Function at 0x10013f60
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Query or enumerate registry value
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x100db040]
xor eax, esp
mov dword [esp + 0x28], eax
push ebx
push esi
push edi
call fcn.100630c0
push 0x10016910
push 0x43e1f8
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x10016990
push 0x4e1385
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x643c5e
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x643d1e
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x653c6f
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x643fe4
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x6440a4
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x6367d7
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x636960
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x63765a
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x6466ee
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x96fc3f
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x9948dc
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10099ca0
push 0x994971
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x4a6e0b
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x59dfc7
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x59f9d3
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x5a005c
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x5a50b9
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x5a54a1
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x5aa18c
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x658e2f
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x736bbc
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x792b22
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x7c3a67
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x7c44db
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x97700d
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x987d19
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x10016890
push 0x998a4a
push 0xff
call fcn.10099d10
add esp, 0xc
push 0x100169c0
push 0x99bd08
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x100169f0
push 0x7f70a9
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x10016a30
push 0x7bfe47
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x5c3f50
push 0x5c3f3b
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x7fba55
push 0x7fba4d
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x7fbbcf
push 0x7fba68
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x7fbbcf
push 0x7fbaa0
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x7c00d5
push 0x7c00a8
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x7f727e
push 0x7f7252
push 0xe9
call fcn.10099d10
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x1c]
add esp, 0xc
push eax
push 0x40
push 1
push 0x7f75e6
call ebx
lea eax, [esp + 0x10]
mov byte [0x7f75e6], 0xdd
push eax
push dword [esp + 0x14]
push 1
push 0x7f75e6
call ebx
push 0x10016a90
push 0x4e1d7c
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10016b00
push 0x63ce69
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10016b00
push 0x63d27a
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10016f20
push 0x63d102
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10016f20
push 0x63d58c
push 0xe8
call fcn.10099d10
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
add esp, 0xc
push str.._Settings.ini
push 0
push str.DisableStaticEffect
push str.AntiLag
call edi
push str.._Settings.ini
push 0
mov dword [0x104f9e88], eax
push str.DisableDynamicEffect
push str.AntiLag
call edi
push str.._Settings.ini
push 0
push str.DisableSkillEffect
push str.AntiLag
mov dword [0x104f9e84], eax
call edi
push str.._Settings.ini
push 0
push str.DisableGlowEffect
push str.AntiLag
mov dword [0x104f9e80], eax
call edi
push str.._Settings.ini
push 0
push str.DisableWings
push str.AntiLag
mov dword [0x104f9e7c], eax
call edi
push str.._Settings.ini
push 0
push str.ReduceMemory
push str.AntiLag
mov dword [0x104f9e78], eax
call edi
push str.._Settings.ini
push 1
push str.Anisotropy
push str.Graphics
mov dword [0x104f9e74], eax
call edi
push str.._Settings.ini
push 1
push str.MaxAnisotropy
push str.Graphics
mov dword [0x104f9e70], eax
call edi
push str.._Settings.ini
push 1
push str.Linear
push str.Graphics
mov dword [0x104f9e6c], eax
call edi
push str.._Settings.ini
push 0
push str.TronEffects
push str.Graphics
mov dword [0x104f9e68], eax
call edi
push str.._Settings.ini
push 1
push 0x100cec50
push str.Graphics
call edi
push str.._Settings.ini
push 0
push str.DisablePing
push str.Other
mov dword [0x104f9e60], eax
call edi
push str.._Settings.ini
push 0
push str.CloseMessageBox
push str.Other
mov dword [0x104f9e5c], eax
call edi
push str.._Settings.ini
push 0
push str.DisableAutoCtrl
push str.Other
call edi
push str.._Settings.ini
push 1
push str.HealthBarPlayer
push str.Options
mov dword [0x104f9dd4], eax
call edi
push str.._Settings.ini
mov dword [0x104f9dd8], eax
push 1
push str.HealthBarMonster
push str.Options
call edi
push str.._Settings.ini
push 0
push str.WideScreenMode
push str.Other
call edi
push str.._Settings.ini
push 0
push str.ServerTime
push str.Other
mov dword [0x104f9dd0], eax
call edi
push str.._Settings.ini
push 0x4e4
push str.Charset
push str.Other
mov dword [0x104f9e64], eax
call edi
push 0x64
push 0
push 0x104f9df8
mov dword [0x104f9ddc], eax
call fcn.100a23c0
add esp, 0xc
push str.._Settings.ini
push 0
push str.FontEnable
push str.Font
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
push str.._Settings.ini
push 0x14
push 0x104f9df8
push str.Gulim
push str.FontName1
push str.Font
setne byte [0x104f9df4]
call esi
push str.._Settings.ini
push 0x14
push 0x104f9e0c
push 0x100ceb7c
push str.FontName2
push str.Font
call esi
push str.._Settings.ini
push 0x14
push 0x104f9e20
push 0x100ceb7c
push str.FontName3
push str.Font
call esi
push str.._Settings.ini
push 0x14
push 0x104f9e34
push 0x100ceb7c
push str.FontName4
push str.Font
call esi
push str.._Settings.ini
push 0xd
push str.FontSize1
push str.Font
call edi
push str.._Settings.ini
push 0xd
push str.FontSize2
push str.Font
mov dword [0x104f9de0], eax
call edi
push str.._Settings.ini
push 0xd
push str.FontSize3
push str.Font
mov dword [0x104f9de4], eax
call edi
inc eax
mov dword [0x104f9de8], eax
push str.._Settings.ini
push 0xd
push str.FontSize4
push str.Font
call edi
push str.._Settings.ini
push 0xd
push str.FontSize5
push str.Font
mov dword [0x104f9dec], eax
call edi
cmp byte [0x104f9df4], 0
mov dword [0x104f9df0], eax
mov eax, dword [0x104f9de0]
mov dword [0x8531688], eax
je 0x10014694
push 0x10017410
push 0x629687
push 0xe9
call fcn.10099d10
add esp, 0xc
mov esi, dword [0x104f9ddc]
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x9d0057
call ebx
lea eax, [esp + 0x10]
mov dword [0x9d0057], esi
push eax
push dword [esp + 0x14]
push 4
push 0x9d0057
call ebx
push 0x5dadd0
push 0x5d9397
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x59213d
push 0x592110
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x10013600
push 0x592566
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013660
push 0x627f5f
push 0xe9
call fcn.10099d10
add esp, 0xc
cmp dword [0x102c4f64], 0
jbe 0x100147fc
push 0x100176e0
push 0x5ad316
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x100176e0
push 0x79354b
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x100176e0
push 0x988eb9
push 0xe8
call fcn.10099d10
mov eax, dword [0x102c4f64]
add esp, 0xc
cmp eax, 2
je 0x1001477f
cmp eax, 4
jne 0x1001478e
push 0x1c0f
call fcn.10042680
mov eax, dword [0x102c4f64]
cmp eax, 3
je 0x10014798
cmp eax, 4
jne 0x100147fc
push 0x180f
call fcn.10042680
push 0x1c0d
call fcn.10042680
push 0x1c0e
call fcn.10042680
push 0x1c10
call fcn.10042680
push 0x1c16
call fcn.10042680
push 0x1c1f
call fcn.10042680
push 0x1c29
call fcn.10042680
push 0x1c2a
call fcn.10042680
push 0x1c2b
call fcn.10042680
push 0x1c2c
call fcn.10042680
push 0x10017700
push 0x9881f4
push 0xe8
call fcn.10099d10
add esp, 0xc
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x4c01e8
call ebx
lea eax, [esp + 0x10]
mov byte [0x4c01e8], 0x64
push eax
push dword [esp + 0x14]
push 1
push 0x4c01e8
call ebx
cmp dword [0x102c4ebc], 0
jne 0x1001485c
push 0x96fc5b
push 0x96fc51
push 0xe9
call fcn.10099d10
add esp, 0xc
cmp dword [0x102c4f98], 1
jne 0x10014893
push 0x7f3686
push 0x7f366a
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x99bede
push 0x99bec2
push 0xe9
call fcn.10099d10
add esp, 0xc
cmp dword [0x102c4fc4], 1
jne 0x100148ca
push 0x10017740
push 0x7f3580
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x10017770
push 0x99be49
push 0xe9
call fcn.10099d10
add esp, 0xc
lea eax, [esp + 0x10]
push eax
push 0x40
push 0x205
push 0x9baba0
call ebx
push 0x205
push 0x90
push 0x9baba0
