Function at 0x10006510
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Read .ini file
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x43f252
push 0x401000
call esi
test eax, eax
je 0x100076b1
push ebx
mov ebx, 0x1005dc88
call fcn.1000b5b0
test al, al
jne 0x10006563
push 0x10
push str.Error
push str.Main_not_found_or_invalid_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x100063d0
push 0x506ab1
mov bl, 0xe9
call fcn.1000ded0
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.PSAPI.DLL_EmptyWorkingSet]
mov edi, 1
cmp dword [0x1005ddd0], edi
jne 0x100066db
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x5f9d6d
call esi
mov ecx, 0x5f9d6d
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x5f9d4e
call esi
mov ecx, 0x5f9d4e
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x5f9d31
call esi
mov ecx, 0x5f9d31
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x5f9c9b
call esi
mov ecx, 0x5f9c9b
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x5f9d09
call esi
mov eax, 0x90909090
mov ecx, 0x5f9d09
mov dword [ecx], eax
lea edx, [ebp - 4]
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push edx
push eax
push 5
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x5f9c5e
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x5f9c5e], 0xd
mov eax, dword [ebp - 4]
push eax
push edi
push 0x5f9c5e
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x5f9bca
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x5f9bca], 0xc
mov eax, dword [ebp - 4]
push eax
push edi
push 0x5f9bca
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x509f57
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x509f57], 0xb
mov eax, dword [ebp - 4]
push eax
push edi
push 0x509f57
call esi
cmp dword [0x1005ddfc], edi
jne 0x10006733
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x62563f
call esi
mov ecx, 0x62563f
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x625540
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x625540], 0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x625540
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x6a74d0
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x6a74d0], 0x100064c0
mov eax, dword [ebp - 4]
push eax
push 4
push 0x6a74d0
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x6a74fc
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x6a74fc], 0x100064f0
mov eax, dword [ebp - 4]
push eax
push 4
push 0x6a74fc
call esi
call fcn.10003420
call fcn.1000d4b0
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x6b6654
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x6b6654], 0xa0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x6b6654
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x4b4305
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x4b4305], 0xeb
mov eax, dword [ebp - 4]
push eax
push edi
push 0x4b4305
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x4b47fe
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x4b47fe], 0x75
mov eax, dword [ebp - 4]
push eax
push edi
push 0x4b47fe
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x4b4856
call esi
lea edx, [ebp - 4]
mov byte [0x4b4856], bl
push edx
mov eax, dword [ebp - 4]
push eax
push edi
push 0x4b4856
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x4b4857
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x4b4857], 0xa6
mov eax, dword [ebp - 4]
push eax
push edi
push 0x4b4857
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x4b4858
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x4b4858], 0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x4b4858
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x4b4859
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x4b4859], 0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x4b4859
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x4b485a
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x4b485a], 0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x4b485a
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x4bea9f
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x4bea9f], 0xeb
mov eax, dword [ebp - 4]
push eax
push edi
push 0x4bea9f
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x4519f8
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x4519f8], 2
mov eax, dword [ebp - 4]
push eax
push edi
push 0x4519f8
call esi
mov bl, byte [0x1005dcce]
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x6b7248
inc bl
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x6b7248], bl
mov eax, dword [ebp - 4]
push eax
push edi
push 0x6b7248
call esi
mov bl, byte [0x1005dcd0]
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x6b7249
add bl, 2
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x6b7249], bl
mov eax, dword [ebp - 4]
push eax
push edi
push 0x6b7249
call esi
mov bl, byte [0x1005dcd1]
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x6b724a
add bl, 3
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x6b724a], bl
mov eax, dword [ebp - 4]
push eax
push edi
push 0x6b724a
call esi
mov bl, byte [0x1005dcd3]
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x6b724b
add bl, 4
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x6b724b], bl
mov eax, dword [ebp - 4]
push eax
push edi
push 0x6b724b
call esi
mov bl, byte [0x1005dcd4]
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x6b724c
add bl, 5
call esi
mov byte [0x6b724c], bl
mov eax, dword [ebp - 4]
lea edx, [ebp - 4]
push edx
push eax
push edi
push 0x6b724c
call esi
movzx ebx, word [0x1005dccc]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 2
push 0x6c41bc
call esi
lea edx, [ebp - 4]
push edx
mov word [0x6c41bc], bx
mov eax, dword [ebp - 4]
push eax
push 2
push 0x6c41bc
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 0x20
push 0x6b6efc
call esi
push 0x20
push 0x1005dce7
push 0x6b6efc
call sub.MSVCR100.dll_memcpy
mov eax, dword [ebp - 4]
add esp, 0xc
lea edx, [ebp - 4]
push edx
push eax
push 0x20
push 0x6b6efc
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x628b89
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x628b89], 0x1005dd07
mov eax, dword [ebp - 4]
push eax
push 4
push 0x628b89
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 0x20
push 0x6b6694
call esi
push 0x20
push 0x1005dcac
push 0x6b6694
call sub.MSVCR100.dll_memcpy
mov eax, dword [ebp - 4]
add esp, 0xc
lea edx, [ebp - 4]
push edx
push eax
push 0x20
push 0x6b6694
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 0x11
push 0x6b7250
call esi
mov edx, dword [0x1005dcd6]
mov eax, 0x6b7250
mov dword [eax], edx
mov ecx, dword [0x1005dcda]
mov dword [eax + 4], ecx
mov edx, dword [0x1005dcde]
mov dword [eax + 8], edx
mov ecx, dword [0x1005dce2]
mov dword [eax + 0xc], ecx
mov dl, byte [0x1005dce6]
mov byte [eax + 0x10], dl
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 0x11
push 0x6b7250
call esi
cmp dword [0x1005ddc4], edi
jne 0x10006b4f
mov byte [0x5951fa], 0x2b
mov byte [0x5951ff], 0x26
mov byte [0x595204], 0x21
mov byte [0x595209], 0x1c
mov byte [0x59520e], 0x17
mov byte [0x595212], 0xeb
mov byte [0x5956d7], 0
mov byte [0x5956dc], 0
mov byte [0x5956e1], 0
mov byte [0x5956e6], 0
mov byte [0x5956eb], 0
mov byte [0x5956f0], 0
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61f3da
call esi
mov ebx, 0xff
lea eax, [ebp - 4]
push eax
mov dword [0x61f3da], ebx
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61f3da
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61f3e0
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x61f3e0], ebx
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61f3e0
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61f431
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x61f431], 0x120
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61f431
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push edi
push 0x61f463
call esi
lea eax, [ebp - 4]
push eax
mov byte [0x61f463], 0x4c
mov ecx, dword [ebp - 4]
push ecx
push edi
push 0x61f463
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61f7e0
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x61f7e0], 0xfc
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61f7e0
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61f814
call esi
lea eax, [ebp - 4]
mov dword [0x61f814], 0x16d
mov ecx, dword [ebp - 4]
push eax
push ecx
push 4
push 0x61f814
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61f81f
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x61f81f], 0x1f3
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61f81f
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61fe1d
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x61fe1d], ebx
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61fe1d
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61fe24
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x61fe24], ebx
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61fe24
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61fe8f
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x61fe8f], 0x118
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61fe8f
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61fe9e
call esi
mov edi, 0x127
lea eax, [ebp - 4]
push eax
mov dword [0x61fe9e], edi
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61fe9e
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61fec7
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x61fec7], edi
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61fec7
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61fe8f
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x61fe8f], 0x11d
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61fe8f
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x61ff12
call esi
mov edi, 0x3f700000
lea eax, [ebp - 4]
push eax
mov dword [0x61ff12], edi
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x61ff12
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x6201b7
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x6201b7], edi
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x6201b7
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x6201d6
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x6201d6], 0x43b68000
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x6201d6
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x620251
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x620251], 0x1b0
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x620251
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x6a9788
call esi
fld dword [0x10011b78]
lea eax, [ebp - 4]
fstp dword [0x6a9788]
mov ecx, dword [ebp - 4]
push eax
push ecx
push 4
push 0x6a9788
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x62594a
call esi
mov eax, 0x90909090
mov ecx, 0x62594a
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 5
push 0x62594a
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x625996
call esi
mov eax, 0x90909090
mov ecx, 0x625996
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 5
push 0x625996
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x6259e2
call esi
mov eax, 0x90909090
mov ecx, 0x6259e2
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 5
push 0x6259e2
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 6
push 0x4cbc66
call esi
mov eax, 0x90909090
mov ecx, 0x4cbc66
mov dword [ecx], eax
mov word [ecx + 4], ax
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 6
push 0x4cbc66
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 4
push 0x4b36eb
call esi
lea eax, [ebp - 4]
push eax
mov dword [0x4b36eb], 0x1000e0c0
mov ecx, dword [ebp - 4]
push ecx
push 4
push 0x4b36eb
call esi
push 0x1000b910
push 0x4db63d
call fcn.1000ded0
add esp, 8
mov eax, 0x1005dfd0
call fcn.10002780
mov eax, 0x1007a4f0
call fcn.10002850
mov edx, 0x10077610
call fcn.10002a00
mov eax, 0x100a9d7c
call fcn.10003e90
mov eax, 0x1007af7c
call fcn.1000d3f0
mov eax, 0x1009267c
call fcn.10002aa0
mov eax, 0x100cef3c
call fcn.10006270
mov eax, 0x100d164c
call fcn.100028e0
mov eax, 0x100d213c
call fcn.10002970
push 0
push str.DataEnc1.dat
call fcn.100081e0
push 1
push str.DataDec2.dat
call fcn.100081e0
mov edi, 0x1005dc88
call fcn.1000b6a0
call fcn.1000b7b0
call fcn.1000b860
call fcn.10003b90
call fcn.1000cc90
call fcn.1000ac10
call fcn.10003cf0
push 0x100060e0
push 0x5069a2
call fcn.1000ded0
push 0x100060e0
push 0x5f8445
call fcn.1000ded0
add esp, 0x10
call fcn.10005500
call fcn.10005aa0
call fcn.10007ed0
call fcn.10007c30
call fcn.10002fd0
mov edi, 1
cmp dword [0x1005ddbc], edi
jne 0x1000700e
call fcn.10007ba0
push str..Config.ini
push 0
push str.IsFontActive
push str.Main
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, edi
jne 0x1000702e
call fcn.10003670
cmp dword [0x1005dde0], edi
jne 0x1000706c
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x444417
mov byte [0x594ae0], 0x2f
call esi
mov eax, 0x90909090
mov ecx, 0x444417
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 5
push 0x444417
call esi
mov ebx, 0x90
cmp dword [0x1005dde4], edi
jne 0x100070b0
mov byte [0x594b19], 0x2f
mov word [0x59028d], 0x9090
mov word [0x59028f], 0x9090
mov byte [0x590291], bl
mov word [0x408adf], 0x9090
mov word [0x408ae1], 0x9090
mov byte [0x408ae3], bl
cmp dword [0x1005dde8], edi
jne 0x100070ef
mov byte [0x594aa7], 0x2f
mov word [0x590237], 0x9090
mov word [0x590239], 0x9090
mov byte [0x59023b], bl
mov word [0x599764], 0x9090
mov word [0x599766], 0x9090
mov byte [0x599768], bl
cmp dword [0x1005ddec], edi
jne 0x10007212
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x41afdb
mov byte [0x5949c0], 0x2f
call esi
mov eax, 0x90909090
mov ecx, 0x41afdb
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 5
push 0x41afdb
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x41b019
call esi
mov eax, 0x90909090
mov ecx, 0x41b019
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 5
push 0x41b019
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x41b01e
call esi
mov eax, 0x90909090
mov ecx, 0x41b01e
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 5
push 0x41b01e
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 5
push 0x41b052
call esi
mov eax, 0x90909090
mov ecx, 0x41b052
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
push ecx
push 5
push 0x41b052
call esi
lea edx, [ebp - 4]
push edx
push 0x40
push 2
push 0x419b62
call esi
mov eax, 0x90909090
mov ecx, 0x419b62
lea edx, [ebp - 4]
mov word [ecx], ax
mov eax, dword [ebp - 4]
push edx
push eax
push 2
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x419b6b
call esi
mov ecx, 0x419b6b
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
cmp dword [0x1005ddf0], edi
jne 0x10007254
mov byte [0x5d3df7], 0x2f
mov word [0x5d3db6], 0x9090
mov word [0x5d3db8], 0x9090
mov byte [0x5d3dba], bl
mov word [0x5e14a2], 0x28e9
mov word [0x5e14a4], 2
mov word [0x5e14a6], 0x9000
cmp dword [0x1005ddf4], edi
jne 0x100072b2
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x5e5c55
call esi
mov ecx, 0x5e5c55
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x422cd2
call esi
mov ecx, 0x422cd2
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
cmp dword [0x1005ddfc], edi
jne 0x1000730e
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x6097cb
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x6097cb], 0x1001158c
mov eax, dword [ebp - 4]
push eax
push 4
push 0x6097cb
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x609803
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x609803], 0x100115a8
mov eax, dword [ebp - 4]
push eax
push 4
push 0x609803
call esi
cmp dword [0x1005ddf8], edi
jne 0x10007388
lea ecx, [ebp - 4]
push ecx
push 0x40
push 0x128
push 0x40cbe0
call esi
push 0x128
push ebx
push 0x40cbe0
call sub.MSVCR100.dll_memset
mov eax, dword [ebp - 4]
add esp, 0xc
lea edx, [ebp - 4]
push edx
push eax
push 0x128
push 0x40cbe0
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 0x509
push 0x40c670
call esi
push 0x509
push ebx
push 0x40c670
call sub.MSVCR100.dll_memset
mov eax, dword [ebp - 4]
add esp, 0xc
lea edx, [ebp - 4]
push edx
push eax
push 0x509
push 0x40c670
call esi
cmp dword [0x1005ddc0], edi
jne 0x10007395
call fcn.1000d020
cmp dword [0x1005ddcc], edi
jne 0x100073a2
call fcn.100042f0
cmp dword [0x1005ddd4], edi
jne 0x100073af
call fcn.1000cf10
cmp dword [0x1005dddc], edi
jne 0x100073bc
call fcn.100035f0
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x60f0a2
call esi
mov ecx, 0x60f0a2
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
mov byte [0x4b4e6e], 4
mov byte [0x4b4dee], 4
mov byte [0x4b4e2e], 4
mov byte [0x6b6654], 1
cmp dword [0x1005ddc8], edi
jne 0x100075c9
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x550b25
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x550b25], 0xe9
mov eax, dword [ebp - 4]
push eax
push edi
push 0x550b25
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x550b26
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x550b26], 0xee
mov eax, dword [ebp - 4]
push eax
push edi
push 0x550b26
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x550b27
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x550b27], 0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x550b27
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x550b28
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x550b28], 0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x550b28
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x550b29
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x550b29], 0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x550b29
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x550b2a
call esi
lea edx, [ebp - 4]
mov byte [0x550b2a], bl
mov eax, dword [ebp - 4]
push edx
push eax
push edi
push 0x550b2a
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x58d019
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x58d019], 0xe9
mov eax, dword [ebp - 4]
push eax
push edi
push 0x58d019
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x58d01a
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x58d01a], 0xd9
mov eax, dword [ebp - 4]
push eax
push edi
push 0x58d01a
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x58d01b
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x58d01b], 0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x58d01b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x58d01c
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x58d01c], 0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x58d01c
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x58d01d
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x58d01d], 0
mov eax, dword [ebp - 4]
push eax
push edi
push 0x58d01d
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x58d01e
call esi
mov byte [0x58d01e], bl
lea edx, [ebp - 4]
mov eax, dword [ebp - 4]
push edx
push eax
push edi
push 0x58d01e
call esi
call fcn.10001c50
mov al, 0xc3
mov byte [0x41dbb0], al
mov byte [0x4b4160], al
call fcn.1000d240
call fcn.10004020
call fcn.10002ee0
call fcn.1000dc40
call fcn.10009bf0
mov cl, 0xe9
mov eax, 0x100076d0
mov esi, 0x548b5f
call fcn.1000df60
push str.Resolution
call fcn.1000da40
pop ebx
cmp eax, 3
jl 0x10007669
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x6224c8
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x6224c8], 0x1a0
mov eax, dword [ebp - 4]
push eax
push 4
push 0x6224c8
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push edi
push 0x6224d2
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x6224d2], 0x20
mov eax, dword [ebp - 4]
push eax
push edi
push 0x6224d2
call esi
push str.WindowMode
call fcn.1000da40
pop edi
pop esi
test eax, eax
jle 0x100076ad
call fcn.1000e52b
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.1000e881
push 0x1000dfd0
push 0x103dd220
call fcn.1000ec50
push 0x1000e0b0
push 0x103dd224
call fcn.1000ec50
call fcn.1000ec48
mov esp, ebp
pop ebp
ret
push 0
push str.Main.exe___Erro__
push str.Arquivo_Main.dll_no_foi_carregado__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]