Function at 0x1002d7a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 0xc]
push esi
mov esi, dword [ebp + 0xc]
push edi
push 0
push 3
push eax
push 0x41bd0c
mov dword [ebp - 0xc], esi
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call edi
mov eax, dword [ebp + 8]
inc eax
push 0
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x41bd13
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x41d355
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x41d36f
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x41d392
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x41d94c
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x41d97b
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x41d985
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x448610
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x448617
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x44865c
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x448681
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x448f07
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x448f0c
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x448f22
call ebx
push eax
call edi
push 0
lea eax, [esi + 1]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x448f27
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 2
push 0
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x448f67
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x450b28
call ebx
push eax
call edi
push 0
lea eax, [esi + 1]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x450c00
call ebx
push eax
call edi
push 0
lea eax, [esi + 2]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x450da3
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x4510b3
call ebx
push eax
call edi
push 0
lea eax, [esi + 1]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4510cd
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45df7b
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45df86
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e030
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x45e039
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e04b
call ebx
push eax
call edi
push 0
lea eax, [esi + 1]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e054
call ebx
push eax
call edi
mov eax, dword [ebp - 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e066
call ebx
push eax
call edi
push 0
lea eax, [esi + 2]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e06f
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e105
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x45e10e
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
push 0
push 3
lea eax, [ebp - 0xc]
push eax
push 0x45e1ad
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x45e1b6
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e25b
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x45e264
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e2ce
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e324
call ebx
push eax
call edi
mov eax, dword [ebp - 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e32b
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e394
call ebx
push eax
call edi
mov eax, dword [ebp - 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e39b
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e416
call ebx
push eax
call edi
mov eax, dword [ebp - 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e41d
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e490
call ebx
push eax
call edi
mov eax, dword [ebp - 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x45e497
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da6eb
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da707
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x117]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da71c
call ebx
push eax
call edi
lea eax, [esi - 0xf9]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da72e
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da733
call ebx
push eax
call edi
push 0
lea eax, [esi - 0xce]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da767
call ebx
push eax
call edi
push 0
lea eax, [esi - 0xc4]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da7ca
call ebx
push eax
call edi
push 0
lea eax, [esi - 0xb2]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da7d9
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x37]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da811
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xfffffed3
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da918
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffff0f
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da92e
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffff4b
push 0
mov dword [ebp - 0xc], eax
push 3
lea eax, [ebp - 0xc]
push eax
push 0x4da944
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffff87
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da95a
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffffc2
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da970
call ebx
push eax
call edi
push 0
lea eax, [esi - 0xc2]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da982
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x43]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4da99b
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
add esi, 0xffffff3b
push eax
push 0x4da9b4
mov dword [ebp - 0xc], esi
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], esi
push eax
push 0x4da9cd
call ebx
push eax
call edi
mov esi, dword [ebp + 0xc]
push 0
push 3
lea eax, [esi - 0xa7]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push 0x4da9e6
call ebx
push eax
call edi
lea eax, [esi - 0x4d]
mov dword [ebp - 0xc], eax
push 0
push 3
lea eax, [ebp - 0xc]
push eax
push 0x4da9ff
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x30]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4daa18
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x2c]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4daa31
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
cmp eax, 0x320
jne 0x1002de2e
cmp esi, 0x258
jne 0x1002de2e
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4daa42
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4daa5e
call ebx
push eax
call edi
push 0
lea eax, [esi - 0xe6]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4daa73
call ebx
push eax
call edi
push 0
lea eax, [esi - 0xc8]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4daa85
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4daa8a
call ebx
push eax
call edi
push 0
lea eax, [esi - 0xa9]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4daabe
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xfffffeb0
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4daac5
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x70
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4daaf3
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xfffffd77
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dab1c
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x98]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dab21
call ebx
push eax
call edi
lea eax, [esi - 0x90]
push 0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dab30
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x15]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dab68
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xfffffed1
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dac6f
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffff0d
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dac85
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffff49
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dac9b
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffff85
mov dword [ebp - 0xc], eax
push 0
push 3
lea eax, [ebp - 0xc]
push eax
push 0x4dacb1
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffffc0
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dacc7
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x9a]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dacd9
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xfffffecc
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dace0
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x31]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dacf2
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xfffffecb
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dacf9
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x9c]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dad0b
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffffa0
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dad12
call ebx
push eax
call edi
push 0
lea eax, [esi - 0xa2]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dad24
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffffbb
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dad2b
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x89]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dad3d
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffffc4
push 0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push 3
push eax
push 0x4dad44
call ebx
push eax
call edi
lea eax, [esi - 0x3b]
push 0
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4dad56
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffffc3
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4dad5d
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x23]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4dad6f
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffffb6
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4dad76
call ebx
push eax
call edi
push 0
lea eax, [esi - 0x27]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4dad88
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
add eax, 0xffffff9a
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4dad8f
call ebx
push eax
call edi
mov eax, dword [ebp - 8]
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4df4e6
call ebx
push eax
call edi
push 0
lea eax, [esi + 2]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4df4ef
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4df514
call ebx
push eax
call edi
push 0
lea eax, [esi + 1]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4df51d
call ebx
push eax
call edi
mov eax, dword [ebp + 8]
cmp eax, 0x320
jne 0x1002e21c
cmp esi, 0x258
jne 0x1002e21c
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4df551
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], esi
push eax
push 0x4df55a
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4e1c30
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4e471a
call ebx
push eax
call edi
push 0
lea eax, [esi - 0xab]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4e4732
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0x10]
add esi, 0xffffff76
push eax
push 0x4e4748
mov dword [ebp - 0x10], esi
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], esi
push eax
push 0x4e478a
call ebx
push eax
call edi
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 0x10]
push 0
push 3
push eax
add edi, 0xffffff8a
push 0x4e475e
mov dword [ebp - 0x10], edi
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call esi
mov dword [ebp - 0x10], edi
push 0
push 3
lea eax, [ebp - 0x10]
push eax
push 0x4e47a0
call ebx
push eax
call esi
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x10]
push 0
push 3
push eax
add esi, 0xffffff9e
push 0x4e4774
mov dword [ebp - 0x10], esi
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], esi
push eax
push 0x4e47b6
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xc]
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4e47cc
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xc]
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4e47e2
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xc]
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4e47f8
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xc]
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4e4811
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xc]
push 0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push 3
push eax
push 0x4e482c
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x14], eax
push 3
lea eax, [ebp - 0x14]
push eax
push 0x4e4855
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], edi
push eax
push 0x4e48ab
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], edi
push eax
push 0x4e4869
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call edi
push 0
push 3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push eax
push 0x4e487f
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push eax
push 0x4e48c1
call ebx
push eax
call edi
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x14]
push 0
push 3
push eax
add esi, 0xffffffb2
push 0x4e4895
mov dword [ebp - 0x14], esi
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push eax
push 0x4e48d7
call ebx
push eax
call edi
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x14]
push 0
push 3
push eax
add esi, 0xffffffca
push 0x4e48ed
mov dword [ebp - 0x14], esi
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push eax
push 0x4e4903
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push eax
push 0x4e4919
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push eax
push 0x4e4932
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push eax
push 0x4e494b
call ebx
push eax
call edi
mov esi, dword [ebp + 8]
lea eax, [ebp + 8]
push 0
push 3
push eax
push 0x4e4841
mov dword [ebp + 8], esi
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp + 8]
mov dword [ebp + 8], esi
push eax
push 0x4ed127
call ebx
push eax
call edi
push 0
lea eax, [esi + 1]
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push 3
push eax
push 0x4ed14e
call ebx
push eax
call edi
push 0
push 3
lea eax, [ebp + 8]
mov dword [ebp + 8], esi
push eax
push 0x4eeac4
call ebx
push eax
call edi
mov esi, dword [ebp + 0xc]
lea eax, [ebp + 8]
push 0
push 3
push eax
push 0x4eeac9
mov dword [ebp + 8], esi
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp + 8], eax
push 3
lea eax, [ebp + 8]
push eax
push 0x4eeadf
call ebx
push eax
call edi
push 0
lea eax, [esi + 1]
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push 3
push eax
push 0x4eeae4
call ebx
push eax
call edi
mov eax, dword [ebp - 4]
push 0
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push 3
push eax
push 0x5a6bc5
call ebx
push eax
call edi
cmp dword [0x1013df60], 1
jne 0x1002e742
push 0
lea eax, [esi - 0xda]
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push 3
push eax
push 0x4daa85
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4daa8f
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x30
push eax
push 0x4daa9e
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0xf0
push eax
push 0x4daaa0
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4dac67
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4dac69
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4dac7d
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4dac7f
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4dac95
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4dac97
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4daca9
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4dacab
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4dacbf
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0x2a
push eax
push 0x4dacc1
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0
push eax
push 0x4dac6b
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0
push eax
push 0x4dac81
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0
push eax
push 0x4dac99
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0
push eax
push 0x4dacad
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp + 8]
mov byte [ebp + 8], 0
push eax
push 0x4dacc3
call ebx
push eax
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret