx
push ecx
call fcn.100737f0
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003f06f
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f065
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f0ae
push edx
push ecx
call fcn.100737f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003f0be
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f0b4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003f0b4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100737f0
add esp, 8
mov ecx, dword [0x100a8edc]
mov edx, 0x100a6e60
cmp dword [0x100a6e74], 0x10
push 0x100aa080
cmovae edx, dword [0x100a6e60]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100402b9
mov ecx, 0x100aa080
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f0f2
sub ecx, edx
cmp ecx, 0x20
jae 0x1003f109
cmp ecx, 5
ja 0x100402b9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2280]
mov dword [ebp - 0x40], 0xe995592d
mov dword [ebp - 0x3c], 0x484e3114
mov byte [ebp - 0x38], 0x45
push 0x100aa080
test al, 1
jne 0x1003f18c
or eax, 1
mov dword [esi + 0x2280], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x4281], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [ecx + esi + 0x4278], al
add ecx, 1
adc edx, 0
jne 0x1003f178
cmp ecx, 9
jb 0x1003f160
push 0x1008a850
call fcn.100738a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x4278]
mov ecx, edi
call fcn.10068490
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x3c], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f1b7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10070610
mov dword [ebp - 4], 9
mov eax, dword [esi + 0x2834]
mov dword [ebp - 0x1c], 0x99dc4663
test al, 1
jne 0x1003f239
or eax, 1
mov dword [esi + 0x2834], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1c5c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x1c58], al
add ecx, 1
adc edx, 0
jne 0x1003f228
cmp ecx, 4
jb 0x1003f210
push 0x1008a8a0
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x1c58]
mov ecx, edi
call fcn.100684f0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f260
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10070610
mov byte [ebp - 4], 0xb
movaps xmm0, xmmword [0x10097d10]
mov eax, dword [esi + 0x14bc]
mov word [ebp - 0x24], 0x1020
mov byte [ebp - 0x22], 0xe1
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003f2e9
or eax, 1
mov dword [esi + 0x14bc], eax
mov byte [ebp - 4], 0xc
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1e3], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x1d0], al
add ecx, 1
adc edx, 0
jne 0x1003f2d8
cmp ecx, 0x13
jb 0x1003f2c0
push 0x1008a8f0
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 0xb
lea edi, [esi + 0x1d0]
mov ecx, edi
call fcn.10068550
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f310
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10070610
push 0x100a6a88
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xa4]
call fcn.100707b0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0xe
push ecx
push eax
push dword [ebp - 0x3b]
lea ecx, [ebp - 0x74]
call fcn.10071ef0
sub esp, 0x18
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x74]
push 0x100a6ea8
call fcn.100707b0
add esp, 4
mov byte [ebp - 4], 0x10
mov eax, dword [esi + 0x39f0]
mov dword [ebp - 0x30], 0xeb884536
mov dword [ebp - 0x2c], 0x12187908
mov dword [ebp - 0x28], 0xf48e4e6b
mov byte [ebp - 0x24], 0x67
test al, 1
jne 0x1003f3e9
or eax, 1
mov dword [esi + 0x39f0], eax
mov byte [ebp - 4], 0x11
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1db9], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [ecx + esi + 0x1dac], al
add ecx, 1
adc edx, 0
jne 0x1003f3d8
cmp ecx, 0xd
jb 0x1003f3c0
push 0x1008a940
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 0x10
lea edi, [esi + 0x1dac]
mov ecx, edi
call fcn.100685b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f411
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10070610
mov ecx, dword [0x100acb38]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003f469
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f45f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f54a
push edx
push ecx
call fcn.100737f0
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003f4b9
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f4af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f54a
push edx
push ecx
call fcn.100737f0
add esp, 8
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003f508
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f4fe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f54a
push edx
push ecx
call fcn.100737f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003f55a
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f550
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003f550
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100737f0
add esp, 8
mov ecx, dword [0x100a8edc]
mov edx, 0x100a6e60
cmp dword [0x100a6e74], 0x10
push 0x100aa080
cmovae edx, dword [0x100a6e60]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100402b9
mov ecx, 0x100aa080
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f590
sub ecx, edx
cmp ecx, 0x20
jae 0x1003f5a7
cmp ecx, 5
ja 0x100402b9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x27b8]
mov dword [ebp - 0x18], 0x2ba78de7
mov dword [ebp - 0x14], 0x99ab85b
push 0x100aa080
test al, 1
jne 0x1003f62c
or eax, 1
mov dword [esi + 0x27b8], eax
mov dword [ebp - 4], 0x16
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov byte [esi + 0x15a8], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x15a0], al
add ecx, 1
adc edx, 0
jne 0x1003f618
cmp ecx, 8
jb 0x1003f600
push 0x1008a710
call fcn.100738a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x15a0]
mov ecx, edi
call fcn.10068310
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f657
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10070610
mov dword [ebp - 4], 0x17
mov eax, dword [esi + 0x40c0]
mov dword [ebp - 0x1c], 0x5bee92a9
test al, 1
jne 0x1003f6d9
or eax, 1
