Function at 0x10035990
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10083993
mov eax, dword fs:[0]
push eax
sub esp, 0xdc
mov eax, dword [0x100b400c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100b6268]
push 0x100bcf58
push 0
push 0
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x20], 0x1726ce15
mov eax, dword [esi + 0x41e8]
test al, 1
jne 0x10035a3c
or eax, 1
mov dword [esi + 0x41e8], eax
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x4f84], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x4f80], al
add ecx, 1
adc edx, 0
jne 0x10035a28
cmp ecx, 4
jb 0x10035a10
push 0x10093ca0
call fcn.1007d9db
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x4f80]
mov ecx, edi
call fcn.10074d50
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035a67
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x70]
call fcn.1007a4c0
mov dword [ebp - 4], 1
mov eax, dword [esi + 0x1470]
mov dword [ebp - 0x40], 0x7e6bc41c
mov dword [ebp - 0x3c], 0x8c00aba8
mov dword [ebp - 0x38], 0x7224c743
mov word [ebp - 0x34], 0xddba
test al, 1
jne 0x10035af9
or eax, 1
mov dword [esi + 0x1470], eax
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x231e], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [esi + ecx + 0x2310], al
add ecx, 1
adc edx, 0
jne 0x10035ae8
cmp ecx, 0xe
jb 0x10035ad0
push 0x10093cf0
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 1
lea edi, [esi + 0x2310]
mov ecx, edi
call fcn.10074db0
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035b24
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x58]
call fcn.1007a4c0
push 0x100b5494
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb8]
call fcn.1007a630
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 4
push ecx
push eax
push dword [ebp - 0x1f]
lea ecx, [ebp - 0x88]
call fcn.1007c0e0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x88]
push 0x100b58c8
call fcn.1007a630
add esp, 4
mov byte [ebp - 4], 6
movaps xmm0, xmmword [0x100a5af0]
mov eax, dword [esi + 0x3eac]
mov byte [ebp - 0x30], 0x33
movups xmmword [ebp - 0x40], xmm0
test al, 1
jne 0x10035bf9
or eax, 1
mov dword [esi + 0x3eac], eax
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x486d], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [esi + ecx + 0x485c], al
add ecx, 1
adc edx, 0
jne 0x10035be8
cmp ecx, 0x11
jb 0x10035bd0
push 0x10093d40
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 6
lea edi, [esi + 0x485c]
mov ecx, edi
call fcn.10074e10
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035c24
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov ecx, dword [0x100b7374]
mov eax, dword [ecx]
mov byte [ebp - 4], 5
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x10035c80
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035c76
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035d61
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp edx, 0x10
jb 0x10035cd3
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035cc9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035d61
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp edx, 0x10
jb 0x10035d22
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035d18
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035d61
push edx
push ecx
call fcn.1007d924
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x10035d71
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035d67
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10035d67
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1007d924
add esp, 8
mov ecx, dword [0x100bbd94]
mov edx, 0x100b5880
cmp dword [0x100b5894], 0x10
push 0x100bcf58
cmovae edx, dword [0x100b5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003813c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x2204]
mov dword [ebp - 0x20], 0x3b548eab
push 0x100bcf58
push 0
push 0
test al, 1
jne 0x10035e1c
or eax, 1
mov dword [esi + 0x2204], eax
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2110], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x210c], al
add ecx, 1
adc edx, 0
jne 0x10035e08
cmp ecx, 4
jb 0x10035df0
push 0x10093bb0
call fcn.1007d9db
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x210c]
mov ecx, edi
call fcn.10074c30
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035e47
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x70]
call fcn.1007a4c0
mov dword [ebp - 4], 9
mov eax, dword [esi + 0x3354]
mov dword [ebp - 0x40], 0x521984a2
mov dword [ebp - 0x3c], 0x9c74e514
mov dword [ebp - 0x38], 0x5e5687fd
mov word [ebp - 0x34], 0x9306
test al, 1
jne 0x10035ed9
or eax, 1
mov dword [esi + 0x3354], eax
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0xede], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [ecx + esi + 0xed0], al
add ecx, 1
adc edx, 0
jne 0x10035ec8
cmp ecx, 0xe
jb 0x10035eb0
push 0x10093c00
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 9
lea edi, [esi + 0xed0]
mov ecx, edi
call fcn.10074c90
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035f04
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x58]
call fcn.1007a4c0
push 0x100b5680
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb8]
call fcn.1007a630
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xc
push ecx
push eax
push dword [ebp - 0x33]
lea ecx, [ebp - 0x88]
call fcn.1007c0e0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x34], esp
lea edx, [ebp - 0x88]
push 0x100b58c8
call fcn.1007a630
add esp, 4
mov byte [ebp - 4], 0xe
movaps xmm0, xmmword [0x100a5cb0]
mov eax, dword [esi + 0x4000]
mov byte [ebp - 0x1c], 0x8d
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x10035fd9
or eax, 1
mov dword [esi + 0x4000], eax
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x47c9], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x47b8], al
add ecx, 1
adc edx, 0
jne 0x10035fc8
cmp ecx, 0x11
jb 0x10035fb0
push 0x10093c50
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0xe
lea edi, [esi + 0x47b8]
mov ecx, edi
call fcn.10074cf0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036004
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov ecx, dword [0x100b7374]
mov eax, dword [ecx]
mov byte [ebp - 4], 0xd
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x10036060
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036056
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036141
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp edx, 0x10
jb 0x100360b3
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100360a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036141
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp edx, 0x10
jb 0x10036102
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100360f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036141
push edx
push ecx
call fcn.1007d924
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x10036151
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036147
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036147
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1007d924
add esp, 8
mov ecx, dword [0x100bbd94]
mov edx, 0x100b5880
cmp dword [0x100b5894], 0x10
push 0x100bcf58
cmovae edx, dword [0x100b5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003813c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x46e4]
mov dword [ebp - 0x20], 0xc308f2cd
push 0x100bcf58
push 0
push 0
test al, 1
jne 0x100361fc
or eax, 1
mov dword [esi + 0x46e4], eax
mov dword [ebp - 4], 0x10
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x4838], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x4834], al
add ecx, 1
adc edx, 0
jne 0x100361e8
cmp ecx, 4
jb 0x100361d0
push 0x10093ac0
call fcn.1007d9db
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x4834]
mov ecx, edi
call fcn.10074b10
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036227
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x70]
call fcn.1007a4c0
mov dword [ebp - 4], 0x11
mov eax, dword [esi + 0x22ec]
mov dword [ebp - 0x40], 0xaa45f8c4
mov dword [ebp - 0x3c], 0x7c80c3cc
mov dword [ebp - 0x38], 0xa60afb9b
mov word [ebp - 0x34], 0xb5de
test al, 1
jne 0x100362b9
or eax, 1
mov dword [esi + 0x22ec], eax
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1c2], 1
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x40]
mov byte [ecx + esi + 0x1b4], al
add ecx, 1
adc edx, 0
jne 0x100362a8
cmp ecx, 0xe
jb 0x10036290
push 0x10093b10
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [esi + 0x1b4]
mov ecx, edi
call fcn.10074b70
mov ecx, edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100362e4
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x58]
call fcn.1007a4c0
push 0x100b5868
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xb8]
call fcn.1007a630
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x14
push ecx
push eax
push dword [ebp - 0x33]
lea ecx, [ebp - 0x88]
call fcn.1007c0e0
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x34], esp
lea edx, [ebp - 0x88]
push 0x100b58c8
call fcn.1007a630
add esp, 4
mov byte [ebp - 4], 0x16
movaps xmm0, xmmword [0x100a4af0]
mov eax, dword [esi + 0x2c4c]
mov byte [ebp - 0x1c], 0xeb
movups xmmword [ebp - 0x2c], xmm0
test al, 1
jne 0x100363b9
or eax, 1
mov dword [esi + 0x2c4c], eax
mov byte [ebp - 4], 0x17
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2709], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x26f8], al
add ecx, 1
adc edx, 0
jne 0x100363a8
cmp ecx, 0x11
jb 0x10036390
push 0x10093b60
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x16
lea edi, [esi + 0x26f8]
mov ecx, edi
call fcn.10074bd0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100363e4
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov ecx, dword [0x100b7374]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x15
call dword [eax + 4]
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x10036440
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036436
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036521
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp edx, 0x10
jb 0x10036493
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036489
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036521
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp edx, 0x10
jb 0x100364e2
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100364d8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036521
push edx
push ecx
call fcn.1007d924
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x10036531
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036527
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036527
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1007d924
add esp, 8
mov ecx, dword [0x100bbd94]
mov edx, 0x100b5880
cmp dword [0x100b5894], 0x10
push 0x100bcf58
cmovae edx, dword [0x100b5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003813c
mov ecx, 0x100bcf58
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036565
sub ecx, edx
cmp ecx, 0x20
jae 0x1003657c
cmp ecx, 1
ja 0x1003813c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0xc84]
mov dword [ebp - 0x38], 0xa361b96f
mov dword [ebp - 0x34], 0x5ad4f934
mov byte [ebp - 0x30], 7
push 0x100bcf58
test al, 1
jne 0x100365fc
or eax, 1
mov dword [esi + 0xc84], eax
mov dword [ebp - 4], 0x18
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1141], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x1138], al
add ecx, 1
adc edx, 0
jne 0x100365e8
cmp ecx, 9
jb 0x100365d0
push 0x10093980
call fcn.1007d9db
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1138]
mov ecx, edi
call fcn.10074990
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x34], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036630
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov dword [ebp - 4], 0x19
mov eax, dword [esi + 0x3294]
mov dword [ebp - 0x20], 0xd328a621
test al, 1
jne 0x100366a9
or eax, 1
mov dword [esi + 0x3294], eax
mov byte [ebp - 4], 0x1a
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3f84], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x3f80], al
add ecx, 1
adc edx, 0
jne 0x10036698
cmp ecx, 4
jb 0x10036680
push 0x100939d0
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x19
lea edi, [esi + 0x3f80]
mov ecx, edi
call fcn.100749f0
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100366e0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xa0]
call fcn.1007a4c0
mov byte [ebp - 4], 0x1b
mov eax, dword [esi + 0x844]
mov dword [ebp - 0x2c], 0xba65ac28
mov dword [ebp - 0x28], 0x5ac8b568
mov dword [ebp - 0x24], 0xb62aaf77
mov word [ebp - 0x20], 0xc37a
test al, 1
jne 0x1003676a
or eax, 1
mov dword [esi + 0x844], eax
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x2156], 1
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x2148], al
add ecx, 1
adc edx, 0
jne 0x10036759
cmp ecx, 0xe
jb 0x10036741
push 0x10093a20
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x1b
lea edi, [esi + 0x2148]
mov ecx, edi
call fcn.10074a50
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036795
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x70]
call fcn.1007a4c0
push 0x100b5494
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xb8]
call fcn.1007a630
add esp, 4
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x1e
push ecx
push eax
push dword [ebp - 0x33]
lea ecx, [ebp - 0x88]
call fcn.1007c0e0
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x88]
push 0x100b58c8
call fcn.1007a630
add esp, 4
mov byte [ebp - 4], 0x20
movaps xmm0, xmmword [0x100a4680]
mov eax, dword [esi + 0x29a0]
mov byte [ebp - 0x44], 7
movups xmmword [ebp - 0x54], xmm0
test al, 1
jne 0x10036869
or eax, 1
mov dword [esi + 0x29a0], eax
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x3325], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x54]
mov byte [ecx + esi + 0x3314], al
add ecx, 1
adc edx, 0
jne 0x10036858
cmp ecx, 0x11
jb 0x10036840
push 0x10093a70
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x20
lea edi, [esi + 0x3314]
mov ecx, edi
call fcn.10074ab0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036894
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov ecx, dword [0x100b7374]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x25
call dword [eax]
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x100368ef
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100368e5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100369d6
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp edx, 0x10
jb 0x10036942
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036938
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100369d6
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp edx, 0x10
jb 0x10036991
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036987
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100369d6
push edx
push ecx
call fcn.1007d924
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
cmp edx, 0x10
jb 0x100369e6
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100369dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100369dc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1007d924
add esp, 8
mov ecx, dword [0x100bbd94]
mov edx, 0x100b5880
cmp dword [0x100b5894], 0x10
push 0x100bcf58
cmovae edx, dword [0x100b5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003813c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x1f4]
mov dword [ebp - 0x38], 0x53cb272b
mov dword [ebp - 0x34], 0x5cf00560
mov byte [ebp - 0x30], 0x43
push 0x100bcf58
test al, 1
jne 0x10036a9c
or eax, 1
mov dword [esi + 0x1f4], eax
mov dword [ebp - 4], 0x26
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x1b79], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [ecx + esi + 0x1b70], al
add ecx, 1
adc edx, 0
jne 0x10036a88
cmp ecx, 9
jb 0x10036a70
push 0x10093840
call fcn.1007d9db
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x1b70]
mov ecx, edi
call fcn.10074810
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036ad0
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov dword [ebp - 4], 0x27
mov eax, dword [esi + 0x4d80]
mov dword [ebp - 0x20], 0x23823865
test al, 1
jne 0x10036b49
or eax, 1
mov dword [esi + 0x4d80], eax
mov byte [ebp - 4], 0x28
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x4cd8], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x4cd4], al
add ecx, 1
adc edx, 0
jne 0x10036b38
cmp ecx, 4
jb 0x10036b20
push 0x10093890
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x4cd4]
mov ecx, edi
call fcn.10074870
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036b80
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xa0]
call fcn.1007a4c0
mov byte [ebp - 4], 0x29
mov eax, dword [esi + 0x32b0]
mov dword [ebp - 0x2c], 0x4acf326c
mov dword [ebp - 0x28], 0x5cec493c
mov dword [ebp - 0x24], 0x46803133
mov word [ebp - 0x20], 0x3f2e
test al, 1
jne 0x10036c0a
or eax, 1
mov dword [esi + 0x32b0], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x15f6], 1
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x15e8], al
add ecx, 1
adc edx, 0
jne 0x10036bf9
cmp ecx, 0xe
jb 0x10036be1
push 0x100938e0
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x15e8]
mov ecx, edi
call fcn.100748d0
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036c35
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x70]
call fcn.1007a4c0
push 0x100b5680
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xb8]
call fcn.1007a630
add esp, 4
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x2c
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x88]
call fcn.1007c0e0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x34], esp
lea edx, [ebp - 0x88]
push 0x100b58c8
call fcn.1007a630
add esp, 4
mov byte [ebp - 4], 0x2e
movaps xmm0, xmmword [0x100a4750]
mov eax, dword [esi + 0x1438]
mov byte [ebp - 0x44], 0x43
movups xmmword [ebp - 0x54], xmm0
test al, 1
jne 0x10036d09
or eax, 1
mov dword [esi + 0x1438], eax
mov byte [ebp - 4], 0x2f
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0xb71], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x54]
mov byte [esi + ecx + 0xb60], al
add ecx, 1
adc edx, 0
jne 0x10036cf8
cmp ecx, 0x11
jb 0x10036ce0
push 0x10093930
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x2e
lea edi, [esi + 0xb60]
mov ecx, edi
call fcn.10074930
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036d34
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov ecx, dword [0x100b7374]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x33
call dword [eax]
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x10036d8f
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036d85
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036e76
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp edx, 0x10
jb 0x10036de2
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036dd8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036e76
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp edx, 0x10
jb 0x10036e31
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036e27
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036e76
push edx
push ecx
call fcn.1007d924
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
cmp edx, 0x10
jb 0x10036e86
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036e7c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036e7c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1007d924
add esp, 8
mov ecx, dword [0x100bbd94]
mov edx, 0x100b5880
cmp dword [0x100b5894], 0x10
push 0x100bcf58
cmovae edx, dword [0x100b5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003813c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x854]
mov dword [ebp - 0x38], 0xf5a9ff2f
mov dword [ebp - 0x34], 0xea6ca56c
mov byte [ebp - 0x30], 0x47
push 0x100bcf58
test al, 1
jne 0x10036f3c
or eax, 1
mov dword [esi + 0x854], eax
mov dword [ebp - 4], 0x34
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x675], 1
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x38]
mov byte [esi + ecx + 0x66c], al
add ecx, 1
adc edx, 0
jne 0x10036f28
cmp ecx, 9
jb 0x10036f10
push 0x10093700
call fcn.1007d9db
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x66c]
mov ecx, edi
call fcn.10074690
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036f70
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov dword [ebp - 4], 0x35
mov eax, dword [esi + 0x47dc]
mov dword [ebp - 0x20], 0x85e0e061
test al, 1
jne 0x10036fe9
or eax, 1
mov dword [esi + 0x47dc], eax
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x2160], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x215c], al
add ecx, 1
adc edx, 0
jne 0x10036fd8
cmp ecx, 4
jb 0x10036fc0
push 0x10093750
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x215c]
mov ecx, edi
call fcn.100746f0
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037020
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xa0]
call fcn.1007a4c0
mov byte [ebp - 4], 0x37
mov eax, dword [esi + 0x2e38]
mov dword [ebp - 0x2c], 0xecadea68
mov dword [ebp - 0x28], 0xea70e930
mov dword [ebp - 0x24], 0xe0e2e937
mov word [ebp - 0x20], 0x9f22
test al, 1
jne 0x100370aa
or eax, 1
mov dword [esi + 0x2e38], eax
mov byte [ebp - 4], 0x38
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0xeee], 1
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0xee0], al
add ecx, 1
adc edx, 0
jne 0x10037099
cmp ecx, 0xe
jb 0x10037081
push 0x100937a0
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x37
lea edi, [esi + 0xee0]
mov ecx, edi
call fcn.10074750
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100370d5
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x70]
call fcn.1007a4c0
push 0x100b5868
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xb8]
call fcn.1007a630
add esp, 4
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x3a
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x88]
call fcn.1007c0e0
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x34], esp
lea edx, [ebp - 0x88]
push 0x100b58c8
call fcn.1007a630
add esp, 4
mov byte [ebp - 4], 0x3c
movaps xmm0, xmmword [0x100a56c0]
mov eax, dword [esi + 0x2cac]
mov byte [ebp - 0x44], 0x47
movups xmmword [ebp - 0x54], xmm0
test al, 1
jne 0x100371a9
or eax, 1
mov dword [esi + 0x2cac], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x1679], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x54]
mov byte [esi + ecx + 0x1668], al
add ecx, 1
adc edx, 0
jne 0x10037198
cmp ecx, 0x11
jb 0x10037180
push 0x100937f0
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x3c
lea edi, [esi + 0x1668]
mov ecx, edi
call fcn.100747b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100371d4
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov ecx, dword [0x100b7374]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x41
call dword [eax]
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x1003722f
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037225
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037316
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp edx, 0x10
jb 0x10037282
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037278
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037316
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp edx, 0x10
jb 0x100372d1
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100372c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037316
push edx
push ecx
call fcn.1007d924
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
cmp edx, 0x10
jb 0x10037326
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003731c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003731c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1007d924
add esp, 8
mov ecx, dword [0x100bbd94]
mov edx, 0x100b5880
cmp dword [0x100b5894], 0x10
push 0x100bcf58
cmovae edx, dword [0x100b5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003813c
mov ecx, 0x100bcf58
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037360
sub ecx, edx
cmp ecx, 0x20
jae 0x10037377
cmp ecx, 1
ja 0x1003813c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x45ec]
mov dword [ebp - 0x18], 0x5dbd61e3
mov dword [ebp - 0x14], 0xbdfe6c7d
push 0x100bcf58
test al, 1
jne 0x100373fc
or eax, 1
mov dword [esi + 0x45ec], eax
mov dword [ebp - 4], 0x42
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x3160], 1
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x3158], al
add ecx, 1
adc edx, 0
jne 0x100373e8
cmp ecx, 8
jb 0x100373d0
push 0x100935c0
call fcn.1007d9db
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x3158]
mov ecx, edi
call fcn.10074510
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037430
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov dword [ebp - 4], 0x43
mov eax, dword [esi + 0xdf8]
mov dword [ebp - 0x20], 0x2df47ead
test al, 1
jne 0x100374a9
or eax, 1
mov dword [esi + 0xdf8], eax
mov byte [ebp - 4], 0x44
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x2168], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x2164], al
add ecx, 1
adc edx, 0
jne 0x10037498
cmp ecx, 4
jb 0x10037480
push 0x10093610
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x43
lea edi, [esi + 0x2164]
mov ecx, edi
call fcn.10074570
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100374e0
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xa0]
call fcn.1007a4c0
mov byte [ebp - 4], 0x45
mov eax, dword [esi + 0x3290]
mov dword [ebp - 0x2c], 0x44b974a4
mov dword [ebp - 0x28], 0x92e23568
mov dword [ebp - 0x24], 0x48f677fb
mov word [ebp - 0x20], 0x437a
test al, 1
jne 0x1003756a
or eax, 1
mov dword [esi + 0x3290], eax
mov byte [ebp - 4], 0x46
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x411e], 1
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0x4110], al
add ecx, 1
adc edx, 0
jne 0x10037559
cmp ecx, 0xe
jb 0x10037541
push 0x10093660
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x45
lea edi, [esi + 0x4110]
mov ecx, edi
call fcn.100745d0
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037595
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x70]
call fcn.1007a4c0
push 0x100b5494
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xb8]
call fcn.1007a630
add esp, 4
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x48
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x88]
call fcn.1007c0e0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov ecx, esp
mov dword [ebp - 0x34], esp
lea edx, [ebp - 0x88]
push 0x100b58c8
call fcn.1007a630
add esp, 4
mov byte [ebp - 4], 0x4a
movaps xmm0, xmmword [0x100a5b00]
mov eax, dword [esi + 0x108]
mov byte [ebp - 0x44], 0x8b
movups xmmword [ebp - 0x54], xmm0
test al, 1
jne 0x10037669
or eax, 1
mov dword [esi + 0x108], eax
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x32cd], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x54]
mov byte [ecx + esi + 0x32bc], al
add ecx, 1
adc edx, 0
jne 0x10037658
cmp ecx, 0x11
jb 0x10037640
push 0x100936b0
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x4a
lea edi, [esi + 0x32bc]
mov ecx, edi
call fcn.10074630
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037694
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov ecx, dword [0x100b7374]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x4f
call dword [eax]
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x100376ef
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100376e5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100377d6
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp edx, 0x10
jb 0x10037742
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037738
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100377d6
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp edx, 0x10
jb 0x10037791
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037787
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100377d6
push edx
push ecx
call fcn.1007d924
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
cmp edx, 0x10
jb 0x100377e6
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100377dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100377dc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1007d924
add esp, 8
mov ecx, dword [0x100bbd94]
mov edx, 0x100b5880
cmp dword [0x100b5894], 0x10
push 0x100bcf58
cmovae edx, dword [0x100b5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003813c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3fec]
mov dword [ebp - 0x18], 0xc1093fb3
mov dword [ebp - 0x14], 0x134428c1
push 0x100bcf58
test al, 1
jne 0x1003788c
or eax, 1
mov dword [esi + 0x3fec], eax
mov dword [ebp - 4], 0x50
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x49b4], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [ecx + esi + 0x49ac], al
add ecx, 1
adc edx, 0
jne 0x10037878
cmp ecx, 8
jb 0x10037860
push 0x10093480
call fcn.1007d9db
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x49ac]
mov ecx, edi
call fcn.10074390
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100378c0
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov dword [ebp - 4], 0x51
mov eax, dword [esi + 0xe38]
mov dword [ebp - 0x20], 0xb14020fd
test al, 1
jne 0x10037939
or eax, 1
mov dword [esi + 0xe38], eax
mov byte [ebp - 4], 0x52
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x3ee0], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [ecx + esi + 0x3edc], al
add ecx, 1
adc edx, 0
jne 0x10037928
cmp ecx, 4
jb 0x10037910
push 0x100934d0
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x51
lea edi, [esi + 0x3edc]
mov ecx, edi
call fcn.100743f0
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037970
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xa0]
call fcn.1007a4c0
mov byte [ebp - 4], 0x53
mov eax, dword [esi + 0x218c]
mov dword [ebp - 0x2c], 0xd80d2af4
mov dword [ebp - 0x28], 0x3c5871d4
mov dword [ebp - 0x24], 0xd44229ab
mov word [ebp - 0x20], 0x7c6
test al, 1
jne 0x100379fa
or eax, 1
mov dword [esi + 0x218c], eax
mov byte [ebp - 4], 0x54
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x3842], 1
mov al, byte [ebp + ecx - 0x2c]
mov byte [ecx + esi + 0x3834], al
add ecx, 1
adc edx, 0
jne 0x100379e9
cmp ecx, 0xe
jb 0x100379d1
push 0x10093520
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x53
lea edi, [esi + 0x3834]
mov ecx, edi
call fcn.10074450
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037a25
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x70]
call fcn.1007a4c0
push 0x100b5680
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xb8]
call fcn.1007a630
add esp, 4
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x56
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x88]
call fcn.1007c0e0
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x34], esp
lea edx, [ebp - 0x88]
push 0x100b58c8
call fcn.1007a630
add esp, 4
mov byte [ebp - 4], 0x58
movaps xmm0, xmmword [0x100a5220]
mov eax, dword [esi + 0x14c4]
mov byte [ebp - 0x44], 0xdb
movups xmmword [ebp - 0x54], xmm0
test al, 1
jne 0x10037af9
or eax, 1
mov dword [esi + 0x14c4], eax
mov byte [ebp - 4], 0x59
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0x18b9], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x54]
mov byte [esi + ecx + 0x18a8], al
add ecx, 1
adc edx, 0
jne 0x10037ae8
cmp ecx, 0x11
jb 0x10037ad0
push 0x10093570
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x58
lea edi, [esi + 0x18a8]
mov ecx, edi
call fcn.100744b0
sub esp, 0x18
mov ecx, edi
mov edx, esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037b24
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov ecx, dword [0x100b7374]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x5d
call dword [eax]
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x10037b7f
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037b75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037c66
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp edx, 0x10
jb 0x10037bd2
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037bc8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037c66
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x5a
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp edx, 0x10
jb 0x10037c21
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037c17
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037c66
push edx
push ecx
call fcn.1007d924
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
cmp edx, 0x10
jb 0x10037c76
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10037c6c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10037c6c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1007d924
add esp, 8
mov ecx, dword [0x100bbd94]
mov edx, 0x100b5880
cmp dword [0x100b5894], 0x10
push 0x100bcf58
cmovae edx, dword [0x100b5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
test eax, eax
je 0x1003813c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x3aec]
mov dword [ebp - 0x18], 0x57555d4b
mov dword [ebp - 0x14], 0xd71a6867
push 0x100bcf58
test al, 1
jne 0x10037d1c
or eax, 1
mov dword [esi + 0x3aec], eax
mov dword [ebp - 4], 0x5e
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x39c], 1
nop
mov al, byte [ebp + ecx - 0x18]
mov byte [esi + ecx + 0x394], al
add ecx, 1
adc edx, 0
jne 0x10037d08
cmp ecx, 8
jb 0x10037cf0
push 0x10093340
call fcn.1007d9db
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x394]
mov ecx, edi
call fcn.10074210
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x14], esp
lea ebx, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037d50
sub ecx, ebx
push ecx
push edi
mov ecx, edx
call fcn.1007a4c0
mov dword [ebp - 4], 0x5f
mov eax, dword [esi + 0x1c34]
mov dword [ebp - 0x20], 0x271c4205
test al, 1
jne 0x10037dc9
or eax, 1
mov dword [esi + 0x1c34], eax
mov byte [ebp - 4], 0x60
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x18c0], 1
nop dword [eax]
mov al, byte [ebp + ecx - 0x20]
mov byte [esi + ecx + 0x18bc], al
add ecx, 1
adc edx, 0
jne 0x10037db8
cmp ecx, 4
jb 0x10037da0
push 0x10093390
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x5f
lea edi, [esi + 0x18bc]
mov ecx, edi
call fcn.10074270
mov ecx, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037df4
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x70]
call fcn.1007a4c0
mov byte [ebp - 4], 0x61
mov eax, dword [esi + 0x1edc]
mov dword [ebp - 0x2c], 0x4e51480c
mov dword [ebp - 0x28], 0xf8063172
mov dword [ebp - 0x24], 0x421e4b53
mov word [ebp - 0x20], 0x4760
test al, 1
jne 0x10037e7b
or eax, 1
mov dword [esi + 0x1edc], eax
mov byte [ebp - 4], 0x62
xorps xmm0, xmm0
movlpd qword [ebp - 0x38], xmm0
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov byte [esi + 0x2a56], 1
mov al, byte [ebp + ecx - 0x2c]
mov byte [esi + ecx + 0x2a48], al
add ecx, 1
adc edx, 0
jne 0x10037e6a
cmp ecx, 0xe
jb 0x10037e52
push 0x100933e0
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x61
lea edi, [esi + 0x2a48]
mov ecx, edi
call fcn.100742d0
mov ecx, edi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037eb2
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0xa0]
call fcn.1007a4c0
push 0x100b5868
lea edx, [ebp - 0xa0]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xe8]
call fcn.1007a630
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x64
push ecx
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd0]
call fcn.1007c0e0
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0x34], esp
lea edx, [ebp - 0xd0]
push 0x100b58c8
call fcn.1007a630
add esp, 4
mov byte [ebp - 4], 0x66
movaps xmm0, xmmword [str.PHLF_._]
mov eax, dword [esi + 0x2fa0]
mov byte [ebp - 0x44], 0x23
movups xmmword [ebp - 0x54], xmm0
test al, 1
jne 0x10037f89
or eax, 1
mov dword [esi + 0x2fa0], eax
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov byte [esi + 0xa35], 1
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x54]
mov byte [esi + ecx + 0xa24], al
add ecx, 1
adc edx, 0
jne 0x10037f78
cmp ecx, 0x11
jb 0x10037f60
push 0x10093430
call fcn.1007d9db
add esp, 4
mov byte [ebp - 4], 0x66
lea esi, [esi + 0xa24]
mov ecx, esi
call fcn.10074330
sub esp, 0x18
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10037fb4
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.1007a4c0
mov ecx, dword [0x100b7374]
mov eax, dword [ecx]
mov byte [ebp - 4], 0x6b
call dword [eax]
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0xbc]
cmp edx, 0x10
jb 0x10038012
mov ecx, dword [ebp - 0xd0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10038008
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10038108
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
cmp edx, 0x10
jb 0x1003806b
mov ecx, dword [ebp - 0xe8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10038061
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10038108
push edx
push ecx
call fcn.1007d924
add esp, 8
mov byte [ebp - 4], 0x68
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], 0
cmp edx, 0x10
jb 0x100380c0
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100380b6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10038108
push edx
push ecx
call fcn.1007d924
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
cmp edx, 0x10
jb 0x10038118
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003810e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003810e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.1007d924
add esp, 8
mov ecx, dword [0x100bbd94]
mov edx, 0x100b5880
cmp dword [0x100b5894], 0x10
push 0x100bcf58
cmovae edx, dword [0x100b5880]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007d0d9
mov esp, ebp
pop ebp
ret