Function at 0x1000d390
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x100a900c]
xor eax, ebp
mov dword [ebp - 4], eax
mov al, byte [0x100b016c]
mov byte [0x100b016d], al
test al, al
je 0x1000df9d
mov ecx, dword [0x100cab48]
push ebx
push esi
push edi
lea eax, [ecx + 0x1e0fa4]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [0x100b9a90], eax
lea eax, [ecx + 0xa4058]
mov dword [0x100b9b08], eax
lea eax, [ecx + 0x1e0fa8]
mov dword [0x100b9a74], eax
lea eax, [ecx + 0x177a24]
mov dword [0x100b9b30], eax
lea eax, [ecx + 0x177a10]
mov dword [0x100b9af4], eax
lea eax, [ecx + 0x14ea00]
mov dword [0x100b9adc], eax
lea eax, [ecx + 0x177a50]
mov dword [0x100b9ae0], eax
lea eax, [ecx + 0x244e14]
mov dword [0x100b9ab8], eax
lea eax, [ecx + 0x8d290]
mov dword [0x100b9aa8], eax
lea eax, [ecx + 0x8d150]
mov dword [0x100b9b18], eax
lea eax, [ecx + 0x1b550]
mov dword [0x100b9b2c], eax
lea eax, [ecx + 0x32c10]
mov dword [0x100b9b24], eax
lea eax, [ecx + 0x1c0f0]
mov dword [0x100b9a54], eax
lea eax, [ecx + 0x42875]
lea ecx, [ebp - 8]
mov dword [ebp - 0x10], eax
push ecx
push 0x40
push 2
push eax
mov dword [ebp - 0xc], 2
call edi
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
push 4
mov byte [eax], 0x56
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], 4
mov byte [eax + 1], 0x90
mov eax, dword [0x100cab48]
add eax, 0x42879
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, 0x1000d2c0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x40e5d
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, 0x1000d2f0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x4a933
mov dword [ebp - 0xc], 5
push 5
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov byte [eax], 0xe8
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
mov ecx, dword [0x100b003c]
movups xmm0, xmmword [0x1009e10c]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x1009e11c]
movq qword [ecx + 0x10], xmm0
movzx eax, byte [0x1009e124]
mov byte [ecx + 0x18], al
mov eax, 0x1000d310
mov ecx, dword [0x100b003c]
sub eax, ecx
sub eax, 0xf
mov dword [ecx + 0xb], eax
lea eax, [ebp - 8]
add dword [0x100b003c], 0x19
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x3e038
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, 0x10073230
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8d505
mov dword [ebp - 0xc], 0x15
push 0x15
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x10073480
mov dword [eax], 0xe85352
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 7
mov dword [eax + 3], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 7], 0xc0855a5b
mov eax, dword [ebp - 0x10]
mov byte [eax + 0xb], 0x7c
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x14], 0x44
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x3fc72
mov dword [ebp - 0xc], 6
push 6
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0xe890
mov word [eax], cx
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov eax, dword [0x100b003c]
mov dword [eax], 0xe85251
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 3
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x2b0cc
mov dword [ecx], eax
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0xe85053
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 3
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x8d28c
mov dword [ecx], eax
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0x5a08c483
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0xbc8a8959
mov eax, dword [0x100b003c]
add eax, 4
mov dword [0x100b003c], eax
mov dword [eax], 0xc3000004
lea eax, [ebp - 8]
add dword [0x100b003c], 4
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
add eax, 0x687c
mov dword [ebp - 0xc], 6
push 0x40
mov dword [ebp - 0x10], eax
push 6
push eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0xe990
mov word [eax], cx
mov ecx, dword [0x100b003c]
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
mov ecx, 0x840f
mov eax, dword [0x100b003c]
mov word [eax], cx
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 2
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x6188
mov dword [ecx], eax
mov ecx, dword [0x100b003c]
movups xmm0, xmmword [0x1009dd30]
add ecx, 4
mov dword [0x100b003c], ecx
movups xmmword [ecx], xmm0
mov eax, dword [0x1009dd40]
mov dword [ecx + 0x10], eax
mov ax, word [0x1009dd44]
mov word [ecx + 0x14], ax
movzx eax, byte [0x1009dd46]
mov byte [ecx + 0x16], al
mov ecx, dword [0x100b003c]
mov eax, dword [0x100cab48]
add ecx, 0x17
sub eax, ecx
mov dword [0x100b003c], ecx
add eax, 0x687e
mov dword [ecx], eax
lea eax, [ebp - 8]
add dword [0x100b003c], 4
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x6e2b5
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, 0x100734c0
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8b97c
mov dword [ebp - 0xc], 8
push 8
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x10073510
mov dword [eax], 0xe8515790
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 8
mov dword [eax + 4], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8ba86
mov dword [ebp - 0xc], 2
push 2
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x18]
push ecx
mov ebx, 0xe857
mov dword [ebp - 0x1c], 4
push 0x40
mov word [eax], bx
mov eax, dword [0x100cab48]
add eax, 0x8ba88
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov esi, 0x10073540
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8bad4
mov dword [ebp - 0xc], 6
push 6
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov word [eax], bx
mov eax, dword [ebp - 0x10]
sub esi, eax
sub esi, 6
mov dword [eax + 2], esi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8bb5e
mov dword [ebp - 0xc], 0x99
push 0x99
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x5b9
mov edx, 0x10073580
mov dword [eax], 0x90565750
mov eax, dword [ebp - 0x10]
mov word [eax + 4], cx
mov ecx, edx
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 0x14
mov dword [eax + 0x10], ecx
mov ecx, 0x6b8
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x16], 0x441f0f14
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x7f], 0x90565750
mov eax, dword [ebp - 0x10]
mov word [eax + 0x83], cx
mov eax, dword [ebp - 0x10]
sub edx, eax
sub edx, 0x93
mov dword [eax + 0x8f], edx
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x95], 0x441f0f14
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x59e1b
mov dword [ebp - 0xc], 0x14
push 0x14
push eax
mov dword [ebp - 0x10], eax
call edi
movzx eax, byte [0x1009994c]
movups xmm0, xmmword [0x10099938]
mov ecx, dword [0x10099948]
mov byte [ebp - 0x14], al
mov eax, dword [ebp - 0x10]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x10], ecx
mov ecx, 0x100735e0
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 0x11
mov dword [eax + 0xd], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x8b9ef
mov dword [ebp - 0xc], 6
push 6
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x10073670
mov word [eax], bx
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x875e7
mov dword [ebp - 0xc], 0xd
push 0xd
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x100736a0
mov dword [eax], 0x3824548b
mov eax, dword [ebp - 0x10]
mov dword [eax + 4], 0x52515690
mov eax, dword [ebp - 0x10]
mov byte [eax + 8], 0xe8
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 0xd
mov dword [eax + 9], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x3c8fb
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov esi, 0x100736d0
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x4262a
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x42663
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x42925
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x42a0b
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
sub esi, eax
sub esi, 4
mov dword [eax], esi
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x4253f
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, 0x10073700
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
add eax, 0x42617
mov dword [ebp - 0xc], 5
push 0x40
mov dword [ebp - 0x10], eax
push 5
push eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x100737c0
mov byte [eax], 0xe8
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x4355b
mov dword [ebp - 0xc], 6
push 6
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0xe851
mov word [eax], cx
mov ecx, 0x100737f0
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 6
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x435ba
mov dword [ebp - 0xc], 8
push 8
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x10073830
mov dword [eax], 0xe8509090
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 8
mov dword [eax + 4], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b611
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov esi, 0x10073870
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b646
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b674
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b6ab
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b6db
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b710
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b73e
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b765
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b78c
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b7b0
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ecx
push 0x40
add eax, 0x1b7d4
mov dword [ebp - 0x1c], 4
push 4
push eax
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
sub esi, eax
sub esi, 4
mov dword [eax], esi
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x23b79
mov dword [ebp - 0xc], 6
push 6
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov dword [eax], 0x441f0f66
mov eax, dword [ebp - 0x10]
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007491a
mov esp, ebp
pop ebp
ret