Function at 0x9ee6e0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Get number of processors
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
mov ecx, 0xac2b34
push 0xffffffffffffffff
push 0xa92380
push eax
mov dword fs:[0], esp
sub esp, 0x80c
push ebx
push esi
push edi
call fcn.00992650
xor ecx, ecx
mov esi, eax
call fcn.00992e20
add eax, 0x60
add eax, esi
push eax
call fcn.00a71e7e
add esp, 4
push 0x100
push 0
push 0xac4eb0
call fcn.00a6e210
add esp, 0xc
mov ecx, 0xac2b34
call fcn.00992650
push eax
mov ecx, 0xac2b34
call fcn.009927a0
push eax
push 0xac4eb0
call fcn.00a6dc90
add esp, 0xc
mov ecx, 0xac2b64
call fcn.00992650
push eax
mov ecx, 0xac2b64
call fcn.009927a0
push eax
push 0xac4f14
call fcn.00a6dc90
add esp, 0xc
mov ecx, 0xac2b34
call fcn.009927a0
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x9ee790
sub eax, edx
mov ecx, 0xac2b34
push eax
call fcn.009927a0
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00992740
push eax
mov ecx, 0xac2b34
call fcn.009f4f90
lea ecx, [ebp - 0x2ec]
call fcn.00992660
mov ecx, 0xac2c3c
call fcn.009927a0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x9ee7d3
sub eax, edx
mov ecx, 0xac2c3c
push eax
call fcn.009927a0
push eax
lea ecx, [ebp - 0xa0]
call fcn.00992740
push eax
mov ecx, 0xac2c3c
call fcn.009f4f90
lea ecx, [ebp - 0xa0]
call fcn.00992660
push 0x9ee510
nop
nop
nop
nop
nop
nop
call fcn.009ee520
test al, al
jne 0x9ee835
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x200
lea eax, [ebp - 0x710]
push 0
push eax
call fcn.00a6e210
add esp, 0xc
lea eax, [ebp - 0x710]
push 0x200
push eax
push 0
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x710]
push eax
lea ecx, [ebp - 0x3d4]
call fcn.00992700
sub esp, 0x18
lea eax, [ebp - 0x3d4]
mov ecx, esp
push eax
call fcn.009f5110
mov edx, 0x1e8480
lea ecx, [ebp - 0x1f4]
call fcn.0099b550
add esp, 0x18
mov ecx, 0xac5270
call fcn.00992650
mov esi, dword [ebp - 0x1f4]
xor edi, edi
mov dword [ebp - 0x144], eax
mov ecx, dword [esi + 0x10]
sub ecx, eax
je 0x9ee9a7
cmp dword [esi + 0x14], 0x10
jb 0x9ee8c0
mov esi, dword [esi]
mov ecx, 0xac5270
call fcn.009927a0
mov ecx, dword [esi + edi]
cmp ecx, dword [eax]
jne 0x9ee908
mov ecx, dword [esi + edi + 4]
cmp ecx, dword [eax + 4]
jne 0x9ee908
lea ecx, [ebp - 0x1f4]
call fcn.009f3d80
mov ecx, eax
call fcn.009927a0
mov ecx, 0xac5270
mov esi, dword [eax + edi + 8]
mov ebx, dword [eax + edi + 0xc]
call fcn.009927a0
cmp esi, dword [eax + 8]
jne 0x9ee908
cmp ebx, dword [eax + 0xc]
je 0x9ee921
mov esi, dword [ebp - 0x1f4]
inc edi
mov eax, dword [esi + 0x10]
sub eax, dword [ebp - 0x144]
cmp edi, eax
jb 0x9ee8b8
jmp 0x9ee9a7
lea ecx, [ebp - 0x2a]
mov dword [ebp - 0x2a], 0x1f020e39
mov dword [ebp - 0x26], 0x54131d1b
mov word [ebp - 0x22], 0x100
call fcn.0099e8d0
movaps xmm0, xmmword [0xab4ec0]
lea ecx, [ebp - 0x284]
movups xmmword [ebp - 0x284], xmm0
mov esi, eax
mov dword [ebp - 0x254], 0xc880f1eb
movaps xmm0, xmmword [0xab50b0]
movups xmmword [ebp - 0x274], xmm0
mov dword [ebp - 0x250], 0x1009cd6
movaps xmm0, xmmword [0xab5870]
movups xmmword [ebp - 0x264], xmm0
call fcn.009d4970
push 0x14
push esi
push eax
push 0
nop
nop
nop
nop
nop
nop
cmp eax, 7
jne 0x9ee9a1
lea esi, [eax + 5]
jmp 0x9f158c
mov esi, dword [ebp - 0x1f4]
push 0
mov ecx, esi
mov dword [ebp - 4], 0
call fcn.009f7840
push 0
mov dword [ebp - 4], 0xffffffff
call fcn.00a7a1cb
add esp, 4
push eax
call fcn.00a71e7e
add esp, 4
mov dword [ebp - 0x30], 0x14051d1a
lea ecx, [ebp - 0x30]
mov word [ebp - 0x2c], 0x100
call fcn.009f2290
push 0
lea eax, [ebp - 0x30]
mov ecx, 0xac2b7c
push eax
call fcn.009f4b80
test eax, eax
jne 0x9eeb78
call fcn.009a4700
test al, al
je 0x9eeabd
mov eax, dword fs:[0x30]
mov dword [ebp - 0x210], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x54], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0xc8], ecx
lea ecx, [esi + edx]
mov dword [ebp - 0xc8], ecx
cmp ecx, esi
je 0x9eea94
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9eea94
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9eea8d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9eea70
cmp esi, 0xe80fd3a
je 0x9eea98
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9eea54
mov eax, dword [eax]
jmp 0x9eea21
mov eax, dword [ebp - 0xc8]
mov edx, dword [ebp - 0x54]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
lea ecx, [ebp - 0x210]
jmp 0x9eeb6d
call fcn.009a4840
test al, al
jne 0x9eeb78
mov eax, dword fs:[0x30]
mov dword [ebp - 0x130], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xc8], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x54], ecx
lea ecx, [esi + edx]
mov dword [ebp - 0x54], ecx
cmp ecx, esi
je 0x9eeb49
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9eeb49
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9eeb42
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9eeb25
cmp esi, 0xe80fd3a
je 0x9eeb4d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9eeb10
mov eax, dword [eax]
jmp 0x9eeae0
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0xc8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
lea ecx, [ebp - 0x130]
add esi, edx
call fcn.009f6dd0
push dword [eax]
call esi
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0x14051d1a
mov word [ebp - 0xec], 0x100
call fcn.009f2290
push 0
lea eax, [ebp - 0xf0]
mov ecx, 0xac2b1c
push eax
call fcn.009f4b80
test eax, eax
jne 0x9eec85
call fcn.009a4880
mov bl, al
call fcn.009a4910
mov bh, al
call fcn.009a4b70
test bl, bl
jne 0x9eebdd
test bh, bh
jne 0x9eebdd
test al, al
jne 0x9eebdd
call fcn.009a4740
test al, al
je 0x9eec85
mov eax, dword fs:[0x30]
mov dword [ebp - 0x14], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xc8], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x54], ecx
lea ecx, [esi + edx]
mov dword [ebp - 0x54], ecx
cmp ecx, esi
je 0x9eec59
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9eec59
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9eec52
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9eec35
cmp esi, 0xe80fd3a
je 0x9eec5d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9eec20
mov eax, dword [eax]
jmp 0x9eebf0
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0xc8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
lea ecx, [ebp - 0x14]
add esi, edx
call fcn.009f6dd0
push dword [eax]
call esi
lea ecx, [ebp - 0xf6]
mov dword [ebp - 0xf6], 0x14051d1a
mov word [ebp - 0xf2], 0x100
call fcn.009f2290
push 0
lea eax, [ebp - 0xf6]
mov ecx, 0xac2c24
push eax
call fcn.009f4b80
test eax, eax
jne 0x9eecc2
lea ecx, [eax + 1]
call fcn.009a4d20
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0xfc], 0x14051d1a
mov word [ebp - 0xf8], 0x100
call fcn.009f2290
push 0
lea eax, [ebp - 0xfc]
mov ecx, 0xac2c0c
push eax
call fcn.009f4b80
test eax, eax
jne 0x9eecfc
call fcn.009a7cd0
lea ecx, [ebp - 0x102]
mov dword [ebp - 0x102], 0x14051d1a
mov word [ebp - 0xfe], 0x100
call fcn.009f2290
push 0
lea eax, [ebp - 0x102]
mov ecx, 0xac2b04
push eax
call fcn.009f4b80
test eax, eax
mov dword [ebp - 0x151], 0x191e0619
lea ecx, [ebp - 0x151]
mov dword [ebp - 0x14d], 0x5b040706
setne byte [ebp - 0x15]
mov dword [ebp - 0x149], 0x141b12
mov byte [ebp - 0x145], 1
call fcn.009f2230
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xc8], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x54], ecx
lea ecx, [esi + edx]
mov dword [ebp - 0x54], ecx
cmp ecx, esi
je 0x9eedd9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9eedd9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9eedd2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9eedb5
cmp esi, 0x53b2070f
je 0x9eeddd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9eeda0
mov eax, dword [eax]
jmp 0x9eed70
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0xc8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x151]
add eax, edx
push ecx
call eax
test eax, eax
jne 0x9eee0d
xor esi, esi
jmp 0x9f158c
lea ecx, [ebp - 0x1b3]
mov dword [ebp - 0x1b3], 0x383e2639
mov dword [ebp - 0x1af], 0x5b20363c
mov dword [ebp - 0x1ab], 0x343b32
mov byte [ebp - 0x1a7], 1
call fcn.0099d460
push eax
nop
nop
nop
nop
nop
nop
mov ecx, eax
call fcn.00a0fd00
push 0
lea ecx, [ebp - 0xe7]
mov word [ebp - 0xe7], 0x54
mov byte [ebp - 0xe5], 1
call fcn.00999f20
push eax
mov ecx, 0xac2b64
call fcn.009f4b80
cmp eax, 0xffffffff
je 0x9eef0c
sub esp, 0x18
mov word [ebp - 0xea], 0x54
lea ecx, [ebp - 0xea]
mov byte [ebp - 0xe8], 1
mov esi, esp
call fcn.00999f20
push eax
mov ecx, esi
call fcn.00992700
sub esp, 0x18
mov ecx, esp
push 0xac2b64
call fcn.009f5110
lea ecx, [ebp - 0x234]
call fcn.0099be90
add esp, 0x30
lea ecx, [ebp - 0x234]
call fcn.009f3d50
cmp eax, 2
jne 0x9eef01
push 1
lea ecx, [ebp - 0x234]
call fcn.009f3d30
push eax
mov ecx, 0xac50c8
call fcn.009f4f60
push 0
lea ecx, [ebp - 0x234]
call fcn.009f3d30
push eax
mov ecx, 0xac2b64
call fcn.009f4f60
lea ecx, [ebp - 0x234]
call fcn.009f3e40
push 0
push 0
push 0
push 0x9ae2e0
push 0
push 0
nop
nop
nop
nop
nop
nop
push eax
nop
nop
nop
nop
nop
nop
cmp dword [0xac2aac], 0xffffffff
jne 0x9eefea
nop word [eax + eax]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xc8], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x54], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x54], ecx
cmp ecx, esi
je 0x9eefb9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9eefb9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9eefb2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9eef95
cmp esi, 0x2fa62ca8
je 0x9eefbd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9eef80
mov eax, dword [eax]
jmp 0x9eef50
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0xc8]
push 1
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
cmp dword [0xac2aac], 0xffffffff
je 0x9eef40
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x140], 0x1003534
call fcn.00999f30
push eax
lea ecx, [ebp - 0x228]
call fcn.00992700
mov ecx, 0x104
lea eax, [ebp - 0x818]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x9ef016
lea eax, [ebp - 0x818]
push eax
push 0xfc
nop
nop
nop
nop
nop
nop
mov edx, 0xd
lea ecx, [ebp - 0x384]
call fcn.0099c1f0
lea eax, [ebp - 0x384]
mov dword [ebp - 0x158], 0x30120004
push eax
lea ecx, [ebp - 0x158]
mov word [ebp - 0x154], 0x47
mov byte [ebp - 0x152], 1
call fcn.009994f0
push eax
lea ecx, [ebp - 0x450]
call fcn.00992700
push eax
lea edx, [ebp - 0x818]
lea ecx, [ebp - 0x438]
call fcn.009f8f70
add esp, 4
lea ecx, [ebp - 0x420]
mov edx, eax
call fcn.009f9070
add esp, 4
mov ecx, 0xac2aec
push eax
call fcn.009f4f90
lea ecx, [ebp - 0x420]
call fcn.00992660
lea ecx, [ebp - 0x438]
call fcn.00992660
lea ecx, [ebp - 0x450]
call fcn.00992660
lea eax, [ebp - 0x384]
mov dword [ebp - 0xa7], 0x30120004
push eax
lea ecx, [ebp - 0xa7]
mov word [ebp - 0xa3], 0x44
mov byte [ebp - 0xa1], 1
call fcn.009994f0
push eax
lea ecx, [ebp - 0x480]
call fcn.00992700
push eax
lea edx, [ebp - 0x818]
lea ecx, [ebp - 0x468]
call fcn.009f8f70
add esp, 4
lea ecx, [ebp - 0x24c]
mov edx, eax
call fcn.009f9070
add esp, 4
lea ecx, [ebp - 0x468]
call fcn.00992660
lea ecx, [ebp - 0x480]
call fcn.00992660
mov ecx, 0xac2aec
call fcn.009927a0
mov ecx, eax
call fcn.0099b9f0
test al, al
je 0x9ef165
push 0
mov dl, 1
mov ecx, 0xac2aec
call fcn.0099bab0
add esp, 4
lea ecx, [ebp - 0x24c]
call fcn.009927a0
mov ecx, eax
call fcn.0099b9f0
test al, al
je 0x9ef18d
push 0
mov dl, 1
lea ecx, [ebp - 0x24c]
call fcn.0099bab0
add esp, 4
push 0
mov ecx, 0xac2aec
call fcn.009927a0
mov esi, dword [0xa9b108]
push eax
call esi
mov ebx, dword [0xa9b074]
test eax, eax
jne 0x9ef1be
mov ecx, 0xac2aec
call fcn.009a5bc0
test al, al
je 0x9f1383
push 0
lea ecx, [ebp - 0x24c]
call fcn.009927a0
push eax
call esi
test eax, eax
jne 0x9ef1dd
lea ecx, [ebp - 0x24c]
call fcn.009a5bc0
lea ecx, [ebp - 0x24c]
call fcn.009927a0
mov dword [ebp - 0x10], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x130], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x14], ecx
cmp ecx, esi
je 0x9ef269
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9ef269
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9ef262
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9ef245
cmp esi, 0x7a5b9fa2
je 0x9ef26d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9ef230
mov eax, dword [eax]
jmp 0x9ef200
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x130]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
lea ecx, [ebp - 0x10]
add esi, edx
call fcn.009f6dd0
push dword [eax]
call esi
lea eax, [ebp - 0x24c]
mov ecx, 0xac2b94
push eax
call fcn.009f4f60
call fcn.009a5fa0
test al, al
je 0x9ef47f
cmp byte [ebp - 0x15], 0
jne 0x9ef47f
push 0xac2b34
lea ecx, [ebp - 0x67]
mov dword [ebp - 0x67], 0x1219031d
mov dword [ebp - 0x63], 0x1c182019
mov dword [ebp - 0x5f], 0x17391212
mov word [ebp - 0x5b], 0x1e
mov byte [ebp - 0x59], 1
call fcn.0099a230
mov edx, eax
lea ecx, [ebp - 0x2ec]
call fcn.009f8f10
add esp, 4
mov ecx, eax
call fcn.009927a0
push eax
push 1
push 0
nop
nop
nop
nop
nop
nop
lea ecx, [ebp - 0x2ec]
call fcn.00992660
nop
nop
nop
nop
nop
nop
cmp eax, 0xb7
je 0x9f1569
mov edi, dword [0xa9b074]
mov esi, 0x1e
push 0x3e8
call edi
sub esi, 1
jne 0x9ef332
sub esp, 0x18
mov dword [ebp - 0x2a], 0x323e3926
lea ecx, [ebp - 0x2a]
mov dword [ebp - 0x26], 0x1918175c
mov word [ebp - 0x22], 0x100
mov esi, esp
call fcn.0099e8d0
push eax
mov ecx, esi
call fcn.00992700
call fcn.009ae7a0
mov ecx, dword [0xac5168]
mov eax, 0x2aaaaaab
sub ecx, dword [0xac5164]
add esp, 0x18
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x9ef3b3
nop
push 0x30
call edi
mov ecx, dword [0xac5168]
mov eax, 0x2aaaaaab
sub ecx, dword [0xac5164]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x9ef390
push 2
push dword [0xac2aac]
mov byte [0xac4e81], 1
nop
nop
nop
nop
nop
nop
push dword [0xac2aac]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop word [eax + eax]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x14], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x10], ecx
cmp ecx, edx
je 0x9ef454
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9ef454
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, edx
mov ecx, dword [ebx - 4]
lea ebx, [ebx - 4]
add ecx, edx
dec edi
mov esi, 0x811c9dc5
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0x9ef44d
nop word [eax + eax]
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0x9ef430
cmp esi, 0x2fa62ca8
je 0x9ef458
mov edx, dword [eax + 0x18]
test edi, edi
jne 0x9ef415
mov eax, dword [eax]
jmp 0x9ef3f0
mov esi, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x1cf
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
jmp 0x9ef3e0
lea ecx, [ebp - 0xc3]
mov byte [0xac4eab], 0
mov word [ebp - 0xc3], 0x12
mov byte [ebp - 0xc1], 1
call fcn.00999f20
lea ecx, [ebp - 0x39c]
mov ebx, eax
call fcn.0099cbd0
push 0
push 0x14bac
mov edi, eax
call fcn.00997d20
sub esp, 0x10
mov dword [ebp - 0x10], eax
mov eax, dword [0xac2aac]
lea ecx, [ebp - 0x498]
mov esi, esp
mov dword [ebp - 0x14], eax
mov edx, edi
push 0xac2b34
push ebx
call fcn.009f8eb0
add esp, 4
mov edx, eax
mov ecx, esi
call fcn.009f9070
mov edx, dword [ebp - 0x10]
add esp, 4
mov ecx, dword [ebp - 0x14]
call fcn.009ad750
add esp, 0x18
lea ecx, [ebp - 0x498]
mov esi, eax
call fcn.00992660
lea ecx, [ebp - 0x39c]
call fcn.00992660
test esi, esi
jle 0x9ef5e2
cmp byte [0xac4eab], 0
jne 0x9ef5e2
nop dword [eax]
mov eax, dword fs:[0x30]
mov dword [ebp - 0xc4], 0x64
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9ef5a9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9ef5a9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9ef5a2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9ef585
cmp esi, 0x2fa62ca8
je 0x9ef5ad
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9ef570
mov eax, dword [eax]
jmp 0x9ef546
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
lea ecx, [ebp - 0xc4]
add esi, edx
call fcn.009f6dd0
push dword [eax]
call esi
cmp byte [0xac4eab], 0
je 0x9ef530
mov edx, 0xac2ad4
lea ecx, [ebp - 0x27c]
call fcn.009abd90
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x228]
call fcn.009f4f60
cmp dword [0xac2ae4], 0
jne 0x9ef68c
mov edi, dword [0xa9b074]
cmp dword [ebp - 0x218], 0
jne 0x9ef68c
mov edx, 0xac2ad4
lea ecx, [ebp - 0x3b4]
call fcn.009abd90
mov esi, eax
lea ecx, [ebp - 0x27c]
push esi
call fcn.009f4f90
lea eax, [esi + 0x18]
push eax
lea ecx, [ebp - 0x264]
call fcn.009f4f90
lea ecx, [ebp - 0x39c]
call fcn.00992660
lea ecx, [ebp - 0x3b4]
call fcn.00992660
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x228]
call fcn.009f4f60
push 0
push 0x1282f
call fcn.00997d20
add esp, 8
push eax
call edi
cmp dword [0xac2ae4], 0
je 0x9ef613
mov ecx, 0xac2ad4
call fcn.009927a0
push 0xaafad8
push eax
call fcn.00a6d880
add esp, 8
test eax, eax
je 0x9ef73e
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
push esi
lea ecx, [ebp - 0xa0]
call fcn.009927f0
push 1
push 0xaaf830
lea ecx, [ebp - 0xa0]
call fcn.00992810
push edi
lea ecx, [ebp - 0x20c]
call fcn.009927f0
push 1
push 0xaafad8
lea ecx, [ebp - 0x20c]
call fcn.00992810
lea eax, [ebp - 0xa0]
mov ecx, 0xac2ad4
push eax
lea edx, [ebp - 0x20c]
call fcn.0099c190
add esp, 4
lea ecx, [ebp - 0x20c]
call fcn.00992660
lea ecx, [ebp - 0xa0]
call fcn.00992660
mov ecx, 0xac2ad4
call fcn.009927a0
push 0xaafad8
push eax
call fcn.00a6d880
add esp, 8
test eax, eax
jne 0x9ef6b2
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x13c], 0x1003a3c
call fcn.00999f30
push eax
lea ecx, [ebp - 0x600]
call fcn.00992700
lea ecx, [ebp - 0x12a]
mov dword [ebp - 0x12a], 0x1003525
call fcn.00999f30
push eax
lea ecx, [ebp - 0x5e8]
call fcn.00992700
lea ecx, [ebp - 0x126]
mov dword [ebp - 0x126], 0x100362c
call fcn.00999f30
push eax
lea ecx, [ebp - 0x5d0]
call fcn.00992700
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x78], 0x100222f
call fcn.00999f30
push eax
lea ecx, [ebp - 0x5b8]
call fcn.00992700
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0x100353b
call fcn.00999f30
push eax
lea ecx, [ebp - 0x5a0]
call fcn.00992700
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x1002b23
call fcn.00999f30
push eax
lea ecx, [ebp - 0x588]
call fcn.00992700
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x74], 0x1002825
call fcn.00999f30
push eax
lea ecx, [ebp - 0x570]
call fcn.00992700
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0x100253a
call fcn.00999f30
push eax
lea ecx, [ebp - 0x558]
call fcn.00992700
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0x1002e3b
call fcn.00999f30
push eax
lea ecx, [ebp - 0x540]
call fcn.00992700
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x100352f
call fcn.00999f30
push eax
lea ecx, [ebp - 0x528]
call fcn.00992700
lea eax, [ebp - 0x510]
push eax
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x3bc]
call fcn.009f1cd0
lea ecx, [ebp - 0x3f4]
push dword [eax + 4]
push dword [eax]
call fcn.009f15f0
push fcn.00992660
push 0xa
push 0x18
lea eax, [ebp - 0x600]
push eax
call fcn.00a6c276
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x3f4]
call fcn.009f9d00
test eax, eax
je 0x9ef8fb
movaps xmm0, xmmword [0xab48b0]
lea ecx, [ebp - 0x2bc]
movups xmmword [ebp - 0x2bc], xmm0
mov dword [ebp - 0x2ac], 0x1000c0d
call fcn.0099e960
push 0xaafa68
mov esi, eax
nop
nop
nop
nop
nop
nop
push esi
push eax
nop
nop
nop
nop
nop
nop
mov esi, eax
test esi, esi
je 0x9ef8fb
push 0
nop
nop
nop
nop
nop
nop
push eax
call esi
mov ebx, dword [0xa9b1d8]
push 0xaafd78
call ebx
call fcn.009ae960
call fcn.009ae9d0
call fcn.009aea40
call fcn.009aeab0
call fcn.009aeb20
mov ecx, 0xac50b8
call fcn.009f2910
test al, al
je 0x9efc3c
mov ecx, 0xac50b8
call fcn.009f2930
test al, al
jne 0x9efc3c
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], 0x13111d09
mov dword [ebp - 0x1bc], 0x717002d
mov dword [ebp - 0x1b8], 0x161213
mov byte [ebp - 0x1b4], 1
call fcn.0099d460
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f2920
test al, al
je 0x9efc3c
lea ecx, [ebp - 0x1cd]
mov dword [ebp - 0x1cd], 0x13111d09
mov dword [ebp - 0x1c9], 0x717002d
mov dword [ebp - 0x1c5], 0x161213
mov byte [ebp - 0x1c1], 1
call fcn.0099d460
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
lea ecx, [ebp - 0x168]
mov byte [0xac2aab], al
mov dword [ebp - 0x168], 0x13111d09
mov dword [ebp - 0x164], 0x13072d
mov byte [ebp - 0x160], 1
call fcn.0099b3d0
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
lea ecx, [ebp - 0x29]
mov byte [0xac2ab5], al
mov dword [ebp - 0x29], 0x13111d09
mov dword [ebp - 0x25], 0x7172d
mov byte [ebp - 0x21], 1
call fcn.0099b3d0
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
lea ecx, [ebp - 0x66]
mov byte [0xac2aaa], al
mov dword [ebp - 0x66], 0x13111d09
mov dword [ebp - 0x62], 0x1915042d
mov dword [ebp - 0x5e], 0xa0c121a
mov word [ebp - 0x5a], 0x100
call fcn.0099e930
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
lea ecx, [ebp - 0x1eb]
mov byte [0xac2aa9], al
mov dword [ebp - 0x1eb], 0x13111d09
mov dword [ebp - 0x1e7], 0x1c1c1a2d
mov dword [ebp - 0x1e3], 0xb170305
mov word [ebp - 0x1df], 3
mov byte [ebp - 0x1dd], 1
call fcn.0099a230
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
lea ecx, [ebp - 0x19a]
mov byte [0xac2ab4], al
mov dword [ebp - 0x19a], 0x13111d09
mov dword [ebp - 0x196], 0x500152d
mov word [ebp - 0x192], 0x100
call fcn.0099e8d0
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
lea ecx, [ebp - 0x1a6]
mov byte [0xac2ab6], al
mov dword [ebp - 0x1a6], 0x13111d09
mov dword [ebp - 0x1a2], 0x1815142d
mov dword [ebp - 0x19e], 0x1000413
call fcn.0099e900
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
mov byte [0xac2aa8], al
movaps xmm0, xmmword [0xab3d50]
lea ecx, [ebp - 0x369]
movups xmmword [ebp - 0x369], xmm0
mov byte [ebp - 0x359], 1
call fcn.0099e8a0
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
lea ecx, [ebp - 0x172]
mov byte [0xac2ab8], al
mov dword [ebp - 0x172], 0x13111d09
mov dword [ebp - 0x16e], 0x1b04052d
mov word [ebp - 0x16a], 0x100
call fcn.0099e8d0
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
lea ecx, [ebp - 0x17c]
mov byte [0xac2ab7], al
mov dword [ebp - 0x17c], 0x2e151c1b
mov dword [ebp - 0x178], 0x161a051a
mov word [ebp - 0x174], 0x100
call fcn.0099e8d0
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
movaps xmm0, xmmword [0xab4ab0]
lea ecx, [ebp - 0xbc]
mov byte [0xac4ea3], al
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0xac], 0x1001e0a
call fcn.0099e960
push eax
mov ecx, 0xac50b8
call fcn.009f9120
mov ecx, eax
call fcn.009f9390
mov byte [0xac4e83], al
push 0xaaf4b8
lea ecx, [ebp - 0x2d4]
call fcn.00992700
push 0xaaf4b8
lea ecx, [ebp - 0x31c]
call fcn.00992700
push 0xaaf4b8
lea ecx, [ebp - 0x304]
call fcn.00992700
lea eax, [ebp - 0x2a8]
mov ecx, 0xac5170
push eax
call fcn.009f2790
lea eax, [ebp - 0x344]
mov ecx, 0xac5170
push eax
call fcn.009f2720
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.009f6630
test al, al
jne 0x9f0357
mov ebx, dword [ebp - 0x10]
nop dword [eax + eax]
lea ecx, [ebp - 0x2a8]
call fcn.009f1e60
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x108], 0x141d0e00
mov edi, eax
mov word [ebp - 0x104], 0x100
call fcn.009f2290
lea eax, [ebp - 0x108]
mov ecx, edi
push eax
call fcn.009f9120
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00992770
lea edx, [ebp - 0xa0]
mov ecx, esi
call fcn.00a08d20
movaps xmm0, xmmword [0xab4530]
lea ecx, [ebp - 0xbe]
movups xmmword [ebp - 0xbe], xmm0
mov dword [ebp - 0xae], 0xb0df1a10
mov word [ebp - 0xaa], 0x100
call fcn.009f2020
push 0
lea eax, [ebp - 0xbe]
push eax
lea ecx, [ebp - 0xa0]
call fcn.009f4b80
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00992660
test esi, esi
jne 0x9efecd
lea ecx, [ebp - 0x15f]
mov dword [ebp - 0x15f], 0x41c0e18
mov word [ebp - 0x15b], 0x17
mov byte [ebp - 0x159], 1
call fcn.009994f0
push eax
mov ecx, edi
call fcn.009f9120
lea ecx, [ebp - 0x39c]
push ecx
mov ecx, eax
call fcn.009f9260
push eax
lea ecx, [ebp - 0x2d4]
call fcn.009f4f90
lea ecx, [ebp - 0x39c]
call fcn.00992660
lea ecx, [ebp - 0x4e]
mov dword [ebp - 0x4e], 0x4f020d52
mov word [ebp - 0x4a], 0x100
call fcn.009f2290
push esi
lea eax, [ebp - 0x4e]
push eax
lea ecx, [ebp - 0x2d4]
call fcn.009f4b80
cmp eax, 0xffffffff
je 0x9efecd
nop dword [eax + eax]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x7c], 0x1006563
call fcn.009f2410
push dword [ebp - 0x10]
lea ecx, [ebp - 0x20c]
call fcn.009927f0
lea ecx, [ebp - 0x7c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9efe03
sub ecx, edx
lea eax, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x20c]
call fcn.00992810
lea ecx, [ebp - 0xd2]
mov dword [ebp - 0xd2], 0x4f020d52
mov word [ebp - 0xce], 0x100
call fcn.009f2290
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa0]
call fcn.009927f0
lea ecx, [ebp - 0xd2]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9efe51
sub ecx, edx
lea eax, [ebp - 0xd2]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.00992810
lea eax, [ebp - 0x20c]
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x2d4]
call fcn.0099c190
add esp, 4
lea ecx, [ebp - 0xa0]
call fcn.00992660
lea ecx, [ebp - 0x20c]
call fcn.00992660
lea ecx, [ebp - 0x4e]
mov dword [ebp - 0x4e], 0x4f020d52
mov word [ebp - 0x4a], 0x100
call fcn.009f2290
push 0
lea eax, [ebp - 0x4e]
push eax
lea ecx, [ebp - 0x2d4]
call fcn.009f4b80
cmp eax, 0xffffffff
jne 0x9efde0
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x114], 0x141d0e00
mov word [ebp - 0x110], 0x100
call fcn.009f2290
lea eax, [ebp - 0x114]
mov ecx, edi
push eax
call fcn.009f9120
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00992770
lea edx, [ebp - 0xa0]
mov ecx, esi
call fcn.00a08d20
movaps xmm0, xmmword [0xab4530]
lea ecx, [ebp - 0xbe]
movups xmmword [ebp - 0xbe], xmm0
mov dword [ebp - 0xae], 0xb3df1a10
mov word [ebp - 0xaa], 0x100
call fcn.009f2020
push 0
lea eax, [ebp - 0xbe]
push eax
lea ecx, [ebp - 0xa0]
call fcn.009f4b80
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00992660
test esi, esi
jne 0x9f010d
lea ecx, [ebp - 0x11b]
mov dword [ebp - 0x11b], 0x41c0e18
mov word [ebp - 0x117], 0x17
mov byte [ebp - 0x115], 1
call fcn.009f24b0
lea eax, [ebp - 0x11b]
mov ecx, edi
push eax
call fcn.009f9120
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00992770
lea edx, [ebp - 0xa0]
mov ecx, esi
call fcn.00a08d20
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x31c]
call fcn.009f4f90
lea ecx, [ebp - 0xa0]
call fcn.00992660
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0x4f020d52
mov word [ebp - 0x3e], 0x100
call fcn.009f2290
push 0
lea eax, [ebp - 0x42]
push eax
lea ecx, [ebp - 0x31c]
call fcn.009f4b80
cmp eax, 0xffffffff
je 0x9f010d
nop dword [eax]
nop word [eax + eax]
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x84], 0x1006563
call fcn.009f2410
push dword [ebp - 0x10]
lea ecx, [ebp - 0x20c]
call fcn.009927f0
lea ecx, [ebp - 0x84]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9f0040
sub ecx, edx
lea eax, [ebp - 0x84]
push ecx
push eax
lea ecx, [ebp - 0x20c]
call fcn.00992810
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xd8], 0x4f020d52
mov word [ebp - 0xd4], 0x100
call fcn.009f2290
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa0]
call fcn.009927f0
lea ecx, [ebp - 0xd8]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9f0091
sub ecx, edx
lea eax, [ebp - 0xd8]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.00992810
lea eax, [ebp - 0x20c]
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x31c]
call fcn.0099c190
add esp, 4
lea ecx, [ebp - 0xa0]
call fcn.00992660
lea ecx, [ebp - 0x20c]
call fcn.00992660
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0x4f020d52
mov word [ebp - 0x3e], 0x100
call fcn.009f2290
push 0
lea eax, [ebp - 0x42]
push eax
lea ecx, [ebp - 0x31c]
call fcn.009f4b80
cmp eax, 0xffffffff
jne 0x9f0010
lea ecx, [ebp - 0x10e]
mov dword [ebp - 0x10e], 0x141d0e00
mov word [ebp - 0x10a], 0x100
call fcn.009f2290
lea eax, [ebp - 0x10e]
mov ecx, edi
push eax
call fcn.009f9120
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00992770
lea edx, [ebp - 0xa0]
mov ecx, esi
call fcn.00a08d20
movaps xmm0, xmmword [0xab4530]
lea ecx, [ebp - 0xbe]
movups xmmword [ebp - 0xbe], xmm0
mov dword [ebp - 0xae], 0xb2df1a10
mov word [ebp - 0xaa], 0x100
call fcn.009f2020
push 0
lea eax, [ebp - 0xbe]
push eax
lea ecx, [ebp - 0xa0]
call fcn.009f4b80
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00992660
test esi, esi
jne 0x9f032c
lea ecx, [ebp - 0x122]
mov dword [ebp - 0x122], 0x41c0e18
mov word [ebp - 0x11e], 0x17
mov byte [ebp - 0x11c], 1
call fcn.009f24b0
lea eax, [ebp - 0x122]
mov ecx, edi
push eax
call fcn.009f9120
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00992770
lea edx, [ebp - 0xa0]
mov ecx, esi
call fcn.00a08d20
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x304]
call fcn.009f4f90
lea ecx, [ebp - 0xa0]
call fcn.00992660
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], 0x4f020d52
mov word [ebp - 0x44], 0x100
call fcn.009f2290
push 0
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x304]
call fcn.009f4b80
cmp eax, 0xffffffff
je 0x9f032c
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], 0x1006563
call fcn.009f2410
push ebx
lea ecx, [ebp - 0x20c]
call fcn.009927f0
lea ecx, [ebp - 0x80]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9f0262
sub ecx, edx
lea eax, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20c]
call fcn.00992810
lea ecx, [ebp - 0xde]
mov dword [ebp - 0xde], 0x4f020d52
mov word [ebp - 0xda], 0x100
call fcn.009f2290
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa0]
call fcn.009927f0
lea ecx, [ebp - 0xde]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9f02b0
