Function at 0x10009d10
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x10048434]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1008e038]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1008eb30]
cmp eax, dword [ecx + 4]
jle 0x10009d73
push 0x1008eb30
call fcn.100141c2
add esp, 4
cmp dword [0x1008eb30], 0xffffffff
jne 0x10009d73
push 0x10034b30
mov dword [0x1008eb34], 0x10041c34
call fcn.1001459d
push 0x1008eb30
call fcn.10014178
add esp, 8
push ebx
push esi
push edi
call fcn.1000d5a0
call fcn.100063d0
push 0x10036e62
push 7
mov dword [ebp - 8], 0
call fcn.100145b2
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov edx, 0x90909090
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10009e1d
mov ecx, 0x1000b4c0
mov byte [eax], 0xe9
sub ecx, 0x4548b4
mov dword [eax + 1], ecx
mov word [eax + 5], dx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x4548af
call esi
test eax, eax
je 0x10009e1d
mov ecx, dword [ebp - 0xc]
mov edx, 0x4548af
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x10009e1d
push 7
push 0x4548af
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10009e97
mov ecx, 0x1000b4f0
mov byte [eax], 0xe9
sub ecx, 0x449dd5
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x449dd0
call esi
test eax, eax
je 0x10009e97
mov ecx, dword [ebp - 0xc]
mov edx, 0x449dd0
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x10009e97
push 5
push 0x449dd0
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 9
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10009f1c
mov ecx, 0x1000b570
mov byte [eax], 0xe9
sub ecx, 0x47df46
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x47df41
call esi
test eax, eax
je 0x10009f1c
mov eax, dword [ebp - 0xc]
mov ecx, 0x47df41
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x10009f1c
push 9
push 0x47df41
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 7
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10009fa7
mov ecx, 0x1000b5d0
mov byte [eax], 0xe9
sub ecx, 0x40c660
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x40c65b
call esi
test eax, eax
je 0x10009fa7
mov ecx, dword [ebp - 0xc]
mov edx, 0x40c65b
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x10009fa7
push 7
push 0x40c65b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a027
mov ecx, 0x1000b660
mov byte [eax], 0xe9
sub ecx, 0x403787
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x403782
call esi
test eax, eax
je 0x1000a027
mov ecx, dword [ebp - 0xc]
mov edx, 0x403782
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a027
push 6
push 0x403782
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 9
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a0ac
mov ecx, 0x1000b790
mov byte [eax], 0xe9
sub ecx, 0x402339
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x402334
call esi
test eax, eax
je 0x1000a0ac
mov eax, dword [ebp - 0xc]
mov ecx, 0x402334
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000a0ac
push 9
push 0x402334
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 7
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a137
mov ecx, 0x1000b740
mov byte [eax], 0xe9
sub ecx, 0x403882
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x40387d
call esi
test eax, eax
je 0x1000a137
mov ecx, dword [ebp - 0xc]
mov edx, 0x40387d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000a137
push 7
push 0x40387d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x54833a
call esi
test eax, eax
je 0x1000a168
lea eax, [ebp - 8]
mov byte [0x54833a], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x54833a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x539a34
call esi
test eax, eax
je 0x1000a199
lea eax, [ebp - 8]
mov byte [0x539a34], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x539a34
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x539b1c
call esi
test eax, eax
je 0x1000a1ca
lea eax, [ebp - 8]
mov byte [0x539b1c], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x539b1c
call esi
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a243
mov byte [eax], 0xe9
mov dword [eax + 1], 0x8e
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x51dce1
call esi
test eax, eax
je 0x1000a243
mov ecx, dword [ebp - 0xc]
mov edx, 0x51dce1
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a243
push 6
push 0x51dce1
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a2bc
mov byte [eax], 0xe9
mov dword [eax + 1], 0xb1
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x52f02d
call esi
test eax, eax
je 0x1000a2bc
mov ecx, dword [ebp - 0xc]
mov edx, 0x52f02d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a2bc
push 6
push 0x52f02d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54833a
call esi
test eax, eax
je 0x1000a2ed
lea eax, [ebp - 8]
mov byte [0x54833a], 0xeb
push eax
push dword [ebp - 8]
push 4
push 0x54833a
call esi
push 0x10036e62
push 9
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a372
mov ecx, 0x1000b930
mov byte [eax], 0xe9
sub ecx, 0x420830
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x42082b
call esi
test eax, eax
je 0x1000a372
mov eax, dword [ebp - 0xc]
mov ecx, 0x42082b
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000a372
push 9
push 0x42082b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a3e5
mov byte [eax], 0xe9
mov dword [eax + 1], 1
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x539c48
call esi
test eax, eax
je 0x1000a3e5
mov ecx, dword [ebp - 0xc]
mov edx, 0x539c48
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a3e5
push 5
push 0x539c48
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a458
mov byte [eax], 0xe9
mov dword [eax + 1], 4
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x539b1c
call esi
test eax, eax
je 0x1000a458
mov ecx, dword [ebp - 0xc]
mov edx, 0x539b1c
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a458
push 5
push 0x539b1c
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a4cb
mov byte [eax], 0xe9
mov dword [eax + 1], 5
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4404de
call esi
test eax, eax
je 0x1000a4cb
mov ecx, dword [ebp - 0xc]
mov edx, 0x4404de
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a4cb
push 5
push 0x4404de
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 7
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a556
mov ecx, 0x1000b830
mov byte [eax], 0xe9
sub ecx, 0x425a9b
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x425a96
call esi
test eax, eax
je 0x1000a556
mov ecx, dword [ebp - 0xc]
mov edx, 0x425a96
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000a556
push 7
push 0x425a96
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 0xa
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a5e1
mov byte [eax], 0xe9
mov ecx, 0x1000b860
sub ecx, 0x423704
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
mov byte [eax + 9], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4236ff
call esi
test eax, eax
je 0x1000a5e1
mov eax, dword [ebp - 0xc]
mov ecx, 0x4236ff
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov ax, word [eax + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push ecx
call esi
test eax, eax
je 0x1000a5e1
push 0xa
push 0x4236ff
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 9
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a666
mov ecx, 0x1000bc10
mov byte [eax], 0xe9
sub ecx, 0x423f6e
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x423f69
call esi
test eax, eax
je 0x1000a666
mov eax, dword [ebp - 0xc]
mov ecx, 0x423f69
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000a666
push 9
push 0x423f69
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a6e6
mov ecx, 0x1000b800
mov byte [eax], 0xe9
sub ecx, 0x4211ab
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4211a6
call esi
test eax, eax
je 0x1000a6e6
mov ecx, dword [ebp - 0xc]
mov edx, 0x4211a6
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a6e6
push 6
push 0x4211a6
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 9
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a76b
mov ecx, 0x1000bc50
mov byte [eax], 0xe9
sub ecx, 0x40cd32
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x40cd2d
call esi
test eax, eax
je 0x1000a76b
mov eax, dword [ebp - 0xc]
mov ecx, 0x40cd2d
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000a76b
push 9
push 0x40cd2d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 9
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a7e9
mov byte [eax], 0xe9
mov dword [eax + 1], 0x15
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x40cd75
call esi
test eax, eax
je 0x1000a7e9
mov eax, dword [ebp - 0xc]
mov ecx, 0x40cd75
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000a7e9
push 9
push 0x40cd75
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a867
mov ecx, 0x1000b7e0
mov word [eax], 0x8d0f
sub ecx, 0x428baf
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x428ba9
call esi
test eax, eax
je 0x1000a867
mov ecx, dword [ebp - 0xc]
mov edx, 0x428ba9
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a867
push 6
push 0x428ba9
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a8e1
mov ecx, 0x1000b7b0
mov byte [eax], 0xe9
sub ecx, 0x428ff2
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x428fed
call esi
test eax, eax
je 0x1000a8e1
mov ecx, dword [ebp - 0xc]
mov edx, 0x428fed
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a8e1
push 5
push 0x428fed
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x477a8d
call esi
test eax, eax
je 0x1000a912
lea eax, [ebp - 8]
mov byte [0x477a8d], 0x1f
push eax
push dword [ebp - 8]
push 1
push 0x477a8d
call esi
push 0x10036e62
push 7
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a99d
mov ecx, 0x1000bbd0
mov byte [eax], 0xe9
sub ecx, 0x46ed60
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x46ed5b
call esi
test eax, eax
je 0x1000a99d
mov ecx, dword [ebp - 0xc]
mov edx, 0x46ed5b
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000a99d
push 7
push 0x46ed5b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000aa1b
mov ecx, 0x1000bc70
mov word [eax], 0x840f
sub ecx, 0x49b3a0
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x49b39a
call esi
test eax, eax
je 0x1000aa1b
mov ecx, dword [ebp - 0xc]
mov edx, 0x49b39a
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000aa1b
push 6
push 0x49b39a
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000aa99
mov ecx, 0x1000bc70
mov word [eax], 0x840f
sub ecx, 0x49b3b0
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x49b3aa
call esi
test eax, eax
je 0x1000aa99
mov ecx, dword [ebp - 0xc]
mov edx, 0x49b3aa
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000aa99
push 6
push 0x49b3aa
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ab13
mov ecx, 0x1000bd30
mov byte [eax], 0xe9
sub ecx, 0x46ec8f
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x46ec8a
call esi
test eax, eax
je 0x1000ab13
mov ecx, dword [ebp - 0xc]
mov edx, 0x46ec8a
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000ab13
push 5
push 0x46ec8a
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x60aa00
call esi
test eax, eax
je 0x1000ab47
lea eax, [ebp - 8]
mov dword [0x60aa00], 0x1e
push eax
push dword [ebp - 8]
push 4
push 0x60aa00
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x60aa04
call esi
test eax, eax
je 0x1000ab7b
lea eax, [ebp - 8]
mov dword [0x60aa04], 0x1e
push eax
push dword [ebp - 8]
push 4
push 0x60aa04
call esi
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000abf5
mov ecx, 0x1000bd00
mov byte [eax], 0xe9
sub ecx, 0x4df20d
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4df208
call esi
test eax, eax
je 0x1000abf5
mov ecx, dword [ebp - 0xc]
mov edx, 0x4df208
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000abf5
push 5
push 0x4df208
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ac75
mov ecx, 0x1000bcd0
mov byte [eax], 0xe9
sub ecx, 0x4e0462
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4e045d
call esi
test eax, eax
je 0x1000ac75
mov ecx, dword [ebp - 0xc]
mov edx, 0x4e045d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000ac75
push 6
push 0x4e045d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 9
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000acfa
mov ecx, 0x1000bc90
mov byte [eax], 0xe9
sub ecx, 0x4ccbe1
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x4ccbdc
call esi
test eax, eax
je 0x1000acfa
mov eax, dword [ebp - 0xc]
mov ecx, 0x4ccbdc
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov al, byte [eax + 8]
mov byte [ecx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push ecx
call esi
test eax, eax
je 0x1000acfa
push 9
push 0x4ccbdc
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ad7a
mov ecx, 0x1000bdd0
mov byte [eax], 0xe9
sub ecx, 0x424f1e
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x424f19
call esi
test eax, eax
je 0x1000ad7a
mov ecx, dword [ebp - 0xc]
mov edx, 0x424f19
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000ad7a
push 6
push 0x424f19
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000adfa
mov ecx, 0x1000be30
mov byte [eax], 0xe9
sub ecx, 0x4bac64
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4bac5f
call esi
test eax, eax
je 0x1000adfa
mov ecx, dword [ebp - 0xc]
mov edx, 0x4bac5f
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000adfa
push 6
push 0x4bac5f
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 0xa
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ae85
mov byte [eax], 0xe9
mov ecx, 0x1000be70
sub ecx, 0x47dbb4
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
mov byte [eax + 9], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x47dbaf
call esi
test eax, eax
je 0x1000ae85
mov eax, dword [ebp - 0xc]
mov ecx, 0x47dbaf
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov ax, word [eax + 8]
mov word [ecx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push ecx
call esi
test eax, eax
je 0x1000ae85
push 0xa
push 0x47dbaf
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000af05
mov ecx, 0x1000bed0
mov byte [eax], 0xe9
sub ecx, 0x44e7ea
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x44e7e5
call esi
test eax, eax
je 0x1000af05
mov ecx, dword [ebp - 0xc]
mov edx, 0x44e7e5
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000af05
push 6
push 0x44e7e5
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000af7f
mov ecx, 0x1000bef0
mov byte [eax], 0xe9
sub ecx, 0x44534b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x445346
call esi
test eax, eax
je 0x1000af7f
mov ecx, dword [ebp - 0xc]
mov edx, 0x445346
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000af7f
push 5
push 0x445346
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 7
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b00a
mov ecx, 0x1000bf30
mov byte [eax], 0xe9
sub ecx, 0x50d5bd
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x50d5b8
call esi
test eax, eax
je 0x1000b00a
mov ecx, dword [ebp - 0xc]
mov edx, 0x50d5b8
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000b00a
push 7
push 0x50d5b8
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b08a
mov ecx, 0x1000bf80
mov byte [eax], 0xe9
sub ecx, 0x4abcc0
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4abcbb
call esi
test eax, eax
je 0x1000b08a
mov ecx, dword [ebp - 0xc]
mov edx, 0x4abcbb
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b08a
push 6
push 0x4abcbb
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b104
mov ecx, 0x1000bfb0
mov byte [eax], 0xe9
sub ecx, 0x50ee5b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50ee56
call esi
test eax, eax
je 0x1000b104
mov ecx, dword [ebp - 0xc]
mov edx, 0x50ee56
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b104
push 5
push 0x50ee56
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 7
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b18f
mov ecx, 0x1000bfe0
mov byte [eax], 0xe9
sub ecx, 0x53cddd
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x53cdd8
call esi
test eax, eax
je 0x1000b18f
mov ecx, dword [ebp - 0xc]
mov edx, 0x53cdd8
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000b18f
push 7
push 0x53cdd8
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b209
mov ecx, 0x1000c030
mov byte [eax], 0xe9
sub ecx, 0x50f45b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50f456
call esi
test eax, eax
je 0x1000b209
mov ecx, dword [ebp - 0xc]
mov edx, 0x50f456
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b209
push 5
push 0x50f456
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 5
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b283
mov ecx, 0x1000c060
mov byte [eax], 0xe9
sub ecx, 0x50ddcc
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50ddc7
call esi
test eax, eax
je 0x1000b283
mov ecx, dword [ebp - 0xc]
mov edx, 0x50ddc7
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b283
push 5
push 0x50ddc7
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x42aaf9
call esi
test eax, eax
je 0x1000b2b7
lea eax, [ebp - 8]
mov dword [0x42aaf9], 0
push eax
push dword [ebp - 8]
push 4
push 0x42aaf9
call esi
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b337
mov ecx, 0x10007e70
mov byte [eax], 0xe9
sub ecx, 0x5419e0
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x5419db
call esi
test eax, eax
je 0x1000b337
mov ecx, dword [ebp - 0xc]
mov edx, 0x5419db
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b337
push 6
push 0x5419db
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x46eced
call esi
test eax, eax
je 0x1000b36b
lea eax, [ebp - 8]
mov dword [0x46eced], 0
push eax
push dword [ebp - 8]
push 4
push 0x46eced
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547cac
call esi
test eax, eax
je 0x1000b39f
lea eax, [ebp - 8]
mov dword [0x547cac], 0
push eax
push dword [ebp - 8]
push 4
push 0x547cac
call esi
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b41f
mov ecx, 0x1000c090
mov byte [eax], 0xe9
sub ecx, 0x44bb21
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x44bb1c
call esi
test eax, eax
je 0x1000b41f
mov ecx, dword [ebp - 0xc]
mov edx, 0x44bb1c
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b41f
push 6
push 0x44bb1c
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
push 0x10036e62
push 6
mov dword [ebp - 8], 0
call fcn.100145b2
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b49f
mov ecx, 0x1000c0e0
mov byte [eax], 0xe9
sub ecx, 0x47d3da
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x47d3d5
call esi
test eax, eax
je 0x1000b49f
mov ecx, dword [ebp - 0xc]
mov edx, 0x47d3d5
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b49f
push 6
push 0x47d3d5
call ebx
push eax
call edi
push dword [ebp - 0xc]
call fcn.10014029
add esp, 4
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1001401b
mov esp, ebp
pop ebp
ret