Function at 0x1003a8d0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10065a0b
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x1008800c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10089e1c]
push 0x10090900
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x18], 0xed34d041
mov eax, dword [esi + 0xf80]
test al, 1
jne 0x1003a97c
or eax, 1
mov dword [esi + 0xf80], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2098], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x2094], al
add ecx, 1
adc edx, 0
jne 0x1003a968
cmp ecx, 4
jb 0x1003a950
push 0x100733f0
call fcn.1005daa7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2094]
mov ecx, edi
call fcn.10054210
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a9a0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x80]
call fcn.1005aa10
mov dword [ebp - 4], 1
mov eax, dword [esi + 0x2e3c]
mov dword [ebp - 0x38], 0x8479da48
mov dword [ebp - 0x34], 0x7a66d712
mov dword [ebp - 0x30], 0x8836d917
mov word [ebp - 0x2c], 0xa100
test al, 1
jne 0x1003aa2a
or eax, 1
mov dword [esi + 0x2e3c], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x31a6], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x3198], al
add ecx, 1
adc edx, 0
jne 0x1003aa19
cmp ecx, 0xe
jb 0x1003aa01
push 0x10073440
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x3198]
mov ecx, edi
call fcn.10054270
mov ecx, edi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003aa50
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x50]
call fcn.1005aa10
push 0x10089068
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x98]
call fcn.1005abb0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x15]
lea ecx, [ebp - 0x68]
call fcn.1005c0f0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x68]
push 0x10089484
call fcn.1005abb0
add esp, 4
mov byte [ebp - 4], 6
mov eax, dword [esi + 0x9f0]
mov dword [ebp - 0x38], 0x8168d40c
mov dword [ebp - 0x34], 0x2532c35c
mov dword [ebp - 0x30], 0x8e27c902
mov word [ebp - 0x2c], 0xcc52
mov byte [ebp - 0x2a], 0x53
test al, 1
jne 0x1003ab29
or eax, 1
mov dword [esi + 0x9f0], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3b5b], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x3b4c], al
add ecx, 1
adc edx, 0
jne 0x1003ab18
cmp ecx, 0xf
jb 0x1003ab00
push 0x10073490
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x3b4c]
mov ecx, edi
call fcn.100542d0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ab51
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov ecx, dword [0x1008b988]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x54]
cmp edx, 0x10
jb 0x1003abaa
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003aba0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ac88
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003abfa
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003abf0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ac88
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003ac49
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ac3f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ac88
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
cmp edx, 0x10
jb 0x1003ac98
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ac8e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003ac8e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov ecx, dword [0x1008fb74]
mov edx, 0x1008943c
cmp dword [0x10089450], 0x10
push 0x10090900
cmovae edx, dword [0x1008943c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cff9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x25ac]
mov dword [ebp - 0x18], 0x537ce27b
push 0x10090900
push 0
push 0
test al, 1
jne 0x1003ad3c
or eax, 1
mov dword [esi + 0x25ac], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1304], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x1300], al
add ecx, 1
adc edx, 0
jne 0x1003ad28
cmp ecx, 4
jb 0x1003ad10
push 0x10073300
call fcn.1005daa7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1300]
mov ecx, edi
call fcn.100540f0
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ad60
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.1005aa10
mov dword [ebp - 4], 9
mov eax, dword [esi + 0x1134]
mov dword [ebp - 0x38], 0x3a31e872
mov dword [ebp - 0x34], 0xb802f540
mov dword [ebp - 0x30], 0x367eeb2d
mov word [ebp - 0x2c], 0x8352
test al, 1
jne 0x1003adea
or eax, 1
mov dword [esi + 0x1134], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3b8e], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x3b80], al
add ecx, 1
adc edx, 0
jne 0x1003add9
cmp ecx, 0xe
jb 0x1003adc1
push 0x10073350
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x3b80]
mov ecx, edi
call fcn.10054150
mov ecx, edi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ae10
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x50]
call fcn.1005aa10
push 0x10089258
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x98]
call fcn.1005abb0
add esp, 4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x2d]
lea ecx, [ebp - 0x80]
call fcn.1005c0f0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10089484
call fcn.1005abb0
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [esi + 0x3a40]
mov dword [ebp - 0x20], 0x3f20e636
mov dword [ebp - 0x1c], 0xe756e10e
mov dword [ebp - 0x18], 0x306ffb38
mov word [ebp - 0x14], 0xee00
mov byte [ebp - 0x12], 0x37
test al, 1
jne 0x1003aee9
or eax, 1
mov dword [esi + 0x3a40], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x221f], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x2210], al
add ecx, 1
