Function at 0x10034b90
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10060b0b
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x1008200c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10082f0c]
push 0x10089738
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x18], 0x93b42e27
mov eax, dword [esi + 0x1588]
test al, 1
jne 0x10034c3c
or eax, 1
mov dword [esi + 0x1588], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x7f4], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x7f0], al
add ecx, 1
adc edx, 0
jne 0x10034c28
cmp ecx, 4
jb 0x10034c10
push 0x1006d3b0
call fcn.10059cbd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x7f0]
mov ecx, edi
call fcn.1004fa70
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034c60
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x80]
call fcn.10057050
mov dword [ebp - 4], 1
mov eax, dword [esi + 0x1740]
mov dword [ebp - 0x38], 0xfaf9242e
mov dword [ebp - 0x34], 0xa234c758
mov dword [ebp - 0x30], 0xf6b62771
mov word [ebp - 0x2c], 0xb14a
test al, 1
jne 0x10034cea
or eax, 1
mov dword [esi + 0x1740], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2a9a], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x2a8c], al
add ecx, 1
adc edx, 0
jne 0x10034cd9
cmp ecx, 0xe
jb 0x10034cc1
push 0x1006d400
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x2a8c]
mov ecx, edi
call fcn.1004fad0
mov ecx, edi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034d10
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x50]
call fcn.10057050
push 0x10082150
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x98]
call fcn.100571a0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x15]
lea ecx, [ebp - 0x68]
call fcn.100583e0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x68]
push 0x10082570
call fcn.100571a0
add esp, 4
mov byte [ebp - 4], 6
mov eax, dword [esi + 0x3d8]
mov dword [ebp - 0x38], 0xffe82a6a
mov dword [ebp - 0x34], 0xfd60d316
mov dword [ebp - 0x30], 0xf0a73764
mov word [ebp - 0x2c], 0xdc18
mov byte [ebp - 0x2a], 1
test al, 1
jne 0x10034de9
or eax, 1
mov dword [esi + 0x3d8], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2123], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x2114], al
add ecx, 1
adc edx, 0
jne 0x10034dd8
cmp ecx, 0xf
jb 0x10034dc0
push 0x1006d450
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x2114]
mov ecx, edi
call fcn.1004fb30
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10034e11
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov ecx, dword [0x100847e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x54]
cmp edx, 0x10
jb 0x10034e6a
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034e60
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034f48
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x10034eba
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034eb0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034f48
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x10034f09
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034eff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034f48
push edx
push ecx
call fcn.10059c06
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
cmp edx, 0x10
jb 0x10034f58
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034f4e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10034f4e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10059c06
add esp, 8
mov ecx, dword [0x100889bc]
mov edx, 0x10082528
cmp dword [0x1008253c], 0x10
push 0x10089738
cmovae edx, dword [0x10082528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100372a9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x35b0]
mov dword [ebp - 0x18], 0xe914902b
push 0x10089738
push 0
push 0
test al, 1
jne 0x10034ffc
or eax, 1
mov dword [esi + 0x35b0], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0xfa8], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0xfa4], al
add ecx, 1
adc edx, 0
jne 0x10034fe8
cmp ecx, 4
jb 0x10034fd0
push 0x1006d2c0
call fcn.10059cbd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xfa4]
mov ecx, edi
call fcn.1004f950
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035020
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.10057050
mov dword [ebp - 4], 9
mov eax, dword [esi + 0x1000]
mov dword [ebp - 0x38], 0x80599a22
mov dword [ebp - 0x34], 0x841cbf76
mov dword [ebp - 0x30], 0x8c16997d
mov word [ebp - 0x2c], 0xc964
test al, 1
jne 0x100350aa
or eax, 1
mov dword [esi + 0x1000], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x2d92], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x2d84], al
add ecx, 1
adc edx, 0
jne 0x10035099
cmp ecx, 0xe
jb 0x10035081
push 0x1006d310
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x2d84]
mov ecx, edi
call fcn.1004f9b0
mov ecx, edi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100350d0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x50]
call fcn.10057050
push 0x10082340
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x98]
call fcn.100571a0
add esp, 4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x2d]
lea ecx, [ebp - 0x80]
call fcn.100583e0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10082570
call fcn.100571a0
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [esi + 0x1a70]
mov dword [ebp - 0x20], 0x85489466
mov dword [ebp - 0x1c], 0xdb48ab38
mov dword [ebp - 0x18], 0x8a078968
mov word [ebp - 0x14], 0xa436
mov byte [ebp - 0x12], 0x29
test al, 1
jne 0x100351a9
or eax, 1
mov dword [esi + 0x1a70], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x284f], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x2840], al
add ecx, 1
adc edx, 0
jne 0x10035198
cmp ecx, 0xf
jb 0x10035180
push 0x1006d360
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x2840]
mov ecx, edi
call fcn.1004fa10
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100351d1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov ecx, dword [0x100847e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x1003522a
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035220
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035308
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003527a
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035270
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035308
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x100352c9
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100352bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035308
push edx
push ecx
call fcn.10059c06
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
cmp edx, 0x10
jb 0x10035318
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003530e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003530e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10059c06
add esp, 8
mov ecx, dword [0x100889bc]
mov edx, 0x10082528
cmp dword [0x1008253c], 0x10
push 0x10089738
cmovae edx, dword [0x10082528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100372a9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x22b8]
mov dword [ebp - 0x18], 0xbda634d5
push 0x10089738
push 0
push 0
test al, 1
jne 0x100353bc
or eax, 1
mov dword [esi + 0x22b8], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3094], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x3090], al
add ecx, 1
adc edx, 0
jne 0x100353a8
cmp ecx, 4
jb 0x10035390
push 0x1006d1d0
call fcn.10059cbd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3090]
mov ecx, edi
call fcn.1004f830
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100353e0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.10057050
mov dword [ebp - 4], 0x11
mov eax, dword [esi + 0x2448]
mov dword [ebp - 0x38], 0xd4eb3edc
mov dword [ebp - 0x34], 0xfa584b98
mov dword [ebp - 0x30], 0xd8a43d83
mov word [ebp - 0x2c], 0x3d8a
test al, 1
jne 0x1003546a
or eax, 1
mov dword [esi + 0x2448], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x20da], 1
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x20cc], al
add ecx, 1
adc edx, 0
jne 0x10035459
cmp ecx, 0xe
jb 0x10035441
push 0x1006d220
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x20cc]
mov ecx, edi
call fcn.1004f890
mov ecx, edi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035490
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x50]
call fcn.10057050
push 0x10082510
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x98]
call fcn.100571a0
add esp, 4
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x2d]
lea ecx, [ebp - 0x80]
call fcn.100583e0
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10082570
call fcn.100571a0
add esp, 4
mov byte [ebp - 4], 0x16
mov eax, dword [esi + 0x20fc]
mov dword [ebp - 0x20], 0xd1fa3098
mov dword [ebp - 0x1c], 0xa50c5fd6
mov dword [ebp - 0x18], 0xdeb52d96
mov word [ebp - 0x14], 0x50d8
mov byte [ebp - 0x12], 0x6d
test al, 1
jne 0x10035569
or eax, 1
mov dword [esi + 0x20fc], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1fc3], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x1fb4], al
add ecx, 1
adc edx, 0
jne 0x10035558
cmp ecx, 0xf
jb 0x10035540
push 0x1006d270
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x1fb4]
mov ecx, edi
call fcn.1004f8f0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035591
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov ecx, dword [0x100847e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x100355ea
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100355e0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100356c8
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x1003563a
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035630
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100356c8
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x10035689
mov ecx, dword [ebp - 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003567f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100356c8
push edx
push ecx
call fcn.10059c06
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
cmp edx, 0x10
jb 0x100356d8
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100356ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100356ce
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10059c06
add esp, 8
mov ecx, dword [0x100889bc]
mov edx, 0x10082528
cmp dword [0x1008253c], 0x10
push 0x10089738
cmovae edx, dword [0x10082528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100372a9
mov ecx, 0x10089738
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035710
sub ecx, edx
cmp ecx, 0x20
jb 0x100372a9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2da0]
mov dword [ebp - 0x34], 0x257739bd
mov dword [ebp - 0x30], 0x8a96d1b4
mov byte [ebp - 0x2c], 0xd5
push 0x10089738
test al, 1
jne 0x100357ac
or eax, 1
mov dword [esi + 0x2da0], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0xcdd], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0xcd4], al
add ecx, 1
adc edx, 0
jne 0x10035798
cmp ecx, 9
jb 0x10035780
push 0x1006d090
call fcn.10059cbd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xcd4]
mov ecx, edi
call fcn.1004f6b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x30], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100357d7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0x1a48]
mov dword [ebp - 0x18], 0x553e26f3
test al, 1
jne 0x10035859
or eax, 1
mov dword [esi + 0x1a48], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1754], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x1750], al
add ecx, 1
adc edx, 0
jne 0x10035848
cmp ecx, 4
jb 0x10035830
push 0x1006d0e0
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x1750]
mov ecx, edi
call fcn.1004f710
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035886
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.10057050
mov byte [ebp - 4], 0x1b
mov eax, dword [esi + 0x3f0]
mov dword [ebp - 0x20], 0x3c732cfa
mov dword [ebp - 0x1c], 0x8a8c9de8
mov dword [ebp - 0x18], 0x303c2fa5
mov word [ebp - 0x14], 0xebfa
test al, 1
jne 0x10035919
or eax, 1
mov dword [esi + 0x3f0], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x1ece], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x1ec0], al
add ecx, 1
adc edx, 0
jne 0x10035908
cmp ecx, 0xe
jb 0x100358f0
push 0x1006d130
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x1ec0]
mov ecx, edi
call fcn.1004f770
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035940
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.10057050
push 0x10082150
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x98]
call fcn.100571a0
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x2d]
lea ecx, [ebp - 0x80]
call fcn.100583e0
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x18], esp
lea edx, [ebp - 0x80]
push 0x10082570
call fcn.100571a0
add esp, 4
mov byte [ebp - 4], 0x20
mov eax, dword [esi + 0x1694]
mov dword [ebp - 0x48], 0x396222be
mov dword [ebp - 0x44], 0xd5d889a6
mov dword [ebp - 0x40], 0x362d3fb0
mov word [ebp - 0x3c], 0x86a8
mov byte [ebp - 0x3a], 0xb9
test al, 1
jne 0x10035a19
or eax, 1
mov dword [esi + 0x1694], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x370b], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x36fc], al
add ecx, 1
adc edx, 0
jne 0x10035a08
cmp ecx, 0xf
jb 0x100359f0
push 0x1006d180
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x36fc]
mov ecx, edi
call fcn.1004f7d0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035a41
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov ecx, dword [0x100847e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x10035a99
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035a8f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035b7d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x10035ae9
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035adf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035b7d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x10035b38
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035b2e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035b7d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x10035b8d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035b83
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10035b83
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10059c06
add esp, 8
mov ecx, dword [0x100889bc]
mov edx, 0x10082528
cmp dword [0x1008253c], 0x10
push 0x10089738
cmovae edx, dword [0x10082528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100372a9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x262c]
mov dword [ebp - 0x34], 0xc3555d33
mov dword [ebp - 0x30], 0xae1449ac
mov byte [ebp - 0x2c], 0x5b
push 0x10089738
test al, 1
jne 0x10035c3c
or eax, 1
mov dword [esi + 0x262c], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x3579], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x3570], al
add ecx, 1
adc edx, 0
jne 0x10035c28
cmp ecx, 9
jb 0x10035c10
push 0x1006cf50
call fcn.10059cbd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3570]
mov ecx, edi
call fcn.1004f530
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035c67
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x2e4c]
mov dword [ebp - 0x18], 0xb31c427d
test al, 1
jne 0x10035ce9
or eax, 1
mov dword [esi + 0x2e4c], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x8c4], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x8c0], al
add ecx, 1
adc edx, 0
jne 0x10035cd8
cmp ecx, 4
jb 0x10035cc0
push 0x1006cfa0
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x8c0]
mov ecx, edi
call fcn.1004f590
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035d16
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.10057050
mov byte [ebp - 4], 0x29
mov eax, dword [esi + 0x2c18]
mov dword [ebp - 0x20], 0xda514874
mov dword [ebp - 0x1c], 0xae0e05f0
mov dword [ebp - 0x18], 0xd61e4b2b
mov word [ebp - 0x14], 0x73e2
test al, 1
jne 0x10035da9
or eax, 1
mov dword [esi + 0x2c18], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x2aaa], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x2a9c], al
add ecx, 1
adc edx, 0
jne 0x10035d98
cmp ecx, 0xe
jb 0x10035d80
push 0x1006cff0
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x2a9c]
mov ecx, edi
call fcn.1004f5f0
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035dd0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.10057050
push 0x10082340
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x98]
call fcn.100571a0
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.100583e0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10082570
call fcn.100571a0
add esp, 4
mov byte [ebp - 4], 0x2e
mov eax, dword [esi + 0x3258]
mov dword [ebp - 0x48], 0xdf404630
mov dword [ebp - 0x44], 0xf15a11be
mov dword [ebp - 0x40], 0xd00f5b3e
mov word [ebp - 0x3c], 0x1eb0
mov byte [ebp - 0x3a], 0x3b
test al, 1
jne 0x10035ea9
or eax, 1
mov dword [esi + 0x3258], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0xf27], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0xf18], al
add ecx, 1
adc edx, 0
jne 0x10035e98
cmp ecx, 0xf
jb 0x10035e80
push 0x1006d040
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0xf18]
mov ecx, edi
call fcn.1004f650
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035ed1
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov ecx, dword [0x100847e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x10035f29
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035f1f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003600d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x10035f79
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035f6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003600d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x10035fc8
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035fbe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003600d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003601d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036013
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036013
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10059c06
add esp, 8
mov ecx, dword [0x100889bc]
mov edx, 0x10082528
cmp dword [0x1008253c], 0x10
push 0x10089738
cmovae edx, dword [0x10082528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100372a9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1044]
mov dword [ebp - 0x34], 0xf73d2b45
mov dword [ebp - 0x30], 0xf83c1770
mov byte [ebp - 0x2c], 0x2d
push 0x10089738
test al, 1
jne 0x100360cc
or eax, 1
mov dword [esi + 0x1044], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov byte [esi + 0x17e5], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x17dc], al
add ecx, 1
adc edx, 0
jne 0x100360b8
cmp ecx, 9
jb 0x100360a0
push 0x1006ce10
call fcn.10059cbd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x17dc]
mov ecx, edi
call fcn.1004f3b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100360f7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0x20b8]
mov dword [ebp - 0x18], 0x8774340b
test al, 1
jne 0x10036179
or eax, 1
mov dword [esi + 0x20b8], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x1a00], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x19fc], al
add ecx, 1
adc edx, 0
jne 0x10036168
cmp ecx, 4
jb 0x10036150
push 0x1006ce60
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x19fc]
mov ecx, edi
call fcn.1004f410
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100361a6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.10057050
mov byte [ebp - 4], 0x37
mov eax, dword [esi + 0xbf0]
mov dword [ebp - 0x20], 0xee393e02
mov dword [ebp - 0x1c], 0xf8265b2c
mov dword [ebp - 0x18], 0xe2763d5d
mov word [ebp - 0x14], 0x2d3e
test al, 1
jne 0x10036239
or eax, 1
mov dword [esi + 0xbf0], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0xeba], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0xeac], al
add ecx, 1
adc edx, 0
jne 0x10036228
cmp ecx, 0xe
jb 0x10036210
push 0x1006ceb0
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0xeac]
mov ecx, edi
call fcn.1004f470
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036260
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.10057050
push 0x10082510
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x98]
call fcn.100571a0
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.100583e0
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10082570
call fcn.100571a0
add esp, 4
mov byte [ebp - 4], 0x3c
mov eax, dword [esi + 0x1f38]
mov dword [ebp - 0x48], 0xeb283046
mov dword [ebp - 0x44], 0xa7724f62
mov dword [ebp - 0x40], 0xe4672d48
mov word [ebp - 0x3c], 0x406c
mov byte [ebp - 0x3a], 0x13
test al, 1
jne 0x10036339
or eax, 1
mov dword [esi + 0x1f38], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x106f], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x1060], al
add ecx, 1
adc edx, 0
jne 0x10036328
cmp ecx, 0xf
jb 0x10036310
push 0x1006cf00
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0x1060]
mov ecx, edi
call fcn.1004f4d0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036361
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov ecx, dword [0x100847e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x100363b9
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100363af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003649d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x10036409
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100363ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003649d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x10036458
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003644e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003649d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x100364ad
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100364a3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100364a3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10059c06
add esp, 8
mov ecx, dword [0x100889bc]
mov edx, 0x10082528
cmp dword [0x1008253c], 0x10
push 0x10089738
cmovae edx, dword [0x10082528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100372a9
mov ecx, 0x10089738
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100364e1
sub ecx, edx
cmp ecx, 0x20
jb 0x100372a9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1890]
mov dword [ebp - 0x28], 0xd13b9fbb
mov dword [ebp - 0x24], 0xaf72dcbf
push 0x10089738
test al, 1
jne 0x1003656c
or eax, 1
mov dword [esi + 0x1890], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x3664], 1
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0x365c], al
add ecx, 1
adc edx, 0
jne 0x10036558
cmp ecx, 8
jb 0x10036540
push 0x1006ccd0
call fcn.10059cbd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x365c]
mov ecx, edi
call fcn.1004f230
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036597
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0xf28]
mov dword [ebp - 0x18], 0xa17280f5
test al, 1
jne 0x10036619
or eax, 1
mov dword [esi + 0xf28], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x1544], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x1540], al
add ecx, 1
adc edx, 0
jne 0x10036608
cmp ecx, 4
jb 0x100365f0
push 0x1006cd20
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x1540]
mov ecx, edi
call fcn.1004f290
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036646
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.10057050
mov byte [ebp - 4], 0x45
mov eax, dword [esi + 0x3048]
mov dword [ebp - 0x20], 0xc83f8afc
mov dword [ebp - 0x1c], 0x806885aa
mov dword [ebp - 0x18], 0xc47089a3
mov word [ebp - 0x14], 0xf3b8
test al, 1
jne 0x100366d9
or eax, 1
mov dword [esi + 0x3048], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x1fd2], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x1fc4], al
add ecx, 1
adc edx, 0
jne 0x100366c8
cmp ecx, 0xe
jb 0x100366b0
push 0x1006cd70
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x1fc4]
mov ecx, edi
call fcn.1004f2f0
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036700
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.10057050
push 0x10082150
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x98]
call fcn.100571a0
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.100583e0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10082570
call fcn.100571a0
add esp, 4
mov byte [ebp - 4], 0x4a
mov eax, dword [esi + 0xa68]
mov dword [ebp - 0x48], 0xcd2e84b8
mov dword [ebp - 0x44], 0xdf3c91e4
mov dword [ebp - 0x40], 0xc26199b6
mov word [ebp - 0x3c], 0x9eea
mov byte [ebp - 0x3a], 0x5d
test al, 1
jne 0x100367d9
or eax, 1
mov dword [esi + 0xa68], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x133f], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x1330], al
add ecx, 1
adc edx, 0
jne 0x100367c8
cmp ecx, 0xf
jb 0x100367b0
push 0x1006cdc0
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x1330]
mov ecx, edi
call fcn.1004f350
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036801
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov ecx, dword [0x100847e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x10036859
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003684f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003693d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x100368a9
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003689f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003693d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x100368f8
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100368ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003693d
push edx
push ecx
call fcn.10059c06
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x1003694d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036943
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036943
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10059c06
add esp, 8
mov ecx, dword [0x100889bc]
mov edx, 0x10082528
cmp dword [0x1008253c], 0x10
push 0x10089738
cmovae edx, dword [0x10082528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100372a9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x204]
mov dword [ebp - 0x28], 0x57cfafe5
mov dword [ebp - 0x24], 0x37f0cad5
push 0x10089738
test al, 1
jne 0x100369fc
or eax, 1
mov dword [esi + 0x204], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0xc10], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [ecx + esi + 0xc08], al
add ecx, 1
adc edx, 0
jne 0x100369e8
cmp ecx, 8
jb 0x100369d0
push 0x1006cb90
call fcn.10059cbd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xc08]
mov ecx, edi
call fcn.1004f0b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036a27
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x3718]
mov dword [ebp - 0x18], 0x2786b0ab
test al, 1
jne 0x10036aa9
or eax, 1
mov dword [esi + 0x3718], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x22dc], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x22d8], al
add ecx, 1
adc edx, 0
jne 0x10036a98
cmp ecx, 4
jb 0x10036a80
push 0x1006cbe0
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x22d8]
mov ecx, edi
call fcn.1004f110
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036ad6
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.10057050
mov byte [ebp - 4], 0x53
mov eax, dword [esi + 0x1f08]
mov dword [ebp - 0x20], 0x4ecbbaa2
mov dword [ebp - 0x1c], 0x18ea93c0
mov dword [ebp - 0x18], 0x4284b9fd
mov word [ebp - 0x14], 0xe5d2
test al, 1
jne 0x10036b69
or eax, 1
mov dword [esi + 0x1f08], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x1c92], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x1c84], al
add ecx, 1
adc edx, 0
jne 0x10036b58
cmp ecx, 0xe
jb 0x10036b40
push 0x1006cc30
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0x1c84]
mov ecx, edi
call fcn.1004f170
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036b90
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x68]
call fcn.10057050
push 0x10082340
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x98]
call fcn.100571a0
add esp, 4
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x80]
call fcn.100583e0
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0x80]
push 0x10082570
call fcn.100571a0
add esp, 4
mov byte [ebp - 4], 0x58
mov eax, dword [esi + 0x880]
mov dword [ebp - 0x48], 0x4bdab4e6
mov dword [ebp - 0x44], 0x47be878e
mov dword [ebp - 0x40], 0x4495a9e8
mov word [ebp - 0x3c], 0x8880
mov byte [ebp - 0x3a], 0xdf
test al, 1
jne 0x10036c69
or eax, 1
mov dword [esi + 0x880], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x2abf], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x2ab0], al
add ecx, 1
adc edx, 0
jne 0x10036c58
cmp ecx, 0xf
jb 0x10036c40
push 0x1006cc80
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x2ab0]
mov ecx, edi
call fcn.1004f1d0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036c91
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov ecx, dword [0x100847e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x6c]
cmp edx, 0x10
jb 0x10036ce9
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036cdf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036dcd
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x10036d39
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036d2f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036dcd
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x10036d88
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036d7e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036dcd
push edx
push ecx
call fcn.10059c06
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x10036ddd
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036dd3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036dd3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10059c06
add esp, 8
mov ecx, dword [0x100889bc]
mov edx, 0x10082528
cmp dword [0x1008253c], 0x10
push 0x10089738
cmovae edx, dword [0x10082528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x100372a9
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xddc]
mov dword [ebp - 0x28], 0x8f6ba3f1
mov dword [ebp - 0x24], 0x57982a7b
push 0x10089738
test al, 1
jne 0x10036e8c
or eax, 1
mov dword [esi + 0xddc], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x2168], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x28]
mov byte [esi + ecx + 0x2160], al
add ecx, 1
adc edx, 0
jne 0x10036e78
cmp ecx, 8
jb 0x10036e60
push 0x1006ca50
call fcn.10059cbd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2160]
mov ecx, edi
call fcn.1004ef30
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x24], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036eb7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.10057050
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0x1bf0]
mov dword [ebp - 0x18], 0xff22bcbf
test al, 1
jne 0x10036f39
or eax, 1
mov dword [esi + 0x1bf0], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x5d0], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x5cc], al
add ecx, 1
adc edx, 0
jne 0x10036f28
cmp ecx, 4
jb 0x10036f10
push 0x1006caa0
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0x5cc]
mov ecx, edi
call fcn.1004ef90
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036f60
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x80]
call fcn.10057050
mov byte [ebp - 4], 0x61
mov eax, dword [esi + 0xc94]
mov dword [ebp - 0x20], 0x966fb6b6
mov dword [ebp - 0x1c], 0x7882736e
mov dword [ebp - 0x18], 0x9a20b5e9
mov word [ebp - 0x14], 0x57c
test al, 1
jne 0x10036fe9
or eax, 1
mov dword [esi + 0xc94], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov byte [esi + 0x39b2], 1
nop
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x39a4], al
add ecx, 1
adc edx, 0
jne 0x10036fd8
cmp ecx, 0xe
jb 0x10036fc0
push 0x1006caf0
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x39a4]
mov ecx, edi
call fcn.1004eff0
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037016
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xb0]
call fcn.10057050
push 0x10082510
lea edx, [ebp - 0xb0]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xe0]
call fcn.100571a0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0xc8]
call fcn.100583e0
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x30], esp
lea edx, [ebp - 0xc8]
push 0x10082570
call fcn.100571a0
add esp, 4
mov byte [ebp - 4], 0x66
mov eax, dword [esi + 0x7bc]
mov dword [ebp - 0x48], 0x937eb8f2
mov dword [ebp - 0x44], 0x27d66720
mov dword [ebp - 0x40], 0x9c31a5fc
mov word [ebp - 0x3c], 0x682e
mov byte [ebp - 0x3a], 0xb7
test al, 1
jne 0x100370f9
or eax, 1
mov dword [esi + 0x7bc], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov byte [esi + 0x2e2f], 1
nop
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x2e20], al
add ecx, 1
adc edx, 0
jne 0x100370e8
cmp ecx, 0xf
jb 0x100370d0
push 0x1006cb40
call fcn.10059cbd
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0x2e20]
mov ecx, esi
call fcn.1004f050
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037121
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.10057050
mov ecx, dword [0x100847e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xb4]
cmp edx, 0x10
jb 0x1003717f
mov ecx, dword [ebp - 0xc8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037175
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037275
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xcc]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
cmp edx, 0x10
jb 0x100371d8
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100371ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037275
push edx
push ecx
call fcn.10059c06
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
cmp edx, 0x10
jb 0x1003722d
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037223
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037275
push edx
push ecx
call fcn.10059c06
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
cmp edx, 0x10
jb 0x10037285
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003727b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003727b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10059c06
add esp, 8
mov ecx, dword [0x100889bc]
mov edx, 0x10082528
cmp dword [0x1008253c], 0x10
push 0x10089738
cmovae edx, dword [0x10082528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100593b9
mov esp, ebp
pop ebp
ret