Function at 0x1001ab44
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov eax, 0x10077f5b
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 0x4b3230
call fcn.10001e08
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001ab96
push ebx
call fcn.1004f7cf
add esp, 4
mov dword [ebp - 0x18], esp
push 0x40
push 0x1000
push 0x400
push 0
xor eax, eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x1001abd3
push 0xd3
push 0x404189f
push 6
call fcn.1004f7db
add esp, 0xc
mov dword [ebp - 4], eax
mov dword [ebp - 0x18], esp
push 0x800
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_RtlZeroMemory]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x1001ac07
push 0x10b
push 0x404189f
push 6
call fcn.1004f7db
add esp, 0xc
push 0x80000301
push 0
push 0x217
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push 0xe2
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x10077ca1
push dword [ebp - 0x20]
push 0x10077d75
push dword [ebp - 0x1c]
push 0x10077f66
push dword [ebp - 0x18]
push 0x10077f6f
mov ecx, 7
call fcn.100020c7
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001aca5
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001acb5
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1001acc5
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001acd9
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x43b0cc
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001ad2b
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x32
push 0x80000301
push 0
push 0x217
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push 0xe2
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x10077ca1
push dword [ebp - 0x20]
push 0x10077d75
push dword [ebp - 0x1c]
push 0x10077f66
push dword [ebp - 0x18]
push 0x10077f80
mov ecx, 7
call fcn.100020c7
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001adcd
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001addd
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1001aded
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001ae01
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x43b1a2
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001ae53
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x32
push 0x80000301
push 0
push 0x217
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push 0xe2
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x10077ca1
push dword [ebp - 0x20]
push 0x10077d75
push dword [ebp - 0x1c]
push 0x10077f66
push dword [ebp - 0x18]
push 0x10077f91
mov ecx, 7
call fcn.100020c7
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001aef5
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001af05
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1001af15
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001af29
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x43b11f
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001af7b
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x32
push 0x80000301
push 0
push 0x254
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push 0xfe
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x10077ca1
push dword [ebp - 0x20]
push 0x10077d75
push dword [ebp - 0x1c]
push 0x10077f66
push dword [ebp - 0x18]
push 0x10077fa2
mov ecx, 7
call fcn.100020c7
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001b01d
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001b02d
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1001b03d
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001b051
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4b85ee
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001b0a3
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x32
push 0x80000301
push 0
push 0x254
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push 0xfe
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x10077ca1
push dword [ebp - 0x20]
push 0x10077d75
push dword [ebp - 0x1c]
push 0x10077f66
push dword [ebp - 0x18]
push 0x10077fb3
mov ecx, 7
call fcn.100020c7
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001b145
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001b155
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1001b165
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001b179
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4b8677
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001b1cb
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x32
push 0x80000301
push 0
push 0x254
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push 0xfe
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x10077ca1
push dword [ebp - 0x20]
push 0x10077d75
push dword [ebp - 0x1c]
push 0x10077f66
push dword [ebp - 0x18]
push 0x10077fc4
mov ecx, 7
call fcn.100020c7
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001b26d
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001b27d
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1001b28d
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001b2a1
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4b8638
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001b2f3
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x32
push 0x80000301
push 0
push 0xbe
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x10077ca1
push dword [ebp - 0x1c]
push 0x10077d75
push dword [ebp - 0x18]
push 0x10077fd5
mov ecx, 5
call fcn.100020c7
add esp, 0x14
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001b36c
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001b37c
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001b390
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4b97b4
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001b3e2
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x32
push 0x80000301
push 0
push 0xbe
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x10077ca1
push dword [ebp - 0x1c]
push 0x10077d75
push dword [ebp - 0x18]
push 0x10077fe9
mov ecx, 5
call fcn.100020c7
add esp, 0x14
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001b45b
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001b46b
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001b47f
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4b9803
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001b4d1
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x32
push 0x80000301
push 0
push 0x21c
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push 0x95
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x10077ca1
push dword [ebp - 0x20]
push 0x10077d75
push dword [ebp - 0x1c]
push 0x10077ffd
push dword [ebp - 0x18]
push 0x10078011
mov ecx, 7
call fcn.100020c7
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001b573
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001b583
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1001b593
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001b5a7
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4de71e
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001b5f9
push ebx
call fcn.1004f7cf
add esp, 4
mov dword [ebp - 0xc], 0xd2
mov dword [ebp - 0x10], 0x237
add dword [ebp - 4], 0x64
push 0x80000301
push 0
push 0xc3
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push 0x22c
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push 0x225
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x80000301
push 0
push 0xbb
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0x10077ca1
push dword [ebp - 0x28]
push 0x10077d75
push dword [ebp - 0x24]
push 0x10077f66
push dword [ebp - 0x20]
push 0x10078022
push dword [ebp - 0x1c]
push 0x1007802c
push dword [ebp - 0x18]
push 0x10078037
mov ecx, 0xb
call fcn.100020c7
add esp, 0x2c
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001b6fb
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001b70b
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1001b71b
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1001b72b
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001b73b
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001b74f
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
push 1
mov eax, 0x10077218
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4b87ad
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001b7a2
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x64
push 0x80000301
push 0
push 0x224
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000301
push 0
push 0xbb
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x10077ca1
push dword [ebp - 0x20]
push 0x10077d75
push dword [ebp - 0x1c]
push 0x10077f66
push dword [ebp - 0x18]
push 0x10078051
mov ecx, 7
call fcn.100020c7
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001b844
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x1001b854
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1001b864
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001b878
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
push 1
mov eax, 0x10077218
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4b882b
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001b8cb
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x64
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0xc8
push 0
call fcn.10002dc9
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0x10077ca1
push dword [ebp - 0x24]
push 0x10078062
push dword [ebp - 0x20]
push 0x1007806f
mov ecx, 5
call fcn.100020c7
add esp, 0x14
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1001b95b
push ebx
call fcn.1004f7cf
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1001b96b
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001b97f
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
push 1
mov eax, 0x1007731e
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4b8a7d
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001b9d2
push ebx
call fcn.1004f7cf
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x232
push 0
call fcn.10002dc9
push eax
push 1
push 0x4b8a85
call fcn.10002088
add dword [ebp - 4], 0x64
mov eax, 0x10078081
test eax, eax
je 0x1001ba1d
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.1004f7d5
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001ba2e
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x10078091
push dword [ebp - 0x18]
push 0x10077d75
mov ecx, 3
call fcn.100020c7
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001ba8a
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001ba9e
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 0x4b8874
call fcn.10001e08
add dword [ebp - 4], 0x32
mov eax, 0x1007809e
test eax, eax
je 0x1001bad0
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.1004f7d5
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bae1
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x100780ae
push dword [ebp - 8]
mov ecx, 2
call fcn.100020c7
add esp, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bb11
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x100780ae
push dword [ebp - 8]
mov ecx, 2
call fcn.100020c7
add esp, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bb41
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x100780b8
push dword [ebp - 8]
mov ecx, 2
call fcn.100020c7
add esp, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bb71
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x100780ae
push dword [ebp - 8]
mov ecx, 2
call fcn.100020c7
add esp, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bba1
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x100780ae
push dword [ebp - 8]
mov ecx, 2
call fcn.100020c7
add esp, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bbd1
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x100780c5
push dword [ebp - 8]
mov ecx, 2
call fcn.100020c7
add esp, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bc01
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x100780d2
push dword [ebp - 8]
mov ecx, 2
call fcn.100020c7
add esp, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bc31
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x100780dc
push dword [ebp - 8]
mov ecx, 2
call fcn.100020c7
add esp, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bc61
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x100780e9
push dword [ebp - 8]
mov ecx, 2
call fcn.100020c7
add esp, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bc91
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push 0x214
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
push 0x10077f66
push dword [ebp - 8]
mov ecx, 3
call fcn.100020c7
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001bce1
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bcf5
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push 0x104
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
push 0x10077f66
push dword [ebp - 8]
mov ecx, 3
call fcn.100020c7
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001bd45
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bd59
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x10077ca1
push dword [ebp - 0x18]
push 0x10077d75
push dword [ebp - 8]
mov ecx, 4
call fcn.100020c7
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001bdac
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bdc0
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
push 1
mov eax, 0x100780f3
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4c6589
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001be13
push ebx
call fcn.1004f7cf
add esp, 4
add dword [ebp - 4], 0x96
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x100780ff]
fstp qword [ebp - 0x24]
push 1
push 5
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4c65b0
call fcn.10002dc9
mov dword [ebp - 0x14], eax
mov eax, 0x10078107
test eax, eax
je 0x1001be65
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.1004f7d5
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001be76
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push 0xffffff1f
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
push 0x10078117
push dword [ebp - 8]
mov ecx, 3
call fcn.100020c7
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001bec6
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001beda
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push 0x3c
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
push 0x10078121
push dword [ebp - 8]
mov ecx, 3
call fcn.100020c7
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001bf2a
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bf3e
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push dword [ebp - 0x14]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
push 0x1007812b
push dword [ebp - 8]
mov ecx, 3
call fcn.100020c7
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001bf8c
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001bfa0
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push 0xfffffdf4
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
push 0x10078135
push dword [ebp - 8]
mov ecx, 3
call fcn.100020c7
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001bff0
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001c004
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push 0x41
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
push 0x1007813f
push dword [ebp - 8]
mov ecx, 3
call fcn.100020c7
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001c054
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001c068
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x198
call fcn.100508d0
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x10077ca1
push dword [ebp - 0x18]
push 0x10077d75
push dword [ebp - 8]
mov ecx, 4
call fcn.100020c7
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1001c0bb
push ebx
call fcn.1004f7cf
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1001c0cf
push ebx
call fcn.1004f7cf
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.10001e08
fild dword [ebp - 4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fadd qword [0x10077291]
fstp qword [ebp - 0x24]
push 1
mov eax, 0x1007731e
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x24]
call fcn.100011c6
push eax
push 0x4c64f6
call fcn.10003409
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1001c122
push ebx
call fcn.1004f7cf
add esp, 4
push 0x226
push 1
push 0x4c6679
call fcn.10002088
push 0x214
push 1
push 0x4c6674
call fcn.10002088
push 0xfffffdf3
push 2
push 0x4c65c0
call fcn.10002088
push 0xfffffdf4
push 2
push 0x4c65cf
call fcn.10002088
push 0x3c
push 2
push 0x4c65c6
call fcn.100043fa
push 0x41
push 2
push 0x4c65d5
call fcn.100043fa
push 0x254
push 1
push 0x43b228
call fcn.10002088
push 0x254
push 1
push 0x43b09d
call fcn.10002088
push 0x252
push 1
push 0x43b230
call fcn.10002088
push 0x252
push 1
push 0x43b0a5
call fcn.10002088
push 0x217
push 1
push 0x43b257
call fcn.10002088
push 0x207
push 1
push 0x43b25c
call fcn.10002088
push 0x217
push 1
push 0x43b2ad
call fcn.10002088
push 0x207
push 1
push 0x43b2b2
call fcn.10002088
push 0x217
push 1
push 0x43b337
call fcn.10002088
push 0x207
push 1
push 0x43b33c
call fcn.10002088
push 0x24c
push 1
push 0x4b9795
call fcn.10002088
push 0x24c
push 1
push 0x4b97de
call fcn.10002088
push 0x17
push 2
push 0x4b974f
call fcn.100043fa
push 0x24e
push 1
push 0x4b974a
call fcn.10002088
push 0x19a
push 1
push 0x4b9716
call fcn.10002088
push 0x24e
push 1
push 0x4b973a
call fcn.10002088
push 0x24e
push 0
push 0x4ca356
call fcn.10002088
push 0x244
push 0
push 0x4ca35b
call fcn.10002088
push 0xfffffdda
push 0
push 0x4c6e35
call fcn.10002088
push 0xfffffdb6
push 0
push 0x4c6e40
call fcn.10002088
push 0x2b
push 0
push 0x4c6e3b
call fcn.100043fa
push 0xe
push 0
push 0x4c6e46
call fcn.100043fa
push 0x24c
push 1
push 0x4bb9ff
call fcn.10002088
push 0x2ba
push 1
push 0x4bba04
call fcn.10002088
push 0x24c
push 1
push 0x4bba8a
call fcn.10002088
push 0x2ba
push 1
push 0x4bba8f
call fcn.10002088
push 0x250
push 1
push 0x4bb970
call fcn.10002088
push 0x250
push 1
push 0x4bb9ca
call fcn.10002088
push 0x247
push 1
push 0x4bb965
call fcn.10002088
push 0x250
push 0
push 0x4bb911
call fcn.10002088
push 0x284
push 0
push 0x4bb96b
call fcn.10002088
push 0x284
push 0
push 0x4bb9d0
call fcn.10002088
push 0x284
push 0
push 0x4bb976
call fcn.10002088
push 0x284
push 0
push 0x4bb916
call fcn.10002088
push 0x8d
push 0
push 0x4bb955
call fcn.10002088
push 0x25d
push 1
push 0x4bbb79
call fcn.10002088
push 0x247
push 1
push 0x4bbb74
call fcn.10002088
push 0xfffffd94
push 2
push 0x4c6a93
call fcn.10002088
push 0xfffffdb2
push 2
push 0x4c6aa5
call fcn.10002088
push 0xfffffdb2
push 2
push 0x4c66a2
call fcn.10002088
push 0x17c
push 0
push 0x4c6698
call fcn.10002088
push 0x10
push 0
push 0x4c66aa
call fcn.100043fa
push 0x99
push 2
push 0x4c6a99
call fcn.10002088
push 8
push 2
push 0x4c6aab
call fcn.100043fa
push 0x258
push 0
push 0x4c6c05
call fcn.10002088
push 0x250
push 0
push 0x4c6c00
call fcn.10002088
push 0x258
push 0
push 0x4c6d67
call fcn.10002088
push 0x250
push 0
push 0x4c6d62
call fcn.10002088
push 0x258
push 0
push 0x4c6de4
call fcn.10002088
push 0x250
push 0
push 0x4c6ddf
call fcn.10002088
push 0x122
push 0
push 0x4cdfac
call fcn.10002088
push 0x214
push 0
push 0x4cdfa7
call fcn.10002088
push 0x2ab
push 0
push 0xe7cc0e
call fcn.10002088
push 0x228
push 0
push 0xe7cc03
call fcn.10002088
push 0x220
push 0
push 0x4c8bf5
call fcn.10002088
push 0x220
push 0
push 0x4bf55a
call fcn.10002088
push 3
push 0
push 0x4c8c16
call fcn.100043fa
push 3
push 0
push 0x4bf562
call fcn.100043fa
leave
ret