sub ecx, edx
lea eax, [ebp - 0xde]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.00992810
lea eax, [ebp - 0x20c]
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x304]
call fcn.0099c190
add esp, 4
lea ecx, [ebp - 0xa0]
call fcn.00992660
lea ecx, [ebp - 0x20c]
call fcn.00992660
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], 0x4f020d52
mov word [ebp - 0x44], 0x100
call fcn.009f2290
push 0
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x304]
call fcn.009f4b80
cmp eax, 0xffffffff
jne 0x9f0241
lea ecx, [ebp - 0x2a8]
call fcn.009f1e10
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.009f6630
test al, al
je 0x9efcb0
mov ebx, dword [0xa9b1d8]
sub esp, 0x18
lea eax, [ebp - 0x304]
mov ecx, esp
push eax
call fcn.009f5110
sub esp, 0x18
lea eax, [ebp - 0x31c]
mov ecx, esp
push eax
call fcn.009f5110
sub esp, 0x18
lea eax, [ebp - 0x2d4]
mov ecx, esp
push eax
call fcn.009f5110
call fcn.00999520
add esp, 0x48
cmp byte [0xac4ea9], 0
jne 0x9f129d
call fcn.009da780
call fcn.009dcd90
push 0xaafd84
call ebx
mov ecx, 0xac5034
call fcn.009f1a20
mov ecx, 0xac5158
call fcn.009f1a20
mov esi, dword [0xa9b0bc]
push 0
push 0
push 0
push 0x9dd570
push 0
push 0
call esi
push 0
push 0
push 0
push 0x9de770
push 0
push 0
mov dword [ebp - 0x3c], eax
call esi
push 0
push 0
push 0
push 0x9e2760
push 0
push 0
mov dword [ebp - 0x38], eax
call esi
mov dword [ebp - 0x34], eax
call fcn.009cb3f0
test al, al
je 0x9f0495
lea ecx, [ebp - 0x408]
call fcn.009cb680
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x18170002
mov edi, eax
mov dword [ebp - 0x1c], 0x100001c
call fcn.0099ffb0
sub esp, 0x10
mov dword [ebp - 0x186], 0x1d050e38
mov esi, esp
mov dword [ebp - 0x182], 0x303d2c06
mov ecx, edi
mov word [ebp - 0x17e], 0x100
push eax
call fcn.009f9120
push eax
mov ecx, esi
call fcn.009f2c10
lea ecx, [ebp - 0x186]
call fcn.0099e8d0
push eax
mov ecx, 0xac50f0
call fcn.009f9120
mov ecx, eax
call fcn.009f2bd0
lea ecx, [ebp - 0x408]
call fcn.009f2bb0
call fcn.009cb650
lea ecx, [ebp - 0x358]
call fcn.009cc540
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x138], 0x18170002
mov edi, eax
mov dword [ebp - 0x134], 0x100001c
call fcn.009f1f60
movaps xmm0, xmmword [0xab4a80]
lea ecx, [ebp - 0x298]
movups xmmword [ebp - 0x298], xmm0
mov dword [ebp - 0x288], 0x1000c12
call fcn.009f2110
sub esp, 0x10
lea eax, [ebp - 0x138]
mov esi, esp
mov ecx, edi
push eax
call fcn.009f9120
push eax
mov ecx, esi
call fcn.009f2c10
lea eax, [ebp - 0x298]
mov ecx, 0xac50f0
push eax
call fcn.009f9120
mov ecx, eax
call fcn.009f2bd0
push dword [ebp - 0x358]
lea ecx, [ebp - 0x350]
call fcn.009f67a0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0599
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0599
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop word [eax + eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0592
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0575
cmp esi, 0x71948ca4
je 0x9f059d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0560
mov eax, dword [eax]
jmp 0x9f0534
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x3c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0
push 0x4c06c
call fcn.00997d20
add esp, 8
push eax
push dword [ebp - 0x38]
nop
nop
nop
nop
nop
nop
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0649
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0649
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax + eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0642
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0625
cmp esi, 0x71948ca4
je 0x9f064d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0610
mov eax, dword [eax]
jmp 0x9f05e5
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x34]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f06e4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f06e4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f06dd
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f06c0
cmp esi, 0xfaba0065
je 0x9f06e8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f06a6
mov eax, dword [eax]
jmp 0x9f0680
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x3c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0774
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0774
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f076d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0750
cmp esi, 0xfaba0065
je 0x9f0778
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0738
mov eax, dword [eax]
jmp 0x9f0712
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x38]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0804
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0804
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f07fd
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f07e0
cmp esi, 0xfaba0065
je 0x9f0808
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f07c8
mov eax, dword [eax]
jmp 0x9f07a2
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x34]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov ebx, dword [0xa9b0bc]
push 0
push 0
push 0
push 0x9e2d20
push 0
push 0
call ebx
push 0
push 0
push 0
push 0x9e46c0
push 0
push 0
mov dword [ebp - 0x144], eax
call ebx
push 0
push 0
push 0
push 0x9e76f0
push 0
push 0
mov dword [ebp - 0x3c], eax
call ebx
push 0
push 0
push 0
push 0x9e9950
push 0
push 0
mov dword [ebp - 0x38], eax
call ebx
push 0
push 0
push 0
push 0x9ec4f0
push 0
push 0
mov dword [ebp - 0x34], eax
call ebx
push 0
push 0
push 0
push 0x9ec640
push 0
push 0
mov dword [ebp - 0x74], eax
call ebx
push 0
push 0
push 0
push 0x9ee190
push 0
push 0
mov dword [ebp - 0x70], eax
call ebx
sub esp, 0x18
mov dword [ebp - 0x6c], eax
mov ecx, esp
push 0xac2ad4
call fcn.009f5110
sub esp, 0x18
lea eax, [ebp - 0x264]
mov ecx, esp
push eax
call fcn.009f5110
sub esp, 0x18
lea eax, [ebp - 0x27c]
mov ecx, esp
push eax
call fcn.009f5110
sub esp, 0x18
mov ecx, esp
push 0xac2aec
call fcn.009f5110
call fcn.0099d490
mov eax, dword fs:[0x30]
add esp, 0x60
mov dword [ebp - 0x78], 0x493e0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0979
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0979
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0972
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0955
cmp esi, 0x71948ca4
je 0x9f097d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0940
mov eax, dword [eax]
jmp 0x9f0916
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov edi, dword [ecx + eax*4]
lea ecx, [ebp - 0x78]
add edi, edx
call fcn.009f6dd0
lea ecx, [ebp - 0x144]
mov esi, dword [eax]
call fcn.009f6dd0
push esi
push dword [eax]
call edi
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0a24
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0a24
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0a1d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0a00
cmp esi, 0x71948ca4
je 0x9f0a28
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f09e6
mov eax, dword [eax]
jmp 0x9f09c0
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x3c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x38]
nop
nop
nop
nop
nop
nop
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0ac9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0ac9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax + eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0ac2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0aa5
cmp esi, 0x71948ca4
je 0x9f0acd
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0a90
mov eax, dword [eax]
jmp 0x9f0a65
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x34]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x74]
nop
nop
nop
nop
nop
nop
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0b74
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0b74
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0b6d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0b50
cmp esi, 0x71948ca4
je 0x9f0b78
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0b36
mov eax, dword [eax]
jmp 0x9f0b10
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x70]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0c09
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0c09
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0c02
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0be5
cmp esi, 0x71948ca4
je 0x9f0c0d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0bd0
mov eax, dword [eax]
jmp 0x9f0ba7
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push 0x493e0
push dword [ebp - 0x6c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0ca4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0ca4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0c9d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0c80
cmp esi, 0xfaba0065
je 0x9f0ca8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0c66
mov eax, dword [eax]
jmp 0x9f0c40
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x144]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0d39
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0d39
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
nop dword [eax + eax]
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0d32
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0d15
cmp esi, 0xfaba0065
je 0x9f0d3d
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0d00
mov eax, dword [eax]
jmp 0x9f0cd5
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x3c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push dword [ebp - 0x38]
nop
nop
nop
nop
nop
nop
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0dd4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0dd4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0dcd
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0db0
cmp esi, 0xfaba0065
je 0x9f0dd8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0d96
mov eax, dword [eax]
jmp 0x9f0d70
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x34]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0e64
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0e64
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0e5d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0e40
cmp esi, 0xfaba0065
je 0x9f0e68
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0e28
mov eax, dword [eax]
jmp 0x9f0e02
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x74]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0ef4
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0ef4
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0eed
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0ed0
cmp esi, 0xfaba0065
je 0x9f0ef8
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0eb8
mov eax, dword [eax]
jmp 0x9f0e92
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x70]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x14], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [esi + edx]
mov dword [ebp - 0x10], ecx
cmp ecx, esi
je 0x9f0f84
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x9f0f84
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
mov edx, dword [ebx - 4]
lea ebx, [ebx - 4]
add edx, esi
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x9f0f7d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x9f0f60
cmp esi, 0xfaba0065
je 0x9f0f88
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x9f0f48
mov eax, dword [eax]
jmp 0x9f0f22
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
push dword [ebp - 0x6c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x1191540
mov word [ebp - 0xe0], 0x100
call fcn.009f2290
lea ecx, [ebp - 0x87]
mov word [ebp - 0x87], 0x31
mov byte [ebp - 0x85], 1
call fcn.009f2440
lea eax, [ebp - 0x87]
push 0xac2ad4
push eax
lea edx, [ebp - 0x228]
lea ecx, [ebp - 0x4c8]
call fcn.009f8e50
add esp, 4
lea ecx, [ebp - 0x4b0]
mov edx, eax
call fcn.009f9070
lea ecx, [ebp - 0xe4]
add esp, 4
mov edx, eax
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9f1020
sub ecx, esi
lea eax, [ebp - 0xe4]
push ecx
push eax
mov ecx, edx
call fcn.009f7a30
push eax
lea ecx, [ebp - 0x2ec]
call fcn.009926b0
lea ecx, [ebp - 0x4b0]
call fcn.00992660
lea ecx, [ebp - 0x4c8]
call fcn.00992660
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], 0x1191540
mov word [ebp - 0x2c], 0x100
call fcn.009f2290
mov edx, 0x20
lea ecx, [ebp - 0x4f8]
call fcn.0099c1f0
push eax
lea edx, [ebp - 0x818]
lea ecx, [ebp - 0x4e0]
call fcn.009f8f70
lea ecx, [ebp - 0x30]
add esp, 4
mov edx, eax
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9f10a0
sub ecx, esi
lea eax, [ebp - 0x30]
push ecx
push eax
mov ecx, edx
call fcn.009f7a30
push eax
lea ecx, [ebp - 0x334]
call fcn.009926b0
lea ecx, [ebp - 0x4e0]
call fcn.00992660
lea ecx, [ebp - 0x4f8]
call fcn.00992660
mov ecx, 0xac5180
call fcn.009927a0
lea ecx, [ebp - 0x334]
mov ebx, eax
call fcn.009927a0
sub esp, 0x18
mov esi, eax
mov edi, esp
mov ecx, edi
push dword [ebp - 0x10]
call fcn.009927f0
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9f1104
sub ecx, edx
push ecx
push esi
mov ecx, edi
call fcn.00992810
sub esp, 0x18
mov ecx, esp
push 0xac2aec
call fcn.009f5110
mov ecx, ebx
call fcn.00997220
add esp, 0x18
lea eax, [ebp - 0x2ec]
mov ecx, esp
push eax
call fcn.009f5110
sub esp, 0x18
lea eax, [ebp - 0x334]
mov ecx, esp
push eax
call fcn.009f5110
call fcn.009aec30
add esp, 0x30
lea ecx, [ebp - 0x334]
call fcn.009927a0
push eax
nop
nop
nop
nop
nop
nop
cmp byte [0xac4ea3], 0
je 0x9f11fb
cmp byte [ebp - 0x15], 0
jne 0x9f11fb
sub esp, 0x10
mov ecx, esp
push 0xac5148
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5040
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac50f0
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5110
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5100
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5060
call fcn.009f2c10
sub esp, 0x18
lea eax, [ebp - 0x228]
mov ecx, esp
push eax
call fcn.009f5110
call fcn.009a9f00
add esp, 0x78
test al, al
je 0x9f11fb
call fcn.009a6180
sub esp, 0x18
lea eax, [ebp - 0x24c]
mov ecx, esp
push eax
call fcn.009f5110
sub esp, 0x10
mov ecx, esp
push 0xac5148
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5040
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac50f0
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5110
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5100
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5060
call fcn.009f2c10
sub esp, 0x18
lea eax, [ebp - 0x228]
mov ecx, esp
push eax
call fcn.009f5110
call fcn.009d4a10
add esp, 0x90
lea ecx, [ebp - 0x334]
call fcn.00992660
lea ecx, [ebp - 0x2ec]
call fcn.00992660
jmp 0x9f1330
cmp byte [0xac4ea3], 0
je 0x9f1330
cmp byte [ebp - 0x15], 0
jne 0x9f1330
sub esp, 0x10
mov ecx, esp
push 0xac5148
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5040
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac50f0
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5110
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5100
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5060
call fcn.009f2c10
sub esp, 0x18
lea eax, [ebp - 0x228]
mov ecx, esp
push eax
call fcn.009f5110
call fcn.009a9f00
add esp, 0x78
test al, al
je 0x9f1330
call fcn.009a6180
lea ecx, [ebp - 0x304]
call fcn.00992660
lea ecx, [ebp - 0x31c]
call fcn.00992660
lea ecx, [ebp - 0x2d4]
call fcn.00992660
lea ecx, [ebp - 0x3e8]
call fcn.009f16c0
lea ecx, [ebp - 0x3f0]
call fcn.009f1720
lea ecx, [ebp - 0x264]
call fcn.00992660
lea ecx, [ebp - 0x27c]
call fcn.00992660
mov ebx, dword [0xa9b074]
push 0xaafda0
nop
nop
nop
nop
nop
nop
cmp byte [0xac4ea3], 0
je 0x9f152a
cmp byte [ebp - 0x15], 0
je 0x9f152a
sub esp, 0x10
mov ecx, esp
push 0xac5148
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5040
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac50f0
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5110
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5100
call fcn.009f2c10
sub esp, 0x10
mov ecx, esp
push 0xac5060
call fcn.009f2c10
sub esp, 0x18
lea eax, [ebp - 0x228]
mov ecx, esp
push eax
call fcn.009f5110
call fcn.009a9f00
add esp, 0x78
test al, al
je 0x9f152a
push 0xac2b34
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x1dc], 0x1219031d
mov dword [ebp - 0x1d8], 0x1c182019
mov dword [ebp - 0x1d4], 0x17391212
mov word [ebp - 0x1d0], 0x1e
mov byte [ebp - 0x1ce], 1
call fcn.0099a230
mov edx, eax
lea ecx, [ebp - 0x510]
call fcn.009f8f10
add esp, 4
mov ecx, eax
call fcn.009927a0
push eax
push 1
push 0
nop
nop
nop
nop
nop
nop
lea ecx, [ebp - 0x510]
call fcn.00992660
nop
nop
nop
nop
nop
nop
cmp eax, 0xb7
je 0x9f1569
push 0x7530
call ebx
sub esp, 0x18
mov dword [ebp - 0x190], 0x323e3926
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x18c], 0x1918175c
mov word [ebp - 0x188], 0x100
mov esi, esp
call fcn.0099e8d0
push eax
mov ecx, esi
call fcn.00992700
call fcn.009ae7a0
mov ecx, dword [0xac5168]
mov eax, 0x2aaaaaab
sub ecx, dword [0xac5164]
add esp, 0x18
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x9f1523
nop
push 0x64
call ebx
mov ecx, dword [0xac5168]
mov eax, 0x2aaaaaab
sub ecx, dword [0xac5164]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x9f1500
mov byte [0xac4e81], 1
push 0xbb8
call ebx
push 2
push dword [0xac2aac]
nop
nop
nop
nop
nop
nop
push dword [0xac2aac]
nop
nop
nop
nop
nop
nop
cmp byte [0xac4ea3], 0
je 0x9f1569
cmp byte [ebp - 0x15], 0
je 0x9f1569
nop word [eax + eax]
push 0x3e8
call ebx
jmp 0x9f1560
lea ecx, [ebp - 0x24c]
xor esi, esi
call fcn.00992660
lea ecx, [ebp - 0x384]
call fcn.00992660
lea ecx, [ebp - 0x228]
call fcn.00992660
mov ecx, dword [ebp - 0x1f0]
test ecx, ecx
je 0x9f159b
call fcn.00993560
lea ecx, [ebp - 0x3d4]
call fcn.00992660
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10