Function at 0x1000d120
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x10052434]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10098480]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10098f80]
cmp eax, dword [ecx + 4]
jle 0x1000d183
push 0x10098f80
call fcn.100195b8
add esp, 4
cmp dword [0x10098f80], 0xffffffff
jne 0x1000d183
push 0x1003c230
mov dword [0x10098f84], 0x1004a704
call fcn.10019993
push 0x10098f80
call fcn.1001956e
add esp, 8
push ebx
push esi
push edi
call fcn.10010eb0
call fcn.10009620
push 0x1003eff2
push 7
mov dword [ebp - 8], 0
call fcn.100199a8
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov edx, 0x90909090
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d22d
mov ecx, 0x1000e850
mov byte [eax], 0xe9
sub ecx, 0x4548b4
mov dword [eax + 1], ecx
mov word [eax + 5], dx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x4548af
call esi
test eax, eax
je 0x1000d22d
mov ecx, dword [ebp - 0xc]
mov edx, 0x4548af
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000d22d
push 7
push 0x4548af
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d2a7
mov ecx, 0x1000e880
mov byte [eax], 0xe9
sub ecx, 0x449dd5
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x449dd0
call esi
test eax, eax
je 0x1000d2a7
mov ecx, dword [ebp - 0xc]
mov edx, 0x449dd0
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000d2a7
push 5
push 0x449dd0
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 9
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d32c
mov ecx, 0x1000e900
mov byte [eax], 0xe9
sub ecx, 0x47df46
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x47df41
call esi
test eax, eax
je 0x1000d32c
mov eax, dword [ebp - 0xc]
mov ecx, 0x47df41
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000d32c
push 9
push 0x47df41
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 7
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d3b7
mov ecx, 0x1000e960
mov byte [eax], 0xe9
sub ecx, 0x40c660
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x40c65b
call esi
test eax, eax
je 0x1000d3b7
mov ecx, dword [ebp - 0xc]
mov edx, 0x40c65b
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000d3b7
push 7
push 0x40c65b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d437
mov ecx, 0x1000e9f0
mov byte [eax], 0xe9
sub ecx, 0x403787
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x403782
call esi
test eax, eax
je 0x1000d437
mov ecx, dword [ebp - 0xc]
mov edx, 0x403782
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000d437
push 6
push 0x403782
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 9
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d4bc
mov ecx, 0x1000eb20
mov byte [eax], 0xe9
sub ecx, 0x402339
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x402334
call esi
test eax, eax
je 0x1000d4bc
mov eax, dword [ebp - 0xc]
mov ecx, 0x402334
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000d4bc
push 9
push 0x402334
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 7
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d547
mov ecx, 0x1000ead0
mov byte [eax], 0xe9
sub ecx, 0x403882
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x40387d
call esi
test eax, eax
je 0x1000d547
mov ecx, dword [ebp - 0xc]
mov edx, 0x40387d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000d547
push 7
push 0x40387d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x54833a
call esi
test eax, eax
je 0x1000d578
lea eax, [ebp - 8]
mov byte [0x54833a], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x54833a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x539a34
call esi
test eax, eax
je 0x1000d5a9
lea eax, [ebp - 8]
mov byte [0x539a34], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x539a34
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x539b1c
call esi
test eax, eax
je 0x1000d5da
lea eax, [ebp - 8]
mov byte [0x539b1c], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x539b1c
call esi
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d653
mov byte [eax], 0xe9
mov dword [eax + 1], 0x8e
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x51dce1
call esi
test eax, eax
je 0x1000d653
mov ecx, dword [ebp - 0xc]
mov edx, 0x51dce1
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000d653
push 6
push 0x51dce1
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d6cc
mov byte [eax], 0xe9
mov dword [eax + 1], 0xb1
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x52f02d
call esi
test eax, eax
je 0x1000d6cc
mov ecx, dword [ebp - 0xc]
mov edx, 0x52f02d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000d6cc
push 6
push 0x52f02d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54833a
call esi
test eax, eax
je 0x1000d6fd
lea eax, [ebp - 8]
mov byte [0x54833a], 0xeb
push eax
push dword [ebp - 8]
push 4
push 0x54833a
call esi
push 0x1003eff2
push 9
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d782
mov ecx, 0x1000ecc0
mov byte [eax], 0xe9
sub ecx, 0x420830
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x42082b
call esi
test eax, eax
je 0x1000d782
mov eax, dword [ebp - 0xc]
mov ecx, 0x42082b
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000d782
push 9
push 0x42082b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d7f5
mov byte [eax], 0xe9
mov dword [eax + 1], 1
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x539c48
call esi
test eax, eax
je 0x1000d7f5
mov ecx, dword [ebp - 0xc]
mov edx, 0x539c48
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000d7f5
push 5
push 0x539c48
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d868
mov byte [eax], 0xe9
mov dword [eax + 1], 4
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x539b1c
call esi
test eax, eax
je 0x1000d868
mov ecx, dword [ebp - 0xc]
mov edx, 0x539b1c
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000d868
push 5
push 0x539b1c
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d8db
mov byte [eax], 0xe9
mov dword [eax + 1], 5
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4404de
call esi
test eax, eax
je 0x1000d8db
mov ecx, dword [ebp - 0xc]
mov edx, 0x4404de
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000d8db
push 5
push 0x4404de
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 7
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d966
mov ecx, 0x1000ebc0
mov byte [eax], 0xe9
sub ecx, 0x425a9b
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x425a96
call esi
test eax, eax
je 0x1000d966
mov ecx, dword [ebp - 0xc]
mov edx, 0x425a96
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000d966
push 7
push 0x425a96
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 0xa
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000d9f1
mov byte [eax], 0xe9
mov ecx, 0x1000ebf0
sub ecx, 0x423704
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
mov byte [eax + 9], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4236ff
call esi
test eax, eax
je 0x1000d9f1
mov eax, dword [ebp - 0xc]
mov ecx, 0x4236ff
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov ax, word [eax + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push ecx
call esi
test eax, eax
je 0x1000d9f1
push 0xa
push 0x4236ff
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 9
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000da76
mov ecx, 0x1000efa0
mov byte [eax], 0xe9
sub ecx, 0x423f6e
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x423f69
call esi
test eax, eax
je 0x1000da76
mov eax, dword [ebp - 0xc]
mov ecx, 0x423f69
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000da76
push 9
push 0x423f69
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000daf6
mov ecx, 0x1000eb90
mov byte [eax], 0xe9
sub ecx, 0x4211ab
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4211a6
call esi
test eax, eax
je 0x1000daf6
mov ecx, dword [ebp - 0xc]
mov edx, 0x4211a6
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000daf6
push 6
push 0x4211a6
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 9
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000db7b
mov ecx, 0x1000efe0
mov byte [eax], 0xe9
sub ecx, 0x40cd32
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x40cd2d
call esi
test eax, eax
je 0x1000db7b
mov eax, dword [ebp - 0xc]
mov ecx, 0x40cd2d
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000db7b
push 9
push 0x40cd2d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 9
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000dbf9
mov byte [eax], 0xe9
mov dword [eax + 1], 0x15
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x40cd75
call esi
test eax, eax
je 0x1000dbf9
mov eax, dword [ebp - 0xc]
mov ecx, 0x40cd75
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000dbf9
push 9
push 0x40cd75
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000dc77
mov ecx, 0x1000eb70
mov word [eax], 0x8d0f
sub ecx, 0x428baf
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x428ba9
call esi
test eax, eax
je 0x1000dc77
mov ecx, dword [ebp - 0xc]
mov edx, 0x428ba9
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000dc77
push 6
push 0x428ba9
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000dcf1
mov ecx, 0x1000eb40
mov byte [eax], 0xe9
sub ecx, 0x428ff2
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x428fed
call esi
test eax, eax
je 0x1000dcf1
mov ecx, dword [ebp - 0xc]
mov edx, 0x428fed
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000dcf1
push 5
push 0x428fed
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x477a8d
call esi
test eax, eax
je 0x1000dd22
lea eax, [ebp - 8]
mov byte [0x477a8d], 0x1f
push eax
push dword [ebp - 8]
push 1
push 0x477a8d
call esi
push 0x1003eff2
push 7
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ddad
mov ecx, 0x1000ef60
mov byte [eax], 0xe9
sub ecx, 0x46ed60
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x46ed5b
call esi
test eax, eax
je 0x1000ddad
mov ecx, dword [ebp - 0xc]
mov edx, 0x46ed5b
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000ddad
push 7
push 0x46ed5b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000de2b
mov ecx, 0x1000f000
mov word [eax], 0x840f
sub ecx, 0x49b3a0
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x49b39a
call esi
test eax, eax
je 0x1000de2b
mov ecx, dword [ebp - 0xc]
mov edx, 0x49b39a
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000de2b
push 6
push 0x49b39a
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000dea9
mov ecx, 0x1000f000
mov word [eax], 0x840f
sub ecx, 0x49b3b0
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x49b3aa
call esi
test eax, eax
je 0x1000dea9
mov ecx, dword [ebp - 0xc]
mov edx, 0x49b3aa
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000dea9
push 6
push 0x49b3aa
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000df23
mov ecx, 0x1000f0c0
mov byte [eax], 0xe9
sub ecx, 0x46ec8f
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x46ec8a
call esi
test eax, eax
je 0x1000df23
mov ecx, dword [ebp - 0xc]
mov edx, 0x46ec8a
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000df23
push 5
push 0x46ec8a
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x60aa00
call esi
test eax, eax
je 0x1000df57
lea eax, [ebp - 8]
mov dword [0x60aa00], 0x1e
push eax
push dword [ebp - 8]
push 4
push 0x60aa00
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x60aa04
call esi
test eax, eax
je 0x1000df8b
lea eax, [ebp - 8]
mov dword [0x60aa04], 0x1e
push eax
push dword [ebp - 8]
push 4
push 0x60aa04
call esi
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e005
mov ecx, 0x1000f090
mov byte [eax], 0xe9
sub ecx, 0x4df20d
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4df208
call esi
test eax, eax
je 0x1000e005
mov ecx, dword [ebp - 0xc]
mov edx, 0x4df208
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000e005
push 5
push 0x4df208
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e085
mov ecx, 0x1000f060
mov byte [eax], 0xe9
sub ecx, 0x4e0462
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4e045d
call esi
test eax, eax
je 0x1000e085
mov ecx, dword [ebp - 0xc]
mov edx, 0x4e045d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000e085
push 6
push 0x4e045d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 9
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e10a
mov ecx, 0x1000f020
mov byte [eax], 0xe9
sub ecx, 0x4ccbe1
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x4ccbdc
call esi
test eax, eax
je 0x1000e10a
mov eax, dword [ebp - 0xc]
mov ecx, 0x4ccbdc
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000e10a
push 9
push 0x4ccbdc
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e18a
mov ecx, 0x1000f160
mov byte [eax], 0xe9
sub ecx, 0x424f1e
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x424f19
call esi
test eax, eax
je 0x1000e18a
mov ecx, dword [ebp - 0xc]
mov edx, 0x424f19
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000e18a
push 6
push 0x424f19
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e20a
mov ecx, 0x1000f1c0
mov byte [eax], 0xe9
sub ecx, 0x4bac64
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4bac5f
call esi
test eax, eax
je 0x1000e20a
mov ecx, dword [ebp - 0xc]
mov edx, 0x4bac5f
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000e20a
push 6
push 0x4bac5f
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 0xa
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e295
mov byte [eax], 0xe9
mov ecx, 0x1000f200
sub ecx, 0x47dbb4
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
mov byte [eax + 9], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x47dbaf
call esi
test eax, eax
je 0x1000e295
mov eax, dword [ebp - 0xc]
mov ecx, 0x47dbaf
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov ax, word [eax + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push ecx
