Function at 0x10028480
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100641d4
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [0x1008b00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1008bf0c]
push 0x10092748
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x1c], 0x1bee6cc1
mov eax, dword [esi + 0x3d9c]
test al, 1
jne 0x1002852c
or eax, 1
mov dword [esi + 0x3d9c], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3af4], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x3af0], al
add ecx, 1
adc edx, 0
jne 0x10028518
cmp ecx, 4
jb 0x10028500
push 0x10070d50
call fcn.1005fe9d
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3af0]
mov ecx, edi
call fcn.10059fa0
mov ecx, edi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028550
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x78]
call fcn.1005d1a0
mov dword [ebp - 4], 1
movaps xmm0, xmmword [0x1007f020]
mov eax, dword [esi + 0x1318]
mov byte [ebp - 0x24], 0xe7
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x100285d9
or eax, 1
mov dword [esi + 0x1318], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x17b9], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x17a8], al
add ecx, 1
adc edx, 0
jne 0x100285c8
cmp ecx, 0x11
jb 0x100285b0
push 0x10070da0
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x17a8]
mov ecx, edi
call fcn.1005a000
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028600
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005d1a0
push 0x1008b154
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa8]
call fcn.1005d2f0
add esp, 4
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x90]
call fcn.1005e5c0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x90]
push 0x1008b574
call fcn.1005d2f0
add esp, 4
mov byte [ebp - 4], 6
movaps xmm0, xmmword [0x1007f5c0]
mov eax, dword [esi + 0x2d90]
mov word [ebp - 0x38], 0x79d
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x100286d9
or eax, 1
mov dword [esi + 0x2d90], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x11d2], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x11c0], al
add ecx, 1
adc edx, 0
jne 0x100286c8
cmp ecx, 0x12
jb 0x100286b0
push 0x10070df0
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x11c0]
mov ecx, edi
call fcn.1005a060
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028701
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov ecx, dword [0x1008d7e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x7c]
cmp edx, 0x10
jb 0x1002875d
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028753
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002883e
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
cmp edx, 0x10
jb 0x100287b0
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100287a6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002883e
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x100287ff
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100287f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002883e
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002884e
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028844
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10028844
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov ecx, dword [0x100919c8]
mov edx, 0x1008b52c
cmp dword [0x1008b540], 0x10
push 0x10092748
cmovae edx, dword [0x1008b52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002aadb
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x184]
mov dword [ebp - 0x1c], 0xf9a41cb3
push 0x10092748
push 0
push 0
test al, 1
jne 0x100288fc
or eax, 1
mov dword [esi + 0x184], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x11b0], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x11ac], al
add ecx, 1
adc edx, 0
jne 0x100288e8
cmp ecx, 4
jb 0x100288d0
push 0x10070c60
call fcn.1005fe9d
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x11ac]
mov ecx, edi
call fcn.10059e80
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028923
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005d1a0
mov dword [ebp - 4], 9
movaps xmm0, xmmword [0x1007f500]
mov eax, dword [esi + 0x3df4]
mov byte [ebp - 0x24], 0x95
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x100289a9
or eax, 1
mov dword [esi + 0x3df4], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x15d9], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x15c8], al
add ecx, 1
adc edx, 0
jne 0x10028998
cmp ecx, 0x11
jb 0x10028980
push 0x10070cb0
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x15c8]
mov ecx, edi
call fcn.10059ee0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100289d0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005d1a0
push 0x1008b344
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa8]
call fcn.1005d2f0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x27]
lea ecx, [ebp - 0x78]
call fcn.1005e5c0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x1008b574
call fcn.1005d2f0
add esp, 4
mov byte [ebp - 4], 0xe
movaps xmm0, xmmword [0x1007ef20]
mov eax, dword [esi + 0x1bd0]
mov word [ebp - 0x38], 0x77ef
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10028a9a
or eax, 1
mov dword [esi + 0x1bd0], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x390e], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x38fc], al
add ecx, 1
adc edx, 0
jne 0x10028a89
cmp ecx, 0x12
jb 0x10028a71
push 0x10070d00
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x38fc]
mov ecx, edi
call fcn.10059f40
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028ac2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov ecx, dword [0x1008d7e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x10028b1b
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028b11
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028bfc
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x10028b6b
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028b61
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028bfc
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10028bba
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028bb0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028bfc
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x10028c0c
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028c02
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10028c02
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov ecx, dword [0x100919c8]
mov edx, 0x1008b52c
cmp dword [0x1008b540], 0x10
push 0x10092748
cmovae edx, dword [0x1008b52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002aadb
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3d18]
mov dword [ebp - 0x1c], 0xc1a2c87f
push 0x10092748
push 0
push 0
test al, 1
jne 0x10028cae
or eax, 1
mov dword [esi + 0x3d18], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3c88], 1
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x3c84], al
add ecx, 1
adc edx, 0
jne 0x10028c9a
cmp ecx, 4
jb 0x10028c82
push 0x10070b70
call fcn.1005fe9d
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3c84]
mov ecx, edi
call fcn.10059d60
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028cd5
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005d1a0
mov dword [ebp - 4], 0x11
movaps xmm0, xmmword [0x1007f480]
mov eax, dword [esi + 0x7fc]
mov byte [ebp - 0x24], 0x59
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10028d59
or eax, 1
mov dword [esi + 0x7fc], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3309], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x32f8], al
add ecx, 1
adc edx, 0
jne 0x10028d48
cmp ecx, 0x11
jb 0x10028d30
push 0x10070bc0
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x32f8]
mov ecx, edi
call fcn.10059dc0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028d80
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005d1a0
push 0x1008b514
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xa8]
call fcn.1005d2f0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x27]
lea ecx, [ebp - 0x78]
call fcn.1005e5c0
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x1008b574
call fcn.1005d2f0
add esp, 4
mov byte [ebp - 4], 0x16
movaps xmm0, xmmword [0x1007ee40]
mov eax, dword [esi + 0x26c]
mov word [ebp - 0x38], 0xa323
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10028e4a
or eax, 1
mov dword [esi + 0x26c], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3d0a], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x3cf8], al
add ecx, 1
adc edx, 0
jne 0x10028e39
cmp ecx, 0x12
jb 0x10028e21
push 0x10070c10
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x3cf8]
mov ecx, edi
call fcn.10059e20
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028e72
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov ecx, dword [0x1008d7e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x10028ecb
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028ec1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028fac
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x10028f1b
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028f11
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028fac
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10028f6a
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028f60
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028fac
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x10028fbc
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028fb2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10028fb2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov ecx, dword [0x100919c8]
mov edx, 0x1008b52c
cmp dword [0x1008b540], 0x10
push 0x10092748
cmovae edx, dword [0x1008b52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002aadb
mov ecx, 0x10092748
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028ff0
sub ecx, edx
cmp ecx, 0x20
jae 0x10029007
cmp ecx, 1
ja 0x1002aadb
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xd58]
mov dword [ebp - 0x2c], 0x390daf29
mov dword [ebp - 0x28], 0x802e1762
mov byte [ebp - 0x24], 0x41
push 0x10092748
test al, 1
jne 0x1002908c
or eax, 1
mov dword [esi + 0xd58], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3e55], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x3e4c], al
add ecx, 1
adc edx, 0
jne 0x10029078
cmp ecx, 9
jb 0x10029060
push 0x10070a30
call fcn.1005fe9d
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3e4c]
mov ecx, edi
call fcn.10059be0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x28], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100290b7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0xc94]
mov dword [ebp - 0x1c], 0x4944b067
test al, 1
jne 0x10029139
or eax, 1
mov dword [esi + 0xc94], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3830], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x382c], al
add ecx, 1
adc edx, 0
jne 0x10029128
cmp ecx, 4
jb 0x10029110
push 0x10070a80
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x382c]
mov ecx, edi
call fcn.10059c40
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029160
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005d1a0
mov byte [ebp - 4], 0x1b
movaps xmm0, xmmword [0x1007eb60]
mov eax, dword [esi + 0x2dd0]
mov byte [ebp - 0x38], 0x41
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x100291e9
or eax, 1
mov dword [esi + 0x2dd0], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2ae9], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x2ad8], al
add ecx, 1
adc edx, 0
jne 0x100291d8
cmp ecx, 0x11
jb 0x100291c0
push 0x10070ad0
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x2ad8]
mov ecx, edi
call fcn.10059ca0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029210
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005d1a0
push 0x1008b154
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xa8]
call fcn.1005d2f0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x27]
lea ecx, [ebp - 0x78]
call fcn.1005e5c0
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x78]
push 0x1008b574
call fcn.1005d2f0
add esp, 4
mov byte [ebp - 4], 0x20
movaps xmm0, xmmword [0x1007f2f0]
mov eax, dword [esi + 0x1a5c]
mov word [ebp - 0x38], 0xdb3b
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x100292da
or eax, 1
mov dword [esi + 0x1a5c], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1af2], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x1ae0], al
add ecx, 1
adc edx, 0
jne 0x100292c9
cmp ecx, 0x12
jb 0x100292b1
push 0x10070b20
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x1ae0]
mov ecx, edi
call fcn.10059d00
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029302
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov ecx, dword [0x1008d7e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002935a
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10029350
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002943b
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x100293aa
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100293a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002943b
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x100293f9
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100293ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002943b
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002944b
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10029441
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10029441
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov ecx, dword [0x100919c8]
mov edx, 0x1008b52c
cmp dword [0x1008b540], 0x10
push 0x10092748
cmovae edx, dword [0x1008b52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002aadb
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3dc4]
mov dword [ebp - 0x2c], 0xe98973a1
mov dword [ebp - 0x28], 0x7a2ebdfc
mov byte [ebp - 0x24], 0xc9
push 0x10092748
test al, 1
jne 0x100294fc
or eax, 1
mov dword [esi + 0x3dc4], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xbdd], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xbd4], al
add ecx, 1
adc edx, 0
jne 0x100294e8
cmp ecx, 9
jb 0x100294d0
push 0x100708f0
call fcn.1005fe9d
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xbd4]
mov ecx, edi
call fcn.10059a60
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029527
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x504]
mov dword [ebp - 0x1c], 0x99c06cef
test al, 1
jne 0x100295a9
or eax, 1
mov dword [esi + 0x504], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x238c], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x2388], al
add ecx, 1
adc edx, 0
jne 0x10029598
cmp ecx, 4
jb 0x10029580
push 0x10070940
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x2388]
mov ecx, edi
call fcn.10059ac0
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100295d0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005d1a0
mov byte [ebp - 4], 0x29
movaps xmm0, xmmword [0x1007e870]
mov eax, dword [esi + 0x34ec]
mov byte [ebp - 0x38], 0xc9
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10029659
or eax, 1
mov dword [esi + 0x34ec], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x2619], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x2608], al
add ecx, 1
adc edx, 0
jne 0x10029648
cmp ecx, 0x11
jb 0x10029630
push 0x10070990
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x2608]
mov ecx, edi
call fcn.10059b20
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029680
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005d1a0
push 0x1008b344
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xa8]
call fcn.1005d2f0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.1005e5c0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x1008b574
call fcn.1005d2f0
add esp, 4
mov byte [ebp - 4], 0x2e
movaps xmm0, xmmword [0x1007e260]
mov eax, dword [esi + 0x240]
mov word [ebp - 0x38], 0x7b3
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x1002974a
or eax, 1
mov dword [esi + 0x240], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x3922], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x3910], al
add ecx, 1
adc edx, 0
jne 0x10029739
cmp ecx, 0x12
jb 0x10029721
push 0x100709e0
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0x3910]
mov ecx, edi
call fcn.10059b80
