Function at 0x1003aa00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10064510
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x1008500c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10085f0c]
push 0x1008c768
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x2c], 0x4f9498d9
mov eax, dword [esi + 0x33b4]
test al, 1
jne 0x1003aaac
or eax, 1
mov dword [esi + 0x33b4], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x17a8], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x17a4], al
add ecx, 1
adc edx, 0
jne 0x1003aa98
cmp ecx, 4
jb 0x1003aa80
push 0x10071170
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x17a4]
mov ecx, edi
call fcn.100514e0
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003aad0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x74]
call fcn.10059ba0
mov dword [ebp - 4], 1
movaps xmm0, xmmword [0x10079440]
mov eax, dword [esi + 0x244]
mov word [ebp - 0x34], 0xce9a
mov byte [ebp - 0x32], 0xa9
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003ab59
or eax, 1
mov dword [esi + 0x244], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1883], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x1870], al
add ecx, 1
adc edx, 0
jne 0x1003ab48
cmp ecx, 0x13
jb 0x1003ab30
push 0x100711c0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x1870]
mov ecx, edi
call fcn.10051540
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ab80
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10059ba0
push 0x10085150
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa4]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x2a]
lea ecx, [ebp - 0x8c]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x2c], esp
lea edx, [ebp - 0x8c]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 6
movaps xmm0, xmmword [0x10079080]
mov eax, dword [esi + 0x32c0]
mov word [ebp - 0x34], 0xf39b
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003ac59
or eax, 1
mov dword [esi + 0x32c0], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x37a], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x368], al
add ecx, 1
adc edx, 0
jne 0x1003ac48
cmp ecx, 0x12
jb 0x1003ac30
push 0x10071210
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x368]
mov ecx, edi
call fcn.100515a0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ac81
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x78]
cmp edx, 0x10
jb 0x1003acdd
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003acd3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003adbe
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp edx, 0x10
jb 0x1003ad30
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ad26
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003adbe
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003ad7f
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ad75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003adbe
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003adce
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003adc4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003adc4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003c45e
mov ecx, 0x1008c768
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ae02
sub ecx, edx
cmp ecx, 0x20
jb 0x1003c45e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1d4]
mov dword [ebp - 0x24], 0x4d559ba1
mov dword [ebp - 0x20], 0x4262526
mov byte [ebp - 0x1c], 0xc9
push 0x1008c768
test al, 1
jne 0x1003ae9c
or eax, 1
mov dword [esi + 0x1d4], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x12d], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x24]
mov byte [ecx + esi + 0x124], al
add ecx, 1
adc edx, 0
jne 0x1003ae88
cmp ecx, 9
jb 0x1003ae70
push 0x10071030
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x124]
mov ecx, edi
call fcn.10051360
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x20], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003aec7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov dword [ebp - 4], 9
mov eax, dword [esi + 0x170c]
mov dword [ebp - 0x2c], 0x3d1c84ef
test al, 1
jne 0x1003af49
or eax, 1
mov dword [esi + 0x170c], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x107c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x1078], al
add ecx, 1
adc edx, 0
jne 0x1003af38
cmp ecx, 4
jb 0x1003af20
push 0x10071080
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x1078]
mov ecx, edi
call fcn.100513c0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003af70
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10059ba0
mov byte [ebp - 4], 0xb
movaps xmm0, xmmword [0x10079100]
mov eax, dword [esi + 0x17b8]
mov word [ebp - 0x34], 0xd2ac
mov byte [ebp - 0x32], 0x21
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003aff9
or eax, 1
mov dword [esi + 0x17b8], eax
mov byte [ebp - 4], 0xc
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x317b], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x3168], al
add ecx, 1
adc edx, 0
jne 0x1003afe8
cmp ecx, 0x13
jb 0x1003afd0
push 0x100710d0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0xb
lea edi, [esi + 0x3168]
mov ecx, edi
call fcn.10051420
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b020
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10059ba0
push 0x10085150
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xa4]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0xe
push ecx
push eax
push dword [ebp - 0x1f]
lea ecx, [ebp - 0x74]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x2c], esp
lea edx, [ebp - 0x74]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x10
movaps xmm0, xmmword [0x100793d0]
mov eax, dword [esi + 0x37c0]
mov word [ebp - 0x34], 0xefad
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003b0ea
or eax, 1
mov dword [esi + 0x37c0], eax
mov byte [ebp - 4], 0x11
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2e7e], 1
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x2e6c], al
add ecx, 1
adc edx, 0
jne 0x1003b0d9
cmp ecx, 0x12
jb 0x1003b0c1
push 0x10071120
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x10
lea edi, [esi + 0x2e6c]
mov ecx, edi
call fcn.10051480
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b112
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003b16a
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b160
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b24b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003b1ba
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b1b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b24b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003b209
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b1ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b24b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003b25b
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b251
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003b251
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003c45e
mov ecx, 0x1008c768
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b290
sub ecx, edx
cmp ecx, 0x20
jb 0x1003c45e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3474]
mov dword [ebp - 0x18], 0x19f52bff
mov dword [ebp - 0x14], 0x47623ae3
push 0x1008c768
test al, 1
jne 0x1003b31c
or eax, 1
mov dword [esi + 0x3474], eax
mov dword [ebp - 4], 0x16
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x3388], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x3380], al
add ecx, 1
adc edx, 0
jne 0x1003b308
cmp ecx, 8
jb 0x1003b2f0
push 0x10070ef0
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3380]
mov ecx, edi
call fcn.100511e0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b347
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov dword [ebp - 4], 0x17
mov eax, dword [esi + 0x1ee0]
mov dword [ebp - 0x2c], 0x69bc34b1
test al, 1
jne 0x1003b3c9
or eax, 1
mov dword [esi + 0x1ee0], eax
mov byte [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0xc4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xc0], al
add ecx, 1
adc edx, 0
jne 0x1003b3b8
cmp ecx, 4
jb 0x1003b3a0
push 0x10070f40
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x17
lea edi, [esi + 0xc0]
mov ecx, edi
call fcn.10051240
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b3f0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10059ba0
mov byte [ebp - 4], 0x19
movaps xmm0, xmmword [0x100797e0]
mov eax, dword [esi + 0x392c]
mov word [ebp - 0x34], 0x62f2
mov byte [ebp - 0x32], 0x81
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003b479
or eax, 1
mov dword [esi + 0x392c], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x9cf], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x9bc], al
add ecx, 1
adc edx, 0
jne 0x1003b468
cmp ecx, 0x13
jb 0x1003b450
push 0x10070f90
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x9bc]
mov ecx, edi
call fcn.100512a0
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b4a0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10059ba0
push 0x10085150
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xa4]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x1c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x1d
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x74]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x1e
movaps xmm0, xmmword [0x10079290]
mov eax, dword [esi + 0x2bd4]
mov word [ebp - 0x34], 0x5ff3
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003b56a
or eax, 1
mov dword [esi + 0x2bd4], eax
mov byte [ebp - 4], 0x1f
xorps xmm0, xmm0
movlpd qword [ebp - 0x30], xmm0
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov byte [esi + 0x2e9a], 1
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x2e88], al
add ecx, 1
adc edx, 0
jne 0x1003b559
cmp ecx, 0x12
jb 0x1003b541
push 0x10070fe0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x1e
lea edi, [esi + 0x2e88]
mov ecx, edi
call fcn.10051300
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b592
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x23
call dword [eax]
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003b5ea
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b5e0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b6cb
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003b63a
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b630
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b6cb
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003b689
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b67f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b6cb
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003b6db
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b6d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003b6d1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003c45e
mov ecx, 0x1008c768
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b710
sub ecx, edx
cmp ecx, 0x20
jb 0x1003c45e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x4d4]
mov dword [ebp - 0x2c], 0x15083e17
push 0x1008c768
push 0
push 0
test al, 1
jne 0x1003b79c
or eax, 1
mov dword [esi + 0x4d4], eax
mov dword [ebp - 4], 0x24
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xdc], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xd8], al
add ecx, 1
adc edx, 0
jne 0x1003b788
cmp ecx, 4
jb 0x1003b770
push 0x10070e00
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xd8]
mov ecx, edi
call fcn.100510c0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b7c3
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10059ba0
mov dword [ebp - 4], 0x25
movaps xmm0, xmmword [0x10078f20]
mov eax, dword [esi + 0x2e4]
mov word [ebp - 0x34], 0x6854
mov byte [ebp - 0x32], 0x35
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003b84a
or eax, 1
mov dword [esi + 0x2e4], eax
mov byte [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x378f], 1
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x377c], al
add ecx, 1
adc edx, 0
jne 0x1003b839
cmp ecx, 0x13
jb 0x1003b821
push 0x10070e50
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x25
lea edi, [esi + 0x377c]
mov ecx, edi
call fcn.10051120
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b870
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10059ba0
push 0x10085150
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xa4]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x28
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x29
mov ecx, esp
mov dword [ebp - 0x14], esp
lea edx, [ebp - 0x74]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x2a
mov eax, dword [esi + 0x1184]
mov dword [ebp - 0x30], 0x3b5c3641
mov dword [ebp - 0x2c], 0x5617b056
mov word [ebp - 0x28], 0x5555
test al, 1
jne 0x1003b949
or eax, 1
mov dword [esi + 0x1184], eax
mov byte [ebp - 4], 0x2b
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x15ce], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x15c4], al
add ecx, 1
adc edx, 0
jne 0x1003b938
cmp ecx, 0xa
jb 0x1003b920
push 0x10070ea0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x2a
lea edi, [esi + 0x15c4]
mov ecx, edi
call fcn.10051180
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b971
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x29
call dword [eax + 4]
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003b9ca
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b9c0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003baab
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003ba1a
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ba10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003baab
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003ba69
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ba5f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003baab
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003babb
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bab1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003bab1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003c45e
mov ecx, 0x1008c768
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003baf0
sub ecx, edx
cmp ecx, 0x20
jb 0x1003c45e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3058]
mov dword [ebp - 0x24], 0xb173995f
mov dword [ebp - 0x20], 0x6c305740
mov byte [ebp - 0x1c], 0x37
push 0x1008c768
test al, 1
jne 0x1003bb8c
or eax, 1
mov dword [esi + 0x3058], eax
mov dword [ebp - 4], 0x2c
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1231], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x24]
mov byte [esi + ecx + 0x1228], al
add ecx, 1
adc edx, 0
jne 0x1003bb78
cmp ecx, 9
jb 0x1003bb60
push 0x10070cc0
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1228]
mov ecx, edi
call fcn.10050f40
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bbb7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov dword [ebp - 4], 0x2d
mov eax, dword [esi + 0x3124]
mov dword [ebp - 0x2c], 0xc13a8611
test al, 1
jne 0x1003bc39
or eax, 1
mov dword [esi + 0x3124], eax
mov byte [ebp - 4], 0x2e
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0xad0], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xacc], al
add ecx, 1
adc edx, 0
jne 0x1003bc28
cmp ecx, 4
jb 0x1003bc10
push 0x10070d10
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x2d
lea edi, [esi + 0xacc]
mov ecx, edi
call fcn.10050fa0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bc60
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10059ba0
mov byte [ebp - 4], 0x2f
movaps xmm0, xmmword [0x100798b0]
mov eax, dword [esi + 0x126c]
mov word [ebp - 0x34], 0xd052
mov byte [ebp - 0x32], 7
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003bce9
or eax, 1
mov dword [esi + 0x126c], eax
mov byte [ebp - 4], 0x30
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x3277], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x3264], al
add ecx, 1
adc edx, 0
jne 0x1003bcd8
cmp ecx, 0x13
jb 0x1003bcc0
push 0x10070d60
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x2f
lea edi, [esi + 0x3264]
mov ecx, edi
call fcn.10051000
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bd10
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10059ba0
push 0x10085150
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xa4]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x32
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x33
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x74]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x34
mov eax, dword [esi + 0x1a70]
mov dword [ebp - 0x3c], 0xef6e8e47
mov dword [ebp - 0x38], 0x2a31145e
mov word [ebp - 0x34], 0xed53
test al, 1
jne 0x1003bde9
or eax, 1
mov dword [esi + 0x1a70], eax
mov byte [ebp - 4], 0x35
xorps xmm0, xmm0
movlpd qword [ebp - 0x30], xmm0
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov byte [esi + 0x307a], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x3c]
mov byte [ecx + esi + 0x3070], al
add ecx, 1
adc edx, 0
jne 0x1003bdd8
cmp ecx, 0xa
jb 0x1003bdc0
push 0x10070db0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x34
lea edi, [esi + 0x3070]
mov ecx, edi
call fcn.10051060
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003be11
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x39
call dword [eax]
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003be69
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003be5f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bf4a
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003beb9
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003beaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bf4a
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003bf08
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003befe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bf4a
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003bf5a
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bf50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003bf50
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003c45e
mov ecx, 0x1008c768
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bf90
sub ecx, edx
cmp ecx, 0x20
jb 0x1003c45e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1b64]
mov dword [ebp - 0x18], 0x916db733
mov dword [ebp - 0x14], 0x91ce747b
push 0x1008c768
test al, 1
jne 0x1003c01c
or eax, 1
mov dword [esi + 0x1b64], eax
mov dword [ebp - 4], 0x3a
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x128c], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x1284], al
add ecx, 1
adc edx, 0
jne 0x1003c008
cmp ecx, 8
jb 0x1003bff0
push 0x10070b80
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1284]
mov ecx, edi
call fcn.10050dc0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c047
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov dword [ebp - 4], 0x3b
mov eax, dword [esi + 0x2904]
mov dword [ebp - 0x2c], 0xe124a87d
test al, 1
jne 0x1003c0c9
or eax, 1
mov dword [esi + 0x2904], eax
mov byte [ebp - 4], 0x3c
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x2ec8], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x2ec4], al
add ecx, 1
adc edx, 0
jne 0x1003c0b8
cmp ecx, 4
jb 0x1003c0a0
push 0x10070bd0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x3b
lea edi, [esi + 0x2ec4]
mov ecx, edi
call fcn.10050e20
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c0f0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x74]
call fcn.10059ba0
mov byte [ebp - 4], 0x3d
movaps xmm0, xmmword [0x10079d50]
mov eax, dword [esi + 0x17ac]
mov word [ebp - 0x34], 0xfe3e
mov byte [ebp - 0x32], 0x19
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003c179
or eax, 1
mov dword [esi + 0x17ac], eax
mov byte [ebp - 4], 0x3e
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x3213], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x3200], al
add ecx, 1
adc edx, 0
jne 0x1003c168
cmp ecx, 0x13
jb 0x1003c150
push 0x10070c20
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x3d
lea edi, [esi + 0x3200]
mov ecx, edi
call fcn.10050e80
mov ecx, edi
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c1a6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xbc]
call fcn.10059ba0
push 0x10085150
lea edx, [ebp - 0xbc]
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xec]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x40
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd4]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x41
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0xd4]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x42
mov eax, dword [esi + 0x2734]
mov dword [ebp - 0x3c], 0xcf70a02b
mov dword [ebp - 0x38], 0xf8cf222c
mov word [ebp - 0x34], 0xc33f
test al, 1
jne 0x1003c289
or eax, 1
mov dword [esi + 0x2734], eax
mov byte [ebp - 4], 0x43
xorps xmm0, xmm0
movlpd qword [ebp - 0x30], xmm0
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov byte [esi + 0x37ae], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x3c]
mov byte [esi + ecx + 0x37a4], al
add ecx, 1
adc edx, 0
jne 0x1003c278
cmp ecx, 0xa
jb 0x1003c260
push 0x10070c70
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x42
lea esi, [esi + 0x37a4]
mov ecx, esi
call fcn.10050ee0
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c2b1
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x47
call dword [eax]
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0xc0]
cmp edx, 0x10
jb 0x1003c30f
mov ecx, dword [ebp - 0xd4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c305
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c405
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
cmp edx, 0x10
jb 0x1003c368
mov ecx, dword [ebp - 0xec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c35e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c405
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
cmp edx, 0x10
jb 0x1003c3bd
mov ecx, dword [ebp - 0xbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c3b3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c405
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
cmp edx, 0x10
jb 0x1003c415
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c40b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003c40b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003c45e
mov ecx, 0x1008c768
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c445
sub ecx, edx
cmp ecx, 0x20
jb 0x1003c45e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005c149
mov esp, ebp
pop ebp
ret