call esi
test eax, eax
je 0x1000e295
push 0xa
push 0x47dbaf
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e315
mov ecx, 0x1000f260
mov byte [eax], 0xe9
sub ecx, 0x44e7ea
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x44e7e5
call esi
test eax, eax
je 0x1000e315
mov ecx, dword [ebp - 0xc]
mov edx, 0x44e7e5
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000e315
push 6
push 0x44e7e5
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e38f
mov ecx, 0x1000f280
mov byte [eax], 0xe9
sub ecx, 0x44534b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x445346
call esi
test eax, eax
je 0x1000e38f
mov ecx, dword [ebp - 0xc]
mov edx, 0x445346
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000e38f
push 5
push 0x445346
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 7
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e41a
mov ecx, 0x1000f2c0
mov byte [eax], 0xe9
sub ecx, 0x50d5bd
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x50d5b8
call esi
test eax, eax
je 0x1000e41a
mov ecx, dword [ebp - 0xc]
mov edx, 0x50d5b8
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000e41a
push 7
push 0x50d5b8
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e49a
mov ecx, 0x1000f310
mov byte [eax], 0xe9
sub ecx, 0x4abcc0
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4abcbb
call esi
test eax, eax
je 0x1000e49a
mov ecx, dword [ebp - 0xc]
mov edx, 0x4abcbb
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000e49a
push 6
push 0x4abcbb
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e514
mov ecx, 0x1000f340
mov byte [eax], 0xe9
sub ecx, 0x50ee5b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50ee56
call esi
test eax, eax
je 0x1000e514
mov ecx, dword [ebp - 0xc]
mov edx, 0x50ee56
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000e514
push 5
push 0x50ee56
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 7
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e59f
mov ecx, 0x1000f370
mov byte [eax], 0xe9
sub ecx, 0x53cddd
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x53cdd8
call esi
test eax, eax
je 0x1000e59f
mov ecx, dword [ebp - 0xc]
mov edx, 0x53cdd8
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000e59f
push 7
push 0x53cdd8
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e619
mov ecx, 0x1000f3c0
mov byte [eax], 0xe9
sub ecx, 0x50f45b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50f456
call esi
test eax, eax
je 0x1000e619
mov ecx, dword [ebp - 0xc]
mov edx, 0x50f456
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000e619
push 5
push 0x50f456
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
push 0x1003eff2
push 5
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e693
mov ecx, 0x1000f3f0
mov byte [eax], 0xe9
sub ecx, 0x50ddcc
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50ddc7
call esi
test eax, eax
je 0x1000e693
mov ecx, dword [ebp - 0xc]
mov edx, 0x50ddc7
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000e693
push 5
push 0x50ddc7
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x42aaf9
call esi
test eax, eax
je 0x1000e6c7
lea eax, [ebp - 8]
mov dword [0x42aaf9], 0
push eax
push dword [ebp - 8]
push 4
push 0x42aaf9
call esi
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e747
mov ecx, 0x1000b600
mov byte [eax], 0xe9
sub ecx, 0x5419e0
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5419db
call esi
test eax, eax
je 0x1000e747
mov ecx, dword [ebp - 0xc]
mov edx, 0x5419db
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000e747
push 6
push 0x5419db
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x46eced
call esi
test eax, eax
je 0x1000e77b
lea eax, [ebp - 8]
mov dword [0x46eced], 0
push eax
push dword [ebp - 8]
push 4
push 0x46eced
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547cac
call esi
test eax, eax
je 0x1000e7af
lea eax, [ebp - 8]
mov dword [0x547cac], 0
push eax
push dword [ebp - 8]
push 4
push 0x547cac
call esi
push 0x1003eff2
push 6
mov dword [ebp - 8], 0
call fcn.100199a8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000e82f
mov ecx, 0x1000f420
mov byte [eax], 0xe9
sub ecx, 0x44bb21
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x44bb1c
call esi
test eax, eax
je 0x1000e82f
mov ecx, dword [ebp - 0xc]
mov edx, 0x44bb1c
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000e82f
push 6
push 0x44bb1c
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.1001941f
add esp, 4
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10019411
mov esp, ebp
pop ebp
ret