Function at 0x100948a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101059a1
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x190
mov eax, dword [0x1011c0c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1c], edi
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x2c], 0x75736976
mov dword [ebp - 0x28], 0x736c61
call fcn.10035b20
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094910
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.10035b40
lea eax, [ebp - 0x5c]
mov dword [ebp - 4], 1
push eax
mov ecx, edi
call fcn.10035230
lea ecx, [ebp - 0x5c]
call fcn.10035260
mov dword [ebp - 0x34], 0x1b1d0718
xor ecx, ecx
mov dword [ebp - 0x30], 0x1c4e020f
mov dword [ebp - 0x2c], 0x7010d0b
mov word [ebp - 0x28], 0x6e02
nop dword [eax]
xor byte [ebp + ecx - 0x34], 0x6e
inc ecx
cmp ecx, 0xe
jb 0x10094960
push dword [ebp - 0x20]
lea ecx, [ebp - 0x170]
call fcn.10035b20
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 2
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094986
sub ecx, edx
lea eax, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x170]
call fcn.10035b40
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x158]
push dword [ebp - 0x20]
mov dword [ebp - 0x2c], 0x6b6f6d73
mov word [ebp - 0x28], 0x65
call fcn.10035b20
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100949d0
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x158]
call fcn.10035b40
push dword [ebp - 0x20]
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x18], 0x676f66
call fcn.10035b20
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 6
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094a08
sub ecx, edx
lea eax, [ebp - 0x18]
push ecx
push eax
lea ecx, [ebp - 0x140]
call fcn.10035b40
push dword [ebp - 0x20]
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x2c], 0x73616c66
mov word [ebp - 0x28], 0x68
call fcn.10035b20
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094a46
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.10035b40
push dword [ebp - 0x20]
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x2c], 0x706f6373
mov word [ebp - 0x28], 0x65
call fcn.10035b20
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094a84
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x110]
call fcn.10035b40
push dword [ebp - 0x20]
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x2c], 0x65656c73
mov dword [ebp - 0x28], 0x736576
call fcn.10035b20
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094ac3
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0xf8]
call fcn.10035b40
push dword [ebp - 0x20]
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0x2c], 0x64616873
mov word [ebp - 0x28], 0x776f
mov byte [ebp - 0x26], 0
call fcn.10035b20
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xe
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094b05
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0xe0]
call fcn.10035b40
lea eax, [ebp - 0x81]
mov dword [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0x170]
push edx
lea ecx, [ebp - 0x50]
call fcn.100ccce0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x2c], 0x6f6d6572
mov dword [ebp - 0x28], 0x736576
call fcn.10035b20
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094b68
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
push dword [ebp - 0x20]
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x2c], 0x6f6d6572
mov dword [ebp - 0x28], 0x736576
call fcn.10035b20
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094ba7
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.10035b40
lea ecx, [ebp - 0x78]
call fcn.10036140
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [edi + 0x398]
call fcn.10035230
lea eax, [ebp - 0xb4]
mov byte [edi + 0x3c9], 1
push eax
lea ecx, [edi + 0x3d0]
call fcn.10035230
mov esi, dword [ebp - 0x50]
xor eax, eax
cmp byte [edi + 0x3c9], al
mov ecx, 0xf
cmovne eax, ecx
mov dword [edi + 0x404], eax
add eax, 0x14
mov dword [edi + 0x370], eax
mov dword [edi + 0x374], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xb8], eax
cmp esi, eax
je 0x10094c55
lea eax, [edi + 0x3e8]
mov edi, dword [ebp - 0xb8]
mov dword [ebp - 0x18], eax
nop dword [eax + eax]
push esi
mov ecx, eax
call fcn.10055af0
mov eax, dword [ebp - 0x18]
add esi, 0x18
cmp esi, edi
jne 0x10094c40
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0xb8], eax
cmp eax, ecx
je 0x10094d23
lea ecx, [edi + 0x3f8]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xbc]
push eax
call fcn.10035100
lea ecx, [edi + 0x3f8]
mov esi, dword [eax]
lea eax, [ebp - 0xc0]
push eax
call fcn.10035110
push esi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0xc4]
push dword [eax]
call fcn.10035920
add esp, 8
lea ecx, [edi + 0x3f8]
mov esi, eax
lea eax, [ebp - 0x28]
push eax
call fcn.10035100
mov ecx, dword [edi + 0x3ec]
sub ecx, dword [edi + 0x3e8]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x18], eax
jae 0x10094cf4
lea eax, [ebp - 0x18]
push eax
lea ecx, [edi + 0x3f8]
call fcn.1004a380
cmp esi, dword [ebp - 0x24]
jne 0x10094d05
mov eax, dword [edi + 0x3c4]
test eax, eax
je 0x10094d05
call eax
mov eax, dword [ebp - 0xb8]
lea ecx, [edi + 0x3f8]
add eax, 4
mov dword [ebp - 0xb8], eax
cmp eax, dword [ebp - 0x20]
jne 0x10094c72
lea ecx, [ebp - 0x78]
call fcn.10034710
lea ecx, [ebp - 0xb4]
call fcn.10035260
lea ecx, [ebp - 0x9c]
call fcn.10035260
lea ecx, [ebp - 0x50]
call fcn.100557c0
push fcn.10035260
push 7
push 0x18
lea eax, [ebp - 0x170]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100fdca8
lea eax, [edi + 0x360]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x20]
mov dword [edi + 0x378], 0
imul eax, dword [edi + 0x378], 0xeb
push ecx
lea ecx, [edi + 0x18]
add eax, 0x14
mov dword [edi + 0x364], eax
mov dword [edi + 0x36c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x37c], eax
call fcn.1004a380
mov dword [ebp - 0x28], 0x746c75
lea ecx, [ebp - 0x1a0]
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0x61666564
call fcn.10035b20
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x16
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094dd3
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x1a0]
call fcn.10035b40
mov dword [ebp - 4], 0x17
xor ecx, ecx
mov dword [ebp - 0x30], 0xb0b051d
mov dword [ebp - 0x2c], 0x1a1d4e1a
mov dword [ebp - 0x28], 0x6e0b0217
nop word [eax + eax]
xor byte [ebp + ecx - 0x30], 0x6e
inc ecx
cmp ecx, 0xc
jb 0x10094e10
push dword [ebp - 0x28]
lea ecx, [ebp - 0x188]
call fcn.10035b20
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x18
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094e33
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x188]
call fcn.10035b40
lea eax, [ebp - 0x81]
mov dword [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x170]
push ecx
lea edx, [ebp - 0x1a0]
push edx
lea ecx, [ebp - 0x50]
call fcn.100ccce0
mov dword [ebp - 0x74], 0x1d310100
xor ecx, ecx
mov dword [ebp - 0x70], 0xb1e010d
mov dword [ebp - 0x6c], 0x1e171a31
mov word [ebp - 0x68], 0x6e0b
nop dword [eax]
xor byte [ebp + ecx - 0x74], 0x6e
inc ecx
cmp ecx, 0xe
jb 0x10094e90
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb4]
call fcn.10035b20
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1b
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094eb3
sub ecx, edx
lea eax, [ebp - 0x74]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.10035b40
mov dword [ebp - 0x74], 0x1d4e0100
xor ecx, ecx
mov dword [ebp - 0x70], 0xb1e010d
mov dword [ebp - 0x6c], 0x1e171a4e
mov word [ebp - 0x68], 0x6e0b
nop dword [eax]
xor byte [ebp + ecx - 0x74], 0x6e
inc ecx
cmp ecx, 0xe
jb 0x10094ef0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x9c]
call fcn.10035b20
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1d
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10094f13
sub ecx, edx
lea eax, [ebp - 0x74]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [edi + 0x440]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0x471], 1
push eax
lea ecx, [edi + 0x478]
call fcn.10035230
mov esi, dword [ebp - 0x50]
xor eax, eax
cmp byte [edi + 0x471], al
mov ecx, 0xf
cmovne eax, ecx
mov dword [edi + 0x4a4], eax
add eax, 0x14
mov dword [edi + 0x418], eax
mov dword [edi + 0x41c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], eax
cmp esi, eax
je 0x10094fab
lea eax, [edi + 0x490]
mov dword [ebp - 0x20], eax
mov edi, eax
push esi
mov ecx, edi
call fcn.10055af0
add esi, 0x18
cmp esi, dword [ebp - 0x24]
jne 0x10094f98
mov edi, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x494]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0x490]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x10094fd4
mov dword [edi + 0x4a0], 0
lea ecx, [ebp - 0x9c]
call fcn.10035260
lea ecx, [ebp - 0xb4]
call fcn.10035260
lea ecx, [ebp - 0x50]
call fcn.100557c0
push fcn.10035260
push 2
push 0x18
lea eax, [ebp - 0x1a0]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100fdca8
lea eax, [edi + 0x408]
mov dword [ebp - 0x20], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x420], 0
imul eax, dword [edi + 0x420], 0xeb
add eax, 0x14
mov dword [edi + 0x40c], eax
mov dword [edi + 0x414], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x424], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
lea esi, [edi + 0x4a8]
mov dword [ebp - 0x30], 0xd0b1e1d
mov dword [ebp - 0x2c], 0x11a0f1a
xor ecx, ecx
mov word [ebp - 0x28], 0x1d1c
mov byte [ebp - 0x26], 0x6e
xor byte [ebp + ecx - 0x30], 0x6e
inc ecx
cmp ecx, 0xb
jb 0x10095073
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb4]
call fcn.10035b20
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x1f
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100950a0
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.10035b40
mov dword [ebp - 4], 0x20
mov ecx, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x1010fd20]
mov dword [ebp - 0x48], 0x6e1a1d07
movups xmmword [ebp - 0x58], xmm0
nop
xor byte [ebp + ecx - 0x58], 0x6e
inc ecx
cmp ecx, 0x14
jb 0x100950e0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x9c]
call fcn.10035b20
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x21
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095103
sub ecx, edx
lea eax, [ebp - 0x58]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [edi + 0x4e0]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0x511], 1
push eax
lea ecx, [edi + 0x518]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov byte [edi + 0x514], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
mov dword [ebp - 0x20], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x4c0], 0
imul eax, dword [edi + 0x4c0], 0xeb
add eax, 0x14
mov dword [edi + 0x4ac], eax
mov dword [edi + 0x4b4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x4c4], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
mov byte [ebp - 0x28], 0
lea ecx, [ebp - 0xb4]
push dword [ebp - 0x28]
lea esi, [edi + 0x530]
mov dword [ebp - 0x30], 0x6279656b
mov dword [ebp - 0x2c], 0x73646e69
call fcn.10035b20
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x23
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100951e1
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.10035b40
mov dword [ebp - 4], 0x24
mov ecx, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x10110480]
mov dword [ebp - 0x48], 0x1a1d0702
mov byte [ebp - 0x44], 0x6e
movups xmmword [ebp - 0x58], xmm0
xor byte [ebp + ecx - 0x58], 0x6e
inc ecx
cmp ecx, 0x15
jb 0x10095223
push dword [ebp - 0x28]
lea ecx, [ebp - 0x9c]
call fcn.10035b20
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x25
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095246
sub ecx, edx
lea eax, [ebp - 0x58]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [edi + 0x568]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0x599], 1
push eax
lea ecx, [edi + 0x5a0]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov byte [edi + 0x59c], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
mov dword [ebp - 0x20], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x548], 0
imul eax, dword [edi + 0x548], 0xeb
add eax, 0x14
mov dword [edi + 0x534], eax
mov dword [edi + 0x53c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x54c], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
push dword [ebp - 0x28]
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x18], 0x79626c
call fcn.10035b20
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x27
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095313
sub ecx, edx
lea eax, [ebp - 0x18]
push ecx
push eax
lea ecx, [ebp - 0x140]
call fcn.10035b40
mov dword [ebp - 4], 0x28
lea ecx, [ebp - 0x128]
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x1010fbe0]
mov byte [ebp - 0x28], 0
push dword [ebp - 0x28]
movups xmmword [ebp - 0x38], xmm0
call fcn.10035b20
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x29
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095361
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.10035b40
mov dword [ebp - 0x34], 0xb050f08
xor ecx, ecx
mov dword [ebp - 0x30], 0x1a0f024e
mov dword [ebp - 0x2c], 0x170d000b
mov byte [ebp - 0x28], 0x6e
xor byte [ebp + ecx - 0x34], 0x6e
inc ecx
cmp ecx, 0xd
jb 0x10095395
push dword [ebp - 0x28]
lea ecx, [ebp - 0x110]
call fcn.10035b20
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x2b
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100953b8
sub ecx, edx
lea eax, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x110]
call fcn.10035b40
movaps xmm0, xmmword [0x10110ae0]
lea ecx, [ebp - 0xf8]
xorps xmm0, xmmword [0x10110980]
movups xmmword [ebp - 0x34], xmm0
push dword [ebp - 0x28]
call fcn.10035b20
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x2d
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095400
sub ecx, edx
lea eax, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0xf8]
call fcn.10035b40
mov byte [ebp - 0x28], 0
lea ecx, [ebp - 0xe0]
push dword [ebp - 0x28]
mov dword [ebp - 0x30], 0x2067616c
mov dword [ebp - 0x2c], 0x6b6c6177
call fcn.10035b20
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2f
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095443
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0xe0]
call fcn.10035b40
lea eax, [ebp - 0x81]
mov dword [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0x140]
push edx
lea ecx, [ebp - 0x74]
call fcn.100ccce0
mov dword [ebp - 0x30], 0x70a0007
xor ecx, ecx
mov dword [ebp - 0x2c], 0x11a0f0d
mov word [ebp - 0x28], 0x1d1c
mov byte [ebp - 0x26], 0x6e
nop word [eax + eax]
xor byte [ebp + ecx - 0x30], 0x6e
inc ecx
cmp ecx, 0xb
jb 0x100954a0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb4]
call fcn.10035b20
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x32
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100954c3
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.10035b40
mov dword [ebp - 0x30], 0x70a0007
xor ecx, ecx
mov dword [ebp - 0x2c], 0x11a0f0d
mov word [ebp - 0x28], 0x1d1c
mov byte [ebp - 0x26], 0x6e
xor byte [ebp + ecx - 0x30], 0x6e
inc ecx
cmp ecx, 0xb
jb 0x100954f6
push dword [ebp - 0x28]
lea ecx, [ebp - 0x9c]
call fcn.10035b20
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x34
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095520
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
lea ecx, [ebp - 0x50]
call fcn.10036140
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [edi + 0x8d4]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0x905], 1
push eax
lea ecx, [edi + 0x90c]
call fcn.10035230
mov esi, dword [ebp - 0x74]
xor eax, eax
cmp byte [edi + 0x905], al
mov ecx, 0xf
cmovne eax, ecx
mov dword [edi + 0x940], eax
add eax, 0x14
mov dword [edi + 0x8ac], eax
mov dword [edi + 0x8b0], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x24], eax
cmp esi, eax
je 0x100955c3
lea eax, [edi + 0x924]
mov dword [ebp - 0x20], eax
mov edi, eax
nop dword [eax]
push esi
mov ecx, edi
call fcn.10055af0
add esi, 0x18
cmp esi, dword [ebp - 0x24]
jne 0x100955b0
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0xb8], eax
cmp eax, ecx
je 0x10095691
lea ecx, [edi + 0x934]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x28]
push eax
call fcn.10035100
lea ecx, [edi + 0x934]
mov esi, dword [eax]
lea eax, [ebp - 0xc4]
push eax
call fcn.10035110
push esi
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0xc0]
push dword [eax]
call fcn.10035920
add esp, 8
lea ecx, [edi + 0x934]
mov esi, eax
lea eax, [ebp - 0xbc]
push eax
call fcn.10035100
mov ecx, dword [edi + 0x928]
sub ecx, dword [edi + 0x924]
mov esi, dword [esi]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1c], eax
jae 0x10095662
lea eax, [ebp - 0x1c]
push eax
lea ecx, [edi + 0x934]
call fcn.1004a380
cmp esi, dword [ebp - 0x20]
