Function at 0x10064f80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x10151040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x10062510
push 0x80f250
push 0xe8
call fcn.100863f0
push 0x10060940
push 0x8119e6
push 0xe8
call fcn.100863f0
push 0x10060940
push 0x811b1a
push 0xe8
call fcn.100863f0
push 0x10060940
push 0x811b61
push 0xe8
call fcn.100863f0
push 0x1005f850
push 0x80f8e0
push 0xe9
call fcn.100863f0
push 0x100601e0
push 0x80f855
push 0xe8
call fcn.100863f0
add esp, 0x48
push 0x100604d0
push 0x80f84d
push 0xe8
call fcn.100863f0
push 0x1005fb20
push 0x80f845
push 0xe8
call fcn.100863f0
push 0x100608a0
push 0x810fe7
push 0xe8
call fcn.100863f0
push 0x100608a0
push 0x811890
push 0xe8
call fcn.100863f0
push 0x10060910
push 0x810f45
push 0xe8
call fcn.100863f0
push 0x10060910
push 0x8117ee
push 0xe8
call fcn.100863f0
add esp, 0x48
push 0x10060910
push 0x895600
push 0xe9
call fcn.100863f0
push 0x10060910
push 0x895600
push 0xe9
call fcn.100863f0
push 0x849872
push 0x849757
push 0xe9
call fcn.100863f0
push 0x10062a50
push 0x849a52
push 0xe8
call fcn.100863f0
push 0x10062a50
push 0x849aad
push 0xe8
call fcn.100863f0
push 0x10062a50
push 0x849b10
push 0xe8
call fcn.100863f0
add esp, 0x48
push 0x10062a50
push 0x849b6c
push 0xe8
call fcn.100863f0
push 0x10062a50
push 0x849bd0
push 0xe8
call fcn.100863f0
push 0x10062a50
push 0x849c2c
push 0xe8
call fcn.100863f0
push 0x10062da0
push 0x7a9f8e
push 0xe8
call fcn.100863f0
push 0x10062de0
push 0x8491ae
push 0xe8
call fcn.100863f0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0x3c
push eax
push 0x40
push 4
push 0x7a866e
call esi
lea eax, [ebp - 8]
mov dword [0x7a866e], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x7a866e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7a86c5
call esi
lea eax, [ebp - 8]
mov dword [0x7a86c5], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x7a86c5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7a8722
call esi
lea eax, [ebp - 8]
mov dword [0x7a8722], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x7a8722
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7a877f
call esi
lea eax, [ebp - 8]
mov dword [0x7a877f], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x7a877f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7a87dc
call esi
lea eax, [ebp - 8]
mov dword [0x7a87dc], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x7a87dc
call esi
push 0x10062e20
push 0x7a8316
push 0xe8
call fcn.100863f0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x86850f
call esi
lea eax, [ebp - 8]
mov byte [0x86850f], 0x78
push eax
push dword [ebp - 8]
push 1
push 0x86850f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x834d94
call esi
lea eax, [ebp - 8]
mov byte [0x834d94], 0x52
push eax
push dword [ebp - 8]
push 1
push 0x834d94
call esi
push 0x895c02
push 0x895b8d
push 0xe9
call fcn.100863f0
push 0x895c0c
push 0x895b8d
push 0xe9
call fcn.100863f0
push 0x7d39d8
push 0x7d399f
push 0xe9
call fcn.100863f0
push 0x77ec0e
push 0x77eb65
push 0xe9
call fcn.100863f0
push 0x7a8313
push 0x7a830b
push 0xe9
call fcn.100863f0
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77fced
call esi
lea eax, [ebp - 8]
mov byte [0x77fced], 0x12
push eax
push dword [ebp - 8]
push 1
push 0x77fced
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7801da
call esi
lea eax, [ebp - 8]
mov byte [0x7801da], 1
push eax
push dword [ebp - 8]
push 1
push 0x7801da
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x780207
call esi
lea eax, [ebp - 8]
mov byte [0x780207], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x780207
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78021c
call esi
lea eax, [ebp - 8]
mov byte [0x78021c], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x78021c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78023c
call esi
lea eax, [ebp - 8]
mov byte [0x78023c], 0x12
push eax
push dword [ebp - 8]
push 1
push 0x78023c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x780218
call esi
lea eax, [ebp - 8]
mov byte [0x780218], 4
push eax
push dword [ebp - 8]
push 1
push 0x780218
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78190e
call esi
lea eax, [ebp - 8]
mov byte [0x78190e], 1
push eax
push dword [ebp - 8]
push 1
push 0x78190e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78193e
call esi
lea eax, [ebp - 8]
mov byte [0x78193e], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x78193e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x781953
call esi
lea eax, [ebp - 8]
mov byte [0x781953], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x781953
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x781975
call esi
lea eax, [ebp - 8]
mov byte [0x781975], 0x12
push eax
push dword [ebp - 8]
push 1
push 0x781975
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78194f
call esi
lea eax, [ebp - 8]
mov byte [0x78194f], 4
push eax
push dword [ebp - 8]
push 1
push 0x78194f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x782d16
call esi
lea eax, [ebp - 8]
mov byte [0x782d16], 1
push eax
push dword [ebp - 8]
push 1
push 0x782d16
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x782d46
call esi
lea eax, [ebp - 8]
mov byte [0x782d46], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x782d46
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x782d5b
call esi
lea eax, [ebp - 8]
mov byte [0x782d5b], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x782d5b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x782d7e
call esi
mov byte [0x782d7e], 0x12
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x782d7e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x782d57
call esi
lea eax, [ebp - 8]
mov byte [0x782d57], 4
push eax
push dword [ebp - 8]
push 1
push 0x782d57
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7830f0
call esi
lea eax, [ebp - 8]
mov byte [0x7830f0], 1
push eax
push dword [ebp - 8]
push 1
push 0x7830f0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x783120
call esi
lea eax, [ebp - 8]
mov byte [0x783120], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x783120
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x783135
call esi
lea eax, [ebp - 8]
mov byte [0x783135], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x783135
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x783157
call esi
lea eax, [ebp - 8]
mov byte [0x783157], 0x12
push eax
push dword [ebp - 8]
push 1
push 0x783157
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x783131
call esi
lea eax, [ebp - 8]
mov byte [0x783131], 4
push eax
push dword [ebp - 8]
push 1
push 0x783131
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x784b6e
call esi
lea eax, [ebp - 8]
mov byte [0x784b6e], 1
push eax
push dword [ebp - 8]
push 1
push 0x784b6e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x784b9e
call esi
lea eax, [ebp - 8]
mov byte [0x784b9e], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x784b9e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x784bb3
call esi
lea eax, [ebp - 8]
mov byte [0x784bb3], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x784bb3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x784bd6
call esi
lea eax, [ebp - 8]
mov byte [0x784bd6], 0x12
push eax
push dword [ebp - 8]
push 1
push 0x784bd6
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x784baf
call esi
lea eax, [ebp - 8]
mov byte [0x784baf], 4
push eax
push dword [ebp - 8]
push 1
push 0x784baf
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e94b
call esi
lea eax, [ebp - 8]
mov byte [0x77e94b], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e94b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e94d
call esi
lea eax, [ebp - 8]
mov byte [0x77e94d], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e94d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e997
call esi
lea eax, [ebp - 8]
mov byte [0x77e997], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e997
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e999
call esi
lea eax, [ebp - 8]
mov byte [0x77e999], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e999
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e9ea
call esi
lea eax, [ebp - 8]
mov byte [0x77e9ea], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e9ea