adc edx, 0
jne 0x1003aed8
cmp ecx, 0xf
jb 0x1003aec0
push 0x100733a0
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x2210]
mov ecx, edi
call fcn.100541b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003af11
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov ecx, dword [0x1008b988]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003af6a
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003af60
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b048
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003afba
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003afb0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b048
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003b009
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003afff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b048
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
cmp edx, 0x10
jb 0x1003b058
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b04e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003b04e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov ecx, dword [0x1008fb74]
mov edx, 0x1008943c
cmp dword [0x10089450], 0x10
push 0x10090900
cmovae edx, dword [0x1008943c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cff9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xa68]
mov dword [ebp - 0x18], 0x89a65ce3
push 0x10090900
push 0
push 0
test al, 1
jne 0x1003b0fc
or eax, 1
mov dword [esi + 0xa68], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2fb4], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x2fb0], al
add ecx, 1
adc edx, 0
jne 0x1003b0e8
cmp ecx, 4
jb 0x1003b0d0
push 0x10073210
call fcn.1005daa7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2fb0]
mov ecx, edi
call fcn.10053fd0
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b120
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.1005aa10
mov dword [ebp - 4], 0x11
mov eax, dword [esi + 0x28b4]
mov dword [ebp - 0x38], 0xe0eb56ea
mov dword [ebp - 0x34], 0x12962982
mov dword [ebp - 0x30], 0xeca455b5
mov word [ebp - 0x2c], 0x5f90
test al, 1
jne 0x1003b1aa
or eax, 1
mov dword [esi + 0x28b4], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x31c2], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x31b4], al
add ecx, 1
adc edx, 0
jne 0x1003b199
cmp ecx, 0xe
jb 0x1003b181
push 0x10073260
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x31b4]
mov ecx, edi
call fcn.10054030
mov ecx, edi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b1d0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x50]
call fcn.1005aa10
push 0x10089424
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x98]
call fcn.1005abb0
add esp, 4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x2d]
lea ecx, [ebp - 0x80]
call fcn.1005c0f0
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10089484
call fcn.1005abb0
add esp, 4
mov byte [ebp - 4], 0x16
mov eax, dword [esi + 0x2d24]
mov dword [ebp - 0x20], 0xe5fa58ae
mov dword [ebp - 0x1c], 0x4dc23dcc
mov dword [ebp - 0x18], 0xeab545a0
mov word [ebp - 0x14], 0x32c2
mov byte [ebp - 0x12], 0xa3
test al, 1
jne 0x1003b2a9
or eax, 1
mov dword [esi + 0x2d24], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x11e3], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x11d4], al
add ecx, 1
adc edx, 0
jne 0x1003b298
cmp ecx, 0xf
jb 0x1003b280
push 0x100732b0
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x11d4]
mov ecx, edi
call fcn.10054090
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b2d1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov ecx, dword [0x1008b988]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003b32a
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b320
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b408
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003b37a
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b370
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b408
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003b3c9
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b3bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b408
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
cmp edx, 0x10
jb 0x1003b418
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b40e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003b40e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov ecx, dword [0x1008fb74]
mov edx, 0x1008943c
cmp dword [0x10089450], 0x10
push 0x10090900
cmovae edx, dword [0x1008943c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cff9
mov ecx, 0x10090900
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b450
sub ecx, edx
cmp ecx, 0x20
jae 0x1003b467
cmp ecx, 1
ja 0x1003cff9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2974]
mov dword [ebp - 0x34], 0xe1c51337
mov dword [ebp - 0x30], 0x441a8790
mov byte [ebp - 0x2c], 0x5f
push 0x10090900
test al, 1
jne 0x1003b4ec
or eax, 1
mov dword [esi + 0x2974], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x37b5], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x37ac], al
add ecx, 1
adc edx, 0
jne 0x1003b4d8
cmp ecx, 9
jb 0x1003b4c0
push 0x100730d0
call fcn.1005daa7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x37ac]
mov ecx, edi
call fcn.10053e50
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x30], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b517
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0x28b0]
mov dword [ebp - 0x18], 0x918c0c79
test al, 1
jne 0x1003b599
or eax, 1
mov dword [esi + 0x28b0], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1ac0], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x1abc], al
add ecx, 1
adc edx, 0
jne 0x1003b588
cmp ecx, 4
jb 0x1003b570
push 0x10073120
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x1abc]
mov ecx, edi
call fcn.10053eb0
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b5c6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.1005aa10
mov byte [ebp - 4], 0x1b
mov eax, dword [esi + 0x1a5c]
mov dword [ebp - 0x20], 0xf8c10670
mov dword [ebp - 0x1c], 0x4400cbcc
mov dword [ebp - 0x18], 0xf48e052f
mov word [ebp - 0x14], 0xbdde
test al, 1
jne 0x1003b659
or eax, 1
mov dword [esi + 0x1a5c], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x5ea], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x5dc], al
add ecx, 1
adc edx, 0
jne 0x1003b648
cmp ecx, 0xe
jb 0x1003b630
push 0x10073170
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x5dc]
mov ecx, edi
call fcn.10053f10
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b680
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.1005aa10
push 0x10089068
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x98]
call fcn.1005abb0
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x2d]
lea ecx, [ebp - 0x80]
call fcn.1005c0f0
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x80]
push 0x10089484
call fcn.1005abb0
add esp, 4
mov byte [ebp - 4], 0x20
mov eax, dword [esi + 0x2d08]
mov dword [ebp - 0x48], 0xfdd00834
mov dword [ebp - 0x44], 0x1b54df82
mov dword [ebp - 0x40], 0xf29f153a
mov word [ebp - 0x3c], 0xd08c
mov byte [ebp - 0x3a], 0x35
test al, 1
jne 0x1003b759
or eax, 1
mov dword [esi + 0x2d08], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3bd7], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x3bc8], al
add ecx, 1
adc edx, 0
jne 0x1003b748
cmp ecx, 0xf
jb 0x1003b730
push 0x100731c0
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x3bc8]
mov ecx, edi
call fcn.10053f70
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b781
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov ecx, dword [0x1008b988]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003b7d9
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b7cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b8bd
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003b829
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b81f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b8bd
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003b878
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b86e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b8bd
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003b8cd
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b8c3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003b8c3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov ecx, dword [0x1008fb74]
mov edx, 0x1008943c
cmp dword [0x10089450], 0x10
push 0x10090900
cmovae edx, dword [0x1008943c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cff9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2294]
mov dword [ebp - 0x34], 0xcb7b2329
mov dword [ebp - 0x30], 0x34743766
mov byte [ebp - 0x2c], 0x41
push 0x10090900
test al, 1
jne 0x1003b97c
or eax, 1
mov dword [esi + 0x2294], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x23ed], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x23e4], al
add ecx, 1
adc edx, 0
jne 0x1003b968
cmp ecx, 9
jb 0x1003b950
push 0x10072f90
call fcn.1005daa7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x23e4]
mov ecx, edi
call fcn.10053cd0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b9a7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x3ca8]
mov dword [ebp - 0x18], 0xbb323c67
test al, 1
jne 0x1003ba29
or eax, 1
mov dword [esi + 0x3ca8], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0xa70], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0xa6c], al
add ecx, 1
adc edx, 0
jne 0x1003ba18
cmp ecx, 4
jb 0x1003ba00
push 0x10072fe0
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0xa6c]
mov ecx, edi
call fcn.10053d30
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ba56
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.1005aa10
mov byte [ebp - 4], 0x29
mov eax, dword [esi + 0xf84]
mov dword [ebp - 0x20], 0xd27f366e
mov dword [ebp - 0x1c], 0x346e7b3a
mov dword [ebp - 0x18], 0xde303531
mov word [ebp - 0x14], 0xd28
test al, 1
jne 0x1003bae9
or eax, 1
mov dword [esi + 0xf84], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x171a], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x170c], al
add ecx, 1
adc edx, 0
jne 0x1003bad8
cmp ecx, 0xe
jb 0x1003bac0
push 0x10073030
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x170c]
mov ecx, edi
call fcn.10053d90
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bb10
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.1005aa10
push 0x10089258
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x98]
call fcn.1005abb0
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.1005c0f0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10089484
call fcn.1005abb0
add esp, 4
mov byte [ebp - 4], 0x2e
mov eax, dword [esi + 0x3174]
mov dword [ebp - 0x48], 0xd76e382a
mov dword [ebp - 0x44], 0x6b3a6f74
mov dword [ebp - 0x40], 0xd8212524
mov word [ebp - 0x3c], 0x607a
mov byte [ebp - 0x3a], 0x5b
test al, 1
jne 0x1003bbe9
or eax, 1
mov dword [esi + 0x3174], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x3a9b], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x3a8c], al
add ecx, 1
adc edx, 0
jne 0x1003bbd8
cmp ecx, 0xf
