Function at 0x1003ca30
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006f44b
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x1009500c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10096e34]
push 0x100984f0
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x18], 0xe1b840bf
mov eax, dword [esi + 0x15d0]
test al, 1
jne 0x1003cadc
or eax, 1
mov dword [esi + 0x15d0], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3b2c], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x3b28], al
add ecx, 1
adc edx, 0
jne 0x1003cac8
cmp ecx, 4
jb 0x1003cab0
push 0x1007d750
call fcn.10067577
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3b28]
mov ecx, edi
call fcn.1005b8c0
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cb00
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x80]
call fcn.100643a0
mov dword [ebp - 4], 1
mov eax, dword [esi + 0xf68]
mov dword [ebp - 0x38], 0x88f54ab6
mov dword [ebp - 0x34], 0xb2262f3c
mov dword [ebp - 0x30], 0x84ba49e9
mov word [ebp - 0x2c], 0x592e
test al, 1
jne 0x1003cb8a
or eax, 1
mov dword [esi + 0xf68], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1d6], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x1c8], al
add ecx, 1
adc edx, 0
jne 0x1003cb79
cmp ecx, 0xe
jb 0x1003cb61
push 0x1007d7a0
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x1c8]
mov ecx, edi
call fcn.1005b920
mov ecx, edi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cbb0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x50]
call fcn.100643a0
push 0x10096078
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x98]
call fcn.10064540
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x15]
lea ecx, [ebp - 0x68]
call fcn.10065bc0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x68]
push 0x10096498
call fcn.10064540
add esp, 4
mov byte [ebp - 4], 6
mov eax, dword [esi + 0x19b0]
mov dword [ebp - 0x38], 0x8de444f2
mov dword [ebp - 0x34], 0xed723b72
mov dword [ebp - 0x30], 0x82ab59fc
mov word [ebp - 0x2c], 0x347c
mov byte [ebp - 0x2a], 0x13
test al, 1
jne 0x1003cc89
or eax, 1
mov dword [esi + 0x19b0], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x271b], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x270c], al
add ecx, 1
adc edx, 0
jne 0x1003cc78
cmp ecx, 0xf
jb 0x1003cc60
push 0x1007d7f0
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x270c]
mov ecx, edi
call fcn.1005b980
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ccb1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov ecx, dword [0x100997b8]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x54]
cmp edx, 0x10
jb 0x1003cd0a
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cd00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cde8
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003cd5a
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cd50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cde8
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003cda9
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cd9f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cde8
push edx
push ecx
call fcn.100674c0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
cmp edx, 0x10
jb 0x1003cdf8
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cdee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003cdee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100674c0
add esp, 8
mov ecx, dword [0x1009d9e0]
mov edx, 0x10096450
cmp dword [0x10096464], 0x10
push 0x100984f0
cmovae edx, dword [0x10096450]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003f159
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xbc4]
mov dword [ebp - 0x18], 0x37348c9f
push 0x100984f0
push 0
push 0
test al, 1
jne 0x1003ce9c
or eax, 1
mov dword [esi + 0xbc4], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3ac8], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x3ac4], al
add ecx, 1
adc edx, 0
jne 0x1003ce88
cmp ecx, 4
jb 0x1003ce70
push 0x1007d660
call fcn.10067577
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3ac4]
mov ecx, edi
call fcn.1005b7a0
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cec0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.100643a0
mov dword [ebp - 4], 9
mov eax, dword [esi + 0xbb8]
mov dword [ebp - 0x38], 0x5e798696
mov dword [ebp - 0x34], 0x16e2e3d0
mov dword [ebp - 0x30], 0x523685c9
mov word [ebp - 0x2c], 0x95c2
test al, 1
jne 0x1003cf4a
or eax, 1
mov dword [esi + 0xbb8], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2c7e], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x2c70], al
add ecx, 1
adc edx, 0
jne 0x1003cf39
cmp ecx, 0xe
jb 0x1003cf21
push 0x1007d6b0
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x2c70]
mov ecx, edi
call fcn.1005b800
mov ecx, edi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cf70
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x50]
call fcn.100643a0
push 0x10096268
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x98]
call fcn.10064540
add esp, 4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x2d]
lea ecx, [ebp - 0x80]
call fcn.10065bc0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10096498
call fcn.10064540
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [esi + 0x3d2c]
mov dword [ebp - 0x20], 0x5b6888d2
mov dword [ebp - 0x1c], 0x49b6f79e
mov dword [ebp - 0x18], 0x542795dc
mov word [ebp - 0x14], 0xf890
mov byte [ebp - 0x12], 0xd7
test al, 1
jne 0x1003d049
or eax, 1
mov dword [esi + 0x3d2c], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x417], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x408], al
add ecx, 1
adc edx, 0
jne 0x1003d038
cmp ecx, 0xf
jb 0x1003d020
push 0x1007d700
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x408]
mov ecx, edi
call fcn.1005b860
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d071
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov ecx, dword [0x100997b8]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003d0ca
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d0c0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d1a8
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003d11a
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d110
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d1a8
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003d169
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d15f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d1a8
push edx
push ecx
call fcn.100674c0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
cmp edx, 0x10
jb 0x1003d1b8
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d1ae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003d1ae
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100674c0
add esp, 8
mov ecx, dword [0x1009d9e0]
mov edx, 0x10096450
cmp dword [0x10096464], 0x10
push 0x100984f0
cmovae edx, dword [0x10096450]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003f159
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x11b8]
mov dword [ebp - 0x18], 0xff9a9aeb
push 0x100984f0
push 0
push 0
test al, 1
jne 0x1003d25c
or eax, 1
mov dword [esi + 0x11b8], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1f8c], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x1f88], al
add ecx, 1
adc edx, 0
jne 0x1003d248
cmp ecx, 4
jb 0x1003d230
push 0x1007d570
call fcn.10067577
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1f88]
mov ecx, edi
call fcn.1005b680
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d280
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.100643a0
mov dword [ebp - 4], 0x11
mov eax, dword [esi + 0x22fc]
mov dword [ebp - 0x38], 0x96d790e2
mov dword [ebp - 0x34], 0xc1c572a
mov dword [ebp - 0x30], 0x9a9893bd
mov word [ebp - 0x2c], 0x2138
test al, 1
jne 0x1003d30a
or eax, 1
mov dword [esi + 0x22fc], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3cd2], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x3cc4], al
add ecx, 1
adc edx, 0
jne 0x1003d2f9
cmp ecx, 0xe
jb 0x1003d2e1
push 0x1007d5c0
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x3cc4]
mov ecx, edi
call fcn.1005b6e0
mov ecx, edi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d330
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x50]
call fcn.100643a0
push 0x10096438
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x98]
call fcn.10064540
add esp, 4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x2d]
lea ecx, [ebp - 0x80]
call fcn.10065bc0
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10096498
call fcn.10064540
add esp, 4
mov byte [ebp - 4], 0x16
mov eax, dword [esi + 0x1534]
mov dword [ebp - 0x20], 0x93c69ea6
mov dword [ebp - 0x1c], 0x53484364
mov dword [ebp - 0x18], 0x9c8983a8
mov word [ebp - 0x14], 0x4c6a
mov byte [ebp - 0x12], 0x29
test al, 1
jne 0x1003d409
or eax, 1
mov dword [esi + 0x1534], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x31cb], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x31bc], al
add ecx, 1
adc edx, 0
jne 0x1003d3f8
cmp ecx, 0xf
jb 0x1003d3e0
push 0x1007d610
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x31bc]
mov ecx, edi
call fcn.1005b740
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d431
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov ecx, dword [0x100997b8]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003d48a
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d480
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d568
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003d4da
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d4d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d568
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003d529
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d51f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d568
push edx
push ecx
call fcn.100674c0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
cmp edx, 0x10
jb 0x1003d578
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d56e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003d56e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100674c0
add esp, 8
mov ecx, dword [0x1009d9e0]
mov edx, 0x10096450
cmp dword [0x10096464], 0x10
push 0x100984f0
cmovae edx, dword [0x10096450]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003f159
mov ecx, 0x100984f0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d5b0
sub ecx, edx
cmp ecx, 0x20
jae 0x1003d5c7
cmp ecx, 1
ja 0x1003f159
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x6f4]
mov dword [ebp - 0x34], 0xf777d3c7
mov dword [ebp - 0x30], 0xdeda19c4
mov byte [ebp - 0x2c], 0xaf
push 0x100984f0
test al, 1
jne 0x1003d64c
or eax, 1
mov dword [esi + 0x6f4], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2709], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x2700], al
add ecx, 1
adc edx, 0
jne 0x1003d638
cmp ecx, 9
jb 0x1003d620
push 0x1007d430
call fcn.10067577
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2700]
mov ecx, edi
call fcn.1005b500
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x30], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d677
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0x19ac]
mov dword [ebp - 0x18], 0x873ecc89
test al, 1
jne 0x1003d6f9
or eax, 1
mov dword [esi + 0x19ac], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0xedc], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0xed8], al
add ecx, 1
adc edx, 0
jne 0x1003d6e8
cmp ecx, 4
jb 0x1003d6d0
push 0x1007d480
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0xed8]
mov ecx, edi
call fcn.1005b560
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d726
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.100643a0
mov byte [ebp - 4], 0x1b
mov eax, dword [esi + 0x35b0]
mov dword [ebp - 0x20], 0xee73c680
mov dword [ebp - 0x1c], 0xdec05598
mov dword [ebp - 0x18], 0xe23cc5df
mov word [ebp - 0x14], 0x238a
test al, 1
jne 0x1003d7b9
or eax, 1
mov dword [esi + 0x35b0], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1efa], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x1eec], al
add ecx, 1
adc edx, 0
jne 0x1003d7a8
cmp ecx, 0xe
jb 0x1003d790
push 0x1007d4d0
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x1eec]
mov ecx, edi
call fcn.1005b5c0
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d7e0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.100643a0
push 0x10096078
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x98]
call fcn.10064540
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x2d]
lea ecx, [ebp - 0x80]
call fcn.10065bc0
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x80]
push 0x10096498
call fcn.10064540
add esp, 4
mov byte [ebp - 4], 0x20
mov eax, dword [esi + 0x2954]
mov dword [ebp - 0x48], 0xeb62c8c4
mov dword [ebp - 0x44], 0x819441d6
mov dword [ebp - 0x40], 0xe42dd5ca
mov word [ebp - 0x3c], 0x4ed8
mov byte [ebp - 0x3a], 0xf5
test al, 1
jne 0x1003d8b9
or eax, 1
mov dword [esi + 0x2954], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2ae7], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x2ad8], al
add ecx, 1
adc edx, 0
jne 0x1003d8a8
cmp ecx, 0xf
jb 0x1003d890
push 0x1007d520
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x2ad8]
mov ecx, edi
call fcn.1005b620
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d8e1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov ecx, dword [0x100997b8]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003d939
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d92f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003da1d
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003d989
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d97f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003da1d
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003d9d8
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d9ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003da1d
push edx
push ecx
call fcn.100674c0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003da2d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003da23
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003da23
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100674c0
add esp, 8
mov ecx, dword [0x1009d9e0]
mov edx, 0x10096450
cmp dword [0x10096464], 0x10
push 0x100984f0
cmovae edx, dword [0x10096450]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003f159
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x6fc]
mov dword [ebp - 0x34], 0xf9ef43ad
mov dword [ebp - 0x30], 0x128c65de
mov byte [ebp - 0x2c], 0xc5
push 0x100984f0
test al, 1
jne 0x1003dadc
or eax, 1
mov dword [esi + 0x6fc], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x321d], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x3214], al
add ecx, 1
adc edx, 0
jne 0x1003dac8
cmp ecx, 9
jb 0x1003dab0
push 0x1007d2f0
call fcn.10067577
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3214]
mov ecx, edi
call fcn.1005b380
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003db07
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0xb84]
mov dword [ebp - 0x18], 0x89a65ce3
test al, 1
jne 0x1003db89
or eax, 1
mov dword [esi + 0xb84], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x342c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x3428], al
add ecx, 1
adc edx, 0
jne 0x1003db78
cmp ecx, 4
jb 0x1003db60
push 0x1007d340
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x3428]
mov ecx, edi
call fcn.1005b3e0
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003dbb6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.100643a0
mov byte [ebp - 4], 0x29
mov eax, dword [esi + 0x2be8]
mov dword [ebp - 0x20], 0xe0eb56ea
mov dword [ebp - 0x1c], 0x12962982
mov dword [ebp - 0x18], 0xeca455b5
mov word [ebp - 0x14], 0x5f90
test al, 1
jne 0x1003dc49
or eax, 1
mov dword [esi + 0x2be8], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x36f6], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x36e8], al
add ecx, 1
adc edx, 0
jne 0x1003dc38
cmp ecx, 0xe
jb 0x1003dc20
push 0x1007d390
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x36e8]
mov ecx, edi
call fcn.1005b440
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003dc70
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.100643a0
push 0x10096268
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x98]
call fcn.10064540
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.10065bc0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10096498
call fcn.10064540
add esp, 4
mov byte [ebp - 4], 0x2e
mov eax, dword [esi + 0x3114]
mov dword [ebp - 0x48], 0xe5fa58ae
mov dword [ebp - 0x44], 0x4dc23dcc
mov dword [ebp - 0x40], 0xeab545a0
mov word [ebp - 0x3c], 0x32c2
mov byte [ebp - 0x3a], 0xa3
test al, 1
jne 0x1003dd49
or eax, 1
mov dword [esi + 0x3114], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x1373], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x1364], al
add ecx, 1
adc edx, 0
jne 0x1003dd38
cmp ecx, 0xf
jb 0x1003dd20
push 0x1007d3e0
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0x1364]
mov ecx, edi
call fcn.1005b4a0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003dd71
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov ecx, dword [0x100997b8]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003ddc9
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ddbf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003dead
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003de19
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003de0f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003dead
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003de68
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003de5e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003dead
push edx
push ecx
call fcn.100674c0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003debd
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003deb3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003deb3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100674c0
add esp, 8
mov ecx, dword [0x1009d9e0]
mov edx, 0x10096450
cmp dword [0x10096464], 0x10
push 0x100984f0
cmovae edx, dword [0x10096450]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003f159
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x510]
mov dword [ebp - 0x34], 0xd1938d5b
mov dword [ebp - 0x30], 0x100e6b20
mov byte [ebp - 0x2c], 0x33
push 0x100984f0
test al, 1
jne 0x1003df6c
or eax, 1
mov dword [esi + 0x510], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x295], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x28c], al
add ecx, 1
adc edx, 0
jne 0x1003df58
cmp ecx, 9
jb 0x1003df40
push 0x1007d1b0
call fcn.10067577
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x28c]
mov ecx, edi
call fcn.1005b200
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003df97
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0x3170]
mov dword [ebp - 0x18], 0xa1da9215
test al, 1
jne 0x1003e019
or eax, 1
mov dword [esi + 0x3170], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x1e10], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x1e0c], al
add ecx, 1
adc edx, 0
jne 0x1003e008
cmp ecx, 4
jb 0x1003dff0
push 0x1007d200
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x1e0c]
mov ecx, edi
call fcn.1005b260
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e046
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.100643a0
mov byte [ebp - 4], 0x37
mov eax, dword [esi + 0xbc]
mov dword [ebp - 0x20], 0xc897981c
mov dword [ebp - 0x1c], 0x1014277c
mov dword [ebp - 0x18], 0xc4d89b43
mov word [ebp - 0x14], 0x516e
test al, 1
jne 0x1003e0d9
or eax, 1
mov dword [esi + 0xbc], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0xd3a], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0xd2c], al
add ecx, 1
adc edx, 0
jne 0x1003e0c8
cmp ecx, 0xe
jb 0x1003e0b0
push 0x1007d250
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0xd2c]
mov ecx, edi
call fcn.1005b2c0
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e100
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.100643a0
push 0x10096438
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x98]
call fcn.10064540
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.10065bc0
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10096498
call fcn.10064540
add esp, 4
mov byte [ebp - 4], 0x3c
mov eax, dword [esi + 0x5d4]
mov dword [ebp - 0x48], 0xcd869658
mov dword [ebp - 0x44], 0x4f403332
mov dword [ebp - 0x40], 0xc2c98b56
mov word [ebp - 0x3c], 0x3c3c
mov byte [ebp - 0x3a], 0x21
test al, 1
jne 0x1003e1d9
or eax, 1
mov dword [esi + 0x5d4], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x34b], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x33c], al
add ecx, 1
adc edx, 0
jne 0x1003e1c8
cmp ecx, 0xf
jb 0x1003e1b0
push 0x1007d2a0
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0x33c]
mov ecx, edi
call fcn.1005b320
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e201
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov ecx, dword [0x100997b8]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003e259
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e24f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e33d
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003e2a9
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e29f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e33d
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003e2f8
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e2ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e33d
push edx
push ecx
call fcn.100674c0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003e34d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e343
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003e343
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100674c0
add esp, 8
mov ecx, dword [0x1009d9e0]
mov edx, 0x10096450
cmp dword [0x10096464], 0x10
push 0x100984f0
cmovae edx, dword [0x10096450]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003f159
mov ecx, 0x100984f0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e381
sub ecx, edx
cmp ecx, 0x20
jae 0x1003e398
cmp ecx, 1
ja 0x1003f159
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x428]
mov dword [ebp - 0x28], 0xcb7b2329
mov dword [ebp - 0x24], 0x1b74222f
push 0x100984f0
test al, 1
jne 0x1003e41c
or eax, 1
mov dword [esi + 0x428], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0xc90], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0xc88], al
add ecx, 1
adc edx, 0
jne 0x1003e408
cmp ecx, 8
jb 0x1003e3f0
push 0x1007d070
call fcn.10067577
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xc88]
mov ecx, edi
call fcn.1005b080
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e447
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0x4030]
mov dword [ebp - 0x18], 0xbb323c67
test al, 1
jne 0x1003e4c9
or eax, 1
mov dword [esi + 0x4030], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0xb8c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0xb88], al
add ecx, 1
adc edx, 0
jne 0x1003e4b8
cmp ecx, 4
jb 0x1003e4a0
push 0x1007d0c0
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0xb88]
mov ecx, edi
call fcn.1005b0e0
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e4f6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.100643a0
mov byte [ebp - 4], 0x45
mov eax, dword [esi + 0x1100]
mov dword [ebp - 0x20], 0xd27f366e
mov dword [ebp - 0x1c], 0x346e7b3a
mov dword [ebp - 0x18], 0xde303531
mov word [ebp - 0x14], 0xd28
test al, 1
jne 0x1003e589
or eax, 1
mov dword [esi + 0x1100], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x198e], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x1980], al
add ecx, 1
adc edx, 0
jne 0x1003e578
cmp ecx, 0xe
jb 0x1003e560
push 0x1007d110
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x1980]
mov ecx, edi
call fcn.1005b140
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e5b0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.100643a0
push 0x10096078
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x98]
call fcn.10064540
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.10065bc0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10096498
call fcn.10064540
add esp, 4
mov byte [ebp - 4], 0x4a
mov eax, dword [esi + 0x3668]
mov dword [ebp - 0x48], 0xd76e382a
mov dword [ebp - 0x44], 0x6b3a6f74
mov dword [ebp - 0x40], 0xd8212524
mov word [ebp - 0x3c], 0x607a
mov byte [ebp - 0x3a], 0x5b
test al, 1
jne 0x1003e689
or eax, 1
mov dword [esi + 0x3668], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x3e7b], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x3e6c], al
add ecx, 1
adc edx, 0
jne 0x1003e678
cmp ecx, 0xf
jb 0x1003e660
push 0x1007d160
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x3e6c]
mov ecx, edi
call fcn.1005b1a0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e6b1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov ecx, dword [0x100997b8]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003e709
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e6ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e7ed
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003e759
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e74f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e7ed
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003e7a8
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e79e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e7ed
push edx
push ecx
call fcn.100674c0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003e7fd
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e7f3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003e7f3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100674c0
add esp, 8
mov ecx, dword [0x1009d9e0]
mov edx, 0x10096450
cmp dword [0x10096464], 0x10
push 0x100984f0
cmovae edx, dword [0x10096450]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003f159
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x200c]
mov dword [ebp - 0x28], 0x7f09937f
mov dword [ebp - 0x24], 0x1342ccd
push 0x100984f0
test al, 1
jne 0x1003e8ac
or eax, 1
mov dword [esi + 0x200c], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x1fec], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [ecx + esi + 0x1fe4], al
add ecx, 1
adc edx, 0
jne 0x1003e898
cmp ecx, 8
jb 0x1003e880
push 0x1007cf30
call fcn.10067577
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1fe4]
mov ecx, edi
call fcn.1005af00
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e8d7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x3610]
mov dword [ebp - 0x18], 0xf408c31
test al, 1
jne 0x1003e959
or eax, 1
mov dword [esi + 0x3610], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x29c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x298], al
add ecx, 1
adc edx, 0
jne 0x1003e948
cmp ecx, 4
jb 0x1003e930
push 0x1007cf80
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x298]
mov ecx, edi
call fcn.1005af60
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e986
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.100643a0
mov byte [ebp - 4], 0x53
mov eax, dword [esi + 0x19f0]
mov dword [ebp - 0x20], 0x660d8638
mov dword [ebp - 0x1c], 0x2e2e75d8
mov dword [ebp - 0x18], 0x6a428567
mov word [ebp - 0x14], 0x3ca
test al, 1
jne 0x1003ea19
or eax, 1
mov dword [esi + 0x19f0], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x2b52], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x2b44], al
add ecx, 1
adc edx, 0
jne 0x1003ea08
cmp ecx, 0xe
jb 0x1003e9f0
push 0x1007cfd0
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0x2b44]
mov ecx, edi
call fcn.1005afc0
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ea40
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.100643a0
push 0x10096268
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x98]
call fcn.10064540
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.10065bc0
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10096498
call fcn.10064540
add esp, 4
mov byte [ebp - 4], 0x58
mov eax, dword [esi + 0x1eb0]
mov dword [ebp - 0x48], 0x631c887c
mov dword [ebp - 0x44], 0x717a6196
mov dword [ebp - 0x40], 0x6c539572
mov word [ebp - 0x3c], 0x6e98
mov byte [ebp - 0x3a], 0x1b
test al, 1
jne 0x1003eb19
or eax, 1
mov dword [esi + 0x1eb0], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0xb37], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0xb28], al
add ecx, 1
adc edx, 0
jne 0x1003eb08
cmp ecx, 0xf
jb 0x1003eaf0
push 0x1007d020
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0xb28]
mov ecx, edi
call fcn.1005b020
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003eb41
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov ecx, dword [0x100997b8]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003eb99
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003eb8f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ec7d
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003ebe9
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ebdf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ec7d
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003ec38
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ec2e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ec7d
push edx
push ecx
call fcn.100674c0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003ec8d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ec83
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003ec83
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100674c0
add esp, 8
mov ecx, dword [0x1009d9e0]
mov edx, 0x10096450
cmp dword [0x10096464], 0x10
push 0x100984f0
cmovae edx, dword [0x10096450]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003f159
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xf64]
mov dword [ebp - 0x28], 0xcb1b3327
mov dword [ebp - 0x24], 0xe3106e19
push 0x100984f0
test al, 1
jne 0x1003ed3c
or eax, 1
mov dword [esi + 0xf64], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x274c], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0x2744], al
add ecx, 1
adc edx, 0
jne 0x1003ed28
cmp ecx, 8
jb 0x1003ed10
push 0x1007cdf0
call fcn.10067577
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2744]
mov ecx, edi
call fcn.1005ad80
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ed67
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100643a0
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0xd8c]
mov dword [ebp - 0x18], 0xbb522c69
test al, 1
jne 0x1003ede9
or eax, 1
mov dword [esi + 0xd8c], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x404], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x400], al
add ecx, 1
adc edx, 0
jne 0x1003edd8
cmp ecx, 4
jb 0x1003edc0
push 0x1007ce40
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0x400]
mov ecx, edi
call fcn.1005ade0
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ee10
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x80]
call fcn.100643a0
mov byte [ebp - 4], 0x61
mov eax, dword [esi + 0x1c50]
mov dword [ebp - 0x20], 0xd21f2660
mov dword [ebp - 0x1c], 0xcc0a370c
mov dword [ebp - 0x18], 0xde50253f
mov word [ebp - 0x14], 0x411e
test al, 1
jne 0x1003ee99
or eax, 1
mov dword [esi + 0x1c50], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x3682], 1
nop
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x3674], al
add ecx, 1
adc edx, 0
jne 0x1003ee88
cmp ecx, 0xe
jb 0x1003ee70
push 0x1007ce90
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x3674]
mov ecx, edi
call fcn.1005ae40
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003eec6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.100643a0
push 0x10096438
lea edx, [ebp - 0xb0]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xe0]
call fcn.10064540
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0xc8]
call fcn.10065bc0
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0xc8]
push 0x10096498
call fcn.10064540
add esp, 4
mov byte [ebp - 4], 0x66
mov eax, dword [esi + 0x3550]
mov dword [ebp - 0x48], 0xd70e2824
mov dword [ebp - 0x44], 0x935e2342
mov dword [ebp - 0x40], 0xd841352a
mov word [ebp - 0x3c], 0x2c4c
mov byte [ebp - 0x3a], 0x3f
test al, 1
jne 0x1003efa9
or eax, 1
mov dword [esi + 0x3550], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0xe17], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0xe08], al
add ecx, 1
adc edx, 0
jne 0x1003ef98
cmp ecx, 0xf
jb 0x1003ef80
push 0x1007cee0
call fcn.10067577
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0xe08]
mov ecx, esi
call fcn.1005aea0
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003efd1
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.100643a0
mov ecx, dword [0x100997b8]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xb4]
cmp edx, 0x10
jb 0x1003f02f
mov ecx, dword [ebp - 0xc8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f025
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f125
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xcc]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
cmp edx, 0x10
jb 0x1003f088
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f07e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f125
push edx
push ecx
call fcn.100674c0
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
cmp edx, 0x10
jb 0x1003f0dd
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f0d3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f125
push edx
push ecx
call fcn.100674c0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
cmp edx, 0x10
jb 0x1003f135
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f12b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003f12b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100674c0
add esp, 8
mov ecx, dword [0x1009d9e0]
mov edx, 0x10096450
cmp dword [0x10096464], 0x10
push 0x100984f0
cmovae edx, dword [0x10096450]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10066b99
mov esp, ebp
pop ebp
ret