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e9ec
call esi
lea eax, [ebp - 8]
mov byte [0x77e9ec], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e9ec
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77ea3c
call esi
lea eax, [ebp - 8]
mov byte [0x77ea3c], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77ea3c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77ea3e
call esi
lea eax, [ebp - 8]
mov byte [0x77ea3e], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77ea3e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77ea8e
call esi
lea eax, [ebp - 8]
mov byte [0x77ea8e], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77ea8e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77ea90
call esi
lea eax, [ebp - 8]
mov byte [0x77ea90], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77ea90
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77e965
call esi
lea eax, [ebp - 8]
mov dword [0x77e965], 0x78
push eax
push dword [ebp - 8]
push 4
push 0x77e965
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77e9b5
call esi
lea eax, [ebp - 8]
mov dword [0x77e9b5], 0x78
push eax
push dword [ebp - 8]
push 4
push 0x77e9b5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77ea07
call esi
lea eax, [ebp - 8]
mov dword [0x77ea07], 0x78
push eax
push dword [ebp - 8]
push 4
push 0x77ea07
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77ea59
call esi
mov dword [0x77ea59], 0x78
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x77ea59
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77eaac
call esi
lea eax, [ebp - 8]
mov dword [0x77eaac], 0x78
push eax
push dword [ebp - 8]
push 4
push 0x77eaac
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784c3e
call esi
lea eax, [ebp - 8]
mov dword [0x784c3e], 0
push eax
push dword [ebp - 8]
push 4
push 0x784c3e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784c47
call esi
lea eax, [ebp - 8]
mov dword [0x784c47], 0
push eax
push dword [ebp - 8]
push 4
push 0x784c47
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x837944
call esi
lea eax, [ebp - 8]
mov byte [0x837944], 0x2a
push eax
push dword [ebp - 8]
push 1
push 0x837944
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x841f78
call esi
lea eax, [ebp - 8]
mov byte [0x841f78], 0x2a
push eax
push dword [ebp - 8]
push 1
push 0x841f78
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84f535
call esi
lea eax, [ebp - 8]
mov byte [0x84f535], 0x26
push eax
push dword [ebp - 8]
push 1
push 0x84f535
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84733e
call esi
lea eax, [ebp - 8]
mov byte [0x84733e], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x84733e
call esi
push 0x100632d0
push 0x790b50
push 0xe9
call fcn.100863f0
push 0x10063a90
push 0x7db308
push 0xe9
call fcn.100863f0
push 0x10063ab0
push 0x7db5d0
push 0xe8
call fcn.100863f0
push 0x10063cb0
push 0x779410
push 0xe9
call fcn.100863f0
push 0x10063d00
push 0x77f7ee
push 0xe8
call fcn.100863f0
push 0x100647f0
push 0x779a02
push 0xe8
call fcn.100863f0
add esp, 0x48
push 0x10064c40
push 0x80f5bb
push 0xe8
call fcn.100863f0
push 0x10064cb0
push 0x80f2e8
push 0xe8
call fcn.100863f0
push 0x10064cd0
push 0x80f4c7
push 0xe8
call fcn.100863f0
push 0x10064d40
push 0x80f6af
push 0xe8
call fcn.100863f0
push 0x10064db0
push 0x80f3d3
push 0xe8
call fcn.100863f0
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x811ac8
call esi
lea eax, [ebp - 8]
mov byte [0x811ac8], 6
push eax
push dword [ebp - 8]
push 1
push 0x811ac8
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x811e3d
call esi
lea eax, [ebp - 8]
mov byte [0x811e3d], 6
push eax
push dword [ebp - 8]
push 1
push 0x811e3d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x811e7e
call esi
lea eax, [ebp - 8]
mov byte [0x811e7e], 3
push eax
push dword [ebp - 8]
push 1
push 0x811e7e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x86014b
call esi
lea eax, [ebp - 8]
mov byte [0x86014b], 9
push eax
push dword [ebp - 8]
push 1
push 0x86014b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x85f2dc
call esi
lea eax, [ebp - 8]
mov byte [0x85f2dc], 9
push eax
push dword [ebp - 8]
push 1
push 0x85f2dc
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x85ec8d
call esi
lea eax, [ebp - 8]
mov byte [0x85ec8d], 9
push eax
push dword [ebp - 8]
push 1
push 0x85ec8d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x85f9be
call esi
lea eax, [ebp - 8]
mov byte [0x85f9be], 9
push eax
push dword [ebp - 8]
push 1
push 0x85f9be
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x80f626
call esi
lea eax, [ebp - 8]
mov dword [0x80f626], 0x81
push eax
push dword [ebp - 8]
push 4
push 0x80f626
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x80f711
call esi
lea eax, [ebp - 8]
mov dword [0x80f711], 0x80
push eax
push dword [ebp - 8]
push 4
push 0x80f711
call esi
push 0x10064ef0
push 0x85f071
push 0xe8
call fcn.100863f0
push 0x10064f10
push 0x86023b
push 0xe8
call fcn.100863f0
push 0x10064f30
push 0x85f223
push 0xe8
call fcn.100863f0
push 0x10064f50
push 0x860016
push 0xe8
call fcn.100863f0
add esp, 0x30
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8137b2
call esi
lea eax, [ebp - 8]
mov byte [0x8137b2], 0
push eax
push dword [ebp - 8]
push 1
push 0x8137b2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x812ad5
call esi
lea eax, [ebp - 8]
mov byte [0x812ad5], 0
push eax
push dword [ebp - 8]
push 1
push 0x812ad5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x81517b
call esi
lea eax, [ebp - 8]
mov byte [0x81517b], 2
push eax
push dword [ebp - 8]
push 1
push 0x81517b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x815242
call esi
mov byte [0x815242], 2
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x815242
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x815321
call esi
lea eax, [ebp - 8]
mov byte [0x815321], 2
push eax
push dword [ebp - 8]
push 1
push 0x815321
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x815400
call esi
lea eax, [ebp - 8]
mov byte [0x815400], 2
push eax
push dword [ebp - 8]
push 1
push 0x815400
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8154df
call esi
lea eax, [ebp - 8]
mov byte [0x8154df], 2
push eax
push dword [ebp - 8]
push 1
push 0x8154df
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7f041d
call esi
lea eax, [ebp - 8]
mov byte [0x7f041d], 0
push eax
push dword [ebp - 8]
push 1
push 0x7f041d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x82c6fd
call esi
lea eax, [ebp - 8]
mov byte [0x82c6fd], 0
push eax
push dword [ebp - 8]
push 1
push 0x82c6fd
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x83513d
call esi
lea eax, [ebp - 8]
mov byte [0x83513d], 0
push eax
push dword [ebp - 8]
push 1
push 0x83513d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x842493
call esi
lea eax, [ebp - 8]
mov byte [0x842493], 0
push eax
push dword [ebp - 8]
push 1
push 0x842493
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x847055
call esi
lea eax, [ebp - 8]
mov byte [0x847055], 0
push eax
push dword [ebp - 8]
push 1
push 0x847055
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84f9f5
call esi
lea eax, [ebp - 8]
mov byte [0x84f9f5], 0
push eax
push dword [ebp - 8]
push 1
push 0x84f9f5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8575e4
call esi
lea eax, [ebp - 8]
mov byte [0x8575e4], 0
push eax
push dword [ebp - 8]
push 1
push 0x8575e4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8578aa
call esi
lea eax, [ebp - 8]
mov byte [0x8578aa], 0
push eax
push dword [ebp - 8]
push 1
push 0x8578aa
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8642ba
call esi
lea eax, [ebp - 8]
mov byte [0x8642ba], 0
push eax
push dword [ebp - 8]
push 1
push 0x8642ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8642d6
call esi
lea eax, [ebp - 8]
mov byte [0x8642d6], 0
push eax
push dword [ebp - 8]
push 1
push 0x8642d6
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84936b
call esi
lea eax, [ebp - 8]
mov dword [0x84936b], 0x101451c8
push eax
push dword [ebp - 8]
push 4
push 0x84936b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84938b
call esi
lea eax, [ebp - 8]
mov dword [0x84938b], 0x10145248
push eax
push dword [ebp - 8]
push 4
push 0x84938b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836b7b
call esi
lea eax, [ebp - 8]