jb 0x1003bbc0
push 0x10073080
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0x3a8c]
mov ecx, edi
call fcn.10053df0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bc11
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov ecx, dword [0x1008b988]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003bc69
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bc5f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bd4d
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003bcb9
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bcaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bd4d
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003bd08
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bcfe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bd4d
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003bd5d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bd53
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003bd53
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov ecx, dword [0x1008fb74]
mov edx, 0x1008943c
cmp dword [0x10089450], 0x10
push 0x10090900
cmovae edx, dword [0x1008943c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cff9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x15b0]
mov dword [ebp - 0x34], 0x655b27b5
mov dword [ebp - 0x30], 0x9238674e
mov byte [ebp - 0x2c], 0xdd
push 0x10090900
test al, 1
jne 0x1003be0c
or eax, 1
mov dword [esi + 0x15b0], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1ca9], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x1ca0], al
add ecx, 1
adc edx, 0
jne 0x1003bdf8
cmp ecx, 9
jb 0x1003bde0
push 0x10072e50
call fcn.1005daa7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1ca0]
mov ecx, edi
call fcn.10053b50
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003be37
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0x944]
mov dword [ebp - 0x18], 0x151238fb
test al, 1
jne 0x1003beb9
or eax, 1
mov dword [esi + 0x944], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x2e4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x2e0], al
add ecx, 1
adc edx, 0
jne 0x1003bea8
cmp ecx, 4
jb 0x1003be90
push 0x10072ea0
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x2e0]
mov ecx, edi
call fcn.10053bb0
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bee6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.1005aa10
mov byte [ebp - 4], 0x37
mov eax, dword [esi + 0x3400]
mov dword [ebp - 0x20], 0x7c5f32f2
mov dword [ebp - 0x1c], 0x92222b12
mov dword [ebp - 0x18], 0x701031ad
mov word [ebp - 0x14], 0x5d00
test al, 1
jne 0x1003bf79
or eax, 1
mov dword [esi + 0x3400], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x3a0e], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x3a00], al
add ecx, 1
adc edx, 0
jne 0x1003bf68
cmp ecx, 0xe
jb 0x1003bf50
push 0x10072ef0
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0x3a00]
mov ecx, edi
call fcn.10053c10
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bfa0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.1005aa10
push 0x10089424
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x98]
call fcn.1005abb0
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.1005c0f0
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10089484
call fcn.1005abb0
add esp, 4
mov byte [ebp - 4], 0x3c
mov eax, dword [esi + 0x1660]
mov dword [ebp - 0x48], 0x794e3cb6
mov dword [ebp - 0x44], 0xcd763f5c
mov dword [ebp - 0x40], 0x760121b8
mov word [ebp - 0x3c], 0x3052
mov byte [ebp - 0x3a], 0x17
test al, 1
jne 0x1003c079
or eax, 1
mov dword [esi + 0x1660], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x1a23], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x1a14], al
add ecx, 1
adc edx, 0
jne 0x1003c068
cmp ecx, 0xf
jb 0x1003c050
push 0x10072f40
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0x1a14]
mov ecx, edi
call fcn.10053c70
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c0a1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov ecx, dword [0x1008b988]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003c0f9
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c0ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c1dd
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003c149
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c13f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c1dd
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003c198
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c18e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c1dd
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003c1ed
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c1e3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003c1e3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov ecx, dword [0x1008fb74]
mov edx, 0x1008943c
cmp dword [0x10089450], 0x10
push 0x10090900
cmovae edx, dword [0x1008943c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cff9
mov ecx, 0x10090900
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c221
sub ecx, edx
cmp ecx, 0x20
jae 0x1003c238
cmp ecx, 1
ja 0x1003cff9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3c94]
mov dword [ebp - 0x28], 0xa7d18521
mov dword [ebp - 0x24], 0x17a44659
push 0x10090900
test al, 1
jne 0x1003c2bc
or eax, 1
mov dword [esi + 0x3c94], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x1594], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0x158c], al
add ecx, 1
adc edx, 0
jne 0x1003c2a8
cmp ecx, 8
jb 0x1003c290
push 0x10072d10
call fcn.1005daa7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x158c]
mov ecx, edi
call fcn.100539d0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c2e7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0xa60]
mov dword [ebp - 0x18], 0xd7989a6f
test al, 1
jne 0x1003c369
or eax, 1
mov dword [esi + 0xa60], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x1908], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x1904], al
add ecx, 1
adc edx, 0
jne 0x1003c358
cmp ecx, 4
jb 0x1003c340
push 0x10072d60
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x1904]
mov ecx, edi
call fcn.10053a30
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c396
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.1005aa10
mov byte [ebp - 4], 0x45
mov eax, dword [esi + 0x12c8]
mov dword [ebp - 0x20], 0xbed59066
mov dword [ebp - 0x1c], 0x38be1f4c
mov dword [ebp - 0x18], 0xb29a9339
mov word [ebp - 0x14], 0x695e
test al, 1
jne 0x1003c429
or eax, 1
mov dword [esi + 0x12c8], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0xf16], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0xf08], al
add ecx, 1
adc edx, 0
jne 0x1003c418
cmp ecx, 0xe
jb 0x1003c400
push 0x10072db0
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0xf08]
mov ecx, edi
call fcn.10053a90
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c450
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.1005aa10
push 0x10089068
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x98]
call fcn.1005abb0
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.1005c0f0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10089484
call fcn.1005abb0
add esp, 4
mov byte [ebp - 4], 0x4a
mov eax, dword [esi + 0x2f38]
mov dword [ebp - 0x48], 0xbbc49e22
mov dword [ebp - 0x44], 0x67ea0b02
mov dword [ebp - 0x40], 0xb48b832c
mov word [ebp - 0x3c], 0x40c
mov byte [ebp - 0x3a], 0x8b
test al, 1
jne 0x1003c529
or eax, 1
mov dword [esi + 0x2f38], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x288b], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x287c], al
add ecx, 1
adc edx, 0
jne 0x1003c518
cmp ecx, 0xf
jb 0x1003c500
push 0x10072e00
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x287c]
mov ecx, edi
call fcn.10053af0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c551
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov ecx, dword [0x1008b988]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003c5a9
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c59f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c68d
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003c5f9
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c5ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c68d
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003c648
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c63e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c68d
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003c69d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c693
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003c693
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov ecx, dword [0x1008fb74]
mov edx, 0x1008943c
cmp dword [0x10089450], 0x10
push 0x10090900
cmovae edx, dword [0x1008943c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cff9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x260c]
mov dword [ebp - 0x28], 0xe505c51f
mov dword [ebp - 0x24], 0x4dc8aca3
push 0x10090900
test al, 1
jne 0x1003c74c
or eax, 1
mov dword [esi + 0x260c], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x814], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [ecx + esi + 0x80c], al
add ecx, 1
adc edx, 0
jne 0x1003c738
cmp ecx, 8
jb 0x1003c720
push 0x10072bd0
call fcn.1005daa7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x80c]
mov ecx, edi
call fcn.10053850
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c777
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x25d8]
mov dword [ebp - 0x18], 0x954cda51
test al, 1
jne 0x1003c7f9
or eax, 1
mov dword [esi + 0x25d8], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x1a04], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x1a00], al
add ecx, 1
adc edx, 0
jne 0x1003c7e8
cmp ecx, 4
jb 0x1003c7d0
push 0x10072c20
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x1a00]
mov ecx, edi
call fcn.100538b0
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c826
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.1005aa10
mov byte [ebp - 4], 0x53
mov eax, dword [esi + 0xed0]
mov dword [ebp - 0x20], 0xfc01d058
mov dword [ebp - 0x1c], 0x62d2f5b6
mov dword [ebp - 0x18], 0xf04ed307
mov word [ebp - 0x14], 0x83a4
test al, 1
jne 0x1003c8b9
or eax, 1
mov dword [esi + 0xed0], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x289e], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x2890], al
add ecx, 1
adc edx, 0
jne 0x1003c8a8
cmp ecx, 0xe
jb 0x1003c890
push 0x10072c70
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0x2890]
mov ecx, edi
call fcn.10053910
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c8e0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.1005aa10
push 0x10089258
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x98]
call fcn.1005abb0
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.1005c0f0
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10089484
call fcn.1005abb0
add esp, 4
mov byte [ebp - 4], 0x58
mov eax, dword [esi + 0x36c0]
mov dword [ebp - 0x48], 0xf910de1c
mov dword [ebp - 0x44], 0x3d86e1f8
mov dword [ebp - 0x40], 0xf65fc312
mov word [ebp - 0x3c], 0xeef6
