Function at 0x10014350
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
fild dword [0xe61e5c]
push esi
push edi
fdiv dword [0xe7c3d8]
fld qword [0x1005f9f0]
fsub st(1), st(0)
fxch st(1)
fadd qword [0x1005fd38]
fstp dword [0x101de1b0]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub st(1)
fld qword [0x10060028]
fadd st(1), st(0)
fxch st(1)
fstp dword [0x101de1b8]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fld qword [0x1005f9f8]
fsub st(1), st(0)
fld qword [0x1005f950]
fmul st(2), st(0)
fxch st(2)
fadd qword [0x10060020]
fstp dword [0x101de1ac]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(1)
fmul st(2)
fadd qword [0x10060018]
fstp dword [0x101de1b4]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub st(4)
fld qword [0x10060010]
fadd st(1), st(0)
fxch st(1)
fstp dword [0x101de1a0]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub st(5)
fld qword [0x10060008]
fadd st(1), st(0)
fxch st(1)
fstp dword [0x101de1a8]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(3)
fmul st(4)
fadd qword [0x10060000]
fstp dword [0x101de19c]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(3)
fmul st(4)
fadd qword [0x1005fff8]
fstp dword [0x101de1a4]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub st(6)
faddp st(5)
fxch st(4)
fstp dword [0x101de17c]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub st(5)
faddp st(1)
fstp dword [0x101de180]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsubrp st(4)
fxch st(3)
faddp st(2)
fxch st(1)
fstp dword [0x101de184]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(2)
fmul st(1)
fadd qword [0x1005fff0]
fstp dword [0x101de188]
fild dword [0xe61e58]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
fdiv dword [0xe7c3d4]
push 0x40
push 4
push 0x81271e
fsub st(2)
fmul st(1)
fldz
fadd st(1), st(0)
fxch st(1)
fstp dword [0x101de18c]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(3)
fmul st(2)
faddp st(1)
fstp dword [0x101de190]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(2)
fmul st(1)
fadd qword [0x10060000]
fstp dword [0x101de194]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsubrp st(2)
fmulp st(1)
fadd qword [0x1005fff8]
fstp dword [0x101de198]
call esi
mov edi, 0x101de17c
lea ecx, [ebp - 4]
push ecx
mov dword [0x81271e], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81271e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812952
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x812952], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812952
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812a81
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x812a81], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812a81
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812ca4
call esi
lea ecx, [ebp - 4]
mov dword [0x812ca4], edi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x812ca4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812d4a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x812d4a], 0x101de180
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812d4a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8130b5
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8130b5], 0x101de184
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8130b5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812715
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x812715], 0x101de188
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812715
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812949
call esi
mov edi, 0x101de18c
lea ecx, [ebp - 4]
push ecx
mov dword [0x812949], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812949
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812c9b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x812c9b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812c9b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812a78
call esi
mov dword [0x812a78], 0x101de190
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x812a78
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812d65
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x812d65], 0x101de194
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812d65
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8130ac
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8130ac], 0x101de198
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8130ac
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81377b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81377b], 0x101de1ac
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81377b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x813784
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x813784], 0x101de1b0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x813784
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8138e1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8138e1], 0x101de1b4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8138e1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8138ea
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8138ea], 0x101de1b8
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8138ea
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8139c6
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8139c6], 0x101de19c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8139c6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8139ab
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8139ab], 0x101de1a0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8139ab
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x813cc7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x813cc7], 0x101de1a8
mov edx, dword [ebp - 4]
push edx
push 4
push 0x813cc7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x813cbe
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x813cbe], 0x101de1a4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x813cbe
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x813c1a
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x813c1a], 0x28
mov edx, dword [ebp - 4]
push edx
push 1
push 0x813c1a
call esi
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fld qword [0x1005f9f8]
fsub st(1), st(0)
fld qword [0x1005f950]
fnstcw word [ebp - 2]
fmul st(2), st(0)
movzx eax, word [ebp - 2]
fxch st(2)
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
fadd qword [0x1005fa28]
push 0x40
push 4
push 0x80ff9a
fstp dword [0x101de170]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(1)
fmul st(2)
fadd qword [0x1005fa20]
fstp dword [0x101de174]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsubrp st(1)
fmulp st(1)
fadd qword [0x1005fec8]
fstp dword [0x101de178]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub qword [0x1005f9f0]
fadd qword [0x10060010]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ff9a], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ff9a
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81012d
fsub qword [0x1005f9f0]
fadd qword [0x10060010]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81012d], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81012d
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
fsub qword [0x1005f9f0]
fadd qword [0x10060010]
fldcw word [ebp - 8]
lea eax, [ebp - 4]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
push eax
push 0x40
fldcw word [ebp - 2]
push 4
push 0x8103f8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8103f8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8103f8
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8106da
fsub qword [0x1005f9f0]
fadd qword [0x10060010]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8106da], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8106da
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7bf259
fsub qword [0x1005ffe8]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7bf259], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7bf259
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
fsub qword [0x1005ffe8]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
push 0x40
push 4
push 0x7bf28a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7bf28a], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7bf28a
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7bf415
fsub qword [0x1005fa40]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7bf415], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7bf415
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7bf28f
fsub qword [0x1005f9f8]
fmul qword [0x1005f950]
fadd qword [0x1005ffe0]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7bf28f], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7bf28f
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
fsub qword [0x1005f9f8]
fmul qword [0x1005f950]
fadd qword [0x1005ffe0]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
push 0x7bf25e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7bf25e], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7bf25e
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7bf47e
fsub qword [0x1005f9f8]
fmul qword [0x1005f950]
fadd qword [0x1005ffd8]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7bf47e], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7bf47e
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7bf44c
fsub qword [0x1005f9f8]
fmul qword [0x1005f950]
fadd qword [0x1005ffd0]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7bf44c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7bf44c
call esi
fld qword [0x1005fbb0]
fstp qword [0x10066a48]
fld qword [0x1005f9e0]
fstp qword [0x10066a50]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fld qword [0x1005f9f8]
fsub st(1), st(0)
fld qword [0x1005f950]
fmul st(2), st(0)
fxch st(2)
fadd qword [0x1005fd40]
fstp qword [0x10066a40]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fstp dword [ebp - 8]
fld dword [ebp - 8]
fsub qword [0x1005ffc8]
fstp qword [0x10066a38]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(1)
fmul st(2)
fadd qword [0x1005ffc0]
fstp qword [0x10066a58]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fstp dword [ebp - 8]
fld dword [ebp - 8]
fsub qword [0x1005ffb8]
fstp qword [0x10066a60]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fld qword [0x1005fd20]
fsub st(1), st(0)
fxch st(1)
fstp dword [0x10066a74]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub st(1)
fstp dword [0x10066a84]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub st(1)
fstp dword [0x10066a94]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsubrp st(1)
fstp dword [0x10066aa4]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fld qword [0x1005ffb0]
fsub st(1), st(0)
fxch st(1)
fstp dword [0x10066a70]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub st(1)
fstp dword [0x10066a80]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsub st(1)
fstp dword [0x10066a90]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fsubrp st(1)
fstp dword [0x10066aa0]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(1)
fmul st(2)
fadd qword [0x1005ffa8]
fstp dword [0x10066a68]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(1)
fmul st(2)
fadd qword [0x1005ffa0]
fstp dword [0x10066a6c]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(1)
fmul st(2)
fadd qword [0x1005ff98]
fstp dword [0x10066a78]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(1)
fmul st(2)
fadd qword [0x1005ff90]
fstp dword [0x10066a7c]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(1)
fmul st(2)
fadd qword [0x1005ff88]
fstp dword [0x10066a88]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(1)
fnstcw word [ebp - 2]
fmul st(2)
movzx eax, word [ebp - 2]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
fadd qword [0x1005ff80]
push 0x40
push 4
push 0x80f283
fstp dword [0x10066a8c]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsub st(1)
fmul st(2)
fadd qword [0x1005ff78]
fstp dword [0x10066a98]
fild dword [0xe61e58]
fdiv dword [0xe7c3d4]
fsubrp st(1)
fmulp st(1)
fadd qword [0x1005ff50]
fstp dword [0x10066a9c]
fild dword [0xe61e5c]
fdiv dword [0xe7c3d8]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f283], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f283
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810fde
fsub qword [0x1005f9f0]
fadd qword [0x1005ff70]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810fde], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810fde
call esi
fild dword [0xe61e5c]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d8]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
fsub qword [0x1005f9f0]
fadd qword [0x1005ff70]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
push 0x40
push 4
push 0x811887
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811887], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811887
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f27c
fsub qword [0x1005f9f8]
fmul qword [0x1005f950]
fadd qword [0x1005ff68]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f27c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f27c
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810fe3
fsub qword [0x1005f9f8]
fmul qword [0x1005f950]
fadd qword [0x1005fb20]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810fe3], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810fe3
call esi
fild dword [0xe61e58]
fnstcw word [ebp - 2]
movzx eax, word [ebp - 2]
fdiv dword [0xe7c3d4]
or eax, 0xc00
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
fsub qword [0x1005f9f8]
fmul qword [0x1005f950]
fadd qword [0x1005fb20]
fldcw word [ebp - 8]
fistp qword [ebp - 0xc]
mov edi, dword [ebp - 0xc]
fldcw word [ebp - 2]
push 0x40
push 4
push 0x81188c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81188c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81188c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810987
call esi
mov edi, 0x10066a38
lea ecx, [ebp - 4]
push ecx
mov dword [0x810987], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810987
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810b52
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810b52], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810b52
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810c96
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810c96], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810c96
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810e5d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810e5d], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810e5d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810f5a
call esi
lea ecx, [ebp - 4]
mov dword [0x810f5a], edi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x810f5a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x811210
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811210], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811210
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8113e9
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8113e9], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8113e9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x811533
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811533], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811533
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8116fa
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8116fa], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8116fa
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x811803
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811803], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811803
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81097e
call esi
mov edi, 0x10066a40
mov dword [0x81097e], edi
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x81097e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810b49
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810b49], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810b49
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810c8d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810c8d], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810c8d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810e54
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810e54], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810e54
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810f51
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810f51], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810f51
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x811207
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811207], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811207
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8113e0
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8113e0], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8113e0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81152a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81152a], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81152a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8116f1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8116f1], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8116f1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8117fa
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8117fa], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8117fa
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810993
call esi
mov edi, 0x10066a48
lea ecx, [ebp - 4]
push ecx
mov dword [0x810993], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810993
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810b5e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810b5e], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810b5e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810ca5
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810ca5], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810ca5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810d45
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810d45], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810d45
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810e69
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810e69], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810e69
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810f63
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810f63], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810f63
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81121f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81121f], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81121f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8113f8
call esi
lea ecx, [ebp - 4]
mov dword [0x8113f8], edi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x8113f8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x811542
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811542], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811542
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8115e2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8115e2], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8115e2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x811709
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811709], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811709
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81180c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81180c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81180c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8107c8
call esi
mov edi, 0x10066a50
lea ecx, [ebp - 4]
push ecx
mov dword [0x8107c8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8107c8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81099c
call esi
mov dword [0x81099c], edi
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x81099c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810b67
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810b67], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810b67
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810cae
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810cae], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810cae
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810e72
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810e72], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810e72
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810f6c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810f6c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810f6c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81100d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81100d], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81100d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x811228
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811228], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811228
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x811401
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811401], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811401
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81154b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81154b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81154b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x811712
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811712], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811712
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x811815
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x811815], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x811815
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810f05
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x810f05], 0x10066a58
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810f05
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x810f0e
call esi
mov edi, 0x10066a60
lea ecx, [ebp - 4]
push ecx
mov dword [0x810f0e], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x810f0e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8117ab
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8117ab], 0x10066a58
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8117ab
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8117b4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8117b4], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8117b4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f940
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f940], 0x101de170
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f940
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f97b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f97b], 0x101de174
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f97b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f9da
call esi
lea ecx, [ebp - 4]
mov dword [0x80f9da], 0x101de178
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x80f9da
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895a69
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895a69], 0x10066a68
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895a69
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895a55
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895a55], 0x10066a6c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895a55
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895ade
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895ade], 0x10066a78
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895ade
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895aca
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895aca], 0x10066a7c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895aca
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895b53
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895b53], 0x10066a88
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895b53
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895b3f
call esi
lea ecx, [ebp - 4]
mov dword [0x895b3f], 0x10066a8c
push ecx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895b3f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895bc8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895bc8], 0x10066a98
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895bc8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895bb4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895bb4], 0x10066a9c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895bb4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895a4b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895a4b], 0x10066a70
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895a4b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895ac0
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895ac0], 0x10066a80
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895ac0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895b35
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895b35], 0x10066a90
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895b35
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895baa
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895baa], 0x10066aa0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895baa
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895a5f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895a5f], 0x10066a74
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895a5f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895ad4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895ad4], 0x10066a84
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895ad4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895b49
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895b49], 0x10066a94
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895b49
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x895bbe
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x895bbe], 0x10066aa4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x895bbe
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret