Function at 0x1003b590
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007f454
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x100ab00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100ac85c]
push 0x100af8b0
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x1c], 0xada28205
mov eax, dword [esi + 0x253c]
test al, 1
jne 0x1003b63c
or eax, 1
mov dword [esi + 0x253c], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1f8c], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x1f88], al
add ecx, 1
adc edx, 0
jne 0x1003b628
cmp ecx, 4
jb 0x1003b610
push 0x1008ec70
call fcn.1007845e
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1f88]
mov ecx, edi
call fcn.1006e580
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b660
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x74]
call fcn.10075560
mov dword [ebp - 4], 1
movaps xmm0, xmmword [0x1009cc60]
mov eax, dword [esi + 0xd40]
mov word [ebp - 0x34], 0xd446
mov byte [ebp - 0x32], 0x9f
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003b6e9
or eax, 1
mov dword [esi + 0xd40], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x18cf], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x18bc], al
add ecx, 1
adc edx, 0
jne 0x1003b6d8
cmp ecx, 0x13
jb 0x1003b6c0
push 0x1008ecc0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x18bc]
mov ecx, edi
call fcn.1006e5e0
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b710
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10075560
push 0x100aba88
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa4]
call fcn.100756b0
add esp, 4
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x8c]
call fcn.10076b80
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x8c]
push 0x100abec0
call fcn.100756b0
add esp, 4
mov byte [ebp - 4], 6
mov eax, dword [esi + 0x9a4]
mov dword [ebp - 0x30], 0x80ef8055
mov dword [ebp - 0x2c], 0x4f7f6f4f
mov dword [ebp - 0x28], 0xadf28640
test al, 1
jne 0x1003b7e9
or eax, 1
mov dword [esi + 0x9a4], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x6a8], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x69c], al
add ecx, 1
adc edx, 0
jne 0x1003b7d8
cmp ecx, 0xc
jb 0x1003b7c0
push 0x1008ed10
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x69c]
mov ecx, edi
call fcn.1006e640
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b811
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov ecx, dword [0x100b2d74]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x78]
cmp edx, 0x10
jb 0x1003b86d
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b863
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b94e
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp edx, 0x10
jb 0x1003b8c0
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b8b6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b94e
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003b90f
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b905
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b94e
push edx
push ecx
call fcn.100783a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003b95e
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b954
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003b954
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100783a7
add esp, 8
mov ecx, dword [0x100ae6fc]
mov edx, 0x100abe78
cmp dword [0x100abe8c], 0x10
push 0x100af8b0
cmovae edx, dword [0x100abe78]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003dc79
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3c60]
mov dword [ebp - 0x1c], 0x55363c7d
push 0x100af8b0
push 0
push 0
test al, 1
jne 0x1003ba0c
or eax, 1
mov dword [esi + 0x3c60], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3df4], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x3df0], al
add ecx, 1
adc edx, 0
jne 0x1003b9f8
cmp ecx, 4
jb 0x1003b9e0
push 0x1008eb80
call fcn.1007845e
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3df0]
mov ecx, edi
call fcn.1006e460
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ba33
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10075560
mov dword [ebp - 4], 9
movaps xmm0, xmmword [str.t6_bw]
mov eax, dword [esi + 0x4748]
mov word [ebp - 0x34], 0x6a3e
mov byte [ebp - 0x32], 0xb
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003baba
or eax, 1
mov dword [esi + 0x4748], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3b63], 1
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x3b50], al
add ecx, 1
adc edx, 0
jne 0x1003baa9
cmp ecx, 0x13
jb 0x1003ba91
push 0x1008ebd0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x3b50]
mov ecx, edi
call fcn.1006e4c0
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bae0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10075560
push 0x100abc78
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa4]
call fcn.100756b0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x74]
call fcn.10076b80
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x74]
push 0x100abec0
call fcn.100756b0
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [esi + 0x1a64]
mov dword [ebp - 0x24], 0x787b3e2d
mov dword [ebp - 0x20], 0x9af4935
mov dword [ebp - 0x1c], 0x55663838
test al, 1
jne 0x1003bbb9
or eax, 1
mov dword [esi + 0x1a64], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xf84], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x24]
mov byte [ecx + esi + 0xf78], al
add ecx, 1
adc edx, 0
jne 0x1003bba8
cmp ecx, 0xc
jb 0x1003bb90
push 0x1008ec20
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0xf78]
mov ecx, edi
call fcn.1006e520
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bbe1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov ecx, dword [0x100b2d74]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003bc3a
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bc30
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bd1b
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003bc8a
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bc80
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bd1b
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003bcd9
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bccf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003bd1b
push edx
push ecx
call fcn.100783a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003bd2b
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bd21
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003bd21
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100783a7
add esp, 8
mov ecx, dword [0x100ae6fc]
mov edx, 0x100abe78
cmp dword [0x100abe8c], 0x10
push 0x100af8b0
cmovae edx, dword [0x100abe78]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003dc79
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xbc]
mov dword [ebp - 0x1c], 0xcb7c0a3d
push 0x100af8b0
push 0
push 0
test al, 1
jne 0x1003bdcd
or eax, 1
mov dword [esi + 0xbc], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x4500], 1
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x44fc], al
add ecx, 1
adc edx, 0
jne 0x1003bdb9
cmp ecx, 4
jb 0x1003bda1
push 0x1008ea90
call fcn.1007845e
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x44fc]
mov ecx, edi
call fcn.1006e340
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bdf4
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10075560
mov dword [ebp - 4], 0x11
movaps xmm0, xmmword [0x1009d780]
mov eax, dword [esi + 0x34e4]
mov word [ebp - 0x34], 0x5c7e
mov byte [ebp - 0x32], 0x41
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003be7b
or eax, 1
mov dword [esi + 0x34e4], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x30e7], 1
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x30d4], al
add ecx, 1
adc edx, 0
jne 0x1003be6a
cmp ecx, 0x13
jb 0x1003be52
push 0x1008eae0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x30d4]
mov ecx, edi
call fcn.1006e3a0
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bea0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10075560
push 0x100abe60
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xa4]
call fcn.100756b0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x74]
call fcn.10076b80
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x74]
push 0x100abec0
call fcn.100756b0
add esp, 4
mov byte [ebp - 4], 0x16
mov eax, dword [esi + 0x3884]
mov dword [ebp - 0x24], 0xe631086d
mov dword [ebp - 0x20], 0xd97d7fd3
mov dword [ebp - 0x1c], 0xcb2c0e78
test al, 1
jne 0x1003bf79
or eax, 1
mov dword [esi + 0x3884], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x34f4], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x24]
mov byte [ecx + esi + 0x34e8], al
add ecx, 1
adc edx, 0
jne 0x1003bf68
cmp ecx, 0xc
jb 0x1003bf50
push 0x1008eb30
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x34e8]
mov ecx, edi
call fcn.1006e400
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003bfa1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov ecx, dword [0x100b2d74]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003bffa
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003bff0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c0db
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003c04a
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c040
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c0db
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003c099
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c08f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c0db
push edx
push ecx
call fcn.100783a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003c0eb
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c0e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003c0e1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100783a7
add esp, 8
mov ecx, dword [0x100ae6fc]
mov edx, 0x100abe78
cmp dword [0x100abe8c], 0x10
push 0x100af8b0
cmovae edx, dword [0x100abe78]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003dc79
mov ecx, 0x100af8b0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c120
sub ecx, edx
cmp ecx, 0x20
jae 0x1003c137
cmp ecx, 1
ja 0x1003dc79
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x36a4]
mov dword [ebp - 0x30], 0xf9c353cf
mov dword [ebp - 0x2c], 0xa06c13a4
mov byte [ebp - 0x28], 0xa7
push 0x100af8b0
test al, 1
jne 0x1003c1bc
or eax, 1
mov dword [esi + 0x36a4], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x215d], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [ecx + esi + 0x2154], al
add ecx, 1
adc edx, 0
jne 0x1003c1a8
cmp ecx, 9
jb 0x1003c190
push 0x1008e950
call fcn.1007845e
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2154]
mov ecx, edi
call fcn.1006e1c0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x28], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c1e7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0x4a54]
mov dword [ebp - 0x1c], 0x898a4c81
test al, 1
jne 0x1003c269
or eax, 1
mov dword [esi + 0x4a54], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xea0], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0xe9c], al
add ecx, 1
adc edx, 0
jne 0x1003c258
cmp ecx, 4
jb 0x1003c240
push 0x1008e9a0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0xe9c]
mov ecx, edi
call fcn.1006e220
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c290
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10075560
mov byte [ebp - 4], 0x1b
movaps xmm0, xmmword [0x1009d520]
mov eax, dword [esi + 0x31a8]
mov word [ebp - 0x34], 0x1ac2
mov byte [ebp - 0x32], 0xb7
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003c319
or eax, 1
mov dword [esi + 0x31a8], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x312b], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x3118], al
add ecx, 1
adc edx, 0
jne 0x1003c308
cmp ecx, 0x13
jb 0x1003c2f0
push 0x1008e9f0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x3118]
mov ecx, edi
call fcn.1006e280
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c340
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10075560
push 0x100aba88
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xa4]
call fcn.100756b0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x74]
call fcn.10076b80
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x74]
push 0x100abec0
call fcn.100756b0
add esp, 4
mov byte [ebp - 4], 0x20
mov eax, dword [esi + 0x2d60]
mov dword [ebp - 0x40], 0xa4c74ed1
mov dword [ebp - 0x3c], 0xa12d47af
mov dword [ebp - 0x38], 0x89da48c4
test al, 1
jne 0x1003c419
or eax, 1
mov dword [esi + 0x2d60], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3e40], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [ecx + esi + 0x3e34], al
add ecx, 1
adc edx, 0
jne 0x1003c408
cmp ecx, 0xc
jb 0x1003c3f0
push 0x1008ea40
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x3e34]
mov ecx, edi
call fcn.1006e2e0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c441
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov ecx, dword [0x100b2d74]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003c499
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c48f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c57a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003c4e9
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c4df
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c57a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003c538
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c52e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c57a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003c58a
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c580
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003c580
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100783a7
add esp, 8
mov ecx, dword [0x100ae6fc]
mov edx, 0x100abe78
cmp dword [0x100abe8c], 0x10
push 0x100af8b0
cmovae edx, dword [0x100abe78]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003dc79
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3c94]
mov dword [ebp - 0x30], 0xa7d5cf29
mov dword [ebp - 0x2c], 0x3c4295ce
mov byte [ebp - 0x28], 0x41
push 0x100af8b0
test al, 1
jne 0x1003c63c
or eax, 1
mov dword [esi + 0x3c94], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x362d], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x3624], al
add ecx, 1
adc edx, 0
jne 0x1003c628
cmp ecx, 9
jb 0x1003c610
push 0x1008e810
call fcn.1007845e
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3624]
mov ecx, edi
call fcn.1006e040
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c667
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x2dc4]
mov dword [ebp - 0x1c], 0xd79cd067
test al, 1
jne 0x1003c6e9
or eax, 1
mov dword [esi + 0x2dc4], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x9c0], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x9bc], al
add ecx, 1
adc edx, 0
jne 0x1003c6d8
cmp ecx, 4
jb 0x1003c6c0
push 0x1008e860
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x9bc]
mov ecx, edi
call fcn.1006e0a0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c710
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10075560
mov byte [ebp - 4], 0x29
movaps xmm0, xmmword [0x1009c6b0]
mov eax, dword [esi + 0x496c]
mov word [ebp - 0x34], 0x8624
mov byte [ebp - 0x32], 0xa1
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003c799
or eax, 1
mov dword [esi + 0x496c], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0xbcf], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0xbbc], al
add ecx, 1
adc edx, 0
jne 0x1003c788
cmp ecx, 0x13
jb 0x1003c770
push 0x1008e8b0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0xbbc]
mov ecx, edi
call fcn.1006e100
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c7c0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10075560
push 0x100abc78
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xa4]
call fcn.100756b0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.10076b80
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x74]
push 0x100abec0
call fcn.100756b0
add esp, 4
mov byte [ebp - 4], 0x2e
mov eax, dword [esi + 0x3610]
mov dword [ebp - 0x40], 0xfad1d237
mov dword [ebp - 0x3c], 0x3d03c1c5
mov dword [ebp - 0x38], 0xd7ccd422
test al, 1
jne 0x1003c899
or eax, 1
mov dword [esi + 0x3610], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x698], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [esi + ecx + 0x68c], al
add ecx, 1
adc edx, 0
jne 0x1003c888
cmp ecx, 0xc
jb 0x1003c870
push 0x1008e900
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0x68c]
mov ecx, edi
call fcn.1006e160
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003c8c1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov ecx, dword [0x100b2d74]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003c919
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c90f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c9fa
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003c969
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c95f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c9fa
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003c9b8
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003c9ae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003c9fa
push edx
push ecx
call fcn.100783a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003ca0a
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ca00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003ca00
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100783a7
add esp, 8
mov ecx, dword [0x100ae6fc]
mov edx, 0x100abe78
cmp dword [0x100abe8c], 0x10
push 0x100af8b0
cmovae edx, dword [0x100abe78]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003dc79
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x4354]
mov dword [ebp - 0x30], 0x63975389
mov dword [ebp - 0x2c], 0x7c3a097e
mov byte [ebp - 0x28], 0xe1
push 0x100af8b0
test al, 1
jne 0x1003cabc
or eax, 1
mov dword [esi + 0x4354], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3c91], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x3c88], al
add ecx, 1
adc edx, 0
jne 0x1003caa8
cmp ecx, 9
jb 0x1003ca90
push 0x1008e6d0
call fcn.1007845e
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3c88]
mov ecx, edi
call fcn.1006dec0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cae7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0x27f8]
mov dword [ebp - 0x1c], 0x13de4cc7
test al, 1
jne 0x1003cb69
or eax, 1
mov dword [esi + 0x27f8], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x3510], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x350c], al
add ecx, 1
adc edx, 0
jne 0x1003cb58
cmp ecx, 4
jb 0x1003cb40
push 0x1008e720
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x350c]
mov ecx, edi
call fcn.1006df20
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cb90
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10075560
mov byte [ebp - 4], 0x37
movaps xmm0, xmmword [0x1009cde0]
mov eax, dword [esi + 0x3284]
mov word [ebp - 0x34], 0x1a84
mov byte [ebp - 0x32], 0xe3
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003cc19
or eax, 1
mov dword [esi + 0x3284], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x3eb], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x3d8], al
add ecx, 1
adc edx, 0
jne 0x1003cc08
cmp ecx, 0x13
jb 0x1003cbf0
push 0x1008e770
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0x3d8]
mov ecx, edi
call fcn.1006df80
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cc40
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10075560
push 0x100abe60
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa4]
call fcn.100756b0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.10076b80
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x74]
push 0x100abec0
call fcn.100756b0
add esp, 4
mov byte [ebp - 4], 0x3c
mov eax, dword [esi + 0x39c8]
mov dword [ebp - 0x40], 0x3e934e97
mov dword [ebp - 0x3c], 0x7d7b5d75
mov dword [ebp - 0x38], 0x138e4882
test al, 1
jne 0x1003cd19
or eax, 1
mov dword [esi + 0x39c8], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x2174], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [esi + ecx + 0x2168], al
add ecx, 1
adc edx, 0
jne 0x1003cd08
cmp ecx, 0xc
jb 0x1003ccf0
push 0x1008e7c0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0x2168]
mov ecx, edi
call fcn.1006dfe0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cd41
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov ecx, dword [0x100b2d74]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003cd99
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cd8f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ce7a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003cde9
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003cddf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ce7a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003ce38
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ce2e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ce7a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003ce8a
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ce80
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003ce80
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100783a7
add esp, 8
mov ecx, dword [0x100ae6fc]
mov edx, 0x100abe78
cmp dword [0x100abe8c], 0x10
push 0x100af8b0
cmovae edx, dword [0x100abe78]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003dc79
mov ecx, 0x100af8b0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cec0
sub ecx, edx
cmp ecx, 0x20
jae 0x1003ced7
cmp ecx, 1
ja 0x1003dc79
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x47c4]
mov dword [ebp - 0x18], 0xb919395b
mov dword [ebp - 0x14], 0x772a7c65
push 0x100af8b0
test al, 1
jne 0x1003cf5c
or eax, 1
mov dword [esi + 0x47c4], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1ed4], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x1ecc], al
add ecx, 1
adc edx, 0
jne 0x1003cf48
cmp ecx, 8
jb 0x1003cf30
push 0x1008e590
call fcn.1007845e
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1ecc]
mov ecx, edi
call fcn.1006dd40
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003cf87
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0x4034]
