Function at 0x10016700
Capabilities:
Check for time delay via gettickcount
Get common file path
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10152ef3
mov eax, dword fs:[0]
push eax
sub esp, 0x618
mov eax, dword [0x101933a0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x4d8], edi
cmp dword [edi + 0xc], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x4e4], eax
je 0x100169c7
push 0x208
lea eax, [ebp - 0x218]
mov dword [edi + 0xc], 0
push 0
push eax
call fcn.10129ae0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0
push 0x29
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push str.UIAutomationCore.dll
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
call fcn.1000b6b0
mov ecx, eax
test ecx, ecx
je 0x1001759e
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x4cc], eax
mov eax, 0x1015c9f0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x4cc]
test eax, 0xffff0000
jne 0x100167d6
movzx eax, ax
push eax
call fcn.1000b800
jmp 0x100167e2
push 0
push 0x1015c9f0
call fcn.1000e410
mov dword [ebp - 4], 1
call fcn.1000b6b0
mov ecx, eax
test ecx, ecx
je 0x100175a8
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x4c0], eax
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 2
test eax, 0xffff0000
jne 0x1001682a
movzx eax, ax
lea ecx, [ebp - 0x4c0]
push eax
call fcn.1000b800
jmp 0x10016855
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10016833
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x4c0]
call fcn.1000e410
lea eax, [ebp - 0x4cc]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x4c0]
push eax
call fcn.10017b70
mov edx, dword [ebp - 0x4c0]
add esp, 8
mov byte [ebp - 4], 1
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10016891
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x4cc]
mov ecx, str.7.0.0.0
mov eax, esi
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100168c6
test dx, dx
je 0x100168c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100168c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x100168a0
xor eax, eax
jmp 0x100168cb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x100169a8
push str.ntdll.dll
mov dword [edi + 0x50], 1
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c0], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x4c4], eax
test eax, eax
je 0x10016941
push str.RtlGetNtVersionNumbers
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10016935
lea ecx, [ebp - 0x4c0]
push ecx
lea ecx, [ebp - 0x4c8]
push ecx
lea ecx, [ebp - 0x4e0]
push ecx
call eax
movzx eax, word [ebp - 0x4c0]
mov dword [ebp - 0x4c0], eax
push dword [ebp - 0x4c4]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push dword [ebp - 0x4c0]
lea eax, [ebp - 0x4c4]
push dword [ebp - 0x4c8]
push dword [ebp - 0x4e0]
push str.ex1_d__d__dex_ary_percent_1
push eax
call fcn.1003c0d0
add esp, 0x14
push 0
push 0
push 1
push dword [eax]
mov byte [ebp - 4], 4
push str.spec_dll
push 1
call fcn.1000e160
mov ecx, eax
call fcn.10048910
mov edx, dword [ebp - 0x4c4]
or eax, 0xffffffff
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100169a8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100169c7
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [edi + 8]
lea eax, [edi + 8]
mov dword [ebp - 0x4cc], eax
mov ecx, str.qqbrowser
mov eax, esi
nop word [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10016a06
test dx, dx
je 0x10016a02
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10016a06
add eax, 4
add ecx, 4
test dx, dx
jne 0x100169e0
xor eax, eax
jmp 0x10016a0b
sbb eax, eax
or eax, 1
test eax, eax
je 0x10016a31
push str.liebao
push esi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x10016a31
push eax
push str.Chrome_RenderWidgetHostHWND
push eax
push dword [edi + 4]
call dword [sym.imp.USER32.dll_FindWindowExW]
jmp 0x10016a51
mov esi, dword [sym.imp.USER32.dll_FindWindowExW]
push 0
push str.Chrome_WidgetWin_1
push 0
push dword [edi + 4]
call esi
push 0
push str.Chrome_RenderWidgetHostHWND
push 0
push eax
call esi
mov dword [ebp - 0x4c8], eax
test eax, eax
jne 0x10016b63
cmp dword [edi + 0x10], eax
jne 0x10016b63
call fcn.10047b10
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10017581
push 0x62
push str.d:jenkins.jenkinsworkspacelib_common_browser_basic_browser_basic_browser_browserchromebase.cpp
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], 0xf
mov byte [ebp - 0x450], al
call fcn.100084b0
push 3
push 0x1015b938
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 5
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 0xf
mov byte [ebp - 0x438], 0
call fcn.100084b0
mov byte [ebp - 4], 6
call fcn.10047b10
mov edi, eax
lea ecx, [ebp - 0x58c]
push 0x4f
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x438]
push eax
call fcn.10004410
mov esi, eax
push 0x1015d174
push esi
mov byte [ebp - 4], 7
call fcn.10005620
add esp, 8
mov ecx, esi
push dword [ebp - 0x4d4]
call fcn.1000aed0
push str.__invalid_webHwnd
push esi
call fcn.10005620
mov eax, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x58c]
call fcn.10005c20
lea ecx, [ebp - 0x438]
call fcn.10004da0
lea ecx, [ebp - 0x450]
call fcn.10004da0
jmp 0x10017581
mov esi, dword [ebp - 0x4e4]
mov eax, dword [esi + 0x24]
sub eax, 0x10
push eax
call fcn.1000cb70
add eax, 0x10
add esp, 4
mov dword [ebp - 0x4d0], eax
cmp dword [edi + 0x58], 0
mov dword [ebp - 4], 8
je 0x10016cc9
call fcn.10047b10
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10016c95
push 0x62
push str.d:jenkins.jenkinsworkspacelib_common_browser_basic_browser_basic_browser_browserchromebase.cpp
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], 0xf
mov byte [ebp - 0x438], al
call fcn.100084b0
push 3
push 0x1015b938
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 9
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 0xf
mov byte [ebp - 0x450], 0
call fcn.100084b0
mov byte [ebp - 4], 0xa
call fcn.10047b10
mov edi, eax
lea ecx, [ebp - 0x58c]
push 0x57
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x450]
push eax
call fcn.10004410
mov esi, eax
push 0x1015d174
push esi
mov byte [ebp - 4], 0xb
call fcn.10005620
add esp, 8
mov ecx, esi
push dword [ebp - 0x4d4]
call fcn.1000aed0
push str.__History_First__get_url_by_db
push esi
call fcn.10005620
mov eax, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x58c]
call fcn.10005c20
lea ecx, [ebp - 0x450]
call fcn.10004da0
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 8
call fcn.10004da0
mov edi, dword [ebp - 0x4d8]
mov esi, dword [ebp - 0x4e4]
lea eax, [ebp - 0x4c4]
mov dword [ebp - 0x4c4], 1
push eax
lea eax, [ebp - 0x4d0]
push eax
lea eax, [edi + 8]
push eax
push dword [ebp - 0x4d4]
call fcn.1000e1f0
mov ecx, eax
call fcn.1000cc80
mov eax, dword [ebp - 0x4d0]
cmp dword [eax - 0xc], 0
jne 0x10016ce9
lea eax, [ebp - 0x4d0]
mov ecx, edi
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp - 0x4d4]
call fcn.10017fe0
mov eax, dword [esi + 0x20]
sub eax, 0x10
push eax
call fcn.1000cb70
add eax, 0x10
add esp, 4
mov dword [ebp - 0x4dc], eax
cmp dword [eax - 0xc], 0
movups xmm0, xmmword [esi + 0xc]
mov byte [ebp - 4], 0xc
movups xmmword [ebp - 0x4f4], xmm0
jne 0x10016e2c
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.10129ae0
