Function at 0x1001040
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x20
movzx eax, byte [0x101e4a4]
mov ecx, dword [0x101e448]
push ebx
mov ebx, dword [0x101e444]
push ebp
push esi
lea eax, [eax + ecx + 2]
push edi
mov dword [esp + 0x24], ebx
mov dword [0x1078700], 0x101ffd8
mov dword [0x101e4a0], eax
call fcn.010138d0
mov edi, dword [0x101e4a8]
mov edx, dword [0x101e4a0]
mov ecx, ebx
sub ecx, edi
add ecx, 0x12068
imul ecx, ecx
add byte [0x101e456], bl
add byte [0x101e455], bl
add byte [0x101e454], bl
add byte [0x101e453], bl
add byte [0x101e452], bl
mov dword [0x101e44c], eax
sub ecx, edi
mov al, dl
sub al, cl
add al, 7
movzx esi, al
mov byte [0x101e4a4], al
lea eax, [esi + esi*2]
add eax, eax
add eax, eax
sub eax, ecx
add edx, eax
movzx eax, byte [0x101e461]
cmp eax, edi
mov dword [0x101e448], ecx
jb 0x1001101
mov dl, byte [0x101e44c]
sub byte [0x101e45f], dl
add edi, 0x1a38
imul edi, edi, 0xb
mov dword [0x101e4a0], edi
mov edx, edi
add esi, ecx
lea edx, [edx + esi + 0x56]
mov dword [0x101e4a0], edx
call fcn.01013750
mov ecx, dword [0x101e4a8]
movzx esi, byte [0x101e464]
mov edx, 7
sub edx, ecx
add dword [0x101e448], edx
movzx edx, byte [0x101e452]
add edx, esi
cmp edx, 0xec
mov dword [0x101e44c], eax
jne 0x1001155
imul eax, eax, 0x6e98
sub eax, ecx
lea esi, [ecx + ecx + 0x60]
mov dword [0x101e4a8], eax
jmp 0x1001167
sub al, cl
add al, 0x68
mov byte [0x101e45e], al
mov eax, dword [0x101e4a0]
lea esi, [eax + ecx*2 + 0x56]
push 0x460a
push 0x1016cb0
push 0x101ffd8
call fcn.01008d00
movzx ecx, byte [0x101e4a4]
add ecx, dword [0x101e448]
add esp, 0xc
lea esi, [esi + ecx + 0x56]
mov eax, esi
mov dword [0x101e4a0], esi
call fcn.01013bd0
mov edi, dword [0x101e4a8]
mov dl, byte [0x101e452]
movzx ebp, byte [0x101e464]
add byte [0x101e456], bl
add byte [0x101e455], bl
add byte [0x101e454], bl
add byte [0x101e453], bl
movsd xmm0, qword [0x101b880]
mov ecx, ebx
sub ecx, edi
add ecx, 0x12068
imul ecx, ecx
add dl, bl
mov byte [0x101e452], dl
movzx edx, dl
sub ecx, edi
add edx, ebp
cmp edx, 0xec
mov dword [0x101e44c], eax
mov dword [0x101e448], ecx
movsd qword [esp + 0x28], xmm0
jne 0x1001217
imul eax, eax, 0x6e98
sub eax, edi
lea esi, [edi + edi + 0x60]
mov dword [0x101e4a8], eax
jmp 0x100122d
sub al, byte [0x101e4a8]
add al, 0x68
mov byte [0x101e45e], al
mov eax, dword [0x101e4a8]
lea esi, [esi + eax*2 + 0x56]
mov dl, 0x68
mov al, cl
imul dl
mov dl, byte [0x101e4a4]
neg dl
sub dl, al
mov al, byte [0x101e455]
cmp al, 9
mov dword [0x101e4a0], esi