jne 0x10095673
mov eax, dword [edi + 0x900]
test eax, eax
je 0x10095673
call eax
mov eax, dword [ebp - 0xb8]
lea ecx, [edi + 0x934]
add eax, 4
mov dword [ebp - 0xb8], eax
cmp eax, dword [ebp - 0x24]
jne 0x100955e0
lea ecx, [ebp - 0x50]
call fcn.10034710
lea ecx, [ebp - 0x9c]
call fcn.10035260
lea ecx, [ebp - 0xb4]
call fcn.10035260
lea ecx, [ebp - 0x74]
call fcn.100557c0
push fcn.10035260
push 5
push 0x18
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.100fdca8
lea eax, [edi + 0x89c]
mov dword [ebp - 0x20], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x8b4], 0
imul eax, dword [edi + 0x8b4], 0xeb
add eax, 0x14
mov dword [edi + 0x8a0], eax
mov dword [edi + 0x8a8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x8b8], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
lea esi, [edi + 0x140]
mov dword [ebp - 0x30], 0xd1c0108
mov dword [ebp - 0x2c], 0x616310b
xor ecx, ecx
mov dword [ebp - 0x28], 0x6e1c070f
xor byte [ebp + ecx - 0x30], 0x6e
inc ecx
cmp ecx, 0xc
jb 0x10095735
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb4]
call fcn.10035b20
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x37
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095760
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.10035b40
mov dword [ebp - 4], 0x38
lea ecx, [ebp - 0x9c]
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x10110a00]
push dword [ebp - 0x28]
movups xmmword [ebp - 0x54], xmm0
call fcn.10035b20
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x39
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100957b0
sub ecx, edx
lea eax, [ebp - 0x54]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [edi + 0x178]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0x1a9], 1
push eax
lea ecx, [edi + 0x1b0]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov byte [edi + 0x1ac], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
mov dword [ebp - 0x20], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x158], 0
imul eax, dword [edi + 0x158], 0xeb
add eax, 0x14
mov dword [edi + 0x144], eax
mov dword [edi + 0x14c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x15c], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
lea esi, [edi + 0x5b8]
mov dword [ebp - 0x50], 0xb1c1e1d
mov dword [ebp - 0x4c], 0x16310a0f
xor ecx, ecx
mov dword [ebp - 0x48], 0x1c070f06
mov byte [ebp - 0x44], 0x6e
nop dword [eax]
xor byte [ebp + ecx - 0x50], 0x6e
inc ecx
cmp ecx, 0xd
jb 0x10095880
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb4]
call fcn.10035b20
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x3b
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100958a6
sub ecx, edx
lea eax, [ebp - 0x50]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.10035b40
mov dword [ebp - 4], 0x3c
lea ecx, [ebp - 0x9c]
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x1010feb0]
push dword [ebp - 0x28]
movups xmmword [ebp - 0x54], xmm0
mov byte [ebp - 0x44], 0
call fcn.10035b20
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x3d
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100958f4
sub ecx, edx
lea eax, [ebp - 0x54]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [edi + 0x5f0]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0x621], 1
push eax
lea ecx, [edi + 0x628]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov byte [edi + 0x624], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
mov dword [ebp - 0x20], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x5d0], 0
imul eax, dword [edi + 0x5d0], 0xeb
add eax, 0x14
mov dword [edi + 0x5bc], eax
mov dword [edi + 0x5c4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x5d4], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
mov word [ebp - 0x28], 0x72
lea ecx, [ebp - 0xb4]
push dword [ebp - 0x28]
lea esi, [edi + 0x78c]
mov dword [ebp - 0x30], 0x5f6e6570
mov dword [ebp - 0x2c], 0x69616878
call fcn.10035b20
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x3f
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100959d4
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.10035b40
mov dword [ebp - 4], 0x40
mov ecx, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x101101c0]
mov dword [ebp - 0x4c], 0x70f061d
mov word [ebp - 0x48], 0x6e1c
movups xmmword [ebp - 0x5c], xmm0
nop dword [eax + eax]
xor byte [ebp + ecx - 0x5c], 0x6e
inc ecx
cmp ecx, 0x16
jb 0x10095a20
push dword [ebp - 0x28]
lea ecx, [ebp - 0x9c]
call fcn.10035b20
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x41
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095a43
sub ecx, edx
lea eax, [ebp - 0x5c]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x42
push eax
lea ecx, [edi + 0x7c4]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0x7f5], 1
push eax
lea ecx, [edi + 0x7fc]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov byte [edi + 0x7f8], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
mov dword [ebp - 0x20], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x7a4], 0
imul eax, dword [edi + 0x7a4], 0xeb
add eax, 0x14
mov dword [edi + 0x790], eax
mov dword [edi + 0x798], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x7a8], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
lea esi, [edi + 0x814]
mov dword [ebp - 0x30], 0x31000b1e
mov dword [ebp - 0x2c], 0xf030f0a
xor ecx, ecx
mov word [ebp - 0x28], 0xb09
mov byte [ebp - 0x26], 0x6e
nop
xor byte [ebp + ecx - 0x30], 0x6e
inc ecx
cmp ecx, 0xb
jb 0x10095b10
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb4]
call fcn.10035b20
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x43
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095b36
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.10035b40
mov dword [ebp - 4], 0x44
mov ecx, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x101101c0]
mov dword [ebp - 0x50], 0x70f061d
mov dword [ebp - 0x4c], 0xf0a4e1c
mov dword [ebp - 0x48], 0xb090f03
mov byte [ebp - 0x44], 0x6e
movups xmmword [ebp - 0x60], xmm0
xor byte [ebp + ecx - 0x60], 0x6e
inc ecx
cmp ecx, 0x1d
jb 0x10095b86
push dword [ebp - 0x28]
lea ecx, [ebp - 0x9c]
call fcn.10035b20
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x45
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095bb0
sub ecx, edx
lea eax, [ebp - 0x60]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [edi + 0x84c]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0x87d], 1
push eax
lea ecx, [edi + 0x884]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov byte [edi + 0x880], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
mov dword [ebp - 0x20], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x82c], 0
imul eax, dword [edi + 0x82c], 0xeb
add eax, 0x14
mov dword [edi + 0x818], eax
mov dword [edi + 0x820], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x830], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
mov dword [ebp - 0x28], 0x737265
lea ecx, [ebp - 0xb4]
push dword [ebp - 0x28]
lea esi, [edi + 0xa5c]
mov dword [ebp - 0x2c], 0x63617274
call fcn.10035b20
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x47
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095c90
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.10035b40
mov dword [ebp - 4], 0x48
mov ecx, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x1010fdd0]
mov word [ebp - 0x48], 1
mov byte [ebp - 0x46], 0x6e
movups xmmword [ebp - 0x58], xmm0
xor byte [ebp + ecx - 0x58], 0x6e
inc ecx
cmp ecx, 0x13
jb 0x10095cd1
push dword [ebp - 0x28]
lea ecx, [ebp - 0x9c]
call fcn.10035b20
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x49
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095cf4
sub ecx, edx
lea eax, [ebp - 0x58]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x4a
push eax
lea ecx, [edi + 0xa94]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0xac5], 1
push eax
lea ecx, [edi + 0xacc]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov byte [edi + 0xac8], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
mov dword [ebp - 0x20], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xa74], 0
imul eax, dword [edi + 0xa74], 0xeb
add eax, 0x14
mov dword [edi + 0xa60], eax
mov dword [edi + 0xa68], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xa78], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
movaps xmm0, xmmword [0x10110ae0]
mov ecx, 0x10
xorps xmm0, xmmword [0x10110390]
mov esi, dword [0x1010eb20]
mov dword [ebp - 0x6c], 0x102010d
mov word [ebp - 0x68], 0x6e1c
movups xmmword [ebp - 0x7c], xmm0
nop dword [eax]
xor byte [ebp + ecx - 0x7c], 0x6e
inc ecx
cmp ecx, 0x16
jb 0x10095dd0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x9c]
call fcn.10035b20
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x4b
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10095df6
sub ecx, edx
lea eax, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.10035b40
mov dword [ebp - 4], 0x4c
mov ecx, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x10110000]
mov dword [ebp - 0x48], 0x1c010201
mov byte [ebp - 0x44], 0x6e
movups xmmword [ebp - 0x58], xmm0
nop dword [eax + eax]
xor byte [ebp + ecx - 0x58], 0x6e
inc ecx
cmp ecx, 0x15
jb 0x10095e40
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xb4]
call fcn.100352b0
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x4d
push eax
lea ecx, [edi + 0xa3c]
call fcn.10035230
lea eax, [ebp - 0x9c]
push eax
lea ecx, [edi + 0xa04]
call fcn.10035230
lea ecx, [ebp - 0xb4]
mov dword [edi + 0xa54], esi
mov dword [edi + 0xa58], 0
call fcn.10035260
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
lea eax, [edi + 0x9cc]
mov dword [ebp - 0x20], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0x9e4], 0
imul eax, dword [edi + 0x9e4], 0xeb
add eax, 0x14
mov dword [edi + 0x9d0], eax
mov dword [edi + 0x9d8], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x9e8], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
movaps xmm0, xmmword [0x10110ae0]
lea eax, [ebp - 0x54]
xorps xmm0, xmmword [0x10110a30]
lea ecx, [ebp - 0xb4]
push eax
lea esi, [edi + 0x944]
movups xmmword [ebp - 0x54], xmm0
call fcn.100352b0
mov dword [ebp - 4], 0x4e
mov ecx, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x1010fdd0]
mov dword [ebp - 0x70], 0xd4e0001
mov dword [ebp - 0x6c], 0x20d1c07
mov word [ebp - 0x68], 0x6e0b
movups xmmword [ebp - 0x80], xmm0
nop dword [eax]
xor byte [ebp + ecx - 0x80], 0x6e
inc ecx
cmp ecx, 0x1a
jb 0x10095f50
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100352b0
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [edi + 0x97c]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0x9ad], 1
push eax
lea ecx, [edi + 0x9b4]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov byte [edi + 0x9b0], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
mov dword [ebp - 0x20], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0x95c], 0
imul eax, dword [edi + 0x95c], 0xeb
add eax, 0x14
mov dword [edi + 0x948], eax
mov dword [edi + 0x950], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x960], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
lea esi, [edi + 0xae4]
mov dword [ebp - 0x50], 0xf1e0307
mov dword [ebp - 0x4c], 0xc311a0d
xor ecx, ecx
mov dword [ebp - 0x48], 0x1d030f0b
mov byte [ebp - 0x44], 0x6e
nop dword [eax]
xor byte [ebp + ecx - 0x50], 0x6e
inc ecx
cmp ecx, 0xd
jb 0x10096020
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xb4]
call fcn.100352b0
mov dword [ebp - 4], 0x50
xor ecx, ecx
mov dword [ebp - 0x74], 0xf1e0307
mov dword [ebp - 0x70], 0xc4e1a0d
mov dword [ebp - 0x6c], 0x1d030f0b
mov byte [ebp - 0x68], 0x6e
nop dword [eax]
xor byte [ebp + ecx - 0x74], 0x6e
inc ecx
cmp ecx, 0xd
jb 0x10096060
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100352b0
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [edi + 0xb1c]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0xb4d], 1
push eax
lea ecx, [edi + 0xb54]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov byte [edi + 0xb50], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
mov dword [ebp - 0x20], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xafc], 0
imul eax, dword [edi + 0xafc], 0xeb
add eax, 0x14
mov dword [edi + 0xae8], eax
mov dword [edi + 0xaf0], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xb00], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
movaps xmm0, xmmword [0x10110ae0]
mov ecx, 0x10
xorps xmm0, xmmword [0x1010fca0]
mov esi, dword [0x1010eb1c]
mov word [ebp - 0x48], 0x1c01
mov byte [ebp - 0x46], 0x6e
movups xmmword [ebp - 0x58], xmm0
xor byte [ebp + ecx - 0x58], 0x6e
inc ecx
cmp ecx, 0x13
jb 0x10096133
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xb4]
call fcn.100352b0
mov dword [ebp - 4], 0x52
mov ecx, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x1010fcb0]
mov word [ebp - 0x6c], 0x1c01
mov byte [ebp - 0x6a], 0x6e
movups xmmword [ebp - 0x7c], xmm0
xor byte [ebp + ecx - 0x7c], 0x6e
inc ecx
cmp ecx, 0x13
jb 0x10096175
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100352b0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [edi + 0xbdc]
call fcn.10035230
lea eax, [ebp - 0xb4]
push eax
lea ecx, [edi + 0xba4]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov dword [edi + 0xbf4], esi
mov dword [edi + 0xbf8], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
lea eax, [edi + 0xb6c]
mov dword [ebp - 0x20], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xb84], 0
imul eax, dword [edi + 0xb84], 0xeb
add eax, 0x14
mov dword [edi + 0xb70], eax
mov dword [edi + 0xb78], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xb88], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
movaps xmm0, xmmword [0x10110ae0]
mov ecx, 0x10
xorps xmm0, xmmword [0x10110160]
mov esi, dword [0x1010eb1c]
mov word [ebp - 0x48], 0x6e1c
movups xmmword [ebp - 0x58], xmm0
nop dword [eax]
xor byte [ebp + ecx - 0x58], 0x6e
inc ecx
cmp ecx, 0x12
jb 0x10096250
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xb4]
call fcn.100352b0
mov dword [ebp - 4], 0x54
mov ecx, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x1010fff0]
mov dword [ebp - 0x6c], 0x1c010201
mov byte [ebp - 0x68], 0x6e
movups xmmword [ebp - 0x7c], xmm0
xor byte [ebp + ecx - 0x7c], 0x6e
inc ecx
cmp ecx, 0x15
jb 0x10096293
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100352b0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x55
push eax
lea ecx, [edi + 0xec8]
call fcn.10035230
lea eax, [ebp - 0xb4]
push eax
lea ecx, [edi + 0xe90]
call fcn.10035230
lea ecx, [ebp - 0x9c]
mov dword [edi + 0xee0], esi
mov dword [edi + 0xee4], 0
call fcn.10035260
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0xffffffff
call fcn.10035260
lea eax, [edi + 0xe58]
mov dword [ebp - 0x20], eax
lea ecx, [edi + 0x18]
mov dword [edi + 0xe70], 1
imul eax, dword [edi + 0xe70], 0xeb
add eax, 0x14
mov dword [edi + 0xe5c], eax
mov dword [edi + 0xe64], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xe74], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1004a380
push 0x1010f414
lea ecx, [ebp - 0x3c]
lea esi, [edi + 0xee8]
call fcn.100cd160
mov dword [ebp - 4], 0x56
lea eax, [ebp - 0x54]
movaps xmm0, xmmword [0x10110ae0]
lea ecx, [ebp - 0xb4]
xorps xmm0, xmmword [0x101109a0]
push eax
movups xmmword [ebp - 0x54], xmm0
call fcn.100352b0
mov byte [ebp - 4], 0x57
mov ecx, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x10110230]
mov dword [ebp - 0x6c], 0x6e0b1407
movups xmmword [ebp - 0x7c], xmm0
xor byte [ebp + ecx - 0x7c], 0x6e
inc ecx
cmp ecx, 0x14
jb 0x100963a4
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.100352b0
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x58
push eax
lea ecx, [edi + 0xf20]
call fcn.10035230
lea eax, [ebp - 0x9c]
mov byte [edi + 0xf51], 1
push eax
lea ecx, [edi + 0xf70]
call fcn.10035230
xor eax, eax
mov dword [edi + 0xf5c], 0x3f800000
cmp byte [edi + 0xf51], al
mov ecx, 0xf
mov dword [edi + 0xf60], 0x43c80000
cmovne eax, ecx
mov dword [edi + 0xf58], 0x43480000
mov dword [edi + 0xfa0], eax
lea ecx, [edi + 0xf88]
add eax, 8
mov dword [edi + 0xf6c], 0
mov dword [edi + 0xef8], eax
mov dword [edi + 0xefc], eax
lea eax, [ebp - 0x3c]
push eax
mov dword [edi + 0xf64], 0x3f800000
call fcn.100cd130
lea ecx, [ebp - 0x9c]
call fcn.10035260
lea ecx, [ebp - 0xb4]
call fcn.10035260
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 0xffffffff
call fcn.10055850
mov dword [ebp - 0x24], esi
lea ecx, [edi + 0x18]
mov dword [edi + 0xf00], 1
imul eax, dword [edi + 0xf00], 0xeb
add eax, 0x14
mov dword [edi + 0xeec], eax
mov dword [edi + 0xef4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xf04], eax
lea eax, [ebp - 0x24]
push eax
call fcn.1004a380
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100fdc5c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret