Function at 0x1003e490
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100799f4
mov eax, dword fs:[0]
push eax
sub esp, 0xe8
mov eax, dword [0x100a400c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100a6228]
push 0x100a9668
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x1c], 0x911cba01
mov eax, dword [esi + 0x464]
test al, 1
jne 0x1003e53c
or eax, 1
mov dword [esi + 0x464], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x44e4], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x44e0], al
add ecx, 1
adc edx, 0
jne 0x1003e528
cmp ecx, 4
jb 0x1003e510
push 0x10089da0
call fcn.100719b6
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x44e0]
mov ecx, edi
call fcn.10067a30
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e567
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.1006e400
mov dword [ebp - 4], 1
movaps xmm0, xmmword [0x10096120]
mov eax, dword [esi + 0x30b8]
mov dword [ebp - 0x28], 0xf41eb357
mov word [ebp - 0x24], 0xb706
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003e5f9
or eax, 1
mov dword [esi + 0x30b8], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x203a], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x2024], al
add ecx, 1
adc edx, 0
jne 0x1003e5e8
cmp ecx, 0x16
jb 0x1003e5d0
push 0x10089df0
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x2024]
mov ecx, edi
call fcn.10067a90
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e624
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.1006e400
push 0x100a5494
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xac]
call fcn.1006e5a0
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x94]
call fcn.1006ffe0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x94]
push 0x100a58c8
call fcn.1006e5a0
add esp, 4
mov byte [ebp - 4], 6
movaps xmm0, xmmword [0x10095780]
mov eax, dword [esi + 0x17dc]
mov word [ebp - 0x3c], 0xd15d
movups xmmword [ebp - 0x4c], xmm0
test al, 1
jne 0x1003e6f9
or eax, 1
mov dword [esi + 0x17dc], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3956], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x4c]
mov byte [esi + ecx + 0x3944], al
add ecx, 1
adc edx, 0
jne 0x1003e6e8
cmp ecx, 0x12
jb 0x1003e6d0
push 0x10089e40
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x3944]
mov ecx, edi
call fcn.10067af0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e724
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov ecx, dword [0x100ac5c4]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x1003e780
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e776
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e864
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x1003e7d6
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e7cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e864
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003e825
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e81b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003e864
push edx
push ecx
call fcn.100718ff
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003e874
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003e86a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003e86a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100718ff
add esp, 8
mov ecx, dword [0x100a84d8]
mov edx, 0x100a5880
cmp dword [0x100a5894], 0x10
push 0x100a9668
cmovae edx, dword [0x100a5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10040bbc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2c88]
mov dword [ebp - 0x1c], 0x39e000bd
push 0x100a9668
push 0
push 0
test al, 1
jne 0x1003e91c
or eax, 1
mov dword [esi + 0x2c88], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x16b4], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x16b0], al
add ecx, 1
adc edx, 0
jne 0x1003e908
cmp ecx, 4
jb 0x1003e8f0
push 0x10089cb0
call fcn.100719b6
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x16b0]
mov ecx, edi
call fcn.10067910
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003e947
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.1006e400
mov dword [ebp - 4], 9
movaps xmm0, xmmword [0x10096300]
mov eax, dword [esi + 0x200c]
mov dword [ebp - 0x28], 0x5ce209eb
mov word [ebp - 0x24], 0x4fc8
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003e9d9
or eax, 1
mov dword [esi + 0x200c], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x4b2], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x49c], al
add ecx, 1
adc edx, 0
jne 0x1003e9c8
cmp ecx, 0x16
jb 0x1003e9b0
push 0x10089d00
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0x49c]
mov ecx, edi
call fcn.10067970
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ea04
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.1006e400
push 0x100a5680
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xac]
call fcn.1006e5a0
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x3e]
lea ecx, [ebp - 0x94]
call fcn.1006ffe0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x94]
push 0x100a58c8
call fcn.1006e5a0
add esp, 4
mov byte [ebp - 4], 0xe
movaps xmm0, xmmword [0x100969d0]
mov eax, dword [esi + 0x3c64]
mov word [ebp - 0x24], 0x6be1
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003ead9
or eax, 1
mov dword [esi + 0x3c64], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x488e], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x487c], al
add ecx, 1
adc edx, 0
jne 0x1003eac8
cmp ecx, 0x12
jb 0x1003eab0
push 0x10089d50
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x487c]
mov ecx, edi
call fcn.100679d0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003eb04
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov ecx, dword [0x100ac5c4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x1003eb60
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003eb56
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ec44
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x1003ebb6
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ebac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ec44
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003ec05
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ebfb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003ec44
