Function at 0x1003b130
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10064d40
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x1008600c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10086f0c]
push 0x1008d770
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x2c], 0x4f9498d9
mov eax, dword [esi + 0x33d0]
test al, 1
jne 0x1003b1dc
or eax, 1
mov dword [esi + 0x33d0], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1764], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x1760], al
add ecx, 1
adc edx, 0
jne 0x1003b1c8
cmp ecx, 4
jb 0x1003b1b0
push 0x100719f0
call fcn.1005d2c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1760]
mov ecx, edi
call fcn.10051c20
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b200
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x74]
call fcn.1005a340
mov dword [ebp - 4], 1
movaps xmm0, xmmword [0x1007a470]
mov eax, dword [esi + 0x240]
mov word [ebp - 0x34], 0xce9a
mov byte [ebp - 0x32], 0xa9
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003b289
or eax, 1
mov dword [esi + 0x240], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x183f], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x182c], al
add ecx, 1
adc edx, 0
jne 0x1003b278
cmp ecx, 0x13
jb 0x1003b260
push 0x10071a40
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x182c]
mov ecx, edi
call fcn.10051c80
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b2b0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.1005a340
push 0x10086150
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa4]
call fcn.1005a4e0
add esp, 4
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x2a]
lea ecx, [ebp - 0x8c]
call fcn.1005b910
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x2c], esp
lea edx, [ebp - 0x8c]
push 0x10086570
call fcn.1005a4e0
add esp, 4
mov byte [ebp - 4], 6
movaps xmm0, xmmword [0x1007a0a0]
mov eax, dword [esi + 0x32d0]
mov word [ebp - 0x34], 0xf39b
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003b389
or eax, 1
mov dword [esi + 0x32d0], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x37a], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x368], al
add ecx, 1
adc edx, 0
jne 0x1003b378
cmp ecx, 0x12
jb 0x1003b360
push 0x10071a90
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x368]
mov ecx, edi
call fcn.10051ce0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b3b1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a340
mov ecx, dword [0x100887fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x78]
cmp edx, 0x10
jb 0x1003b40d
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b403
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b4ee
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp edx, 0x10
jb 0x1003b460
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b456
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b4ee
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003b4af
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b4a5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b4ee
push edx
push ecx
call fcn.1005d210
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003b4fe
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b4f4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003b4f4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d210
add esp, 8
mov ecx, dword [0x1008c9e4]
mov edx, 0x10086528
cmp dword [0x1008653c], 0x10
push 0x1008d770
cmovae edx, dword [0x10086528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cb8e
mov ecx, 0x1008d770
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b532
sub ecx, edx
cmp ecx, 0x20
jb 0x1003cb8e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1d4]
mov dword [ebp - 0x24], 0x4d559ba1
mov dword [ebp - 0x20], 0x4262526
mov byte [ebp - 0x1c], 0xc9
push 0x1008d770
test al, 1
jne 0x1003b5cc
or eax, 1
mov dword [esi + 0x1d4], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x12d], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x24]
mov byte [ecx + esi + 0x124], al
add ecx, 1
adc edx, 0
jne 0x1003b5b8
cmp ecx, 9
jb 0x1003b5a0
push 0x100718b0
call fcn.1005d2c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x124]
mov ecx, edi
call fcn.10051aa0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x20], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b5f7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a340
mov dword [ebp - 4], 9
mov eax, dword [esi + 0x16c8]
mov dword [ebp - 0x2c], 0x3d1c84ef
test al, 1
jne 0x1003b679
or eax, 1
mov dword [esi + 0x16c8], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1060], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x105c], al
add ecx, 1
adc edx, 0
jne 0x1003b668
cmp ecx, 4
jb 0x1003b650
push 0x10071900
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x105c]
mov ecx, edi
call fcn.10051b00
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b6a0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.1005a340
mov byte [ebp - 4], 0xb
movaps xmm0, xmmword [0x1007a120]
mov eax, dword [esi + 0x1774]
mov word [ebp - 0x34], 0xd2ac
mov byte [ebp - 0x32], 0x21
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003b729
or eax, 1
mov dword [esi + 0x1774], eax
mov byte [ebp - 4], 0xc
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x316f], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x315c], al
add ecx, 1
adc edx, 0
jne 0x1003b718
cmp ecx, 0x13
jb 0x1003b700
push 0x10071950
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0xb
lea edi, [esi + 0x315c]
mov ecx, edi
call fcn.10051b60
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b750
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.1005a340
push 0x10086150
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xa4]
call fcn.1005a4e0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0xe
push ecx
push eax
push dword [ebp - 0x1f]
lea ecx, [ebp - 0x74]
call fcn.1005b910
sub esp, 0x18
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x2c], esp
lea edx, [ebp - 0x74]
push 0x10086570
call fcn.1005a4e0
add esp, 4
mov byte [ebp - 4], 0x10
movaps xmm0, xmmword [0x1007a400]
mov eax, dword [esi + 0x37e4]
mov word [ebp - 0x34], 0xefad
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003b81a
or eax, 1
mov dword [esi + 0x37e4], eax
mov byte [ebp - 4], 0x11
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2e62], 1
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x2e50], al
add ecx, 1
adc edx, 0
jne 0x1003b809
cmp ecx, 0x12
jb 0x1003b7f1
push 0x100719a0
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x10
lea edi, [esi + 0x2e50]
mov ecx, edi
call fcn.10051bc0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b842
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a340
mov ecx, dword [0x100887fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003b89a
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b890
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b97b
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003b8ea
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b8e0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b97b
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003b939
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b92f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b97b
push edx
push ecx
call fcn.1005d210
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003b98b
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b981
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003b981
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d210
add esp, 8
mov ecx, dword [0x1008c9e4]
mov edx, 0x10086528
cmp dword [0x1008653c], 0x10
push 0x1008d770
cmovae edx, dword [0x10086528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cb8e
mov ecx, 0x1008d770
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b9c0
sub ecx, edx
cmp ecx, 0x20
jb 0x1003cb8e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x349c]
mov dword [ebp - 0x18], 0x19f52bff
mov dword [ebp - 0x14], 0x47623ae3
push 0x1008d770
test al, 1
jne 0x1003ba4c
or eax, 1
mov dword [esi + 0x349c], eax
mov dword [ebp - 4], 0x16
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x339c], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x3394], al
add ecx, 1
adc edx, 0
jne 0x1003ba38
cmp ecx, 8
jb 0x1003ba20
push 0x10071770
call fcn.1005d2c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3394]
mov ecx, edi
call fcn.10051920
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ba77
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a340
mov dword [ebp - 4], 0x17
mov eax, dword [esi + 0x1e8c]
mov dword [ebp - 0x2c], 0x69bc34b1
test al, 1
jne 0x1003baf9
or eax, 1
mov dword [esi + 0x1e8c], eax
mov byte [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0xc4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xc0], al
add ecx, 1
adc edx, 0
jne 0x1003bae8
cmp ecx, 4
jb 0x1003bad0
push 0x100717c0
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x17
lea edi, [esi + 0xc0]
mov ecx, edi
call fcn.10051980
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bb20
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.1005a340
mov byte [ebp - 4], 0x19
movaps xmm0, xmmword [0x1007a810]
mov eax, dword [esi + 0x3938]
mov word [ebp - 0x34], 0x62f2
mov byte [ebp - 0x32], 0x81
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003bba9
or eax, 1
mov dword [esi + 0x3938], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x9d7], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x9c4], al
add ecx, 1
adc edx, 0
jne 0x1003bb98
cmp ecx, 0x13
jb 0x1003bb80
push 0x10071810
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x9c4]
mov ecx, edi
call fcn.100519e0
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bbd0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.1005a340
push 0x10086150
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xa4]
call fcn.1005a4e0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x1c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.1005b910
sub esp, 0x18
mov byte [ebp - 4], 0x1d
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x74]
push 0x10086570
call fcn.1005a4e0
add esp, 4
mov byte [ebp - 4], 0x1e
movaps xmm0, xmmword [0x1007a2c0]
mov eax, dword [esi + 0x2bb0]
mov word [ebp - 0x34], 0x5ff3
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003bc9a
or eax, 1
mov dword [esi + 0x2bb0], eax
mov byte [ebp - 4], 0x1f
xorps xmm0, xmm0
movlpd qword [ebp - 0x30], xmm0
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov byte [esi + 0x2e7a], 1
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x2e68], al
add ecx, 1
adc edx, 0
jne 0x1003bc89
cmp ecx, 0x12
jb 0x1003bc71
push 0x10071860
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x1e
lea edi, [esi + 0x2e68]
mov ecx, edi
call fcn.10051a40
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bcc2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a340
mov ecx, dword [0x100887fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x23
call dword [eax]
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003bd1a
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bd10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bdfb
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003bd6a
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bd60
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bdfb
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003bdb9
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bdaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bdfb
push edx
push ecx
call fcn.1005d210
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003be0b
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003be01
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003be01
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d210
add esp, 8
mov ecx, dword [0x1008c9e4]
mov edx, 0x10086528
cmp dword [0x1008653c], 0x10
push 0x1008d770
cmovae edx, dword [0x10086528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cb8e
mov ecx, 0x1008d770
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003be40
sub ecx, edx
cmp ecx, 0x20
jb 0x1003cb8e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x4d4]
mov dword [ebp - 0x2c], 0x15083e17
push 0x1008d770
push 0
push 0
test al, 1
jne 0x1003becc
or eax, 1
mov dword [esi + 0x4d4], eax
mov dword [ebp - 4], 0x24
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xdc], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xd8], al
add ecx, 1
adc edx, 0
jne 0x1003beb8
cmp ecx, 4
jb 0x1003bea0
push 0x10071680
call fcn.1005d2c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xd8]
mov ecx, edi
call fcn.10051800
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bef3
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.1005a340
mov dword [ebp - 4], 0x25
movaps xmm0, xmmword [0x10079f30]
mov eax, dword [esi + 0x2e4]
mov word [ebp - 0x34], 0x6854
mov byte [ebp - 0x32], 0x35
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003bf7a
or eax, 1
mov dword [esi + 0x2e4], eax
mov byte [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x37b3], 1
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x37a0], al
add ecx, 1
adc edx, 0
jne 0x1003bf69
cmp ecx, 0x13
jb 0x1003bf51
push 0x100716d0
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x25
lea edi, [esi + 0x37a0]
mov ecx, edi
call fcn.10051860
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bfa0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.1005a340
push 0x10086150
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xa4]
call fcn.1005a4e0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x28
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.1005b910
sub esp, 0x18
mov byte [ebp - 4], 0x29
mov ecx, esp
mov dword [ebp - 0x14], esp
lea edx, [ebp - 0x74]
push 0x10086570
call fcn.1005a4e0
add esp, 4
mov byte [ebp - 4], 0x2a
mov eax, dword [esi + 0x1168]
mov dword [ebp - 0x30], 0x3b5c3641
mov dword [ebp - 0x2c], 0x5617b056
mov word [ebp - 0x28], 0x5555
test al, 1
jne 0x1003c079
or eax, 1
mov dword [esi + 0x1168], eax
mov byte [ebp - 4], 0x2b
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x1582], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x1578], al
add ecx, 1
adc edx, 0
jne 0x1003c068
cmp ecx, 0xa
jb 0x1003c050
push 0x10071720
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x2a
lea edi, [esi + 0x1578]
mov ecx, edi
call fcn.100518c0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c0a1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a340
mov ecx, dword [0x100887fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x29
call dword [eax + 4]
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003c0fa
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c0f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c1db
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003c14a
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c140
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c1db
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003c199
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c18f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c1db
push edx
push ecx
call fcn.1005d210
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003c1eb
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c1e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003c1e1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d210
add esp, 8
mov ecx, dword [0x1008c9e4]
mov edx, 0x10086528
cmp dword [0x1008653c], 0x10
push 0x1008d770
cmovae edx, dword [0x10086528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cb8e
mov ecx, 0x1008d770
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c220
sub ecx, edx
cmp ecx, 0x20
jb 0x1003cb8e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x303c]
mov dword [ebp - 0x24], 0xb173995f
mov dword [ebp - 0x20], 0x6c305740
mov byte [ebp - 0x1c], 0x37
push 0x1008d770
test al, 1
jne 0x1003c2bc
or eax, 1
mov dword [esi + 0x303c], eax
mov dword [ebp - 4], 0x2c
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1215], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x24]
mov byte [esi + ecx + 0x120c], al
add ecx, 1
adc edx, 0
jne 0x1003c2a8
cmp ecx, 9
jb 0x1003c290
push 0x10071540
call fcn.1005d2c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x120c]
mov ecx, edi
call fcn.10051680
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c2e7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a340
mov dword [ebp - 4], 0x2d
mov eax, dword [esi + 0x3118]
mov dword [ebp - 0x2c], 0xc13a8611
test al, 1
jne 0x1003c369
or eax, 1
mov dword [esi + 0x3118], eax
mov byte [ebp - 4], 0x2e
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0xac8], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xac4], al
add ecx, 1
adc edx, 0
jne 0x1003c358
cmp ecx, 4
jb 0x1003c340
push 0x10071590
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x2d
lea edi, [esi + 0xac4]
mov ecx, edi
call fcn.100516e0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c390
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.1005a340
mov byte [ebp - 4], 0x2f
movaps xmm0, xmmword [0x1007a8e0]
mov eax, dword [esi + 0x1250]
mov word [ebp - 0x34], 0xd052
mov byte [ebp - 0x32], 7
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003c419
or eax, 1
mov dword [esi + 0x1250], eax
mov byte [ebp - 4], 0x30
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x3287], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x3274], al
add ecx, 1
adc edx, 0
jne 0x1003c408
cmp ecx, 0x13
jb 0x1003c3f0
push 0x100715e0
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x2f
lea edi, [esi + 0x3274]
mov ecx, edi
call fcn.10051740
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c440
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.1005a340
push 0x10086150
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xa4]
call fcn.1005a4e0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x32
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.1005b910
sub esp, 0x18
mov byte [ebp - 4], 0x33
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x74]
push 0x10086570
call fcn.1005a4e0
add esp, 4
mov byte [ebp - 4], 0x34
mov eax, dword [esi + 0x1a34]
mov dword [ebp - 0x3c], 0xef6e8e47
mov dword [ebp - 0x38], 0x2a31145e
mov word [ebp - 0x34], 0xed53
test al, 1
jne 0x1003c519
or eax, 1
mov dword [esi + 0x1a34], eax
mov byte [ebp - 4], 0x35
xorps xmm0, xmm0
movlpd qword [ebp - 0x30], xmm0
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov byte [esi + 0x305e], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x3c]
mov byte [ecx + esi + 0x3054], al
add ecx, 1
adc edx, 0
jne 0x1003c508
cmp ecx, 0xa
jb 0x1003c4f0
push 0x10071630
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x34
lea edi, [esi + 0x3054]
mov ecx, edi
call fcn.100517a0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c541
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a340
mov ecx, dword [0x100887fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x39
call dword [eax]
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003c599
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c58f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c67a
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003c5e9
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c5df
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c67a
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003c638
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c62e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c67a
push edx
push ecx
call fcn.1005d210
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003c68a
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c680
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003c680
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d210
add esp, 8
mov ecx, dword [0x1008c9e4]
mov edx, 0x10086528
cmp dword [0x1008653c], 0x10
