Function at 0x10033540
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10063284
mov eax, dword fs:[0]
push eax
sub esp, 0xe8
mov eax, dword [0x1008500c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10085f0c]
push 0x1008c768
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x1c], 0x9b9692ff
mov eax, dword [esi + 0x241c]
test al, 1
jne 0x100335ec
or eax, 1
mov dword [esi + 0x241c], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x5d8], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x5d4], al
add ecx, 1
adc edx, 0
jne 0x100335d8
cmp ecx, 4
jb 0x100335c0
push 0x1006fbe0
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x5d4]
mov ecx, edi
call fcn.10053220
mov ecx, edi
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10033610
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.10059ba0
mov dword [ebp - 4], 1
movaps xmm0, xmmword [0x10079bf0]
mov eax, dword [esi + 0x1178]
mov dword [ebp - 0x28], 0xfe949ba9
mov word [ebp - 0x24], 0x6d48
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x10033699
or eax, 1
mov dword [esi + 0x1178], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2326], 1
nop
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x2310], al
add ecx, 1
adc edx, 0
jne 0x10033688
cmp ecx, 0x16
jb 0x10033670
push 0x1006fc30
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x2310]
mov ecx, edi
call fcn.10053280
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100336c0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10059ba0
push 0x10085150
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xac]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x94]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x94]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 6
movaps xmm0, xmmword [0x10079ff0]
mov eax, dword [esi + 0x24f0]
mov word [ebp - 0x3c], 0xf9a3
movups xmmword [ebp - 0x4c], xmm0
test al, 1
jne 0x10033799
or eax, 1
mov dword [esi + 0x24f0], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2a56], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x4c]
mov byte [esi + ecx + 0x2a44], al
add ecx, 1
adc edx, 0
jne 0x10033788
cmp ecx, 0x12
jb 0x10033770
push 0x1006fc80
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x2a44]
mov ecx, edi
call fcn.100532e0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100337c1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x1003381d
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10033813
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033901
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x10033873
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10033869
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033901
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x100338c2
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100338b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033901
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x10033911
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10033907
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10033907
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10035bb9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x35ac]
mov dword [ebp - 0x1c], 0xd9ee7291
push 0x1008c768
push 0
push 0
test al, 1
jne 0x100339bc
or eax, 1
mov dword [esi + 0x35ac], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1294], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x1290], al
add ecx, 1
adc edx, 0
jne 0x100339a8
cmp ecx, 4
jb 0x10033990
push 0x1006faf0
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1290]
mov ecx, edi
call fcn.10053100
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100339e6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10059ba0
mov dword [ebp - 4], 9
movaps xmm0, xmmword [0x10079ed0]
mov eax, dword [esi + 0x19e4]
mov dword [ebp - 0x28], 0xbcec7bc7
mov word [ebp - 0x24], 0x21c4
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x10033a79
or eax, 1
mov dword [esi + 0x19e4], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xf0a], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0xef4], al
add ecx, 1
adc edx, 0
jne 0x10033a68
cmp ecx, 0x16
jb 0x10033a50
push 0x1006fb40
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0xef4]
mov ecx, edi
call fcn.10053160
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10033aa0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10059ba0
push 0x10085340
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xac]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x3e]
lea ecx, [ebp - 0x7c]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0xe
movaps xmm0, xmmword [0x1007a340]
mov eax, dword [esi + 0x22bc]
mov word [ebp - 0x24], 0x19cd
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10033b6a
or eax, 1
mov dword [esi + 0x22bc], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2d26], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x2d14], al
add ecx, 1
adc edx, 0
jne 0x10033b59
cmp ecx, 0x12
jb 0x10033b41
push 0x1006fb90
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x2d14]
mov ecx, edi
call fcn.100531c0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10033b92
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x10033beb
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10033be1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033ccc
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x10033c3b
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10033c31
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033ccc
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10033c8a
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10033c80
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033ccc
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x10033cdc
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10033cd2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10033cd2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10035bb9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x34d4]
mov dword [ebp - 0x1c], 0xb1f626f5
push 0x1008c768
push 0
push 0
test al, 1
jne 0x10033d7e
or eax, 1
mov dword [esi + 0x34d4], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x634], 1
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x630], al
add ecx, 1
adc edx, 0
jne 0x10033d6a
cmp ecx, 4
jb 0x10033d52
push 0x1006fa00
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x630]
mov ecx, edi
call fcn.10052fe0
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10033da8
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10059ba0
mov dword [ebp - 4], 0x11
movaps xmm0, xmmword [0x10079210]
mov eax, dword [esi + 0x3254]
mov dword [ebp - 0x28], 0xd4f42fa3
mov word [ebp - 0x24], 0x3350
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x10033e39
or eax, 1
mov dword [esi + 0x3254], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3426], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x3410], al
add ecx, 1
adc edx, 0
jne 0x10033e28
cmp ecx, 0x16
jb 0x10033e10
push 0x1006fa50
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x3410]
mov ecx, edi
call fcn.10053040
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10033e60
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10059ba0
push 0x10085510
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xac]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x3e]
lea ecx, [ebp - 0x7c]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x16
movaps xmm0, xmmword [0x100798a0]
mov eax, dword [esi + 0x37bc]
mov word [ebp - 0x24], 0x4da9
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10033f2a
or eax, 1
mov dword [esi + 0x37bc], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x626], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x614], al
add ecx, 1
adc edx, 0
jne 0x10033f19
cmp ecx, 0x12
jb 0x10033f01
push 0x1006faa0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x614]
mov ecx, edi
call fcn.100530a0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10033f52
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x10033fab
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10033fa1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003408c
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x10033ffb
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10033ff1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003408c
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003404a
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034040
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003408c
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003409c
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034092
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034092
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10035bb9
mov ecx, 0x1008c768
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100340d0
sub ecx, edx
cmp ecx, 0x20
jb 0x10035bb9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2abc]
mov dword [ebp - 0x44], 0xd56141bd
mov dword [ebp - 0x40], 0x2054ade6
mov byte [ebp - 0x3c], 0xd5
push 0x1008c768
test al, 1
jne 0x1003416c
or eax, 1
mov dword [esi + 0x2abc], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1339], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x1330], al
add ecx, 1
adc edx, 0
jne 0x10034158
cmp ecx, 9
jb 0x10034140
push 0x1006f8c0
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1330]
mov ecx, edi
call fcn.10052e60
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x40], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034197
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0xf3c]
mov dword [ebp - 0x1c], 0xa5285ef3
test al, 1
jne 0x10034219
or eax, 1
mov dword [esi + 0xf3c], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x14fc], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x14f8], al
add ecx, 1
adc edx, 0
jne 0x10034208
cmp ecx, 4
jb 0x100341f0
push 0x1006f910
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x14f8]
mov ecx, edi
call fcn.10052ec0
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034243
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10059ba0
mov byte [ebp - 4], 0x1b
movaps xmm0, xmmword [0x10079180]
mov eax, dword [esi + 0x1c50]
mov dword [ebp - 0x28], 0xc02a57a5
mov word [ebp - 0x24], 0x97a8
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x100342ca
or eax, 1
mov dword [esi + 0x1c50], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x34d2], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x34bc], al
add ecx, 1
adc edx, 0
jne 0x100342b9
cmp ecx, 0x16
jb 0x100342a1
push 0x1006f960
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x34bc]
mov ecx, edi
call fcn.10052f20
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100342f0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10059ba0
push 0x10085150
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xac]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x3e]
lea ecx, [ebp - 0x7c]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x7c]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x20
movaps xmm0, xmmword [0x100797c0]
mov eax, dword [esi + 0x1160]
mov word [ebp - 0x24], 0x35af
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x100343ba
or eax, 1
mov dword [esi + 0x1160], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1c3e], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x1c2c], al
add ecx, 1
adc edx, 0
jne 0x100343a9
cmp ecx, 0x12
jb 0x10034391
push 0x1006f9b0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x1c2c]
mov ecx, edi
call fcn.10052f80
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100343e2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x1003443a
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034430
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003451b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x1003448a