push edx
push ecx
call fcn.100718ff
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003ec54
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ec4a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003ec4a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100718ff
add esp, 8
mov ecx, dword [0x100a84d8]
mov edx, 0x100a5880
cmp dword [0x100a5894], 0x10
push 0x100a9668
cmovae edx, dword [0x100a5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10040bbc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2eb8]
mov dword [ebp - 0x1c], 0xb7d2ac21
push 0x100a9668
push 0
push 0
test al, 1
jne 0x1003ecfc
or eax, 1
mov dword [esi + 0x2eb8], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x47e4], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x47e0], al
add ecx, 1
adc edx, 0
jne 0x1003ece8
cmp ecx, 4
jb 0x1003ecd0
push 0x10089bc0
call fcn.100719b6
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x47e0]
mov ecx, edi
call fcn.100677f0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ed27
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.1006e400
mov dword [ebp - 4], 0x11
movaps xmm0, xmmword [0x100952d0]
mov eax, dword [esi + 0xf50]
mov dword [ebp - 0x28], 0xd2d0a577
mov word [ebp - 0x24], 0xb170
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003edb9
or eax, 1
mov dword [esi + 0xf50], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x49d2], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x49bc], al
add ecx, 1
adc edx, 0
jne 0x1003eda8
cmp ecx, 0x16
jb 0x1003ed90
push 0x10089c10
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x49bc]
mov ecx, edi
call fcn.10067850
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ede4
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.1006e400
push 0x100a5868
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xac]
call fcn.1006e5a0
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x3e]
lea ecx, [ebp - 0x94]
call fcn.1006ffe0
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x94]
push 0x100a58c8
call fcn.1006e5a0
add esp, 4
mov byte [ebp - 4], 0x16
movaps xmm0, xmmword [0x10095be0]
mov eax, dword [esi + 0x40bc]
mov word [ebp - 0x24], 0xc77d
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003eeb9
or eax, 1
mov dword [esi + 0x40bc], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x48e2], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x48d0], al
add ecx, 1
adc edx, 0
jne 0x1003eea8
cmp ecx, 0x12
jb 0x1003ee90
push 0x10089c60
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x48d0]
mov ecx, edi
call fcn.100678b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003eee4
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov ecx, dword [0x100ac5c4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x1003ef40
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ef36
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f024
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x1003ef96
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003ef8c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f024
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003efe5
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003efdb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f024
push edx
push ecx
call fcn.100718ff
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003f034
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f02a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003f02a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100718ff
add esp, 8
mov ecx, dword [0x100a84d8]
mov edx, 0x100a5880
cmp dword [0x100a5894], 0x10
push 0x100a9668
cmovae edx, dword [0x100a5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10040bbc
mov ecx, 0x100a9668
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f068
sub ecx, edx
cmp ecx, 0x20
jb 0x10040bbc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1c94]
mov dword [ebp - 0x44], 0x5f31692d
mov dword [ebp - 0x40], 0xf886bf3e
mov byte [ebp - 0x3c], 0x45
push 0x100a9668
test al, 1
jne 0x1003f0fc
or eax, 1
mov dword [esi + 0x1c94], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x39b9], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x44]
mov byte [ecx + esi + 0x39b0], al
add ecx, 1
adc edx, 0
jne 0x1003f0e8
cmp ecx, 9
jb 0x1003f0d0
push 0x10089a80
call fcn.100719b6
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x39b0]
mov ecx, edi
call fcn.10067670
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x40], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f130
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0x3934]
mov dword [ebp - 0x1c], 0x2f787663
test al, 1
jne 0x1003f1a9
or eax, 1
mov dword [esi + 0x3934], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x442c], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x4428], al
add ecx, 1
adc edx, 0
jne 0x1003f198
cmp ecx, 4
jb 0x1003f180
push 0x10089ad0
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x4428]
mov ecx, edi
call fcn.100676d0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f1d4
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.1006e400
mov byte [ebp - 4], 0x1b
movaps xmm0, xmmword [str.j5Fb]
mov eax, dword [esi + 0x31e8]
mov dword [ebp - 0x28], 0x4a7a7f35
mov word [ebp - 0x24], 0x8570
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003f259
or eax, 1
mov dword [esi + 0x31e8], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x45e], 1
nop
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x448], al
add ecx, 1
adc edx, 0
jne 0x1003f248
cmp ecx, 0x16
jb 0x1003f230
push 0x10089b20
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x448]
mov ecx, edi
call fcn.10067730
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f284
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.1006e400
push 0x100a5494
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xac]
call fcn.1006e5a0
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x3e]
lea ecx, [ebp - 0x94]
call fcn.1006ffe0
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp - 0x94]
push 0x100a58c8
call fcn.1006e5a0
add esp, 4
mov byte [ebp - 4], 0x20
movaps xmm0, xmmword [str._i1F.]
mov eax, dword [esi + 0x197c]
mov word [ebp - 0x24], 0x1d3f
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003f359
or eax, 1
mov dword [esi + 0x197c], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1146], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x1134], al
add ecx, 1
adc edx, 0
jne 0x1003f348
cmp ecx, 0x12
jb 0x1003f330
push 0x10089b70
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x1134]
mov ecx, edi
call fcn.10067790
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f384
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov ecx, dword [0x100ac5c4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x1003f3df
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f3d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f4c3
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x1003f435
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f42b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f4c3
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003f484
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f47a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f4c3
push edx
push ecx
call fcn.100718ff
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003f4d3
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f4c9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003f4c9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100718ff
add esp, 8
mov ecx, dword [0x100a84d8]
mov edx, 0x100a5880
cmp dword [0x100a5894], 0x10
push 0x100a9668
cmovae edx, dword [0x100a5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10040bbc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2a7c]
mov dword [ebp - 0x44], 0xd72d0b73
mov dword [ebp - 0x40], 0x801af980
mov byte [ebp - 0x3c], 0x1b
push 0x100a9668
test al, 1
jne 0x1003f57c
or eax, 1
mov dword [esi + 0x2a7c], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x24ed], 1
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x24e4], al
add ecx, 1
adc edx, 0
jne 0x1003f568
cmp ecx, 9
jb 0x1003f550
push 0x10089940
call fcn.100719b6
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x24e4]
mov ecx, edi
call fcn.100674f0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f5b0
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x160c]
mov dword [ebp - 0x1c], 0xa764143d
test al, 1
jne 0x1003f629
or eax, 1
mov dword [esi + 0x160c], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x618], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x614], al
add ecx, 1
adc edx, 0
jne 0x1003f618
cmp ecx, 4
jb 0x1003f600
push 0x10089990
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x614]
mov ecx, edi
call fcn.10067550
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f654
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.1006e400
mov byte [ebp - 4], 0x29
movaps xmm0, xmmword [0x10096160]
mov eax, dword [esi + 0x1a20]
mov dword [ebp - 0x28], 0xc2661d6b
mov word [ebp - 0x24], 0xc3ce
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003f6d9
or eax, 1
mov dword [esi + 0x1a20], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x2ede], 1
nop
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x2ec8], al
add ecx, 1
adc edx, 0
jne 0x1003f6c8
cmp ecx, 0x16
jb 0x1003f6b0
push 0x100899e0
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x2ec8]
mov ecx, edi
call fcn.100675b0
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f704
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.1006e400
push 0x100a5680
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xac]
call fcn.1006e5a0
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x94]
call fcn.1006ffe0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x94]
push 0x100a58c8
call fcn.1006e5a0
add esp, 4
mov byte [ebp - 4], 0x2e
movaps xmm0, xmmword [str.z_v_]
mov eax, dword [esi + 0x14d8]
mov word [ebp - 0x24], 0x7f61
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003f7d9
or eax, 1
mov dword [esi + 0x14d8], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x1a96], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x1a84], al
add ecx, 1
adc edx, 0
jne 0x1003f7c8
cmp ecx, 0x12
jb 0x1003f7b0
push 0x10089a30
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0x1a84]
mov ecx, edi
call fcn.10067610
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003f804
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov ecx, dword [0x100ac5c4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x1003f85f
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f855
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f943
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x1003f8b5
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f8ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f943
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003f904
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f8fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003f943
push edx
push ecx
call fcn.100718ff
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003f953
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003f949
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003f949
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100718ff
add esp, 8
mov ecx, dword [0x100a84d8]
mov edx, 0x100a5880
cmp dword [0x100a5894], 0x10
push 0x100a9668
cmovae edx, dword [0x100a5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10040bbc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x13e8]
mov dword [ebp - 0x44], 0x6b0b29f3
mov dword [ebp - 0x40], 0x2022cdce
mov byte [ebp - 0x3c], 0x9b
push 0x100a9668
test al, 1
jne 0x1003f9fc
or eax, 1
mov dword [esi + 0x13e8], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x599], 1
mov al, byte [ebp + ecx - 0x44]
mov byte [esi + ecx + 0x590], al
add ecx, 1
adc edx, 0
jne 0x1003f9e8
cmp ecx, 9
jb 0x1003f9d0
push 0x10089800
call fcn.100719b6
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x590]
mov ecx, edi
call fcn.10067370
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fa30
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0xc8]
mov dword [ebp - 0x1c], 0x1b4236bd
test al, 1
jne 0x1003faa9
or eax, 1
mov dword [esi + 0xc8], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x465c], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x4658], al
add ecx, 1
adc edx, 0
jne 0x1003fa98
cmp ecx, 4
jb 0x1003fa80
push 0x10089850
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x4658]
mov ecx, edi
call fcn.100673d0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fad4
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.1006e400
mov byte [ebp - 4], 0x37
movaps xmm0, xmmword [0x10095630]
mov eax, dword [esi + 0x6d4]
mov dword [ebp - 0x28], 0x7e403feb
mov word [ebp - 0x24], 0xf780
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003fb59
or eax, 1
mov dword [esi + 0x6d4], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x1ea2], 1
nop
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x1e8c], al
add ecx, 1
adc edx, 0
jne 0x1003fb48
cmp ecx, 0x16
jb 0x1003fb30
push 0x100898a0
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0x1e8c]
mov ecx, edi
call fcn.10067430
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fb84
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.1006e400
push 0x100a5868
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xac]
call fcn.1006e5a0
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x94]
call fcn.1006ffe0
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x94]
push 0x100a58c8
call fcn.1006e5a0
add esp, 4
mov byte [ebp - 4], 0x3c
movaps xmm0, xmmword [0x10096060]
mov eax, dword [esi + 0x4234]
mov word [ebp - 0x24], 0x5de1
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x1003fc59
or eax, 1
mov dword [esi + 0x4234], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x46fe], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x46ec], al
add ecx, 1
adc edx, 0
jne 0x1003fc48
cmp ecx, 0x12
jb 0x1003fc30
push 0x100898f0
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0x46ec]
mov ecx, edi
call fcn.10067490
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fc84
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov ecx, dword [0x100ac5c4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x1003fcdf
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003fcd5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003fdc3
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x1003fd35
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003fd2b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003fdc3
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x1003fd84
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003fd7a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003fdc3
push edx
push ecx
call fcn.100718ff
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x1003fdd3
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003fdc9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003fdc9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100718ff
add esp, 8
mov ecx, dword [0x100a84d8]
mov edx, 0x100a5880
cmp dword [0x100a5894], 0x10
push 0x100a9668
cmovae edx, dword [0x100a5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10040bbc
mov ecx, 0x100a9668
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fe07
sub ecx, edx
cmp ecx, 0x20
jb 0x10040bbc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2c04]
mov dword [ebp - 0x18], 0xe527771d
mov dword [ebp - 0x14], 0x678a3a21
push 0x100a9668
test al, 1
jne 0x1003fe9c
or eax, 1
mov dword [esi + 0x2c04], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x2814], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x280c], al
add ecx, 1
adc edx, 0
jne 0x1003fe88
cmp ecx, 8
jb 0x1003fe70
push 0x100896c0
call fcn.100719b6
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x280c]
mov ecx, edi
call fcn.100671f0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003fed0
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0x2150]
mov dword [ebp - 0x1c], 0x956e6853
test al, 1
jne 0x1003ff49
or eax, 1
mov dword [esi + 0x2150], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x2d94], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x2d90], al
add ecx, 1
adc edx, 0
jne 0x1003ff38
cmp ecx, 4
jb 0x1003ff20
push 0x10089710
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x2d90]
mov ecx, edi
call fcn.10067250
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003ff74
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.1006e400
mov byte [ebp - 4], 0x45
movaps xmm0, xmmword [0x10095aa0]
mov eax, dword [esi + 0x4534]
mov dword [ebp - 0x28], 0xf06c6105
mov word [ebp - 0x24], 0x1526
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x1003fff9
or eax, 1
mov dword [esi + 0x4534], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x73a], 1
nop
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x724], al
add ecx, 1
adc edx, 0
jne 0x1003ffe8
cmp ecx, 0x16
jb 0x1003ffd0
push 0x10089760
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x724]
mov ecx, edi
call fcn.100672b0
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040024
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.1006e400
push 0x100a5494
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xac]
call fcn.1006e5a0
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x94]
call fcn.1006ffe0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x94]
push 0x100a58c8
call fcn.1006e5a0
add esp, 4
mov byte [ebp - 4], 0x4a
movaps xmm0, xmmword [0x100955e0]
mov eax, dword [esi + 0x188]
mov word [ebp - 0x24], 0x30f
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x100400f9
or eax, 1
mov dword [esi + 0x188], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x31d6], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x31c4], al
add ecx, 1
adc edx, 0
jne 0x100400e8
cmp ecx, 0x12
jb 0x100400d0
push 0x100897b0
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x31c4]
mov ecx, edi
call fcn.10067310
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040124
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov ecx, dword [0x100ac5c4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x1004017f
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10040175
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10040263
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x100401d5
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100401cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10040263
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x10040224
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004021a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10040263
push edx
push ecx
call fcn.100718ff
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x10040273
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10040269
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040269
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100718ff
add esp, 8
mov ecx, dword [0x100a84d8]
mov edx, 0x100a5880
cmp dword [0x100a5894], 0x10
push 0x100a9668
cmovae edx, dword [0x100a5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10040bbc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2868]
mov dword [ebp - 0x18], 0x5b0fa9ff
mov dword [ebp - 0x14], 0x2552f2ed
push 0x100a9668
test al, 1
jne 0x1004031c
or eax, 1
mov dword [esi + 0x2868], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x174c], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x1744], al
add ecx, 1
adc edx, 0
jne 0x10040308
cmp ecx, 8
jb 0x100402f0
push 0x10089580
call fcn.100719b6
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1744]
mov ecx, edi
call fcn.10067070
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040350
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0x1604]
mov dword [ebp - 0x1c], 0x2b46b6b1
test al, 1
jne 0x100403c9
or eax, 1
mov dword [esi + 0x1604], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x38b0], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [ecx + esi + 0x38ac], al
add ecx, 1
adc edx, 0
jne 0x100403b8
cmp ecx, 4
jb 0x100403a0
push 0x100895d0
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x38ac]
mov ecx, edi
call fcn.100670d0
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100403f4
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.1006e400
mov byte [ebp - 4], 0x53
movaps xmm0, xmmword [0x100953b0]
mov eax, dword [esi + 0x808]
mov dword [ebp - 0x28], 0x4e44bfe7
mov word [ebp - 0x24], 0xddea
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x10040479
or eax, 1
mov dword [esi + 0x808], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x366], 1
nop
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x350], al
add ecx, 1
adc edx, 0
jne 0x10040468
cmp ecx, 0x16
jb 0x10040450
push 0x10089620
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0x350]
mov ecx, edi
call fcn.10067130
mov ecx, edi
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100404a4
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x64]
call fcn.1006e400
push 0x100a5680
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xac]
call fcn.1006e5a0
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x94]
call fcn.1006ffe0
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0x94]
push 0x100a58c8
call fcn.1006e5a0
add esp, 4
mov byte [ebp - 4], 0x58
movaps xmm0, xmmword [0x10095d10]
mov eax, dword [esi + 0x2af0]
mov word [ebp - 0x24], 0xdded
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10040579
or eax, 1
mov dword [esi + 0x2af0], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x1fce], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [ecx + esi + 0x1fbc], al
add ecx, 1
adc edx, 0
jne 0x10040568
cmp ecx, 0x12
jb 0x10040550
push 0x10089670
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x1fbc]
mov ecx, edi
call fcn.10067190
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100405a4
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov ecx, dword [0x100ac5c4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x100405ff
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100405f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100406e3
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
cmp edx, 0x10
jb 0x10040655
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004064b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100406e3
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp edx, 0x10
jb 0x100406a4
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1004069a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100406e3
push edx
push ecx
call fcn.100718ff
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp edx, 0x10
jb 0x100406f3
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100406e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100406e9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100718ff
add esp, 8
mov ecx, dword [0x100a84d8]
mov edx, 0x100a5880
cmp dword [0x100a5894], 0x10
push 0x100a9668
cmovae edx, dword [0x100a5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x10040bbc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xc10]
mov dword [ebp - 0x18], 0xcf9f6fe1
mov dword [ebp - 0x14], 0xc7bcf29b
push 0x100a9668
test al, 1
jne 0x1004079c
or eax, 1
mov dword [esi + 0xc10], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x2e14], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x2e0c], al
add ecx, 1
adc edx, 0
jne 0x10040788
cmp ecx, 8
jb 0x10040770
push 0x10089440
call fcn.100719b6
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x2e0c]
mov ecx, edi
call fcn.10066ef0
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100407d0
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1006e400
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0x35f4]
mov dword [ebp - 0x1c], 0xbfd670af
test al, 1
jne 0x10040849
or eax, 1
mov dword [esi + 0x35f4], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x1348], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x1c]
mov byte [esi + ecx + 0x1344], al
add ecx, 1
adc edx, 0
jne 0x10040838
cmp ecx, 4
jb 0x10040820
push 0x10089490
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0x1344]
mov ecx, edi
call fcn.10066f50
mov ecx, edi
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040874
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.1006e400
mov byte [ebp - 4], 0x61
movaps xmm0, xmmword [0x10096b50]
mov eax, dword [esi + 0x284c]
mov dword [ebp - 0x28], 0xdad479f9
mov word [ebp - 0x24], 0xdd9c
movups xmmword [ebp - 0x38], xmm0
test al, 1
jne 0x100408f9
or eax, 1
mov dword [esi + 0x284c], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x44], xmm0
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov byte [esi + 0x33e], 1
nop
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x328], al
add ecx, 1
adc edx, 0
jne 0x100408e8
cmp ecx, 0x16
jb 0x100408d0
push 0x100894e0
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x328]
mov ecx, edi
call fcn.10066fb0
mov ecx, edi
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040930
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xc4]
call fcn.1006e400
push 0x100a5868
lea edx, [ebp - 0xc4]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xf4]
call fcn.1006e5a0
add esp, 4
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xdc]
call fcn.1006ffe0
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x40], esp
lea edx, [ebp - 0xdc]
push 0x100a58c8
call fcn.1006e5a0
add esp, 4
mov byte [ebp - 4], 0x66
movaps xmm0, xmmword [0x10096780]
mov eax, dword [esi + 0x1f40]
mov word [ebp - 0x24], 0x1bf3
movups xmmword [ebp - 0x34], xmm0
test al, 1
jne 0x10040a09
or eax, 1
mov dword [esi + 0x1f40], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov byte [esi + 0x3c42], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x34]
mov byte [esi + ecx + 0x3c30], al
add ecx, 1
adc edx, 0
jne 0x100409f8
cmp ecx, 0x12
jb 0x100409e0
push 0x10089530
call fcn.100719b6
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0x3c30]
mov ecx, esi
call fcn.10067010
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10040a34
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.1006e400
mov ecx, dword [0x100ac5c4]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x10040a92
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10040a88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10040b88
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp edx, 0x10
jb 0x10040aeb
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10040ae1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10040b88
push edx
push ecx
call fcn.100718ff
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
cmp edx, 0x10
jb 0x10040b40
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10040b36
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10040b88
push edx
push ecx
call fcn.100718ff
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
cmp edx, 0x10
jb 0x10040b98
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10040b8e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10040b8e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100718ff
add esp, 8
mov ecx, dword [0x100a84d8]
mov edx, 0x100a5880
cmp dword [0x100a5894], 0x10
push 0x100a9668
cmovae edx, dword [0x100a5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10070fd9
mov esp, ebp
pop ebp
ret