mov byte [0x101e4a4], dl
je 0x1001290
cmp al, 0x2d
je 0x100127e
cmp al, 0xae
je 0x100126b
mov eax, dword [0x101e4a8]
lea ecx, [eax + ecx*2 + 0x62]
mov dword [0x101e4a8], ecx
jmp 0x100129f
mov edx, dword [0x101e4a8]
add ebx, ecx
lea eax, [edx + ebx + 0x56]
mov dword [0x101e4a8], eax
jmp 0x100129f
mov ecx, dword [0x101e4a8]
lea edx, [ecx + ebx + 0x5d]
mov dword [0x101e448], edx
jmp 0x100129f
mov eax, dword [0x101e4a8]
lea ecx, [eax + ebx + 0x60]
mov dword [0x101e448], ecx
mov eax, esi
call fcn.01013bd0
mov ecx, dword [0x101e4a8]
mov dword [0x101e44c], eax
movzx eax, byte [0x101e4a4]
lea edx, [eax + 0x403]
mov dword [0x101e444], edx
mov edx, dword [0x101e448]
sub eax, ecx
lea eax, [eax + edx + 9]
movzx edx, byte [0x101e444]
add byte [0x101e456], dl
movzx edx, byte [0x101e444]
add byte [0x101e455], dl
movzx edx, byte [0x101e444]
add byte [0x101e454], dl
movzx edx, byte [0x101e444]
add byte [0x101e453], dl
movzx edx, byte [0x101e444]
add byte [0x101e452], dl
movzx edx, byte [0x101e461]
mov ebx, eax
sub ebx, ecx
add ebx, 7
cmp edx, ecx
mov dword [0x101e4a0], eax
mov dword [esp + 0x20], 0x10
mov dword [esp + 0x18], 0x9a
mov dword [esp + 0x14], 0x85
jb 0x1001350
mov al, byte [0x101e44c]
sub byte [0x101e45f], al
mov eax, dword [0x101e4a0]
movsd xmm1, qword [0x101b878]
mov dword [esp + 0x1c], 0
mov byte [esp + 0x12], 1
movzx edx, byte [0x101e453]
add al, bl
add al, 0x5d
mov byte [0x101e4a4], al
mov eax, 1
lea ebx, [ebx]
cmp ecx, edx
je 0x100138c
add eax, 1
cmp eax, 7
jl 0x1001380
mov eax, dword [0x101e44c]
xor ebx, ebx
test eax, eax
sete bl
test ebx, ebx
je 0x10013b7
mov al, bl
mov dl, 0x68
imul dl
mov dl, byte [0x101e4a4]
neg dl
sub dl, al
mov eax, dword [0x101e44c]
mov byte [0x101e4a4], dl
movzx esi, byte [0x101e461]
cmp esi, eax
ja 0x10013d1
add al, cl
add al, 2
mov byte [0x101e452], cl
mov byte [0x101e4a4], al
mov edx, ebx
imul edx, ebx
sub edx, ecx
mov eax, ebx
test eax, eax
mov dword [0x101e448], edx
je 0x100140d
mov dl, al
add dl, byte [0x101e448]
add dl, 0x5d
cmp esi, ecx
mov byte [0x101e4a4], dl
mov edx, dword [0x101e448]
ja 0x100140d
mov eax, dword [0x101e444]
mov byte [0x101e452], al
lea eax, [ecx + eax + 2]
mov ebx, ecx
sub ebx, edx
mov dl, byte [0x101e455]
add ebx, 0x12068
cmp dl, 9
mov dword [0x101e448], ebx
je 0x1001459
cmp dl, 0x2d
je 0x1001459
cmp dl, 0xae
je 0x1001442
add al, 0x31
add al, al
add byte [0x101e4a4], al
mov byte [esp + 0x13], al
jmp 0x1001453
add al, bl
add al, 0x56
movzx edx, al
add byte [0x101e4a4], dl
mov byte [esp + 0x13], al
mov dl, byte [0x101e455]
xor eax, eax
test ebx, ebx
sete al
test eax, eax
mov dword [0x101e4a0], eax
je 0x1001478
mov dl, byte [0x101e455]
sub al, bl
add al, 7
mov byte [0x101e4a4], al
cmp esi, ebx
jb 0x1001490
sub byte [0x101e45f], cl
lea eax, [ebx + 0x1a38]
imul eax, eax, 0xb
mov dword [0x101e4a0], eax
comisd xmm1, xmm0
ja 0x1001638
mov edx, dword [0x101e44c]
cmp ebx, edx
jbe 0x10014f9
test edx, edx
lea ebx, [ecx + ebx + 0x5d]
mov eax, ebx
mov dword [0x101e444], eax
mov dword [0x101e448], ebx
jne 0x10014ed
movzx esi, byte [0x101e452]
movzx edi, byte [0x101e464]
add esi, edi
cmp esi, 0xec
jne 0x10014e2
imul ecx, ecx, 0x6e98
sub ecx, eax
mov eax, ecx
mov dword [0x101e444], eax
jmp 0x10014ed
sub cl, al
add cl, 0x68
mov byte [0x101e45e], cl
sub eax, edx
add eax, 0x12068
mov dword [0x101e4a0], eax
call fcn.010139c0
mov al, byte [0x101e4a4]
cmp byte [0x101e461], al
mov ebx, dword [0x101e448]
jb 0x1001525
sub byte [0x101e45f], bl
movzx ecx, al
add ecx, 0x1a38
imul ecx, ecx, 0xb
jmp 0x100152b
mov ecx, dword [0x101e4a0]
cmp ecx, 0xc8e8
jbe 0x100156f
mov edx, dword [0x101e4a8]
mov ecx, dword [0x101e44c]
lea eax, [edx + ecx + 0x60]
mov edx, ebx
mov dword [0x101e4a0], eax
call fcn.01013750
mov ecx, eax
mov al, byte [0x101e4a0]
imul byte [0x101e4a4]
mov edx, 7
sub edx, ecx
sub al, bl
mov dword [0x101e4a8], ecx
add ebx, edx
jmp 0x1001575
mov ecx, dword [0x101e4a8]
mov esi, dword [0x101e444]
sub esi, dword [0x101e44c]
movsd xmm0, qword [esp + 0x28]
movsd xmm1, qword [0x101b878]
add esi, 0x12068
mov edi, esi
imul edi, dword [0x101e44c]
sub edi, ecx
cmp esi, ebx
subsd xmm0, xmm1
movsd qword [esp + 0x28], xmm0
mov dword [0x101e4a0], esi
mov dword [0x101e44c], edi
jae 0x10015d0
movzx eax, al
lea eax, [eax + ebx + 2]
mov dword [0x101e4a0], eax
lea ebx, [ebx + ecx + 2]
add al, bl
add al, 0x5d
jmp 0x10015f5
movzx edx, byte [0x101e461]
cmp edx, dword [0x101e44c]
ja 0x10015f5
mov edx, dword [0x101e44c]
lea edx, [ecx + edx + 2]
mov byte [0x101e452], cl
mov dword [0x101e4a0], edx
movzx edx, byte [0x101e452]
movzx esi, byte [0x101e464]
add edx, esi
cmp edx, 0xec
jne 0x1001619
movzx eax, al
lea eax, [eax + eax + 0x60]
jmp 0x1001365
mov dl, bl
sub dl, al
add dl, 0x68
movzx eax, al
mov byte [0x101e45e], dl
mov edx, dword [0x101e4a0]
lea eax, [edx + eax*2 + 0x56]
jmp 0x1001365
movzx eax, byte [0x101e461]
cmp eax, ebx
ja 0x100164d
mov al, byte [0x101e4a4]
mov byte [0x101e452], al
movzx edi, byte [0x101e4a4]
lea esi, [edi + ebx + 2]
cmp esi, ebx
mov dword [0x101e4a0], esi
jbe 0x100168e
cmp dl, 9
lea ebx, [ebx + ecx + 0x5d]
lea esi, [edi + ebx + 2]
mov dword [0x101e4a0], esi
je 0x10016e8
cmp dl, 0x2d
je 0x10016d7
cmp dl, 0xae
je 0x10016c3
mov edx, dword [0x101e444]
lea eax, [edx + esi*2 + 0x62]
mov dword [0x101e444], eax
mov eax, dword [0x101e444]
movzx edx, byte [0x101e452]
movzx ebp, byte [0x101e464]
add edx, ebp
cmp edx, 0xec
jne 0x10016f9
mov edx, eax
imul edx, edx, 0x6e98
sub edx, ecx
lea ebx, [ecx + ecx + 0x60]
mov ecx, edx
mov dword [0x101e4a8], ecx
jmp 0x100170a
mov eax, dword [0x101e444]
lea edx, [ecx + esi]
lea edx, [eax + edx + 0x56]
mov dword [0x101e444], edx
jmp 0x100168e
mov eax, dword [0x101e444]
lea esi, [ecx + eax + 0x5d]
mov dword [0x101e4a0], esi
jmp 0x1001693
mov eax, dword [0x101e444]
lea esi, [ecx + eax + 0x60]
mov dword [0x101e4a0], esi
jmp 0x1001693
mov dl, al
sub dl, cl
add dl, 0x68
mov byte [0x101e45e], dl
lea ebx, [ebx + ecx*2 + 0x56]
movsd xmm0, qword [0x101b880]
mov edx, ecx
imul edx, edx, 0x6e98
sub edx, ebx
mov dword [0x101e448], edx
mov edx, esi
imul edx, dword [0x101e44c]
sub edx, ecx
cmp dword [0x101e4a4], eax
mov dword [0x101e44c], edx
movsd qword [esp + 0x28], xmm0
ja 0x1001750
lea eax, [edi + eax + 2]
mov dword [0x101e468], edi
mov dword [0x101e448], eax
mov eax, esi
call fcn.01013bd0
movzx ecx, byte [0x101e45d]
cmp ecx, 0x21db
mov edx, eax
mov dword [0x101e4a8], edx
jne 0x1001788
movzx edi, byte [0x101e459]
mov eax, dword [0x101e444]
add edi, dword [0x101e44c]
add eax, 0xffffffff
imul edi, eax
jmp 0x100178e
mov edi, dword [0x101e44c]
mov ebx, 0x101b620
mov eax, ebx
movzx esi, al
mov ecx, fcn.01017990
add ecx, 0x1013cc0
lea eax, [esi + ecx + 0x60]
mov dword [0x101e4a0], eax
movzx eax, byte [0x101e461]
cmp eax, edi
mov byte [0x101e4a4], bl
mov dword [0x101e448], ecx
jb 0x10017de
mov dl, byte [0x101e4a0]
sub byte [0x101e45f], dl
lea edx, [edi + 0x1a38]
imul edx, edx, 0xb
mov dword [0x101e4a8], edx
mov eax, dword [0x101e4a0]
cmp dword [0x101e4a4], eax
mov edi, eax
ja 0x10017fd
lea ecx, [esi + edi + 2]
mov dword [0x101e468], esi
mov dword [0x101e448], ecx
mov ebp, dword [0x101e468]
mov eax, 0x101ac48
sub eax, 0x1079ec0
add eax, 0x1016cb0
add edi, eax
lea eax, [esi + ecx + 0x60]
mov dword [0x101e444], eax
mov eax, dword [0x101e4b0]
add eax, ebp
cmp eax, 0xec
jne 0x1001846
mov bl, 0x68
mov al, cl
imul bl
mov ebx, 0x101b620
neg bl
sub bl, al
lea esi, [esi + esi + 0x60]
mov byte [0x101e4a4], bl
jmp 0x1001858
mov eax, ecx
sub eax, esi
add eax, 0x12068
mov dword [0x101e498], eax
lea esi, [edi + esi*2 + 0x56]
mov edi, esi
sub edi, edx
add edi, 7
cmp esi, 0x90b5
mov dword [0x101e44c], edi
jbe 0x100187c
mov eax, esi
imul eax, edi
sub eax, edx
mov edi, eax
mov dword [0x101e44c], edi
mov al, byte [0x101e455]
cmp al, 9
je 0x10018ae
cmp al, 0x2d
je 0x10018a8
cmp al, 0xae
je 0x1001899
lea ecx, [ecx + esi*2 + 0x62]
mov dword [0x101e448], ecx
jmp 0x10018b2
lea eax, [edx + esi]
lea ecx, [ecx + eax + 0x56]
mov dword [0x101e448], ecx
jmp 0x10018b2
lea esi, [edx + ecx + 0x5d]
jmp 0x10018b2
lea esi, [edx + ecx + 0x60]
mov eax, dword [esp + 0x1c]
add eax, 1
cmp eax, 0xd8
mov dword [esp + 0x1c], eax
jle 0x1001956
cmp byte [esp + 0x12], 0
movzx eax, bl
lea esi, [eax + ecx + 0x60]
je 0x1001930
push 0x101ffd4
lea ecx, [ecx + edx + 0x5d]
mov edx, dword [0x1078700]
push 0x40
push 0x3102
add eax, ecx
mov dword [0x101e448], ecx
push edx
lea ecx, [esi + eax + 0x56]
push 0xffffffffffffffff
mov byte [esp + 0x26], 0
mov dword [0x101e4a0], ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov edi, dword [0x101e44c]
mov ecx, dword [0x101e448]
mov esi, dword [0x101e4a0]
mov bl, byte [0x101e4a4]
mov edx, dword [0x101e4a8]
movsd xmm0, qword [esp + 0x28]
movzx eax, byte [0x101e45d]
cmp eax, 0x21db
jne 0x1001956
movzx eax, byte [0x101e459]
add eax, dword [0x101e444]
lea ebp, [esi - 1]
imul eax, ebp
mov dword [0x101e444], eax
xorps xmm1, xmm1
comisd xmm1, xmm0
jae 0x1001d2c
movzx eax, byte [0x101e452]
movzx esi, byte [0x101e464]
add eax, esi
cmp eax, 0xec
mov al, cl
jne 0x1001992
mov bl, 0x68
imul bl
mov bl, byte [0x101e4a4]
neg bl
sub bl, al
mov byte [0x101e4a4], bl
jmp 0x100199b
sub al, bl
add al, 0x68
mov byte [0x101e45e], al
cmp dword [esp + 0x18], 4
jae 0x10019a7
sub dword [esp + 0x18], 1
mov esi, edx
sub esi, dword [0x101e44c]
add esi, 0x12068
mov dword [0x101e4a0], esi
movzx esi, byte [0x101e461]
cmp esi, ecx
ja 0x10019dc
mov al, byte [0x101e4a4]
mov byte [0x101e452], al
movzx eax, al
lea eax, [eax + ecx + 2]
mov dword [0x101e4a0], eax
mov eax, dword [0x101e44c]
cmp eax, 0x7417
mov edi, dword [esp + 0x14]
lea edi, [eax + edi + 2]
mov dword [0x101e444], edi
jbe 0x1001a8d
lea esi, [eax + eax*2]
add esi, esi
add esi, esi
sub esi, edx
add dword [0x101e4a0], esi
cmp edi, ecx
jne 0x1001a72
mov dl, byte [0x101e4a4]
cmp byte [0x101e461], dl
jb 0x1001a33
sub byte [0x101e45f], cl
movzx ecx, dl
add ecx, 0x1a38
imul ecx, ecx, 0xb
mov dword [0x101e4a0], ecx
call fcn.01013bd0
movzx edx, byte [0x101e45d]
cmp edx, 0x21db
mov edx, dword [0x101e4a8]
mov dword [0x101e4a0], eax
jne 0x1001a67
movzx ecx, byte [0x101e459]
add ecx, dword [0x101e448]
lea eax, [edx - 1]
imul ecx, eax
jmp 0x1001a6d
mov ecx, dword [0x101e448]
mov eax, dword [0x101e44c]
movzx esi, byte [0x101e461]
cmp esi, edx
ja 0x1001a8d
lea ebx, [edx + ecx + 2]
mov byte [0x101e452], cl
mov dword [0x101e4a0], ebx
cmp dword [esp + 0x14], 0xb
jae 0x1001b27
cmp esi, edx
ja 0x1001aab
lea ebx, [edx + eax + 2]
mov byte [0x101e452], al
mov dword [0x101e4a0], ebx
movzx ebx, byte [0x101e452]
movzx ebp, byte [0x101e464]
add ebx, ebp
cmp ebx, 0xec
jne 0x1001ae5
lea edi, [edx + edx + 0x60]
mov dword [0x101e444], edi
mov edi, dword [0x101e4a0]
imul edi, edi, 0x6e98
sub edi, edx
mov edx, edi
mov dword [0x101e4a8], edx
jmp 0x1001b00
mov bl, byte [0x101e4a0]
sub bl, dl
add bl, 0x68
lea edi, [edi + edx*2 + 0x56]
mov byte [0x101e45e], bl
mov dword [0x101e444], edi
sub dword [esp + 0x14], 1
cmp esi, eax
jb 0x1001b27
mov al, byte [esp + 0x14]
sub byte [0x101e45f], al
mov eax, dword [0x101e44c]
lea edi, [eax + 0x1a38]
imul edi, edi, 0xb
mov dword [0x101e444], edi
mov bl, byte [0x101e455]
cmp bl, 9
je 0x1001b6f
cmp bl, 0x2d
je 0x1001b69
cmp bl, 0xae
je 0x1001b4e
mov edi, dword [0x101e4a0]
lea edx, [edx + edi*2 + 0x62]
mov dword [0x101e4a8], edx
jmp 0x1001b79
mov edi, dword [0x101e44c]
mov eax, dword [0x101e4a0]
add eax, edi
lea edx, [edx + eax + 0x56]
mov dword [0x101e4a8], edx
mov eax, edi
jmp 0x1001b79
lea edi, [edx + eax + 0x5d]
jmp 0x1001b73
lea edi, [edx + eax + 0x60]
mov dword [0x101e4a0], edi
movzx edi, byte [0x101e452]
movzx ebx, byte [0x101e464]
add edi, ebx
cmp edi, 0xec
jne 0x1001bad
movzx edi, byte [0x101e4a4]
imul edi, edi, 0x6e98
sub edi, eax
lea ecx, [eax + eax + 0x60]
mov eax, edi
mov dword [0x101e44c], eax
jmp 0x1001bc8
mov al, byte [0x101e4a4]
sub al, byte [0x101e44c]
add al, 0x68
mov byte [0x101e45e], al
mov eax, dword [0x101e44c]
lea ecx, [ecx + eax*2 + 0x56]
movsd xmm1, qword [0x101b870]
comisd xmm1, xmm0
jbe 0x1001c88
movzx edi, byte [0x101e45d]
cmp edi, 0x21db
jne 0x1001bfe
movzx edi, byte [0x101e459]
add edi, ecx
mov ecx, dword [0x101e4a0]
add ecx, 0xffffffff
imul ecx, edi
mov edi, edx
imul edi, edi, 0x6e98
sub edi, ecx
cmp esi, edx
mov dword [0x101e448], edi
jb 0x1001c27
sub byte [0x101e45f], al
lea ecx, [edx + 0x1a38]
imul ecx, ecx, 0xb
mov dword [0x101e4a0], ecx
cmp esi, eax
ja 0x1001c3b
mov byte [0x101e452], dl
lea edx, [edx + eax + 2]
mov dword [0x101e448], edx
push 0x3a3
call dword [sym.imp.KERNEL32.dll_Sleep]
movzx esi, byte [0x101e461]
mov edx, dword [0x101e4a8]
cmp esi, edx
mov eax, dword [0x101e448]
ja 0x1001c6b
lea ecx, [edx + eax + 2]
mov byte [0x101e452], al
mov dword [0x101e4a0], ecx
lea ecx, [edx + eax*2 + 0x56]
mov eax, dword [0x101e44c]
cmp esi, eax
ja 0x1001c88
lea edi, [edx + eax + 2]
mov byte [0x101e452], dl
mov dword [0x101e4a0], edi
imul ecx, ecx, 0xd
sub ecx, edx
cmp esi, edx
mov dword [0x101e448], ecx
jb 0x1001cac
sub byte [0x101e45f], al
add edx, 0x1a38
imul edx, edx, 0xb
mov dword [0x101e4a0], edx
call fcn.010139c0
mov eax, dword [esp + 0x20]
mov ecx, dword [0x101e444]
movsd xmm0, qword [esp + 0x28]
subsd xmm0, qword [0x101b878]
mov bl, byte [0x101e4a4]
sub ecx, eax
add ecx, 7
cmp eax, 8
movsd qword [esp + 0x28], xmm0
mov dword [0x101e448], ecx
jae 0x1001d00
sub eax, 1
mov dword [esp + 0x20], eax
mov esi, dword [0x101e4a0]
lea edx, [ecx + 0x65]
mov dword [0x101e4a8], edx
jmp 0x1001858
cmp byte [0x101e461], bl
jb 0x1001cec
mov dl, byte [esp + 0x14]
sub byte [0x101e45f], dl
movzx esi, bl
add esi, 0x1a38
lea edx, [ecx + 0x65]
imul esi, esi, 0xb
mov dword [0x101e4a8], edx
jmp 0x1001858
lea eax, [edx + edi]
lea esi, [esi + eax + 0x56]
mov eax, dword [esp + 0x24]
sub eax, ecx
add eax, 0x12068
mov dword [0x101e44c], eax
movzx eax, byte [0x101e461]
cmp eax, ecx
ja 0x1001d61
movzx edx, bl
lea edx, [edx + ecx + 2]
mov byte [0x101e452], bl
mov dword [0x101e4a8], edx
lea eax, [ecx + ecx*2]
movzx ecx, byte [0x101e45d]
add eax, eax
add eax, eax
sub eax, edx
add esi, eax
cmp ecx, 0x21db
mov dword [0x101e4a0], esi
jne 0x1001d9b
movzx eax, byte [0x101e459]
movzx ecx, bl
add eax, edx
sub ecx, 1
imul eax, ecx
mov edx, eax
mov dword [0x101e4a8], edx
mov ecx, dword [0x1078700]
mov eax, esi
sub eax, edx
add eax, 7
push esi
push ecx
mov dword [0x101e448], eax
call fcn.01017e30
mov edx, dword [0x101e44c]
mov ebx, eax
mov eax, dword [0x101e4a0]
mov ecx, edx
sub ecx, eax
add esp, 8
add ecx, 7
cmp eax, 0x59714c13
mov eax, dword [0x101e444]
mov dword [0x101e4a8], ebx
jne 0x1001e04
movzx esi, byte [0x101e461]
cmp esi, eax
lea ecx, [ebx + eax + 0x60]
ja 0x1001df6
mov byte [0x101e452], bl
lea ecx, [ebx + eax + 2]
adc esp, ebp
cwde
aam 0x8d
pop esp
or byte [ebp - 0x77], bl
sbb eax, 0x101e4a8
imul byte [0x101e4a4]
sub al, cl
sub edx, ebx
add edx, 0x12068
mov dword [0x101e448], edx
movzx edx, byte [0x101e453]
mov byte [0x101e4a4], al
mov ecx, 1
jmp 0x1001e30
cmp ebx, edx
je 0x1001e3c
add ecx, 1
cmp ecx, 7
jl 0x1001e30
pop edi
movzx eax, al
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret