Function at 0x10001ed0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [0x10016040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x10016128]
mov edx, 0x8cfd55
push ebx
push esi
push edi
add eax, 0xfffffdbe
mov ecx, 0x100015a0
push 5
mov dword [0x10016ec4], eax
call fcn.1000d080
add esp, 4
mov edx, 0x8d1f65
mov ecx, 0x100015b0
push 5
call fcn.1000d080
add esp, 4
mov edx, 0x8d217c
mov ecx, 0x100015c0
push 9
call fcn.1000d080
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 4
push eax
push 0x40
push 4
push 0x9f7b1e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9f7b1e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9f7b1e
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9f7b24
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9f7b24], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9f7b24
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x59a15f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x59a15f], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x59a15f
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
sar eax, 1
sub esp, 8
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x59a16b
call ebx
lea eax, [ebp - 0x14]
mov dword [0x59a16b], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x59a16b
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x59ac23
call ebx
lea eax, [ebp - 0x14]
mov dword [0x59ac23], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x59ac23
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x59ac0a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x59ac0a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x59ac0a
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x59a8b2
call ebx
lea eax, [ebp - 0x14]
mov dword [0x59a8b2], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x59a8b2
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x59a899
call ebx
lea eax, [ebp - 0x14]
mov dword [0x59a899], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x59a899
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9dfcf3
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9dfcf3], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9dfcf3
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9dfe6b
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9dfe6b], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9dfe6b
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8f32e0
dec esi
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8f32e0], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8f32e0
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8f32cd
dec esi
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8f32cd], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8f32cd
call ebx
lea eax, [ebp - 0x14]
mov edi, 6
push eax
push 0x40
push 4
mov esi, edi
sub esi, dword [0x10016124]
push 0x7b2ea3
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7b2ea3], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7b2ea3
call ebx
sub edi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7b308a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7b308a], edi
push eax
push dword [ebp - 0x14]
push 4
push 0x7b308a
call ebx
mov eax, dword [0x10016128]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x7b2c99
sub esi, 0x17
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7b2c99], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7b2c99
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x7b2cb8
sub esi, 3
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7b2cb8], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7b2cb8
call ebx
mov eax, dword [0x10016128]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x7b2da2
sub esi, 0x17
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7b2da2], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7b2da2
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x7b2dc1
sub esi, 3
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7b2dc1], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7b2dc1
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d1794
inc esi
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d1794], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d1794
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d179b
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d179b], 0x31e
push eax
push dword [ebp - 0x14]
push 4
push 0x8d179b
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8df784
inc esi
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8df784], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8df784
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8df7f9
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8df7f9], 0x31e
push eax
push dword [ebp - 0x14]
push 4
push 0x8df7f9
call ebx
mov eax, 0x258
sub eax, dword [0x10016128]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x8de8f0
sub esi, 0x1ab
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8de8f0], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8de8f0
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8de8e7
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8de8e7], 0xfffffce2
push eax
push dword [ebp - 0x14]
push 4
push 0x8de8e7
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x45b97f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x45b97f], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x45b97f
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x45a5cc
call ebx
lea eax, [ebp - 0x14]
mov dword [0x45a5cc], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x45a5cc
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x43717c
call ebx
lea eax, [ebp - 0x14]
mov dword [0x43717c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x43717c
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x437182
call ebx
lea eax, [ebp - 0x14]
mov dword [0x437182], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x437182
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x53808c
call ebx
lea eax, [ebp - 0x14]
mov dword [0x53808c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x53808c
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x538092
call ebx
lea eax, [ebp - 0x14]
mov dword [0x538092], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x538092
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4cc163
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4cc163], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4cc163
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4cc2c7
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4cc2c7], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4cc2c7
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4cc2b1
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4cc2b1], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4cc2b1
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4d59b3
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4d59b3], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4d59b3
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4d599e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4d599e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4d599e
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x85f36e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x85f36e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x85f36e
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x85f375
add esi, 0xffffffb0
call ebx
lea eax, [ebp - 0x14]
mov dword [0x85f375], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x85f375
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8ebc59
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8ebc59], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8ebc59
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8ebc3d
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8ebc3d], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8ebc3d
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9966b6
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9966b6], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9966b6
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9966cc
call ebx
mov dword [0x9966cc], esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 4
push 0x9966cc
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9966d3
add esi, 0xffffff9c
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9966d3], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9966d3
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9a3e80
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9a3e80], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9a3e80
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9a3e73
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9a3e73], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9a3e73
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x45b899
add esi, 0xffffff1f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x45b899], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x45b899
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5386f1
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5386f1], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5386f1
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5386f6
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5386f6], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5386f6
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x55b809
call ebx
lea eax, [ebp - 0x14]
mov dword [0x55b809], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x55b809
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x55b80e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x55b80e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x55b80e
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x55b885
call ebx
lea eax, [ebp - 0x14]
mov dword [0x55b885], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x55b885
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7e15bf
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7e15bf], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7e15bf
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7e16ba
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7e16ba], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7e16ba
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7e16bf
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7e16bf], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7e16bf
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8aa267
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8aa267], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8aa267
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8aa26c
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8aa26c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8aa26c
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9f6e9a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9f6e9a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9f6e9a
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9f6ea1
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9f6ea1], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9f6ea1
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7cf490
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7cf490], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7cf490
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7cf49e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7cf49e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7cf49e
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8a12f5
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8a12f5], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8a12f5
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8a1303
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8a1303], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8a1303
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7f257f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7f257f], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7f257f
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7f2590
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7f2590], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7f2590
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x46b85d
call ebx
mov dword [0x46b85d], esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 4
push 0x46b85d
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x46b86b
call ebx
lea eax, [ebp - 0x14]
mov dword [0x46b86b], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x46b86b
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9994d9
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9994d9], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9994d9
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9994ef
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9994ef], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9994ef
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9994f6
add esi, 0xffffff9c
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9994f6], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9994f6
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x62fc4b
call ebx
lea eax, [ebp - 0x14]
mov dword [0x62fc4b], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x62fc4b
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x62fc50
call ebx
lea eax, [ebp - 0x14]
mov dword [0x62fc50], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x62fc50
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x62fe64
call ebx
lea eax, [ebp - 0x14]
mov dword [0x62fe64], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x62fe64
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x62fe69
call ebx
lea eax, [ebp - 0x14]
mov dword [0x62fe69], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x62fe69
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x62f9c7
call ebx
lea eax, [ebp - 0x14]
mov dword [0x62f9c7], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x62f9c7
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x62f9cc
call ebx
lea eax, [ebp - 0x14]
mov dword [0x62f9cc], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x62f9cc
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x62f105
call ebx
lea eax, [ebp - 0x14]
mov dword [0x62f105], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x62f105
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x62f10a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x62f10a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x62f10a
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x6406d6
call ebx
lea eax, [ebp - 0x14]
mov dword [0x6406d6], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x6406d6
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x6406c4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x6406c4], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x6406c4
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x64050b
call ebx
lea eax, [ebp - 0x14]
mov dword [0x64050b], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x64050b
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x6404f9
call ebx
lea eax, [ebp - 0x14]
mov dword [0x6404f9], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x6404f9
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x640619
call ebx
lea eax, [ebp - 0x14]
mov dword [0x640619], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x640619
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x640691
call ebx
lea eax, [ebp - 0x14]
mov dword [0x640691], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x640691
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x64061e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x64061e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x64061e
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x64064c
call ebx
lea eax, [ebp - 0x14]
mov dword [0x64064c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x64064c
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x640607
call ebx
lea eax, [ebp - 0x14]
mov dword [0x640607], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x640607
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x64067f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x64067f], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x64067f
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x64063a
call ebx
mov dword [0x64063a], esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 4
push 0x64063a
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x64043f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x64043f], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x64043f
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x640444
call ebx
lea eax, [ebp - 0x14]
mov dword [0x640444], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x640444
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x640627
call ebx
mov dword [0x640627], esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 4
push 0x640627
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x64103a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x64103a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x64103a
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x641041
call ebx
lea eax, [ebp - 0x14]
mov dword [0x641041], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x641041
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x641049
call ebx
lea eax, [ebp - 0x14]
mov dword [0x641049], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x641049
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x641051
call ebx
lea eax, [ebp - 0x14]
mov dword [0x641051], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x641051
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x641a1c
call ebx
lea eax, [ebp - 0x14]
mov dword [0x641a1c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x641a1c
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x641a15
call ebx
lea eax, [ebp - 0x14]
mov dword [0x641a15], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x641a15
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x641b3b
call ebx
lea eax, [ebp - 0x14]
mov dword [0x641b3b], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x641b3b
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x641b31
call ebx
lea eax, [ebp - 0x14]
mov dword [0x641b31], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x641b31
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x6cd843
call ebx
lea eax, [ebp - 0x14]
mov dword [0x6cd843], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x6cd843
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x59a0a8
call ebx
lea eax, [ebp - 0x14]
mov dword [0x59a0a8], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x59a0a8
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x59a09e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x59a09e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x59a09e
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x80546d
call ebx
lea eax, [ebp - 0x14]
mov dword [0x80546d], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x80546d
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x80545a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x80545a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x80545a
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8cfd4c
add esi, 0xffffffea
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8cfd4c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8cfd4c
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8cfd51
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8cfd51], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8cfd51
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x53836e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x53836e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x53836e
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push 0x538374
call ebx
lea eax, [ebp - 0x14]
mov dword [0x538374], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x538374
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x55bb30
call ebx
lea eax, [ebp - 0x14]
mov dword [0x55bb30], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x55bb30
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x55bb36
call ebx
lea eax, [ebp - 0x14]
mov dword [0x55bb36], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x55bb36
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5a8b47
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5a8b47], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5a8b47
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5a8b57
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5a8b57], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5a8b57
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5a9b43
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5a9b43], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5a9b43
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5a9b53
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5a9b53], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5a9b53
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5aadab
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5aadab], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5aadab
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5aadbb
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5aadbb], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5aadbb
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5abc66
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5abc66], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5abc66
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5abc76
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5abc76], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5abc76
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5acb2a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5acb2a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5acb2a
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5acb3a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5acb3a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5acb3a
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5c187f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5c187f], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5c187f
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5c188f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5c188f], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5c188f
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5c2d63
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5c2d63], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5c2d63
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5c2d73
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5c2d73], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5c2d73
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5e3fa1
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5e3fa1], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5e3fa1
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x5f64df
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5f64df], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5f64df
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
add esp, 8
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5f6628
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5f6628], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5f6628
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x60411d
call ebx
lea eax, [ebp - 0x14]
mov dword [0x60411d], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x60411d
call ebx
mov eax, dword [0x10016128]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x60f79c
sub esi, 0xc9
call ebx
lea eax, [ebp - 0x14]
mov dword [0x60f79c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x60f79c
call ebx
mov eax, dword [0x10016128]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x60f7a5
sub esi, 0xb5
call ebx
lea eax, [ebp - 0x14]
mov dword [0x60f7a5], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x60f7a5
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x60f7ad
sub esi, 0xc9
call ebx
lea eax, [ebp - 0x14]
mov dword [0x60f7ad], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x60f7ad
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x60f7b6
sub esi, 0xb5
call ebx
lea eax, [ebp - 0x14]
mov dword [0x60f7b6], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x60f7b6
call ebx
mov eax, dword [0x10016128]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x613094
sub esi, 0xc8
call ebx
lea eax, [ebp - 0x14]
mov dword [0x613094], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x613094
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x61309a
sub esi, 0x2d
call ebx
lea eax, [ebp - 0x14]
mov dword [0x61309a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x61309a
call ebx
mov eax, dword [0x10016128]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x61db00
sub esi, 0x96
call ebx
lea eax, [ebp - 0x14]
mov dword [0x61db00], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x61db00
call ebx
mov eax, dword [0x10016128]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x61db09
sub esi, 0x82
call ebx
lea eax, [ebp - 0x14]
mov dword [0x61db09], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x61db09
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x61db11
sub esi, 0xc9
call ebx
lea eax, [ebp - 0x14]
mov dword [0x61db11], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x61db11
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x61db1a
sub esi, 0xb5
call ebx
lea eax, [ebp - 0x14]
mov dword [0x61db1a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x61db1a
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x4372b2
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4372b2], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4372b2
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x4372b7
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4372b7], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4372b7
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x6ce3ac
call ebx
lea eax, [ebp - 0x14]
mov dword [0x6ce3ac], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x6ce3ac
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7e1cb8
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7e1cb8], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7e1cb8
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d82f6
add esi, 0xffffffea
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d82f6], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d82f6
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d82fb
call ebx
mov dword [0x8d82fb], esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 4
push 0x8d82fb
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x935871
call ebx
lea eax, [ebp - 0x14]
mov dword [0x935871], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x935871
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x93586c
call ebx
lea eax, [ebp - 0x14]
mov dword [0x93586c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x93586c
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9dfd5d
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9dfd5d], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9dfd5d
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9dfed3
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9dfed3], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9dfed3
call ebx
mov eax, dword [0x10016128]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
sub esp, 8
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x9f6ade
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9f6ade], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9f6ade
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x6d50d9
call ebx
lea eax, [ebp - 0x14]
mov dword [0x6d50d9], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x6d50d9
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x74baaa
call ebx
lea eax, [ebp - 0x14]
mov dword [0x74baaa], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x74baaa
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x74b952
call ebx
lea eax, [ebp - 0x14]
mov dword [0x74b952], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x74b952
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x74b4a3
call ebx
lea eax, [ebp - 0x14]
mov dword [0x74b4a3], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x74b4a3
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x74b3b8
call ebx
lea eax, [ebp - 0x14]
mov dword [0x74b3b8], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x74b3b8
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x6421b4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x6421b4], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x6421b4
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x59eb4a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x59eb4a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x59eb4a
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d247c
add esi, 0xffffffdf
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d247c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d247c
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8deb94
add esi, 0xffffffec
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8deb94], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8deb94
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8dee30
add esi, 0xffffffec
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8dee30], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8dee30
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d2766
add esi, 0xffffffed
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d2766], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d2766
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d29b5
add esi, 0xffffffed
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d29b5], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d29b5
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d8bff
add esi, 0xffffffed
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d8bff], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d8bff
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d937f
add esi, 0xffffffed
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d937f], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d937f
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d9aca
add esi, 0xffffffed
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d9aca], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d9aca
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
add esi, 0xffffffea
push eax
push 0x40
push 4
push 0x8d1d51
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d1d51], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d1d51
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d1d56
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d1d56], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d1d56
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d1ff5
add esi, 0xffffffea
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d1ff5], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d1ff5
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x8d1ffa
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8d1ffa], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8d1ffa
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x62f5e0
call ebx
lea eax, [ebp - 0x14]
mov dword [0x62f5e0], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x62f5e0
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x62f5e5
call ebx
lea eax, [ebp - 0x14]
mov dword [0x62f5e5], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x62f5e5
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4edb8a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4edb8a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4edb8a
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4edb79
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4edb79], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4edb79
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4edad9
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4edad9], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4edad9
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9f7079
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9f7079], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9f7079
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9f707e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9f707e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9f707e
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
sar eax, 1
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0xbe2738
call ebx
lea eax, [ebp - 0x14]
mov dword [0xbe2738], esi
push eax
push dword [ebp - 0x14]
push 4
push 0xbe2738
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0xbe2df4
call ebx
lea eax, [ebp - 0x14]
mov dword [0xbe2df4], esi
push eax
push dword [ebp - 0x14]
push 4
push 0xbe2df4
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0xbe2df0
call ebx
lea eax, [ebp - 0x14]
mov dword [0xbe2df0], esi
push eax
push dword [ebp - 0x14]
push 4
push 0xbe2df0
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
sar eax, 1
neg eax
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x640658
call ebx
lea eax, [ebp - 0x14]
mov dword [0x640658], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x640658
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x6ce4c7
call ebx
lea eax, [ebp - 0x14]
mov dword [0x6ce4c7], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x6ce4c7
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x9e2e86
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9e2e86], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9e2e86
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
sub esp, 8
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x9e2e8c
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9e2e8c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9e2e8c
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x93519b
call ebx
lea eax, [ebp - 0x14]
mov dword [0x93519b], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x93519b
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x954434
call ebx
lea eax, [ebp - 0x14]
mov dword [0x954434], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x954434
call ebx
mov eax, dword [0x10016128]
cdq
sub eax, edx
sar eax, 1
neg eax
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x981556
call ebx
lea eax, [ebp - 0x14]
mov dword [0x981556], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x981556
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x981f7c
call ebx
lea eax, [ebp - 0x14]
mov dword [0x981f7c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x981f7c
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0xa448b2
call ebx
lea eax, [ebp - 0x14]
mov dword [0xa448b2], esi
push eax
push dword [ebp - 0x14]
push 4
push 0xa448b2
call ebx
mov eax, dword [0x10016124]
cdq
sub esp, 8
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x66bad0
call ebx
lea eax, [ebp - 0x14]
mov dword [0x66bad0], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x66bad0
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x9b76c0
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9b76c0], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9b76c0
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x9b76ce
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9b76ce], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9b76ce
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9f7079
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9f7079], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9f7079
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x9f707e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x9f707e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x9f707e
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x58c8a7
call ebx
lea eax, [ebp - 0x14]
mov dword [0x58c8a7], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x58c8a7
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4edac0
call ebx
lea eax, [ebp - 0x14]
mov dword [0x4edac0], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x4edac0
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x991855
call ebx
lea eax, [ebp - 0x14]
mov dword [0x991855], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x991855
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
sar esi, 1
push 0x40
sub esi, 0x86
push 4
push 0x991860
call ebx
lea eax, [ebp - 0x14]
mov dword [0x991860], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x991860
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x991868
sub esi, 0x85
call ebx
lea eax, [ebp - 0x14]
mov dword [0x991868], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x991868
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x992ba8
call ebx
lea eax, [ebp - 0x14]
mov dword [0x992ba8], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x992ba8
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x14]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x992bad
call ebx
lea eax, [ebp - 0x14]
mov dword [0x992bad], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x992bad
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7e1e09
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7e1e09], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7e1e09
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7e19cc
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7e19cc], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7e19cc
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x5362b3
sub esi, 0x81
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5362b3], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5362b3
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x5364ac
add esi, 0xffffff80
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5364ac], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5364ac
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x592a09
sub esi, 0x7d
call ebx
mov dword [0x592a09], esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 4
push 0x592a09
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x621227
sub esi, 0xd8
call ebx
lea eax, [ebp - 0x14]
mov dword [0x621227], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x621227
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x62121f
call ebx
lea eax, [ebp - 0x14]
mov byte [0x62121f], 1
push eax
push dword [ebp - 0x14]
push 1
push 0x62121f
call ebx
mov eax, dword [0x10016128]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x8c06a0
sub esi, 0xe
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8c06a0], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8c06a0
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x8c06a5
sub esi, 0x9e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x8c06a5], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x8c06a5
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
sar esi, 1
sub esi, 0x81
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0xa24d0c
call ebx
lea eax, [ebp - 0x14]
mov dword [0xa24d0c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0xa24d0c
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0xbe273c
call ebx
lea eax, [ebp - 0x14]
mov dword [0xbe273c], 0x80
push eax
push dword [ebp - 0x14]
push 4
push 0xbe273c
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0xa5fc2b
call ebx
lea eax, [ebp - 0x14]
mov byte [0xa5fc2b], 5
push eax
push dword [ebp - 0x14]
push 1
push 0xa5fc2b
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x89b638
call ebx
lea eax, [ebp - 0x14]
mov byte [0x89b638], 1
push eax
push dword [ebp - 0x14]
push 1
push 0x89b638
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x592a07
call ebx
lea eax, [ebp - 0x14]
mov byte [0x592a07], 1
push eax
push dword [ebp - 0x14]
push 1
push 0x592a07
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x744eb5
call ebx
lea eax, [ebp - 0x14]
mov dword [0x744eb5], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x744eb5
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x744eba
call ebx
lea eax, [ebp - 0x14]
mov dword [0x744eba], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x744eba
call ebx
mov eax, dword [0x10016124]
imul eax, dword [0x10016128]
lea esi, [eax + eax*2]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x744e2b
call ebx
lea eax, [ebp - 0x14]
mov dword [0x744e2b], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x744e2b
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
imul esi, dword [0x10016128]
push eax
push 0x40
push 4
push 0x744e44
call ebx
lea eax, [ebp - 0x14]
mov dword [0x744e44], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x744e44
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
imul esi, dword [0x10016128]
push eax
push 0x40
push 4
push 0x744da7
shl esi, 2
call ebx
lea eax, [ebp - 0x14]
mov dword [0x744da7], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x744da7
call ebx
mov eax, dword [0x10016124]
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
sar esi, 1
push 0x897bb5
sub esi, 0x8f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x897bb5], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x897bb5
call ebx
cmp byte [0x100160b9], 0
je 0x10004bac
mov dword [ebp - 0x10], 0xb8
mov esi, 0x9f7a9b
mov byte [ebp - 0xc], 0
mov edi, 5
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push esi
call ebx
mov al, byte [ebp + esi - 0x9f7aab]
mov byte [esi], al
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 1
push esi
call ebx
inc esi
sub edi, 1
jne 0x10004b86
cmp byte [0x100160b8], 0
je 0x10004bff
lea eax, [ebp - 0x14]
push eax
push 0x40
push 0x15
push 0x62ee54
call ebx
mov eax, 0x62ee54
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov byte [eax + 0x14], 0x90
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 0x15
push 0x62ee54
call ebx
mov edi, dword [0x100160bc]
mov esi, dword [0x10016128]
lea eax, [edi*8]
sub eax, edi
add eax, eax
sub esi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x89b63a
sub esi, 6
call ebx
lea eax, [ebp - 0x14]
mov dword [0x89b63a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x89b63a
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x89b6f8
add esi, 0xfffffe6b
call ebx
lea eax, [ebp - 0x14]
mov dword [0x89b6f8], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x89b6f8
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x89af34
call ebx
lea eax, [ebp - 0x14]
mov dword [0x89af34], 0x190
push eax
push dword [ebp - 0x14]
push 4
push 0x89af34
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x89b2c7
call ebx
lea eax, [ebp - 0x14]
mov dword [0x89b2c7], 0x190
push eax
push dword [ebp - 0x14]
push 4
push 0x89b2c7
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x89aee5
call ebx
lea eax, [ebp - 0x14]
mov dword [0x89aee5], edi
push eax
push dword [ebp - 0x14]
push 4
push 0x89aee5
call ebx
push 6
mov edx, 0x89b185
mov dword [0x10016120], edi
mov ecx, 0x100017f0
call fcn.1000d080
add esp, 4
mov dword [0x10016de8], 0x3a98
push 7
mov edx, 0x89b563
mov ecx, 0x10001800
call fcn.1000d080
add esp, 4
mov dword [0x10016de4], 0x154
mov edx, 0x89b4e6
mov ecx, 0x10001810
push 5
call fcn.1000d080
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
add esp, 4
push eax
push 0x40
push 4
push 0x45b338
call ebx
lea eax, [ebp - 0x14]
mov dword [0x45b338], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x45b338
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x45b418
add esi, 0xffffff1f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x45b418], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x45b418
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x7c2532
add esi, 0xffffffb0
call ebx
lea eax, [ebp - 0x14]
mov dword [0x7c2532], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x7c2532
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x89b797
add esi, 0xffffffee
call ebx
lea eax, [ebp - 0x14]
mov dword [0x89b797], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x89b797
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x849e3a
add esi, 0xffffff4f
call ebx
lea eax, [ebp - 0x14]
mov dword [0x849e3a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x849e3a
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x84a5b8
add esi, 0xfffffee7
call ebx
lea eax, [ebp - 0x14]
mov dword [0x84a5b8], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x84a5b8
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x522c74
add esi, 0xffffffa4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x522c74], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x522c74
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x522e66
add esi, 0xffffffa4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x522e66], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x522e66
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x52307f
add esi, 0xffffffa4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x52307f], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x52307f
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x52335a
add esi, 0xffffffa4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x52335a], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x52335a
call ebx
mov esi, dword [0x10016128]
add esi, 0xffffffa4
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523596
call ebx
lea eax, [ebp - 0x14]
mov dword [0x523596], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x523596
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x52378c
add esi, 0xffffffa4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x52378c], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x52378c
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x52397e
add esi, 0xffffffa4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x52397e], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x52397e
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523bb2
add esi, 0xffffffa4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x523bb2], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x523bb2
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523da6
add esi, 0xffffffa4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x523da6], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x523da6
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523fa4
add esi, 0xffffffa4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x523fa4], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x523fa4
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5243dc
add esi, 0xffffffa4
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5243dc], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x5243dc
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523155
add esi, 0xffffff9a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x523155], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x523155
call ebx
mov esi, dword [0x10016128]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x52418d
add esi, 0xffffff9a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x52418d], esi
push eax
push dword [ebp - 0x14]
push 4
push 0x52418d
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523093
call ebx
lea eax, [ebp - 0x14]
mov dword [0x523093], 0x1a7
push eax
push dword [ebp - 0x14]
push 4
push 0x523093
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x52336e
call ebx
lea eax, [ebp - 0x14]
mov dword [0x52336e], 0x1a7
push eax
push dword [ebp - 0x14]
push 4
push 0x52336e
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x522e7a
call ebx
lea eax, [ebp - 0x14]
mov dword [0x522e7a], 0x1a7
push eax
push dword [ebp - 0x14]
push 4
push 0x522e7a
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x522c88
call ebx
lea eax, [ebp - 0x14]
mov dword [0x522c88], 0x1a7
push eax
push dword [ebp - 0x14]
push 4
push 0x522c88
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5237a0
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5237a0], 0x1a7
push eax
push dword [ebp - 0x14]
push 4
push 0x5237a0
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523992
call ebx
lea eax, [ebp - 0x14]
mov dword [0x523992], 0x1a7
push eax
push dword [ebp - 0x14]
push 4
push 0x523992
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523bc6
call ebx
lea eax, [ebp - 0x14]
mov dword [0x523bc6], 0x1a7
push eax
push dword [ebp - 0x14]
push 4
push 0x523bc6
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523dc6
call ebx
lea eax, [ebp - 0x14]
mov dword [0x523dc6], 0x1a7
push eax
push dword [ebp - 0x14]
push 4
push 0x523dc6
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x523fb8
call ebx
lea eax, [ebp - 0x14]
mov dword [0x523fb8], 0x1a7
push eax
push dword [ebp - 0x14]
push 4
push 0x523fb8
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x5243f0
call ebx
lea eax, [ebp - 0x14]
mov dword [0x5243f0], 0x1a7
push eax
push dword [ebp - 0x14]
push 4
push 0x5243f0
call ebx
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x533b03
call ebx
lea eax, [ebp - 0x14]
mov byte [0x533b03], 0xb8
push eax
push dword [ebp - 0x14]
push 1
push 0x533b03
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x34]
push eax
push 0x40
push 4
push 0x533b04
add esi, 0xfffffff1
call ebx
lea eax, [ebp - 0x34]
mov dword [0x533b04], esi
push eax
push dword [ebp - 0x34]
push 4
push 0x533b04
call ebx
lea eax, [ebp - 0x38]
push eax
push 0x40
push 1
push 0x534370
call ebx
lea eax, [ebp - 0x38]
mov byte [0x534370], 0xb9
push eax
push dword [ebp - 0x38]
push 1
push 0x534370
call ebx
mov esi, dword [0x10016124]
lea eax, [ebp - 0x3c]
push eax
push 0x40
push 4
push 0x534371
add esi, 0xffffffea
call ebx
lea eax, [ebp - 0x3c]
mov dword [0x534371], esi
push eax
push dword [ebp - 0x3c]
push 4
push 0x534371
call ebx
mov eax, dword [0x10016128]
add eax, 0xfffffda8
cdq
sub eax, edx
mov esi, eax
mov eax, dword [0x10016124]
mov ecx, 0x100015e0
sar esi, 1
push 0xc
mov dword [0x10016f78], esi
lea eax, [eax - 0x320]
mov dword [0x10016ebc], 0x13c
cdq
sub eax, edx
mov dword [0x10016eb8], 0x100
sar eax, 1
mov edx, 0x469414
mov dword [0x10016f7c], eax
mov dword [0x10016eb4], esi
mov dword [0x10016eb0], eax
call fcn.1000d080
mov eax, dword [0x10016f78]
add esp, 4
add eax, 0x13e
mov dword [0x10016eac], 0x68
mov dword [0x10016ea4], eax
mov edx, 0x46942f
mov eax, dword [0x10016f7c]
mov ecx, 0x10001600
dec eax
mov dword [0x10016ea8], 0x100
push 0xe
mov dword [0x10016ea0], eax
call fcn.1000d080
mov eax, dword [0x10016f78]
add esp, 4
add eax, 0x1aa
mov dword [0x10016e9c], 0xa3
mov dword [0x10016e94], eax
mov edx, 0x46944c
mov eax, dword [0x10016f7c]
mov ecx, 0x10001620
push 0x10
mov dword [0x10016e98], 0xf6
mov dword [0x10016e90], eax
call fcn.1000d080
mov eax, dword [0x10016f78]
add esp, 4
add eax, 0x11
mov dword [0x10016e8c], 0x4e
mov dword [0x10016e84], eax
mov edx, 0x46946b
mov eax, dword [0x10016f7c]
mov ecx, 0x10001640
add eax, 0x110
mov dword [0x10016e88], 0x1fc
push 0xe
mov dword [0x10016e80], eax
call fcn.1000d080
mov eax, dword [0x10016f78]
add esp, 4
add eax, 0x5f
mov dword [0x10016e7c], 0x1ae
mov dword [0x10016e74], eax
mov edx, 0x469488
mov eax, dword [0x10016f7c]
mov ecx, 0x10001660
add eax, 0x113
mov dword [0x10016e78], 0x19c
push 0x11
mov dword [0x10016e70], eax
call fcn.1000d080
mov eax, dword [0x10016f78]
add esp, 4
add eax, 0x9d
mov dword [0x10016e6c], 0x166
mov edx, 0x4694a8
mov dword [0x10016e68], 0x5a
mov ecx, 0x10001680
mov dword [0x10016e64], eax
push 0xc
call fcn.1000d080
mov esi, dword [0x10016f7c]
lea eax, [ebp - 0x2c]
add esp, 4
add esi, 0x2b2
push eax
push 0x40
push 4
push 0x4694bb
call ebx
lea eax, [ebp - 0x2c]
mov dword [0x4694bb], esi
push eax
push dword [ebp - 0x2c]
push 4
push 0x4694bb
call ebx
mov eax, dword [0x10016f78]
mov edx, 0x4694c8
add eax, 0x212
mov dword [0x10016e60], 0x38
mov dword [0x10016e58], eax
mov ecx, 0x100016a0
mov eax, dword [0x10016f7c]
add eax, 0xfe
mov dword [0x10016e5c], 0x221
push 0x11
mov dword [0x10016e54], eax
call fcn.1000d080
mov eax, dword [0x10016f78]
add esp, 4
add eax, 0x61
mov dword [0x10016e50], 0x16
mov dword [0x10016e48], eax
mov edx, 0x4694e8
mov eax, dword [0x10016f7c]
mov ecx, 0x100016c0
add eax, 0x2b2
mov dword [0x10016e4c], 0x59
push 0xb
mov dword [0x10016e44], eax
call fcn.1000d080
add esp, 4
mov edx, 0x776b5f
mov ecx, 0x100016e0
push 5
call fcn.1000d080
mov edx, dword [0x10016f78]
add esp, 4
mov ecx, dword [0x10016f7c]
lea eax, [edx + 0xa5]
mov dword [0x10016e40], eax
lea eax, [ecx + 0xd4]
mov dword [0x10016e3c], eax
lea eax, [edx + 0x28]
mov dword [0x10016e38], eax
mov edx, 0x4ab10f
lea eax, [ecx + 0x18]
mov ecx, 0x10001700
push 0xe
mov dword [0x10016e34], eax
call fcn.1000d080
mov eax, dword [0x10016124]
cdq
sub eax, edx
sar eax, 1
push ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x30], xmm0
fld qword [ebp - 0x30]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x1c]
fstp qword [ebp - 0x30]
cvttsd2si esi, qword [ebp - 0x30]
push eax
push 0x40
push 4
push 0x641f62
call ebx
lea eax, [ebp - 0x1c]
mov dword [0x641f62], esi
push eax
push dword [ebp - 0x1c]
push 4
push 0x641f62
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x20], xmm0
fld qword [ebp - 0x20]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x24]
fstp qword [ebp - 0x20]
cvttsd2si esi, qword [ebp - 0x20]
push eax
push 0x40
push 4
push 0x641fc9
call ebx
lea eax, [ebp - 0x24]
mov dword [0x641fc9], esi
push eax
push dword [ebp - 0x24]
push 4
push 0x641fc9
call ebx
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x28], xmm0
fld qword [ebp - 0x28]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0xc]
fstp qword [ebp - 0x28]
cvttsd2si esi, qword [ebp - 0x28]
push eax
push 0x40
push 4
push 0x642090
call ebx
lea eax, [ebp - 0xc]
mov dword [0x642090], esi
push eax
push dword [ebp - 0xc]
push 4
push 0x642090
call ebx
mov eax, dword [0x10016f78]
mov edx, 0x642105
push 7
mov ecx, 0x10001740
mov dword [0x10016e28], eax
call fcn.1000d080
add esp, 4
cmp byte [0x10016ed1], 0
je 0x10005779
mov eax, dword [0x10016128]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x20], xmm0
fld qword [ebp - 0x20]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0xc]
fstp qword [ebp - 0x20]
cvttsd2si esi, qword [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5f481f
call ebx
lea eax, [ebp - 0xc]
mov dword [0x5f481f], esi
push eax
push dword [ebp - 0xc]
push 4
push 0x5f481f
call ebx
mov eax, dword [0x10016124]
sub esp, 8
cdq
sub eax, edx
sar eax, 1
neg eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x10], xmm0
fld qword [ebp - 0x10]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
lea eax, [ebp - 0x24]
fstp qword [ebp - 0x10]
cvttsd2si esi, qword [ebp - 0x10]
push eax
push 0x40
push 4
push 0x5f4825
call ebx
lea eax, [ebp - 0x24]
mov dword [0x5f4825], esi
push eax
push dword [ebp - 0x24]
push 4
push 0x5f4825
call ebx
cmp byte [0x10016ed0], 0
je 0x100057b5
mov esi, dword [0x10016124]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push 0x5f464e
add esi, 0xffffff5b
call ebx
lea eax, [ebp - 0xc]
mov dword [0x5f464e], esi
push eax
push dword [ebp - 0xc]
push 4
push 0x5f464e
call ebx
jmp 0x100057e5
mov eax, dword [0x10016f78]
mov edx, 0x5f464d
add eax, 0xa
mov ecx, 0x10001720
mov dword [0x10016e30], eax
mov eax, dword [0x10016f7c]
add eax, 0x285
push 0xa
mov dword [0x10016e2c], eax
call fcn.1000d080
add esp, 4
cmp byte [0x10016ed0], 0
jne 0x100058eb
mov edx, dword [0x10016f78]
mov ecx, dword [0x10016f7c]
mov dword [0x10016e18], ecx
push 0xb
lea eax, [edx + 0x160]
mov dword [0x10016e24], eax
lea eax, [ecx + 0x7d]
mov dword [0x10016e20], eax
mov ecx, 0x10001760
lea eax, [edx + 0x7d]
mov edx, 0x60e1bf
mov dword [0x10016e1c], eax
call fcn.1000d080
mov edx, dword [0x10016f78]
add esp, 4
mov ecx, dword [0x10016f7c]
lea eax, [edx + 0xa7]
mov dword [0x10016e14], eax
lea eax, [ecx + 0x21c]
mov dword [0x10016e10], eax
lea eax, [edx + 0x33]
mov dword [0x10016e0c], eax
mov edx, 0x62b334
lea eax, [ecx + 0x88]
mov ecx, 0x10001780
push 0x11
mov dword [0x10016e08], eax
call fcn.1000d080
mov eax, dword [0x10016f7c]
add esp, 4
mov dword [0x10016dfc], eax
add eax, 0xffffff6b
mov dword [0x10016df8], eax
mov eax, dword [0x10016f78]
mov dword [0x10016df4], eax
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push 0x60d84a
mov dword [0x10016df0], 0x19
mov dword [0x10016dec], 0xffffff06
call ebx
lea eax, [ebp - 0xc]
mov dword [0x60d84a], 0x32
push eax
push dword [ebp - 0xc]
push 4
push 0x60d84a
call ebx
push 0x33
mov edx, 0x60d85b
mov ecx, 0x100017a0
call fcn.1000d080
add esp, 4
mov eax, dword [0x10016f7c]
mov edx, 0x554041
add eax, 0xa9
mov dword [0x1001611c], 0x32
push 8
mov ecx, 0x10001820
mov dword [0x10016118], eax
call fcn.1000d080
mov eax, dword [0x10016f7c]
add esp, 4
add eax, 0x190
mov dword [0x10016114], 0x1a
mov edx, 0x5540c9
mov dword [0x10016110], eax
mov ecx, 0x10001840
push 8
call fcn.1000d080
mov eax, dword [0x10016f7c]
add esp, 4
add eax, 0x277
mov dword [0x1001610c], 0x32
mov edx, 0x55414f
mov dword [0x10016108], eax
mov ecx, 0x10001860
push 8
call fcn.1000d080
mov eax, dword [0x10016f7c]
add esp, 4
add eax, 0x13d
mov dword [0x10016104], 0x20
mov edx, 0x5543f1
mov dword [0x10016100], eax
mov ecx, 0x10001880
push 7
call fcn.1000d080
mov eax, dword [0x10016f7c]
add esp, 4
add eax, 0x1e2
mov dword [0x100160fc], 0x20
mov edx, 0x55447c
mov dword [0x100160f8], eax
mov ecx, 0x100018a0
push 7
call fcn.1000d080
mov eax, dword [0x10016f7c]
add esp, 4
add eax, 0xfffffffb
mov dword [0x100160f4], 0x18
mov edx, 0x554507
mov dword [0x100160f0], eax
mov ecx, 0x100018c0
push 5
call fcn.1000d080
mov eax, dword [0x10016f7c]
add esp, 4
add eax, 0xfffffffe
mov dword [0x100160ec], 0x44
mov edx, 0x5541da
mov dword [0x100160e8], eax
mov ecx, 0x100018e0
push 8
call fcn.1000d080
mov eax, dword [0x10016f7c]
add esp, 4
add eax, 0xfffffff3
mov dword [0x100160e4], 0x12
mov edx, 0x554265
mov dword [0x100160e0], eax
mov ecx, 0x10001900
push 5
call fcn.1000d080
mov eax, dword [0x10016f78]
add esp, 4
add eax, 0x104
mov edx, 0x53500a
mov dword [0x100160dc], eax
mov ecx, 0x10001920
mov eax, dword [0x10016f7c]
add eax, 0x190
mov dword [0x100160d8], eax
push 0xa
call fcn.1000d080
mov eax, dword [0x10016f7c]
add esp, 4
add eax, 0x159
mov dword [0x100160c8], 0x10
mov edx, 0x555541
mov dword [0x100160c4], eax
mov ecx, 0x10001940
push 7
call fcn.1000d080
mov eax, dword [0x10016f7c]
add esp, 4
add eax, 0x13e
mov edx, 0x554ba3
mov ecx, 0x10001960
mov dword [0x100160c0], eax
push 5
call fcn.1000d080
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.10010289
mov esp, ebp
pop ebp
ret