mov dword [esi + 0x40c0], eax
mov byte [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov byte [esi + 0x46bc], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x46b8], al
add ecx, 1
adc edx, 0
jne 0x1003f6c8
cmp ecx, 4
jb 0x1003f6b0
push 0x1008a760
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 0x17
lea edi, [esi + 0x46b8]
mov ecx, edi
call fcn.10068370
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f700
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10070610
mov byte [ebp - 4], 0x19
movaps xmm0, xmmword [0x100978b0]
mov eax, dword [esi + 0x4bbc]
mov word [ebp - 0x24], 0xc4ea
mov byte [ebp - 0x22], 0xd3
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003f789
or eax, 1
mov dword [esi + 0x4bbc], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov byte [esi + 0x1313], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x1300], al
add ecx, 1
adc edx, 0
jne 0x1003f778
cmp ecx, 0x13
jb 0x1003f760
push 0x1008a7b0
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x1300]
mov ecx, edi
call fcn.100683d0
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f7b0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10070610
push 0x100a6a88
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xa4]
call fcn.100707b0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x1c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.10071ef0
sub esp, 0x18
mov byte [ebp - 4], 0x1d
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea edx, [ebp - 0x74]
push 0x100a6ea8
call fcn.100707b0
add esp, 4
mov byte [ebp - 4], 0x1e
mov eax, dword [esi + 0x2920]
mov dword [ebp - 0x30], 0x29ba91fc
mov dword [ebp - 0x2c], 0x7ccce50e
mov dword [ebp - 0x28], 0x36bc9aa1
mov byte [ebp - 0x24], 0x61
test al, 1
jne 0x1003f889
or eax, 1
mov dword [esi + 0x2920], eax
mov byte [ebp - 4], 0x1f
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x2b8d], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x2b80], al
add ecx, 1
adc edx, 0
jne 0x1003f878
cmp ecx, 0xd
jb 0x1003f860
push 0x1008a800
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 0x1e
lea edi, [esi + 0x2b80]
mov ecx, edi
call fcn.10068430
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f8b1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10070610
mov ecx, dword [0x100acb38]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x23
call dword [eax]
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003f909
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f8ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f9ea
push edx
push ecx
call fcn.100737f0
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003f959
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f94f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f9ea
push edx
push ecx
call fcn.100737f0
add esp, 8
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003f9a8
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f99e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f9ea
push edx
push ecx
call fcn.100737f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003f9fa
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f9f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003f9f0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100737f0
add esp, 8
mov ecx, dword [0x100a8edc]
mov edx, 0x100a6e60
cmp dword [0x100a6e74], 0x10
push 0x100aa080
cmovae edx, dword [0x100a6e60]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100402b9
mov ecx, 0x100aa080
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fa30
sub ecx, edx
cmp ecx, 0x20
jae 0x1003fa47
cmp ecx, 5
ja 0x100402b9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x183c]
mov dword [ebp - 0x1c], 0x5d3a0acb
push 0x100aa080
push 0
push 0
test al, 1
jne 0x1003fabd
or eax, 1
mov dword [esi + 0x183c], eax
mov dword [ebp - 4], 0x24
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xa4], 1
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0xa0], al
add ecx, 1
adc edx, 0
jne 0x1003faa9
cmp ecx, 4
jb 0x1003fa91
push 0x1008a620
call fcn.100738a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xa0]
mov ecx, edi
call fcn.100681f0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fae4
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10070610
mov dword [ebp - 4], 0x25
movaps xmm0, xmmword [0x10097e20]
mov eax, dword [esi + 0x4654]
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003fb69
or eax, 1
mov dword [esi + 0x4654], eax
mov byte [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xbc0], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0xbb0], al
add ecx, 1
adc edx, 0
jne 0x1003fb58
cmp ecx, 0x10
jb 0x1003fb40
push 0x1008a670
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 0x25
lea edi, [esi + 0xbb0]
mov ecx, edi
call fcn.10068250
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fb90
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10070610
push 0x100a6a88
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xa4]
call fcn.100707b0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x28
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.10071ef0
sub esp, 0x18
mov byte [ebp - 4], 0x29
mov ecx, esp
mov dword [ebp - 0x14], esp
lea edx, [ebp - 0x74]
push 0x100a6ea8
call fcn.100707b0
add esp, 4
mov byte [ebp - 4], 0x2a
mov eax, dword [esi + 0x25e0]
mov dword [ebp - 0x30], 0x733451dc
mov dword [ebp - 0x2c], 0x4d406d62
mov dword [ebp - 0x28], 0x733155dc
mov word [ebp - 0x24], 0x6c61
mov byte [ebp - 0x22], 0x77
test al, 1
jne 0x1003fc69
or eax, 1
mov dword [esi + 0x25e0], eax
mov byte [ebp - 4], 0x2b
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov byte [esi + 0x30d3], 1
nop
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x30c4], al
add ecx, 1
adc edx, 0
jne 0x1003fc58
cmp ecx, 0xf
jb 0x1003fc40
push 0x1008a6c0
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 0x2a
lea edi, [esi + 0x30c4]
mov ecx, edi
call fcn.100682b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fc91
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10070610
mov ecx, dword [0x100acb38]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x29
call dword [eax + 4]
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003fcea
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003fce0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003fdcb
push edx
push ecx
call fcn.100737f0
add esp, 8
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003fd3a
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003fd30
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003fdcb
push edx
push ecx
call fcn.100737f0
add esp, 8
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003fd89
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003fd7f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003fdcb
push edx
push ecx
call fcn.100737f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003fddb
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003fdd1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003fdd1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100737f0
add esp, 8
mov ecx, dword [0x100a8edc]
mov edx, 0x100a6e60
cmp dword [0x100a6e74], 0x10
push 0x100aa080
cmovae edx, dword [0x100a6e60]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100402b9
mov ecx, 0x100aa080
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fe10
sub ecx, edx
cmp ecx, 0x20
jae 0x1003fe27
cmp ecx, 5
ja 0x100402b9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xa20]
mov dword [ebp - 0x18], 0x2b37d9bb
mov dword [ebp - 0x14], 0x47641619
push 0x100aa080
test al, 1
jne 0x1003feac
or eax, 1
mov dword [esi + 0xa20], eax
mov dword [ebp - 4], 0x2c
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov byte [esi + 0x120c], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x1204], al
add ecx, 1
adc edx, 0
jne 0x1003fe98
cmp ecx, 8
jb 0x1003fe80
push 0x1008a4e0
call fcn.100738a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1204]
mov ecx, edi
call fcn.10068070
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fed7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10070610
mov dword [ebp - 4], 0x2d
mov eax, dword [esi + 0x694]
mov dword [ebp - 0x1c], 0x5b7ec6f5
test al, 1
jne 0x1003ff59
or eax, 1
mov dword [esi + 0x694], eax
mov byte [ebp - 4], 0x2e
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov byte [esi + 0xc5c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0xc58], al
add ecx, 1
adc edx, 0
jne 0x1003ff48
cmp ecx, 4
jb 0x1003ff30
push 0x1008a530
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 0x2d
lea edi, [esi + 0xc58]
mov ecx, edi
call fcn.100680d0
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ff80
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x74]
call fcn.10070610
mov byte [ebp - 4], 0x2f
movaps xmm0, xmmword [0x10097a90]
mov eax, dword [esi + 0x2574]
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003fff9
or eax, 1
mov dword [esi + 0x2574], eax
mov byte [ebp - 4], 0x30
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov byte [esi + 0x1c34], 1
nop
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x1c24], al
add ecx, 1
adc edx, 0
jne 0x1003ffe8
cmp ecx, 0x10
jb 0x1003ffd0
push 0x1008a580
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 0x2f
lea edi, [esi + 0x1c24]
mov ecx, edi
call fcn.10068130
mov ecx, edi
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040026
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xbc]
call fcn.10070610
push 0x100a6a88
lea edx, [ebp - 0xbc]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xec]
call fcn.100707b0
add esp, 4
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x32
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd4]
call fcn.10071ef0
sub esp, 0x18
mov byte [ebp - 4], 0x33
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea edx, [ebp - 0xd4]
push 0x100a6ea8
call fcn.100707b0
add esp, 4
mov byte [ebp - 4], 0x34
mov eax, dword [esi + 0x1420]
mov dword [ebp - 0x30], 0x75709de2
mov dword [ebp - 0x2c], 0x697c0112
mov dword [ebp - 0x28], 0x757599e2
mov word [ebp - 0x24], 0x11
mov byte [ebp - 0x22], 0x4b
test al, 1
jne 0x10040109
or eax, 1
mov dword [esi + 0x1420], eax
mov byte [ebp - 4], 0x35
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x430f], 1
nop
mov al, byte [ebp + ecx - 0x30]
mov byte [ecx + esi + 0x4300], al
add ecx, 1
adc edx, 0
jne 0x100400f8
cmp ecx, 0xf
jb 0x100400e0
push 0x1008a5d0
call fcn.100738a7
add esp, 4
mov byte [ebp - 4], 0x34
lea esi, [esi + 0x4300]
mov ecx, esi
call fcn.10068190
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040131
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.10070610
mov ecx, dword [0x100acb38]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x39
call dword [eax]
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0xc0]
cmp edx, 0x10
jb 0x1004018f
mov ecx, dword [ebp - 0xd4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10040185
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10040285
push edx
push ecx
call fcn.100737f0
add esp, 8
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
cmp edx, 0x10
jb 0x100401e8
mov ecx, dword [ebp - 0xec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100401de
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10040285
push edx
push ecx
call fcn.100737f0
add esp, 8
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
cmp edx, 0x10
jb 0x1004023d
mov ecx, dword [ebp - 0xbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10040233
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10040285
push edx
push ecx
call fcn.100737f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
cmp edx, 0x10
jb 0x10040295
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004028b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004028b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100737f0
add esp, 8
mov ecx, dword [0x100a8edc]
mov edx, 0x100a6e60
cmp dword [0x100a6e74], 0x10
push 0x100aa080
cmovae edx, dword [0x100a6e60]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10072ec9
mov esp, ebp
pop ebp
ret