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034480
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003451b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x100344d9
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100344cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003451b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003452b
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034521
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034521
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10035bb9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2f70]
mov dword [ebp - 0x44], 0x4d557b67
mov dword [ebp - 0x40], 0x2ab6af54
mov byte [ebp - 0x3c], 0xf
push 0x1008c768
test al, 1
jne 0x100345dc
or eax, 1
mov dword [esi + 0x2f70], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3705], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x36fc], al
add ecx, 1
adc edx, 0
jne 0x100345c8
cmp ecx, 9
jb 0x100345b0
push 0x1006f780
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x36fc]
mov ecx, edi
call fcn.10052ce0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034607
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x1a58]
mov dword [ebp - 0x1c], 0x3d1c6429
test al, 1
jne 0x10034689
or eax, 1
mov dword [esi + 0x1a58], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x1b70], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x1b6c], al
add ecx, 1
adc edx, 0
jne 0x10034678
cmp ecx, 4
jb 0x10034660
push 0x1006f7d0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x1b6c]
mov ecx, edi
call fcn.10052d40
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100346b3
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10059ba0
mov byte [ebp - 4], 0x29
movaps xmm0, xmmword [0x10079230]
mov eax, dword [esi + 0x610]
mov dword [ebp - 0x28], 0x581e6d7f
mov word [ebp - 0x24], 0x951a
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003473a
or eax, 1
mov dword [esi + 0x610], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x18d2], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x18bc], al
add ecx, 1
adc edx, 0
jne 0x10034729
cmp ecx, 0x16
jb 0x10034711
push 0x1006f820
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x18bc]
mov ecx, edi
call fcn.10052da0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034760
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10059ba0
push 0x10085340
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xac]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x2e
movaps xmm0, xmmword [0x100798c0]
mov eax, dword [esi + 0x8e4]
mov word [ebp - 0x24], 0xf75
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003482a
or eax, 1
mov dword [esi + 0x8e4], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x5b6], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x5a4], al
add ecx, 1
adc edx, 0
jne 0x10034819
cmp ecx, 0x12
jb 0x10034801
push 0x1006f870
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0x5a4]
mov ecx, edi
call fcn.10052e00
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034852
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x100348aa
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100348a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003498b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x100348fa
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100348f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003498b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10034949
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003493f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003498b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003499b
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034991
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034991
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10035bb9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3260]
mov dword [ebp - 0x44], 0x73bd3f81
mov dword [ebp - 0x40], 0xe209900
mov byte [ebp - 0x3c], 0xe9
push 0x1008c768
test al, 1
jne 0x10034a4c
or eax, 1
mov dword [esi + 0x3260], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x19a9], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x19a0], al
add ecx, 1
adc edx, 0
jne 0x10034a38
cmp ecx, 9
jb 0x10034a20
push 0x1006f640
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x19a0]
mov ecx, edi
call fcn.10052b60
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034a77
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0x32b0]
mov dword [ebp - 0x1c], 0x3f420cf
test al, 1
jne 0x10034af9
or eax, 1
mov dword [esi + 0x32b0], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x2100], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x20fc], al
add ecx, 1
adc edx, 0
jne 0x10034ae8
cmp ecx, 4
jb 0x10034ad0
push 0x1006f690
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x20fc]
mov ecx, edi
call fcn.10052bc0
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034b23
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10059ba0
mov byte [ebp - 4], 0x37
movaps xmm0, xmmword [0x10079060]
mov eax, dword [esi + 0x1528]
mov dword [ebp - 0x28], 0x66f62999
mov word [ebp - 0x24], 0xa34e
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x10034baa
or eax, 1
mov dword [esi + 0x1528], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x2a6], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x290], al
add ecx, 1
adc edx, 0
jne 0x10034b99
cmp ecx, 0x16
jb 0x10034b81
push 0x1006f6e0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0x290]
mov ecx, edi
call fcn.10052c20
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034bd0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10059ba0
push 0x10085510
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xac]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x3c
movaps xmm0, xmmword [0x100795c0]
mov eax, dword [esi + 0x1020]
mov word [ebp - 0x24], 0x4b93
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10034c9a
or eax, 1
mov dword [esi + 0x1020], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0xf76], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0xf64], al
add ecx, 1
adc edx, 0
jne 0x10034c89
cmp ecx, 0x12
jb 0x10034c71
push 0x1006f730
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0xf64]
mov ecx, edi
call fcn.10052c80
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034cc2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x10034d1a
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034d10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034dfb
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x10034d6a
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034d60
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034dfb
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10034db9
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034daf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034dfb
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x10034e0b
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034e01
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034e01
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10035bb9
mov ecx, 0x1008c768
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034e40
sub ecx, edx
cmp ecx, 0x20
jb 0x10035bb9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2730]
mov dword [ebp - 0x18], 0xa1b5816d
mov dword [ebp - 0x14], 0xc5e6d025
push 0x1008c768
test al, 1
jne 0x10034ecc
or eax, 1
mov dword [esi + 0x2730], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x1a40], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x1a38], al
add ecx, 1
adc edx, 0
jne 0x10034eb8
cmp ecx, 8
jb 0x10034ea0
push 0x1006f500
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1a38]
mov ecx, edi
call fcn.100529e0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034ef7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0x34b0]
mov dword [ebp - 0x1c], 0xd1fc9e23
test al, 1
jne 0x10034f79
or eax, 1
mov dword [esi + 0x34b0], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x11c4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x11c0], al
add ecx, 1
adc edx, 0
jne 0x10034f68
cmp ecx, 4
jb 0x10034f50
push 0x1006f550
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x11c0]
mov ecx, edi
call fcn.10052a40
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034fa3
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10059ba0
mov byte [ebp - 4], 0x45
movaps xmm0, xmmword [0x1007a310]
mov eax, dword [esi + 0x1e34]
mov dword [ebp - 0x28], 0xb4fe9775
mov word [ebp - 0x24], 0xff22
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003502a
or eax, 1
mov dword [esi + 0x1e34], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x1f66], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x1f50], al
add ecx, 1
adc edx, 0
jne 0x10035019
cmp ecx, 0x16
jb 0x10035001
push 0x1006f5a0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x1f50]
mov ecx, edi
call fcn.10052aa0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035050
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10059ba0
push 0x10085150
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xac]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x4a
movaps xmm0, xmmword [0x10079f00]
mov eax, dword [esi + 0x754]
mov word [ebp - 0x24], 0xf57f
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003511a
or eax, 1
mov dword [esi + 0x754], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x1ba], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x1a8], al
add ecx, 1
adc edx, 0
jne 0x10035109
cmp ecx, 0x12
jb 0x100350f1
push 0x1006f5f0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x1a8]
mov ecx, edi
call fcn.10052b00
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035142
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x1003519a
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035190
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003527b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x100351ea
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100351e0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003527b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10035239
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003522f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003527b
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003528b
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035281
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10035281
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10035bb9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3dc]
mov dword [ebp - 0x18], 0x5d27372f
mov dword [ebp - 0x14], 0xcfba22fb
push 0x1008c768
test al, 1
jne 0x1003533c
or eax, 1
mov dword [esi + 0x3dc], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x27e4], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x27dc], al
add ecx, 1
adc edx, 0
jne 0x10035328
cmp ecx, 8
jb 0x10035310
push 0x1006f3c0
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x27dc]
mov ecx, edi
call fcn.10052860
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035367
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x7fc]
mov dword [ebp - 0x1c], 0x2d6e2861
test al, 1
jne 0x100353e9
or eax, 1
mov dword [esi + 0x7fc], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x39f4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x39f0], al
add ecx, 1
adc edx, 0
jne 0x100353d8
cmp ecx, 4
jb 0x100353c0
push 0x1006f410
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x39f0]
mov ecx, edi
call fcn.100528c0
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035413
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10059ba0
mov byte [ebp - 4], 0x53
movaps xmm0, xmmword [str.h_D]
mov eax, dword [esi + 0x7f8]
mov dword [ebp - 0x28], 0x486c2137
mov word [ebp - 0x24], 0xdfc
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003549a
or eax, 1
mov dword [esi + 0x7f8], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x5ce], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x5b8], al
add ecx, 1
adc edx, 0
jne 0x10035489
cmp ecx, 0x16
jb 0x10035471
push 0x1006f460
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0x5b8]
mov ecx, edi
call fcn.10052920
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100354c0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10059ba0
push 0x10085340
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xac]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x58
movaps xmm0, xmmword [str.7D]
mov eax, dword [esi + 0x2ed4]
mov word [ebp - 0x24], 0x433d
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003558a
or eax, 1
mov dword [esi + 0x2ed4], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x2ad2], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x2ac0], al
add ecx, 1
adc edx, 0
jne 0x10035579
cmp ecx, 0x12
jb 0x10035561
push 0x1006f4b0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x2ac0]
mov ecx, edi
call fcn.10052980
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100355b2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x1003560a
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035600
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100356eb
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x1003565a
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035650
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100356eb
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x100356a9
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003569f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100356eb
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x100356fb
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100356f1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100356f1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10035bb9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x15c0]
mov dword [ebp - 0x18], 0xcf9f2bc9
mov dword [ebp - 0x14], 0xd726ba21
push 0x1008c768
test al, 1
jne 0x100357ac
or eax, 1
mov dword [esi + 0x15c0], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x16ec], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x16e4], al
add ecx, 1
adc edx, 0
jne 0x10035798
cmp ecx, 8
jb 0x10035780
push 0x1006f280
call fcn.1005cb27
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x16e4]
mov ecx, edi
call fcn.100526e0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100357d7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10059ba0
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0x2d10]
mov dword [ebp - 0x1c], 0xbfd63487
test al, 1
jne 0x10035859
or eax, 1
mov dword [esi + 0x2d10], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x1408], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x1404], al
add ecx, 1
adc edx, 0
jne 0x10035848
cmp ecx, 4
jb 0x10035830
push 0x1006f2d0
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0x1404]
mov ecx, edi
call fcn.10052740
mov ecx, edi
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035880
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.10059ba0
mov byte [ebp - 4], 0x61
movaps xmm0, xmmword [0x1007a400]
mov eax, dword [esi + 0x24d8]
mov dword [ebp - 0x28], 0xdad43dd1
mov word [ebp - 0x24], 0x9526
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x10035909
or eax, 1
mov dword [esi + 0x24d8], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x2a76], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x2a60], al
add ecx, 1
adc edx, 0
jne 0x100358f8
cmp ecx, 0x16
jb 0x100358e0
push 0x1006f320
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x2a60]
mov ecx, edi
call fcn.100527a0
mov ecx, edi
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035936
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xc4]
call fcn.10059ba0
push 0x10085510
lea edx, [ebp - 0xc4]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xf4]
call fcn.10059d40
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xdc]
call fcn.1005b170
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0xdc]
push 0x10085570
call fcn.10059d40
add esp, 4
mov byte [ebp - 4], 0x66
movaps xmm0, xmmword [0x10079d40]
mov eax, dword [esi + 0x3574]
mov word [ebp - 0x24], 0x5fdb
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10035a09
or eax, 1
mov dword [esi + 0x3574], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x3d6], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x3c4], al
add ecx, 1
adc edx, 0
jne 0x100359f8
cmp ecx, 0x12
jb 0x100359e0
push 0x1006f370
call fcn.1005cb27
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0x3c4]
mov ecx, esi
call fcn.10052800
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035a31
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.10059ba0
mov ecx, dword [0x100877fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x10035a8f
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035a85
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035b85
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x10035ae8
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035ade
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035b85
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
cmp edx, 0x10
jb 0x10035b3d
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035b33
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035b85
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
cmp edx, 0x10
jb 0x10035b95
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035b8b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10035b8b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005ca70
add esp, 8
mov ecx, dword [0x1008b9e4]
mov edx, 0x10085528
cmp dword [0x1008553c], 0x10
push 0x1008c768
cmovae edx, dword [0x10085528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005c149
mov esp, ebp
pop ebp
ret