Function at 0x8ed0b4
Capabilities:
Access peb ldr_data
Check for time delay via gettickcount
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1b
push 0
push 0
dec ecx
jne 0x8ed0bd
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
call fcn.004059c8
lea eax, [ebp + 0x20]
call fcn.004059c8
xor eax, eax
push ebp
push 0x8f0e68
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.00405738
je 0x8f0de6
xor edx, edx
push ebp
push 0x8f0ddc
push dword fs:[edx]
mov dword fs:[edx], esp
mov byte [ebp - 0x74], 0
mov byte [ebp - 0x7d], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0x1044], 0
mov byte [ebp - 0x75], 0
mov eax, dword [ebp - 8]
mov dword [eax + 0x9b0], 0xffffffff
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov byte [eax + 0x54a], 0
mov byte [ebp - 1], 0
mov eax, dword [0x98aa60]
mov byte [eax], 0x2e
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1008], 0
jle 0x8ed1ad
call sub.kernel32.dll_GetTickCount
xor edx, edx
mov ecx, dword [ebp - 8]
sub eax, dword [ecx + 0x1010]
sbb edx, dword [ecx + 0x1014]
test edx, edx
jge 0x8ed187
neg eax
adc edx, 0
neg edx
cmp edx, 0
jne 0x8ed195
cmp eax, 0x3e8
jae 0x8ed1ad
jmp 0x8ed197
jge 0x8ed1ad
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x4f4], 0
jne 0x8ed1b1
xor eax, eax
jmp 0x8ed1b3
mov al, 1
mov byte [ebp - 0x55], al
mov byte [ebp - 0x6b], 0
mov eax, dword [ebp - 8]
cmp dword [eax + 0x1008], 1
sete byte [ebp - 0x6a]
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x1008], edx
mov byte [ebp - 0x69], 0
mov eax, dword [ebp - 8]
call fcn.008eba00
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 8]
call fcn.008eba34
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00618b1c
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov byte [eax + 0x82c], 0
cmp byte [ebp + 0x24], 0
jne 0x8ed281
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe5c], 0
jne 0x8ed281
lea edx, [ebp - 0xa8]
mov eax, dword [ebp - 0xc]
call fcn.0040b2a4
mov eax, dword [ebp - 0xa8]
lea edx, [ebp - 0xa4]
call fcn.0040b04c
mov eax, dword [ebp - 0xa4]
push eax
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xe44]
call fcn.0040b2a4
mov eax, dword [ebp - 0xb0]
lea edx, [ebp - 0xac]
call fcn.0040b04c
mov edx, dword [ebp - 0xac]
pop eax
call fcn.00405738
jne 0x8ed281
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8f0de6
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xa8c], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xa90], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xece], edx
mov dword [eax + 0xed2], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xed6], edx
mov eax, dword [ebp - 8]
mov dword [eax + 0xeda], 0
mov dword [eax + 0xede], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0xe48], 0
mov eax, dword [ebp - 8]
call fcn.00953508
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 0xc]
call fcn.00485148
mov edx, dword [ebp - 0xb8]
lea eax, [ebp - 0xb4]
call fcn.00404f0c
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0x3c]
call fcn.0040adfc
mov eax, dword [ebp - 8]
cmp byte [eax + 0x103d], 0
je 0x8ed5e0
xor eax, eax
push ebp
push 0x8ed5d1
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.0094942c
mov ebx, eax
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp byte [eax + 0x557], 0
je 0x8ed370
test ebx, ebx
je 0x8ed370
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
dec eax
jg 0x8ed370
mov eax, dword [ebp - 0x3c]
call fcn.008bc6c0
test al, al
je 0x8ed370
mov eax, dword [ebp - 8]
call fcn.00944218
test al, al
je 0x8ed374
xor eax, eax
jmp 0x8ed376
mov al, 1
mov byte [ebp - 0x74], al
mov eax, dword [ebp - 8]
mov al, byte [eax + 0x1046]
xor al, 1
and al, byte [ebp - 0x74]
je 0x8ed393
mov eax, dword [ebp - 8]
mov byte [eax + 0x1046], 1
mov eax, dword [ebp - 8]
call fcn.008ebd90
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x894]
cmp dword [eax + 0x30], 0
jbe 0x8ed3b5
mov eax, dword [ebp - 8]
call fcn.0096290c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x818]
cmp byte [eax + 0x57], 0
je 0x8ed3dc
mov eax, dword [ebp - 8]
call fcn.008f8604
test al, al
jne 0x8ed3e0
mov eax, dword [ebp - 8]
cmp byte [eax + 0xefc], 0
jne 0x8ed3e0
xor eax, eax
jmp 0x8ed3e2
mov al, 1
mov edx, dword [ebp - 8]
mov byte [edx + 0x1044], al
cmp byte [ebp - 0x74], 0
je 0x8ed420
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x818]
cmp byte [eax + 0x57], 0
je 0x8ed420
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
mov dword [eax + 0xc], 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
mov dl, 1
call fcn.008b1ba0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00619b94
mov eax, dword [ebp - 8]
cmp byte [eax + 0x103c], 0
je 0x8ed5bc
xor eax, eax
push ebp
push 0x8ed5b2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x814]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x814]
xor edx, edx
call fcn.0044b198
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x814]
xor edx, edx
call fcn.0044b188
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x7f0]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x7f0]
xor edx, edx
call fcn.0044b198
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x7f0]
xor edx, edx
call fcn.0044b188
mov eax, dword [ebp - 8]
cmp byte [eax + 0x103d], 0
je 0x8ed52a
xor eax, eax
push ebp
push 0x8ed516
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp byte [eax + 0x103d], 0
je 0x8ed50c
mov eax, dword [ebp - 8]
push dword [eax + 0x107c]
push dword [eax + 0x1078]
mov eax, dword [ebp - 8]
push dword [eax + 0x108c]
push dword [eax + 0x1088]
mov eax, dword [ebp - 8]
push dword [eax + 0x1084]
push dword [eax + 0x1080]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x1070]
mov eax, dword [ebp - 8]
call fcn.009427e8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ed520
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.00942c10
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x818]
xor edx, edx
call fcn.00458bcc
mov eax, dword [0x98a324]
call fcn.004053b0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
cmp dword [eax + 0xc], 1
je 0x8ed564
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xc4]
mov eax, dword [ebp - 8]
call fcn.008f8604
test al, al
je 0x8ed57c
mov eax, dword [ebp - 8]
call fcn.008f88b0
test al, al
je 0x8ed59a
mov eax, dword [ebp - 8]
call fcn.008f8604
test al, al
jne 0x8ed5a8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.008aecac
test al, al
je 0x8ed5a8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.008b54a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ed5bc
lea eax, [ebp - 0x7c]
call fcn.004120b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ed787
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov ebx, dword [eax + 0x7c4]
cmp byte [ebx + 0x561], 0
je 0x8ed787
mov eax, dword [0x98a548]
cmp byte [ebx + 0x557], 0
je 0x8ed787
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe99], 0
jne 0x8ed787
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0e80
call fcn.00405088
je 0x8ed787
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0e90
call fcn.00405088
je 0x8ed787
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0ea0
call fcn.00405088
je 0x8ed787
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0eb0
call fcn.00405088
je 0x8ed787
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0ec0
call fcn.00405088
je 0x8ed787
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0ed0
call fcn.00405088
je 0x8ed787
mov eax, dword [ebp - 0x3c]
call fcn.008bc6c0
test al, al
je 0x8ed787
xor eax, eax
push ebp
push 0x8ed77d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x10b4]
mov eax, dword [eax + 0x10b0]
push edx
push eax
call sub.kernel32.dll_GetTickCount
xor edx, edx
sub dword [esp], eax
sbb dword [esp + 4], edx
pop eax
pop edx
test edx, edx
jge 0x8ed6d8
neg eax
adc edx, 0
neg edx
cmp edx, 0
jne 0x8ed6e6
cmp eax, 0x1f4
jae 0x8ed6fe
jmp 0x8ed6e8
jge 0x8ed6fe
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x2e4]
mov si, 0xffb5
call fcn.00404028
test al, al
jne 0x8ed702
xor eax, eax
jmp 0x8ed704
mov al, 1
mov byte [ebp - 0x75], al
mov eax, dword [ebp - 8]
call fcn.0094942c
mov ebx, eax
