Function at 0x10009ca0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x100248e4]
test al, 1
jne 0x10009cd8
or eax, 1
mov dword [0x100248e0], 0x1000fd38
push 0x1000ed50
mov dword [0x100248e4], eax
call fcn.1000dea4
add esp, 4
push ebx
push esi
push edi
call fcn.1000d500
call fcn.10005e10
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, eax
mov edi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
add esp, 8
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0xc], edx
test edx, edx
je 0x10009d74
lea eax, [ebp - 8]
mov byte [edx], 0xe9
push eax
push 0x40
mov ecx, 0x1000b2d0
push 5
sub ecx, 0x449dd5
push 0x449dd0
mov dword [edx + 1], ecx
call esi
test eax, eax
je 0x10009d74
mov ecx, dword [ebp - 0xc]
mov edx, 0x449dd0
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x10009d74
push 5
push 0x449dd0
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10009dfc
mov ecx, 0x1000b350
mov byte [eax], 0xe9
sub ecx, 0x47df46
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x47df41
call esi
test eax, eax
je 0x10009dfc
mov ecx, dword [ebp - 0xc]
mov edx, 0x47df41
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x10009dfc
push 9
push 0x47df41
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
mov edx, 0x90909090
test eax, eax
je 0x10009e88
mov ecx, 0x1000b3b0
mov byte [eax], 0xe9
sub ecx, 0x40c660
mov dword [eax + 1], ecx
mov word [eax + 5], dx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x40c65b
call esi
test eax, eax
je 0x10009e88
mov ecx, dword [ebp - 0xc]
mov edx, 0x40c65b
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x10009e88
push 7
push 0x40c65b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10009f09
mov ecx, 0x1000b440
mov byte [eax], 0xe9
sub ecx, 0x403787
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x403782
call esi
test eax, eax
je 0x10009f09
mov ecx, dword [ebp - 0xc]
mov edx, 0x403782
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x10009f09
push 6
push 0x403782
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10009f91
mov ecx, 0x1000b570
mov byte [eax], 0xe9
sub ecx, 0x402339
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x402334
call esi
test eax, eax
je 0x10009f91
mov ecx, dword [ebp - 0xc]
mov edx, 0x402334
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x10009f91
push 9
push 0x402334
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a01d
mov ecx, 0x1000b520
mov byte [eax], 0xe9
sub ecx, 0x403882
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x40387d
call esi
test eax, eax
je 0x1000a01d
mov ecx, dword [ebp - 0xc]
mov edx, 0x40387d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000a01d
push 7
push 0x40387d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x54833a
call esi
test eax, eax
je 0x1000a04e
lea eax, [ebp - 8]
mov byte [0x54833a], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x54833a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x539a34
call esi
test eax, eax
je 0x1000a07f
lea eax, [ebp - 8]
mov byte [0x539a34], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x539a34
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x539b1c
call esi
test eax, eax
je 0x1000a0b0
lea eax, [ebp - 8]
mov byte [0x539b1c], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x539b1c
call esi
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a12a
mov byte [eax], 0xe9
mov dword [eax + 1], 0x8e
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x51dce1
call esi
test eax, eax
je 0x1000a12a
mov ecx, dword [ebp - 0xc]
mov edx, 0x51dce1
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a12a
push 6
push 0x51dce1
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a1a4
mov byte [eax], 0xe9
mov dword [eax + 1], 0xb1
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x52f02d
call esi
test eax, eax
je 0x1000a1a4
mov ecx, dword [ebp - 0xc]
mov edx, 0x52f02d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a1a4
push 6
push 0x52f02d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54833a
call esi
test eax, eax
je 0x1000a1d5
lea eax, [ebp - 8]
mov byte [0x54833a], 0xeb
push eax
push dword [ebp - 8]
push 4
push 0x54833a
call esi
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a25d
mov ecx, 0x1000b710
mov byte [eax], 0xe9
sub ecx, 0x420830
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x42082b
call esi
test eax, eax
je 0x1000a25d
mov ecx, dword [ebp - 0xc]
mov edx, 0x42082b
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x1000a25d
push 9
push 0x42082b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a2d1
mov byte [eax], 0xe9
mov dword [eax + 1], 1
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x539c48
call esi
test eax, eax
je 0x1000a2d1
mov ecx, dword [ebp - 0xc]
mov edx, 0x539c48
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a2d1
push 5
push 0x539c48
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a345
mov byte [eax], 0xe9
mov dword [eax + 1], 4
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x539b1c
call esi
test eax, eax
je 0x1000a345
mov ecx, dword [ebp - 0xc]
mov edx, 0x539b1c
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a345
push 5
push 0x539b1c
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a3b9
mov byte [eax], 0xe9
mov dword [eax + 1], 5
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4404de
call esi
test eax, eax
je 0x1000a3b9
mov ecx, dword [ebp - 0xc]
mov edx, 0x4404de
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a3b9
push 5
push 0x4404de
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a445
mov ecx, 0x1000b610
mov byte [eax], 0xe9
sub ecx, 0x425a9b
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x425a96
call esi
test eax, eax
je 0x1000a445
mov ecx, dword [ebp - 0xc]
mov edx, 0x425a96
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000a445
push 7
push 0x425a96
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 0xa
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a4d3
mov byte [eax], 0xe9
mov ecx, 0x1000b640
sub ecx, 0x423704
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
mov byte [eax + 9], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4236ff
call esi
test eax, eax
je 0x1000a4d3
mov ecx, dword [ebp - 0xc]
mov edx, 0x4236ff
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ax, word [ecx + 8]
mov word [edx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push edx
call esi
test eax, eax
je 0x1000a4d3
push 0xa
push 0x4236ff
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a55b
mov ecx, 0x1000b9f0
mov byte [eax], 0xe9
sub ecx, 0x423f6e
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x423f69
call esi
test eax, eax
je 0x1000a55b
mov ecx, dword [ebp - 0xc]
mov edx, 0x423f69
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x1000a55b
push 9
push 0x423f69
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a5dc
mov ecx, 0x1000b5e0
mov byte [eax], 0xe9
sub ecx, 0x4211ab
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4211a6
call esi
test eax, eax
je 0x1000a5dc
mov ecx, dword [ebp - 0xc]
mov edx, 0x4211a6
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a5dc
push 6
push 0x4211a6
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a664
mov ecx, 0x1000ba30
mov byte [eax], 0xe9
sub ecx, 0x40cd32
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x40cd2d
call esi
test eax, eax
je 0x1000a664
mov ecx, dword [ebp - 0xc]
mov edx, 0x40cd2d
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x1000a664
push 9
push 0x40cd2d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a6e5
mov byte [eax], 0xe9
mov dword [eax + 1], 0x15
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x40cd75
call esi
test eax, eax
je 0x1000a6e5
mov ecx, dword [ebp - 0xc]
mov edx, 0x40cd75
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x1000a6e5
push 9
push 0x40cd75
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a764
mov ecx, 0x1000b5c0
mov word [eax], 0x8d0f
sub ecx, 0x428baf
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x428ba9
call esi
test eax, eax
je 0x1000a764
mov ecx, dword [ebp - 0xc]
mov edx, 0x428ba9
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a764
push 6
push 0x428ba9
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a7df
mov ecx, 0x1000b590
mov byte [eax], 0xe9
sub ecx, 0x428ff2
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x428fed
call esi
test eax, eax
je 0x1000a7df
mov ecx, dword [ebp - 0xc]
mov edx, 0x428fed
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a7df
push 5
push 0x428fed
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x477a8d
call esi
test eax, eax
je 0x1000a810
lea eax, [ebp - 8]
mov byte [0x477a8d], 0x1f
push eax
push dword [ebp - 8]
push 1
push 0x477a8d
call esi
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a89c
mov ecx, 0x1000b9b0
mov byte [eax], 0xe9
sub ecx, 0x46ed60
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x46ed5b
call esi
test eax, eax
je 0x1000a89c
mov ecx, dword [ebp - 0xc]
mov edx, 0x46ed5b
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000a89c
push 7
push 0x46ed5b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a91b
mov ecx, 0x1000ba50
mov word [eax], 0x840f
sub ecx, 0x49b3a0
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x49b39a
call esi
test eax, eax
je 0x1000a91b
mov ecx, dword [ebp - 0xc]
mov edx, 0x49b39a
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a91b
push 6
push 0x49b39a
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a99a
mov ecx, 0x1000ba50
mov word [eax], 0x840f
sub ecx, 0x49b3b0
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x49b3aa
call esi
test eax, eax
je 0x1000a99a
mov ecx, dword [ebp - 0xc]
mov edx, 0x49b3aa
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a99a
push 6
push 0x49b3aa
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000aa15
mov ecx, 0x1000bb10
mov byte [eax], 0xe9
sub ecx, 0x46ec8f
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x46ec8a
call esi
test eax, eax
je 0x1000aa15
mov ecx, dword [ebp - 0xc]
mov edx, 0x46ec8a
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000aa15
push 5
push 0x46ec8a
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x60aa00
call esi
test eax, eax
je 0x1000aa49
lea eax, [ebp - 8]
mov dword [0x60aa00], 0x1e
push eax
push dword [ebp - 8]
push 4
push 0x60aa00
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x60aa04
call esi
test eax, eax
je 0x1000aa7d
lea eax, [ebp - 8]
mov dword [0x60aa04], 0x1e
push eax
push dword [ebp - 8]
push 4
push 0x60aa04
call esi
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000aaf8
mov ecx, 0x1000bae0
mov byte [eax], 0xe9
sub ecx, 0x4df20d
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4df208
call esi
test eax, eax
je 0x1000aaf8
mov ecx, dword [ebp - 0xc]
mov edx, 0x4df208
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000aaf8
push 5
push 0x4df208
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ab79
mov ecx, 0x1000bab0
mov byte [eax], 0xe9
sub ecx, 0x4e0462
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4e045d
call esi
test eax, eax
je 0x1000ab79
mov ecx, dword [ebp - 0xc]
mov edx, 0x4e045d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000ab79
push 6
push 0x4e045d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ac01
mov ecx, 0x1000ba70
mov byte [eax], 0xe9
sub ecx, 0x4ccbe1
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x4ccbdc
call esi
test eax, eax
je 0x1000ac01
mov ecx, dword [ebp - 0xc]
mov edx, 0x4ccbdc
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x1000ac01
push 9
push 0x4ccbdc
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ac82
mov ecx, 0x1000bbb0
mov byte [eax], 0xe9
sub ecx, 0x424f1e
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x424f19
call esi
test eax, eax
je 0x1000ac82
mov ecx, dword [ebp - 0xc]
mov edx, 0x424f19
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000ac82
push 6
push 0x424f19
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ad03
mov ecx, 0x1000bc10
mov byte [eax], 0xe9
sub ecx, 0x4bac64
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4bac5f
call esi
test eax, eax
je 0x1000ad03
mov ecx, dword [ebp - 0xc]
mov edx, 0x4bac5f
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000ad03
push 6
push 0x4bac5f
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 0xa
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ad91
mov byte [eax], 0xe9
mov ecx, 0x1000bc50
sub ecx, 0x47dbb4
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
mov byte [eax + 9], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x47dbaf
call esi
test eax, eax
je 0x1000ad91
mov ecx, dword [ebp - 0xc]
mov edx, 0x47dbaf
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ax, word [ecx + 8]
mov word [edx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push edx
call esi
test eax, eax
je 0x1000ad91
push 0xa
push 0x47dbaf
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ae12
mov ecx, 0x1000bcb0
mov byte [eax], 0xe9
sub ecx, 0x44e7ea
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x44e7e5
call esi
test eax, eax
je 0x1000ae12
mov ecx, dword [ebp - 0xc]
mov edx, 0x44e7e5
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000ae12
push 6
push 0x44e7e5
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ae8d
mov ecx, 0x1000bcd0
mov byte [eax], 0xe9
sub ecx, 0x44534b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x445346
call esi
test eax, eax
je 0x1000ae8d
mov ecx, dword [ebp - 0xc]
mov edx, 0x445346
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000ae8d
push 5
push 0x445346
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000af19
mov ecx, 0x1000bd10
mov byte [eax], 0xe9
sub ecx, 0x50d5bd
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x50d5b8
call esi
test eax, eax
je 0x1000af19
mov ecx, dword [ebp - 0xc]
mov edx, 0x50d5b8
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000af19
push 7
push 0x50d5b8
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000af9a
mov ecx, 0x1000bd60
mov byte [eax], 0xe9
sub ecx, 0x4abcc0
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4abcbb
call esi
test eax, eax
je 0x1000af9a
mov ecx, dword [ebp - 0xc]
mov edx, 0x4abcbb
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000af9a
push 6
push 0x4abcbb
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b015
mov ecx, 0x1000bd90
mov byte [eax], 0xe9
sub ecx, 0x50ee5b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50ee56
call esi
test eax, eax
je 0x1000b015
mov ecx, dword [ebp - 0xc]
mov edx, 0x50ee56
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b015
push 5
push 0x50ee56
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b0a1
mov ecx, 0x1000bdc0
mov byte [eax], 0xe9
sub ecx, 0x53cddd
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x53cdd8
call esi
test eax, eax
je 0x1000b0a1
mov ecx, dword [ebp - 0xc]
mov edx, 0x53cdd8
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000b0a1
push 7
push 0x53cdd8
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b11c
mov ecx, 0x1000be10
mov byte [eax], 0xe9
sub ecx, 0x50f45b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50f456
call esi
test eax, eax
je 0x1000b11c
mov ecx, dword [ebp - 0xc]
mov edx, 0x50f456
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b11c
push 5
push 0x50f456
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b197
mov ecx, 0x1000be40
mov byte [eax], 0xe9
sub ecx, 0x50ddcc
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50ddc7
call esi
test eax, eax
je 0x1000b197
mov ecx, dword [ebp - 0xc]
mov edx, 0x50ddc7
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b197
push 5
push 0x50ddc7
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x42aaf9
call esi
test eax, eax
je 0x1000b1cb
lea eax, [ebp - 8]
mov dword [0x42aaf9], 0
push eax
push dword [ebp - 8]
push 4
push 0x42aaf9
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x46eced
call esi
test eax, eax
je 0x1000b1ff
lea eax, [ebp - 8]
mov dword [0x46eced], 0
push eax
push dword [ebp - 8]
push 4
push 0x46eced
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547cac
call esi
test eax, eax
je 0x1000b233
lea eax, [ebp - 8]
mov dword [0x547cac], 0
push eax
push dword [ebp - 8]
push 4
push 0x547cac
call esi
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df1c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b2b4
mov ecx, 0x1000be70
mov byte [eax], 0xe9
sub ecx, 0x44bb21
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x44bb1c
call esi
test eax, eax
je 0x1000b2b4
mov ecx, dword [ebp - 0xc]
mov edx, 0x44bb1c
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b2b4
push 6
push 0x44bb1c
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000dcd0
mov esp, ebp
pop ebp
ret