Function at 0x6588ff1a
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 8]
mov dword [eax + 0x288], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x28c], 0
mov dword [ebp - 0xc], 0x65885512
mov dword [ebp - 0x10], 0x55b5c0
lea eax, [ebp - 4]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualProtect
sub esp, 0x10
mov dword [esp + 8], 4
lea eax, [ebp - 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
lea eax, [ebp - 8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 4]
mov dword [esp + 8], eax
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualProtect
sub esp, 0x10
mov dword [ebp - 0xc], 0x658856ec
mov dword [ebp - 0x10], 0x55b60c
lea eax, [ebp - 4]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualProtect
sub esp, 0x10
mov dword [esp + 8], 4
lea eax, [ebp - 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
lea eax, [ebp - 8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 4]
mov dword [esp + 8], eax
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualProtect
sub esp, 0x10
mov dword [ebp - 0xc], 0x65886a8a
mov dword [ebp - 0x10], 0x55b5e0
lea eax, [ebp - 4]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualProtect
sub esp, 0x10
mov dword [esp + 8], 4
lea eax, [ebp - 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
lea eax, [ebp - 8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 4]
mov dword [esp + 8], eax
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualProtect
sub esp, 0x10
mov dword [ebp - 0xc], 0x6588533e
mov dword [ebp - 0x10], 0x55b580
lea eax, [ebp - 4]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualProtect
sub esp, 0x10
mov dword [esp + 8], 4
lea eax, [ebp - 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
lea eax, [ebp - 8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 4]
mov dword [esp + 8], eax
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualProtect
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x497a00
mov dword [esp + 4], 0x4a21a5
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 8], 0x17
mov dword [esp + 4], 0x4140f0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fd92
mov dword [ebp - 0x14], 0x65883356
mov dword [esp + 8], 0x7c
mov dword [esp + 4], 0x65883356
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fd92
mov eax, 0xffffffeb
mov dword [esp + 8], eax
mov dword [esp + 4], 0x43748d
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff97
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4987b8
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x30
mov dword [esp + 4], 0x498cda
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0
mov dword [esp + 4], 0x44d8b8
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffb9
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 2
mov eax, dword [ebp - 0x14]
inc eax
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0
mov eax, dword [ebp - 0x14]
add eax, 2
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 2
mov eax, dword [ebp - 0x14]
add eax, 3
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 3
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x51
mov eax, dword [ebp - 0x14]
add eax, 5
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff8d
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 6
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x4d
mov eax, dword [ebp - 0x14]
add eax, 7
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffc0
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 8
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffb8
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 9
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffe0
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 0xa
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffb5
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 0xb
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x50
mov eax, dword [ebp - 0x14]
add eax, 0xc
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0
mov eax, dword [ebp - 0x14]
add eax, 0xd
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffff
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 0xe
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffd0
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 0xf
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffb9
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x78
mov eax, dword [ebp - 0x14]
add eax, 0x11
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x40
mov eax, dword [ebp - 0x14]
add eax, 0x12
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x41
mov eax, dword [ebp - 0x14]
add eax, 0x13
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0
mov eax, dword [ebp - 0x14]
add eax, 0x14
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffff
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 0x15
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffe1
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
add eax, 0x16
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 2
mov dword [esp + 4], 0x41398f
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff85
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4290cc
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x76
mov dword [esp + 4], 0x42911e
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffeb
mov dword [esp + 8], eax
mov dword [esp + 4], 0x476b34
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x476b35
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffeb
mov dword [esp + 8], eax
mov dword [esp + 4], 0x476b0b
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0xd
mov dword [esp + 4], 0x476b0c
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffe9
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3830
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x12
mov dword [esp + 4], 0x4a3830
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 3
mov dword [esp + 4], 0x4a3830
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0
mov dword [esp + 4], 0x4a3830
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0
mov dword [esp + 4], 0x4a3830
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3830
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffeb
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3af1
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x63
mov dword [esp + 4], 0x4a3af2
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffffeb
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3adf
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x75
mov dword [esp + 4], 0x4a3ae0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3abc
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3abd
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3abe
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3abf
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3ac0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a0d
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a0e
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a0f
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a10
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a11
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a2c
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a2d
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a2e
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a2f
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a30
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a68
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a69
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a6a
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a6b
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov eax, 0xffffff90
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4a3a6c
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x65883356
mov dword [esp + 4], 0x414073
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fc26
mov eax, 0xffffff8b
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4231e3
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 0x55
mov dword [esp + 4], 0x4231e4
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 8], 8
mov dword [esp + 4], 0x4231e5
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fe16
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x658833d4
mov dword [esp + 4], 0x4231e6
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x423208
mov dword [esp + 4], 0x4231eb
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fc26
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x658834fa
mov dword [esp + 4], 0x4826b7
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x6588a28a
mov dword [esp + 4], 0x40c6cb
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x65889fc2
mov dword [esp + 4], 0x4494f4
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x65889eba
mov dword [esp + 4], 0x428f25
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x658896f4
mov dword [esp + 4], 0x436590
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x6588972a
mov dword [esp + 4], 0x42a79c
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 8], 6
mov dword [esp + 4], 0x4a0f36
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fd92
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x658896a7
mov dword [esp + 4], 0x4a0f36
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x65888692
mov dword [esp + 4], 0x44b089
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x6588859e
mov dword [esp + 4], 0x4c8c6c
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x65888384
mov dword [esp + 4], 0x4a9b30
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x6588a390
mov dword [esp + 4], 0x4104e6
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x6588a406
mov dword [esp + 4], 0x4ab834
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fcdc
mov dword [esp + 8], 6
mov dword [esp + 4], 0x449458
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.6588fd92
leave
ret