Function at 0x10006340
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Inject thread
Set console window title
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x460
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x14], 0x1000a280
mov edx, dword fs:[0]
mov dword [ebp - 0x18], edx
mov dword fs:[0], ecx
cmp eax, 1
je 0x10006385
test eax, eax
jne 0x10007a33
xor ecx, ecx
int 0x29
push str.left4dead2.exe
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x1000796e
push str.vaudio_speex.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
lea ebx, [eax + 0x24e0]
lea eax, [ebp - 0x264]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 1
push ebx
call edi
mov byte [esi + 0x24e0], 0xc3
lea eax, [ebp - 0x264]
push eax
push dword [ebp - 0x264]
push 1
push ebx
call edi
call dword [sym.imp.KERNEL32.dll_AllocConsole]
push str.Storm
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
push 1
call fcn.1000fcfb
add esp, 4
push eax
push 0x10023872
push 0x10023876
call fcn.1000fe88
add esp, 0xc
push 0xfde9
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
mov dword [ebp - 0x264], 0x54
mov dword [ebp - 0x260], 0
mov word [ebp - 0x25c], 0
mov word [ebp - 0x25a], 0xc
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0x190
lea eax, [ebp - 0x250]
push str.Terminal
push eax
call fcn.1000feae
add esp, 8
lea eax, [ebp - 0x264]
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetCurrentConsoleFontEx]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 8
push 0x1f
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea eax, [ebp - 0x34]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
lea eax, [ebp - 0x46c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov dword [ebp - 0x2c], 0
movsx eax, word [ebp - 0x46c]
movsx ecx, word [ebp - 0x46a]
imul ecx, eax
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x38]
push edx
push eax
push ecx
push 0x1f
push esi
call dword [sym.imp.KERNEL32.dll_FillConsoleOutputAttribute]
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.engine.dll
call esi
mov dword [0x1002da68], eax
push str._____Extend_Interface
call fcn.1000ffbb
add esp, 4
call fcn.100011a0
push str.client.dll
call esi
mov dword [0x1002de14], eax
push str._____Events
call fcn.1000ffbb
add esp, 4
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x17bb40]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023350]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x17bb40]
mov dword [esi], eax
movzx eax, word [ebx + 0x17bb44]
mov word [esi + 4], ax
lea eax, [ebx + 0x17bb46]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x17bb40], 0x68
mov dword [ebx + 0x17bb41], 0x10001520
mov byte [ebx + 0x17bb45], 0xc3
lea ebx, [ebp - 0x20]
push ebx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002de5c], esi
mov edi, dword [0x1002de14]
lea esi, [edi + 0x4d590]
push ebx
push 0x40
push 1
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [edi + 0x4d590], 0xc3
push ebx
push dword [ebp - 0x20]
push 1
push esi
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call ebx
mov edi, dword [0x1002da68]
lea esi, [edi + 0x5596f]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push esi
call ebx
mov byte [edi + 0x5596f], 0x5e
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 1
push esi
call ebx
mov edi, dword [0x1002da68]
lea esi, [edi + 0x7f60d]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push esi
call ebx
mov byte [edi + 0x7f60d], 0xeb
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 1
push esi
call ebx
mov eax, dword [0x1002de14]
mov dword [eax + 0x7254e8], 0x100015f0
push str._____Interpolation
call fcn.1000ffbb
add esp, 4
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x344f0]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023350]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x344f0]
mov dword [esi], eax
movzx eax, word [ebx + 0x344f4]
mov word [esi + 4], ax
lea eax, [ebx + 0x344f6]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x344f0], 0x68
mov dword [ebx + 0x344f1], 0x10001630
mov byte [ebx + 0x344f5], 0xc3
lea ecx, [ebp - 0x20]
push ecx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002de60], esi
push str._____Animations
call fcn.1000ffbb
add esp, 4
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x321f0]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023360]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x321f0]
mov ecx, dword [ebx + 0x321f3]
mov dword [esi], eax
mov dword [esi + 3], ecx
lea eax, [ebx + 0x321f7]
mov dword [ebp - 0x24], eax
lea edi, [esi + 7]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 7], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 8], eax
mov byte [esi + 0xc], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call esi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call esi
mov byte [ebx + 0x321f0], 0x68
mov dword [ebx + 0x321f1], 0x10001670
mov byte [ebx + 0x321f5], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call esi
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x4c230]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023350]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x4c230]
mov dword [esi], eax
movzx eax, word [ebx + 0x4c234]
mov word [esi + 4], ax
lea eax, [ebx + 0x4c236]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x4c230], 0x68
mov dword [ebx + 0x4c231], 0x100020b0
mov byte [ebx + 0x4c235], 0xc3
lea ecx, [ebp - 0x20]
push ecx
mov ebx, ecx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002defc], esi
mov edi, dword [0x1002de14]
lea esi, [edi + 0x3bdf0]
push ebx
push 0x40
push 3
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [edi + 0x3bdf0], 0x18c2
mov byte [edi + 0x3bdf2], 0
push ebx
push dword [ebp - 0x20]
push 3
push esi
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call ebx
mov edi, dword [0x1002de14]
lea esi, [edi + 0x3180f6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push esi
call ebx
mov byte [edi + 0x3180f6], 0xf
lea ecx, [ebp - 0x20]
push ecx
push dword [ebp - 0x20]
push 1
push esi
call ebx
push str._____Prediction
call fcn.1000ffbb
add esp, 4
mov eax, dword [0x1002e4e8]
mov ecx, dword [0x1002e500]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x10007a4e
mov esi, dword [0x1002de14]
push 0x18
call fcn.10010050
add esp, 4
movups xmm0, xmmword [esi + 0x6e6b80]
movups xmmword [eax], xmm0
movsd xmm0, qword [esi + 0x6e6b90]
movsd qword [eax + 0x10], xmm0
mov dword [esi + 0x6e6b80], 0x1002e4ac
mov dword [esi + 0x6e6b84], 1
mov dword [esi + 0x6e6b8c], eax
mov esi, dword [0x1002de14]
push 0x18
call fcn.10010050
add esp, 4
movups xmm0, xmmword [esi + 0x6f3fd4]
movups xmmword [eax], xmm0
movsd xmm0, qword [esi + 0x6f3fe4]
movsd qword [eax + 0x10], xmm0
mov dword [esi + 0x6f3fd4], 0x1002d000
mov dword [esi + 0x6f3fd8], 1
mov dword [esi + 0x6f3fe0], eax
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x21fce0]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0xffffffff
sub esp, 0x10
movaps xmm0, xmmword [0x10023370]
movups xmmword [esp], xmm0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
mov esi, eax
movsd xmm0, qword [ebx + 0x21fce0]
movsd qword [eax], xmm0
lea eax, [ebx + 0x21fce8]
mov dword [ebp - 0x24], eax
lea edi, [esi + 8]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 8], 0x68
mov ecx, dword [ebp - 0x24]
mov dword [esi + 9], ecx
mov byte [esi + 0xd], 0xc3
lea ecx, [ebp - 0x20]
push ecx
push dword [ebp - 0x20]
push 6
push edi
call eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x21fce0], 0x68
mov dword [ebx + 0x21fce1], 0x10002380
mov byte [ebx + 0x21fce5], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call ecx
mov dword [0x1002df24], esi
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x17b780]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023350]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x17b780]
mov dword [esi], eax
movzx eax, word [ebx + 0x17b784]
mov word [esi + 4], ax
lea eax, [ebx + 0x17b786]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x17b780], 0x68
mov dword [ebx + 0x17b781], 0x100023e0
mov byte [ebx + 0x17b785], 0xc3
lea ebx, [ebp - 0x20]
push ebx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002df28], esi
mov edi, dword [0x1002de14]
lea esi, [edi + 0x17b860]
push ebx
push 0x40
push 1
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [edi + 0x17b860], 0xeb
push ebx
push dword [ebp - 0x20]
push 1
push esi
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call ebx
mov edi, dword [0x1002de14]
lea esi, [edi + 0x17c510]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push esi
call ebx
mov byte [edi + 0x17c510], 0xeb
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 1
push esi
call ebx
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x17b460]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023350]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x17b460]
mov dword [esi], eax
movzx eax, word [ebx + 0x17b464]
mov word [esi + 4], ax
lea eax, [ebx + 0x17b466]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x17b460], 0x68
mov dword [ebx + 0x17b461], 0x10002420
mov byte [ebx + 0x17b465], 0xc3
lea ecx, [ebp - 0x20]
push ecx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002e3dc], esi
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x278870]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023370]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
movsd xmm0, qword [ebx + 0x278870]
movsd qword [eax], xmm0
lea eax, [ebx + 0x278878]
mov dword [ebp - 0x24], eax
lea edi, [esi + 8]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [esi + 8], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 9], eax
mov byte [esi + 0xd], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x278870], 0x68
mov dword [ebx + 0x278871], 0x100024c0
mov byte [ebx + 0x278875], 0xc3
lea ecx, [ebp - 0x20]
push ecx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002e3e0], esi
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0xeee20]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023350]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0xeee20]
mov dword [esi], eax
movzx eax, word [ebx + 0xeee24]
mov word [esi + 4], ax
lea eax, [ebx + 0xeee26]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0xeee20], 0x68
mov dword [ebx + 0xeee21], 0x10002510
mov byte [ebx + 0xeee25], 0xc3
lea ecx, [ebp - 0x20]
push ecx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002e3e4], esi
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x17b370]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023370]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
movsd xmm0, qword [ebx + 0x17b370]
movsd qword [eax], xmm0
lea eax, [ebx + 0x17b378]
mov dword [ebp - 0x24], eax
lea edi, [esi + 8]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [esi + 8], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 9], eax
mov byte [esi + 0xd], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x17b370], 0x68
mov dword [ebx + 0x17b371], 0x10002530
mov byte [ebx + 0x17b375], 0xc3
lea ecx, [ebp - 0x20]
push ecx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002e3e8], esi
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x26cd30]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023380]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
movsd xmm0, qword [ebx + 0x26cd30]
movsd qword [eax], xmm0
movzx eax, byte [ebx + 0x26cd38]
mov byte [esi + 8], al
lea eax, [ebx + 0x26cd39]
mov dword [ebp - 0x24], eax
lea edi, [esi + 9]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [esi + 9], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 0xa], eax
mov byte [esi + 0xe], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x26cd30], 0x68
mov dword [ebx + 0x26cd31], 0x10002580
mov byte [ebx + 0x26cd35], 0xc3
lea ecx, [ebp - 0x20]
push ecx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002e3ec], esi
mov eax, dword [0x1002de14]
sub eax, esi
add eax, 0x253597
mov dword [esi + 5], eax
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x2f34f0]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023350]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x2f34f0]
mov dword [esi], eax
movzx eax, word [ebx + 0x2f34f4]
mov word [esi + 4], ax
lea eax, [ebx + 0x2f34f6]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x2f34f0], 0x68
mov dword [ebx + 0x2f34f1], 0x10002de0
mov byte [ebx + 0x2f34f5], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [0x1002e3f8], esi
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x312677]
mov dword [0x1002e3fc], eax
lea eax, [ebx + 0x31266e]
mov dword [ebp - 0x28], eax
sub esp, 0x10
movaps xmm0, xmmword [0x10023360]
movups xmmword [esp], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x31266e]
mov ecx, dword [ebx + 0x312671]
mov dword [esi], eax
mov dword [esi + 3], ecx
lea eax, [ebx + 0x312675]
mov dword [ebp - 0x24], eax
lea edi, [esi + 7]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 7], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 8], eax
mov byte [esi + 0xc], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call esi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call esi
mov byte [ebx + 0x31266e], 0x68
mov dword [ebx + 0x31266f], 0x10002e10
mov byte [ebx + 0x312673], 0xc3
lea eax, [ebp - 0x20]
push eax
mov ebx, eax
push dword [ebp - 0x20]
push 6
push edi
call esi
push str._____Network
call fcn.1000ffbb
add esp, 4
mov edi, dword [0x1002da68]
lea esi, [edi + 0x1b9d3f]
push ebx
push 0x40
push 4
push esi
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call ebx
mov dword [edi + 0x1b9d3f], 0x90909090
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 4
push esi
call ebx
mov ebx, dword [0x1002da68]
lea eax, [ebx + 0x79e40]
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xc
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x79e40]
mov dword [esi], eax
movzx eax, word [ebx + 0x79e44]
mov word [esi + 4], ax
lea eax, [ebx + 0x79e46]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x79e40], 0x68
mov dword [ebx + 0x79e41], 0x10002e30
mov byte [ebx + 0x79e45], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call ecx
mov dword [0x1002e400], esi
mov ebx, dword [0x1002da68]
lea eax, [ebx + 0x7d120]
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xf
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
movsd xmm0, qword [ebx + 0x7d120]
movsd qword [eax], xmm0
movzx eax, byte [ebx + 0x7d128]
mov byte [esi + 8], al
lea eax, [ebx + 0x7d129]
mov dword [ebp - 0x24], eax
lea edi, [esi + 9]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [esi + 9], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 0xa], eax
mov byte [esi + 0xe], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x7d120], 0x68
mov dword [ebx + 0x7d121], 0x10002e60
mov byte [ebx + 0x7d125], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [0x1002e410], esi
mov ebx, dword [0x1002da68]
lea eax, [ebx + 0x7cec0]
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xd
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x7cec0]
mov ecx, dword [ebx + 0x7cec3]
mov dword [esi], eax
mov dword [esi + 3], ecx
lea eax, [ebx + 0x7cec7]
mov dword [ebp - 0x24], eax
lea edi, [esi + 7]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 7], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 8], eax
mov byte [esi + 0xc], 0xc3
lea esi, [ebp - 0x20]
push esi
push dword [ebp - 0x20]
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
push esi
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x7cec0], 0x68
mov dword [ebx + 0x7cec1], 0x10002f80
mov byte [ebx + 0x7cec5], 0xc3
push esi
mov ebx, esi
push dword [ebp - 0x20]
push 6
push edi
call eax
push str._____Input
call fcn.1000ffbb
add esp, 4
mov edi, dword [0x1002de14]
lea esi, [edi + 0x131545]
push ebx
push 0x40
push 3
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [edi + 0x131545], 0x9090
mov byte [edi + 0x131547], 0x90
push ebx
push dword [ebp - 0x20]
push 3
push esi
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call ebx
mov edi, dword [0x1002de14]
lea esi, [edi + 0x65db4]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push esi
call ebx
mov byte [edi + 0x65db4], 0xeb
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 1
push esi
call ebx
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x10b3e0]
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xc
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x10b3e0]
mov dword [esi], eax
movzx eax, word [ebx + 0x10b3e4]
mov word [esi + 4], ax
lea eax, [ebx + 0x10b3e6]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x10b3e0], 0x68
mov dword [ebx + 0x10b3e1], 0x100031d0
mov byte [ebx + 0x10b3e5], 0xc3
lea ecx, [ebp - 0x20]
push ecx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002e420], esi
push str._____Effects
call fcn.1000ffbb
add esp, 4
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x20750]
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xc
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x20750]
mov dword [esi], eax
movzx eax, word [ebx + 0x20754]
mov word [esi + 4], ax
lea eax, [ebx + 0x20756]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x20750], 0x68
mov dword [ebx + 0x20751], 0x100049b0
mov byte [ebx + 0x20755], 0xc3
lea ebx, [ebp - 0x20]
push ebx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002e448], esi
mov edi, dword [0x1002de14]
lea esi, [edi + 0x20930]
push ebx
push 0x40
push 1
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [edi + 0x20930], 0xeb
push ebx
push dword [ebp - 0x20]
push 1
push esi
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call ebx
mov edi, dword [0x1002de14]
lea esi, [edi + 0x2bf81e]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push esi
call ebx
mov byte [edi + 0x2bf81e], 0xf6
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 1
push esi
call ebx
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x15c1e0]
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xc
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x15c1e0]
mov dword [esi], eax
movzx eax, word [ebx + 0x15c1e4]
mov word [esi + 4], ax
lea eax, [ebx + 0x15c1e6]
mov dword [ebp - 0x24], eax
lea edi, [esi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 7], eax
mov byte [esi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x15c1e0], 0x68
mov dword [ebx + 0x15c1e1], 0x100049f0
mov byte [ebx + 0x15c1e5], 0xc3
lea ebx, [ebp - 0x20]
push ebx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002e44c], esi
mov edi, dword [0x1002de14]
lea esi, [edi + 0x1c81cd]
push ebx
push 0x40
push 1
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [edi + 0x1c81cd], 0x34
push ebx
push dword [ebp - 0x20]
push 1
push esi
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call ebx
mov edi, dword [0x1002de14]
lea esi, [edi + 0x28853a]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push esi
call ebx
mov byte [edi + 0x28853a], 0xd8
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 1
push esi
call ebx
mov eax, dword [0x1002de14]
lea ecx, [eax + 0xe953c]
mov dword [eax + 0x7bd3b0], ecx
push str._____Paint
call fcn.1000ffbb
add esp, 4
push str.vguimatsurface.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
add eax, 0x188f0
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xc
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov edi, eax
mov eax, dword [esi + 0x188f0]
mov dword [edi], eax
movzx eax, word [esi + 0x188f4]
mov word [edi + 4], ax
lea eax, [esi + 0x188f6]
mov dword [ebp - 0x24], eax
lea ebx, [edi + 6]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push ebx
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
mov byte [edi + 6], 0x68
mov eax, dword [ebp - 0x24]
mov dword [edi + 7], eax
mov byte [edi + 0xb], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov ebx, dword [ebp - 0x28]
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 0x188f0], 0x68
mov dword [esi + 0x188f1], 0x10004b20
mov byte [esi + 0x188f5], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [0x1002e450], edi
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x2c74e0]
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xd
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x2c74e0]
mov ecx, dword [ebx + 0x2c74e3]
mov dword [esi], eax
mov dword [esi + 3], ecx
lea eax, [ebx + 0x2c74e7]
mov dword [ebp - 0x24], eax
lea edi, [esi + 7]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 7], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 8], eax
mov byte [esi + 0xc], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call esi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call esi
mov byte [ebx + 0x2c74e0], 0x68
mov dword [ebx + 0x2c74e1], 0x10004c10
mov byte [ebx + 0x2c74e5], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call esi
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x257830]
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xd
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x257830]
mov ecx, dword [ebx + 0x257833]
mov dword [esi], eax
mov dword [esi + 3], ecx
lea eax, [ebx + 0x257837]
mov dword [ebp - 0x24], eax
lea edi, [esi + 7]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 7], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 8], eax
mov byte [esi + 0xc], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x257830], 0x68
mov dword [ebx + 0x257831], 0x10006030
mov byte [ebx + 0x257835], 0xc3
lea ebx, [ebp - 0x20]
push ebx
push dword [ebp - 0x20]
push 6
push edi
call eax
mov dword [0x1002e4a4], esi
mov edi, dword [0x1002de14]
lea esi, [edi + 0x3182ab]
push ebx
push 0x40
push 1
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [edi + 0x3182ab], 0x31
push ebx
push dword [ebp - 0x20]
push 1
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x231d00]
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xd
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x231d00]
mov ecx, dword [ebx + 0x231d03]
mov dword [esi], eax
mov dword [esi + 3], ecx
lea eax, [ebx + 0x231d07]
mov dword [ebp - 0x24], eax
lea edi, [esi + 7]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 7], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 8], eax
mov byte [esi + 0xc], 0xc3
lea esi, [ebp - 0x20]
push esi
push dword [ebp - 0x20]
push 6
push edi
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
push esi
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [ebx + 0x231d00], 0x68
mov dword [ebx + 0x231d01], 0x10006060
mov byte [ebx + 0x231d05], 0xc3
push esi
push dword [ebp - 0x20]
push 6
push edi
mov ebx, eax
call eax
mov edi, dword [0x1002de14]
lea esi, [edi + 0x2cb929]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push esi
call ebx
mov byte [edi + 0x2cb929], 0xeb
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 1
push esi
call ebx
mov ebx, dword [0x1002de14]
lea eax, [ebx + 0x2f9680]
mov dword [ebp - 0x28], eax
push 0x40
push 0x3000
push 0xd
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [ebx + 0x2f9680]
mov ecx, dword [ebx + 0x2f9683]
mov dword [esi], eax
mov dword [esi + 3], ecx
lea eax, [ebx + 0x2f9687]
mov dword [ebp - 0x24], eax
lea edi, [esi + 7]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov byte [esi + 7], 0x68
mov eax, dword [ebp - 0x24]
mov dword [esi + 8], eax
mov byte [esi + 0xc], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call esi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 6
mov edi, dword [ebp - 0x28]
push edi
call esi
mov byte [ebx + 0x2f9680], 0x68
mov dword [ebx + 0x2f9681], 0x10006060
mov byte [ebx + 0x2f9685], 0xc3
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 6
push edi
call esi
jmp 0x10007a33
push 0
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
mov dword [ebp - 0x264], 0x22c
lea edi, [ebp - 0x240]
lea ebx, [ebp - 0x264]
nop
push ebx
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
je 0x10007a33
push str.left4dead2.exe
push edi
call fcn.1001005b
add esp, 8
test eax, eax
jne 0x10007990
push dword [ebp - 0x25c]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
sub esp, 0x14
movaps xmm0, xmmword [0x10023390]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edi, eax
lea ebx, [ebp - 0x46c]
push 0x208
push ebx
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
push 0x208
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0
push 0
push edi
push eax
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x8000
push 0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, 1
add esp, 0x460
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
push 0x1002e4e8
call fcn.1000bd7c
add esp, 4
cmp dword [0x1002e4e8], 0xffffffff
jne 0x10006908
mov dword [0x1002e4ac], 5
mov dword [ebp - 0x10], 0
push str.vphysics.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ecx, 0x8b2
add ecx, dword [eax + 0x19f7ec]
mov dword [0x1002e4b0], ecx
mov dword [0x1002e4b4], 0x10
mov word [0x1002e4b8], 1
xorps xmm0, xmm0
movups xmmword [0x1002e4ba], xmm0
mov word [0x1002e4ca], 0
mov dword [0x1002e4cc], 4
movups xmmword [0x1002e4d0], xmm0
xorps xmm0, xmm0
movsd qword [0x1002e4de], xmm0
push 0x1002e4e8
call fcn.1000bd2b
add esp, 4
jmp 0x10006908