Function at 0x1002c8c0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100684c4
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [0x1008f00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1008ff0c]
push 0x10096770
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x30], 0xbb227875
mov eax, dword [esi + 0x34a8]
test al, 1
jne 0x1002c96c
or eax, 1
mov dword [esi + 0x34a8], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x58c], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x588], al
add ecx, 1
adc edx, 0
jne 0x1002c958
cmp ecx, 4
jb 0x1002c940
push 0x10075660
call fcn.100636a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x588]
mov ecx, edi
call fcn.1005c570
mov ecx, edi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002c990
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x78]
call fcn.10060610
mov dword [ebp - 4], 1
mov eax, dword [esi + 0x3188]
mov dword [ebp - 0x20], 0xd26f727c
mov dword [ebp - 0x1c], 0x4060435a
mov dword [ebp - 0x18], 0xde207123
mov word [ebp - 0x14], 0x3548
test al, 1
jne 0x1002ca1a
or eax, 1
mov dword [esi + 0x3188], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x113a], 1
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x112c], al
add ecx, 1
adc edx, 0
jne 0x1002ca09
cmp ecx, 0xe
jb 0x1002c9f1
push 0x100756b0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x112c]
mov ecx, edi
call fcn.1005c5d0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ca40
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.10060610
push 0x1008f154
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa8]
call fcn.100607b0
add esp, 4
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x2f]
lea ecx, [ebp - 0x90]
call fcn.10061cf0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x90]
push 0x1008f574
call fcn.100607b0
add esp, 4
mov byte [ebp - 4], 6
mov eax, dword [esi + 0x3f64]
mov dword [ebp - 0x48], 0xcb766525
mov dword [ebp - 0x44], 0x1c375a18
mov dword [ebp - 0x40], 0xd670707d
mov byte [ebp - 0x3c], 0x75
test al, 1
jne 0x1002cb19
or eax, 1
mov dword [esi + 0x3f64], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x7c9], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x7bc], al
add ecx, 1
adc edx, 0
jne 0x1002cb08
cmp ecx, 0xd
jb 0x1002caf0
push 0x10075700
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x7bc]
mov ecx, edi
call fcn.1005c630
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002cb41
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov ecx, dword [0x100917fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x7c]
cmp edx, 0x10
jb 0x1002cb9d
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002cb93
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002cc7e
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
cmp edx, 0x10
jb 0x1002cbf0
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002cbe6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002cc7e
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002cc3f
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002cc35
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002cc7e
push edx
push ecx
call fcn.100635f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002cc8e
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002cc84
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002cc84
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100635f0
add esp, 8
mov ecx, dword [0x100959ec]
mov edx, 0x1008f52c
cmp dword [0x1008f540], 0x10
push 0x10096770
cmovae edx, dword [0x1008f52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002efc9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3abc]
mov dword [ebp - 0x30], 0xd3f45441
push 0x10096770
push 0
push 0
test al, 1
jne 0x1002cd3c
or eax, 1
mov dword [esi + 0x3abc], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3c5c], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x3c58], al
add ecx, 1
adc edx, 0
jne 0x1002cd28
cmp ecx, 4
jb 0x1002cd10
push 0x10075570
call fcn.100636a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3c58]
mov ecx, edi
call fcn.1005c450
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002cd63
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.10060610
mov dword [ebp - 4], 9
mov eax, dword [esi + 0x15d4]
mov dword [ebp - 0x20], 0xbab95e48
mov dword [ebp - 0x1c], 0x56f4719e
mov dword [ebp - 0x18], 0xb6f65d17
mov word [ebp - 0x14], 0x78c
test al, 1
jne 0x1002cdf9
or eax, 1
mov dword [esi + 0x15d4], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1022], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x1014], al
add ecx, 1
adc edx, 0
jne 0x1002cde8
cmp ecx, 0xe
jb 0x1002cdd0
push 0x100755c0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x1014]
mov ecx, edi
call fcn.1005c4b0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ce20
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.10060610
push 0x1008f344
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa8]
call fcn.100607b0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x3f]
lea ecx, [ebp - 0x78]
call fcn.10061cf0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x78]
push 0x1008f574
call fcn.100607b0
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [esi + 0x38e4]
mov dword [ebp - 0x38], 0xa3a04911
mov dword [ebp - 0x34], 0xaa368dc
mov dword [ebp - 0x30], 0xbea65c49
mov byte [ebp - 0x2c], 0xb1
test al, 1
jne 0x1002cef9
or eax, 1
mov dword [esi + 0x38e4], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3b99], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x3b8c], al
add ecx, 1
adc edx, 0
jne 0x1002cee8
cmp ecx, 0xd
jb 0x1002ced0
push 0x10075610
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x3b8c]
mov ecx, edi
call fcn.1005c510
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002cf21
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov ecx, dword [0x100917fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002cf7a
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002cf70
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d05b
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002cfca
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002cfc0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d05b
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002d019
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002d00f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d05b
push edx
push ecx
call fcn.100635f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002d06b
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002d061
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002d061
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100635f0
add esp, 8
mov ecx, dword [0x100959ec]
mov edx, 0x1008f52c
cmp dword [0x1008f540], 0x10
push 0x10096770
cmovae edx, dword [0x1008f52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002efc9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3294]
mov dword [ebp - 0x30], 0x55843aa1
push 0x10096770
push 0
push 0
test al, 1
jne 0x1002d10d
or eax, 1
mov dword [esi + 0x3294], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1e44], 1
mov al, byte [ebp + ecx - 0x30]
mov byte [ecx + esi + 0x1e40], al
add ecx, 1
adc edx, 0
jne 0x1002d0f9
cmp ecx, 4
jb 0x1002d0e1
push 0x10075480
call fcn.100636a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1e40]
mov ecx, edi
call fcn.1005c330
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d134
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.10060610
mov dword [ebp - 4], 0x11
mov eax, dword [esi + 0x29d8]
mov dword [ebp - 0x20], 0x3cc930a8
mov dword [ebp - 0x1c], 0x66b6532a
mov dword [ebp - 0x18], 0x308633f7
mov word [ebp - 0x14], 0x2538
test al, 1
jne 0x1002d1c9
or eax, 1
mov dword [esi + 0x29d8], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3066], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x3058], al
add ecx, 1
adc edx, 0
jne 0x1002d1b8
cmp ecx, 0xe
jb 0x1002d1a0
push 0x100754d0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x3058]
mov ecx, edi
call fcn.1005c390
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d1f0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.10060610
push 0x1008f514
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xa8]
call fcn.100607b0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x3f]
lea ecx, [ebp - 0x78]
call fcn.10061cf0
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x78]
push 0x1008f574
call fcn.100607b0
add esp, 4
mov byte [ebp - 4], 0x16
mov eax, dword [esi + 0x315c]
mov dword [ebp - 0x38], 0x25d027f1
mov dword [ebp - 0x34], 0x3ae14a68
mov dword [ebp - 0x30], 0x38d632a9
mov byte [ebp - 0x2c], 5
test al, 1
jne 0x1002d2c9
or eax, 1
mov dword [esi + 0x315c], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2e79], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x2e6c], al
add ecx, 1
adc edx, 0
jne 0x1002d2b8
cmp ecx, 0xd
jb 0x1002d2a0
push 0x10075520
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x2e6c]
mov ecx, edi
call fcn.1005c3f0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d2f1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov ecx, dword [0x100917fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002d34a
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002d340
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d42b
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002d39a
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002d390
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d42b
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002d3e9
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002d3df
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d42b
push edx
push ecx
call fcn.100635f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002d43b
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002d431
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002d431
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100635f0
add esp, 8
mov ecx, dword [0x100959ec]
mov edx, 0x1008f52c
cmp dword [0x1008f540], 0x10
push 0x10096770
cmovae edx, dword [0x1008f52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002efc9
mov ecx, 0x10096770
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d470
sub ecx, edx
cmp ecx, 0x20
jae 0x1002d487
cmp ecx, 1
ja 0x1002efc9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1350]
mov dword [ebp - 0x44], 0xad6d85d3
mov dword [ebp - 0x40], 0x182cf7c0
mov byte [ebp - 0x3c], 0xbb
push 0x10096770
test al, 1
jne 0x1002d50c
or eax, 1
mov dword [esi + 0x1350], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2c51], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x2c48], al
add ecx, 1
adc edx, 0
jne 0x1002d4f8
cmp ecx, 9
jb 0x1002d4e0
push 0x10075340
call fcn.100636a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2c48]
mov ecx, edi
call fcn.1005c1b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x40], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d537
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0x1be8]
mov dword [ebp - 0x30], 0xdd249a9d
test al, 1
jne 0x1002d5b9
or eax, 1
mov dword [esi + 0x1be8], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x23e0], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [ecx + esi + 0x23dc], al
add ecx, 1
adc edx, 0
jne 0x1002d5a8
cmp ecx, 4
jb 0x1002d590
push 0x10075390
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x23dc]
mov ecx, edi
call fcn.1005c210
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d5e0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.10060610
mov byte [ebp - 4], 0x1b
mov eax, dword [esi + 0x18dc]
mov dword [ebp - 0x20], 0xb4699094
mov dword [ebp - 0x1c], 0x1830bb9c
mov dword [ebp - 0x18], 0xb82693cb
mov word [ebp - 0x14], 0xcd8e
test al, 1
jne 0x1002d66a
or eax, 1
mov dword [esi + 0x18dc], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x250e], 1
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x2500], al
add ecx, 1
adc edx, 0
jne 0x1002d659
cmp ecx, 0xe
jb 0x1002d641
push 0x100753e0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x2500]
mov ecx, edi
call fcn.1005c270
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d690
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.10060610
push 0x1008f154
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xa8]
call fcn.100607b0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x3f]
lea ecx, [ebp - 0x78]
call fcn.10061cf0
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x78]
push 0x1008f574
call fcn.100607b0
add esp, 4
mov byte [ebp - 4], 0x20
mov eax, dword [esi + 0x7a4]
mov dword [ebp - 0x20], 0xad7087cd
mov dword [ebp - 0x1c], 0x4467a2de
mov dword [ebp - 0x18], 0xb0769295
mov byte [ebp - 0x14], 0xb3
test al, 1
jne 0x1002d769
or eax, 1
mov dword [esi + 0x7a4], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1561], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x1554], al
add ecx, 1
adc edx, 0
jne 0x1002d758
cmp ecx, 0xd
jb 0x1002d740
push 0x10075430
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x1554]
mov ecx, edi
call fcn.1005c2d0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d791
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov ecx, dword [0x100917fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002d7e9
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002d7df
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d8ca
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002d839
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002d82f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d8ca
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002d888
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002d87e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d8ca
push edx
push ecx
call fcn.100635f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002d8da
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002d8d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002d8d0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100635f0
add esp, 8
mov ecx, dword [0x100959ec]
mov edx, 0x1008f52c
cmp dword [0x1008f540], 0x10
push 0x10096770
cmovae edx, dword [0x1008f52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002efc9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x35b8]
mov dword [ebp - 0x44], 0xe35725f9
mov dword [ebp - 0x40], 0x20d4970e
mov byte [ebp - 0x3c], 0x91
push 0x10096770
test al, 1
jne 0x1002d98c
or eax, 1
mov dword [esi + 0x35b8], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2ec1], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x2eb8], al
add ecx, 1
adc edx, 0
jne 0x1002d978
cmp ecx, 9
jb 0x1002d960
push 0x10075200
call fcn.100636a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2eb8]
mov ecx, edi
call fcn.1005c030
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002d9b7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x35d4]
mov dword [ebp - 0x30], 0x931e3ab7
test al, 1
jne 0x1002da39
or eax, 1
mov dword [esi + 0x35d4], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x3108], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x3104], al
add ecx, 1
adc edx, 0
jne 0x1002da28
cmp ecx, 4
jb 0x1002da10
push 0x10075250
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x3104]
mov ecx, edi
call fcn.1005c090
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002da60
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.10060610
mov byte [ebp - 4], 0x29
mov eax, dword [esi + 0x3d38]
mov dword [ebp - 0x20], 0xfa5330be
mov dword [ebp - 0x1c], 0x20c8db52
mov dword [ebp - 0x18], 0xf61c33e1
mov word [ebp - 0x14], 0xad40
test al, 1
jne 0x1002daea
or eax, 1
mov dword [esi + 0x3d38], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x12ca], 1
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x12bc], al
add ecx, 1
adc edx, 0
jne 0x1002dad9
cmp ecx, 0xe
jb 0x1002dac1
push 0x100752a0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x12bc]
mov ecx, edi
call fcn.1005c0f0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002db10
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.10060610
push 0x1008f344
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xa8]
call fcn.100607b0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x78]
call fcn.10061cf0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x78]
push 0x1008f574
call fcn.100607b0
add esp, 4
mov byte [ebp - 4], 0x2e
mov eax, dword [esi + 0x1a94]
mov dword [ebp - 0x20], 0xe34a27e7
mov dword [ebp - 0x1c], 0x7c9fc210
mov dword [ebp - 0x18], 0xfe4c32bf
mov byte [ebp - 0x14], 0x7d
test al, 1
jne 0x1002dbe9
or eax, 1
mov dword [esi + 0x1a94], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x21ad], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x21a0], al
add ecx, 1
adc edx, 0
jne 0x1002dbd8
cmp ecx, 0xd
jb 0x1002dbc0
push 0x100752f0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0x21a0]
mov ecx, edi
call fcn.1005c150
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002dc11
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov ecx, dword [0x100917fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002dc69
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002dc5f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002dd4a
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002dcb9
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002dcaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002dd4a
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002dd08
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002dcfe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002dd4a
push edx
push ecx
call fcn.100635f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002dd5a
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002dd50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002dd50
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100635f0
add esp, 8
mov ecx, dword [0x100959ec]
mov edx, 0x1008f52c
cmp dword [0x1008f540], 0x10
push 0x10096770
cmovae edx, dword [0x1008f52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002efc9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3914]
mov dword [ebp - 0x44], 0xe39f531f
mov dword [ebp - 0x40], 0xa046750e
mov byte [ebp - 0x3c], 0x77
push 0x10096770
test al, 1
jne 0x1002de0c
or eax, 1
mov dword [esi + 0x3914], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x785], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x77c], al
add ecx, 1
adc edx, 0
jne 0x1002ddf8
cmp ecx, 9
jb 0x1002dde0
push 0x100750c0
call fcn.100636a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x77c]
mov ecx, edi
call fcn.1005beb0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002de37
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0x26c0]
mov dword [ebp - 0x30], 0x93d64c51
test al, 1
jne 0x1002deb9
or eax, 1
mov dword [esi + 0x26c0], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x378c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x3788], al
add ecx, 1
adc edx, 0
jne 0x1002dea8
cmp ecx, 4
jb 0x1002de90
push 0x10075110
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x3788]
mov ecx, edi
call fcn.1005bf10
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002dee0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.10060610
mov byte [ebp - 4], 0x37
mov eax, dword [esi + 0x23e4]
mov dword [ebp - 0x20], 0xfa9b4658
mov dword [ebp - 0x1c], 0xa05a3952
mov dword [ebp - 0x18], 0xf6d44507
mov word [ebp - 0x14], 0x4f40
test al, 1
jne 0x1002df6a
or eax, 1
mov dword [esi + 0x23e4], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x512], 1
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x504], al
add ecx, 1
adc edx, 0
jne 0x1002df59
cmp ecx, 0xe
jb 0x1002df41
push 0x10075160
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0x504]
mov ecx, edi
call fcn.1005bf70
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002df90
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.10060610
push 0x1008f514
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa8]
call fcn.100607b0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x78]
call fcn.10061cf0
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x78]
push 0x1008f574
call fcn.100607b0
add esp, 4
mov byte [ebp - 4], 0x3c
mov eax, dword [esi + 0x2554]
mov dword [ebp - 0x20], 0xe3825101
mov dword [ebp - 0x1c], 0xfc0d2010
mov dword [ebp - 0x18], 0xfe844459
mov byte [ebp - 0x14], 0x7d
test al, 1
jne 0x1002e069
or eax, 1
mov dword [esi + 0x2554], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x294d], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x2940], al
add ecx, 1
adc edx, 0
jne 0x1002e058
cmp ecx, 0xd
jb 0x1002e040
push 0x100751b0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0x2940]
mov ecx, edi
call fcn.1005bfd0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e091
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov ecx, dword [0x100917fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002e0e9
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e0df
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002e1ca
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002e139
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e12f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002e1ca
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002e188
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e17e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002e1ca
push edx
push ecx
call fcn.100635f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002e1da
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e1d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002e1d0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100635f0
add esp, 8
mov ecx, dword [0x100959ec]
mov edx, 0x1008f52c
cmp dword [0x1008f540], 0x10
push 0x10096770
cmovae edx, dword [0x1008f52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002efc9
mov ecx, 0x10096770
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e210
sub ecx, edx
cmp ecx, 0x20
jae 0x1002e227
cmp ecx, 1
ja 0x1002efc9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x35a8]
mov dword [ebp - 0x28], 0xfd6f71cb
mov dword [ebp - 0x24], 0xcb4a14f3
push 0x10096770
test al, 1
jne 0x1002e2ac
or eax, 1
mov dword [esi + 0x35a8], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x3ed4], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0x3ecc], al
add ecx, 1
adc edx, 0
jne 0x1002e298
cmp ecx, 8
jb 0x1002e280
push 0x10074f80
call fcn.100636a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3ecc]
mov ecx, edi
call fcn.1005bd30
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e2d7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0x12b8]
mov dword [ebp - 0x30], 0x8d266e85
test al, 1
jne 0x1002e359
or eax, 1
mov dword [esi + 0x12b8], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x3b6c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0x3b68], al
add ecx, 1
adc edx, 0
jne 0x1002e348
cmp ecx, 4
jb 0x1002e330
push 0x10074fd0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x3b68]
mov ecx, edi
call fcn.1005bd90
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e380
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.10060610
mov byte [ebp - 4], 0x45
mov eax, dword [esi + 0xebc]
mov dword [ebp - 0x20], 0xe46b648c
mov dword [ebp - 0x1c], 0xe4564de6
mov dword [ebp - 0x18], 0xe82467d3
mov word [ebp - 0x14], 0x3bf4
test al, 1
jne 0x1002e40a
or eax, 1
mov dword [esi + 0xebc], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x2a56], 1
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x2a48], al
add ecx, 1
adc edx, 0
jne 0x1002e3f9
cmp ecx, 0xe
jb 0x1002e3e1
push 0x10075020
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x2a48]
mov ecx, edi
call fcn.1005bdf0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e430
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.10060610
push 0x1008f154
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xa8]
call fcn.100607b0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x78]
call fcn.10061cf0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x78]
push 0x1008f574
call fcn.100607b0
add esp, 4
mov byte [ebp - 4], 0x4a
mov eax, dword [esi + 0x408]
mov dword [ebp - 0x20], 0xfd7273d5
mov dword [ebp - 0x1c], 0xb80154a4
mov dword [ebp - 0x18], 0xe074668d
mov byte [ebp - 0x14], 0xc9
test al, 1
jne 0x1002e509
or eax, 1
mov dword [esi + 0x408], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x3549], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x353c], al
add ecx, 1
adc edx, 0
jne 0x1002e4f8
cmp ecx, 0xd
jb 0x1002e4e0
push 0x10075070
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x353c]
mov ecx, edi
call fcn.1005be50
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e531
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov ecx, dword [0x100917fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002e589
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e57f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002e66a
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002e5d9
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e5cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002e66a
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002e628
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e61e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002e66a
push edx
push ecx
call fcn.100635f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002e67a
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e670
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002e670
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100635f0
add esp, 8
mov ecx, dword [0x100959ec]
mov edx, 0x1008f52c
cmp dword [0x1008f540], 0x10
push 0x10096770
cmovae edx, dword [0x1008f52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002efc9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x141c]
mov dword [ebp - 0x28], 0x8749e309
mov dword [ebp - 0x24], 0x5d1a3aa1
push 0x10096770
test al, 1
jne 0x1002e72c
or eax, 1
mov dword [esi + 0x141c], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x29f4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [ecx + esi + 0x29ec], al
add ecx, 1
adc edx, 0
jne 0x1002e718
cmp ecx, 8
jb 0x1002e700
push 0x10074e40
call fcn.100636a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x29ec]
mov ecx, edi
call fcn.1005bbb0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e757
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x668]
mov dword [ebp - 0x30], 0xf700fc47
test al, 1
jne 0x1002e7d9
or eax, 1
mov dword [esi + 0x668], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x3db4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [ecx + esi + 0x3db0], al
add ecx, 1
adc edx, 0
jne 0x1002e7c8
cmp ecx, 4
jb 0x1002e7b0
push 0x10074e90
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x3db0]
mov ecx, edi
call fcn.1005bc10
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e800
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.10060610
mov byte [ebp - 4], 0x53
mov eax, dword [esi + 0xf78]
mov dword [ebp - 0x20], 0x9e4df64e
mov dword [ebp - 0x1c], 0x720663b4
mov dword [ebp - 0x18], 0x9202f511
mov word [ebp - 0x14], 0x15a6
test al, 1
jne 0x1002e88a
or eax, 1
mov dword [esi + 0xf78], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x372a], 1
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x371c], al
add ecx, 1
adc edx, 0
jne 0x1002e879
cmp ecx, 0xe
jb 0x1002e861
push 0x10074ee0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0x371c]
mov ecx, edi
call fcn.1005bc70
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e8b0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.10060610
push 0x1008f344
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xa8]
call fcn.100607b0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x78]
call fcn.10061cf0
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x78]
push 0x1008f574
call fcn.100607b0
add esp, 4
mov byte [ebp - 4], 0x58
mov eax, dword [esi + 0x2538]
mov dword [ebp - 0x20], 0x8754e117
mov dword [ebp - 0x1c], 0x2e517af6
mov dword [ebp - 0x18], 0x9a52f44f
mov byte [ebp - 0x14], 0x9b
test al, 1
jne 0x1002e989
or eax, 1
mov dword [esi + 0x2538], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x1371], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x1364], al
add ecx, 1
adc edx, 0
jne 0x1002e978
cmp ecx, 0xd
jb 0x1002e960
push 0x10074f30
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x1364]
mov ecx, edi
call fcn.1005bcd0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002e9b1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov ecx, dword [0x100917fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002ea09
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e9ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002eaea
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002ea59
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ea4f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002eaea
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002eaa8
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ea9e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002eaea
push edx
push ecx
call fcn.100635f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002eafa
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002eaf0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002eaf0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100635f0
add esp, 8
mov ecx, dword [0x100959ec]
mov edx, 0x1008f52c
cmp dword [0x1008f540], 0x10
push 0x10096770
cmovae edx, dword [0x1008f52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002efc9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x334]
mov dword [ebp - 0x28], 0x8f8d37f1
mov dword [ebp - 0x24], 0xa7de7ca3
push 0x10096770
test al, 1
jne 0x1002ebac
or eax, 1
mov dword [esi + 0x334], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x33a4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0x339c], al
add ecx, 1
adc edx, 0
jne 0x1002eb98
cmp ecx, 8
jb 0x1002eb80
push 0x10074d00
call fcn.100636a7
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x339c]
mov ecx, edi
call fcn.1005ba30
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ebd7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10060610
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0x37f8]
mov dword [ebp - 0x30], 0xffc428bf
test al, 1
jne 0x1002ec59
or eax, 1
mov dword [esi + 0x37f8], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0xc40], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x30]
mov byte [esi + ecx + 0xc3c], al
add ecx, 1
adc edx, 0
jne 0x1002ec48
cmp ecx, 4
jb 0x1002ec30
push 0x10074d50
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0xc3c]
mov ecx, edi
call fcn.1005ba90
mov ecx, edi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ec80
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x78]
call fcn.10060610
mov byte [ebp - 4], 0x61
mov eax, dword [esi + 0x914]
mov dword [ebp - 0x20], 0x968922b6
mov dword [ebp - 0x1c], 0x88c225b6
mov dword [ebp - 0x18], 0x9ac621e9
mov word [ebp - 0x14], 0x53a4
test al, 1
jne 0x1002ed09
or eax, 1
mov dword [esi + 0x914], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x1e0a], 1
nop
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x1dfc], al
add ecx, 1
adc edx, 0
jne 0x1002ecf8
cmp ecx, 0xe
jb 0x1002ece0
push 0x10074da0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x1dfc]
mov ecx, edi
call fcn.1005baf0
mov ecx, edi
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ed36
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xc0]
call fcn.10060610
push 0x1008f514
lea edx, [ebp - 0xc0]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xf0]
call fcn.100607b0
add esp, 4
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0xd8]
call fcn.10061cf0
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0xd8]
push 0x1008f574
call fcn.100607b0
add esp, 4
mov byte [ebp - 4], 0x66
mov eax, dword [esi + 0xd0c]
mov dword [ebp - 0x20], 0x8f9035ef
mov dword [ebp - 0x1c], 0xd4953cf4
mov dword [ebp - 0x18], 0x929620b7
mov byte [ebp - 0x14], 0x99
test al, 1
jne 0x1002ee19
or eax, 1
mov dword [esi + 0xd0c], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x2489], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x247c], al
add ecx, 1
adc edx, 0
jne 0x1002ee08
cmp ecx, 0xd
jb 0x1002edf0
push 0x10074df0
call fcn.100636a7
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0x247c]
mov ecx, esi
call fcn.1005bb50
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002ee41
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.10060610
mov ecx, dword [0x100917fc]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xc4]
cmp edx, 0x10
jb 0x1002ee9f
mov ecx, dword [ebp - 0xd8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ee95
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002ef95
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
cmp edx, 0x10
jb 0x1002eef8
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002eeee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002ef95
push edx
push ecx
call fcn.100635f0
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x1002ef4d
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ef43
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002ef95
push edx
push ecx
call fcn.100635f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
cmp edx, 0x10
jb 0x1002efa5
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ef9b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002ef9b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100635f0
add esp, 8
mov ecx, dword [0x100959ec]
mov edx, 0x1008f52c
cmp dword [0x1008f540], 0x10
push 0x10096770
cmovae edx, dword [0x1008f52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10062cc9
mov esp, ebp
pop ebp
ret