Function at 0x10070a90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1013c018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push esi
push edi
push eax
push 0x40
push 4
push 0xd27bfc
mov edi, ecx
call ebx
lea eax, [ebp - 8]
mov dword [0xd27bfc], 0x42140000
push eax
push dword [ebp - 8]
push 4
push 0xd27bfc
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd2570c
call ebx
lea eax, [ebp - 8]
mov dword [0xd2570c], 0x451c4000
push eax
push dword [ebp - 8]
push 4
push 0xd2570c
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd2c894
call ebx
lea eax, [ebp - 8]
mov dword [0xd2c894], 0x451c4000
push eax
push dword [ebp - 8]
push 4
push 0xd2c894
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x48e201
call ebx
lea eax, [ebp - 8]
mov dword [0x48e201], 0x1014abb0
push eax
push dword [ebp - 8]
push 4
push 0x48e201
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77296a
call ebx
lea eax, [ebp - 8]
mov dword [0x77296a], 0x1014abb0
push eax
push dword [ebp - 8]
push 4
push 0x77296a
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7c70a0
call ebx
lea eax, [ebp - 8]
mov dword [0x7c70a0], 0x1014abb0
push eax
push dword [ebp - 8]
push 4
push 0x7c70a0
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x85458f
call ebx
lea eax, [ebp - 8]
mov dword [0x85458f], 0x1014abb0
push eax
push dword [ebp - 8]
push 4
push 0x85458f
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8cc615
call ebx
lea eax, [ebp - 8]
mov dword [0x8cc615], 0x1014abb0
push eax
push dword [ebp - 8]
push 4
push 0x8cc615
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x943c70
call ebx
lea eax, [ebp - 8]
mov dword [0x943c70], 0x1014abb0
push eax
push dword [ebp - 8]
push 4
push 0x943c70
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x62ca67
call ebx
lea eax, [ebp - 8]
mov dword [0x62ca67], 0x1014abac
push eax
push dword [ebp - 8]
push 4
push 0x62ca67
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x62cac8
call ebx
lea eax, [ebp - 8]
mov dword [0x62cac8], 0x1014abac
push eax
push dword [ebp - 8]
push 4
push 0x62cac8
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x62cb17
call ebx
lea eax, [ebp - 8]
mov dword [0x62cb17], 0x1014abac
push eax
push dword [ebp - 8]
push 4
push 0x62cb17
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x574fcd
call ebx
lea eax, [ebp - 8]
mov dword [0x574fcd], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x574fcd
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x57509b
call ebx
lea eax, [ebp - 8]
mov dword [0x57509b], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x57509b
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x575245
call ebx
lea eax, [ebp - 8]
mov dword [0x575245], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x575245
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x57527a
call ebx
lea eax, [ebp - 8]
mov dword [0x57527a], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x57527a
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x57538e
call ebx
lea eax, [ebp - 8]
mov dword [0x57538e], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x57538e
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5753c3
call ebx
lea eax, [ebp - 8]
mov dword [0x5753c3], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x5753c3
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5754d7
call ebx
lea eax, [ebp - 8]
mov dword [0x5754d7], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x5754d7
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x57550c
call ebx
lea eax, [ebp - 8]
mov dword [0x57550c], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x57550c
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x57568e
call ebx
lea eax, [ebp - 8]
mov dword [0x57568e], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x57568e
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x575756
call ebx
lea eax, [ebp - 8]
mov dword [0x575756], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x575756
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5758c5
call ebx
lea eax, [ebp - 8]
mov dword [0x5758c5], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x5758c5
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5758fa
call ebx
lea eax, [ebp - 8]
mov dword [0x5758fa], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x5758fa
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x58885c
call ebx
mov dword [0x58885c], 0x1014aba8
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x58885c
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b9b61
call ebx
lea eax, [ebp - 8]
mov dword [0x5b9b61], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x5b9b61
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b9c67
call ebx
lea eax, [ebp - 8]
mov dword [0x5b9c67], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x5b9c67
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5dd586
call ebx
lea eax, [ebp - 8]
mov dword [0x5dd586], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x5dd586
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x62c9f7
call ebx
lea eax, [ebp - 8]
mov dword [0x62c9f7], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x62c9f7
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x63d256
call ebx
lea eax, [ebp - 8]
mov dword [0x63d256], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x63d256
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x63d497
call ebx
lea eax, [ebp - 8]
mov dword [0x63d497], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x63d497
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7ef34a
call ebx
lea eax, [ebp - 8]
mov dword [0x7ef34a], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x7ef34a
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81b021
call ebx
lea eax, [ebp - 8]
mov dword [0x81b021], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x81b021
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81b050
call ebx
lea eax, [ebp - 8]
mov dword [0x81b050], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x81b050
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81b073
call ebx
lea eax, [ebp - 8]
mov dword [0x81b073], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x81b073
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81b0da
call ebx
lea eax, [ebp - 8]
mov dword [0x81b0da], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x81b0da
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81b106
call ebx
lea eax, [ebp - 8]
mov dword [0x81b106], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x81b106
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82ac8b
call ebx
lea eax, [ebp - 8]
mov dword [0x82ac8b], 0x1014aba8
push eax
push dword [ebp - 8]
push 4
push 0x82ac8b
call ebx
push 0x10070640
push 0x4d8514
push 0xe9
call fcn.100866a0
push 0x10070980
push 0x4d1cf0
push 0xe9
call fcn.100866a0
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x420260
call ebx
lea eax, [ebp - 8]
push eax
lea esi, [edi + 0x18]
mov dword [0x420260], esi
push dword [ebp - 8]
push 4
push 0x420260
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x42053f
call ebx
lea eax, [ebp - 8]
mov dword [0x42053f], esi
push eax
push dword [ebp - 8]
push 4
push 0x42053f
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b1e7
call ebx
lea eax, [ebp - 8]
mov dword [0x82b1e7], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b1e7
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b2b8
call ebx
lea eax, [ebp - 8]
mov dword [0x82b2b8], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b2b8
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b3a4
call ebx
lea eax, [ebp - 8]
mov dword [0x82b3a4], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b3a4
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8b4fad
call ebx
lea eax, [ebp - 8]
mov dword [0x8b4fad], esi
push eax
push dword [ebp - 8]
push 4
push 0x8b4fad
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8b50cd
call ebx
lea eax, [ebp - 8]
mov dword [0x8b50cd], esi
push eax
push dword [ebp - 8]
push 4
push 0x8b50cd
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d146e
call ebx
lea eax, [ebp - 8]
mov dword [0x4d146e], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d146e
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7199
call ebx
lea eax, [ebp - 8]
mov dword [0x4d7199], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d7199
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7a31
call ebx
lea eax, [ebp - 8]
mov dword [0x4d7a31], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d7a31
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d990f
call ebx
lea eax, [ebp - 8]
mov dword [0x4d990f], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d990f
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db1bd
call ebx
lea eax, [ebp - 8]
mov dword [0x5db1bd], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db1bd
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db242
call ebx
lea eax, [ebp - 8]
mov dword [0x5db242], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db242
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db335
call ebx
lea eax, [ebp - 8]
mov dword [0x5db335], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db335
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db3ba
call ebx
lea eax, [ebp - 8]
mov dword [0x5db3ba], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db3ba
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db480
call ebx
lea eax, [ebp - 8]
mov dword [0x5db480], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db480
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db4c0
call ebx
lea eax, [ebp - 8]
mov dword [0x5db4c0], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db4c0
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db4e8
call ebx
lea eax, [ebp - 8]
mov dword [0x5db4e8], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db4e8
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db547
call ebx
lea eax, [ebp - 8]
mov dword [0x5db547], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db547
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db5d7
call ebx
lea eax, [ebp - 8]
mov dword [0x5db5d7], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db5d7
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db63b
call ebx
lea eax, [ebp - 8]
mov dword [0x5db63b], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db63b
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db69f
call ebx
lea eax, [ebp - 8]
mov dword [0x5db69f], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db69f
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x596b8b
call ebx
lea eax, [ebp - 8]
mov dword [0x596b8b], esi
push eax
push dword [ebp - 8]
push 4
push 0x596b8b
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6387b9
call ebx
lea eax, [ebp - 8]
mov dword [0x6387b9], esi
push eax
push dword [ebp - 8]
push 4
push 0x6387b9
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x779a7c
call ebx
lea eax, [ebp - 8]
mov dword [0x779a7c], esi
push eax
push dword [ebp - 8]
push 4
push 0x779a7c
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x779c59
call ebx
lea eax, [ebp - 8]
mov dword [0x779c59], esi
push eax
push dword [ebp - 8]
push 4
push 0x779c59
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77a648
call ebx
lea eax, [ebp - 8]
mov dword [0x77a648], esi
push eax
push dword [ebp - 8]
push 4
push 0x77a648
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x787a60
call ebx
lea eax, [ebp - 8]
mov dword [0x787a60], esi
push eax
push dword [ebp - 8]
push 4
push 0x787a60
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7918b2
call ebx
lea eax, [ebp - 8]
mov dword [0x7918b2], esi
push eax
push dword [ebp - 8]
push 4
push 0x7918b2
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b940
call ebx
lea eax, [ebp - 8]
mov dword [0x82b940], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b940
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x88e320
call ebx
lea eax, [ebp - 8]
mov dword [0x88e320], esi
push eax
push dword [ebp - 8]
push 4
push 0x88e320
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7c0565
call ebx
lea eax, [ebp - 8]
push eax
lea esi, [edi + 0x20]
mov dword [0x7c0565], esi
push dword [ebp - 8]
push 4
push 0x7c0565
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x80f905
call ebx
lea eax, [ebp - 8]
mov dword [0x80f905], esi
push eax
push dword [ebp - 8]
push 4
push 0x80f905
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b391
call ebx
lea eax, [ebp - 8]
mov dword [0x82b391], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b391
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b320
call ebx
lea eax, [ebp - 8]
mov dword [0x82b320], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b320
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b0dd
call ebx
mov dword [0x82b0dd], esi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x82b0dd
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8b4fbf
call ebx
lea eax, [ebp - 8]
mov dword [0x8b4fbf], esi
push eax
push dword [ebp - 8]
push 4
push 0x8b4fbf
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8b50df
call ebx
lea eax, [ebp - 8]
mov dword [0x8b50df], esi
push eax
push dword [ebp - 8]
push 4
push 0x8b50df
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d1496
call ebx
lea eax, [ebp - 8]
mov dword [0x4d1496], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d1496
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x596b97
call ebx
lea eax, [ebp - 8]
mov dword [0x596b97], esi
push eax
push dword [ebp - 8]
push 4
push 0x596b97
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6387f2
call ebx
lea eax, [ebp - 8]
mov dword [0x6387f2], esi
push eax
push dword [ebp - 8]
push 4
push 0x6387f2
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x63882a
call ebx
lea eax, [ebp - 8]
mov dword [0x63882a], esi
push eax
push dword [ebp - 8]
push 4
push 0x63882a
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6388be
call ebx
lea eax, [ebp - 8]
mov dword [0x6388be], esi
push eax
push dword [ebp - 8]
push 4
push 0x6388be
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x779aa2
call ebx
lea eax, [ebp - 8]
mov dword [0x779aa2], esi
push eax
push dword [ebp - 8]
push 4
push 0x779aa2
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x779c7f
call ebx
lea eax, [ebp - 8]
mov dword [0x779c7f], esi
push eax
push dword [ebp - 8]
push 4
push 0x779c7f
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77a66e
call ebx
lea eax, [ebp - 8]
mov dword [0x77a66e], esi
push eax
push dword [ebp - 8]
push 4
push 0x77a66e
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x787a95
call ebx
lea eax, [ebp - 8]
mov dword [0x787a95], esi
push eax
push dword [ebp - 8]
push 4
push 0x787a95
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7918d8
call ebx
lea eax, [ebp - 8]
mov dword [0x7918d8], esi
push eax
push dword [ebp - 8]
push 4
push 0x7918d8
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b965
call ebx
lea eax, [ebp - 8]
mov dword [0x82b965], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b965
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x88e350
call ebx
lea eax, [ebp - 8]
mov dword [0x88e350], esi
push eax
push dword [ebp - 8]
push 4
push 0x88e350
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82abf4
call ebx
lea eax, [ebp - 8]
push eax
lea esi, [edi + 0x10]
mov dword [0x82abf4], esi
push dword [ebp - 8]
push 4
push 0x82abf4
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82401b
call ebx
lea eax, [ebp - 8]
mov dword [0x82401b], esi
push eax
push dword [ebp - 8]
push 4
push 0x82401b
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b97c4
call ebx
lea eax, [ebp - 8]
mov dword [0x5b97c4], esi
push eax
push dword [ebp - 8]
push 4
push 0x5b97c4
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b9834
call ebx
lea eax, [ebp - 8]
mov dword [0x5b9834], esi
push eax
push dword [ebp - 8]
push 4
push 0x5b9834
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b98ec
call ebx
lea eax, [ebp - 8]
mov dword [0x5b98ec], esi
push eax
push dword [ebp - 8]
push 4
push 0x5b98ec
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8c2df7
call ebx
lea eax, [ebp - 8]
mov dword [0x8c2df7], esi
push eax
push dword [ebp - 8]
push 4
push 0x8c2df7
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8c2e67
call ebx
lea eax, [ebp - 8]
mov dword [0x8c2e67], esi
push eax
push dword [ebp - 8]
push 4
push 0x8c2e67
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8cc6fb
call ebx
lea eax, [ebp - 8]
mov dword [0x8cc6fb], esi
push eax
push dword [ebp - 8]
push 4
push 0x8cc6fb
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8cc770
call ebx
lea eax, [ebp - 8]
mov dword [0x8cc770], esi
push eax
push dword [ebp - 8]
push 4
push 0x8cc770
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8d99a0
call ebx
lea eax, [ebp - 8]
mov dword [0x8d99a0], esi
push eax
push dword [ebp - 8]
push 4
push 0x8d99a0
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8d9a15
call ebx
lea eax, [ebp - 8]
mov dword [0x8d9a15], esi
push eax
push dword [ebp - 8]
push 4
push 0x8d9a15
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8ef463
call ebx
lea eax, [ebp - 8]
mov dword [0x8ef463], esi
push eax
push dword [ebp - 8]
push 4
push 0x8ef463
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8ef4d5
call ebx
lea eax, [ebp - 8]
mov dword [0x8ef4d5], esi
push eax
push dword [ebp - 8]
push 4
push 0x8ef4d5
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8ef5ad
call ebx
lea eax, [ebp - 8]
mov dword [0x8ef5ad], esi
push eax
push dword [ebp - 8]
push 4
push 0x8ef5ad
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8ef642
call ebx
lea eax, [ebp - 8]
mov dword [0x8ef642], esi
push eax
push dword [ebp - 8]
push 4
push 0x8ef642
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x914fb1
call ebx
lea eax, [ebp - 8]
mov dword [0x914fb1], esi
push eax
push dword [ebp - 8]
push 4
push 0x914fb1
call ebx
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x915026
call ebx
mov dword [0x915026], esi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x915026
call ebx
push 0x10070680
push 0x86f25c
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x86f298
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x86f2d4
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x88d9f3
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x88da2f
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x88da79
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070680
push 0x88dabd
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x88db41
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x88db74
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x88dba7
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x88dbda
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x8dbf89
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070680
push 0x8dbfca
push 0xe8
call fcn.100866a0
push 0x10070680
push 0x8dc00a
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7bf4e8
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7bf54f
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7bfddf
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7bfd44
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070800
push 0x7bfd8d
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7bfc87
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7bfcca
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7c0094
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7bffc1
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7c0029
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070800
push 0x7bfed2
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7bff2e
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7c02c0
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7c0225
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7c026e
push 0xe8
call fcn.100866a0
push 0x10070800
push 0x7c0168
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070800
push 0x7c01ab
push 0xe8
call fcn.100866a0
push 0x10070880
push 0x7bfbb3
push 0xe8
call fcn.100866a0
push 0x10070880
push 0x7bfa42
push 0xe8
call fcn.100866a0
push 0x10070880
push 0x7bfafe
push 0xe8
call fcn.100866a0
push 0x10070880
push 0x7bf8c4
push 0xe8
call fcn.100866a0
push 0x10070880
push 0x7bf968
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070700
push 0x7bf3e3
push 0xe8
call fcn.100866a0
push 0x1006fdd0
push 0x636420
push 0xe9
call fcn.100866a0
push 0x1006fde0
push 0x636450
push 0xe9
call fcn.100866a0
push 0x100705c0
push 0x857746
push 0xe8
call fcn.100866a0
push 0x1006eef0
push 0x4d2180
push 0xe8
call fcn.100866a0
push 0x10070930
push 0x4e7690
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070930
push 0x4e775e
push 0xe8
call fcn.100866a0
push 0x1006ff00
push 0x81a146
push 0xe8
call fcn.100866a0
push 0x1006ff00
push 0x81a199
push 0xe8
call fcn.100866a0
push 0x1006fdf0
push 0x819415
push 0xe8
call fcn.100866a0
push 0x1006fe80
push 0x81aa9c
push 0xe8
call fcn.100866a0
push 0x1006fe80
push 0x81aa42
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x1006fe80
push 0x81a9e8
push 0xe8
call fcn.100866a0
push 0x1006fe80
push 0x81a977
push 0xe8
call fcn.100866a0
push 0x1006fe80
push 0x81a944
push 0xe8
call fcn.100866a0
push 0x1006fe80
push 0x81a73d
push 0xe8
call fcn.100866a0
push 0x1006fe80
push 0x81a6f4
push 0xe8
call fcn.100866a0
push 0x1006ff40
push 0x943d7f
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x1006ffe0
push 0x8240a9
push 0xe8
call fcn.100866a0
push 0x10070080
push 0x945114
push 0xe8
call fcn.100866a0
push 0x10070050
push 0x945180
push 0xe8
call fcn.100866a0
push 0x10070110
push 0x85c446
push 0xe8
call fcn.100866a0
push 0x10070190
push 0x9448c2
push 0xe8
call fcn.100866a0
push 0x10070190
push 0x81944b
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070460
push 0x7c57b9
push 0xe8
call fcn.100866a0
push 0x100704a0
push 0x4d7c0d
push 0xe8
call fcn.100866a0
push 0x100704a0
push 0x4d7c98
push 0xe8
call fcn.100866a0
push 0x100703e0
push 0x7d5e92
push 0xe8
call fcn.100866a0
push 0x100702a0
push 0x7d60b0
push 0xe8
call fcn.100866a0
push 0x100703a0
push 0x7d5df4
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070360
push 0x7d5d56
push 0xe8
call fcn.100866a0
push 0x10070220
push 0x7d6150
push 0xe8
call fcn.100866a0
push 0x100702e0
push 0x7d5fce
push 0xe8
call fcn.100866a0
push 0x100701e0
push 0x7d6060
push 0xe8
call fcn.100866a0
push 0x10070260
push 0x856486
push 0xe8
call fcn.100866a0
push 0x10070260
push 0x85f1b9
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070320
push 0x7d5f30
push 0xe8
call fcn.100866a0
push 0x10070420
push 0x7d5ee0
push 0xe8
call fcn.100866a0
push 0x10070420
push 0x7d5e42
push 0xe8
call fcn.100866a0
push 0x10070420
push 0x7d5da4
push 0xe8
call fcn.100866a0
push 0x10070420
push 0x7d61ef
push 0xe8
call fcn.100866a0
push 0x10070420
push 0x7d6100
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070420
push 0x7d601c
push 0xe8
call fcn.100866a0
push 0x10070420
push 0x7d619e
push 0xe8
call fcn.100866a0
push 0x10070420
push 0x7d5f7e
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x7f3f87
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x7f4a63
push 0xe8
call fcn.100866a0
push 0x1006fda0
push 0x40f2e9
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x1006fda0
push 0x4d714e
push 0xe8
call fcn.100866a0
push 0x1006fda0
push 0x4d79e7
push 0xe8
call fcn.100866a0
push 0x1006fda0
push 0x4d9756
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x5db1aa
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x5db22f
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x5db322
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x1006fd80
push 0x5db3a7
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x5db46d
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x5db4ad
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x5db4d5
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x5db534
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x5db5c4
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x1006fd80
push 0x5db628
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x5db68c
push 0xe8
call fcn.100866a0
push 0x1006fd80
push 0x5db6ed
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x791bd0
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x791c40
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x792e80
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070540
push 0x792f30
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7a0c58
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7a229f
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7a3534
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7a47cc
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7a557c
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070540
push 0x7a703e
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7a8227
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7a8ed1
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7a9331
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7a9a11
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7a9ec7
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070540
push 0x7aab57
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7ab8ef
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7ac60f
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7ad597
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7addf7
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7ae642
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070540
push 0x7b26c2
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7b2ff2
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7b3aa2
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7b4632
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7b5332
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7b5d22
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070540
push 0x7b670e
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7b74c7
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x7b85c2
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x947a52
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x948814
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x94a2b4
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070540
push 0x94b4af
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x94bdd5
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x94c8a4
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x94da92
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x94f0f2
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x94fe84
push 0xe8
call fcn.100866a0
add esp, 0x48
push 0x10070540
push 0x95093c
push 0xe8
call fcn.100866a0
push 0x10070540
push 0x9515b9
push 0xe8
call fcn.100866a0
mov ecx, dword [ebp - 4]
add esp, 0x18
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.1008b7da
mov esp, ebp
pop ebp
ret