Function at 0x154f0
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xa99b8c20
push 0xa99b8ba0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
add esp, 0xfffffff4
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1c], 0xc0000001
mov dword [ebp - 4], 0
mov eax, dword [ebp + 0x10]
mov dword [0xa99b902c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x100]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x40]
mov byte [ecx], al
mov ecx, 0xa99af2c0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4]
xchg dword [edx], ecx
mov dword [0xa99b9250], ecx
mov eax, dword [ebp + 0x10]
add eax, 1
mov dword [0xa99b9034], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x2f4]
mov dword [edx + ecx*4 + 4], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xbd]
mov byte [ecx + 1], al
mov ecx, 0xa99af320
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 4]
xchg dword [edx], ecx
mov dword [0xa99b9224], ecx
mov eax, dword [ebp + 0x10]
add eax, 2
mov dword [0xa99b903c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x3a8]
mov dword [edx + ecx*4 + 8], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xea]
mov byte [ecx + 2], al
mov ecx, 0xa99af370
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 8]
xchg dword [edx], ecx
mov dword [0xa99b9204], ecx
mov eax, dword [ebp + 0x10]
add eax, 3
mov dword [0xa99b9044], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x3f0]
mov dword [edx + ecx*4 + 0xc], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xfc]
mov byte [ecx + 3], al
mov ecx, 0xa99af3c0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0xc]
xchg dword [edx], ecx
mov dword [0xa99b9210], ecx
mov eax, dword [ebp + 0x10]
add eax, 4
mov dword [0xa99b904c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x510]
mov dword [edx + ecx*4 + 0x10], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x144]
mov byte [ecx + 4], al
mov ecx, 0xa99af410
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x10]
xchg dword [edx], ecx
mov dword [0xa99b91f4], ecx
mov eax, dword [ebp + 0x10]
add eax, 5
mov dword [0xa99b9054], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x1ec]
mov dword [edx + ecx*4 + 0x14], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x7b]
mov byte [ecx + 5], al
mov ecx, 0xa99af460
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x14]
xchg dword [edx], ecx
mov dword [0xa99b9200], ecx
mov eax, dword [ebp + 0x10]
add eax, 6
mov dword [0xa99b905c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x1f8]
mov dword [edx + ecx*4 + 0x18], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x7e]
mov byte [ecx + 6], al
mov ecx, 0xa99af4a0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x18]
xchg dword [edx], ecx
mov dword [0xa99b920c], ecx
mov eax, dword [ebp + 0x10]
add eax, 7
mov dword [0xa99b9064], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x214]
mov dword [edx + ecx*4 + 0x1c], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x85]
mov byte [ecx + 7], al
mov ecx, 0xa99af4e0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x1c]
xchg dword [edx], ecx
mov dword [0xa99b925c], ecx
mov eax, dword [ebp + 0x10]
add eax, 8
mov dword [0xa99b906c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x220]
mov dword [edx + ecx*4 + 0x20], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x88]
mov byte [ecx + 8], al
mov ecx, 0xa99af530
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x20]
xchg dword [edx], ecx
mov dword [0xa99b9234], ecx
mov eax, dword [ebp + 0x10]
add eax, 9
mov dword [0xa99b9074], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x120]
mov dword [edx + ecx*4 + 0x24], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x48]
mov byte [ecx + 9], al
mov ecx, 0xa99af580
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x24]
xchg dword [edx], ecx
mov dword [0xa99b9238], ecx
mov eax, dword [ebp + 0x10]
add eax, 0xa
mov dword [0xa99b907c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x308]
mov dword [edx + ecx*4 + 0x28], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xc2]
mov byte [ecx + 0xa], al
mov ecx, 0xa99af5e0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x28]
xchg dword [edx], ecx
mov dword [0xa99b91fc], ecx
mov eax, dword [ebp + 0x10]
add eax, 0xb
mov dword [0xa99b9084], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x390]
mov dword [edx + ecx*4 + 0x2c], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xe4]
mov byte [ecx + 0xb], al
mov ecx, 0xa99af630
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x2c]
xchg dword [edx], ecx
mov dword [0xa99b91e0], ecx
mov eax, dword [ebp + 0x10]
add eax, 0xc
mov dword [0xa99b908c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x4c4]
mov dword [edx + ecx*4 + 0x30], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x131]
mov byte [ecx + 0xc], al
mov ecx, 0xa99af680
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x30]
xchg dword [edx], ecx
mov dword [0xa99b9254], ecx
mov eax, dword [ebp + 0x10]
add eax, 0xd
mov dword [0xa99b9094], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x538]
mov dword [edx + ecx*4 + 0x34], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x14e]
mov byte [ecx + 0xd], al
mov ecx, 0xa99af6d0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x34]
xchg dword [edx], ecx
mov dword [0xa99b9240], ecx
mov eax, dword [ebp + 0x10]
add eax, 0xe
mov dword [0xa99b909c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x138]
mov dword [edx + ecx*4 + 0x38], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x4e]
mov byte [ecx + 0xe], al
mov ecx, 0xa99af710
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x38]
xchg dword [edx], ecx
mov dword [0xa99b9228], ecx
mov eax, dword [ebp + 0x10]
add eax, 0xf
mov dword [0xa99b90a4], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x324]
mov dword [edx + ecx*4 + 0x3c], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xc9]
mov byte [ecx + 0xf], al
mov ecx, 0xa99af770
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x3c]
xchg dword [edx], ecx
mov dword [0xa99b9208], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x10
mov dword [0xa99b90ac], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x4c8]
mov dword [edx + ecx*4 + 0x40], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x132]
mov byte [ecx + 0x10], al
mov ecx, 0xa99af7c0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x40]
xchg dword [edx], ecx
mov dword [0xa99b9214], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x11
mov dword [0xa99b90b4], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x468]
mov dword [edx + ecx*4 + 0x44], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x11a]
mov byte [ecx + 0x11], al
mov ecx, 0xa99af810
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x44]
xchg dword [edx], ecx
mov dword [0xa99b91e4], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x12
mov dword [0xa99b90bc], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x52c]
mov dword [edx + ecx*4 + 0x48], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x14b]
mov byte [ecx + 0x12], al
mov ecx, 0xa99af850
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x48]
xchg dword [edx], ecx
mov dword [0xa99b91f8], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x13
mov dword [0xa99b90c4], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x53c]
mov dword [edx + ecx*4 + 0x4c], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x14f]
mov byte [ecx + 0x13], al
mov ecx, 0xa99af890
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x4c]
xchg dword [edx], ecx
mov dword [0xa99b9248], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x14
mov dword [0xa99b90cc], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0xf0]
mov dword [edx + ecx*4 + 0x50], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x3c]
mov byte [ecx + 0x14], al
mov ecx, 0xa99af8d0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x50]
xchg dword [edx], ecx
mov dword [0xa99b921c], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x15
mov dword [0xa99b90d4], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x2e8]
mov dword [edx + ecx*4 + 0x54], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xba]
mov byte [ecx + 0x15], al
mov ecx, 0xa99af940
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x54]
xchg dword [edx], ecx
mov dword [0xa99b91f0], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x16
mov dword [0xa99b90dc], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x1e8]
mov dword [edx + ecx*4 + 0x58], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x7a]
mov byte [ecx + 0x16], al
mov ecx, 0xa99af990
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x58]
xchg dword [edx], ecx
mov dword [0xa99b9220], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x17
mov dword [0xa99b90e4], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x350]
mov dword [edx + ecx*4 + 0x5c], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xd4]
mov byte [ecx + 0x17], al
mov ecx, 0xa99af9d0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x5c]
xchg dword [edx], ecx
mov dword [0xa99b91e8], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x18
mov dword [0xa99b90ec], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x368]
mov dword [edx + ecx*4 + 0x60], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xda]
mov byte [ecx + 0x18], al
mov ecx, 0xa99afa10
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x60]
xchg dword [edx], ecx
mov dword [0xa99b9218], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x19
mov dword [0xa99b90f4], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x384]
mov dword [edx + ecx*4 + 0x64], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xe1]
mov byte [ecx + 0x19], al
mov ecx, 0xa99afa80
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x64]
xchg dword [edx], ecx
mov dword [0xa99b91ec], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x1a
mov dword [0xa99b90fc], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x4b4]
mov dword [edx + ecx*4 + 0x68], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x12d]
mov byte [ecx + 0x1a], al
mov ecx, 0xa99afad0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x68]
xchg dword [edx], ecx
mov dword [0xa99b9230], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x1b
mov dword [0xa99b9104], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x408]
mov dword [edx + ecx*4 + 0x6c], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x102]
mov byte [ecx + 0x1b], al
mov ecx, 0xa99afb20
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x6c]
xchg dword [edx], ecx
mov dword [0xa99b922c], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x1c
mov dword [0xa99b910c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x58c]
mov dword [edx + ecx*4 + 0x70], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x163]
mov byte [ecx + 0x1c], al
mov ecx, 0xa99afb80
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x70]
xchg dword [edx], ecx
mov dword [0xa99b923c], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x1d
mov dword [0xa99b9114], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0xc0]
mov dword [edx + ecx*4 + 0x74], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x30]
mov byte [ecx + 0x1d], al
mov ecx, 0xa99afbe0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x74]
xchg dword [edx], ecx
mov dword [0xa99b9260], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x1e
mov dword [0xa99b911c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x414]
mov dword [edx + ecx*4 + 0x78], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x105]
mov byte [ecx + 0x1e], al
mov ecx, 0xa99afc20
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x78]
xchg dword [edx], ecx
mov dword [0xa99b924c], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x1f
mov dword [0xa99b9124], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x598]
mov dword [edx + ecx*4 + 0x7c], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0x166]
mov byte [ecx + 0x1f], al
mov ecx, 0xa99afc70
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x7c]
xchg dword [edx], ecx
mov dword [0xa99b9244], ecx
mov eax, dword [ebp + 0x10]
add eax, 0x20
mov dword [0xa99b912c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x348]
mov dword [edx + ecx*4 + 0x80], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x18]
mov al, byte [edx + 0xd2]
mov byte [ecx + 0x20], al
mov ecx, 0xa99afcc0
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
lea edx, [eax + edx*4 + 0x80]
xchg dword [edx], ecx
mov dword [0xa99b9258], ecx
mov dword [ebp - 4], 0xffffffff
jmp 0x15e5c
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14