Function at 0x10027200
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100614d4
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [0x1008700c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10087f0c]
push 0x1008e740
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x1c], 0x1bee6cc1
mov eax, dword [esi + 0x3acc]
test al, 1
jne 0x100272ac
or eax, 1
mov dword [esi + 0x3acc], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3804], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x3800], al
add ecx, 1
adc edx, 0
jne 0x10027298
cmp ecx, 4
jb 0x10027280
push 0x1006d950
call fcn.1005d3bd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3800]
mov ecx, edi
call fcn.100574c0
mov ecx, edi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100272d0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x78]
call fcn.1005a6c0
mov dword [ebp - 4], 1
movaps xmm0, xmmword [0x1007bf10]
mov eax, dword [esi + 0x13f4]
mov byte [ebp - 0x24], 0xe7
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10027359
or eax, 1
mov dword [esi + 0x13f4], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x170d], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x16fc], al
add ecx, 1
adc edx, 0
jne 0x10027348
cmp ecx, 0x11
jb 0x10027330
push 0x1006d9a0
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x16fc]
mov ecx, edi
call fcn.10057520
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027380
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005a6c0
push 0x10087150
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa8]
call fcn.1005a810
add esp, 4
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x90]
call fcn.1005bae0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x90]
push 0x10087570
call fcn.1005a810
add esp, 4
mov byte [ebp - 4], 6
movaps xmm0, xmmword [0x1007c380]
mov eax, dword [esi + 0x2a7c]
mov word [ebp - 0x38], 0x79d
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10027459
or eax, 1
mov dword [esi + 0x2a7c], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1262], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x1250], al
add ecx, 1
adc edx, 0
jne 0x10027448
cmp ecx, 0x12
jb 0x10027430
push 0x1006d9f0
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x1250]
mov ecx, edi
call fcn.10057580
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027481
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov ecx, dword [0x100897e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x7c]
cmp edx, 0x10
jb 0x100274dd
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100274d3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100275be
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
cmp edx, 0x10
jb 0x10027530
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10027526
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100275be
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002757f
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10027575
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100275be
push edx
push ecx
call fcn.1005d306
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x100275ce
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100275c4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100275c4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d306
add esp, 8
mov ecx, dword [0x1008d9c4]
mov edx, 0x10087528
cmp dword [0x1008753c], 0x10
push 0x1008e740
cmovae edx, dword [0x10087528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002985b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1bc]
mov dword [ebp - 0x1c], 0xf9a41cb3
push 0x1008e740
push 0
push 0
test al, 1
jne 0x1002767c
or eax, 1
mov dword [esi + 0x1bc], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x124c], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x1248], al
add ecx, 1
adc edx, 0
jne 0x10027668
cmp ecx, 4
jb 0x10027650
push 0x1006d860
call fcn.1005d3bd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1248]
mov ecx, edi
call fcn.100573a0
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100276a3
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005a6c0
mov dword [ebp - 4], 9
movaps xmm0, xmmword [0x1007c320]
mov eax, dword [esi + 0x3b34]
mov byte [ebp - 0x24], 0x95
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10027729
or eax, 1
mov dword [esi + 0x3b34], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x15ad], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x159c], al
add ecx, 1
adc edx, 0
jne 0x10027718
cmp ecx, 0x11
jb 0x10027700
push 0x1006d8b0
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x159c]
mov ecx, edi
call fcn.10057400
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027750
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005a6c0
push 0x10087340
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa8]
call fcn.1005a810
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x27]
lea ecx, [ebp - 0x78]
call fcn.1005bae0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x10087570
call fcn.1005a810
add esp, 4
mov byte [ebp - 4], 0xe
movaps xmm0, xmmword [0x1007be60]
mov eax, dword [esi + 0x1a60]
mov word [ebp - 0x38], 0x77ef
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x1002781a
or eax, 1
mov dword [esi + 0x1a60], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x369a], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x3688], al
add ecx, 1
adc edx, 0
jne 0x10027809
cmp ecx, 0x12
jb 0x100277f1
push 0x1006d900
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x3688]
mov ecx, edi
call fcn.10057460
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027842
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov ecx, dword [0x100897e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002789b
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10027891
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002797c
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x100278eb
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100278e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002797c
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x1002793a
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10027930
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002797c
push edx
push ecx
call fcn.1005d306
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002798c
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10027982
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10027982
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d306
add esp, 8
mov ecx, dword [0x1008d9c4]
mov edx, 0x10087528
cmp dword [0x1008753c], 0x10
push 0x1008e740
cmovae edx, dword [0x10087528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002985b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3a10]
mov dword [ebp - 0x1c], 0xc1a2c87f
push 0x1008e740
push 0
push 0
test al, 1
jne 0x10027a2e
or eax, 1
mov dword [esi + 0x3a10], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x39b0], 1
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x39ac], al
add ecx, 1
adc edx, 0
jne 0x10027a1a
cmp ecx, 4
jb 0x10027a02
push 0x1006d770
call fcn.1005d3bd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x39ac]
mov ecx, edi
call fcn.10057280
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027a55
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005a6c0
mov dword [ebp - 4], 0x11
movaps xmm0, xmmword [0x1007c2b0]
mov eax, dword [esi + 0x8a8]
mov byte [ebp - 0x24], 0x59
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10027ad9
or eax, 1
mov dword [esi + 0x8a8], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2f41], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x2f30], al
add ecx, 1
adc edx, 0
jne 0x10027ac8
cmp ecx, 0x11
jb 0x10027ab0
push 0x1006d7c0
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x2f30]
mov ecx, edi
call fcn.100572e0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027b00
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005a6c0
push 0x10087510
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xa8]
call fcn.1005a810
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x27]
lea ecx, [ebp - 0x78]
call fcn.1005bae0
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x10087570
call fcn.1005a810
add esp, 4
mov byte [ebp - 4], 0x16
movaps xmm0, xmmword [0x1007bd70]
mov eax, dword [esi + 0x2f0]
mov word [ebp - 0x38], 0xa323
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10027bca
or eax, 1
mov dword [esi + 0x2f0], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3a02], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x39f0], al
add ecx, 1
adc edx, 0
jne 0x10027bb9
cmp ecx, 0x12
jb 0x10027ba1
push 0x1006d810
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x39f0]
mov ecx, edi
call fcn.10057340
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027bf2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov ecx, dword [0x100897e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x10027c4b
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10027c41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027d2c
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x10027c9b
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10027c91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027d2c
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10027cea
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10027ce0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027d2c
push edx
push ecx
call fcn.1005d306
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x10027d3c
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10027d32
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10027d32
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d306
add esp, 8
mov ecx, dword [0x1008d9c4]
mov edx, 0x10087528
cmp dword [0x1008753c], 0x10
push 0x1008e740
cmovae edx, dword [0x10087528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002985b
mov ecx, 0x1008e740
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027d70
sub ecx, edx
cmp ecx, 0x20
jae 0x10027d87
cmp ecx, 1
ja 0x1002985b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xda4]
mov dword [ebp - 0x2c], 0x390daf29
mov dword [ebp - 0x28], 0x802e1762
mov byte [ebp - 0x24], 0x41
push 0x1008e740
test al, 1
jne 0x10027e0c
or eax, 1
mov dword [esi + 0xda4], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3b95], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x3b8c], al
add ecx, 1
adc edx, 0
jne 0x10027df8
cmp ecx, 9
jb 0x10027de0
push 0x1006d630
call fcn.1005d3bd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3b8c]
mov ecx, edi
call fcn.10057100
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x28], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027e37
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0xcac]
mov dword [ebp - 0x1c], 0x4944b067
test al, 1
jne 0x10027eb9
or eax, 1
mov dword [esi + 0xcac], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3590], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x358c], al
add ecx, 1
adc edx, 0
jne 0x10027ea8
cmp ecx, 4
jb 0x10027e90
push 0x1006d680
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x358c]
mov ecx, edi
call fcn.10057160
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027ee0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005a6c0
mov byte [ebp - 4], 0x1b
movaps xmm0, xmmword [0x1007bad0]
mov eax, dword [esi + 0x2ab4]
mov byte [ebp - 0x38], 0x41
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10027f69
or eax, 1
mov dword [esi + 0x2ab4], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2835], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x2824], al
add ecx, 1
adc edx, 0
jne 0x10027f58
cmp ecx, 0x11
jb 0x10027f40
push 0x1006d6d0
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x2824]
mov ecx, edi
call fcn.100571c0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10027f90
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005a6c0
push 0x10087150
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xa8]
call fcn.1005a810
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x27]
lea ecx, [ebp - 0x78]
call fcn.1005bae0
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x78]
push 0x10087570
call fcn.1005a810
add esp, 4
mov byte [ebp - 4], 0x20
movaps xmm0, xmmword [0x1007c180]
mov eax, dword [esi + 0x1948]
mov word [ebp - 0x38], 0xdb3b
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x1002805a
or eax, 1
mov dword [esi + 0x1948], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x19ae], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x199c], al
add ecx, 1
adc edx, 0
jne 0x10028049
cmp ecx, 0x12
jb 0x10028031
push 0x1006d720
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x199c]
mov ecx, edi
call fcn.10057220
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028082
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov ecx, dword [0x100897e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x100280da
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100280d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100281bb
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002812a
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028120
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100281bb
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10028179
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002816f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100281bb
push edx
push ecx
call fcn.1005d306
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x100281cb
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100281c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100281c1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d306
add esp, 8
mov ecx, dword [0x1008d9c4]
mov edx, 0x10087528
cmp dword [0x1008753c], 0x10
push 0x1008e740
cmovae edx, dword [0x10087528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002985b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3b04]
mov dword [ebp - 0x2c], 0xe98973a1
mov dword [ebp - 0x28], 0x7a2ebdfc
mov byte [ebp - 0x24], 0xc9
push 0x1008e740
test al, 1
jne 0x1002827c
or eax, 1
mov dword [esi + 0x3b04], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xc2d], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xc24], al
add ecx, 1
adc edx, 0
jne 0x10028268
cmp ecx, 9
jb 0x10028250
push 0x1006d4f0
call fcn.1005d3bd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xc24]
mov ecx, edi
call fcn.10056f80
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100282a7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x5e4]
mov dword [ebp - 0x1c], 0x99c06cef
test al, 1
jne 0x10028329
or eax, 1
mov dword [esi + 0x5e4], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x21dc], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x21d8], al
add ecx, 1
adc edx, 0
jne 0x10028318
cmp ecx, 4
jb 0x10028300
push 0x1006d540
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x21d8]
mov ecx, edi
call fcn.10056fe0
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028350
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005a6c0
mov byte [ebp - 4], 0x29
movaps xmm0, xmmword [0x1007b6d0]
mov eax, dword [esi + 0x3188]
mov byte [ebp - 0x38], 0xc9
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x100283d9
or eax, 1
mov dword [esi + 0x3188], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x23fd], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x23ec], al
add ecx, 1
adc edx, 0
jne 0x100283c8
cmp ecx, 0x11
jb 0x100283b0
push 0x1006d590
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x23ec]
mov ecx, edi
call fcn.10057040
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028400
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005a6c0
push 0x10087340
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xa8]
call fcn.1005a810
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.1005bae0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x10087570
call fcn.1005a810
add esp, 4
mov byte [ebp - 4], 0x2e
movaps xmm0, xmmword [0x1007b0c0]
mov eax, dword [esi + 0x2a8]
mov word [ebp - 0x38], 0x7b3
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x100284ca
or eax, 1
mov dword [esi + 0x2a8], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x36ba], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x36a8], al
add ecx, 1
adc edx, 0
jne 0x100284b9
cmp ecx, 0x12
jb 0x100284a1
push 0x1006d5e0
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0x36a8]
mov ecx, edi
call fcn.100570a0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100284f2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov ecx, dword [0x100897e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x1002854a
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028540
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002862b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002859a
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028590
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002862b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x100285e9
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100285df
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002862b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x1002863b
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028631
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10028631
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d306
add esp, 8
mov ecx, dword [0x1008d9c4]
mov edx, 0x10087528
cmp dword [0x1008753c], 0x10
push 0x1008e740
cmovae edx, dword [0x10087528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002985b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1c28]
mov dword [ebp - 0x2c], 0xb1a91bc1
mov dword [ebp - 0x28], 0x8ada735a
mov byte [ebp - 0x24], 0xa9
push 0x1008e740
test al, 1
jne 0x100286ec
or eax, 1
mov dword [esi + 0x1c28], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xae1], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xad8], al
add ecx, 1
adc edx, 0
jne 0x100286d8
cmp ecx, 9
jb 0x100286c0
push 0x1006d3b0
call fcn.1005d3bd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0xad8]
mov ecx, edi
call fcn.10056e00
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028717
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0xc44]
mov dword [ebp - 0x1c], 0xc1e0048f
test al, 1
jne 0x10028799
or eax, 1
mov dword [esi + 0xc44], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x2d98], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x2d94], al
add ecx, 1
adc edx, 0
jne 0x10028788
cmp ecx, 4
jb 0x10028770
push 0x1006d400
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x2d94]
mov ecx, edi
call fcn.10056e60
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100287c0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005a6c0
mov byte [ebp - 4], 0x37
movaps xmm0, xmmword [0x1007bb60]
mov eax, dword [esi + 0x2078]
mov byte [ebp - 0x38], 0xa9
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10028849
or eax, 1
mov dword [esi + 0x2078], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1e99], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x1e88], al
add ecx, 1
adc edx, 0
jne 0x10028838
cmp ecx, 0x11
jb 0x10028820
push 0x1006d450
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0x1e88]
mov ecx, edi
call fcn.10056ec0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028870
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005a6c0
push 0x10087510
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa8]
call fcn.1005a810
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.1005bae0
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x10087570
call fcn.1005a810
add esp, 4
mov byte [ebp - 4], 0x3c
movaps xmm0, xmmword [0x1007c200]
mov eax, dword [esi + 0x550]
mov word [ebp - 0x38], 0x6fd3
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x1002893a
or eax, 1
mov dword [esi + 0x550], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x27e], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x26c], al
add ecx, 1
adc edx, 0
jne 0x10028929
cmp ecx, 0x12
jb 0x10028911
push 0x1006d4a0
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0x26c]
mov ecx, edi
call fcn.10056f20
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028962
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov ecx, dword [0x100897e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x100289ba
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100289b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028a9b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x10028a0a
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028a00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028a9b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10028a59
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028a4f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028a9b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x10028aab
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028aa1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10028aa1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d306
add esp, 8
mov ecx, dword [0x1008d9c4]
mov edx, 0x10087528
cmp dword [0x1008753c], 0x10
push 0x1008e740
cmovae edx, dword [0x10087528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002985b
mov ecx, 0x1008e740
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028ae0
sub ecx, edx
cmp ecx, 0x20
jae 0x10028af7
cmp ecx, 1
ja 0x1002985b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x13ec]
mov dword [ebp - 0x18], 0x19a11f2b
mov dword [ebp - 0x14], 0x3d008665
push 0x1008e740
test al, 1
jne 0x10028b7c
or eax, 1
mov dword [esi + 0x13ec], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x258], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x250], al
add ecx, 1
adc edx, 0
jne 0x10028b68
cmp ecx, 8
jb 0x10028b50
push 0x1006d270
call fcn.1005d3bd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x250]
mov ecx, edi
call fcn.10056c80
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028ba7
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0x201c]
mov dword [ebp - 0x1c], 0x69e80065
test al, 1
jne 0x10028c29
or eax, 1
mov dword [esi + 0x201c], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x12f8], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x12f4], al
add ecx, 1
adc edx, 0
jne 0x10028c18
cmp ecx, 4
jb 0x10028c00
push 0x1006d2c0
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x12f4]
mov ecx, edi
call fcn.10056ce0
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028c50
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005a6c0
mov byte [ebp - 4], 0x45
movaps xmm0, xmmword [0x1007ad60]
mov eax, dword [esi + 0x97c]
mov byte [ebp - 0x38], 0x43
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10028cd9
or eax, 1
mov dword [esi + 0x97c], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x24d], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x23c], al
add ecx, 1
adc edx, 0
jne 0x10028cc8
cmp ecx, 0x11
jb 0x10028cb0
push 0x1006d310
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x23c]
mov ecx, edi
call fcn.10056d40
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028d00
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005a6c0
push 0x10087150
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xa8]
call fcn.1005a810
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.1005bae0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x10087570
call fcn.1005a810
add esp, 4
mov byte [ebp - 4], 0x4a
movaps xmm0, xmmword [0x1007b340]
mov eax, dword [esi + 0x1a68]
mov word [ebp - 0x38], 0x6b39
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10028dca
or eax, 1
mov dword [esi + 0x1a68], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x2732], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x2720], al
add ecx, 1
adc edx, 0
jne 0x10028db9
cmp ecx, 0x12
jb 0x10028da1
push 0x1006d360
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x2720]
mov ecx, edi
call fcn.10056da0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10028df2
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov ecx, dword [0x100897e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x10028e4a
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028e40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028f2b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x10028e9a
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028e90
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028f2b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10028ee9
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028edf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10028f2b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x10028f3b
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10028f31
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10028f31
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d306
add esp, 8
mov ecx, dword [0x1008d9c4]
mov edx, 0x10087528
cmp dword [0x1008753c], 0x10
push 0x1008e740
cmovae edx, dword [0x10087528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002985b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x38d0]
mov dword [ebp - 0x18], 0xc931d3e9
mov dword [ebp - 0x14], 0xfdec5a0d
push 0x1008e740
test al, 1
jne 0x10028fec
or eax, 1
mov dword [esi + 0x38d0], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1fc4], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x1fbc], al
add ecx, 1
adc edx, 0
jne 0x10028fd8
cmp ecx, 8
jb 0x10028fc0
push 0x1006d130
call fcn.1005d3bd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1fbc]
mov ecx, edi
call fcn.10056b00
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029017
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x2544]
mov dword [ebp - 0x1c], 0xb978cca7
test al, 1
jne 0x10029099
or eax, 1
mov dword [esi + 0x2544], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1fa0], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x1f9c], al
add ecx, 1
adc edx, 0
jne 0x10029088
cmp ecx, 4
jb 0x10029070
push 0x1006d180
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x1f9c]
mov ecx, edi
call fcn.10056b60
mov ecx, edi
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100290c0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x90]
call fcn.1005a6c0
mov byte [ebp - 4], 0x53
movaps xmm0, xmmword [0x1007bf60]
mov eax, dword [esi + 0x37fc]
mov byte [ebp - 0x38], 0x81
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x10029149
or eax, 1
mov dword [esi + 0x37fc], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0xb6d], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0xb5c], al
add ecx, 1
adc edx, 0
jne 0x10029138
cmp ecx, 0x11
jb 0x10029120
push 0x1006d1d0
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0xb5c]
mov ecx, edi
call fcn.10056bc0
mov ecx, edi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029170
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x60]
call fcn.1005a6c0
push 0x10087340
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xa8]
call fcn.1005a810
add esp, 4
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
call fcn.1005bae0
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0x78]
push 0x10087570
call fcn.1005a810
add esp, 4
mov byte [ebp - 4], 0x58
movaps xmm0, xmmword [0x1007b940]
mov eax, dword [esi + 0x13b8]
mov word [ebp - 0x38], 0xa7fb
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x1002923a
or eax, 1
mov dword [esi + 0x13b8], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x28f2], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [ecx + esi + 0x28e0], al
add ecx, 1
adc edx, 0
jne 0x10029229
cmp ecx, 0x12
jb 0x10029211
push 0x1006d220
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x28e0]
mov ecx, edi
call fcn.10056c20
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029262
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov ecx, dword [0x100897e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x64]
cmp edx, 0x10
jb 0x100292ba
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100292b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002939b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp edx, 0x10
jb 0x1002930a
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10029300
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002939b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
cmp edx, 0x10
jb 0x10029359
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002934f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002939b
push edx
push ecx
call fcn.1005d306
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp edx, 0x10
jb 0x100293ab
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100293a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100293a1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d306
add esp, 8
mov ecx, dword [0x1008d9c4]
mov edx, 0x10087528
cmp dword [0x1008753c], 0x10
push 0x1008e740
cmovae edx, dword [0x10087528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1002985b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xbbc]
mov dword [ebp - 0x18], 0x672b0539
mov dword [ebp - 0x14], 0x61f0a0f9
push 0x1008e740
test al, 1
jne 0x1002945c
or eax, 1
mov dword [esi + 0xbbc], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x844], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x83c], al
add ecx, 1
adc edx, 0
jne 0x10029448
cmp ecx, 8
jb 0x10029430
push 0x1006cff0
call fcn.1005d3bd
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x83c]
mov ecx, edi
call fcn.10056980
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029487
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1005a6c0
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0x7b8]
mov dword [ebp - 0x1c], 0x17621a77
test al, 1
jne 0x10029509
or eax, 1
mov dword [esi + 0x7b8], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0xdf8], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0xdf4], al
add ecx, 1
adc edx, 0
jne 0x100294f8
cmp ecx, 4
jb 0x100294e0
push 0x1006d040
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0xdf4]
mov ecx, edi
call fcn.100569e0
mov ecx, edi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10029530
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x78]
call fcn.1005a6c0
mov byte [ebp - 4], 0x61
movaps xmm0, xmmword [0x1007b600]
mov eax, dword [esi + 0x3964]
mov byte [ebp - 0x38], 0x51
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x100295ab
or eax, 1
mov dword [esi + 0x3964], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov byte [esi + 0x1821], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x1810], al
add ecx, 1
adc edx, 0
jne 0x1002959a
cmp ecx, 0x11
jb 0x10029582
push 0x1006d090
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x1810]
mov ecx, edi
call fcn.10056a40
mov ecx, edi
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100295d8
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xc0]
call fcn.1005a6c0
push 0x10087510
lea edx, [ebp - 0xc0]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xf0]
call fcn.1005a810
add esp, 4
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd8]
call fcn.1005bae0
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x28], esp
lea edx, [ebp - 0xd8]
push 0x10087570
call fcn.1005a810
add esp, 4
mov byte [ebp - 4], 0x66
movaps xmm0, xmmword [0x1007af70]
mov eax, dword [esi + 0x2c4]
mov word [ebp - 0x38], 0x712b
movups xmmword [ebp - 0x48], xmm0
test al, 1
jne 0x100296ab
or eax, 1
mov dword [esi + 0x2c4], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x1c56], 1
mov al, byte [ebp + ecx - 0x48]
mov byte [esi + ecx + 0x1c44], al
add ecx, 1
adc edx, 0
jne 0x1002969a
cmp ecx, 0x12
jb 0x10029682
push 0x1006d0e0
call fcn.1005d3bd
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0x1c44]
mov ecx, esi
call fcn.10056aa0
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100296d3
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.1005a6c0
mov ecx, dword [0x100897e0]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xc4]
cmp edx, 0x10
jb 0x10029731
mov ecx, dword [ebp - 0xd8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10029727
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029827
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
cmp edx, 0x10
jb 0x1002978a
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10029780
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029827
push edx
push ecx
call fcn.1005d306
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x100297df
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100297d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10029827
push edx
push ecx
call fcn.1005d306
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
cmp edx, 0x10
jb 0x10029837
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002982d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002982d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1005d306
add esp, 8
mov ecx, dword [0x1008d9c4]
mov edx, 0x10087528
cmp dword [0x1008753c], 0x10
push 0x1008e740
cmovae edx, dword [0x10087528]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005cab9
mov esp, ebp
pop ebp
ret