call fcn.100a23c0
add esp, 0xc
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x14]
push 0x205
push 0x9baba0
call ebx
cmp dword [0x102c5080], 1
jne 0x10015ed8
cmp dword [0x104f9dd0], 1
jne 0x10015ed8
push str.Resolution
lea ecx, [esp + 0x20]
call fcn.10017800
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0
push eax
push 0xf003f
push 0
push str.SoftwareWebzenMuConfig
push reloc.DSOUND.dll_DirectSoundCreate
mov dword [esp + 0x2c], 4
mov dword [esp + 0x28], 4
mov dword [esp + 0x20], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x10014976
or esi, 0xffffffff
jmp 0x100149bd
cmp dword [esp + 0x30], 0xf
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x20]
push ecx
lea eax, [esp + 0x28]
cmova eax, dword [esp + 0x28]
push 0
push eax
push dword [esp + 0x24]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [esp + 0x10]
test eax, eax
je 0x100149b3
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
or esi, 0xffffffff
jmp 0x100149bd
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x30]
cmp ecx, 0xf
jbe 0x100149f3
mov edx, dword [esp + 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100149e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10015eea
push ecx
push edx
call fcn.100a01e3
add esp, 8
cmp esi, 4
jl 0x10015ed8
push 0x10013680
push 0x62fb6f
push 0xe9
call fcn.10099d10
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4aa060
call ebx
lea eax, [esp + 0xc]
mov dword [0x4aa060], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4aa060
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4de6b4
call ebx
lea eax, [esp + 0xc]
mov dword [0x4de6b4], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4de6b4
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4df2b2
call ebx
lea eax, [esp + 0xc]
mov dword [0x4df2b2], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4df2b2
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5ae2d3
call ebx
lea eax, [esp + 0xc]
mov dword [0x5ae2d3], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x5ae2d3
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x797265
call ebx
lea eax, [esp + 0xc]
mov dword [0x797265], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x797265
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7972cc
call ebx
lea eax, [esp + 0xc]
mov dword [0x7972cc], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x7972cc
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x797328
call ebx
lea eax, [esp + 0xc]
mov dword [0x797328], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x797328
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x79734e
call ebx
lea eax, [esp + 0xc]
mov dword [0x79734e], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x79734e
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7edea2
call ebx
lea eax, [esp + 0xc]
mov dword [0x7edea2], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x7edea2
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x8e6adf
call ebx
lea eax, [esp + 0xc]
mov dword [0x8e6adf], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x8e6adf
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x93bf99
call ebx
lea eax, [esp + 0xc]
mov dword [0x93bf99], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x93bf99
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x40f7b8
call ebx
lea eax, [esp + 0xc]
mov dword [0x40f7b8], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x40f7b8
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4ae9d1
call ebx
lea eax, [esp + 0xc]
mov dword [0x4ae9d1], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4ae9d1
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4aea0f
call ebx
lea eax, [esp + 0xc]
mov dword [0x4aea0f], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4aea0f
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4b1f41
call ebx
lea eax, [esp + 0xc]
mov dword [0x4b1f41], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4b1f41
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4b1f4b
call ebx
lea eax, [esp + 0xc]
mov dword [0x4b1f4b], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4b1f4b
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4b2083
call ebx
lea eax, [esp + 0xc]
mov dword [0x4b2083], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4b2083
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4b208d
call ebx
lea eax, [esp + 0xc]
mov dword [0x4b208d], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4b208d
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4b3ace
call ebx
lea eax, [esp + 0xc]
mov dword [0x4b3ace], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4b3ace
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4b3ada
call ebx
lea eax, [esp + 0xc]
mov dword [0x4b3ada], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4b3ada
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4d70e4
call ebx
lea eax, [esp + 0xc]
mov dword [0x4d70e4], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4d70e4
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4d70f0
call ebx
lea eax, [esp + 0xc]
mov dword [0x4d70f0], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4d70f0
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4de6b4
call ebx
lea eax, [esp + 0xc]
mov dword [0x4de6b4], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4de6b4
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4deb0f
call ebx
lea eax, [esp + 0xc]
mov dword [0x4deb0f], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4deb0f
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4deb29
call ebx
mov dword [0x4deb29], 0x356
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push 4
push 0x4deb29
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4deba1
call ebx
lea eax, [esp + 0xc]
mov dword [0x4deba1], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4deba1
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4dec25
call ebx
lea eax, [esp + 0xc]
mov dword [0x4dec25], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x4dec25
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x59e375
call ebx
lea eax, [esp + 0xc]
mov dword [0x59e375], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x59e375
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5a32c6
call ebx
lea eax, [esp + 0xc]
mov dword [0x5a32c6], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x5a32c6
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5a32fe
call ebx
lea eax, [esp + 0xc]
mov dword [0x5a32fe], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x5a32fe
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5c428d
call ebx
lea eax, [esp + 0xc]
mov dword [0x5c428d], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x5c428d
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x62f2d4
call ebx
lea eax, [esp + 0xc]
mov dword [0x62f2d4], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x62f2d4
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x62fbcd
call ebx
lea eax, [esp + 0xc]
mov dword [0x62fbcd], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x62fbcd
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x62fbf9
call ebx
lea eax, [esp + 0xc]
mov dword [0x62fbf9], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x62fbf9
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x78e1ac
call ebx
lea eax, [esp + 0xc]
mov dword [0x78e1ac], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x78e1ac
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x78e1b6
call ebx
lea eax, [esp + 0xc]
mov dword [0x78e1b6], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x78e1b6
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x797265
call ebx
lea eax, [esp + 0xc]
mov dword [0x797265], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x797265
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7972cc
call ebx
lea eax, [esp + 0xc]
mov dword [0x7972cc], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x7972cc
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x797328
call ebx
lea eax, [esp + 0xc]
mov dword [0x797328], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x797328
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x79734e
call ebx
lea eax, [esp + 0xc]
mov dword [0x79734e], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x79734e
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7de804
call ebx
lea eax, [esp + 0xc]
mov dword [0x7de804], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x7de804
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f1b06
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f1b06], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x7f1b06
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x8e5850
call ebx
lea eax, [esp + 0xc]
mov dword [0x8e5850], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x8e5850
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x8e6adf
call ebx
lea eax, [esp + 0xc]
mov dword [0x8e6adf], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x8e6adf
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x93bf99
call ebx
lea eax, [esp + 0xc]
mov dword [0x93bf99], 0x356
push eax
push dword [esp + 0x10]
push 4
push 0x93bf99
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5c4284
call ebx
lea eax, [esp + 0xc]
mov dword [0x5c4284], 0x298
push eax
push dword [esp + 0x10]
push 4
push 0x5c4284
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5c3f68
call ebx
lea eax, [esp + 0xc]
mov dword [0x5c3f68], 0x1da
push eax
push dword [esp + 0x10]
push 4
push 0x5c3f68
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5c3fb3
call ebx
lea eax, [esp + 0xc]
mov dword [0x5c3fb3], 0x1da
push eax
push dword [esp + 0x10]
push 4
push 0x5c3fb3
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5c3fe9
call ebx
lea eax, [esp + 0xc]
mov dword [0x5c3fe9], 0x1da
push eax
push dword [esp + 0x10]
push 4
push 0x5c3fe9
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5c400a
call ebx
lea eax, [esp + 0xc]
mov dword [0x5c400a], 0x1da
push eax
push dword [esp + 0x10]
push 4
push 0x5c400a
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5c42a9
call ebx
lea eax, [esp + 0xc]
mov dword [0x5c42a9], 0x1da
push eax
push dword [esp + 0x10]
push 4
push 0x5c42a9
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x5c42c7
call ebx
lea eax, [esp + 0xc]
mov dword [0x5c42c7], 0x11c
push eax
push dword [esp + 0x10]
push 4
push 0x5c42c7
call ebx
lea eax, [esp + 0xc]
mov dword [0x104f9dc8], 0x6b
push eax
push 0x40
push 1
push 0x8e584c
mov dword [0x100dbb48], 0x356
mov dword [0x104f9dcc], 0xd6
call ebx
lea eax, [esp + 0xc]
mov byte [0x8e584c], 0x6b
push eax
push dword [esp + 0x10]
push 1
push 0x8e584c
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 1
push 0x8e6ada
call ebx
lea eax, [esp + 0xc]
mov byte [0x8e6ada], 0xae
push eax
push dword [esp + 0x10]
push 1
push 0x8e6ada
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 1
push 0x849007
call ebx
lea eax, [esp + 0xc]
mov byte [0x849007], 0x8c
push eax
push dword [esp + 0x10]
push 1
push 0x849007
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 1
push 0x7fa55b
call ebx
lea eax, [esp + 0xc]
mov byte [0x7fa55b], 0x6b
push eax
push dword [esp + 0x10]
push 1
push 0x7fa55b
call ebx
push 0x100136b0
push 0x8e5c30
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013730
push 0x8e4c3c
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x100137b0
push 0x7e75f3
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013800
push 0x441f60
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013800
push 0x4a715d
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013800
push 0x4e079a
push 0xe8
call fcn.10099d10
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push 0x40
push 8
push 0xffddf8
call ebx
movsd xmm0, qword [0x100d1b80]
lea eax, [esp + 0xc]
push eax
movsd qword [0xffddf8], xmm0
push dword [esp + 0x10]
push 8
push 0xffddf8
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 8
push 0x1006be0
call ebx
movsd xmm0, qword [0x100d1ba0]
lea eax, [esp + 0xc]
push eax
movsd qword [0x1006be0], xmm0
push dword [esp + 0x10]
push 8
push 0x1006be0
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x1024ae0
call ebx
lea eax, [esp + 0xc]
mov dword [0x1024ae0], 0x44134000
push eax
push dword [esp + 0x10]
push 4
push 0x1024ae0
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x8e6f80
call ebx
lea eax, [esp + 0xc]
mov dword [0x8e6f80], 0x24d
push eax
push dword [esp + 0x10]
push 4
push 0x8e6f80
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x45b4b6
call ebx
lea eax, [esp + 0xc]
mov dword [0x45b4b6], 0x255
push eax
push dword [esp + 0x10]
push 4
push 0x45b4b6
call ebx
push 0x10013e70
push 0x7e72d1
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x8e4d24
push 0x8e4cc1
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x5ae409
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x5ae479
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x5ae52f
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x851ef3
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x851f63
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x869b18
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x869b8d
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x8773e9
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x87745e
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x8979e1
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x897a53
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x897b29
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x897bbe
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x8bc545
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x10013ea0
push 0x8bc5ba
push 0xe8
call fcn.10099d10
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push 0x40
push 1
push 0x7fa3bd
call ebx
lea eax, [esp + 0xc]
mov byte [0x7fa3bd], 0x6b
push eax
push dword [esp + 0x10]
push 1
push 0x7fa3bd
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 1
push 0x7fa2b9
call ebx
lea eax, [esp + 0xc]
mov byte [0x7fa2b9], 0x6b
push eax
push dword [esp + 0x10]
push 1
push 0x7fa2b9
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 1
push 0x7fa234
call ebx
lea eax, [esp + 0xc]
mov byte [0x7fa234], 0x6b
push eax
push dword [esp + 0x10]
push 1
push 0x7fa234
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 1
push 0x7fa026
call ebx
lea eax, [esp + 0xc]
mov byte [0x7fa026], 0x6b
push eax
push dword [esp + 0x10]
push 1
push 0x7fa026
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 1
push 0x7f9dc4
call ebx
lea eax, [esp + 0xc]
mov byte [0x7f9dc4], 0x6b
push eax
push dword [esp + 0x10]
push 1
push 0x7f9dc4
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 1
push 0x7f9e43
call ebx
lea eax, [esp + 0xc]
mov byte [0x7f9e43], 0x6b
push eax
push dword [esp + 0x10]
push 1
push 0x7f9e43
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f96dc
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f96dc], 0x298
push eax
push dword [esp + 0x10]
push 4
push 0x7f96dc
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f9752
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f9752], 0x298
push eax
push dword [esp + 0x10]
push 4
push 0x7f9752
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f97c8
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f97c8], 0x298
push eax
push dword [esp + 0x10]
push 4
push 0x7f97c8
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f983e
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f983e], 0x298
push eax
push dword [esp + 0x10]
push 4
push 0x7f983e
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f98b9
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f98b9], 0x298
push eax
push dword [esp + 0x10]
push 4
push 0x7f98b9
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f992f
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f992f], 0x298
push eax
push dword [esp + 0x10]
push 4
push 0x7f992f
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f99a8
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f99a8], 0x26c
push eax
push dword [esp + 0x10]
push 4
push 0x7f99a8
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f9a27
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f9a27], 0x138
push eax
push dword [esp + 0x10]
push 4
push 0x7f9a27
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f9aac
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f9aac], 0x288
push eax
push dword [esp + 0x10]
push 4
push 0x7f9aac
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f9b34
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f9b34], 0x26c
push eax
push dword [esp + 0x10]
push 4
push 0x7f9b34
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f9b34
call ebx
mov dword [0x7f9b34], 0x26c
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x10]
push 4
push 0x7f9b34
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f9bb9
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f9bb9], 0x26e
push eax
push dword [esp + 0x10]
push 4
push 0x7f9bb9
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f9c3e
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f9c3e], 0x298
push eax
push dword [esp + 0x10]
push 4
push 0x7f9c3e
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7f9cc3
call ebx
lea eax, [esp + 0xc]
mov dword [0x7f9cc3], 0x27b
push eax
push dword [esp + 0x10]
push 4
push 0x7f9cc3
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7fa0a8
call ebx
lea eax, [esp + 0xc]
mov dword [0x7fa0a8], 0x2bc
push eax
push dword [esp + 0x10]
push 4
push 0x7fa0a8
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7fa1ac
call ebx
lea eax, [esp + 0xc]
mov dword [0x7fa1ac], 0x138
push eax
push dword [esp + 0x10]
push 4
push 0x7fa1ac
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7fa445
call ebx
lea eax, [esp + 0xc]
mov dword [0x7fa445], 0x16f
push eax
push dword [esp + 0x10]
push 4
push 0x7fa445
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7fa4d0
call ebx
lea eax, [esp + 0xc]
mov dword [0x7fa4d0], 0x16f
push eax
push dword [esp + 0x10]
push 4
push 0x7fa4d0
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7fa5e3
call ebx
lea eax, [esp + 0xc]
mov dword [0x7fa5e3], 0x298
push eax
push dword [esp + 0x10]
push 4
push 0x7fa5e3
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7fa71c
call ebx
lea eax, [esp + 0xc]
mov dword [0x7fa71c], 0x298
push eax
push dword [esp + 0x10]
push 4
push 0x7fa71c
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7fa7b0
call ebx
lea eax, [esp + 0xc]
mov dword [0x7fa7b0], 0x266
push eax
push dword [esp + 0x10]
push 4
push 0x7fa7b0
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 1
push 0x7de7f6
call ebx
lea eax, [esp + 0xc]
mov byte [0x7de7f6], 0x6b
push eax
push dword [esp + 0x10]
push 1
push 0x7de7f6
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7de742
call ebx
lea eax, [esp + 0xc]
mov dword [0x7de742], 0x2ce
push eax
push dword [esp + 0x10]
push 4
push 0x7de742
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7de5e9
call ebx
lea eax, [esp + 0xc]
mov dword [0x7de5e9], 0x76
push eax
push dword [esp + 0x10]
push 4
push 0x7de5e9
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7de603
call ebx
lea eax, [esp + 0xc]
mov dword [0x7de603], 0x148
push eax
push dword [esp + 0x10]
push 4
push 0x7de603
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7de61d
call ebx
lea eax, [esp + 0xc]
mov dword [0x7de61d], 0x21a
push eax
push dword [esp + 0x10]
push 4
push 0x7de61d
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7df7bb
call ebx
lea eax, [esp + 0xc]
mov dword [0x7df7bb], 0x235
push eax
push dword [esp + 0x10]
push 4
push 0x7df7bb
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7df841
call ebx
lea eax, [esp + 0xc]
mov dword [0x7df841], 0x23d
push eax
push dword [esp + 0x10]
push 4
push 0x7df841
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7df8d7
call ebx
lea eax, [esp + 0xc]
mov dword [0x7df8d7], 0x17e
push eax
push dword [esp + 0x10]
push 4
push 0x7df8d7
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7df920
call ebx
lea eax, [esp + 0xc]
mov dword [0x7df920], 0x1df
push eax
push dword [esp + 0x10]
push 4
push 0x7df920
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7dfbda
call ebx
lea eax, [esp + 0xc]
mov dword [0x7dfbda], 0x23d
push eax
push dword [esp + 0x10]
push 4
push 0x7dfbda
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7dfc0c
call ebx
lea eax, [esp + 0xc]
mov dword [0x7dfc0c], 0x105
push eax
push dword [esp + 0x10]
push 4
push 0x7dfc0c
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7dfcd4
call ebx
lea eax, [esp + 0xc]
mov dword [0x7dfcd4], 0x199
push eax
push dword [esp + 0x10]
push 4
push 0x7dfcd4
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7dfd2d
call ebx
lea eax, [esp + 0xc]
mov dword [0x7dfd2d], 0x26c
push eax
push dword [esp + 0x10]
push 4
push 0x7dfd2d
call ebx
push 0x10013f10
push 0x7dfc87
push 0xe8
call fcn.10099d10
add esp, 0xc
push 0x7df3ca
push 0x7df360
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x824476
push 0x82443e
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x817003
push 0x816fcb
push 0xe9
call fcn.10099d10
add esp, 0xc
push 0x80d3f8
push 0x80d3c0
push 0xe9
call fcn.10099d10
add esp, 0xc
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x8064ad
call ebx
lea eax, [esp + 0xc]
mov dword [0x8064ad], 0x1ab
push eax
push dword [esp + 0x10]
push 4
push 0x8064ad
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x807428
call ebx
lea eax, [esp + 0xc]
mov dword [0x807428], 0x1ab
push eax
push dword [esp + 0x10]
push 4
push 0x807428
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4ed5b0
call ebx
lea eax, [esp + 0xc]
mov dword [0x4ed5b0], 0x1ab
push eax
push dword [esp + 0x10]
push 4
push 0x4ed5b0
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x458d4a
call ebx
lea eax, [esp + 0xc]
mov dword [0x458d4a], 0x2a7
push eax
push dword [esp + 0x10]
push 4
push 0x458d4a
call ebx
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x45973d
call ebx
lea eax, [esp + 0xc]
mov dword [0x45973d], 0x2a7
push eax
push dword [esp + 0x10]
push 4
push 0x45973d
call ebx
mov ecx, dword [esp + 0x34]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100a0150
mov esp, ebp
pop ebp
ret
call fcn.100a95e0
int3