Function at 0x10031970
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x4d9749
call edi
lea eax, [esp + 0xc]
mov dword [0x4d9749], 0x1e0
push eax
push dword [esp + 0x10]
push 4
push 0x4d9749
call edi
push 0x10031930
push 0x857746
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x5b6180
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x40f2e9
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x4d714e
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x4d79e7
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x4d9756
push 0xe8
call fcn.10063f10
add esp, 0x48
push 0x10031920
push 0x5db4d5
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x5db1aa
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x5db22f
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x5db322
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x5db3a7
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x5db46d
push 0xe8
call fcn.10063f10
add esp, 0x48
push 0x10031920
push 0x5db4ad
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x5db534
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x5db5c4
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x5db628
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x5db68c
push 0xe8
call fcn.10063f10
push 0x10031920
push 0x5db6ed
push 0xe8
call fcn.10063f10
add esp, 0x48
push 0x10031920
push 0x8605bf
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x5b8344
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x47fff4
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x48007c
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x4f2a6c
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x4f2b55
push 0xe8
call fcn.10063f10
add esp, 0x48
push 0x10031910
push 0x5b4956
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x5b9e22
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x5bafe5
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x7d453e
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x7df2d9
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x7dfd4b
push 0xe8
call fcn.10063f10
add esp, 0x48
push 0x10031910
push 0x7dfd54
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x7dfd68
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x7f3f87
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x7f4a63
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x7fac46
push 0xe8
call fcn.10063f10
push 0x10031910
push 0x8346f6
push 0xe8
call fcn.10063f10
add esp, 0x48
push 0x10031910
push 0x85f90c
push 0xe8
call fcn.10063f10
push 0x100317b0
push 0x80f865
push 0xe8
call fcn.10063f10
push 0x10031790
push 0x813c11
push 0xe9
call fcn.10063f10
add esp, 0x20
mov edx, 6
mov ecx, 0x813cbc
call fcn.10063b20
add esp, 4
mov word [esp + 0x18], 0x8f0f
mov eax, 0x10031750
mov dword [esp + 0xc], 0
sub eax, 0x813cc2
mov dword [esp + 0x1a], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 6
push 0x813cbc
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x10031d46
mov eax, dword [esp + 0x18]
mov ecx, 0x813cbc
mov dword [ecx], eax
mov ax, word [esp + 0x1c]
mov word [ecx + 4], ax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x18], 0
push 6
push ecx
call edi
test eax, eax
jne 0x10031d48
call esi
push ecx
mov edx, 6
mov ecx, 0x8130aa
call fcn.10063b20
add esp, 4
mov word [esp + 0x18], 0x8f0f
mov eax, 0x10031770
mov dword [esp + 0xc], 0
sub eax, 0x8130b0
mov dword [esp + 0x1a], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 6
push 0x8130aa
call edi
test eax, eax
je 0x10031dba
mov eax, dword [esp + 0x18]
mov ecx, 0x8130aa
mov dword [ecx], eax
mov ax, word [esp + 0x1c]
mov word [ecx + 4], ax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x18], 0
push 6
push ecx
call edi
test eax, eax
jne 0x10031dbc
call esi
push 0x10031450
push 0x5b97dc
push 0xe8
call fcn.10063f10
push 0x10031450
push 0x5b984c
push 0xe8
call fcn.10063f10
push 0x10031450
push 0x8c2e0f
push 0xe8
call fcn.10063f10
push 0x10031450
push 0x8c2e7f
push 0xe8
call fcn.10063f10
push 0x10031450
push 0x914fc9
push 0xe8
call fcn.10063f10
push 0x10031450
push 0x91503e
push 0xe8
call fcn.10063f10
add esp, 0x48
mov byte [esp + 0x18], 0xe8
mov eax, 0x10031400
mov dword [esp + 0xc], 0
sub eax, 0x814e68
mov dword [esp + 0x19], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x814e63
call edi
test eax, eax
je 0x10031e92
mov eax, dword [esp + 0x18]
mov ecx, 0x814e63
mov dword [ecx], eax
mov al, byte [esp + 0x1c]
mov byte [ecx + 4], al
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x18], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10031e94
call esi
push ecx
mov edx, 5
mov ecx, 0x81a419
call fcn.10063b20
mov edx, 5
mov ecx, 0x81a3f9
call fcn.10063b20
add esp, 4
mov byte [esp + 0x18], 0xe8
mov eax, 0x100313d0
mov dword [esp + 0xc], 0
sub eax, 0x81a3fe
mov dword [esp + 0x19], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x81a3f9
call edi
test eax, eax
je 0x10031f11
mov eax, dword [esp + 0x18]
mov ecx, 0x81a3f9
mov dword [ecx], eax
mov al, byte [esp + 0x1c]
mov byte [ecx + 4], al
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x18], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10031f13
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0x10], 0x43f00000
push eax
push 0x40
push 4
push 0xd46924
mov dword [esp + 0x1c], 0
call edi
test eax, eax
je 0x10031f5c
mov eax, dword [esp + 0x10]
mov ecx, 0xd46924
mov dword [ecx], eax
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 4
push ecx
call edi
test eax, eax
jne 0x10031f5e
call esi
movsd xmm0, qword [0x1008e478]
lea eax, [esp + 0xc]
push eax
push 0x40
push 8
push 0xd46910
movsd qword [esp + 0x20], xmm0
mov dword [esp + 0x1c], 0
call edi
test eax, eax
je 0x10031fb4
mov eax, dword [esp + 0x10]
mov ecx, 0xd46910
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
mov dword [ecx + 4], eax
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 8
push ecx
call edi
test eax, eax
jne 0x10031fb6
call esi
push ecx
mov edx, 5
mov ecx, 0x787ba7
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x100313c0
mov dword [esp + 0xc], 0
sub eax, 0x787bac
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x787ba7
call edi
test eax, eax
je 0x10032024
mov eax, dword [esp + 0x10]
mov ecx, 0x787ba7
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032026
call esi
push ecx
mov edx, 5
mov ecx, 0x813880
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031380
mov dword [esp + 0xc], 0
sub eax, 0x813885
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x813880
call edi
test eax, eax
je 0x10032094
mov eax, dword [esp + 0x10]
mov ecx, 0x813880
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032096
call esi
push ecx
mov edx, 5
mov ecx, 0x813864
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031390
mov dword [esp + 0xc], 0
sub eax, 0x813869
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x813864
call edi
test eax, eax
je 0x10032104
mov eax, dword [esp + 0x10]
mov ecx, 0x813864
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032106
call esi
push ecx
mov edx, 0x4d1
mov ecx, 0x80f270
call fcn.10063b20
mov edx, 0x24
mov ecx, 0x81028c
call fcn.10063b20
mov edx, 0x24
mov ecx, 0x81055c
call fcn.10063b20
mov edx, 0x24
mov ecx, 0x80ffaf
call fcn.10063b20
mov edx, 0x24
mov ecx, 0x80fd5b
call fcn.10063b20
mov edx, 0x24
mov ecx, 0x8138df
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10030f00
mov dword [esp + 0xc], 0
sub eax, 0x8138e4
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x8138df
call edi
test eax, eax
je 0x100321bf
mov eax, dword [esp + 0x10]
mov ecx, 0x8138df
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100321c1
call esi
push ecx
mov edx, 0x24
mov ecx, 0x812713
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10030f40
mov dword [esp + 0xc], 0
sub eax, 0x812718
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x812713
call edi
test eax, eax
je 0x1003222f
mov eax, dword [esp + 0x10]
mov ecx, 0x812713
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032231
call esi
push ecx
mov edx, 0x24
mov ecx, 0x812947
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10030f80
mov dword [esp + 0xc], 0
sub eax, 0x81294c
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x812947
call edi
test eax, eax
je 0x1003229f
mov eax, dword [esp + 0x10]
mov ecx, 0x812947
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100322a1
call esi
push ecx
mov edx, 0x2d
mov ecx, 0x8139a0
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10030fc0
mov dword [esp + 0xc], 0
sub eax, 0x8139a5
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x8139a0
call edi
test eax, eax
je 0x1003230f
mov eax, dword [esp + 0x10]
mov ecx, 0x8139a0
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032311
call esi
push ecx
mov edx, 0x2d
mov ecx, 0x812d3f
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031000
mov dword [esp + 0xc], 0
sub eax, 0x812d44
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x812d3f
call edi
test eax, eax
je 0x1003237f
mov eax, dword [esp + 0x10]
mov ecx, 0x812d3f
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032381
call esi
push ecx
mov edx, 0x24
mov ecx, 0x813779
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031040
mov dword [esp + 0xc], 0
sub eax, 0x81377e
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x813779
call edi
test eax, eax
je 0x100323ef
mov eax, dword [esp + 0x10]
mov ecx, 0x813779
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100323f1
call esi
push ecx
mov edx, 9
mov ecx, 0x895a49
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031080
mov dword [esp + 0xc], 0
sub eax, 0x895a4e
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895a49
call edi
test eax, eax
je 0x1003245f
mov eax, dword [esp + 0x10]
mov ecx, 0x895a49
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032461
call esi
push ecx
mov edx, 9
mov ecx, 0x895a53
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x100310a0
mov dword [esp + 0xc], 0
sub eax, 0x895a58
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895a53
call edi
test eax, eax
je 0x100324cf
mov eax, dword [esp + 0x10]
mov ecx, 0x895a53
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100324d1
call esi
push ecx
mov edx, 9
mov ecx, 0x895a5d
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x100310c0
mov dword [esp + 0xc], 0
sub eax, 0x895a62
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895a5d
call edi
test eax, eax
je 0x1003253f
mov eax, dword [esp + 0x10]
mov ecx, 0x895a5d
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032541
call esi
push ecx
mov edx, 9
mov ecx, 0x895a67
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x100310e0
mov dword [esp + 0xc], 0
sub eax, 0x895a6c
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895a67
call edi
test eax, eax
je 0x100325af
mov eax, dword [esp + 0x10]
mov ecx, 0x895a67
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100325b1
call esi
push ecx
mov edx, 9
mov ecx, 0x895abe
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031100
mov dword [esp + 0xc], 0
sub eax, 0x895ac3
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895abe
call edi
test eax, eax
je 0x1003261f
mov eax, dword [esp + 0x10]
mov ecx, 0x895abe
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032621
call esi
push ecx
mov edx, 9
mov ecx, 0x895ac8
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031120
mov dword [esp + 0xc], 0
sub eax, 0x895acd
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895ac8
call edi
test eax, eax
je 0x1003268f
mov eax, dword [esp + 0x10]
mov ecx, 0x895ac8
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032691
call esi
push ecx
mov edx, 9
mov ecx, 0x895ad2
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031140
mov dword [esp + 0xc], 0
sub eax, 0x895ad7
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895ad2
call edi
test eax, eax
je 0x100326ff
mov eax, dword [esp + 0x10]
mov ecx, 0x895ad2
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032701
call esi
push ecx
mov edx, 9
mov ecx, 0x895adc
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031160
mov dword [esp + 0xc], 0
sub eax, 0x895ae1
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895adc
call edi
test eax, eax
je 0x1003276f
mov eax, dword [esp + 0x10]
mov ecx, 0x895adc
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032771
call esi
push ecx
mov edx, 9
mov ecx, 0x895b33
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031180
mov dword [esp + 0xc], 0
sub eax, 0x895b38
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895b33
call edi
test eax, eax
je 0x100327df
mov eax, dword [esp + 0x10]
mov ecx, 0x895b33
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100327e1
call esi
push ecx
mov edx, 9
mov ecx, 0x895b3d
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x100311a0
mov dword [esp + 0xc], 0
sub eax, 0x895b42
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895b3d
call edi
test eax, eax
je 0x1003284f
mov eax, dword [esp + 0x10]
mov ecx, 0x895b3d
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032851
call esi
push ecx
mov edx, 9
mov ecx, 0x895b47
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x100311c0
mov dword [esp + 0xc], 0
sub eax, 0x895b4c
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895b47
call edi
test eax, eax
je 0x100328bf
mov eax, dword [esp + 0x10]
mov ecx, 0x895b47
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100328c1
call esi
push ecx
mov edx, 9
mov ecx, 0x895b51
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x100311e0
mov dword [esp + 0xc], 0
sub eax, 0x895b56
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895b51
call edi
test eax, eax
je 0x1003292f
mov eax, dword [esp + 0x10]
mov ecx, 0x895b51
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032931
call esi
push ecx
mov edx, 9
mov ecx, 0x895ba8
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031200
mov dword [esp + 0xc], 0
sub eax, 0x895bad
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895ba8
call edi
test eax, eax
je 0x1003299f
mov eax, dword [esp + 0x10]
mov ecx, 0x895ba8
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100329a1
call esi
push ecx
mov edx, 9
mov ecx, 0x895bb2
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031220
mov dword [esp + 0xc], 0
sub eax, 0x895bb7
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895bb2
call edi
test eax, eax
je 0x10032a0f
mov eax, dword [esp + 0x10]
mov ecx, 0x895bb2
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032a11
call esi
push ecx
mov edx, 9
mov ecx, 0x895bbc
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031240
mov dword [esp + 0xc], 0
sub eax, 0x895bc1
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895bbc
call edi
test eax, eax
je 0x10032a7f
mov eax, dword [esp + 0x10]
mov ecx, 0x895bbc
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032a81
call esi
push ecx
mov edx, 9
mov ecx, 0x895bc6
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031260
mov dword [esp + 0xc], 0
sub eax, 0x895bcb
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x895bc6
call edi
test eax, eax
je 0x10032aef
mov eax, dword [esp + 0x10]
mov ecx, 0x895bc6
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032af1
call esi
push ecx
mov edx, 9
mov ecx, 0x8113de
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031280
mov dword [esp + 0xc], 0
sub eax, 0x8113e3
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x8113de
call edi
test eax, eax
je 0x10032b5f
mov eax, dword [esp + 0x10]
mov ecx, 0x8113de
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032b61
call esi
push ecx
mov edx, 9
mov ecx, 0x811528
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x100312a0
mov dword [esp + 0xc], 0
sub eax, 0x81152d
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x811528
call edi
test eax, eax
je 0x10032bcf
mov eax, dword [esp + 0x10]
mov ecx, 0x811528
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032bd1
call esi
push ecx
mov edx, 9
mov ecx, 0x8116ef
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x100312c0
mov dword [esp + 0xc], 0
sub eax, 0x8116f4
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x8116ef
call edi
test eax, eax
je 0x10032c3f
mov eax, dword [esp + 0x10]
mov ecx, 0x8116ef
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032c41
call esi
push ecx
mov edx, 9
mov ecx, 0x8117f8
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x100312e0
mov dword [esp + 0xc], 0
sub eax, 0x8117fd
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x8117f8
call edi
test eax, eax
je 0x10032caf
mov eax, dword [esp + 0x10]
mov ecx, 0x8117f8
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032cb1
call esi
push ecx
mov edx, 9
mov ecx, 0x810b47
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031300
mov dword [esp + 0xc], 0
sub eax, 0x810b4c
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x810b47
call edi
test eax, eax
je 0x10032d1f
mov eax, dword [esp + 0x10]
mov ecx, 0x810b47
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032d21
call esi
push ecx
mov edx, 9
mov ecx, 0x810c8b
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031320
mov dword [esp + 0xc], 0
sub eax, 0x810c90
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x810c8b
call edi
test eax, eax
je 0x10032d8f
mov eax, dword [esp + 0x10]
mov ecx, 0x810c8b
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032d91
call esi
push ecx
mov edx, 9
mov ecx, 0x810e52
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031340
mov dword [esp + 0xc], 0
sub eax, 0x810e57
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x810e52
call edi
test eax, eax
je 0x10032dff
mov eax, dword [esp + 0x10]
mov ecx, 0x810e52
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032e01
call esi
push ecx
mov edx, 9
mov ecx, 0x810f4f
call fcn.10063b20
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x10031360
mov dword [esp + 0xc], 0
sub eax, 0x810f54
mov dword [esp + 0x11], eax
lea eax, [esp + 0xc]
push eax
push 0x40
push 5
push 0x810f4f
call edi
test eax, eax
je 0x10032e6f
mov eax, dword [esp + 0x10]
mov ecx, 0x810f4f
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10032e71
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0x18], 0x43fa8000
push eax
push 0x40
push 4
push 0xd461a4
mov dword [esp + 0x1c], 0
call edi
test eax, eax
je 0x10032eba
mov eax, dword [esp + 0x18]
mov ecx, 0xd461a4
mov dword [ecx], eax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x18], 0
push 4
push ecx
call edi
test eax, eax
jne 0x10032ebc
call esi
movsd xmm0, qword [0x1008e470]
lea eax, [esp + 0xc]
push eax
push 0x40
push 8
push 0xd461c8
movsd qword [esp + 0x20], xmm0
mov dword [esp + 0x1c], 0
call edi
test eax, eax
je 0x10032f12
mov eax, dword [esp + 0x10]
mov ecx, 0xd461c8
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
mov dword [ecx + 4], eax
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 8
push ecx
call edi
test eax, eax
jne 0x10032f14
call esi
movsd xmm0, qword [0x1008e488]
lea eax, [esp + 0xc]
push eax
push 0x40
push 8
push 0xd461c0
movsd qword [esp + 0x20], xmm0
mov dword [esp + 0x1c], 0
call edi
test eax, eax
je 0x10032f6a
mov eax, dword [esp + 0x10]
mov ecx, 0xd461c0
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
mov dword [ecx + 4], eax
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 8
push ecx
call edi
test eax, eax
jne 0x10032f6c
call esi
movsd xmm0, qword [0x1008e250]
lea eax, [esp + 0xc]
push eax
push 0x40
push 8
push 0xd27af8
movsd qword [esp + 0x20], xmm0
mov dword [esp + 0x1c], 0
call edi
test eax, eax
je 0x10032fc2
mov eax, dword [esp + 0x10]
mov ecx, 0xd27af8
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
mov dword [ecx + 4], eax
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 8
push ecx
call edi
test eax, eax
jne 0x10032fc4
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x40
push 4
push 0x81a3f5
call edi
test eax, eax
je 0x10033009
mov eax, 0x81a3f5
mov dword [eax], str.CustomInterfaceS8_new_Master_Icon.tga
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 4
push 0x81a3f5
call edi
test eax, eax
jne 0x1003300b
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x40
push 4
push 0x81a415
call edi
test eax, eax
je 0x10033050
mov eax, 0x81a415
mov dword [eax], str.CustomInterfaceS8_new_Master_non_Icon.tga
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 4
push 0x81a415
call edi
test eax, eax
jne 0x10033052
call esi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x81a38b
call edi
lea eax, [esp + 0xc]
mov dword [0x81a38b], 0x1008ab20
push eax
push dword [esp + 0x10]
push 4
push 0x81a38b
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x81a3ab
call edi
lea eax, [esp + 0xc]
mov dword [0x81a3ab], 0x1008ab4c
push eax
push dword [esp + 0x10]
push 4
push 0x81a3ab
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x80f04b
call edi
lea eax, [esp + 0xc]
mov dword [0x80f04b], 0x1008ab78
push eax
push dword [esp + 0x10]
push 4
push 0x80f04b
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x80f02b
call edi
lea eax, [esp + 0xc]
mov dword [0x80f02b], 0x1008aba0
push eax
push dword [esp + 0x10]
push 4
push 0x80f02b
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x8124fb
call edi
lea eax, [esp + 0xc]
mov dword [0x8124fb], 0x1008abc4
push eax
push dword [esp + 0x10]
push 4
push 0x8124fb
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x86d10d
call edi
lea eax, [esp + 0xc]
mov dword [0x86d10d], 0x1008abc4
push eax
push dword [esp + 0x10]
push 4
push 0x86d10d
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x888e7b
call edi
lea eax, [esp + 0xc]
mov dword [0x888e7b], 0x1008abc4
push eax
push dword [esp + 0x10]
push 4
push 0x888e7b
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x81259b
call edi
lea eax, [esp + 0xc]
mov dword [0x81259b], 0x1008abec
push eax
push dword [esp + 0x10]
push 4
push 0x81259b
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x86d12d
call edi
lea eax, [esp + 0xc]
mov dword [0x86d12d], 0x1008abec
push eax
push dword [esp + 0x10]
push 4
push 0x86d12d
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7e0a6b
call edi
lea eax, [esp + 0xc]
mov dword [0x7e0a6b], 0x1008ac18
push eax
push dword [esp + 0x10]
push 4
push 0x7e0a6b
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x7e0a8b
call edi
lea eax, [esp + 0xc]
mov dword [0x7e0a8b], 0x1008ac40
push eax
push dword [esp + 0x10]
push 4
push 0x7e0a8b
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x84e8db
call edi
lea eax, [esp + 0xc]
mov dword [0x84e8db], 0x1008ac68
push eax
push dword [esp + 0x10]
push 4
push 0x84e8db
call edi
lea eax, [esp + 0xc]
push eax
push 0x40
push 4
push 0x84e8fb
call edi
lea eax, [esp + 0xc]
mov dword [0x84e8fb], 0x1008ac94
push eax
push dword [esp + 0x10]
push 4
push 0x84e8fb
call edi
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x40
push 1
push 0x835229
mov bl, 0x20
call edi
test eax, eax
je 0x100332d1
mov eax, 0x835229
mov byte [eax], bl
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 1
push 0x835229
call edi
test eax, eax
jne 0x100332d3
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x40
push 1
push 0x835341
mov bl, 0x20
call edi
test eax, eax
je 0x10033316
mov eax, 0x835341
mov byte [eax], bl
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 1
push 0x835341
call edi
test eax, eax
jne 0x10033318
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x40
push 1
push 0x77fa39
mov bl, 0x20
call edi
test eax, eax
je 0x1003335b
mov eax, 0x77fa39
mov byte [eax], bl
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 1
push 0x77fa39
call edi
test eax, eax
jne 0x1003335d
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x40
push 1
push 0x77fac4
mov bl, 0x20
call edi
test eax, eax
je 0x100333a0
mov eax, 0x77fac4
mov byte [eax], bl
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 1
push 0x77fac4
call edi
test eax, eax
jne 0x100333a2
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x40
push 1
push 0x847283
mov bl, 0x20
call edi
test eax, eax
je 0x100333e5
mov eax, 0x847283
mov byte [eax], bl
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 1
push 0x847283
call edi
test eax, eax
jne 0x100333e7
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x40
push 1
push 0x82cf26
xor bl, bl
call edi
test eax, eax
je 0x1003342a
mov eax, 0x82cf26
mov byte [eax], bl
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 1
push 0x82cf26
call edi
test eax, eax
jne 0x1003342c
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x40
push 1
push 0x841fe1
mov bl, 0xd
call edi
test eax, eax
je 0x1003346f
mov eax, 0x841fe1
mov byte [eax], bl
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 1
push 0x841fe1
call edi
test eax, eax
jne 0x10033471
call esi
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x40
push 1
push 0x7d56d3
mov bl, 0xc
call edi
test eax, eax
je 0x100334b4
mov eax, 0x7d56d3
mov byte [eax], bl
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x10]
mov dword [esp + 0x20], 0
push 1
push 0x7d56d3
call edi
test eax, eax
jne 0x100334b6
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret