Function at 0x1000a8b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x1004a434]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10081438]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10081f18]
cmp eax, dword [ecx + 4]
jle 0x1000a913
push 0x10081f18
call fcn.10014ed2
add esp, 4
cmp dword [0x10081f18], 0xffffffff
jne 0x1000a913
push 0x10035720
mov dword [0x10081f30], 0x10043494
call fcn.10014d54
push 0x10081f18
call fcn.10014e88
add esp, 8
push ebx
push esi
push edi
call fcn.1000dd90
call fcn.10006fe0
push 0x10037f02
push 7
mov dword [ebp - 8], 0
call fcn.10014fa8
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov edx, 0x90909090
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a9bd
mov ecx, 0x1000bd40
mov byte [eax], 0xe9
sub ecx, 0x4548b4
mov dword [eax + 1], ecx
mov word [eax + 5], dx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x4548af
call esi
test eax, eax
je 0x1000a9bd
mov ecx, dword [ebp - 0xc]
mov edx, 0x4548af
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000a9bd
push 7
push 0x4548af
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 5
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000aa37
mov ecx, 0x1000bd70
mov byte [eax], 0xe9
sub ecx, 0x449dd5
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x449dd0
call esi
test eax, eax
je 0x1000aa37
mov ecx, dword [ebp - 0xc]
mov edx, 0x449dd0
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000aa37
push 5
push 0x449dd0
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 9
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000aabc
mov ecx, 0x1000bdf0
mov byte [eax], 0xe9
sub ecx, 0x47df46
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x47df41
call esi
test eax, eax
je 0x1000aabc
mov eax, dword [ebp - 0xc]
mov ecx, 0x47df41
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000aabc
push 9
push 0x47df41
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 7
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ab47
mov ecx, 0x1000be50
mov byte [eax], 0xe9
sub ecx, 0x40c660
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x40c65b
call esi
test eax, eax
je 0x1000ab47
mov ecx, dword [ebp - 0xc]
mov edx, 0x40c65b
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000ab47
push 7
push 0x40c65b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000abc7
mov ecx, 0x1000bee0
mov byte [eax], 0xe9
sub ecx, 0x403787
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x403782
call esi
test eax, eax
je 0x1000abc7
mov ecx, dword [ebp - 0xc]
mov edx, 0x403782
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000abc7
push 6
push 0x403782
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 9
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ac4c
mov ecx, 0x1000c010
mov byte [eax], 0xe9
sub ecx, 0x402339
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x402334
call esi
test eax, eax
je 0x1000ac4c
mov eax, dword [ebp - 0xc]
mov ecx, 0x402334
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000ac4c
push 9
push 0x402334
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 7
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000acd7
mov ecx, 0x1000bfc0
mov byte [eax], 0xe9
sub ecx, 0x403882
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x40387d
call esi
test eax, eax
je 0x1000acd7
mov ecx, dword [ebp - 0xc]
mov edx, 0x40387d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000acd7
push 7
push 0x40387d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x54833a
call esi
test eax, eax
je 0x1000ad08
lea eax, [ebp - 8]
mov byte [0x54833a], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x54833a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x539a34
call esi
test eax, eax
je 0x1000ad39
lea eax, [ebp - 8]
mov byte [0x539a34], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x539a34
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x539b1c
call esi
test eax, eax
je 0x1000ad6a
lea eax, [ebp - 8]
mov byte [0x539b1c], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x539b1c
call esi
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ade3
mov byte [eax], 0xe9
mov dword [eax + 1], 0x8e
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x51dce1
call esi
test eax, eax
je 0x1000ade3
mov ecx, dword [ebp - 0xc]
mov edx, 0x51dce1
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000ade3
push 6
push 0x51dce1
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ae5c
mov byte [eax], 0xe9
mov dword [eax + 1], 0xb1
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x52f02d
call esi
test eax, eax
je 0x1000ae5c
mov ecx, dword [ebp - 0xc]
mov edx, 0x52f02d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000ae5c
push 6
push 0x52f02d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54833a
call esi
test eax, eax
je 0x1000ae8d
lea eax, [ebp - 8]
mov byte [0x54833a], 0xeb
push eax
push dword [ebp - 8]
push 4
push 0x54833a
call esi
push 0x10037f02
push 9
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000af12
mov ecx, 0x1000c1b0
mov byte [eax], 0xe9
sub ecx, 0x420830
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x42082b
call esi
test eax, eax
je 0x1000af12
mov eax, dword [ebp - 0xc]
mov ecx, 0x42082b
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000af12
push 9
push 0x42082b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 5
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000af85
mov byte [eax], 0xe9
mov dword [eax + 1], 1
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x539c48
call esi
test eax, eax
je 0x1000af85
mov ecx, dword [ebp - 0xc]
mov edx, 0x539c48
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000af85
push 5
push 0x539c48
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 5
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000aff8
mov byte [eax], 0xe9
mov dword [eax + 1], 4
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x539b1c
call esi
test eax, eax
je 0x1000aff8
mov ecx, dword [ebp - 0xc]
mov edx, 0x539b1c
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000aff8
push 5
push 0x539b1c
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 5
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b06b
mov byte [eax], 0xe9
mov dword [eax + 1], 5
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4404de
call esi
test eax, eax
je 0x1000b06b
mov ecx, dword [ebp - 0xc]
mov edx, 0x4404de
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b06b
push 5
push 0x4404de
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 7
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b0f6
mov ecx, 0x1000c0b0
mov byte [eax], 0xe9
sub ecx, 0x425a9b
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x425a96
call esi
test eax, eax
je 0x1000b0f6
mov ecx, dword [ebp - 0xc]
mov edx, 0x425a96
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000b0f6
push 7
push 0x425a96
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 0xa
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b181
mov byte [eax], 0xe9
mov ecx, 0x1000c0e0
sub ecx, 0x423704
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
mov byte [eax + 9], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4236ff
call esi
test eax, eax
je 0x1000b181
mov eax, dword [ebp - 0xc]
mov ecx, 0x4236ff
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov ax, word [eax + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push ecx
call esi
test eax, eax
je 0x1000b181
push 0xa
push 0x4236ff
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 9
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b206
mov ecx, 0x1000c490
mov byte [eax], 0xe9
sub ecx, 0x423f6e
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x423f69
call esi
test eax, eax
je 0x1000b206
mov eax, dword [ebp - 0xc]
mov ecx, 0x423f69
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000b206
push 9
push 0x423f69
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b286
mov ecx, 0x1000c080
mov byte [eax], 0xe9
sub ecx, 0x4211ab
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4211a6
call esi
test eax, eax
je 0x1000b286
mov ecx, dword [ebp - 0xc]
mov edx, 0x4211a6
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b286
push 6
push 0x4211a6
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 9
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b30b
mov ecx, 0x1000c4c0
mov byte [eax], 0xe9
sub ecx, 0x40cd32
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x40cd2d
call esi
test eax, eax
je 0x1000b30b
mov eax, dword [ebp - 0xc]
mov ecx, 0x40cd2d
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000b30b
push 9
push 0x40cd2d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 9
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b389
mov byte [eax], 0xe9
mov dword [eax + 1], 0x15
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x40cd75
call esi
test eax, eax
je 0x1000b389
mov eax, dword [ebp - 0xc]
mov ecx, 0x40cd75
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000b389
push 9
push 0x40cd75
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b407
mov ecx, 0x1000c060
mov word [eax], 0x8d0f
sub ecx, 0x428baf
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x428ba9
call esi
test eax, eax
je 0x1000b407
mov ecx, dword [ebp - 0xc]
mov edx, 0x428ba9
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b407
push 6
push 0x428ba9
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 5
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b481
mov ecx, 0x1000c030
mov byte [eax], 0xe9
sub ecx, 0x428ff2
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x428fed
call esi
test eax, eax
je 0x1000b481
mov ecx, dword [ebp - 0xc]
mov edx, 0x428fed
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b481
push 5
push 0x428fed
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x477a8d
call esi
test eax, eax
je 0x1000b4b2
lea eax, [ebp - 8]
mov byte [0x477a8d], 0x1f
push eax
push dword [ebp - 8]
push 1
push 0x477a8d
call esi
push 0x10037f02
push 7
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b53d
mov ecx, 0x1000c450
mov byte [eax], 0xe9
sub ecx, 0x46ed60
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x46ed5b
call esi
test eax, eax
je 0x1000b53d
mov ecx, dword [ebp - 0xc]
mov edx, 0x46ed5b
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000b53d
push 7
push 0x46ed5b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b5bb
mov ecx, 0x1000c4e0
mov word [eax], 0x840f
sub ecx, 0x49b3a0
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x49b39a
call esi
test eax, eax
je 0x1000b5bb
mov ecx, dword [ebp - 0xc]
mov edx, 0x49b39a
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b5bb
push 6
push 0x49b39a
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b639
mov ecx, 0x1000c4e0
mov word [eax], 0x840f
sub ecx, 0x49b3b0
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x49b3aa
call esi
test eax, eax
je 0x1000b639
mov ecx, dword [ebp - 0xc]
mov edx, 0x49b3aa
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b639
push 6
push 0x49b3aa
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 5
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b6b3
mov ecx, 0x1000c5a0
mov byte [eax], 0xe9
sub ecx, 0x46ec8f
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x46ec8a
call esi
test eax, eax
je 0x1000b6b3
mov ecx, dword [ebp - 0xc]
mov edx, 0x46ec8a
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b6b3
push 5
push 0x46ec8a
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x60aa00
call esi
test eax, eax
je 0x1000b6e7
lea eax, [ebp - 8]
mov dword [0x60aa00], 0x1e
push eax
push dword [ebp - 8]
push 4
push 0x60aa00
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x60aa04
call esi
test eax, eax
je 0x1000b71b
lea eax, [ebp - 8]
mov dword [0x60aa04], 0x1e
push eax
push dword [ebp - 8]
push 4
push 0x60aa04
call esi
push 0x10037f02
push 5
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b795
mov ecx, 0x1000c570
mov byte [eax], 0xe9
sub ecx, 0x4df20d
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4df208
call esi
test eax, eax
je 0x1000b795
mov ecx, dword [ebp - 0xc]
mov edx, 0x4df208
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b795
push 5
push 0x4df208
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b815
mov ecx, 0x1000c540
mov byte [eax], 0xe9
sub ecx, 0x4e0462
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4e045d
call esi
test eax, eax
je 0x1000b815
mov ecx, dword [ebp - 0xc]
mov edx, 0x4e045d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b815
push 6
push 0x4e045d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 9
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b89a
mov ecx, 0x1000c500
mov byte [eax], 0xe9
sub ecx, 0x4ccbe1
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x4ccbdc
call esi
test eax, eax
je 0x1000b89a
mov eax, dword [ebp - 0xc]
mov ecx, 0x4ccbdc
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000b89a
push 9
push 0x4ccbdc
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b91a
mov ecx, 0x1000c640
mov byte [eax], 0xe9
sub ecx, 0x424f1e
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x424f19
call esi
test eax, eax
je 0x1000b91a
mov ecx, dword [ebp - 0xc]
mov edx, 0x424f19
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b91a
push 6
push 0x424f19
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b99a
mov ecx, 0x1000c6a0
mov byte [eax], 0xe9
sub ecx, 0x4bac64
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4bac5f
call esi
test eax, eax
je 0x1000b99a
mov ecx, dword [ebp - 0xc]
mov edx, 0x4bac5f
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b99a
push 6
push 0x4bac5f
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 0xa
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ba25
mov byte [eax], 0xe9
mov ecx, 0x1000c6e0
sub ecx, 0x47dbb4
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
mov byte [eax + 9], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x47dbaf
call esi
test eax, eax
je 0x1000ba25
mov eax, dword [ebp - 0xc]
mov ecx, 0x47dbaf
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov ax, word [eax + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push ecx
call esi
test eax, eax
je 0x1000ba25
push 0xa
push 0x47dbaf
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000baa5
mov ecx, 0x1000c740
mov byte [eax], 0xe9
sub ecx, 0x44e7ea
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x44e7e5
call esi
test eax, eax
je 0x1000baa5
mov ecx, dword [ebp - 0xc]
mov edx, 0x44e7e5
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000baa5
push 6
push 0x44e7e5
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 5
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000bb1f
mov ecx, 0x1000c760
mov byte [eax], 0xe9
sub ecx, 0x44534b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x445346
call esi
test eax, eax
je 0x1000bb1f
mov ecx, dword [ebp - 0xc]
mov edx, 0x445346
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000bb1f
push 5
push 0x445346
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x42aaf9
call esi
test eax, eax
je 0x1000bb53
lea eax, [ebp - 8]
mov dword [0x42aaf9], 0
push eax
push dword [ebp - 8]
push 4
push 0x42aaf9
call esi
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000bbd3
mov ecx, 0x10008a80
mov byte [eax], 0xe9
sub ecx, 0x5419e0
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5419db
call esi
test eax, eax
je 0x1000bbd3
mov ecx, dword [ebp - 0xc]
mov edx, 0x5419db
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000bbd3
push 6
push 0x5419db
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x46eced
call esi
test eax, eax
je 0x1000bc07
lea eax, [ebp - 8]
mov dword [0x46eced], 0
push eax
push dword [ebp - 8]
push 4
push 0x46eced
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547cac
call esi
test eax, eax
je 0x1000bc3b
lea eax, [ebp - 8]
mov dword [0x547cac], 0
push eax
push dword [ebp - 8]
push 4
push 0x547cac
call esi
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000bcb4
mov byte [eax], 0xe9
mov dword [eax + 1], 0x69
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x48a3cb
call esi
test eax, eax
je 0x1000bcb4
mov ecx, dword [ebp - 0xc]
mov edx, 0x48a3cb
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000bcb4
push 6
push 0x48a3cb
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
push 0x10037f02
push 6
mov dword [ebp - 8], 0
call fcn.10014fa8
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000bd2d
mov byte [eax], 0xe9
mov dword [eax + 1], 0x69
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x489648
call esi
test eax, eax
je 0x1000bd2d
mov ecx, dword [ebp - 0xc]
mov edx, 0x489648
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000bd2d
push 6
push 0x489648
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014d9a
add esp, 4
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100148fc
mov esp, ebp
pop ebp
ret