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp byte [eax + 0x557], 0
je 0x8ed750
test ebx, ebx
je 0x8ed750
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
dec eax
jg 0x8ed750
mov eax, dword [ebp - 0x3c]
call fcn.008bc6c0
test al, al
je 0x8ed750
mov eax, dword [ebp - 8]
call fcn.00944218
test al, al
je 0x8ed754
xor eax, eax
jmp 0x8ed756
mov al, 1
mov byte [ebp - 0x74], al
mov eax, dword [ebp - 8]
mov al, byte [eax + 0x1046]
xor al, 1
and al, byte [ebp - 0x74]
je 0x8ed773
mov eax, dword [ebp - 8]
mov byte [eax + 0x1046], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ed787
mov eax, dword [ebp - 8]
mov byte [eax + 0x103d], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
jne 0x8ed7b3
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 8]
add eax, 0xe50
call fcn.004053b0
mov eax, dword [ebp - 8]
add eax, 0xe54
call fcn.004053b0
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xe58], edx
mov eax, dword [ebp - 8]
mov dword [eax + 0xe60], 1
mov eax, dword [ebp - 8]
cmp dword [eax + 0xbec], 0
je 0x8ed82b
xor eax, eax
push ebp
push 0x8ed816
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
add eax, 0xbec
call fcn.004120b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ed820
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xbec], edx
cmp byte [ebp + 0xc], 0
jne 0x8eda70
mov eax, dword [ebp - 8]
call fcn.00944218
test al, al
je 0x8eda70
cmp byte [ebp + 8], 0
jne 0x8eda70
mov eax, dword [ebp - 8]
mov byte [eax + 0x1046], 0
mov eax, dword [ebp - 8]
add eax, 0xe44
mov edx, dword [ebp - 0xc]
call fcn.004053ec
mov eax, dword [ebp - 8]
add eax, 0xeaa
mov edx, dword [ebp - 0xc]
call fcn.004053ec
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 0xc]
call fcn.00484ff0
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 8]
add eax, 0xeae
call fcn.004053ec
fld qword [ebp + 0x2c]
fcomp dword [0x8f0ed8]
fnstsw ax
sahf
jbe 0x8ed903
mov eax, dword [ebp - 8]
mov edx, dword [ebp + 0x2c]
mov dword [eax + 0xec6], edx
mov edx, dword [ebp + 0x30]
mov dword [eax + 0xeca], edx
cmp dword [ebp + 0x3c], 0
jne 0x8ed8cb
cmp dword [ebp + 0x38], 0
jbe 0x8ed8e7
jmp 0x8ed8cd
jle 0x8ed8e7
mov eax, dword [ebp - 8]
mov edx, dword [ebp + 0x38]
mov dword [eax + 0xeba], edx
mov edx, dword [ebp + 0x3c]
mov dword [eax + 0xebe], edx
jmp 0x8ed9be
mov eax, dword [ebp - 0xc]
call fcn.008b1638
mov ecx, dword [ebp - 8]
mov dword [ecx + 0xeba], eax
mov dword [ecx + 0xebe], edx
jmp 0x8ed9be
lea ecx, [ebp - 0xa0]
mov dl, 1
mov eax, dword [ebp - 0xc]
call fcn.008b1104
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0xa0]
mov dword [eax + 0xece], edx
mov edx, dword [ebp - 0x9c]
mov dword [eax + 0xed2], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x98]
mov dword [eax + 0xed6], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0xeda], edx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 0xede], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0xec6], edx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xeca], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0xeba], edx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 0xebe], edx
mov eax, dword [ebp - 8]
cmp dword [eax + 0xebe], 0
jne 0x8ed9a5
cmp dword [eax + 0xeba], 0
jae 0x8ed9be
jmp 0x8ed9a7
jge 0x8ed9be
mov eax, dword [ebp - 0xc]
call fcn.008b1638
mov ecx, dword [ebp - 8]
mov dword [ecx + 0xeba], eax
mov dword [ecx + 0xebe], edx
mov eax, dword [ebp - 8]
push dword [eax + 0xeca]
push dword [eax + 0xec6]
lea edx, [ebp - 0xc0]
mov eax, dword [0x98a604]
mov eax, dword [eax]
call fcn.0040f0ec
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 8]
add eax, 0xec2
call fcn.00405594
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf9], 0
mov eax, dword [ebp - 8]
call fcn.00936a3c
mov eax, dword [ebp - 8]
call fcn.00944784
mov eax, dword [ebp - 8]
call fcn.008e5750
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
cmp dword [eax + 0xc], 1
jne 0x8eda63
xor eax, eax
push ebp
push 0x8eda59
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
xor edx, edx
call fcn.008b1ba0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
xor edx, edx
mov dword [eax + 0xc], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8eda63
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8f0de6
mov byte [ebp - 0x49], 0
mov byte [ebp - 0x3d], 0
mov byte [ebp - 0x4d], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0xacd], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0xacf], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf9], 1
mov eax, dword [ebp - 8]
mov byte [eax + 0x1027], 0
xor edx, edx
push ebp
push 0x8edb49
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x58c]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x588]
xor edx, edx
mov dword [eax + 0xc], edx
cmp dword [eax + 0x30], 0
je 0x8edae5
xor edx, edx
call fcn.0044b198
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x58c]
cmp dword [eax + 0x30], 0
je 0x8edafb
xor edx, edx
call fcn.0044b198
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x584]
mov byte [ebx + 0x1c0], 1
mov eax, dword [ebp - 8]
cmp dword [eax + 0xa94], 0
je 0x8edb3f
mov eax, ebx
call fcn.006118d4
test eax, eax
jle 0x8edb32
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x584]
mov dl, 1
call fcn.005fd124
mov eax, dword [ebp - 8]
add eax, 0xa94
call fcn.004120b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8edb53
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5e0]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x1000]
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x1000], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x1004], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00619bd4
mov eax, dword [ebp - 0xc]
call fcn.008b4aa0
test al, al
je 0x8f0b25
xor edx, edx
push ebp
push 0x8f0b1b
push dword fs:[edx]
mov dword fs:[edx], esp
cmp byte [ebp - 0x55], 0
je 0x8edbe4
cmp byte [ebp - 0x69], 0
jne 0x8edbcd
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xe0]
mov byte [ebp - 0x69], 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0xb80]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624be4
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.008afef4
cmp byte [ebp - 0x55], 0
je 0x8edc15
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x508]
cmp dword [eax + 0xc], 1
jne 0x8edc15
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.006291bc
test al, al
jne 0x8edc19
xor eax, eax
jmp 0x8edc1b
mov al, 1
mov byte [ebp - 0x6b], al
cmp byte [ebp - 0x6b], 0
je 0x8edc3e
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7d8]
mov eax, dword [eax + 0x514]
xor edx, edx
call fcn.00629100
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x508]
cmp dword [eax + 0xc], 1
jne 0x8edc76
mov eax, dword [ebp - 8]
cmp byte [eax + 0xefc], 0
jne 0x8edc65
mov eax, dword [ebp - 8]
cmp dword [eax + 0xea4], 0
je 0x8edc76
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x508]
mov edx, dword [eax]
call dword [edx + 0xe0]
mov eax, dword [ebp - 8]
add eax, 0xe44
mov edx, dword [ebp - 0xc]
call fcn.004053ec
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x40c], 0
je 0x8edd39
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe99], 0
jne 0x8edd39
mov eax, dword [ebp - 8]
call fcn.008f8614
test al, al
jne 0x8edcc4
mov eax, dword [ebp - 8]
call fcn.008f8654
test al, al
je 0x8edcca
cmp byte [ebp + 0x14], 0
je 0x8edd39
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7d8]
call fcn.008f8634
test al, al
jne 0x8edd18
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7d8]
call fcn.008f8634
test al, al
jne 0x8edd39
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
mov esi, dword [eax + 0xd0]
cmp esi, 1
je 0x8edd18
mov eax, dword [0x98a548]
cmp esi, 2
jne 0x8edd39
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + pe_nt_image_headers32]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.0061acac
mov eax, dword [ebp - 8]
mov byte [eax + 0x8b5], 1
mov eax, dword [ebp - 8]
cmp byte [eax + 0xbe5], 0
je 0x8edd7b
mov eax, dword [ebp - 8]
mov byte [eax + 0xbe5], 0
mov eax, dword [ebp - 8]
add eax, 0xbe8
call fcn.004120b8
mov dl, 1
mov eax, dword [0x62a81c]
call fcn.00632eb8
mov edx, dword [ebp - 8]
mov dword [edx + 0xbe8], eax
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe99], 0
jne 0x8edda8
cmp byte [ebp + 0x10], 0
je 0x8edda8
cmp byte [ebp - 0x69], 0
jne 0x8edda8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xe0]
mov byte [ebp - 0x69], 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x46d], 0
je 0x8eddca
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov dl, 1
call fcn.0061c2dc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624ac0
call fcn.005d1348
mov esi, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624ac0
call fcn.005d1350
add esi, eax
test esi, esi
jle 0x8ede00
mov eax, dword [ebp - 8]
call fcn.00944784
mov eax, dword [ebp - 8]
mov esi, dword [eax + 0x514]
xor eax, eax
mov dword [esi + 0xc], eax
mov eax, esi
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
call fcn.006030d8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
xor edx, edx
call fcn.00604b8c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
xor edx, edx
call fcn.00604b8c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
xor edx, edx
call fcn.00604b8c
mov eax, dword [ebp - 8]
mov byte [eax + 0x8a0], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x269], 0
je 0x8edead
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov byte [eax + 0x26b], 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
xor edx, edx
call fcn.00624748
mov byte [ebp - 0x4c], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 1
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe99], 0
jne 0x8edef5
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
mov esi, dword [eax + 0xd0]
cmp esi, 3
je 0x8edee9
mov eax, dword [0x98a548]
cmp esi, 4
jne 0x8edef5
mov eax, dword [ebp - 8]
call fcn.008f8614
test al, al
jne 0x8edef9
xor eax, eax
jmp 0x8edefb
mov al, 1
mov byte [ebp - 0x7d], al
cmp byte [ebp - 0x7d], 0
je 0x8edf14
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov byte [eax + 0x624], 1
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0ee4
call fcn.00405088
jne 0x8edf3c
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.00908744
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0ef4
call fcn.00405088
jne 0x8edf64
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.00908950
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0f04
call fcn.00405088
jne 0x8edfcb
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e92a8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x14
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8edfc2
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0f14
call fcn.00405088
jne 0x8ee051
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8edff9
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee00d
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x15
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee048
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0f24
call fcn.00405088
jne 0x8ee0d7
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee07f
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee093
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x16
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee0ce
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0f34
call fcn.00405088
jne 0x8ee15d
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee105
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee119
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x17
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee154
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0f44
call fcn.00405088
jne 0x8ee1e3
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee18b
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee19f
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x18
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee1da
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0f54
call fcn.00405088
jne 0x8ee269
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee211
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee225
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x19
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee260
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0f64
call fcn.00405088
jne 0x8ee2ef
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee297
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee2ab
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x1a
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee2e6
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0f74
call fcn.00405088
jne 0x8ee375
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee31d
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee331
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x1b
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee36c
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0f84
call fcn.00405088
jne 0x8ee3fb
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee3a3
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee3b7
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x1c
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee3f2
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0f94
call fcn.00405088
jne 0x8ee481
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee429
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee43d
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x20
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee478
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0fa4
call fcn.00405088
jne 0x8ee507
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee4af
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee4c3
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x1d
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee4fe
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0fb4
call fcn.00405088
jne 0x8ee58d
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee535
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee549
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x1e
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee584
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0fc4
call fcn.00405088
jne 0x8ee613
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee5bb
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee5cf
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x1f
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee60a
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0fd4
call fcn.00405088
jne 0x8ee699
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee641
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee655
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x22
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee690
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0fe4
call fcn.00405088
jne 0x8ee71f
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee6c7
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee6db
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x23
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee716
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f0ff4
call fcn.00405088
jne 0x8ee7a5
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 0
jne 0x8ee74d
push ebp
call fcn.008ec9a4
pop ecx
jmp 0x8ee761
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ea93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x24
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x228], 2
je 0x8ee79c
mov eax, dword [ebp - 8]
mov byte [eax + 0xaf8], 0
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1004
call fcn.00405088
jne 0x8ee7df
push ebp
call fcn.008ec9a4
pop ecx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x25
mov byte [ebp - 0x4c], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1014
call fcn.00405088
jne 0x8ee82e
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x32
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1024
call fcn.00405088
jne 0x8ee87d
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x33
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1034
call fcn.00405088
jne 0x8ee8cc
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x34
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1044
call fcn.00405088
jne 0x8ee91b
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x35
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1054
call fcn.00405088
jne 0x8ee96a
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x36
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1064
call fcn.00405088
jne 0x8ee9b9
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x37
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1074
call fcn.00405088
jne 0x8eea08
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x38
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1084
call fcn.00405088
jne 0x8eea57
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x39
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1094
call fcn.00405088
jne 0x8eeaa6
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x3a
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f10a4
call fcn.00405088
jne 0x8eeaf5
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x3b
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f10b4
call fcn.00405088
jne 0x8eeb44
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x3c
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f10c0
call fcn.00405088
jne 0x8eeb93
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e86b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x3d
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f10d0
call fcn.00405088
jne 0x8eebe2
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e8cb0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x50
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f10e0
call fcn.00405088
jne 0x8eec31
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e8cb0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x51
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f10f0
call fcn.00405088
jne 0x8eec80
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e8cb0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x52
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1100
call fcn.00405088
jne 0x8eeccf
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e8cb0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x53
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1110
call fcn.00405088
jne 0x8eed1e
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e8cb0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x54
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1120
call fcn.00405088
jne 0x8eed6d
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e8cb0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x55
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1130
call fcn.00405088
je 0x8eed8b
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1140
call fcn.00405088
jne 0x8eedcb
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e8cb0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x56
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1150
call fcn.00405088
je 0x8eede9
mov eax, dword [ebp - 0x3c]
mov edx, 0x8f1160
call fcn.00405088
jne 0x8eee29
push 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e8cb0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov dword [eax + 0x24], 0x57
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 1
jmp 0x8ef996
xor edx, edx
push ebp
push 0x8ef97e
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x98a548]
mov eax, dword [eax]
cmp dword [eax + 0x824], 0
je 0x8ef06c
xor edx, edx
push ebp
push 0x8ef04e
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x824]
mov edx, dword [eax]
call dword [edx + 0xe0]
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x824]
mov edx, dword [eax]
call dword [edx + 0xd0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
pop edx
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00618b1c
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x824]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
pop edx
call fcn.0060bffc
mov eax, dword [0x98a548]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x824], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.0061acac
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 3
jne 0x8ef044
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0xe8], 1
je 0x8ef044
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov eax, dword [eax + 0xf4]
mov edx, dword [ebp - 8]
mov dword [edx + 0xa8c], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov eax, dword [eax + 0xf8]
mov edx, dword [ebp - 8]
mov dword [edx + 0xa90], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 0xc]
mov ebx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 8]
cmp ebx, eax
jle 0x8eefbe
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xa8c]
mov edx, dword [ebp - 8]
cmp eax, dword [edx + 0xa90]
jl 0x8ef004
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 8]
mov ebx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 0xc]
cmp ebx, eax
jle 0x8ef01a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xa90]
mov edx, dword [ebp - 8]
cmp eax, dword [edx + 0xa8c]
jge 0x8ef01a
mov eax, dword [ebp - 8]
lea edx, [eax + 0xa90]
mov eax, dword [ebp - 8]
add eax, 0xa8c
call fcn.008aef44
mov eax, dword [ebp - 8]
mov dword [eax + 0xa78], 0
mov dword [eax + 0xa7c], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x58c]
mov edx, 0x3e8
call fcn.0044b198
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ef058
mov eax, dword [0x98a548]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x824], edx
jmp 0x8ef974
cmp dword [ebp + 0x28], 0
jne 0x8ef2ea
mov eax, dword [ebp + 0x20]
xor edx, edx
call fcn.00405738
je 0x8ef09f
mov eax, dword [ebp - 8]
add eax, 0xb60
call fcn.004053b0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48c]
mov byte [eax + 0x1c0], 1
xor eax, eax
push ebp
push 0x8ef0c4
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0060c064
mov dword [ebp + 0x28], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ef0d3
cmp dword [ebp + 0x28], 0
jne 0x8ef1e5
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00619b94
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0x88]
mov byte [ebp - 0x49], 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
cmp byte [eax + 0x46], 2
jne 0x8ef187
xor eax, eax
push ebp
push 0x8ef17d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, 1
call fcn.00633528
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, 1
call fcn.006336e8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
xor edx, edx
call fcn.00638894
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ef187
xor eax, eax
push ebp
push 0x8ef1b9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov edx, dword [ebp - 0xc]
mov si, 0xffed
call fcn.00404028
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ef1c3
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0x124]
test al, al
jne 0x8ef974
mov byte [ebp - 0x49], 0
jmp 0x8ef974
xor eax, eax
push ebp
push 0x8ef2db
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp + 0x28], 3
sete al
and al, byte [ebp + 0x14]
je 0x8ef27d
xor eax, eax
push ebp
push 0x8ef26b
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5fc9b4]
call fcn.005fceb8
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x1bc]
mov byte [eax + 0x548], 1
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x54]
mov si, 0xffe8
call fcn.00404028
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x1bc]
mov eax, dword [eax + 0xf4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x1bc]
mov eax, dword [eax + 0xf8]
mov dword [ebp + 0x34], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ef275
lea eax, [ebp - 0x54]
call fcn.004120b8
push ebp
call fcn.008ebfd0
pop ecx
mov eax, dword [ebp - 8]
cmp dword [eax + 0xb80], 1
jne 0x8ef2ce
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 1
jne 0x8ef2ce
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x78], 1
jle 0x8ef2ce
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.0091dc6c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ef974
cmp byte [ebp + 0x14], 0
je 0x8ef4d0
cmp dword [ebp + 0x28], 3
jne 0x8ef4d0
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe99], 0
jne 0x8ef4d0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x518]
cmp byte [eax + 0x57], 0
jne 0x8ef4d0
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe9a], 0
jne 0x8ef4d0
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0xd0], 1
je 0x8ef37d
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0xd0], 2
je 0x8ef37d
mov eax, dword [ebp - 8]
call fcn.008f8634
test al, al
je 0x8ef4d0
mov eax, dword [ebp - 8]
cmp byte [eax + 0xefc], 0
jne 0x8ef4d0
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008e1ad0
test al, al
je 0x8ef4d0
mov eax, dword [ebp + 0x20]
xor edx, edx
call fcn.00405738
je 0x8ef3b9
mov eax, dword [ebp - 8]
add eax, 0xb60
call fcn.004053b0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48c]
mov byte [eax + 0x1c0], 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov eax, dword [eax + 0xf4]
mov edx, dword [ebp - 8]
mov dword [edx + 0xa8c], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov eax, dword [eax + 0xf8]
mov edx, dword [ebp - 8]
mov dword [edx + 0xa90], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 0xc]
mov ebx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 8]
cmp ebx, eax
jle 0x8ef445
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xa8c]
mov edx, dword [ebp - 8]
cmp eax, dword [edx + 0xa90]
jl 0x8ef48b
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 8]
mov ebx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 0xc]
cmp ebx, eax
jle 0x8ef4a1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xa90]
mov edx, dword [ebp - 8]
cmp eax, dword [edx + 0xa8c]
jge 0x8ef4a1
mov eax, dword [ebp - 8]
lea edx, [eax + 0xa90]
mov eax, dword [ebp - 8]
add eax, 0xa8c
call fcn.008aef44
mov eax, dword [ebp - 8]
mov dword [eax + 0xa78], 0
mov dword [eax + 0xa7c], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x58c]
mov edx, 0x3e8
call fcn.0044b198
jmp 0x8ef92a
cmp byte [ebp + 0x14], 0
je 0x8ef923
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe99], 0
jne 0x8ef923
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x518]
cmp byte [eax + 0x57], 0
je 0x8ef513
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp byte [eax + 0xf6], 0
jne 0x8ef923
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xb60]
mov edx, dword [ebp - 0xc]
call fcn.00405738
jne 0x8ef923
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xb64]
cmp eax, dword [ebp - 0x1c]
jl 0x8ef923
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xb68]
cmp eax, dword [ebp - 0x24]
jl 0x8ef923
cmp byte [ebp - 0x55], 0
je 0x8ef6e3
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x4f4], 2
je 0x8ef588
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x4f4], 3
jne 0x8ef6e3
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00619c14
mov byte [ebp - 0x69], 0
jmp 0x8ef60e
test ebx, ebx
jle 0x8ef5bf
fild dword [ebp - 0x1c]
fmul dword [0x8f1168]
call fcn.00402ffc
push edx
push eax
lea eax, [ebx + 0x32]
cdq
push edx
push eax
call fcn.00437f04
mov ebx, eax
jmp 0x8ef5f0
test ebx, ebx
jge 0x8ef5f0
fild dword [ebp - 0x1c]
fmul dword [0x8f1168]
call fcn.00402ffc
push edx
push eax
mov eax, 0xffffffff
mov edx, eax
call fcn.0040615c
push edx
push eax
mov eax, ebx
sub eax, 0x32
cdq
push edx
push eax
call fcn.00437fc8
mov ebx, eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x1000], ebx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.0061a2d0
push 0xa
call sub.kernel32.dll_Sleep_1
mov eax, dword [ebp - 8]
cmp byte [eax + 0xa71], 0
jne 0x8ef59c
jmp 0x8ef68e
test ebx, ebx
jle 0x8ef63f
fild dword [ebp - 0x1c]
fmul dword [0x8f1168]
call fcn.00402ffc
push edx
push eax
lea eax, [ebx + 0x32]
cdq
push edx
push eax
call fcn.00437f04
mov ebx, eax
jmp 0x8ef670
test ebx, ebx
jge 0x8ef670
fild dword [ebp - 0x1c]
fmul dword [0x8f1168]
call fcn.00402ffc
push edx
push eax
mov eax, 0xffffffff
mov edx, eax
call fcn.0040615c
push edx
push eax
mov eax, ebx
sub eax, 0x32
cdq
push edx
push eax
call fcn.00437fc8
mov ebx, eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x1000], ebx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.0061a2d0
push 0xa
call sub.kernel32.dll_Sleep_1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48c]
call fcn.006130f4
test eax, eax
jg 0x8ef61c
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x1000], edx
cmp byte [ebp - 0x69], 0
jne 0x8ef6ca
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xe0]
mov byte [ebp - 0x69], 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0xb80]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624be4
jmp 0x8ef6fb
mov eax, dword [ebp - 8]
call fcn.00934b68
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48c]
xor edx, edx
call fcn.005fd124
mov eax, dword [ebp - 8]
mov byte [eax + 0xa72], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x594]
cmp dword [eax + 0x30], 0
jbe 0x8ef724
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x594]
xor edx, edx
call fcn.0044b198
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x490]
cmp dword [eax + 0x30], 0
jbe 0x8ef743
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x490]
xor edx, edx
call fcn.0044b198
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xb6c]
call fcn.00633348
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00618b1c
mov eax, dword [ebp - 8]
add eax, 0xb60
call fcn.004053b0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x48c]
mov edx, dword [edx + 0x1bc]
call fcn.0060bffc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 1
jne 0x8ef7c2
push ebp
call fcn.008ebe14
pop ecx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.0061acac
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 3
jne 0x8ef92a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp byte [eax + 0xe1], 1
je 0x8ef92a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov eax, dword [eax + 0xf4]
mov edx, dword [ebp - 8]
mov dword [edx + 0xa8c], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov eax, dword [eax + 0xf8]
mov edx, dword [ebp - 8]
mov dword [edx + 0xa90], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 0xc]
mov ebx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 8]
cmp ebx, eax
jle 0x8ef89b
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xa8c]
mov edx, dword [ebp - 8]
cmp eax, dword [edx + 0xa90]
jl 0x8ef8e1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 8]
mov ebx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 0xc]
cmp ebx, eax
jle 0x8ef8f7
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xa90]
mov edx, dword [ebp - 8]
cmp eax, dword [edx + 0xa8c]
jge 0x8ef8f7
mov eax, dword [ebp - 8]
lea edx, [eax + 0xa90]
mov eax, dword [ebp - 8]
add eax, 0xa8c
call fcn.008aef44
mov eax, dword [ebp - 8]
mov dword [eax + 0xa78], 0
mov dword [eax + 0xa7c], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x58c]
mov edx, 0x3e8
call fcn.0044b198
jmp 0x8ef92a
push ebp
call fcn.008ebfd0
pop ecx
mov eax, dword [ebp - 8]
cmp dword [eax + 0xb80], 1
jne 0x8ef974
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 1
jne 0x8ef974
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x78], 1
jle 0x8ef974
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.0091dc6c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8ef996
mov byte [ebp - 0x3d], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0x8a2], 1
mov eax, dword [ebp - 8]
cmp byte [eax + 0x1046], 0
je 0x8ef9c6
mov eax, dword [ebp - 8]
cmp byte [eax + 0xacc], 0
jne 0x8ef9c6
mov eax, dword [ebp - 8]
mov byte [eax + 0x1046], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 2
jne 0x8efad7
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0xc0], 0
jne 0x8efa92
xor eax, eax
push ebp
push 0x8efa88
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
push eax
push 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov ecx, eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008eba68
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jle 0x8efa7e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov edx, dword [ebp - 0x68]
call fcn.00604bac
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0x88]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8efa92
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0xc0], 1
jle 0x8efad7
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
cmp byte [eax + 0x57], 0
jne 0x8efac8
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.008ebc4c
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.008ead78
mov byte [ebp - 0x3d], 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 1
jne 0x8efaf8
push ebp
call fcn.008ebe14
pop ecx
cmp byte [ebp - 0x3d], 0
je 0x8efbf3
mov byte [ebp - 0x4b], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0xef5], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x57], 0
je 0x8efb44
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov si, 0xffb5
call fcn.00404028
mov byte [ebp - 0x4b], al
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
xor edx, edx
call fcn.00458bcc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
call fcn.008aecac
test al, al
je 0x8efb9f
lea eax, [ebp - 0x73]
call fcn.008aebe0
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x73]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
call fcn.004587e4
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x73], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6f], eax
mov eax, dword [ebp - 0x73]
push eax
mov eax, dword [ebp - 0x6f]
push eax
mov cl, byte [0x8f116c]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.00935d20
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
cmp byte [eax + 0x57], 0
jne 0x8efbc6
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.008ebc4c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
call fcn.00458f1c
cmp byte [ebp - 0x4b], 0
je 0x8efcf3
mov eax, dword [ebp - 8]
cmp dword [eax + 0xc14], 0
je 0x8efcf3
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc14]
call fcn.008b54a0
jmp 0x8efcf3
mov eax, dword [ebp - 8]
mov byte [eax + 0xef5], 1
mov byte [ebp - 0x4b], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
cmp byte [eax + 0x57], 0
je 0x8efc4d
mov eax, dword [ebp - 8]
cmp dword [eax + 0xc14], 0
je 0x8efc32
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xc14]
mov si, 0xffb5
call fcn.00404028
test al, al
jne 0x8efc36
xor eax, eax
jmp 0x8efc38
mov al, 1
mov byte [ebp - 0x4b], al
mov eax, dword [ebp - 8]
call fcn.008eaf68
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.008ebc4c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x57], 0
jne 0x8efcda
xor eax, eax
push ebp
push 0x8efcb2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.008f8604
test al, al
je 0x8efc98
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xea4]
mov eax, dword [eax + 0x2f4]
mov si, 0xffb5
call fcn.00404028
test al, al
jne 0x8efca8
mov byte [ebp - 0x4d], 1
jmp 0x8efca8
mov eax, dword [ebp - 8]
call fcn.008f8614
test al, al
je 0x8efca8
mov byte [ebp - 0x4d], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8efcbc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov dl, 1
call fcn.00458bcc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00458f1c
cmp byte [ebp - 0x4b], 0
je 0x8efcf3
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x57], 0
je 0x8efcf3
mov byte [ebp - 0x4d], 1
mov eax, dword [ebp - 8]
cmp byte [eax + 0xacc], 0
je 0x8efd09
mov eax, dword [ebp - 8]
mov byte [eax + 0xef5], 0
mov eax, dword [ebp - 8]
call fcn.00936a3c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 8], 1
jne 0x8efd4f
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x538], 0
je 0x8efd71
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
xor edx, edx
call fcn.00624d98
jmp 0x8efd71
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x538], 0
jne 0x8efd71
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov dl, 1
call fcn.00624d98
cmp byte [ebp - 0x49], 0
je 0x8efdf3
xor eax, eax
push ebp
push 0x8efdec
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00619b94
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
call fcn.006030d8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
xor edx, edx
mov dword [eax + 0x24], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0x88]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x8efdf3
mov eax, dword [ebp - 8]
call fcn.00944784
ret
mov eax, dword [ebp - 8]
cmp dword [eax + 0xa8c], 0
jle 0x8efe25
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xa8c]
mov edx, dword [ebp - 8]
mov dword [edx + 0x8f2], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xa90]
mov edx, dword [ebp - 8]
mov dword [edx + 0x8f6], eax
jmp 0x8efe63
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x8f2], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 8]
mov edx, dword [ebp - 8]
mov dword [edx + 0x8f6], eax
cmp byte [ebp + 8], 0
jne 0x8efeb4
cmp byte [ebp + 0x14], 0
je 0x8efe88
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x518]
cmp byte [eax + 0x57], 0
jne 0x8efe88
mov eax, dword [ebp - 8]
call fcn.008eb550
jmp 0x8efeb4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov edx, dword [eax + 0x1bc]
pop eax
call fcn.008bcac4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov byte [eax + 0x624], 0
cmp byte [ebp + 0x14], 0
je 0x8f002e
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0xd0], 5
jne 0x8eff04
mov eax, dword [ebp - 8]
call fcn.008f8634
test al, al
je 0x8effe5
mov eax, dword [ebp - 8]
cmp byte [eax + 0xefc], 0
jne 0x8effe5
mov eax, dword [ebp - 8]
cmp byte [eax + 0xacc], 0
jne 0x8eff3e
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0xd0], 0
jne 0x8eff3e
mov eax, dword [ebp - 8]
call fcn.008f8634
test al, al
je 0x8eff80
mov eax, dword [ebp - 8]
cmp byte [eax + 0xefc], 0
jne 0x8eff80
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x514]
mov eax, dword [ebp - 8]
call fcn.008f1c74
fstp qword [ebp - 0x48]
wait
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
fld qword [eax + 0x3f0]
fcomp qword [ebp - 0x48]
fnstsw ax
sahf
je 0x8effaf
push dword [ebp - 0x44]
push dword [ebp - 0x48]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00618bac
jmp 0x8effaf
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
fld qword [eax + 0x3f0]
fcomp dword [0x8f1170]
fnstsw ax
sahf
je 0x8effaf
push 0x40590000
push 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00618bac
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0xd0], 0
je 0x8effe5
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0xd0], 5
je 0x8effe5
mov eax, dword [ebp - 8]
mov byte [eax + 0x8a1], 1
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp byte [eax + 0x7c], 0
je 0x8f002e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp dword [eax + 0x3e8], 0
jne 0x8f001c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp dword [eax + 0x3ec], 0
je 0x8f002e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
xor ecx, ecx
xor edx, edx
call fcn.00619574
mov eax, dword [ebp - 8]
add eax, 0xeaa
mov edx, dword [ebp - 0xc]
call fcn.004053ec
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 0xc]
call fcn.00484ff0
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 8]
add eax, 0xeae
call fcn.004053ec
fld qword [ebp + 0x2c]
fcomp dword [0x8f0ed8]
fnstsw ax
sahf
jbe 0x8f00c8
mov eax, dword [ebp - 8]
mov edx, dword [ebp + 0x2c]
mov dword [eax + 0xec6], edx
mov edx, dword [ebp + 0x30]
mov dword [eax + 0xeca], edx
cmp dword [ebp + 0x3c], 0
jne 0x8f0090
cmp dword [ebp + 0x38], 0
jbe 0x8f00ac
jmp 0x8f0092
jle 0x8f00ac
mov eax, dword [ebp - 8]
mov edx, dword [ebp + 0x38]
mov dword [eax + 0xeba], edx
mov edx, dword [ebp + 0x3c]
mov dword [eax + 0xebe], edx
jmp 0x8f0183
mov eax, dword [ebp - 0xc]
call fcn.008b1638
mov ecx, dword [ebp - 8]
mov dword [ecx + 0xeba], eax
mov dword [ecx + 0xebe], edx
jmp 0x8f0183
lea ecx, [ebp - 0xa0]
mov dl, 1
mov eax, dword [ebp - 0xc]
call fcn.008b1104
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0xa0]
mov dword [eax + 0xece], edx
mov edx, dword [ebp - 0x9c]
mov dword [eax + 0xed2], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x98]
mov dword [eax + 0xed6], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0xeda], edx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 0xede], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x88]
mov dword [eax + 0xec6], edx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xeca], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x90]
