Function at 0x9b0102
Capabilities:
Authenticate hmac
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xa93fcb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x3f8
push esi
mov esi, ecx
mov byte [ebp - 0x11], dl
mov dword [ebp - 0x1a4], esi
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 4], 0
push ecx
call fcn.009f2f80
mov byte [ebp - 4], 4
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x20], esp
sub esp, 8
mov edi, 1
mov eax, esp
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.009f2f50
add esp, 8
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0x18170002
mov dword [ebp - 0x58], 0x100001c
call fcn.0099ffb0
push eax
mov ecx, esi
call fcn.009f9120
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.009f2bd0
push 0x104
lea eax, [ebp - 0x408]
push 0
push eax
call fcn.00a6e210
add esp, 0xc
lea eax, [ebp - 0x408]
push eax
movzx eax, byte [ebp - 0x11]
xor eax, edi
push 0
push 0
lea eax, [eax*2 + 0x1a]
push eax
push 0
nop
nop
nop
nop
nop
nop
lea eax, [ebx + 0x24]
push eax
lea edx, [ebp - 0x408]
lea ecx, [ebp - 0x158]
call fcn.009f8f10
add esp, 4
mov dword [ebp - 4], 6
xor edi, edi
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x44], edi
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa0], edi
cmp byte [ebx + 8], 0
mov byte [ebp - 4], 7
jne 0x9b057f
sub esp, 0x18
lea eax, [ebp - 0x158]
mov ecx, esp
push eax
call fcn.009f5110
push edi
mov dl, 1
lea ecx, [ebp - 0x40]
call fcn.009afcc0
add esp, 0x1c
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 8
call fcn.009f3d50
test eax, eax
jne 0x9b0282
call fcn.009f7300
lea ecx, [ebp - 0xa8]
call fcn.009f7300
lea ecx, [ebp - 0x158]
call fcn.00992660
lea ecx, [ebx + 0xc]
call fcn.00992660
lea ecx, [ebx + 0x24]
call fcn.00992660
lea ecx, [ebx + 0x3c]
call fcn.00992660
lea ecx, [ebx + 0x54]
call fcn.00992660
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [ebp - 0x3c]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x40]
xor esi, esi
imul ecx
mov dword [ebp - 0x68], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x9b04aa
mov dword [ebp - 0x48], esi
push esi
lea ecx, [ebp - 0x40]
call fcn.009f3d30
lea ecx, [ebp - 0x23]
mov word [ebp - 0x23], 0x32
mov esi, eax
mov byte [ebp - 0x21], 1
call fcn.00999f20
push eax
lea edx, [ebp - 0x158]
lea ecx, [ebp - 0x120]
call fcn.009f8e50
sub esp, 0x14
mov byte [ebp - 4], 9
mov ecx, esp
mov edx, eax
push esi
call fcn.009f9070
add esp, 4
lea ecx, [ebp - 0xcc]
xor dl, dl
push 0
call fcn.009afcc0
add esp, 0x1c
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xb
call fcn.00992660
lea ecx, [ebp - 0xcc]
call fcn.009f3d50
test eax, eax
je 0x9b0471
mov esi, dword [ebp - 0xcc]
xor ecx, ecx
mov dword [ebp - 0x54], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0xc8]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x9b0471
xor eax, eax
mov dword [ebp - 0x60], eax
nop dword [eax]
cmp dword [ebx + 0x50], 0x10
lea ecx, [esi + eax]
mov eax, dword [ecx + 0x10]
lea esi, [ebx + 0x3c]
cmovae esi, dword [ebx + 0x3c]
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x94], esi
jb 0x9b037b
mov ecx, dword [ecx]
mov dword [ebp - 0x98], ecx
mov edx, dword [ebx + 0x4c]
cmp edx, eax
ja 0x9b043f
sub eax, edx
test edx, edx
je 0x9b04ca
movsx edx, byte [esi]
inc eax
add eax, ecx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x9c], eax
sub eax, ecx
push eax
push edx
push ecx
call fcn.00a6fa00
mov edi, eax
add esp, 0xc
test edi, edi
je 0x9b043c
mov eax, esi
mov edx, edi
mov esi, dword [ebx + 0x4c]
sub esi, 4
jb 0x9b03d3
mov ecx, dword [edx]
cmp ecx, dword [eax]
jne 0x9b03d8
add edx, 4
add eax, 4
sub esi, 4
jae 0x9b03c2
cmp esi, 0xfffffffc
je 0x9b040c
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x9b0405
cmp esi, 0xfffffffd
je 0x9b040c
mov cl, byte [edx + 1]
cmp cl, byte [eax + 1]
jne 0x9b0405
cmp esi, 0xfffffffe
je 0x9b040c
mov cl, byte [edx + 2]
cmp cl, byte [eax + 2]
jne 0x9b0405
cmp esi, 0xffffffff
je 0x9b040c
mov cl, byte [edx + 3]
cmp cl, byte [eax + 3]
je 0x9b040c
sbb eax, eax
or eax, 1
jmp 0x9b040e
xor eax, eax
test eax, eax
je 0x9b04bb
mov eax, dword [ebp - 0x9c]
inc edi
sub eax, edi
push eax
push dword [ebp - 0x4c]
push edi
call fcn.00a6fa00
mov esi, dword [ebp - 0x94]
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x9b03b6
mov edi, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xc8]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0xcc]
sub ecx, esi
inc dword [ebp - 0x54]
add dword [ebp - 0x60], 0x18
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x60]
jb 0x9b0350
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 8
call fcn.009f7300
mov ecx, dword [ebp - 0x3c]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x68]
add dword [ebp - 0x48], 0x18
inc esi
imul ecx
mov dword [ebp - 0x68], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x9b02a7
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 7
call fcn.009f7300
jmp 0x9b05ba
sub edi, dword [ebp - 0x98]
cmp edi, 0xffffffff
je 0x9b043c
mov ecx, dword [ebp - 0x44]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0xa8]
xor edi, edi
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x9c], eax
je 0x9b053b
mov ecx, dword [ebp - 0x48]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ecx + 0x10]
nop dword [eax]
cmp dword [ecx + 0x14], 0x10
mov eax, ecx
jb 0x9b050a
mov eax, dword [ecx]
cmp dword [esi + 0x14], 0x10
mov ecx, esi
jb 0x9b0514
mov ecx, dword [esi]
push edx
mov edx, dword [esi + 0x10]
push eax
call fcn.00a04d20
add esp, 8
test al, al
jne 0x9b043c
mov ecx, dword [ebp - 0x4c]
inc edi
add esi, 0x18
mov edx, dword [ecx + 0x10]
cmp edi, dword [ebp - 0x9c]
jb 0x9b0500
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x48]
mov edi, dword [ebp - 0x44]
push eax
cmp edi, dword [ebp - 0xa0]
je 0x9b0565
mov ecx, edi
call fcn.009f5110
add edi, 0x18
mov dword [ebp - 0x44], edi
mov dword [ebp - 0xa4], edi
jmp 0x9b043f
push edi
lea ecx, [ebp - 0xa8]
call fcn.00a01cf0
mov edi, dword [ebp - 0xa4]
mov dword [ebp - 0x44], edi
jmp 0x9b043f
push 0xaaf4b8
lea ecx, [ebp - 0x120]
call fcn.00992700
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0xa8]
call fcn.009f3db0
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 7
call fcn.00992660
mov edi, dword [ebp - 0xa4]
mov ecx, edi
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0xa8]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x9b0610
push 0xaaf4b8
lea ecx, [ebp - 0x120]
call fcn.00992700
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0xa8]
call fcn.009f3db0
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 7
call fcn.00992660
mov edi, dword [ebp - 0xa4]
lea ecx, [ebp - 0x23]
mov word [ebp - 0x23], 0x32
mov byte [ebp - 0x21], 1
call fcn.00999f20
push eax
lea edx, [ebp - 0x158]
lea ecx, [ebp - 0x120]
call fcn.009f8e50
sub esp, 0x14
mov byte [ebp - 4], 0xe
lea edx, [ebx + 0x54]
mov ecx, esp
push edx
mov edx, eax
call fcn.009f9070
add esp, 4
call fcn.0099b960
add esp, 0x18
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x10c]
test al, al
sete al
mov byte [ebp - 0x11], al
cmp ecx, 0x10
jb 0x9b069c
mov edx, dword [ebp - 0x120]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b068f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
mov al, byte [ebp - 0x11]
add esp, 8
test al, al
je 0x9b0704
movaps xmm0, xmmword [0xab4470]
lea ecx, [ebp - 0x7a]
sub esp, 0x18
mov word [ebp - 0x6a], 0x100
movups xmmword [ebp - 0x7a], xmm0
mov esi, esp
call fcn.0099e870
push eax
lea edx, [ebp - 0x158]
mov ecx, esi
call fcn.009f8e50
add esp, 4
call fcn.0099b960
add esp, 0x18
test al, al
je 0x9b0704
movaps xmm0, xmmword [0xab3d90]
lea ecx, [ebp - 0xe9]
movups xmmword [ebp - 0xe9], xmm0
mov byte [ebp - 0xd9], 1
call fcn.0099e8a0
push eax
lea ecx, [ebx + 0x54]
call fcn.009f4f30
lea ecx, [ebp - 0x23]
mov word [ebp - 0x23], 0x32
mov byte [ebp - 0x21], 1
call fcn.00999f20
push eax
lea edx, [ebp - 0x158]
lea ecx, [ebp - 0x120]
call fcn.009f8e50
sub esp, 0x14
mov byte [ebp - 4], 0xf
lea edx, [ebx + 0x54]
mov ecx, esp
push edx
mov edx, eax
call fcn.009f9070
add esp, 4
lea ecx, [ebp - 0x288]
call fcn.0099b400
add esp, 0x18
lea ecx, [ebp - 0x120]
call fcn.00992660
xorps xmm0, xmm0
mov dword [ebp - 0x1fc], 0
movups xmmword [ebp - 0x20c], xmm0
mov dword [ebp - 0x1f8], 0xf
mov byte [ebp - 0x20c], 0
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x278], 0
je 0x9b08f2
sub esp, 0x28
lea edx, [ebp - 0x288]
mov eax, esp
lea ecx, [ebp - 0x1a0]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.009f94b0
add esp, 0x30
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2d]
mov dword [ebp - 0x2d], 0x122f1c01
mov dword [ebp - 0x29], 0x1040a00
mov word [ebp - 0x25], 0x100
call fcn.0099e8d0
push eax
lea ecx, [ebp - 0x1a0]
call fcn.009f9120
cmp byte [eax], 0
je 0x9b08e3
lea ecx, [ebp - 0x2d]
mov dword [ebp - 0x2d], 0x122f1c01
mov dword [ebp - 0x29], 0x1040a00
mov word [ebp - 0x25], 0x100
call fcn.0099e8d0
push eax
lea ecx, [ebp - 0x1a0]
call fcn.009f9120
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0x313010b
mov esi, eax
mov dword [ebp - 0x3c], 0x1000030b
mov dword [ebp - 0x38], 0x1c132812
mov word [ebp - 0x34], 3
mov byte [ebp - 0x32], 1
call fcn.0099a230
push eax
mov ecx, esi
call fcn.009f9120
cmp byte [eax], 0
je 0x9b08e3
lea ecx, [ebp - 0x2d]
mov dword [ebp - 0x2d], 0x122f1c01
mov dword [ebp - 0x29], 0x1040a00
mov word [ebp - 0x25], 0x100
call fcn.0099e8d0
push eax
lea ecx, [ebp - 0x1a0]
call fcn.009f9120
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0x313010b
mov esi, eax
mov dword [ebp - 0x3c], 0x1000030b
mov dword [ebp - 0x38], 0x1c132812
mov word [ebp - 0x34], 3
mov byte [ebp - 0x32], 1
call fcn.0099a230
push eax
mov ecx, esi
call fcn.009f9120
lea ecx, [ebp - 0x180]
push ecx
mov ecx, eax
call fcn.009f9260
mov edx, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x120]
call fcn.00992540
push eax
lea ecx, [ebp - 0x20c]
call fcn.009f4f90
lea ecx, [ebp - 0x120]
call fcn.00992660
lea ecx, [ebp - 0x180]
call fcn.00992660
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x12
call fcn.009f2bb0
mov esi, dword [ebp - 0xa8]
mov eax, 0x2aaaaaab
sub edi, esi
xor ecx, ecx
imul edi
mov dword [ebp - 0x54], ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x20], eax
je 0x9b2329
nop dword [eax]
cmp byte [ebx + 8], 0
je 0x9b095d
xorps xmm0, xmm0
mov dword [ebp - 0xe0], 0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
mov byte [ebp - 4], 0x15
lea esi, [ebp - 0xf0]
mov edi, dword [ebp - 0x18]
or edi, 2
jmp 0x9b09d2
lea eax, [ecx + ecx*2]
mov word [ebp - 0xab], 0x5c
lea edx, [esi + eax*8]
mov byte [ebp - 0xa9], 0
mov esi, dword [edx + 0x10]
lea ecx, [ebp - 0xab]
lea edi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b0980
mov eax, 0x7fffffff
sub ecx, edi
sub eax, esi
cmp eax, ecx
jb 0x9b2521
cmp dword [edx + 0x14], 0x10
jb 0x9b09a0
mov edx, dword [edx]
push ecx
lea eax, [ebp - 0xab]
push eax
push esi
push edx
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x180]
call fcn.009fca20
mov edi, dword [ebp - 0x18]
or edi, 0x40000
lea esi, [ebp - 0x180]
mov dword [ebp - 4], 0x16
or edi, 4
lea ecx, [ebp - 0xae]
mov dword [ebp - 0x1c], edi
mov word [ebp - 0xae], 0x5c
lea edx, [ecx + 1]
mov byte [ebp - 0xac], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b09f0
sub ecx, edx
mov eax, 0x7fffffff
mov edx, dword [ebp - 0x148]
sub eax, edx
cmp eax, ecx
jb 0x9b2521
cmp dword [ebp - 0x144], 0x10
lea eax, [ebp - 0x158]
push ecx
cmovae eax, dword [ebp - 0x158]
lea ecx, [ebp - 0xae]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x108]
call fcn.009fca20
or edi, 0x200
mov dword [ebp - 0x1c], edi
push esi
lea eax, [ebp - 0x108]
mov dword [ebp - 4], 0x17
push eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x80]
call fcn.009fc830
or edi, 0x400
mov dword [ebp - 0x1c], edi
sub esp, 0x18
mov byte [ebp - 4], 0x18
mov esi, esp
lea eax, [ebx + 0x54]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x50], esi
push eax
call fcn.009f4e90
xorps xmm0, xmm0
or edi, 0x800
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.0099b960
add esp, 0x18
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x6c]
test al, al
sete byte [ebp - 0x11]
cmp ecx, 0x10
jb 0x9b0b06
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b0afc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp ecx, 0x10
jb 0x9b0b56
mov edx, dword [ebp - 0x108]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b0b4c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x18]
test al, 4
je 0x9b0baa
mov ecx, dword [ebp - 0x16c]
and eax, 0xfffffffb
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
cmp ecx, 0x10
jb 0x9b0baa
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b0b9d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
mov eax, dword [ebp - 0x18]
add esp, 8
mov dword [ebp - 4], 0x12
test al, 2
je 0x9b0bf8
mov ecx, dword [ebp - 0xdc]
and eax, 0xfffffffd
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
cmp ecx, 0x10
jb 0x9b0bf8
mov edx, dword [ebp - 0xf0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b0bee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
cmp byte [ebp - 0x11], 0
je 0x9b0f0a
xor ecx, ecx
cmp byte [ebx + 8], cl
je 0x9b0c95
movaps xmm0, xmmword [0xab3d90]
movups xmmword [ebp - 0xe9], xmm0
mov byte [ebp - 0xd9], 1
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0xe9], al
inc ecx
cmp ecx, 0xf
jb 0x9b0c22
xorps xmm0, xmm0
mov byte [ebp - 0xd9], 0
lea ecx, [ebp - 0xe9]
mov dword [ebp - 0xf8], 0
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b0c61
sub ecx, edx
lea eax, [ebp - 0xe9]
push ecx
push eax
lea ecx, [ebp - 0x108]
call fcn.00992810
mov byte [ebp - 4], 0x19
lea esi, [ebp - 0x108]
mov edi, dword [ebp - 0x18]
or edi, 8
mov dword [ebp - 0x1c], edi
jmp 0x9b0d27
movaps xmm0, xmmword [0xab4470]
movups xmmword [ebp - 0x7a], xmm0
mov word [ebp - 0x6a], 0x100
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0x7a], al
inc ecx
cmp ecx, 0x10
jb 0x9b0ca6
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0xa8]
mov byte [ebp - 0x69], 0
lea eax, [eax + eax*2]
mov esi, dword [ecx + eax*8 + 0x10]
lea edx, [ecx + eax*8]
lea ecx, [ebp - 0x7a]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b0cd1
mov eax, 0x7fffffff
sub ecx, edi
sub eax, esi
cmp eax, ecx
jb 0x9b2521
cmp dword [edx + 0x14], 0x10
jb 0x9b0cf1
mov edx, dword [edx]
push ecx
lea eax, [ebp - 0x7a]
push eax
push esi
push edx
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x120]
call fcn.009fca20
mov eax, dword [ebp - 0x18]
or eax, 0x800000
or eax, 0x10
mov dword [ebp - 4], 0x1a
lea esi, [ebp - 0x120]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov edi, eax
lea ecx, [ebp - 0x93]
mov word [ebp - 0x93], 0x5c
mov byte [ebp - 0x91], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b0d40
sub ecx, edx
mov eax, 0x7fffffff
mov edx, dword [ebp - 0x148]
sub eax, edx
cmp eax, ecx
jb 0x9b2521
cmp dword [ebp - 0x144], 0x10
lea eax, [ebp - 0x158]
push ecx
cmovae eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x93]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x180]
call fcn.009fca20
or edi, 0x100000
mov dword [ebp - 0x1c], edi
sub esp, 0x18
mov dword [ebp - 4], 0x1b
mov ecx, esp
lea eax, [ebp - 0x180]
mov dword [ebp - 0x50], ecx
push esi
push eax
push dword [ebp - 0x20]
call fcn.009fc830
or edi, 0x200000
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
call fcn.0099b960
mov byte [ebp - 4], 0x1a
add esp, 0x18
mov ecx, dword [ebp - 0x16c]
mov byte [ebp - 0x11], al
cmp ecx, 0x10
jb 0x9b0e08
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b0dfe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov dword [ebp - 4], 0x19
mov eax, dword [ebp - 0x18]
test al, 0x10
je 0x9b0e5c
mov ecx, dword [ebp - 0x10c]
and eax, 0xffffffef
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
cmp ecx, 0x10
jb 0x9b0e5c
mov edx, dword [ebp - 0x120]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b0e4f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
mov eax, dword [ebp - 0x18]
add esp, 8
mov dword [ebp - 4], 0x12
test al, 8
je 0x9b0eaa
mov ecx, dword [ebp - 0xf4]
and eax, 0xfffffff7
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
cmp ecx, 0x10
jb 0x9b0eaa
mov edx, dword [ebp - 0x108]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b0ea0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
cmp byte [ebp - 0x11], 0
je 0x9b0f0a
movaps xmm0, xmmword [0xab3d90]
xor ecx, ecx
movups xmmword [ebp - 0xe9], xmm0
mov byte [ebp - 0xd9], 1
nop word [eax + eax]
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0xe9], al
inc ecx
cmp ecx, 0xf
jb 0x9b0ed0
lea ecx, [ebp - 0xe9]
mov byte [ebp - 0xd9], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b0ef1
sub ecx, edx
lea eax, [ebp - 0xe9]
push ecx
push eax
lea ecx, [ebx + 0x54]
call fcn.009f4cf0
cmp byte [ebx + 8], 0
je 0x9b0f4d
xorps xmm0, xmm0
mov dword [ebp - 0xf8], 0
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
mov byte [ebp - 4], 0x1c
lea esi, [ebp - 0x108]
mov edi, dword [ebp - 0x18]
or edi, 0x20
mov dword [ebp - 0x1c], edi
jmp 0x9b0fc6
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0xa8]
mov word [ebp - 0x67], 0x5c
mov byte [ebp - 0x65], 0
lea eax, [eax + eax*2]
mov esi, dword [ecx + eax*8 + 0x10]
lea edx, [ecx + eax*8]
lea ecx, [ebp - 0x67]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b0f70
mov eax, 0x7fffffff
sub ecx, edi
sub eax, esi
cmp eax, ecx
jb 0x9b2521
cmp dword [edx + 0x14], 0x10
jb 0x9b0f90
mov edx, dword [edx]
push ecx
lea eax, [ebp - 0x67]
push eax
push esi
push edx
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x180]
call fcn.009fca20
mov eax, dword [ebp - 0x18]
or eax, 0x400000
or eax, 0x40
mov dword [ebp - 4], 0x1d
lea esi, [ebp - 0x180]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov edi, eax
lea ecx, [ebp - 0x5f]
mov word [ebp - 0x5f], 0x5c
mov byte [ebp - 0x5d], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b0fd6
sub ecx, edx
mov eax, 0x7fffffff
mov edx, dword [ebp - 0x148]
sub eax, edx
cmp eax, ecx
jb 0x9b2521
cmp dword [ebp - 0x144], 0x10
lea eax, [ebp - 0x158]
push ecx
cmovae eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x5f]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x120]
call fcn.009fca20
or edi, 0x20000
mov dword [ebp - 0x1c], edi
push esi
lea eax, [ebp - 0x120]
mov dword [ebp - 4], 0x1e
push eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x80]
call fcn.009fc830
or edi, 0x10000
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 0x1f
lea edx, [ebx + 0x54]
mov ecx, dword [ebx + 0x64]
sub esp, 0x18
cmp dword [ebx + 0x68], 0x10
mov edi, esp
mov esi, dword [ebp - 0x70]
cmovae edx, dword [ebx + 0x54]
mov eax, dword [ebp - 0x6c]
sub eax, esi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], esi
push ecx
push edx
cmp ecx, eax
ja 0x9b10ab
cmp dword [ebp - 0x6c], 0x10
lea eax, [esi + ecx]
mov dword [ebp - 0x70], eax
lea esi, [ebp - 0x80]
cmovae esi, dword [ebp - 0x80]
mov eax, dword [ebp - 0x48]
add eax, esi
push eax
call fcn.00a6dc90
mov eax, dword [ebp - 0x4c]
add esp, 0xc
mov ecx, dword [ebp - 0x48]
add eax, esi
mov byte [eax + ecx], 0
lea eax, [ebp - 0x80]
jmp 0x9b10c1
mov byte [ebp - 0x218], 0
push dword [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x80]
call fcn.009fae10
xorps xmm0, xmm0
lea ecx, [ebp - 0x2fc]
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [edi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [edi + 0x10], xmm0
mov edi, dword [ebp - 0x18]
or edi, 0x8000
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
call fcn.0099b400
add esp, 0x18
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x9b114b
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b1141
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x10c]
cmp ecx, 0x10
jb 0x9b119b
mov edx, dword [ebp - 0x120]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b1191
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x18]
test al, 0x40
je 0x9b11ec
mov ecx, dword [ebp - 0x16c]
and eax, 0xffffffbf
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
cmp ecx, 0x10
jb 0x9b11ec
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b11df
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
mov eax, dword [ebp - 0x18]
add esp, 8
mov byte [ebp - 4], 0x24
test al, 0x20
je 0x9b1237
mov ecx, dword [ebp - 0xf4]
and eax, 0xffffffdf
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
cmp ecx, 0x10
jb 0x9b1237
mov edx, dword [ebp - 0x108]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b122d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x21c], 0xf
xor edi, edi
movups xmmword [ebp - 0x230], xmm0
mov dword [ebp - 0x220], edi
mov byte [ebp - 0x230], 0
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x2ec], edi
je 0x9b1438
cmp dword [ebp - 0x1fc], edi
jne 0x9b1438
sub esp, 0x28
lea edx, [ebp - 0x2fc]
mov eax, esp
lea ecx, [ebp - 0x298]
push edi
push 1
mov dword [eax + 0x24], edi
call fcn.009f94b0
add esp, 0x30
mov byte [ebp - 4], 0x26
xor ecx, ecx
mov dword [ebp - 0xd6], 0x122f1c01
mov dword [ebp - 0xd2], 0x1040a00
mov word [ebp - 0xce], 0x100
nop dword [eax + eax]
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0xd6], al
inc ecx
cmp ecx, 8
jb 0x9b12c0
lea eax, [ebp - 0xd6]
mov byte [ebp - 0xcd], 0
push eax
lea ecx, [ebp - 0x298]
call fcn.009f9120
cmp byte [eax], 0
je 0x9b1425
lea ecx, [ebp - 0xca]
mov dword [ebp - 0xca], 0x122f1c01
mov dword [ebp - 0xc6], 0x1040a00
mov word [ebp - 0xc2], 0x100
call fcn.0099e8d0
push eax
lea ecx, [ebp - 0x298]
call fcn.009f9120
lea ecx, [ebp - 0x12f]
mov dword [ebp - 0x12f], 0x313010b
mov esi, eax
mov dword [ebp - 0x12b], 0x1000030b
mov dword [ebp - 0x127], 0x1c132812
mov word [ebp - 0x123], 3
mov byte [ebp - 0x121], 1
call fcn.0099a230
push eax
mov ecx, esi
call fcn.009f9120
cmp byte [eax], 0
je 0x9b1425
lea ecx, [ebp - 0x3b]
mov dword [ebp - 0x3b], 0x122f1c01
mov dword [ebp - 0x37], 0x1040a00
mov word [ebp - 0x33], 0x100
call fcn.0099e8d0
push eax
lea ecx, [ebp - 0x298]
call fcn.009f9120
lea ecx, [ebp - 0x13e]
mov dword [ebp - 0x13e], 0x313010b
mov esi, eax
mov dword [ebp - 0x13a], 0x1000030b
mov dword [ebp - 0x136], 0x1c132812
mov word [ebp - 0x132], 3
mov byte [ebp - 0x130], 1
call fcn.0099a230
push eax
mov ecx, esi
call fcn.009f9120
lea ecx, [ebp - 0x180]
push ecx
mov ecx, eax
call fcn.009f9260
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x120]
call fcn.00992540
push eax
lea ecx, [ebp - 0x230]
call fcn.009f4f90
lea ecx, [ebp - 0x120]
call fcn.00992660
lea ecx, [ebp - 0x180]
call fcn.00992660
mov edi, dword [ebp - 0x220]
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x25
call fcn.009f2bb0
test edi, edi
jne 0x9b1466
cmp dword [ebp - 0x1f8], 0x10
lea eax, [ebp - 0x20c]
push dword [ebp - 0x1fc]
cmovae eax, dword [ebp - 0x20c]
lea ecx, [ebp - 0x230]
push eax
call fcn.009f4cf0
mov edi, dword [ebp - 0x220]
test edi, edi
setne byte [ebp - 0x11]
cmp byte [ebx + 8], 0
je 0x9b14b0
xorps xmm0, xmm0
mov dword [ebp - 0xf8], 0
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
mov byte [ebp - 4], 0x28
lea esi, [ebp - 0x108]
mov edi, dword [ebp - 0x18]
or edi, 0x80
mov dword [ebp - 0x1c], edi
jmp 0x9b152b
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0xa8]
mov word [ebp - 0x43], 0x5c
mov byte [ebp - 0x41], 0
lea eax, [eax + eax*2]
mov esi, dword [ecx + eax*8 + 0x10]
lea edx, [ecx + eax*8]
lea ecx, [ebp - 0x43]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b14d3
mov eax, 0x7fffffff
sub ecx, edi
sub eax, esi
cmp eax, ecx
jb 0x9b2521
cmp dword [edx + 0x14], 0x10
jb 0x9b14f3
mov edx, dword [edx]
push ecx
lea eax, [ebp - 0x43]
push eax
push esi
push edx
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x180]
call fcn.009fca20
mov eax, dword [ebp - 0x18]
or eax, 0x80000
or eax, 0x100
mov dword [ebp - 4], 0x29
lea esi, [ebp - 0x180]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov edi, eax
lea ecx, [ebp - 0x23]
mov word [ebp - 0x23], 0x5c
mov byte [ebp - 0x21], 0
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b1540
sub ecx, edx
mov eax, 0x7fffffff
mov edx, dword [ebp - 0x148]
sub eax, edx
cmp eax, ecx
jb 0x9b2521
cmp dword [ebp - 0x144], 0x10
lea eax, [ebp - 0x158]
push ecx
cmovae eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x23]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x120]
call fcn.009fca20
or edi, 0x4000
mov dword [ebp - 0x1c], edi
push esi
lea eax, [ebp - 0x120]
mov dword [ebp - 4], 0x2a
push eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x80]
call fcn.009fc830
or edi, 0x2000
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 0x2b
lea ecx, [ebx + 0x3c]
cmp dword [ebx + 0x50], 0x10
mov edx, dword [ebp - 0x70]
cmovae ecx, dword [ebx + 0x3c]
mov eax, dword [ebp - 0x6c]
mov edi, dword [ebx + 0x4c]
sub eax, edx
mov dword [ebp - 0x4c], edx
push edi
push ecx
cmp edi, eax
ja 0x9b1606
cmp dword [ebp - 0x6c], 0x10
lea esi, [ebp - 0x80]
lea eax, [edi + edx]
cmovae esi, dword [ebp - 0x80]
mov dword [ebp - 0x70], eax
lea eax, [esi + edx]
push eax
call fcn.00a6dc90
mov ecx, dword [ebp - 0x4c]
lea eax, [edi + esi]
add esp, 0xc
mov byte [eax + ecx], 0
lea eax, [ebp - 0x80]
jmp 0x9b161c
mov byte [ebp - 0x214], 0
lea ecx, [ebp - 0x80]
push dword [ebp - 0x214]
push edi
call fcn.009fae10
mov edi, dword [ebp - 0x18]
xorps xmm0, xmm0
movups xmmword [ebp - 0x1bc], xmm0
mov dword [ebp - 0x1ac], 0
or edi, 0x1000
mov dword [ebp - 0x1a8], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
movups xmmword [ebp - 0x1bc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1ac], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x9b16a9
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b169f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x10c]
cmp ecx, 0x10
jb 0x9b16f9
mov edx, dword [ebp - 0x120]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b16ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x18]
test eax, 0x100
je 0x9b174f
mov ecx, dword [ebp - 0x16c]
and eax, 0xfffffeff
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
cmp ecx, 0x10
jb 0x9b174f
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b1742
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
mov eax, dword [ebp - 0x18]
add esp, 8
mov byte [ebp - 4], 0x30
test al, al
jns 0x9b179c
mov ecx, dword [ebp - 0xf4]
and eax, 0xffffff7f
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
cmp ecx, 0x10
jb 0x9b179c
mov edx, dword [ebp - 0x108]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b1792
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
cmp dword [ebp - 0x1a8], 0x10
lea ecx, [ebp - 0x1bc]
lea edx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x1bc]
call fcn.009a3fa0
test eax, eax
jne 0x9b223d
movaps xmm0, xmmword [0xab4190]
xor ecx, ecx
movups xmmword [ebp - 0x2e3], xmm0
mov dword [ebp - 0x2a3], 0xdd90e2e1
movaps xmm0, xmmword [0xab5940]
movups xmmword [ebp - 0x2d3], xmm0
mov dword [ebp - 0x29f], 0xdbddd4dd
movaps xmm0, xmmword [0xab5780]
movups xmmword [ebp - 0x2c3], xmm0
mov word [ebp - 0x29b], 0xc5
movaps xmm0, xmmword [0xab5ab0]
movups xmmword [ebp - 0x2b3], xmm0
mov byte [ebp - 0x299], 1
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0x2e3], al
inc ecx
cmp ecx, 0x49
jb 0x9b1821
mov ecx, dword [ebp - 0x9c]
lea eax, [ebp - 0x98]
push 0
push eax
push 0
push 1
push 0xffffffffffffffff
lea edx, [ebp - 0x2e3]
mov byte [ebp - 0x299], 0
call fcn.00a51930
add esp, 0x14
test eax, eax
jne 0x9b2232
mov edi, dword [ebp - 0x98]
mov ecx, edi
call fcn.00a2e270
cmp eax, 0x64
jne 0x9b21b6
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0xa8]
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x159]
mov dword [ebp - 0x254], eax
test edi, edi
je 0x9b18ed
cmp dword [edi + 0x2c], 0
je 0x9b18c8
mov eax, 2
cmp ax, word [edi + 0x30]
jae 0x9b18c8
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x9b18c0
push eax
call dword [fcn.00ac2d20]
add esp, 4
mov ecx, dword [edi + 0x2c]
add ecx, 0x50
jmp 0x9b18f2
mov eax, dword [edi]
test eax, eax
je 0x9b18ed
mov eax, dword [eax + 0x44]
test eax, eax
je 0x9b18df
push eax
call dword [fcn.00ac2d20]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.00a1cc20
add esp, 0xc
mov ecx, 0xaad4d8
mov dl, 1
call fcn.00a2b140
mov dword [ebp - 0x4c], eax
test edi, edi
je 0x9b1953
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x9b1936
cmp byte [esi + 0x1e], 0
jne 0x9b1919
mov edx, esi
cmp ecx, 0xc0a
jne 0x9b1931
push 0
push 7
push esi
call fcn.00a1cc20
mov byte [esi + 0x1e], 0
add esp, 0xc
mov edx, dword [edi]
mov ecx, 7
mov eax, dword [esi + 0x18]
jmp 0x9b193d
mov eax, 0xff
mov edx, esi
and eax, ecx
mov dword [edi + 0x64], eax
mov eax, dword [edx + 0x44]
test eax, eax
je 0x9b1953
push eax
call dword [fcn.00ac2d28]
add esp, 4
mov edx, 3
mov ecx, edi
call fcn.00a2e7a0
mov edx, 3
mov dword [ebp - 0x64], eax
mov ecx, edi
call fcn.00a2e890
mov dword [ebp - 0x210], eax
test edi, edi
je 0x9b19c3
cmp dword [edi + 0x2c], 0
je 0x9b199e
xor eax, eax
cmp ax, word [edi + 0x30]
jae 0x9b199e
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x9b1999
push eax
call dword [fcn.00ac2d20]
add esp, 4
mov ecx, dword [edi + 0x2c]
jmp 0x9b19c8
mov eax, dword [edi]
test eax, eax
je 0x9b19c3
mov eax, dword [eax + 0x44]
test eax, eax
je 0x9b19b5
push eax
call dword [fcn.00ac2d20]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.00a1cc20
add esp, 0xc
mov ecx, 0xaad4d8
mov dl, 1
call fcn.00a2b140
mov dword [ebp - 0x48], eax
test edi, edi
je 0x9b1a2c
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x9b1a0c
cmp byte [esi + 0x1e], 0
jne 0x9b19ef
mov eax, esi
cmp ecx, 0xc0a
jne 0x9b1a07
push 0
push 7
push esi
call fcn.00a1cc20
mov byte [esi + 0x1e], 0
add esp, 0xc
mov eax, dword [edi]
mov ecx, 7
mov edx, dword [esi + 0x18]
jmp 0x9b1a13
mov edx, 0xff
mov eax, esi
and ecx, edx
mov dword [edi + 0x64], ecx
mov eax, dword [eax + 0x44]
test eax, eax
je 0x9b1a29
push eax
call dword [fcn.00ac2d28]
add esp, 4
mov eax, dword [ebp - 0x48]
mov ecx, eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b1a31
sub ecx, edx
jne 0x9b1af9
test edi, edi
je 0x9b1a94
cmp dword [edi + 0x2c], ecx
je 0x9b1a6f
mov eax, 1
cmp ax, word [edi + 0x30]
jae 0x9b1a6f
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x9b1a67
push eax
call dword [fcn.00ac2d20]
add esp, 4
mov ecx, dword [edi + 0x2c]
add ecx, 0x28
jmp 0x9b1a99
mov eax, dword [edi]
test eax, eax
je 0x9b1a94
mov eax, dword [eax + 0x44]
test eax, eax
je 0x9b1a86
push eax
call dword [fcn.00ac2d20]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.00a1cc20
add esp, 0xc
mov ecx, 0xaad4d8
mov dl, 1
call fcn.00a2b140
mov dword [ebp - 0x48], eax
test edi, edi
je 0x9b1af9
mov esi, dword [edi]
mov eax, dword [edi + 0x64]
test esi, esi
je 0x9b1adc
cmp byte [esi + 0x1e], 0
jne 0x9b1abf
mov ecx, esi
cmp eax, 0xc0a
jne 0x9b1ad7
push 0
push 7
push esi
call fcn.00a1cc20
mov byte [esi + 0x1e], 0
add esp, 0xc
mov ecx, dword [edi]
mov eax, 7
mov edx, dword [esi + 0x18]
jmp 0x9b1ae3
mov edx, 0xff
mov ecx, esi
and eax, edx
mov dword [edi + 0x64], eax
mov eax, dword [ecx + 0x44]
test eax, eax
je 0x9b1af9
push eax
call dword [fcn.00ac2d28]
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0xe0], 0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
push dword [ebp - 0x210]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x108]
mov esi, dword [ebp - 0x64]
push esi
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
call fcn.00992810
cmp byte [ebp - 0x11], 0
mov byte [ebp - 4], 0x32
je 0x9b1c20
mov dword [ebp - 0x8f], 0x405e18
xor ecx, ecx
mov byte [ebp - 0x8b], 1
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0x8f], al
inc ecx
cmp ecx, 3
jb 0x9b1b73
lea eax, [ebp - 0x8f]
mov byte [ebp - 0x8b], 0
push eax
push esi
call fcn.00a6d880
add esp, 8
test eax, eax
jne 0x9b1bde
mov dword [ebp - 0x85], 0x415e18
xor ecx, ecx
mov byte [ebp - 0x81], 1
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0x85], al
inc ecx
cmp ecx, 3
jb 0x9b1bb2
lea eax, [ebp - 0x85]
mov byte [ebp - 0x81], 0
push eax
push esi
call fcn.00a6d880
add esp, 8
test eax, eax
je 0x9b1c20
sub esp, 0x18
lea eax, [ebp - 0x108]
mov ecx, esp
mov dword [ebp - 0x1f4], esp
push eax
call fcn.009f5110
sub esp, 0x18
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x230]
mov ecx, esp
push eax
call fcn.009f5110
xor dl, dl
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xf0]
call fcn.009af630
add esp, 0x30
jmp 0x9b1c31
push ecx
lea edx, [ebp - 0xf0]
mov ecx, esi
call fcn.009af500
add esp, 4
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x188]
push 0
mov byte [ebp - 0x190], 0
call fcn.009f6b10
mov byte [ebp - 4], 0x35
xorps xmm0, xmm0
push 0x18
movq qword [ebp - 0x1c8], xmm0
mov byte [ebp - 0x1d0], 3
call fcn.00a6bfb1
mov esi, eax
add esp, 4
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x250], esi
push dword [ebp - 0x50]
mov ecx, esi
mov byte [ebp - 4], 0x36
call fcn.009f5110
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x1c8], esi
mov dword [ebp - 0x1c4], eax
mov byte [ebp - 4], 0x37
xor ecx, ecx
mov dword [ebp - 0xbe], 0x171f1d1e
mov dword [ebp - 0xba], 0x111f1b
mov byte [ebp - 0xb6], 1
nop
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0xbe], al
inc ecx
cmp ecx, 7
jb 0x9b1cc0
mov al, byte [ebp - 0x190]
mov byte [ebp - 0xb6], 0
test al, al
jne 0x9b1d10
push 1
lea ecx, [ebp - 0x270]
mov byte [ebp - 0x190], 1
call fcn.009f6b10
mov esi, dword [ebp - 0x270]
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x188], esi
mov dword [ebp - 0x184], eax
jmp 0x9b1d1e
cmp al, 1
jne 0x9b2526
mov esi, dword [ebp - 0x188]
xorps xmm0, xmm0
mov dword [ebp - 0x238], 0
lea edx, [ebp - 0xbe]
mov dword [ebp - 0x234], 0
movups xmmword [ebp - 0x248], xmm0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x9b1d45
sub edx, ecx
lea eax, [ebp - 0xbe]
push edx
push eax
lea ecx, [ebp - 0x248]
call fcn.00992810
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x38
push eax
mov ecx, esi
call fcn.009fc1a0
mov byte [ebp - 4], 0x37
mov esi, eax
mov ecx, dword [ebp - 0x234]
cmp ecx, 0x10
jb 0x9b1db3
mov edx, dword [ebp - 0x248]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b1da9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
mov al, byte [esi]
mov byte [esi], 3
mov ecx, dword [esi + 0xc]
mov byte [ebp - 0x1d0], al
mov eax, dword [esi + 8]
mov dword [esi + 8], edx
mov edx, dword [ebp - 0x164]
mov dword [ebp - 0x1c4], ecx
lea ecx, [ebp - 0x1d0]
mov dword [esi + 0xc], edx
mov dword [ebp - 0x1c8], eax
call fcn.009f2bb0
xorps xmm0, xmm0
mov byte [ebp - 0x1e0], 3
push 0x18
movq qword [ebp - 0x1d8], xmm0
call fcn.00a6bfb1
mov esi, eax
add esp, 4
lea eax, [ebp - 0x15a]
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x260], esi
mov ecx, dword [ebp - 0x48]
xorps xmm0, xmm0
mov byte [ebp - 4], 0x3b
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b1e60
sub ecx, edx
push ecx
push dword [ebp - 0x48]
mov ecx, esi
call fcn.00992810
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x1d8], esi
mov byte [ebp - 4], 0x3c
xor ecx, ecx
mov dword [ebp - 0x8a], 0x1c1d1b
mov byte [ebp - 0x86], 1
nop dword [eax + eax]
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0x8a], al
inc ecx
cmp ecx, 3
jb 0x9b1ea0
lea eax, [ebp - 0x8a]
mov byte [ebp - 0x86], 0
push eax
lea ecx, [ebp - 0x190]
call fcn.009f9120
mov esi, eax
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x1d4]
mov edi, dword [ebp - 0x64]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x1e0], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x1d8], ecx
lea ecx, [ebp - 0x1e0]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x1d4], edx
call fcn.009f2bb0
xorps xmm0, xmm0
mov byte [ebp - 0x1f0], 3
push 0x18
movq qword [ebp - 0x1e8], xmm0
call fcn.00a6bfb1
mov esi, eax
add esp, 4
lea eax, [ebp - 0x15b]
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x258], esi
mov ecx, dword [ebp - 0x4c]
xorps xmm0, xmm0
mov byte [ebp - 4], 0x3d
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9b1f58
sub ecx, edx
push ecx
push dword [ebp - 0x4c]
mov ecx, esi
call fcn.00992810
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x1e8], esi
mov byte [ebp - 4], 0x3e
xor ecx, ecx
mov dword [ebp - 0xb5], 0x18170002
mov word [ebp - 0xb1], 0x1c
mov byte [ebp - 0xaf], 1
nop dword [eax]
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0xb5], al
inc ecx
cmp ecx, 5
jb 0x9b1fa0
lea eax, [ebp - 0xb5]
mov byte [ebp - 0xaf], 0
push eax
lea ecx, [ebp - 0x190]
call fcn.009f9120
mov esi, eax
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x1e4]
mov edi, dword [ebp - 0x64]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x1f0], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x1e8], ecx
lea ecx, [ebp - 0x1f0]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x1e4], edx
call fcn.009f2bb0
xorps xmm0, xmm0
mov byte [ebp - 0x1a0], 3
push 0x18
movq qword [ebp - 0x198], xmm0
call fcn.00a6bfb1
mov esi, eax
add esp, 4
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x164], esi
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x3f
push eax
mov ecx, esi
call fcn.009f5110
mov dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x198], esi
mov dword [ebp - 0x194], eax
mov byte [ebp - 4], 0x40
xor ecx, ecx
mov edi, dword [ebp - 0x98]
mov dword [ebp - 0x2d], 0x2030e1e
mov dword [ebp - 0x29], 0x11061c05
mov word [ebp - 0x25], 0x100
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0x2d], al
inc ecx
cmp ecx, 8
jb 0x9b2085
lea eax, [ebp - 0x2d]
mov byte [ebp - 0x24], 0
push eax
lea ecx, [ebp - 0x190]
call fcn.009f9120
mov byte [ebp - 4], 0x35
mov cl, byte [eax]
mov byte [eax], 3
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x1a0], cl
mov ecx, dword [eax + 8]
mov dword [eax + 8], esi
mov esi, dword [ebp - 0x164]
mov dword [ebp - 0x198], ecx
lea ecx, [ebp - 0x1a0]
mov dword [eax + 0xc], esi
mov dword [ebp - 0x194], edx
call fcn.009f2bb0
mov dword [ebp - 0x5c], 0x18170002
xor ecx, ecx
mov dword [ebp - 0x58], 0x100001c
nop
mov al, cl
add al, 0x6e
xor byte [ebp + ecx - 0x5c], al
inc ecx
cmp ecx, 6
jb 0x9b20f0
mov ecx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 0x55], 0
call fcn.009f9120
lea ecx, [ebp - 0x190]
push ecx
mov ecx, eax
call fcn.009f2530
lea ecx, [ebp - 0x190]
call fcn.009f2bb0
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0xf4]
cmp ecx, 0x10
jb 0x9b2168
mov edx, dword [ebp - 0x108]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b215e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0xdc]
cmp ecx, 0x10
jb 0x9b21a6
mov edx, dword [ebp - 0xf0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b219c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov ecx, edi
call fcn.00a2e270
cmp eax, 0x64
je 0x9b1898
test edi, edi
je 0x9b2232
mov esi, dword [edi]
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x9b21d4
push eax
call dword [fcn.00ac2d20]
add esp, 4
mov eax, dword [edi + 0x50]
mov dword [ebp - 0x4c], 0
cmp eax, 0xbdf20da3
je 0x9b21ec
cmp eax, 0x519c2973
jne 0x9b21f6
mov ecx, edi
call fcn.00a2d070
mov dword [ebp - 0x4c], eax
mov ecx, edi
call fcn.00a2d280
test esi, esi
je 0x9b2221
cmp byte [esi + 0x1e], 0
jne 0x9b2210
cmp dword [ebp - 0x4c], 0xc0a
jne 0x9b2221
push 0
push 7
push esi
call fcn.00a1cc20
add esp, 0xc
mov byte [esi + 0x1e], 0
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x9b2232
push eax
call dword [fcn.00ac2d28]
add esp, 4
mov ecx, dword [ebp - 0x9c]
call fcn.009a43d0
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x1a8]
cmp ecx, 0x10
jb 0x9b227b
mov edx, dword [ebp - 0x1bc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b2271
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x21c]
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
cmp ecx, 0x10
jb 0x9b22d4
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b22ca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x2e8]
cmp ecx, 0x10
jb 0x9b2312
mov edx, dword [ebp - 0x2fc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b2308
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b251c
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov ecx, dword [ebp - 0x54]
inc ecx
mov dword [ebp - 0x54], ecx
cmp ecx, dword [ebp - 0x20]
jae 0x9b2329
mov esi, dword [ebp - 0xa8]
jmp 0x9b0920
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0x10
jb 0x9b2363
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b2359
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b257e
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov ecx, dword [ebp - 0x274]
cmp ecx, 0x10
jb 0x9b239d
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b2393
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b257e
push ecx
push edx
call fcn.00a6c232
add esp, 8
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0xf
mov byte [ebp - 0x288], 0
call fcn.009f7300
mov ecx, dword [ebp - 0x144]
cmp ecx, 0x10
jb 0x9b23fd
mov edx, dword [ebp - 0x158]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b23f3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b257e
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov ecx, dword [ebx + 0x20]
cmp ecx, 0x10
jb 0x9b2431
mov edx, dword [ebx + 0xc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b2427
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b257e
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov ecx, dword [ebx + 0x38]
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x20], 0xf
mov byte [ebx + 0xc], 0
cmp ecx, 0x10
jb 0x9b2477
mov edx, dword [ebx + 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b246d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b257e
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov ecx, dword [ebx + 0x50]
mov dword [ebx + 0x34], 0
mov dword [ebx + 0x38], 0xf
mov byte [ebx + 0x24], 0
cmp ecx, 0x10
jb 0x9b24bd
mov edx, dword [ebx + 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b24b3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b257e
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov ecx, dword [ebx + 0x68]
mov dword [ebx + 0x4c], 0
mov dword [ebx + 0x50], 0xf
mov byte [ebx + 0x3c], 0
cmp ecx, 0x10
jb 0x9b2503
mov edx, dword [ebx + 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x9b24f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x9b257e
push ecx
push edx
call fcn.00a6c232
add esp, 8
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00a714d0
call fcn.00992040
lea ecx, [ebp - 0x190]
call fcn.009f6de0
push eax
lea ecx, [ebp - 0x120]
call fcn.00992700
push eax
mov edx, 0xaafde8
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x180]
call fcn.009f8f70
add esp, 4
push eax
mov edx, 0x131
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x24c]
call fcn.00998920
add esp, 4
lea eax, [ebp - 0x24c]
push 0xac0258
push eax
call fcn.00a6dc1b
call fcn.00a714d0
int3