Function at 0x10035cd0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006d104
mov eax, dword fs:[0]
push eax
sub esp, 0xe8
mov eax, dword [0x1009400c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10095bfc]
push 0x100972c8
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x34], 0x15848c1
mov eax, dword [esi + 0x1450]
test al, 1
jne 0x10035d7c
or eax, 1
mov dword [esi + 0x1450], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x600], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x5fc], al
add ecx, 1
adc edx, 0
jne 0x10035d68
cmp ecx, 4
jb 0x10035d50
push 0x1007ade0
call fcn.10066958
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x5fc]
mov ecx, edi
call fcn.1005cda0
mov ecx, edi
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035da0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.100636c0
mov dword [ebp - 4], 1
movaps xmm0, xmmword [0x100877a0]
mov eax, dword [esi + 0x1d5c]
mov word [ebp - 0x1c], 0x1e82
mov byte [ebp - 0x1a], 0x65
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x10035e29
or eax, 1
mov dword [esi + 0x1d5c], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xd87], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xd74], al
add ecx, 1
adc edx, 0
jne 0x10035e18
cmp ecx, 0x13
jb 0x10035e00
push 0x1007ae30
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0xd74]
mov ecx, edi
call fcn.1005ce00
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035e50
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.100636c0
push 0x10094e74
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xac]
call fcn.10063860
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x31]
lea ecx, [ebp - 0x94]
call fcn.10064fa0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x34], esp
lea edx, [ebp - 0x94]
push 0x10095294
call fcn.10063860
add esp, 4
mov byte [ebp - 4], 6
mov eax, dword [esi + 0x6d0]
mov dword [ebp - 0x4c], 0x6d0c459f
mov dword [ebp - 0x48], 0xe0357414
mov dword [ebp - 0x44], 0x774b4884
mov word [ebp - 0x40], 0x7718
mov byte [ebp - 0x3e], 0x5d
test al, 1
jne 0x10035f2b
or eax, 1
mov dword [esi + 0x6d0], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x147b], 1
mov al, byte [ebp + ecx - 0x4c]
mov byte [esi + ecx + 0x146c], al
add ecx, 1
adc edx, 0
jne 0x10035f1a
cmp ecx, 0xf
jb 0x10035f02
push 0x1007ae80
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x146c]
mov ecx, edi
call fcn.1005ce60
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035f53
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov ecx, dword [0x10098584]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x10035faf
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035fa5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036093
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x10036005
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035ffb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036093
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10036054
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003604a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036093
push edx
push ecx
call fcn.100668a1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x100360a3
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036099
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036099
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100668a1
add esp, 8
mov ecx, dword [0x1009c7a0]
mov edx, 0x1009524c
cmp dword [0x10095260], 0x10
push 0x100972c8
cmovae edx, dword [0x1009524c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100383d9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1528]
mov dword [ebp - 0x34], 0x13fe9aab
push 0x100972c8
push 0
push 0
test al, 1
jne 0x1003614c
or eax, 1
mov dword [esi + 0x1528], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xb2c], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0xb28], al
add ecx, 1
adc edx, 0
jne 0x10036138
cmp ecx, 4
jb 0x10036120
push 0x1007acf0
call fcn.10066958
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xb28]
mov ecx, edi
call fcn.1005cc80
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036176
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.100636c0
mov dword [ebp - 4], 9
movaps xmm0, xmmword [0x10087520]
mov eax, dword [esi + 0x3838]
mov word [ebp - 0x1c], 0xcce8
mov byte [ebp - 0x1a], 0xc3
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x10036209
or eax, 1
mov dword [esi + 0x3838], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1d5b], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x1d48], al
add ecx, 1
adc edx, 0
jne 0x100361f8
cmp ecx, 0x13
jb 0x100361e0
push 0x1007ad40
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x1d48]
mov ecx, edi
call fcn.1005cce0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036230
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.100636c0
push 0x10095064
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xac]
call fcn.10063860
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x41]
lea ecx, [ebp - 0x7c]
call fcn.10064fa0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x44], esp
lea edx, [ebp - 0x7c]
push 0x10095294
call fcn.10063860
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [esi + 0x2bec]
mov dword [ebp - 0x3c], 0x7faa97f5
mov dword [ebp - 0x38], 0xfebd0840
mov dword [ebp - 0x34], 0x65ed9aee
mov word [ebp - 0x30], 0xb4c
mov byte [ebp - 0x2e], 0xd5
test al, 1
jne 0x10036309
or eax, 1
mov dword [esi + 0x2bec], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2deb], 1
nop
mov al, byte [ebp + ecx - 0x3c]
mov byte [ecx + esi + 0x2ddc], al
add ecx, 1
adc edx, 0
jne 0x100362f8
cmp ecx, 0xf
jb 0x100362e0
push 0x1007ad90
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x2ddc]
mov ecx, edi
call fcn.1005cd40
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036331
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov ecx, dword [0x10098584]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x1003638a
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036380
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003646b
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x100363da
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100363d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003646b
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10036429
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003641f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003646b
push edx
push ecx
call fcn.100668a1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003647b
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036471
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036471
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100668a1
add esp, 8
mov ecx, dword [0x1009c7a0]
mov edx, 0x1009524c
cmp dword [0x10095260], 0x10
push 0x100972c8
cmovae edx, dword [0x1009524c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100383d9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2afc]
mov dword [ebp - 0x34], 0x297a328b
push 0x100972c8
push 0
push 0
test al, 1
jne 0x1003651d
or eax, 1
mov dword [esi + 0x2afc], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2dfc], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x2df8], al
add ecx, 1
adc edx, 0
jne 0x10036509
cmp ecx, 4
jb 0x100364f1
push 0x1007ac00
call fcn.10066958
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2df8]
mov ecx, edi
call fcn.1005cb60
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036547
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.100636c0
mov dword [ebp - 4], 0x11
movaps xmm0, xmmword [0x100865a0]
mov eax, dword [esi + 0x2778]
mov word [ebp - 0x1c], 0x64c8
mov byte [ebp - 0x1a], 0x47
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x100365d9
or eax, 1
mov dword [esi + 0x2778], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2737], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x2724], al
add ecx, 1
adc edx, 0
jne 0x100365c8
cmp ecx, 0x13
jb 0x100365b0
push 0x1007ac50
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x2724]
mov ecx, edi
call fcn.1005cbc0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036600
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.100636c0
push 0x10095234
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xac]
call fcn.10063860
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x41]
lea ecx, [ebp - 0x7c]
call fcn.10064fa0
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x44], esp
lea edx, [ebp - 0x7c]
push 0x10095294
call fcn.10063860
add esp, 4
mov byte [ebp - 4], 0x16
mov eax, dword [esi + 0x1cd4]
mov dword [ebp - 0x3c], 0x452e3fd5
mov dword [ebp - 0x38], 0x5cdd4266
mov dword [ebp - 0x34], 0x5f6932ce
mov word [ebp - 0x30], 0x416a
mov byte [ebp - 0x2e], 0xb5
test al, 1
jne 0x100366d9
or eax, 1
mov dword [esi + 0x1cd4], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x35bf], 1
nop
mov al, byte [ebp + ecx - 0x3c]
mov byte [ecx + esi + 0x35b0], al
add ecx, 1
adc edx, 0
jne 0x100366c8
cmp ecx, 0xf
jb 0x100366b0
push 0x1007aca0
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x35b0]
mov ecx, edi
call fcn.1005cc20
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036701
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov ecx, dword [0x10098584]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x1003675a
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036750
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003683b
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x100367aa
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100367a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003683b
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x100367f9
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100367ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003683b
push edx
push ecx
call fcn.100668a1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003684b
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036841
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036841
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100668a1
add esp, 8
mov ecx, dword [0x1009c7a0]
mov edx, 0x1009524c
cmp dword [0x10095260], 0x10
push 0x100972c8
cmovae edx, dword [0x1009524c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100383d9
mov ecx, 0x100972c8
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036880
sub ecx, edx
cmp ecx, 0x20
jae 0x10036897
cmp ecx, 1
ja 0x100383d9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1db0]
mov dword [ebp - 0x48], 0x39831f6b
mov dword [ebp - 0x44], 0x2837cc
mov byte [ebp - 0x40], 3
push 0x100972c8
test al, 1
jne 0x1003691c
or eax, 1
mov dword [esi + 0x1db0], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3959], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x3950], al
add ecx, 1
adc edx, 0
jne 0x10036908
cmp ecx, 9
jb 0x100368f0
push 0x1007aac0
call fcn.10066958
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3950]
mov ecx, edi
call fcn.1005c9e0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x44], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036947
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0xe0]
mov dword [ebp - 0x34], 0x49ca0025
test al, 1
jne 0x100369c9
or eax, 1
mov dword [esi + 0xe0], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x11a4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x11a0], al
add ecx, 1
adc edx, 0
jne 0x100369b8
cmp ecx, 4
jb 0x100369a0
push 0x1007ab10
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x11a0]
mov ecx, edi
call fcn.1005ca40
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100369f3
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.100636c0
mov byte [ebp - 4], 0x1b
movaps xmm0, xmmword [0x10086700]
mov eax, dword [esi + 0x2370]
mov word [ebp - 0x1c], 0x5666
mov byte [ebp - 0x1a], 0xf7
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x10036a79
or eax, 1
mov dword [esi + 0x2370], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x7e3], 1
nop
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0x7d0], al
add ecx, 1
adc edx, 0
jne 0x10036a68
cmp ecx, 0x13
jb 0x10036a50
push 0x1007ab60
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x7d0]
mov ecx, edi
call fcn.1005caa0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036aa0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.100636c0
push 0x10094e74
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xac]
call fcn.10063860
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x41]
lea ecx, [ebp - 0x7c]
call fcn.10064fa0
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x34], esp
lea edx, [ebp - 0x7c]
push 0x10095294
call fcn.10063860
add esp, 4
mov byte [ebp - 4], 0x20
mov eax, dword [esi + 0x14a8]
mov dword [ebp - 0x28], 0x259e0d7b
mov dword [ebp - 0x24], 0x4e6f7eda
mov dword [ebp - 0x20], 0x3fd90060
mov word [ebp - 0x1c], 0x7dd6
mov byte [ebp - 0x1a], 7
test al, 1
jne 0x10036b79
or eax, 1
mov dword [esi + 0x14a8], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1d73], 1
nop
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0x1d64], al
add ecx, 1
adc edx, 0
jne 0x10036b68
cmp ecx, 0xf
jb 0x10036b50
push 0x1007abb0
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x1d64]
mov ecx, edi
call fcn.1005cb00
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036ba1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov ecx, dword [0x10098584]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x10036bf9
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036bef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036cda
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x10036c49
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036c3f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036cda
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10036c98
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036c8e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036cda
push edx
push ecx
call fcn.100668a1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x10036cea
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036ce0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036ce0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100668a1
add esp, 8
mov ecx, dword [0x1009c7a0]
mov edx, 0x1009524c
cmp dword [0x10095260], 0x10
push 0x100972c8
cmovae edx, dword [0x1009524c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100383d9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x27ac]
mov dword [ebp - 0x48], 0x2fc33d75
mov dword [ebp - 0x44], 0x8f2dd1c
mov byte [ebp - 0x40], 0x1d
push 0x100972c8
test al, 1
jne 0x10036d9c
or eax, 1
mov dword [esi + 0x27ac], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3821], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x3818], al
add ecx, 1
adc edx, 0
jne 0x10036d88
cmp ecx, 9
jb 0x10036d70
push 0x1007a980
call fcn.10066958
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3818]
mov ecx, edi
call fcn.1005c860
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036dc7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x2ba8]
mov dword [ebp - 0x34], 0x5f8a223b
test al, 1
jne 0x10036e49
or eax, 1
mov dword [esi + 0x2ba8], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x119c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x1198], al
add ecx, 1
adc edx, 0
jne 0x10036e38
cmp ecx, 4
jb 0x10036e20
push 0x1007a9d0
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x1198]
mov ecx, edi
call fcn.1005c8c0
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036e73
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.100636c0
mov byte [ebp - 4], 0x29
movaps xmm0, xmmword [0x100867f0]
mov eax, dword [esi + 0x2b64]
mov word [ebp - 0x1c], 0x7478
mov byte [ebp - 0x1a], 0xb7
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x10036ef9
or eax, 1
mov dword [esi + 0x2b64], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x204f], 1
nop
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0x203c], al
add ecx, 1
adc edx, 0
jne 0x10036ee8
cmp ecx, 0x13
jb 0x10036ed0
push 0x1007aa20
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x203c]
mov ecx, edi
call fcn.1005c920
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036f20
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.100636c0
push 0x10095064
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xac]
call fcn.10063860
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.10064fa0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x44], esp
lea edx, [ebp - 0x7c]
push 0x10095294
call fcn.10063860
add esp, 4
mov byte [ebp - 4], 0x2e
mov eax, dword [esi + 0x25d4]
mov dword [ebp - 0x28], 0x33de2f65
mov dword [ebp - 0x24], 0x46b5940a
mov dword [ebp - 0x20], 0x2999227e
mov word [ebp - 0x1c], 0x9706
mov byte [ebp - 0x1a], 0xdd
test al, 1
jne 0x10036ff9
or eax, 1
mov dword [esi + 0x25d4], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0xdc3], 1
nop
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0xdb4], al
add ecx, 1
adc edx, 0
jne 0x10036fe8
cmp ecx, 0xf
jb 0x10036fd0
push 0x1007aa70
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0xdb4]
mov ecx, edi
call fcn.1005c980
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037021
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov ecx, dword [0x10098584]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x10037079
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003706f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003715a
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x100370c9
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100370bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003715a
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10037118
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003710e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003715a
push edx
push ecx
call fcn.100668a1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003716a
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037160
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10037160
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100668a1
add esp, 8
mov ecx, dword [0x1009c7a0]
mov edx, 0x1009524c
cmp dword [0x10095260], 0x10
push 0x100972c8
cmovae edx, dword [0x1009524c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100383d9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x494]
mov dword [ebp - 0x48], 0x75c71337
mov dword [ebp - 0x44], 0xec26e75e
mov byte [ebp - 0x40], 0x5f
push 0x100972c8
test al, 1
jne 0x1003721c
or eax, 1
mov dword [esi + 0x494], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x34a9], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x34a0], al
add ecx, 1
adc edx, 0
jne 0x10037208
cmp ecx, 9
jb 0x100371f0
push 0x1007a840
call fcn.10066958
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x34a0]
mov ecx, edi
call fcn.1005c6e0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037247
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0x11c]
mov dword [ebp - 0x34], 0x58e0c79
test al, 1
jne 0x100372c9
or eax, 1
mov dword [esi + 0x11c], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x37c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x378], al
add ecx, 1
adc edx, 0
jne 0x100372b8
cmp ecx, 4
jb 0x100372a0
push 0x1007a890
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x378]
mov ecx, edi
call fcn.1005c740
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100372f3
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.100636c0
mov byte [ebp - 4], 0x37
movaps xmm0, xmmword [0x10087dd0]
mov eax, dword [esi + 0xf24]
mov word [ebp - 0x1c], 0x5a3a
mov byte [ebp - 0x1a], 0xb3
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x10037379
or eax, 1
mov dword [esi + 0xf24], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x2d6f], 1
nop
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0x2d5c], al
add ecx, 1
adc edx, 0
jne 0x10037368
cmp ecx, 0x13
jb 0x10037350
push 0x1007a8e0
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0x2d5c]
mov ecx, edi
call fcn.1005c7a0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100373a0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.100636c0
push 0x10095234
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xac]
call fcn.10063860
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.10064fa0
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x44], esp
lea edx, [ebp - 0x7c]
push 0x10095294
call fcn.10063860
add esp, 4
mov byte [ebp - 4], 0x3c
mov eax, dword [esi + 0x14a0]
mov dword [ebp - 0x28], 0x69da0127
mov dword [ebp - 0x24], 0xa261ae48
mov dword [ebp - 0x20], 0x739d0c3c
mov word [ebp - 0x1c], 0xad44
mov byte [ebp - 0x1a], 9
test al, 1
jne 0x10037479
or eax, 1
mov dword [esi + 0x14a0], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x104b], 1
nop
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0x103c], al
add ecx, 1
adc edx, 0
jne 0x10037468
cmp ecx, 0xf
jb 0x10037450
push 0x1007a930
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0x103c]
mov ecx, edi
call fcn.1005c800
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100374a1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov ecx, dword [0x10098584]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x100374f9
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100374ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100375da
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x10037549
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003753f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100375da
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10037598
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003758e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100375da
push edx
push ecx
call fcn.100668a1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x100375ea
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100375e0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100375e0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100668a1
add esp, 8
mov ecx, dword [0x1009c7a0]
mov edx, 0x1009524c
cmp dword [0x10095260], 0x10
push 0x100972c8
cmovae edx, dword [0x1009524c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100383d9
mov ecx, 0x100972c8
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037620
sub ecx, edx
cmp ecx, 0x20
jae 0x10037637
cmp ecx, 1
ja 0x100383d9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xc8]
mov dword [ebp - 0x18], 0xa1419b55
mov dword [ebp - 0x14], 0x39d2d235
push 0x100972c8
test al, 1
jne 0x100376bc
or eax, 1
mov dword [esi + 0xc8], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x2114], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x210c], al
add ecx, 1
adc edx, 0
jne 0x100376a8
cmp ecx, 8
jb 0x10037690
push 0x1007a700
call fcn.10066958
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x210c]
mov ecx, edi
call fcn.1005c560
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100376e7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0x383c]
mov dword [ebp - 0x34], 0xd108841b
test al, 1
jne 0x10037769
or eax, 1
mov dword [esi + 0x383c], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x25b4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x25b0], al
add ecx, 1
adc edx, 0
jne 0x10037758
cmp ecx, 4
jb 0x10037740
push 0x1007a750
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x25b0]
mov ecx, edi
call fcn.1005c5c0
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037793
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.100636c0
mov byte [ebp - 4], 0x45
movaps xmm0, xmmword [0x10086600]
mov eax, dword [esi + 0x2438]
mov word [ebp - 0x1c], 0xd258
mov byte [ebp - 0x1a], 0x35
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x10037819
or eax, 1
mov dword [esi + 0x2438], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x28f7], 1
nop
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x28e4], al
add ecx, 1
adc edx, 0
jne 0x10037808
cmp ecx, 0x13
jb 0x100377f0
push 0x1007a7a0
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x28e4]
mov ecx, edi
call fcn.1005c620
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037840
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.100636c0
push 0x10094e74
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xac]
call fcn.10063860
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.10064fa0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x44], esp
lea edx, [ebp - 0x7c]
push 0x10095294
call fcn.10063860
add esp, 4
mov byte [ebp - 4], 0x4a
mov eax, dword [esi + 0x794]
mov dword [ebp - 0x28], 0xbd5c8945
mov dword [ebp - 0x24], 0x58958e6a
mov dword [ebp - 0x20], 0xa71b845e
mov word [ebp - 0x1c], 0x8d66
mov byte [ebp - 0x1a], 0xfd
test al, 1
jne 0x10037919
or eax, 1
mov dword [esi + 0x794], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x5d7], 1
nop
mov al, byte [ebp + ecx - 0x28]
mov byte [ecx + esi + 0x5c8], al
add ecx, 1
adc edx, 0
jne 0x10037908
cmp ecx, 0xf
jb 0x100378f0
push 0x1007a7f0
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x5c8]
mov ecx, edi
call fcn.1005c680
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037941
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov ecx, dword [0x10098584]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x10037999
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003798f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037a7a
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x100379e9
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100379df
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037a7a
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10037a38
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037a2e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037a7a
push edx
push ecx
call fcn.100668a1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x10037a8a
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037a80
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10037a80
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100668a1
add esp, 8
mov ecx, dword [0x1009c7a0]
mov edx, 0x1009524c
cmp dword [0x10095260], 0x10
push 0x100972c8
cmovae edx, dword [0x1009524c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100383d9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2b68]
mov dword [ebp - 0x18], 0x5f4d591f
mov dword [ebp - 0x14], 0x4faac8b7
push 0x100972c8
test al, 1
jne 0x10037b3c
or eax, 1
mov dword [esi + 0x2b68], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x2720], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x2718], al
add ecx, 1
adc edx, 0
jne 0x10037b28
cmp ecx, 8
jb 0x10037b10
push 0x1007a5c0
call fcn.10066958
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2718]
mov ecx, edi
call fcn.1005c3e0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037b67
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x2ea4]
mov dword [ebp - 0x34], 0x2f044651
test al, 1
jne 0x10037be9
or eax, 1
mov dword [esi + 0x2ea4], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x2ce8], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x2ce4], al
add ecx, 1
adc edx, 0
jne 0x10037bd8
cmp ecx, 4
jb 0x10037bc0
push 0x1007a610
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x2ce4]
mov ecx, edi
call fcn.1005c440
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037c13
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.100636c0
mov byte [ebp - 4], 0x53
movaps xmm0, xmmword [0x10087070]
mov eax, dword [esi + 0x3758]
mov word [ebp - 0x1c], 0x1012
mov byte [ebp - 0x1a], 0x39
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x10037c99
or eax, 1
mov dword [esi + 0x3758], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x2e5f], 1
nop
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x2e4c], al
add ecx, 1
adc edx, 0
jne 0x10037c88
cmp ecx, 0x13
jb 0x10037c70
push 0x1007a660
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0x2e4c]
mov ecx, edi
call fcn.1005c4a0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037cc0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.100636c0
push 0x10095064
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xac]
call fcn.10063860
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.10064fa0
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x44], esp
lea edx, [ebp - 0x7c]
push 0x10095294
call fcn.10063860
add esp, 4
mov byte [ebp - 4], 0x58
mov eax, dword [esi + 0x1a34]
mov dword [ebp - 0x28], 0x43504b0f
mov dword [ebp - 0x24], 0x2eed94e8
mov dword [ebp - 0x20], 0x59174614
mov word [ebp - 0x1c], 0x97e4
mov byte [ebp - 0x1a], 0x85
test al, 1
jne 0x10037d99
or eax, 1
mov dword [esi + 0x1a34], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0xa7], 1
nop
mov al, byte [ebp + ecx - 0x28]
mov byte [ecx + esi + 0x98], al
add ecx, 1
adc edx, 0
jne 0x10037d88
cmp ecx, 0xf
jb 0x10037d70
push 0x1007a6b0
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x98]
mov ecx, edi
call fcn.1005c500
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037dc1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov ecx, dword [0x10098584]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x10037e19
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037e0f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037efa
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x10037e69
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037e5f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037efa
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10037eb8
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037eae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037efa
push edx
push ecx
call fcn.100668a1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x10037f0a
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037f00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10037f00
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100668a1
add esp, 8
mov ecx, dword [0x1009c7a0]
mov edx, 0x1009524c
cmp dword [0x10095260], 0x10
push 0x100972c8
cmovae edx, dword [0x1009524c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100383d9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2620]
mov dword [ebp - 0x18], 0x43613763
mov dword [ebp - 0x14], 0xd9fef6e9
push 0x100972c8
test al, 1
jne 0x10037fbc
or eax, 1
mov dword [esi + 0x2620], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x5e0], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x5d8], al
add ecx, 1
adc edx, 0
jne 0x10037fa8
cmp ecx, 8
jb 0x10037f90
push 0x1007a480
call fcn.10066958
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x5d8]
mov ecx, edi
call fcn.1005c260
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037fe7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.100636c0
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0xcd0]
mov dword [ebp - 0x34], 0x3328282d
test al, 1
jne 0x10038069
or eax, 1
mov dword [esi + 0xcd0], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0xa70], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0xa6c], al
add ecx, 1
adc edx, 0
jne 0x10038058
cmp ecx, 4
jb 0x10038040
push 0x1007a4d0
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0xa6c]
mov ecx, edi
call fcn.1005c2c0
mov ecx, edi
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10038090
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.100636c0
mov byte [ebp - 4], 0x61
movaps xmm0, xmmword [str.__eZ]
mov eax, dword [esi + 0x458]
mov word [ebp - 0x1c], 0x7e6e
mov byte [ebp - 0x1a], 0x15
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x10038119
or eax, 1
mov dword [esi + 0x458], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov byte [esi + 0x2697], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0x2684], al
add ecx, 1
adc edx, 0
jne 0x10038108
cmp ecx, 0x13
jb 0x100380f0
push 0x1007a520
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x2684]
mov ecx, edi
call fcn.1005c320
mov ecx, edi
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10038146
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xc4]
call fcn.100636c0
push 0x10095234
lea edx, [ebp - 0xc4]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xf4]
call fcn.10063860
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xdc]
call fcn.10064fa0
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x44], esp
lea edx, [ebp - 0xdc]
push 0x10095294
call fcn.10063860
add esp, 4
mov byte [ebp - 4], 0x66
mov eax, dword [esi + 0x269c]
mov dword [ebp - 0x28], 0x5f7c2573
mov dword [ebp - 0x24], 0xb8b9aab6
mov dword [ebp - 0x20], 0x453b2868
mov word [ebp - 0x1c], 0xa9ba
mov byte [ebp - 0x1a], 0xd1
test al, 1
jne 0x10038229
or eax, 1
mov dword [esi + 0x269c], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x1ccb], 1
nop
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0x1cbc], al
add ecx, 1
adc edx, 0
jne 0x10038218
cmp ecx, 0xf
jb 0x10038200
push 0x1007a570
call fcn.10066958
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0x1cbc]
mov ecx, esi
call fcn.1005c380
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10038251
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.100636c0
mov ecx, dword [0x10098584]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x100382af
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100382a5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100383a5
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x10038308
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100382fe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100383a5
push edx
push ecx
call fcn.100668a1
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
cmp edx, 0x10
jb 0x1003835d
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10038353
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100383a5
push edx
push ecx
call fcn.100668a1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
cmp edx, 0x10
jb 0x100383b5
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100383ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100383ab
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100668a1
add esp, 8
mov ecx, dword [0x1009c7a0]
mov edx, 0x1009524c
cmp dword [0x10095260], 0x10
push 0x100972c8
cmovae edx, dword [0x1009524c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10065f79
mov esp, ebp
pop ebp
ret