push 0x1008d770
cmovae edx, dword [0x10086528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cb8e
mov ecx, 0x1008d770
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c6c0
sub ecx, edx
cmp ecx, 0x20
jb 0x1003cb8e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1b28]
mov dword [ebp - 0x18], 0x916db733
mov dword [ebp - 0x14], 0x91ce747b
push 0x1008d770
test al, 1
jne 0x1003c74c
or eax, 1
mov dword [esi + 0x1b28], eax
mov dword [ebp - 4], 0x3a
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x1270], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x1268], al
add ecx, 1
adc edx, 0
jne 0x1003c738
cmp ecx, 8
jb 0x1003c720
push 0x10071400
call fcn.1005d2c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1268]
mov ecx, edi
call fcn.10051500
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c777
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a340
mov dword [ebp - 4], 0x3b
mov eax, dword [esi + 0x28ec]
mov dword [ebp - 0x2c], 0xe124a87d
test al, 1
jne 0x1003c7f9
or eax, 1
mov dword [esi + 0x28ec], eax
mov byte [ebp - 4], 0x3c
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x2ea8], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x2ea4], al
add ecx, 1
adc edx, 0
jne 0x1003c7e8
cmp ecx, 4
jb 0x1003c7d0
push 0x10071450
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x3b
lea edi, [esi + 0x2ea4]
mov ecx, edi
call fcn.10051560
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c820
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x74]
call fcn.1005a340
mov byte [ebp - 4], 0x3d
movaps xmm0, xmmword [0x1007ad70]
mov eax, dword [esi + 0x1768]
mov word [ebp - 0x34], 0xfe3e
mov byte [ebp - 0x32], 0x19
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003c8a9
or eax, 1
mov dword [esi + 0x1768], eax
mov byte [ebp - 4], 0x3e
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x3223], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x3210], al
add ecx, 1
adc edx, 0
jne 0x1003c898
cmp ecx, 0x13
jb 0x1003c880
push 0x100714a0
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x3d
lea edi, [esi + 0x3210]
mov ecx, edi
call fcn.100515c0
mov ecx, edi
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c8d6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xbc]
call fcn.1005a340
push 0x10086150
lea edx, [ebp - 0xbc]
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xec]
call fcn.1005a4e0
add esp, 4
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x40
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd4]
call fcn.1005b910
sub esp, 0x18
mov byte [ebp - 4], 0x41
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0xd4]
push 0x10086570
call fcn.1005a4e0
add esp, 4
mov byte [ebp - 4], 0x42
mov eax, dword [esi + 0x26e4]
mov dword [ebp - 0x3c], 0xcf70a02b
mov dword [ebp - 0x38], 0xf8cf222c
mov word [ebp - 0x34], 0xc33f
test al, 1
jne 0x1003c9b9
or eax, 1
mov dword [esi + 0x26e4], eax
mov byte [ebp - 4], 0x43
xorps xmm0, xmm0
movlpd qword [ebp - 0x30], xmm0
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov byte [esi + 0x37d2], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x3c]
mov byte [esi + ecx + 0x37c8], al
add ecx, 1
adc edx, 0
jne 0x1003c9a8
cmp ecx, 0xa
jb 0x1003c990
push 0x100714f0
call fcn.1005d2c7
add esp, 4
mov byte [ebp - 4], 0x42
lea esi, [esi + 0x37c8]
mov ecx, esi
call fcn.10051620
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c9e1
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.1005a340
mov ecx, dword [0x100887fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x47
call dword [eax]
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0xc0]
cmp edx, 0x10
jb 0x1003ca3f
mov ecx, dword [ebp - 0xd4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ca35
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cb35
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
cmp edx, 0x10
jb 0x1003ca98
mov ecx, dword [ebp - 0xec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ca8e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cb35
push edx
push ecx
call fcn.1005d210
add esp, 8
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
cmp edx, 0x10
jb 0x1003caed
mov ecx, dword [ebp - 0xbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cae3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003cb35
push edx
push ecx
call fcn.1005d210
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
cmp edx, 0x10
jb 0x1003cb45
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cb3b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003cb3b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d210
add esp, 8
mov ecx, dword [0x1008c9e4]
mov edx, 0x10086528
cmp dword [0x1008653c], 0x10
push 0x1008d770
cmovae edx, dword [0x10086528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003cb8e
mov ecx, 0x1008d770
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cb75
sub ecx, edx
cmp ecx, 0x20
jb 0x1003cb8e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005c8e9
mov esp, ebp
pop ebp
ret