mov byte [ebp - 0x3a], 0xe7
test al, 1
jne 0x1003c9b9
or eax, 1
mov dword [esi + 0x36c0], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x3d63], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x3d54], al
add ecx, 1
adc edx, 0
jne 0x1003c9a8
cmp ecx, 0xf
jb 0x1003c990
push 0x10072cc0
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x3d54]
mov ecx, edi
call fcn.10053970
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c9e1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov ecx, dword [0x1008b988]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003ca39
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ca2f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cb1d
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003ca89
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ca7f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cb1d
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x1003cad8
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cace
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cb1d
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003cb2d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cb23
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003cb23
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov ecx, dword [0x1008fb74]
mov edx, 0x1008943c
cmp dword [0x10089450], 0x10
push 0x10090900
cmovae edx, dword [0x1008943c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cff9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x15fc]
mov dword [ebp - 0x28], 0x5e3e1d1
mov dword [ebp - 0x24], 0x490cee31
push 0x10090900
test al, 1
jne 0x1003cbdc
or eax, 1
mov dword [esi + 0x15fc], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x3e8], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0x3e0], al
add ecx, 1
adc edx, 0
jne 0x1003cbc8
cmp ecx, 8
jb 0x1003cbb0
push 0x10072a90
call fcn.1005daa7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3e0]
mov ecx, edi
call fcn.100536d0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cc07
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005aa10
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0x12cc]
mov dword [ebp - 0x18], 0x75aafe9f
test al, 1
jne 0x1003cc89
or eax, 1
mov dword [esi + 0x12cc], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x2fbc], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x2fb8], al
add ecx, 1
adc edx, 0
jne 0x1003cc78
cmp ecx, 4
jb 0x1003cc60
push 0x10072ae0
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0x2fb8]
mov ecx, edi
call fcn.10053730
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ccb0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x80]
call fcn.1005aa10
mov byte [ebp - 4], 0x61
mov eax, dword [esi + 0x3988]
mov dword [ebp - 0x20], 0x1ce7f496
mov dword [ebp - 0x1c], 0x6616b724
mov dword [ebp - 0x18], 0x10a8f7c9
mov word [ebp - 0x14], 0xc136
test al, 1
jne 0x1003cd39
or eax, 1
mov dword [esi + 0x3988], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x7e2], 1
nop
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x7d4], al
add ecx, 1
adc edx, 0
jne 0x1003cd28
cmp ecx, 0xe
jb 0x1003cd10
push 0x10072b30
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x7d4]
mov ecx, edi
call fcn.10053790
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cd66
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.1005aa10
push 0x10089424
lea edx, [ebp - 0xb0]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xe0]
call fcn.1005abb0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0xc8]
call fcn.1005c0f0
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0xc8]
push 0x10089484
call fcn.1005abb0
add esp, 4
mov byte [ebp - 4], 0x66
mov eax, dword [esi + 0x1358]
mov dword [ebp - 0x48], 0x19f6fad2
mov dword [ebp - 0x44], 0x3942a36a
mov dword [ebp - 0x40], 0x16b9e7dc
mov word [ebp - 0x3c], 0xac64
mov byte [ebp - 0x3a], 0x23
test al, 1
jne 0x1003ce49
or eax, 1
mov dword [esi + 0x1358], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x687], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x678], al
add ecx, 1
adc edx, 0
jne 0x1003ce38
cmp ecx, 0xf
jb 0x1003ce20
push 0x10072b80
call fcn.1005daa7
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0x678]
mov ecx, esi
call fcn.100537f0
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ce71
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.1005aa10
mov ecx, dword [0x1008b988]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xb4]
cmp edx, 0x10
jb 0x1003cecf
mov ecx, dword [ebp - 0xc8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cec5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cfc5
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xcc]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
cmp edx, 0x10
jb 0x1003cf28
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cf1e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cfc5
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
cmp edx, 0x10
jb 0x1003cf7d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cf73
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cfc5
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
cmp edx, 0x10
jb 0x1003cfd5
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cfcb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003cfcb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d9f0
add esp, 8
mov ecx, dword [0x1008fb74]
mov edx, 0x1008943c
cmp dword [0x10089450], 0x10
push 0x10090900
cmovae edx, dword [0x1008943c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005d0c9
mov esp, ebp
pop ebp
ret