mov dword [0x836b7b], 0x10145220
push eax
push dword [ebp - 8]
push 4
push 0x836b7b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836b9b
call esi
lea eax, [ebp - 8]
mov dword [0x836b9b], 0x10145298
push eax
push dword [ebp - 8]
push 4
push 0x836b9b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836bbb
call esi
lea eax, [ebp - 8]
mov dword [0x836bbb], 0x10145270
push eax
push dword [ebp - 8]
push 4
push 0x836bbb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836bdb
call esi
lea eax, [ebp - 8]
mov dword [0x836bdb], 0x101452e8
push eax
push dword [ebp - 8]
push 4
push 0x836bdb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836bfb
call esi
lea eax, [ebp - 8]
mov dword [0x836bfb], 0x101452bc
push eax
push dword [ebp - 8]
push 4
push 0x836bfb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836c1b
call esi
lea eax, [ebp - 8]
mov dword [0x836c1b], 0x10145338
push eax
push dword [ebp - 8]
push 4
push 0x836c1b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836c3b
call esi
lea eax, [ebp - 8]
mov dword [0x836c3b], 0x10145310
push eax
push dword [ebp - 8]
push 4
push 0x836c3b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836c5b
call esi
lea eax, [ebp - 8]
mov dword [0x836c5b], 0x1014538c
push eax
push dword [ebp - 8]
push 4
push 0x836c5b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836c7b
call esi
lea eax, [ebp - 8]
mov dword [0x836c7b], 0x10145364
push eax
push dword [ebp - 8]
push 4
push 0x836c7b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836c9b
call esi
mov dword [0x836c9b], 0x101453e0
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x836c9b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836cbb
call esi
lea eax, [ebp - 8]
mov dword [0x836cbb], 0x101453b4
push eax
push dword [ebp - 8]
push 4
push 0x836cbb
call esi
push 0x10064e20
push 0x8370ee
push 0xe8
call fcn.100863f0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8367ba
call esi
lea eax, [ebp - 8]
mov dword [0x8367ba], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x8367ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8367c7
call esi
lea eax, [ebp - 8]
mov dword [0x8367c7], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x8367c7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836805
call esi
lea eax, [ebp - 8]
mov dword [0x836805], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x836805
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836812
call esi
lea eax, [ebp - 8]
mov dword [0x836812], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x836812
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836853
call esi
lea eax, [ebp - 8]
mov dword [0x836853], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x836853
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836860
call esi
lea eax, [ebp - 8]
mov dword [0x836860], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x836860
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8367e0
call esi
lea eax, [ebp - 8]
mov byte [0x8367e0], 0x3a
push eax
push dword [ebp - 8]
push 1
push 0x8367e0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x83682b
call esi
lea eax, [ebp - 8]
mov byte [0x83682b], 0x3a
push eax
push dword [ebp - 8]
push 1
push 0x83682b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x836792
call esi
lea eax, [ebp - 8]
mov byte [0x836792], 0x76
push eax
push dword [ebp - 8]
push 1
push 0x836792
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x8119e6
call esi
mov eax, 0x8119e6
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x8119e6
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x48977f
call esi
lea eax, [ebp - 8]
mov byte [0x48977f], 0
push eax
push dword [ebp - 8]
push 1
push 0x48977f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d37e7
call esi
lea eax, [ebp - 8]
mov byte [0x7d37e7], 0
push eax
push dword [ebp - 8]
push 1
push 0x7d37e7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x811d4c
call esi
lea eax, [ebp - 8]
mov byte [0x811d4c], 0
push eax
push dword [ebp - 8]
push 1
push 0x811d4c
call esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.10089049
mov esp, ebp
pop ebp
ret