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029772
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov ecx, dword [0x1008d7e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x100297ca
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100297c0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100298ab
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002981a
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10029810
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100298ab
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10029869
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002985f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100298ab
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x100298bb
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100298b1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100298b1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov ecx, dword [0x100919c8]
mov edx, 0x1008b52c
cmp dword [0x1008b540], 0x10
push 0x10092748
cmovae edx, dword [0x1008b52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002aadb
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1d8c]
mov dword [ebp - 0x2c], 0xb1a91bc1
mov dword [ebp - 0x28], 0x8ada735a
mov byte [ebp - 0x24], 0xa9
push 0x10092748
test al, 1
jne 0x1002996c
or eax, 1
mov dword [esi + 0x1d8c], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xacd], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xac4], al
add ecx, 1
adc edx, 0
jne 0x10029958
cmp ecx, 9
jb 0x10029940
push 0x100707b0
call fcn.1005fe9d
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xac4]
mov ecx, edi
call fcn.100598e0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029997
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0xbf0]
mov dword [ebp - 0x1c], 0xc1e0048f
test al, 1
jne 0x10029a19
or eax, 1
mov dword [esi + 0xbf0], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x3128], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x3124], al
add ecx, 1
adc edx, 0
jne 0x10029a08
cmp ecx, 4
jb 0x100299f0
push 0x10070800
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x3124]
mov ecx, edi
call fcn.10059940
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029a40
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005d1a0
mov byte [ebp - 4], 0x37
movaps xmm0, xmmword [0x1007ec40]
mov eax, dword [esi + 0x21d0]
mov byte [ebp - 0x38], 0xa9
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10029ac9
or eax, 1
mov dword [esi + 0x21d0], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1fa1], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x1f90], al
add ecx, 1
adc edx, 0
jne 0x10029ab8
cmp ecx, 0x11
jb 0x10029aa0
push 0x10070850
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0x1f90]
mov ecx, edi
call fcn.100599a0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029af0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005d1a0
push 0x1008b514
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa8]
call fcn.1005d2f0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.1005e5c0
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x1008b574
call fcn.1005d2f0
add esp, 4
mov byte [ebp - 4], 0x3c
movaps xmm0, xmmword [0x1007f360]
mov eax, dword [esi + 0x41c]
mov word [ebp - 0x38], 0x6fd3
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10029bba
or eax, 1
mov dword [esi + 0x41c], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x216], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x204], al
add ecx, 1
adc edx, 0
jne 0x10029ba9
cmp ecx, 0x12
jb 0x10029b91
push 0x100708a0
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0x204]
mov ecx, edi
call fcn.10059a00
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029be2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov ecx, dword [0x1008d7e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x10029c3a
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10029c30
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029d1b
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x10029c8a
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10029c80
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029d1b
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10029cd9
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10029ccf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029d1b
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x10029d2b
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10029d21
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10029d21
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov ecx, dword [0x100919c8]
mov edx, 0x1008b52c
cmp dword [0x1008b540], 0x10
push 0x10092748
cmovae edx, dword [0x1008b52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002aadb
mov ecx, 0x10092748
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029d60
sub ecx, edx
cmp ecx, 0x20
jae 0x10029d77
cmp ecx, 1
ja 0x1002aadb
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1314]
mov dword [ebp - 0x18], 0x19a11f2b
mov dword [ebp - 0x14], 0x3d008665
push 0x10092748
test al, 1
jne 0x10029dfc
or eax, 1
mov dword [esi + 0x1314], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1f0], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x1e8], al
add ecx, 1
adc edx, 0
jne 0x10029de8
cmp ecx, 8
jb 0x10029dd0
push 0x10070670
call fcn.1005fe9d
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1e8]
mov ecx, edi
call fcn.10059760
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029e27
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0x216c]
mov dword [ebp - 0x1c], 0x69e80065
test al, 1
jne 0x10029ea9
or eax, 1
mov dword [esi + 0x216c], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1258], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x1254], al
add ecx, 1
adc edx, 0
jne 0x10029e98
cmp ecx, 4
jb 0x10029e80
push 0x100706c0
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x1254]
mov ecx, edi
call fcn.100597c0
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029ed0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005d1a0
mov byte [ebp - 4], 0x45
movaps xmm0, xmmword [0x1007de90]
mov eax, dword [esi + 0x950]
mov byte [ebp - 0x38], 0x43
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10029f59
or eax, 1
mov dword [esi + 0x950], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1e5], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x1d4], al
add ecx, 1
adc edx, 0
jne 0x10029f48
cmp ecx, 0x11
jb 0x10029f30
push 0x10070710
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x1d4]
mov ecx, edi
call fcn.10059820
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029f80
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005d1a0
push 0x1008b154
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xa8]
call fcn.1005d2f0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.1005e5c0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x1008b574
call fcn.1005d2f0
add esp, 4
mov byte [ebp - 4], 0x4a
movaps xmm0, xmmword [0x1007e4a0]
mov eax, dword [esi + 0x1bd8]
mov word [ebp - 0x38], 0x6b39
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x1002a04a
or eax, 1
mov dword [esi + 0x1bd8], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x2a02], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x29f0], al
add ecx, 1
adc edx, 0
jne 0x1002a039
cmp ecx, 0x12
jb 0x1002a021
push 0x10070760
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x29f0]
mov ecx, edi
call fcn.10059880
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002a072
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov ecx, dword [0x1008d7e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002a0ca
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002a0c0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a1ab
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002a11a
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002a110
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a1ab
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002a169
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002a15f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a1ab
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002a1bb
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002a1b1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002a1b1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov ecx, dword [0x100919c8]
mov edx, 0x1008b52c
cmp dword [0x1008b540], 0x10
push 0x10092748
cmovae edx, dword [0x1008b52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002aadb
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3ba0]
mov dword [ebp - 0x18], 0xc931d3e9
mov dword [ebp - 0x14], 0xfdec5a0d
push 0x10092748
test al, 1
jne 0x1002a26c
or eax, 1
mov dword [esi + 0x3ba0], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x20dc], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x20d4], al
add ecx, 1
adc edx, 0
jne 0x1002a258
cmp ecx, 8
jb 0x1002a240
push 0x10070530
call fcn.1005fe9d
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x20d4]
mov ecx, edi
call fcn.100595e0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002a297
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x280c]
mov dword [ebp - 0x1c], 0xb978cca7
test al, 1
jne 0x1002a319
or eax, 1
mov dword [esi + 0x280c], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x20b8], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x20b4], al
add ecx, 1
adc edx, 0
jne 0x1002a308
cmp ecx, 4
jb 0x1002a2f0
push 0x10070580
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x20b4]
mov ecx, edi
call fcn.10059640
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002a340
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005d1a0
mov byte [ebp - 4], 0x53
movaps xmm0, xmmword [0x1007f070]
mov eax, dword [esi + 0x3aec]
mov byte [ebp - 0x38], 0x81
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x1002a3c9
or eax, 1
mov dword [esi + 0x3aec], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0xb39], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0xb28], al
add ecx, 1
adc edx, 0
jne 0x1002a3b8
cmp ecx, 0x11
jb 0x1002a3a0
push 0x100705d0
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0xb28]
mov ecx, edi
call fcn.100596a0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002a3f0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005d1a0
push 0x1008b344
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xa8]
call fcn.1005d2f0
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.1005e5c0
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x1008b574
call fcn.1005d2f0
add esp, 4
mov byte [ebp - 4], 0x58
movaps xmm0, xmmword [0x1007ea90]
mov eax, dword [esi + 0x12e0]
mov word [ebp - 0x38], 0xa7fb
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x1002a4ba
or eax, 1
mov dword [esi + 0x12e0], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x2bca], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x2bb8], al
add ecx, 1
adc edx, 0
jne 0x1002a4a9
cmp ecx, 0x12
jb 0x1002a491
push 0x10070620
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x2bb8]
mov ecx, edi
call fcn.10059700
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002a4e2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov ecx, dword [0x1008d7e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002a53a
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002a530
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a61b
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002a58a
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002a580
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a61b
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002a5d9
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002a5cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002a61b
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002a62b
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002a621
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002a621
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov ecx, dword [0x100919c8]
mov edx, 0x1008b52c
cmp dword [0x1008b540], 0x10
push 0x10092748
cmovae edx, dword [0x1008b52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002aadb
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xb6c]
mov dword [ebp - 0x18], 0x672b0539
mov dword [ebp - 0x14], 0x61f0a0f9
push 0x10092748
test al, 1
jne 0x1002a6dc
or eax, 1
mov dword [esi + 0xb6c], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x77c], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x774], al
add ecx, 1
adc edx, 0
jne 0x1002a6c8
cmp ecx, 8
jb 0x1002a6b0
push 0x100703f0
call fcn.1005fe9d
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x774]
mov ecx, edi
call fcn.10059460
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002a707
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005d1a0
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0x6c8]
mov dword [ebp - 0x1c], 0x17621a77
test al, 1
jne 0x1002a789
or eax, 1
mov dword [esi + 0x6c8], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0xdb4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0xdb0], al
add ecx, 1
adc edx, 0
jne 0x1002a778
cmp ecx, 4
jb 0x1002a760
push 0x10070440
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0xdb0]
mov ecx, edi
call fcn.100594c0
mov ecx, edi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002a7b0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x78]
call fcn.1005d1a0
mov byte [ebp - 4], 0x61
movaps xmm0, xmmword [0x1007e760]
mov eax, dword [esi + 0x3c40]
mov byte [ebp - 0x38], 0x51
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x1002a82b
or eax, 1
mov dword [esi + 0x3c40], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1901], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x18f0], al
add ecx, 1
adc edx, 0
jne 0x1002a81a
cmp ecx, 0x11
jb 0x1002a802
push 0x10070490
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x18f0]
mov ecx, edi
call fcn.10059520
mov ecx, edi
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002a858
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xc0]
call fcn.1005d1a0
push 0x1008b514
lea edx, [ebp - 0xc0]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xf0]
call fcn.1005d2f0
add esp, 4
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd8]
call fcn.1005e5c0
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0xd8]
push 0x1008b574
call fcn.1005d2f0
add esp, 4
mov byte [ebp - 4], 0x66
movaps xmm0, xmmword [0x1007e0c0]
mov eax, dword [esi + 0x25c]
mov word [ebp - 0x38], 0x712b
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x1002a92b
or eax, 1
mov dword [esi + 0x25c], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x1dba], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x1da8], al
add ecx, 1
adc edx, 0
jne 0x1002a91a
cmp ecx, 0x12
jb 0x1002a902
push 0x100704e0
call fcn.1005fe9d
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0x1da8]
mov ecx, esi
call fcn.10059580
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1002a953
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.1005d1a0
mov ecx, dword [0x1008d7e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xc4]
cmp edx, 0x10
jb 0x1002a9b1
mov ecx, dword [ebp - 0xd8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002a9a7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002aaa7
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
cmp edx, 0x10
jb 0x1002aa0a
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002aa00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002aaa7
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x1002aa5f
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002aa55
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002aaa7
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
cmp edx, 0x10
jb 0x1002aab7
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002aaad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002aaad
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005fde6
add esp, 8
mov ecx, dword [0x100919c8]
mov edx, 0x1008b52c
cmp dword [0x1008b540], 0x10
push 0x10092748
cmovae edx, dword [0x1008b52c]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005f599
mov esp, ebp
pop ebp
ret