add esp, 0xc
lea eax, [ebp - 0x420]
push 0x104
push eax
push dword [ebp - 0x4d4]
call dword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x10016d77
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10016d55
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x4dc]
call fcn.1000e410
mov eax, dword [edi + 8]
mov edx, str.qqbrowser
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x10016da7
test si, si
je 0x10016da3
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x10016da7
add ecx, 4
add edx, 4
test si, si
jne 0x10016d81
xor ecx, ecx
jmp 0x10016dac
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x10016e2c
mov ecx, str.liebao7
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10016ddb
test dx, dx
je 0x10016dd7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10016ddb
add eax, 4
add ecx, 4
test dx, dx
jne 0x10016db5
xor eax, eax
jmp 0x10016de0
sbb eax, eax
or eax, 1
test eax, eax
je 0x10016e2c
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x4c4]
push eax
call fcn.1003b2e0
add esp, 8
push eax
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0xd
call fcn.1000c750
mov edx, dword [ebp - 0x4c4]
or eax, 0xffffffff
mov byte [ebp - 4], 0xc
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10016e2c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x4bc]
call fcn.100150b0
mov eax, dword [edi + 4]
lea esi, [edi + 8]
movups xmm0, xmmword [ebp - 0x4f4]
mov dword [ebp - 0x4b8], eax
lea ecx, [ebp - 0x494]
mov eax, dword [ebp - 0x4c8]
push esi
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x4b4], eax
movups xmmword [ebp - 0x4b0], xmm0
call fcn.1000c750
lea ecx, [ebp - 0x4dc]
call fcn.10016210
push eax
lea ecx, [ebp - 0x49c]
call fcn.1000c750
lea ecx, [ebp - 0x4d0]
call fcn.10016210
push eax
lea ecx, [ebp - 0x498]
call fcn.1000c750
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4a0], eax
jne 0x10016ed2
cmp dword [edi + 0x10], 0
jne 0x10016ec5
mov dword [ebp - 0x4bc], 0
jmp 0x10017099
mov ecx, 0x10
mov dword [ebp - 0x4bc], ecx
jmp 0x10016ed8
mov ecx, dword [ebp - 0x4bc]
cmp dword [edi + 0x14], 0
je 0x10016f15
mov eax, dword [edi + 0x1c]
cmp eax, dword [ebp - 0x4b0]
jne 0x10016f0a
mov eax, dword [edi + 0x24]
cmp eax, dword [ebp - 0x4a8]
jne 0x10016f0a
mov eax, dword [edi + 0x20]
cmp eax, dword [ebp - 0x4ac]
jne 0x10016f0a
mov eax, dword [edi + 0x28]
cmp eax, dword [ebp - 0x4a4]
je 0x10016f15
mov ecx, 4
mov dword [ebp - 0x4bc], ecx
mov eax, dword [edi + 0x30]
test eax, eax
je 0x100175b2
mov edx, dword [ebp - 0x49c]
mov esi, edx
nop dword [eax + eax]
mov di, word [esi]
cmp di, word [eax]
mov edi, dword [ebp - 0x4d8]
jne 0x10016f6f
cmp word [esi], 0
je 0x10016f6b
mov di, word [esi + 2]
cmp di, word [eax + 2]
mov word [ebp - 0x4be], di
mov edi, dword [ebp - 0x4d8]
jne 0x10016f6f
add esi, 4
add eax, 4
cmp word [ebp - 0x4be], 0
jne 0x10016f30
xor eax, eax
jmp 0x10016f74
sbb eax, eax
or eax, 1
test eax, eax
je 0x10016f81
or ecx, 0x40
mov dword [ebp - 0x4bc], ecx
mov eax, dword [edi + 0x34]
test eax, eax
je 0x100175bc
mov esi, dword [ebp - 0x498]
mov di, word [esi]
cmp di, word [eax]
mov edi, dword [ebp - 0x4d8]
jne 0x10016fd1
cmp word [esi], 0
je 0x10016fcd
mov di, word [esi + 2]
cmp di, word [eax + 2]
mov word [ebp - 0x4be], di
mov edi, dword [ebp - 0x4d8]
jne 0x10016fd1
add esi, 4
add eax, 4
cmp word [ebp - 0x4be], 0
jne 0x10016f92
xor eax, eax
jmp 0x10016fd6
sbb eax, eax
or eax, 1
test eax, eax
je 0x10016fdd
or ecx, 0x20
mov eax, dword [ebp - 0x4b4]
cmp eax, dword [edi + 0x18]
je 0x10016feb
or ecx, 8
cmp ecx, 0x20
mov eax, 0x80
cmove ecx, eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x4bc], ecx
test al, al
jns 0x10017011
test cl, 0x48
je 0x10017011
or ecx, 0x20
mov dword [ebp - 0x4bc], ecx
test ecx, ecx
je 0x10017093
mov edi, ecx
and edi, 0x60
test eax, 0x100
je 0x1001702e
and eax, 0xfffffeff
or ecx, eax
mov dword [ebp - 0x4bc], ecx
mov eax, 0x1015bdf0
mov si, word [edx]
cmp si, word [eax]
jne 0x10017059
test si, si
je 0x10017055
mov si, word [edx + 2]
cmp si, word [eax + 2]
jne 0x10017059
add edx, 4
add eax, 4
test si, si
jne 0x10017033
xor eax, eax
jmp 0x1001705e
sbb eax, eax
or eax, 1
test eax, eax
je 0x10017087
lea eax, [ebp - 0x49c]
push eax
lea eax, [ebp - 0x498]
push eax
call fcn.1003b590
add esp, 8
test eax, eax
jne 0x10017081
cmp edi, 0x60
jne 0x10017093
mov ecx, dword [ebp - 0x4bc]
or ecx, 0x100
mov dword [ebp - 0x4bc], ecx
mov esi, dword [ebp - 0x4cc]
call fcn.10047b10
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10017236
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp + 0x14]
lea ecx, [ebp - 0x490]
push 0x62
push str.d:jenkins.jenkinsworkspacelib_common_browser_basic_browser_basic_browser_browserchromebase.cpp
mov dword [ebp - 0x4c4], eax
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x47c], 0xf
mov byte [ebp - 0x490], 0
call fcn.100084b0
push 3
push 0x1015b938
lea ecx, [ebp - 0x478]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x468], 0
mov dword [ebp - 0x464], 0xf
mov byte [ebp - 0x478], 0
call fcn.100084b0
mov byte [ebp - 4], 0x10
call fcn.10047b10
mov dword [ebp - 0x4e4], eax
lea ecx, [ebp - 0x624]
push 0x71
lea eax, [ebp - 0x490]
push eax
lea eax, [ebp - 0x478]
push eax
call fcn.10004410
mov edi, eax
push 0x1015d174
push edi
mov byte [ebp - 4], 0x11
call fcn.10005620
add esp, 8
mov ecx, edi
push dword [ebp - 0x4d4]
call fcn.1000aed0
push 0x1015d4b0
push edi
call fcn.10005620
mov eax, dword [esi]
mov esi, 0x1015b7d8
test eax, eax
mov ecx, esi
cmovne ecx, eax
push ecx
push edi
call fcn.10002fd0
push 0x1015d4c4
push edi
call fcn.10005620
push 0
lea eax, [ebp - 0x4f4]
push 4
push eax
call fcn.10042dd2
mov ecx, dword [edi]
push dword [eax + 0xc]
mov ecx, dword [ecx + 4]
push dword [eax + 8]
mov eax, dword [eax]
add ecx, edi
push ecx
call eax
add esp, 0x30
mov ecx, edi
push dword [ebp - 0x4c4]
call fcn.1000c7c0
push 0x1015d4d0
push edi
call fcn.10005620
add esp, 8
mov ecx, edi
push dword [ebp - 0x4c8]
call fcn.1000aed0
push 0x1015d1f0
push edi
call fcn.10005620
mov eax, dword [ebp - 0x4d0]
test eax, eax
cmovne esi, eax
push esi
push edi
call fcn.10002fd0
mov ecx, dword [ebp - 0x4e4]
add esp, 0x10
mov eax, dword [ecx]
push edi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x624]
call fcn.10005c20
lea ecx, [ebp - 0x478]
call fcn.10004da0
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0xe
call fcn.10004da0
cmp dword [ebp - 0x4bc], 0
je 0x100174e0
call fcn.1000b6b0
mov ecx, eax
test ecx, ecx
je 0x100175c6
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x434], eax
call fcn.1000b6b0
mov ecx, eax
test ecx, ecx
je 0x100175d0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x430], eax
call fcn.1000b6b0
mov ecx, eax
test ecx, ecx
je 0x100175da
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x42c], eax
call fcn.1000b6b0
mov ecx, eax
test ecx, ecx
je 0x100175e4
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x428], eax
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0x12
call fcn.10016210
push eax
lea ecx, [ebp - 0x434]
call fcn.1000c750
lea ecx, [ebp - 0x4d0]
call fcn.10016210
push eax
lea ecx, [ebp - 0x430]
call fcn.1000c750
lea eax, [ebp - 0x460]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
call fcn.1000b6b0
mov ecx, eax
test ecx, ecx
je 0x100175ee
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x4c8], eax
movzx eax, word [ebp - 0x454]
push eax
movzx eax, word [ebp - 0x456]
push eax
movzx eax, word [ebp - 0x458]
push eax
movzx eax, word [ebp - 0x45a]
push eax
movzx eax, word [ebp - 0x45e]
push eax
movzx eax, word [ebp - 0x460]
push eax
lea eax, [ebp - 0x4c8]
mov byte [ebp - 4], 0x13
push str._d__d__d__d:_d:_d
push eax
call fcn.1000ee70
add esp, 0x20
lea eax, [ebp - 0x4c8]
lea ecx, [ebp - 0x42c]
push eax
call fcn.1000c750
push dword [ebp - 0x4cc]
lea ecx, [ebp - 0x428]
call fcn.1000c750
call fcn.100289f0
sub esp, 0x14
mov dword [ebp - 0x4c4], eax
mov edi, esp
mov dword [ebp - 0x4e4], edi
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
push ecx
call fcn.1000cb70
add eax, 0x10
mov dword [edi], eax
lea esi, [edi + 4]
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x4e0], esi
mov eax, dword [ebp - 0x430]
add eax, 0xfffffff0
push eax
call fcn.1000cb70
add eax, 0x10
mov dword [esi], eax
lea esi, [edi + 8]
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x4e0], esi
mov eax, dword [ebp - 0x42c]
add eax, 0xfffffff0
push eax
call fcn.1000cb70
add eax, 0x10
mov dword [esi], eax
lea esi, [edi + 0xc]
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x4e0], esi
mov eax, dword [ebp - 0x428]
add eax, 0xfffffff0
push eax
call fcn.1000cb70
mov ecx, dword [ebp - 0x4c4]
add eax, 0x10
mov dword [esi], eax
add esp, 0x10
mov eax, dword [ebp - 0x424]
mov dword [edi + 0x10], eax
mov eax, dword [ecx]
mov byte [ebp - 4], 0x13
call dword [eax + 0xc]
call fcn.1000b760
mov edx, dword [eax]
lea ecx, [ebp - 0x4bc]
push ecx
mov ecx, eax
call dword [edx + 0x14]
mov esi, dword [ebp - 0x4d8]
mov eax, dword [ebp - 0x4bc]
movups xmm0, xmmword [ebp - 0x4b0]
mov dword [esi + 0x10], eax
lea ecx, [esi + 0x30]
mov eax, dword [ebp - 0x4b8]
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x4b4]
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 0x4a0]
mov dword [esi + 0x2c], eax
lea eax, [ebp - 0x49c]
push eax
movups xmmword [esi + 0x1c], xmm0
call fcn.1000c750
lea eax, [ebp - 0x498]
push eax
lea ecx, [esi + 0x34]
call fcn.1000c750
lea eax, [ebp - 0x494]
push eax
lea ecx, [esi + 0x38]
call fcn.1000c750
mov edx, dword [ebp - 0x4c8]
or esi, 0xffffffff
mov byte [ebp - 4], 0x12
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100174d3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x434]
call fcn.10015160
jmp 0x100174e3
or esi, 0xffffffff
mov edx, dword [ebp - 0x494]
mov eax, esi
mov byte [ebp - 4], 0xc
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10017504
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x498]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10017521
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x49c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001753e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x4dc]
mov eax, esi
mov byte [ebp - 4], 8
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1001755f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x4d0]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x10017581
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10061045
mov esp, ebp
pop ebp
ret 0x14
push 0x80004005
call fcn.1000b280
push 0x80004005
call fcn.1000b280
push 0x80004005
call fcn.1000b280
push 0x80004005
call fcn.1000b280
push 0x80004005
call fcn.1000b280
push 0x80004005
call fcn.1000b280
push 0x80004005
call fcn.1000b280
push 0x80004005
call fcn.1000b280
push 0x80004005
call fcn.1000b280
int3