Function at 0x10001aa9
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1002b69d
call fcn.1001c638
mov ecx, 0x61dce8
lea eax, [ecx - 8]
test eax, eax
je 0x10001af8
mov eax, dword [ecx + 0xfa04d18]
mov dword [ecx - 8], eax
mov eax, dword [ecx + 0xfa04d1c]
mov dword [ecx - 4], eax
mov eax, dword [ecx + 0xfa04d20]
mov dword [ecx], eax
mov eax, dword [ecx + 0xfa04d24]
mov dword [ecx + 4], eax
mov eax, dword [ecx + 0xfa04d28]
mov dword [ecx + 8], eax
mov eax, dword [ecx + 0xfa04d2c]
mov dword [ecx + 0xc], eax
add ecx, 0x18
cmp ecx, 0x61dfd0
jl 0x10001abc
mov ecx, 0x61dfb8
lea eax, [ecx - 8]
test eax, eax
je 0x10001b44
mov eax, dword [ecx + 0xfa04d30]
mov dword [ecx - 8], eax
mov eax, dword [ecx + 0xfa04d34]
mov dword [ecx - 4], eax
mov eax, dword [ecx + 0xfa04d38]
mov dword [ecx], eax
mov eax, dword [ecx + 0xfa04d3c]
mov dword [ecx + 4], eax
mov eax, dword [ecx + 0xfa04d40]
mov dword [ecx + 8], eax
mov eax, dword [ecx + 0xfa04d44]
mov dword [ecx + 0xc], eax
add ecx, 0x18
cmp ecx, 0x61e198
jl 0x10001b08
push esi
push edi
call fcn.1000279a
xor esi, esi
push esi
push 0x10001e81
push 0x4182c4
push 1
call fcn.100017d9
push esi
push 0x10001eb9
push 0x519635
push 0xe
call fcn.100017d9
push 0x64
push 0x61460d
call fcn.100027f9
push 0x44
push 0x61460e
call fcn.100027f9
push esi
push 0x61460f
call fcn.100027f9
push 1
mov edx, 0x10001ed1
mov ecx, 0x4b55d2
call fcn.10001a10
pop ecx
lea eax, [ebp - 4]
push eax
push 0x40
push 0x1effff
push 0x401000
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push esi
push 0x10001531
push 0x4252d6
push 8
call fcn.100017d9
mov esi, str.__World_of_Kersef
mov edi, 0x622cda
push 4
push 0x1000226c
push 0x41c468
movsd dword es:[edi], dword [esi]
push 1
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
call fcn.100017d9
mov edi, 0x1000222e
mov esi, 0x47daca
push 1
mov edx, edi
mov ecx, esi
call fcn.10001a10
push 1
mov edx, 0x100021c3
mov ecx, 0x41d1b4
call fcn.10001a10
push 1
mov edx, 0x100021e2
mov ecx, 0x41cfd8
call fcn.10001a10
add esp, 0xc
mov edx, 0x1000220b
mov ecx, 0x421356
call fcn.100019e5
mov edx, 0x100021a5
mov ecx, 0x4e21db
call fcn.100019e5
push 1
push 0x51e6b4
push 0x51e621
push 1
mov dword [0x100284f0], 0xff00cd00
call fcn.100017d9
push 1
push 0x52fc3a
push 0x52fb84
push 1
call fcn.100017d9
push 1
mov edx, edi
mov ecx, esi
call fcn.10001a10
pop ecx
xor esi, esi
xor edi, edi
push esi
push 0x1000215f
push 0x41a51e
inc edi
push edi
call fcn.100017d9
push esi
push 0x10002182
push 0x41a535
push edi
call fcn.100017d9
push esi
push 0x1000209c
push 0x41a87d
push edi
call fcn.100017d9
push esi
push 0x1000207a
push 0x41a56e
push edi
call fcn.100017d9
push edi
push 0x10002112
push 0x41cfcd
push edi
call fcn.100017d9
push edi
mov edx, 0x100020e7
mov ecx, 0x48b04f
call fcn.10001a10
push 2
mov edx, 0x1000252e
mov ecx, 0x50c2eb
call fcn.10001a10
push 2
mov edx, 0x1000255b
mov ecx, 0x50abb8
call fcn.10001a10
add esp, 0xc
push esi
push 0x10002588
push 0x50c52a
push edi
call fcn.100017d9
push esi
push 0x100025c6
push 0x50c574
push edi
call fcn.100017d9
push 2
mov edx, 0x1000261e
mov ecx, 0x422007
call fcn.10001a10
push 5
mov edx, 0x10002644
mov ecx, 0x41fb30
call fcn.10001a10
pop ecx
pop ecx
push 4
push 0x100020be
push 0x4205fc
push edi
call fcn.100017d9
push esi
push 0x10002013
push 0x4676c5
push edi
call fcn.100017d9
push 3
mov edx, 0x1000204b
mov ecx, 0x5385ac
call fcn.10001a10
pop ecx
mov ecx, 0x4974c7
call fcn.10001a7c
mov ecx, 0x4974d7
call fcn.10001a7c
push esi
push 0x10001fc9
push 0x519d60
push edi
call fcn.100017d9
push edi
push 0x10001fa4
push 0x4de210
push edi
call fcn.100017d9
push 4
push 0x10001f79
push 0x4cfdaf
push edi
call fcn.100017d9
push esi
push 0x10001f4a
push 0x519e36
push edi
call fcn.100017d9
push esi
push 0x10001f61
push 0x51992f
push edi
call fcn.100017d9
push esi
push 0x10001f6d
push 0x519903
push edi
call fcn.100017d9
push esi
push 0x456b59
push 0x456ade
push edi
call fcn.100017d9
push esi
push 0x45a67b
push 0x45a600
push edi
call fcn.100017d9
push edi
mov edx, 0x10001fef
mov ecx, 0x45488d
call fcn.10001a10
pop ecx
mov byte [0x5495a8], 0x64
lea ecx, [ebp - 4]
mov byte [0x47b0ab], 0x64
push ecx
mov byte [0x44b476], 0x64
mov byte [0x476cf1], 0x64
push dword [ebp - 4]
push 0x1effff
push 0x401000
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
pop edi
mov al, 1
pop esi
leave
ret