Function at 0x10038f20
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006d604
mov eax, dword fs:[0]
push eax
sub esp, 0xe8
mov eax, dword [0x1009400c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10095214]
push 0x100968e8
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x1c], 0x8bda78b7
mov eax, dword [esi + 0x740]
test al, 1
jne 0x10038fcc
or eax, 1
mov dword [esi + 0x740], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xb6c], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0xb68], al
add ecx, 1
adc edx, 0
jne 0x10038fb8
cmp ecx, 4
jb 0x10038fa0
push 0x1007b760
call fcn.100660c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xb68]
mov ecx, edi
call fcn.1005b070
mov ecx, edi
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10038ff0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.10062ef0
mov dword [ebp - 4], 1
movaps xmm0, xmmword [0x100872a0]
mov eax, dword [esi + 0xc28]
mov dword [ebp - 0x28], 0xeed871e1
mov word [ebp - 0x24], 0x6df6
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x10039079
or eax, 1
mov dword [esi + 0xc28], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x10d2], 1
nop
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x10bc], al
add ecx, 1
adc edx, 0
jne 0x10039068
cmp ecx, 0x16
jb 0x10039050
push 0x1007b7b0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x10bc]
mov ecx, edi
call fcn.1005b0d0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100390a0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10062ef0
push 0x10094460
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xac]
call fcn.10063090
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x94]
call fcn.10064710
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x94]
push 0x1009487c
call fcn.10063090
add esp, 4
mov byte [ebp - 4], 6
movaps xmm0, xmmword [0x10087ad0]
mov eax, dword [esi + 0xb88]
mov word [ebp - 0x3c], 0x13eb
movups xmmword [ebp - 0x4c], xmm0
test al, 1
jne 0x10039179
or eax, 1
mov dword [esi + 0xb88], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xfca], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x4c]
mov byte [esi + ecx + 0xfb8], al
add ecx, 1
adc edx, 0
jne 0x10039168
cmp ecx, 0x12
jb 0x10039150
push 0x1007b800
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0xfb8]
mov ecx, edi
call fcn.1005b130
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100391a1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov ecx, dword [0x10097ba4]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x100391fd
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100391f3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100392e1
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x10039253
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039249
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100392e1
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x100392a2
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039298
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100392e1
push edx
push ecx
call fcn.10066010
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x100392f1
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100392e7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100392e7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10066010
add esp, 8
mov ecx, dword [0x1009bdb0]
mov edx, 0x10094834
cmp dword [0x10094848], 0x10
push 0x100968e8
cmovae edx, dword [0x10094834]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003b599
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1878]
mov dword [ebp - 0x1c], 0x5d9e10a1
push 0x100968e8
push 0
push 0
test al, 1
jne 0x1003939c
or eax, 1
mov dword [esi + 0x1878], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x910], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x90c], al
add ecx, 1
adc edx, 0
jne 0x10039388
cmp ecx, 4
jb 0x10039370
push 0x1007b670
call fcn.100660c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x90c]
mov ecx, edi
call fcn.1005af50
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100393c6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10062ef0
mov dword [ebp - 4], 9
movaps xmm0, xmmword [0x10087950]
mov eax, dword [esi + 0x4a8]
mov dword [ebp - 0x28], 0x389c19f7
mov word [ebp - 0x24], 0x2302
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x10039459
or eax, 1
mov dword [esi + 0x4a8], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xa76], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0xa60], al
add ecx, 1
adc edx, 0
jne 0x10039448
cmp ecx, 0x16
jb 0x10039430
push 0x1007b6c0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0xa60]
mov ecx, edi
call fcn.1005afb0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039480
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10062ef0
push 0x10094650
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xac]
call fcn.10063090
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x3e]
lea ecx, [ebp - 0x7c]
call fcn.10064710
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x1009487c
call fcn.10063090
add esp, 4
mov byte [ebp - 4], 0xe
movaps xmm0, xmmword [0x10087430]
mov eax, dword [esi + 0xc14]
mov word [ebp - 0x24], 0x7bfd
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003954a
or eax, 1
mov dword [esi + 0xc14], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2192], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x2180], al
add ecx, 1
adc edx, 0
jne 0x10039539
cmp ecx, 0x12
jb 0x10039521
push 0x1007b710
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x2180]
mov ecx, edi
call fcn.1005b010
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039572
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov ecx, dword [0x10097ba4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x100395cb
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100395c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100396ac
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x1003961b
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039611
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100396ac
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003966a
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039660
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100396ac
push edx
push ecx
call fcn.10066010
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x100396bc
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100396b2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100396b2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10066010
add esp, 8
mov ecx, dword [0x1009bdb0]
mov edx, 0x10094834
cmp dword [0x10094848], 0x10
push 0x100968e8
cmovae edx, dword [0x10094834]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003b599
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1b70]
mov dword [ebp - 0x1c], 0x836a6011
push 0x100968e8
push 0
push 0
test al, 1
jne 0x1003975e
or eax, 1
mov dword [esi + 0x1b70], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x304], 1
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x300], al
add ecx, 1
adc edx, 0
jne 0x1003974a
cmp ecx, 4
jb 0x10039732
push 0x1007b580
call fcn.100660c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x300]
mov ecx, edi
call fcn.1005ae30
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039788
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10062ef0
mov dword [ebp - 4], 0x11
movaps xmm0, xmmword [0x100874b0]
mov eax, dword [esi + 0x1524]
mov dword [ebp - 0x28], 0xe6686947
mov word [ebp - 0x24], 0x9fe
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x10039819
or eax, 1
mov dword [esi + 0x1524], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x5e6], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x5d0], al
add ecx, 1
adc edx, 0
jne 0x10039808
cmp ecx, 0x16
jb 0x100397f0
push 0x1007b5d0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x5d0]
mov ecx, edi
call fcn.1005ae90
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039840
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10062ef0
push 0x1009481c
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xac]
call fcn.10063090
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x3e]
lea ecx, [ebp - 0x7c]
call fcn.10064710
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x1009487c
call fcn.10063090
add esp, 4
mov byte [ebp - 4], 0x16
movaps xmm0, xmmword [0x10087dc0]
mov eax, dword [esi + 0x2f7c]
mov word [ebp - 0x24], 0xb4d
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003990a
or eax, 1
mov dword [esi + 0x2f7c], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3dc2], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x3db0], al
add ecx, 1
adc edx, 0
jne 0x100398f9
cmp ecx, 0x12
jb 0x100398e1
push 0x1007b620
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x3db0]
mov ecx, edi
call fcn.1005aef0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039932
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov ecx, dword [0x10097ba4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x1003998b
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039981
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10039a6c
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x100399db
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100399d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10039a6c
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10039a2a
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039a20
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10039a6c
push edx
push ecx
call fcn.10066010
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x10039a7c
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039a72
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10039a72
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10066010
add esp, 8
mov ecx, dword [0x1009bdb0]
mov edx, 0x10094834
cmp dword [0x10094848], 0x10
push 0x100968e8
cmovae edx, dword [0x10094834]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003b599
mov ecx, 0x100968e8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039ab0
sub ecx, edx
cmp ecx, 0x20
jb 0x1003b599
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1610]
mov dword [ebp - 0x44], 0x77fba325
mov dword [ebp - 0x40], 0xa8a005be
mov byte [ebp - 0x3c], 0x4d
push 0x100968e8
test al, 1
jne 0x10039b4c
or eax, 1
mov dword [esi + 0x1610], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x25cd], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x25c4], al
add ecx, 1
adc edx, 0
jne 0x10039b38
cmp ecx, 9
jb 0x10039b20
push 0x1007b440
call fcn.100660c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x25c4]
mov ecx, edi
call fcn.1005acb0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x40], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039b77
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0x2818]
mov dword [ebp - 0x1c], 0x7b2bc6b
test al, 1
jne 0x10039bf9
or eax, 1
mov dword [esi + 0x2818], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x4118], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x4114], al
add ecx, 1
adc edx, 0
jne 0x10039be8
cmp ecx, 4
jb 0x10039bd0
push 0x1007b490
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x4114]
mov ecx, edi
call fcn.1005ad10
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039c23
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10062ef0
mov byte [ebp - 4], 0x1b
movaps xmm0, xmmword [0x10087570]
mov eax, dword [esi + 0x310c]
mov dword [ebp - 0x28], 0x62b0b53d
mov word [ebp - 0x24], 0x3ff0
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x10039caa
or eax, 1
mov dword [esi + 0x310c], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x23de], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x23c8], al
add ecx, 1
adc edx, 0
jne 0x10039c99
cmp ecx, 0x16
jb 0x10039c81
push 0x1007b4e0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x23c8]
mov ecx, edi
call fcn.1005ad70
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039cd0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10062ef0
push 0x10094460
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xac]
call fcn.10063090
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x3e]
lea ecx, [ebp - 0x7c]
call fcn.10064710
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x7c]
push 0x1009487c
call fcn.10063090
add esp, 4
mov byte [ebp - 4], 0x20
movaps xmm0, xmmword [0x10087e80]
mov eax, dword [esi + 0x1990]
mov word [ebp - 0x24], 0xd737
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10039d9a
or eax, 1
mov dword [esi + 0x1990], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x40ee], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x40dc], al
add ecx, 1
adc edx, 0
jne 0x10039d89
cmp ecx, 0x12
jb 0x10039d71
push 0x1007b530
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x40dc]
mov ecx, edi
call fcn.1005add0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039dc2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov ecx, dword [0x10097ba4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x10039e1a
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039e10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10039efb
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x10039e6a
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039e60
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10039efb
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10039eb9
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039eaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10039efb
push edx
push ecx
call fcn.10066010
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x10039f0b
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10039f01
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10039f01
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10066010
add esp, 8
mov ecx, dword [0x1009bdb0]
mov edx, 0x10094834
cmp dword [0x10094848], 0x10
push 0x100968e8
cmovae edx, dword [0x10094834]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003b599
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2310]
mov dword [ebp - 0x44], 0xf10747d7
mov dword [ebp - 0x40], 0xd4066984
mov byte [ebp - 0x3c], 0xbf
push 0x100968e8
test al, 1
jne 0x10039fbc
or eax, 1
mov dword [esi + 0x2310], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x16d], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x164], al
add ecx, 1
adc edx, 0
jne 0x10039fa8
cmp ecx, 9
jb 0x10039f90
push 0x1007b300
call fcn.100660c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x164]
mov ecx, edi
call fcn.1005ab30
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10039fe7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x3fa4]
mov dword [ebp - 0x1c], 0x814e5899
test al, 1
jne 0x1003a069
or eax, 1
mov dword [esi + 0x3fa4], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x2ec0], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x2ebc], al
add ecx, 1
adc edx, 0
jne 0x1003a058
cmp ecx, 4
jb 0x1003a040
push 0x1007b350
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x2ebc]
mov ecx, edi
call fcn.1005ab90
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a093
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10062ef0
mov byte [ebp - 4], 0x29
movaps xmm0, xmmword [0x10087a70]
mov eax, dword [esi + 0x3b30]
mov dword [ebp - 0x28], 0xe44c51cf
mov word [ebp - 0x24], 0x53ca
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003a11a
or eax, 1
mov dword [esi + 0x3b30], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x6ea], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x6d4], al
add ecx, 1
adc edx, 0
jne 0x1003a109
cmp ecx, 0x16
jb 0x1003a0f1
push 0x1007b3a0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x6d4]
mov ecx, edi
call fcn.1005abf0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a140
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10062ef0
push 0x10094650
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xac]
call fcn.10063090
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.10064710
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x1009487c
call fcn.10063090
add esp, 4
mov byte [ebp - 4], 0x2e
movaps xmm0, xmmword [0x10087150]
mov eax, dword [esi + 0x3cac]
mov word [ebp - 0x24], 0x33c5
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003a20a
or eax, 1
mov dword [esi + 0x3cac], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0xa5e], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0xa4c], al
add ecx, 1
adc edx, 0
jne 0x1003a1f9
cmp ecx, 0x12
jb 0x1003a1e1
push 0x1007b3f0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0xa4c]
mov ecx, edi
call fcn.1005ac50
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a232
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov ecx, dword [0x10097ba4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x1003a28a
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003a280
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003a36b
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x1003a2da
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003a2d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003a36b
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003a329
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003a31f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003a36b
push edx
push ecx
call fcn.10066010
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003a37b
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003a371
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003a371
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10066010
add esp, 8
mov ecx, dword [0x1009bdb0]
mov edx, 0x10094834
cmp dword [0x10094848], 0x10
push 0x100968e8
cmovae edx, dword [0x10094834]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003b599
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3e44]
mov dword [ebp - 0x44], 0x3b7fe589
mov dword [ebp - 0x40], 0xd8e483a2
mov byte [ebp - 0x3c], 0xe1
push 0x100968e8
test al, 1
jne 0x1003a42c
or eax, 1
mov dword [esi + 0x3e44], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x299d], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x2994], al
add ecx, 1
adc edx, 0
jne 0x1003a418
cmp ecx, 9
jb 0x1003a400
push 0x1007b1c0
call fcn.100660c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2994]
mov ecx, edi
call fcn.1005a9b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a457
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0x3040]
mov dword [ebp - 0x1c], 0x4b36fac7
test al, 1
jne 0x1003a4d9
or eax, 1
mov dword [esi + 0x3040], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0xe74], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0xe70], al
add ecx, 1
adc edx, 0
jne 0x1003a4c8
cmp ecx, 4
jb 0x1003a4b0
push 0x1007b210
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0xe70]
mov ecx, edi
call fcn.1005aa10
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a503
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10062ef0
mov byte [ebp - 4], 0x37
movaps xmm0, xmmword [0x10087ac0]
mov eax, dword [esi + 0x3d94]
mov dword [ebp - 0x28], 0x2e34f391
mov word [ebp - 0x24], 0xb9ec
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003a58a
or eax, 1
mov dword [esi + 0x3d94], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x294e], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x2938], al
add ecx, 1
adc edx, 0
jne 0x1003a579
cmp ecx, 0x16
jb 0x1003a561
push 0x1007b260
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0x2938]
mov ecx, edi
call fcn.1005aa70
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a5b0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10062ef0
push 0x1009481c
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xac]
call fcn.10063090
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.10064710
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x1009487c
call fcn.10063090
add esp, 4
mov byte [ebp - 4], 0x3c
movaps xmm0, xmmword [0x10087300]
mov eax, dword [esi + 0x2b8c]
mov word [ebp - 0x24], 0x919b
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003a67a
or eax, 1
mov dword [esi + 0x2b8c], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0xff6], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0xfe4], al
add ecx, 1
adc edx, 0
jne 0x1003a669
cmp ecx, 0x12
jb 0x1003a651
push 0x1007b2b0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0xfe4]
mov ecx, edi
call fcn.1005aad0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a6a2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov ecx, dword [0x10097ba4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x1003a6fa
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003a6f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003a7db
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x1003a74a
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003a740
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003a7db
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003a799
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003a78f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003a7db
push edx
push ecx
call fcn.10066010
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003a7eb
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003a7e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003a7e1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10066010
add esp, 8
mov ecx, dword [0x1009bdb0]
mov edx, 0x10094834
cmp dword [0x10094848], 0x10
push 0x100968e8
cmovae edx, dword [0x10094834]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003b599
mov ecx, 0x100968e8
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a820
sub ecx, edx
cmp ecx, 0x20
jb 0x1003b599
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2cbc]
mov dword [ebp - 0x18], 0x29f7190b
mov dword [ebp - 0x14], 0x77845883
push 0x100968e8
test al, 1
jne 0x1003a8ac
or eax, 1
mov dword [esi + 0x2cbc], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x39cc], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x39c4], al
add ecx, 1
adc edx, 0
jne 0x1003a898
cmp ecx, 8
jb 0x1003a880
push 0x1007b080
call fcn.100660c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x39c4]
mov ecx, edi
call fcn.1005a830
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a8d7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0x3328]
mov dword [ebp - 0x1c], 0x59be0645
test al, 1
jne 0x1003a959
or eax, 1
mov dword [esi + 0x3328], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x3418], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x3414], al
add ecx, 1
adc edx, 0
jne 0x1003a948
cmp ecx, 4
jb 0x1003a930
push 0x1007b0d0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x3414]
mov ecx, edi
call fcn.1005a890
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003a983
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10062ef0
mov byte [ebp - 4], 0x45
movaps xmm0, xmmword [0x10086dd0]
mov eax, dword [esi + 0x30c]
mov dword [ebp - 0x28], 0x3cbc0f13
mov word [ebp - 0x24], 0x7784
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003aa0a
or eax, 1
mov dword [esi + 0x30c], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x31da], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x31c4], al
add ecx, 1
adc edx, 0
jne 0x1003a9f9
cmp ecx, 0x16
jb 0x1003a9e1
push 0x1007b120
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x31c4]
mov ecx, edi
call fcn.1005a8f0
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003aa30
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10062ef0
push 0x10094460
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xac]
call fcn.10063090
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.10064710
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x1009487c
call fcn.10063090
add esp, 4
mov byte [ebp - 4], 0x4a
movaps xmm0, xmmword [0x10086650]
mov eax, dword [esi + 0x570]
mov word [ebp - 0x24], 0x6d19
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003aafa
or eax, 1
mov dword [esi + 0x570], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x2382], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x2370], al
add ecx, 1
adc edx, 0
jne 0x1003aae9
cmp ecx, 0x12
jb 0x1003aad1
push 0x1007b170
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x2370]
mov ecx, edi
call fcn.1005a950
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ab22
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov ecx, dword [0x10097ba4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x1003ab7a
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ab70
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ac5b
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x1003abca
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003abc0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ac5b
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003ac19
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ac0f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ac5b
push edx
push ecx
call fcn.10066010
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003ac6b
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ac61
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003ac61
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10066010
add esp, 8
mov ecx, dword [0x1009bdb0]
mov edx, 0x10094834
cmp dword [0x10094848], 0x10
push 0x100968e8
cmovae edx, dword [0x10094834]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003b599
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x339c]
mov dword [ebp - 0x18], 0xe7837751
mov dword [ebp - 0x14], 0x97e2d6ad
push 0x100968e8
test al, 1
jne 0x1003ad1c
or eax, 1
mov dword [esi + 0x339c], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0xa24], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0xa1c], al
add ecx, 1
adc edx, 0
jne 0x1003ad08
cmp ecx, 8
jb 0x1003acf0
push 0x1007af40
call fcn.100660c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xa1c]
mov ecx, edi
call fcn.1005a6b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ad47
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x13d4]
mov dword [ebp - 0x1c], 0x97ca681f
test al, 1
jne 0x1003adc9
or eax, 1
mov dword [esi + 0x13d4], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x323c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x3238], al
add ecx, 1
adc edx, 0
jne 0x1003adb8
cmp ecx, 4
jb 0x1003ada0
push 0x1007af90
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x3238]
mov ecx, edi
call fcn.1005a710
mov ecx, edi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003adf3
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x94]
call fcn.10062ef0
mov byte [ebp - 4], 0x53
movaps xmm0, xmmword [0x100877b0]
mov eax, dword [esi + 0x2760]
mov dword [ebp - 0x28], 0xf2c86149
mov word [ebp - 0x24], 0xf9aa
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003ae7a
or eax, 1
mov dword [esi + 0x2760], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x359e], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x3588], al
add ecx, 1
adc edx, 0
jne 0x1003ae69
cmp ecx, 0x16
jb 0x1003ae51
push 0x1007afe0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0x3588]
mov ecx, edi
call fcn.1005a770
mov ecx, edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003aea0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.10062ef0
push 0x10094650
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xac]
call fcn.10063090
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c]
call fcn.10064710
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x7c]
push 0x1009487c
call fcn.10063090
add esp, 4
mov byte [ebp - 4], 0x58
movaps xmm0, xmmword [0x10087cd0]
mov eax, dword [esi + 0x297c]
mov word [ebp - 0x24], 0x343
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003af6a
or eax, 1
mov dword [esi + 0x297c], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x122a], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x1218], al
add ecx, 1
adc edx, 0
jne 0x1003af59
cmp ecx, 0x12
jb 0x1003af41
push 0x1007b030
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x1218]
mov ecx, edi
call fcn.1005a7d0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003af92
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov ecx, dword [0x10097ba4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x68]
cmp edx, 0x10
jb 0x1003afea
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003afe0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b0cb
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
cmp edx, 0x10
jb 0x1003b03a
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b030
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b0cb
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003b089
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b07f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b0cb
push edx
push ecx
call fcn.10066010
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003b0db
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b0d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003b0d1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10066010
add esp, 8
mov ecx, dword [0x1009bdb0]
mov edx, 0x10094834
cmp dword [0x10094848], 0x10
push 0x100968e8
cmovae edx, dword [0x10094834]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003b599
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2260]
mov dword [ebp - 0x18], 0x672381f7
mov dword [ebp - 0x14], 0x798e0ab9
push 0x100968e8
test al, 1
jne 0x1003b18c
or eax, 1
mov dword [esi + 0x2260], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x1c38], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x1c30], al
add ecx, 1
adc edx, 0
jne 0x1003b178
cmp ecx, 8
jb 0x1003b160
push 0x1007ae00
call fcn.100660c7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1c30]
mov ecx, edi
call fcn.1005a530
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b1b7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10062ef0
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0xa10]
mov dword [ebp - 0x1c], 0x176a9eb9
test al, 1
jne 0x1003b239
or eax, 1
mov dword [esi + 0xa10], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x2034], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x2030], al
add ecx, 1
adc edx, 0
jne 0x1003b228
cmp ecx, 4
jb 0x1003b210
push 0x1007ae50
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0x2030]
mov ecx, edi
call fcn.1005a590
mov ecx, edi
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b260
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.10062ef0
mov byte [ebp - 4], 0x61
movaps xmm0, xmmword [0x10086da0]
mov eax, dword [esi + 0x2088]
mov dword [ebp - 0x28], 0x726897ef
mov word [ebp - 0x24], 0x25be
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003b2e9
or eax, 1
mov dword [esi + 0x2088], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x12ca], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x12b4], al
add ecx, 1
adc edx, 0
jne 0x1003b2d8
cmp ecx, 0x16
jb 0x1003b2c0
push 0x1007aea0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x12b4]
mov ecx, edi
call fcn.1005a5f0
mov ecx, edi
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b316
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xc4]
call fcn.10062ef0
push 0x1009481c
lea edx, [ebp - 0xc4]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xf4]
call fcn.10063090
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xdc]
call fcn.10064710
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0xdc]
push 0x1009487c
call fcn.10063090
add esp, 4
mov byte [ebp - 4], 0x66
movaps xmm0, xmmword [0x10086500]
mov eax, dword [esi + 0x7a8]
mov word [ebp - 0x24], 0xf5e5
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003b3e9
or eax, 1
mov dword [esi + 0x7a8], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x35ce], 1
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x35bc], al
add ecx, 1
adc edx, 0
jne 0x1003b3d8
cmp ecx, 0x12
jb 0x1003b3c0
push 0x1007aef0
call fcn.100660c7
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0x35bc]
mov ecx, esi
call fcn.1005a650
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003b411
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.10062ef0
mov ecx, dword [0x10097ba4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x1003b46f
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b465
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b565
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x1003b4c8
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b4be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b565
push edx
push ecx
call fcn.10066010
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
cmp edx, 0x10
jb 0x1003b51d
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b513
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b565
push edx
push ecx
call fcn.10066010
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
cmp edx, 0x10
jb 0x1003b575
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003b56b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003b56b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10066010
add esp, 8
mov ecx, dword [0x1009bdb0]
mov edx, 0x10094834
cmp dword [0x10094848], 0x10
push 0x100968e8
cmovae edx, dword [0x10094834]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100656e9
mov esp, ebp
pop ebp
ret