mov dword [eax + 0xeba], edx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 0xebe], edx
mov eax, dword [ebp - 8]
cmp dword [eax + 0xebe], 0
jne 0x8f016a
cmp dword [eax + 0xeba], 0
jae 0x8f0183
jmp 0x8f016c
jge 0x8f0183
mov eax, dword [ebp - 0xc]
call fcn.008b1638
mov ecx, dword [ebp - 8]
mov dword [ecx + 0xeba], eax
mov dword [ecx + 0xebe], edx
mov eax, dword [ebp - 8]
push dword [eax + 0xeca]
push dword [eax + 0xec6]
lea edx, [ebp - 0xd0]
mov eax, dword [0x98a604]
mov eax, dword [eax]
call fcn.0040f0ec
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 8]
add eax, 0xec2
call fcn.00405594
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x8f2]
mov edx, dword [ebp - 8]
mov dword [edx + 0xee6], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x8f6]
mov edx, dword [ebp - 8]
mov dword [edx + 0xeea], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov eax, dword [eax + 0x24]
mov edx, dword [ebp - 8]
mov dword [edx + 0xeb2], eax
mov eax, dword [ebp - 8]
add eax, 0xee2
call fcn.00404c7c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 0x13
jl 0x8f028c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xdf0]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp ebx, dword [eax + 0x24]
jl 0x8f028c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
mov edx, dword [eax + 0x24]
lea ecx, [ebp - 0xd4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xdf0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 8]
add eax, 0xeb6
call fcn.00405594
jmp 0x8f02ec
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 0x32
jl 0x8f02ba
mov eax, dword [ebp - 8]
add eax, 0xeb6
mov edx, 0x8f1178
call fcn.004053ec
jmp 0x8f02ec
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
lea edx, [ebp - 0xd8]
call fcn.00604cac
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 8]
add eax, 0xeb6
call fcn.00405594
mov eax, dword [ebp - 8]
call fcn.008e5750
mov eax, dword [ebp - 8]
mov byte [eax + 0xe5c], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0x8b5], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
call fcn.006332f8
test al, al
je 0x8f03c6
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 0xb
je 0x8f035a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 5
jne 0x8f0380
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0xdc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0x88]
jmp 0x8f03c6
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624a6c
mov eax, dword [eax + 0x1bc]
cmp dword [eax + 0x24], 9
jne 0x8f03c6
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, 0xffffff
call fcn.008b3c70
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0x88]
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe99], 0
jne 0x8f0480
mov eax, dword [ebp - 8]
call fcn.008f8604
test al, al
je 0x8f040d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x40c], 0
je 0x8f0480
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + pe_nt_image_headers32]
jmp 0x8f0480
mov eax, dword [ebp - 8]
call fcn.008f8674
test al, al
jne 0x8f0434
mov eax, dword [ebp - 8]
cmp dword [eax + 0xef8], 0
je 0x8f045b
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xef8]
cmp byte [eax + 0x57], 0
je 0x8f045b
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x40c], 0
je 0x8f0480
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + pe_nt_image_headers32]
jmp 0x8f0480
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
cmp byte [eax + 0x40c], 3
je 0x8f0480
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov dl, 3
mov ecx, dword [eax]
call dword [ecx + pe_nt_image_headers32]
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp byte [eax + 0xf6], 0
je 0x8f04ad
mov edx, dword [0x98a548]
cmp byte [eax + 0x2b4], 0
je 0x8f04ad
mov eax, dword [ebp - 8]
call fcn.00938d9c
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe99], 0
jne 0x8f04dc
cmp byte [ebp + 0x10], 0
je 0x8f04dc
cmp byte [ebp - 0x69], 0
je 0x8f04dc
cmp byte [ebp - 0x55], 0
jne 0x8f04dc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xe4]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.008eb168
mov byte [ebp - 0x4a], al
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe99], 0
jne 0x8f0538
cmp byte [ebp - 0x3d], 0
jne 0x8f0538
cmp byte [ebp - 0x55], 0
jne 0x8f0512
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xc4]
cmp byte [ebp - 0x4a], 0
je 0x8f0538
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x590]
cmp byte [eax + 0x57], 0
je 0x8f0538
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x590]
mov edx, dword [eax]
call dword [edx + 0x80]
mov eax, dword [ebp - 8]
mov byte [eax + 0x8a2], 1
mov eax, dword [ebp - 8]
call fcn.008f8604
test al, al
jne 0x8f055a
mov eax, dword [ebp - 8]
cmp byte [eax + 0xefc], 0
je 0x8f0577
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 8]
mov ebx, dword [edx + 0x2d4]
sub eax, dword [ebx + 0x48]
cmp eax, dword [ebx + 0x40]
je 0x8f05b0
cmp byte [ebp - 0x49], 0
jne 0x8f05b0
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe9c], 0
jne 0x8f05b0
mov eax, dword [ebp - 8]
call fcn.008f8604
test al, al
jne 0x8f05dc
mov eax, dword [ebp - 8]
cmp dword [eax + 0xf44], 0
je 0x8f05dc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xf44]
cmp byte [eax + 0x57], 0
je 0x8f05dc
mov eax, dword [ebp - 8]
call fcn.008fbe28
mov eax, dword [ebp - 8]
call fcn.008e4fac
mov eax, dword [ebp - 8]
call fcn.008e3e3c
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0095177c
mov eax, dword [ebp - 8]
call fcn.00938d9c
jmp 0x8f05ef
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x418]
mov edx, 0x96
call fcn.0044b198
cmp byte [ebp - 0x4d], 0
je 0x8f05fd
mov eax, dword [ebp - 8]
call fcn.008eb070
cmp byte [ebp - 0x4c], 0
je 0x8f066d
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp byte [eax + 0x248], 0
je 0x8f066d
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
mov byte [eax + 0x248], 0
mov ax, word [0x8f1194]
push eax
push 0
mov eax, dword [0x98a548]
mov eax, dword [eax]
call fcn.0079b1b8
push eax
lea eax, [ebp - 0xdc]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x520]
mov edx, dword [edx + 0x18c]
call fcn.00405594
mov edx, dword [ebp - 0xdc]
mov cl, 2
mov eax, dword [ebp - 8]
call fcn.00905208
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x8f0c4b
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov byte [eax + 0x624], 0
cmp byte [ebp - 0x7d], 0
je 0x8f069e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.0061acac
mov eax, dword [ebp - 8]
cmp byte [eax + 0x1046], 0
je 0x8f06c0
mov eax, dword [ebp - 8]
cmp byte [eax + 0xacc], 0
jne 0x8f06c0
mov eax, dword [ebp - 8]
mov byte [eax + 0x1046], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00619c14
cmp byte [ebp - 0x74], 0
je 0x8f0785
mov eax, dword [ebp - 8]
cmp byte [eax + 0xacc], 0
je 0x8f0785
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp byte [eax + 0x557], 0
je 0x8f0785
cmp byte [ebp - 0x75], 0
je 0x8f0744
xor eax, eax
push ebp
push 0x8f073d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov byte [eax + 0xa54], 1
call fcn.008ad284
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x8f0744
mov eax, dword [ebp - 8]
mov byte [eax + 0xa54], 0
ret
mov eax, dword [ebp - 8]
cmp byte [eax + 0x1044], 0
jne 0x8f0772
mov eax, dword [ebp - 8]
call fcn.008f8604
test al, al
je 0x8f0772
mov eax, dword [ebp - 8]
call fcn.008f88b0
test al, al
je 0x8f0772
mov eax, dword [ebp - 8]
mov byte [eax + 0x1044], 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0xe44]
xor ecx, ecx
mov eax, dword [ebp - 8]
call fcn.00943d90
cmp byte [ebp - 0x74], 0
je 0x8f07c2
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
cmp dword [eax + 0xc], 1
jne 0x8f07b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
xor edx, edx
call fcn.008b1ba0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 8]
mov byte [eax + 0x1046], 0
mov eax, dword [ebp - 8]
cmp byte [eax + 0x103d], 0
jne 0x8f07fb
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
cmp dword [eax + 0xc], 1
jne 0x8f07fb
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
xor edx, edx
call fcn.008b1ba0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x50c]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 8]
mov byte [eax + 0x1044], 0
cmp byte [ebp - 0x55], 0
je 0x8f0985
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov edx, dword [eax]
call dword [edx + 0xe8]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.0061acac
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x4f4], 2
je 0x8f085e
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x4f4], 3
jne 0x8f092d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov byte [eax + 0x620], 0
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp dword [eax + 0x4f4], 3
jne 0x8f08c0
push 0
push 0x64
push 0
push 0xc8
imul eax, dword [ebp - 0x1c], 0xc8
mov dword [ebp - 0xe0], eax
fild dword [ebp - 0xe0]
fdiv dword [0x8f1198]
call fcn.00402ffc
push edx
push eax
call fcn.00437f04
push edx
push eax
call fcn.00437fc8
mov dword [ebp - 0x64], eax
jmp 0x8f08fd
push 0
push 0x96
push 0
push 0x190
imul eax, dword [ebp - 0x1c], 0x190
mov dword [ebp - 0xe0], eax
fild dword [ebp - 0xe0]
fdiv dword [0x8f1198]
call fcn.00402ffc
push edx
push eax
call fcn.00437f04
push edx
push eax
call fcn.00437fc8
mov dword [ebp - 0x64], eax
cmp byte [ebp - 0x6a], 0
je 0x8f0918
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov ecx, dword [ebp - 0x64]
mov dl, 0x11
call fcn.00624c88
jmp 0x8f0985
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov ecx, dword [ebp - 0x64]
mov dl, 0x13
call fcn.00624c88
jmp 0x8f0985
mov eax, dword [ebp - 8]
call fcn.008f8604
test al, al
jne 0x8f0945
mov eax, dword [ebp - 8]
cmp byte [eax + 0xefc], 0
je 0x8f095b
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
cmp byte [eax + 0xa3], 0
jne 0x8f095f
xor eax, eax
jmp 0x8f0961
mov al, 1
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x514]
mov byte [edx + 0x620], al
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov ecx, 0xc8
mov dl, 1
call fcn.00624c88
mov eax, dword [ebp - 8]
mov byte [eax + 0xa72], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x594]
cmp dword [eax + 0x30], 0
jbe 0x8f09ae
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x594]
xor edx, edx
call fcn.0044b198
mov eax, dword [ebp - 8]
cmp byte [eax + 0xe99], 0
jne 0x8f0a91
mov eax, dword [ebp + 0x20]
xor edx, edx
call fcn.00405738
je 0x8f0a91
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0xe44]
mov edx, dword [ebp + 0x20]
call fcn.00405738
je 0x8f0a91
cmp byte [ebp - 0x3d], 0
jne 0x8f0a91
mov eax, dword [ebp - 8]
call fcn.008ebc10
test al, al
je 0x8f0a48
mov eax, dword [ebp - 8]
add eax, 0xb74
mov edx, dword [ebp + 0x20]
call fcn.004053ec
mov eax, dword [ebp - 8]
mov edx, dword [ebp + 0x1c]
mov dword [eax + 0xb78], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp + 0x18]
mov dword [eax + 0xb7c], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x490]
xor edx, edx
call fcn.0044b198
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x490]
mov edx, 0x64
call fcn.0044b198
jmp 0x8f0a91
mov eax, dword [ebp - 8]
add eax, 0xb74
call fcn.004053b0
mov eax, dword [ebp - 8]
add eax, 0xb60
call fcn.004053b0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48c]
mov byte [eax + 0x1c0], 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x490]
cmp dword [eax + 0x30], 0
jbe 0x8f0a91
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x490]
xor edx, edx
call fcn.0044b198
mov eax, dword [ebp - 8]
mov byte [eax + 0x8b5], 0
cmp byte [ebp - 0x6b], 0
je 0x8f0ac2
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x508]
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7d8]
mov eax, dword [eax + 0x514]
call fcn.00629100
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x508]
cmp dword [eax + 0xc], 1
jne 0x8f0b1a
mov eax, dword [ebp - 8]
cmp byte [eax + 0xefc], 0
jne 0x8f0ae9
mov eax, dword [ebp - 8]
cmp dword [eax + 0xea4], 0
je 0x8f0b1a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x508]
mov edx, dword [eax]
call dword [edx + 0xe4]
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7d8]
add eax, 0xae4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xe44]
call fcn.004053ec
ret
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624ac0
call fcn.005d1348
mov ebx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00624ac0
call fcn.005d1350
add ebx, eax
test ebx, ebx
jle 0x8f0b5b
mov eax, dword [ebp - 8]
call fcn.00944784
mov eax, dword [ebp - 8]
add eax, 0xe44
call fcn.004053b0
mov eax, dword [ebp - 8]
add eax, 0xeaa
call fcn.004053b0
mov eax, dword [ebp - 8]
add eax, 0xeae
call fcn.004053b0
mov eax, dword [ebp - 8]
mov dword [eax + 0xeba], 0
mov dword [eax + 0xebe], 0
mov eax, dword [ebp - 8]
add eax, 0xec2
call fcn.004053b0
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xec6], edx
mov dword [eax + 0xeca], edx
mov eax, dword [ebp - 8]
mov dword [eax + 0xeda], 0xffffffff
mov dword [eax + 0xede], 0xffffffff
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xee6], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xeea], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xeb2], edx
mov eax, dword [ebp - 8]
add eax, 0xeb6
call fcn.004053b0
mov eax, dword [ebp - 8]
add eax, 0xee2
call fcn.00404c7c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.00619b94
mov eax, dword [ebp - 8]
call fcn.008e4fac
mov eax, dword [ebp - 8]
call fcn.008e3e3c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
xor edx, edx
call fcn.00628c20
mov eax, dword [ebp - 8]
mov byte [eax + 0xbe5], 0
mov eax, dword [ebp - 8]
mov byte [eax + 0xacc], 0
mov eax, dword [ebp - 8]
call fcn.008f119c
mov eax, dword [0x98a548]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c4]
mov eax, dword [eax + 0xd0]
cmp eax, 1
je 0x8f0daf
mov edx, dword [0x98a548]
cmp eax, 2
je 0x8f0daf
mov eax, dword [ebp - 8]
cmp byte [eax + 0x103d], 0
jne 0x8f0daf
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
cmp byte [eax + 0x57], 0
je 0x8f0cac
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
mov ax, word [eax + 0x78]
jmp 0x8f0cbc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
mov ax, word [eax + 0x23c]
cmp ax, 0x4d2
je 0x8f0cd8
cmp ax, 0x4d3
je 0x8f0cd8
cmp ax, 0x4d4
je 0x8f0cd8
cmp ax, 0x4d5
jne 0x8f0daf
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x518]
cmp byte [eax + 0x57], 0
jne 0x8f0daf
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
cmp byte [eax + 0x57], 0
je 0x8f0d5b
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
call fcn.008aecac
test al, al
je 0x8f0daf
lea eax, [ebp - 0x73]
call fcn.008aebe0
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x73]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x510]
call fcn.004587e4
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x73], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6f], eax
mov eax, dword [ebp - 0x73]
push eax
mov eax, dword [ebp - 0x6f]
push eax
mov cl, byte [0x8f116c]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.00935d20
jmp 0x8f0daf
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.008aecac
test al, al
je 0x8f0daf
lea eax, [ebp - 0x73]
call fcn.008aebe0
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0x73]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x514]
call fcn.004587e4
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x73], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6f], eax
push 0xffffffffffffffff
push 1
or ecx, 0xffffffff
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.008fda80
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x450]
xor edx, edx
call fcn.0044b198
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x450]
mov edx, 0xbb8
call fcn.0044b198
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x8f0de6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x8f0e6f
lea eax, [ebp - 0xdc]
call fcn.004053b0
lea eax, [ebp - 0xd8]
mov edx, 3
call fcn.00404ca0
lea eax, [ebp - 0xcc]
call fcn.004053b0
lea eax, [ebp - 0xc0]
call fcn.00404c7c
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.004053c8
lea eax, [ebp - 0xb4]
call fcn.00404c7c
lea eax, [ebp - 0xb0]
mov edx, 4
call fcn.004053c8
lea eax, [ebp - 0x3c]
call fcn.00404c7c
lea eax, [ebp - 0xc]
call fcn.004053b0
lea eax, [ebp + 0x20]
call fcn.004053b0
ret