mov dword [ebp - 0x1c], 0xc9502615
test al, 1
jne 0x1003d009
or eax, 1
mov dword [esi + 0x4034], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x178], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x174], al
add ecx, 1
adc edx, 0
jne 0x1003cff8
cmp ecx, 4
jb 0x1003cfe0
push 0x1008e5e0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x174]
mov ecx, edi
call fcn.1006dda0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d030
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10075560
mov byte [ebp - 4], 0x45
movaps xmm0, xmmword [0x1009c9f0]
mov eax, dword [esi + 0x25cc]
mov word [ebp - 0x34], 0x7056
mov byte [ebp - 0x32], 0x6d
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003d0b9
or eax, 1
mov dword [esi + 0x25cc], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x3cc3], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x3cb0], al
add ecx, 1
adc edx, 0
jne 0x1003d0a8
cmp ecx, 0x13
jb 0x1003d090
push 0x1008e630
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x3cb0]
mov ecx, edi
call fcn.1006de00
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d0e0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10075560
push 0x100aba88
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xa4]
call fcn.100756b0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.10076b80
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x74]
push 0x100abec0
call fcn.100756b0
add esp, 4
mov byte [ebp - 4], 0x4a
mov eax, dword [esi + 0x3110]
mov dword [ebp - 0x40], 0xe41d2445
mov dword [ebp - 0x3c], 0x596b3d27
mov dword [ebp - 0x38], 0xc9002250
test al, 1
jne 0x1003d1b9
or eax, 1
mov dword [esi + 0x3110], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0xba8], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [ecx + esi + 0xb9c], al
add ecx, 1
adc edx, 0
jne 0x1003d1a8
cmp ecx, 0xc
jb 0x1003d190
push 0x1008e680
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0xb9c]
mov ecx, edi
call fcn.1006de60
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d1e1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov ecx, dword [0x100b2d74]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003d239
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d22f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d31a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003d289
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d27f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d31a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003d2d8
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d2ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d31a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003d32a
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d320
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003d320
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100783a7
add esp, 8
mov ecx, dword [0x100ae6fc]
mov edx, 0x100abe78
cmp dword [0x100abe8c], 0x10
push 0x100af8b0
cmovae edx, dword [0x100abe78]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003dc79
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2ff4]
mov dword [ebp - 0x18], 0xa74377cf
mov dword [ebp - 0x14], 0xaddcb45b
push 0x100af8b0
test al, 1
jne 0x1003d3dc
or eax, 1
mov dword [esi + 0x2ff4], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1e54], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x1e4c], al
add ecx, 1
adc edx, 0
jne 0x1003d3c8
cmp ecx, 8
jb 0x1003d3b0
push 0x1008e450
call fcn.1007845e
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1e4c]
mov ecx, edi
call fcn.1006dbc0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d407
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x2dc0]
mov dword [ebp - 0x1c], 0xd70a6881
test al, 1
jne 0x1003d489
or eax, 1
mov dword [esi + 0x2dc0], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x2d8], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x2d4], al
add ecx, 1
adc edx, 0
jne 0x1003d478
cmp ecx, 4
jb 0x1003d460
push 0x1008e4a0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x2d4]
mov ecx, edi
call fcn.1006dc20
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d4b0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10075560
mov byte [ebp - 4], 0x53
movaps xmm0, xmmword [0x1009d280]
mov eax, dword [esi + 0x2d64]
mov word [ebp - 0x34], 0x3ec2
mov byte [ebp - 0x32], 0x37
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003d539
or eax, 1
mov dword [esi + 0x2d64], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x25b3], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x25a0], al
add ecx, 1
adc edx, 0
jne 0x1003d528
cmp ecx, 0x13
jb 0x1003d510
push 0x1008e4f0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0x25a0]
mov ecx, edi
call fcn.1006dc80
mov ecx, edi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d560
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x5c]
call fcn.10075560
push 0x100abc78
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xa4]
call fcn.100756b0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x74]
call fcn.10076b80
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x74]
push 0x100abec0
call fcn.100756b0
add esp, 4
mov byte [ebp - 4], 0x58
mov eax, dword [esi + 0x1a6c]
mov dword [ebp - 0x40], 0xfa476ad1
mov dword [ebp - 0x3c], 0x839df519
mov dword [ebp - 0x38], 0xd75a6cc4
test al, 1
jne 0x1003d639
or eax, 1
mov dword [esi + 0x1a6c], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x46b0], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [ecx + esi + 0x46a4], al
add ecx, 1
adc edx, 0
jne 0x1003d628
cmp ecx, 0xc
jb 0x1003d610
push 0x1008e540
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x46a4]
mov ecx, edi
call fcn.1006dce0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d661
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov ecx, dword [0x100b2d74]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x1003d6b9
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d6af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d79a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x1003d709
mov ecx, dword [ebp - 0xa4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d6ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d79a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp edx, 0x10
jb 0x1003d758
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d74e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003d79a
push edx
push ecx
call fcn.100783a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp edx, 0x10
jb 0x1003d7aa
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003d7a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003d7a0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100783a7
add esp, 8
mov ecx, dword [0x100ae6fc]
mov edx, 0x100abe78
cmp dword [0x100abe8c], 0x10
push 0x100af8b0
cmovae edx, dword [0x100abe78]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003dc79
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x39e4]
mov dword [ebp - 0x18], 0x71dbd5bb
mov dword [ebp - 0x14], 0xad66226d
push 0x100af8b0
test al, 1
jne 0x1003d85c
or eax, 1
mov dword [esi + 0x39e4], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x275c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x2754], al
add ecx, 1
adc edx, 0
jne 0x1003d848
cmp ecx, 8
jb 0x1003d830
push 0x1008e310
call fcn.1007845e
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2754]
mov ecx, edi
call fcn.1006da40
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d887
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10075560
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0x3b48]
mov dword [ebp - 0x1c], 0x192caf5
test al, 1
jne 0x1003d909
or eax, 1
mov dword [esi + 0x3b48], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x56c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x568], al
add ecx, 1
adc edx, 0
jne 0x1003d8f8
cmp ecx, 4
jb 0x1003d8e0
push 0x1008e360
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0x568]
mov ecx, edi
call fcn.1006daa0
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d930
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x74]
call fcn.10075560
mov byte [ebp - 4], 0x61
movaps xmm0, xmmword [0x1009d250]
mov eax, dword [esi + 0x386c]
mov word [ebp - 0x34], 0x9cb6
mov byte [ebp - 0x32], 0xaf
movups xmmword [ebp - 0x44], xmm0
test al, 1
jne 0x1003d9b9
or eax, 1
mov dword [esi + 0x386c], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x3883], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x3870], al
add ecx, 1
adc edx, 0
jne 0x1003d9a8
cmp ecx, 0x13
jb 0x1003d990
push 0x1008e3b0
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x3870]
mov ecx, edi
call fcn.1006db00
mov ecx, edi
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d9e6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xbc]
call fcn.10075560
push 0x100abe60
lea edx, [ebp - 0xbc]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xec]
call fcn.100756b0
add esp, 4
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd4]
call fcn.10076b80
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0xd4]
push 0x100abec0
call fcn.100756b0
add esp, 4
mov byte [ebp - 4], 0x66
mov eax, dword [esi + 0x29c8]
mov dword [ebp - 0x40], 0x2cdfc8a5
mov dword [ebp - 0x3c], 0x8327632f
mov dword [ebp - 0x38], 0x1c2ceb0
test al, 1
jne 0x1003dac9
or eax, 1
mov dword [esi + 0x29c8], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x14bc], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [esi + ecx + 0x14b0], al
add ecx, 1
adc edx, 0
jne 0x1003dab8
cmp ecx, 0xc
jb 0x1003daa0
push 0x1008e400
call fcn.1007845e
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0x14b0]
mov ecx, esi
call fcn.1006db60
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003daf1
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.10075560
mov ecx, dword [0x100b2d74]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xc0]
cmp edx, 0x10
jb 0x1003db4f
mov ecx, dword [ebp - 0xd4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003db45
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003dc45
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
cmp edx, 0x10
jb 0x1003dba8
mov ecx, dword [ebp - 0xec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003db9e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003dc45
push edx
push ecx
call fcn.100783a7
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
cmp edx, 0x10
jb 0x1003dbfd
mov ecx, dword [ebp - 0xbc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003dbf3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003dc45
push edx
push ecx
call fcn.100783a7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
cmp edx, 0x10
jb 0x1003dc55
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003dc4b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003dc4b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100783a7
add esp, 8
mov ecx, dword [0x100ae6fc]
mov edx, 0x100abe78
cmp dword [0x100abe8c], 0x10
push 0x100af8b0
cmovae edx, dword [0x100abe78]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10077b59
mov esp, ebp
pop ebp
ret