Function at 0x10009ce0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x100248e4]
test al, 1
jne 0x10009d18
or eax, 1
mov dword [0x100248e0], 0x1000fd38
push 0x1000edb0
mov dword [0x100248e4], eax
call fcn.1000df04
add esp, 4
push ebx
push esi
push edi
call fcn.1000d560
call fcn.10005e60
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, eax
mov edi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
add esp, 8
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0xc], edx
test edx, edx
je 0x10009db4
lea eax, [ebp - 8]
mov byte [edx], 0xe9
push eax
push 0x40
mov ecx, 0x1000b310
push 5
sub ecx, 0x449dd5
push 0x449dd0
mov dword [edx + 1], ecx
call esi
test eax, eax
je 0x10009db4
mov ecx, dword [ebp - 0xc]
mov edx, 0x449dd0
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x10009db4
push 5
push 0x449dd0
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10009e3c
mov ecx, 0x1000b390
mov byte [eax], 0xe9
sub ecx, 0x47df46
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x47df41
call esi
test eax, eax
je 0x10009e3c
mov ecx, dword [ebp - 0xc]
mov edx, 0x47df41
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x10009e3c
push 9
push 0x47df41
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
mov edx, 0x90909090
test eax, eax
je 0x10009ec8
mov ecx, 0x1000b3f0
mov byte [eax], 0xe9
sub ecx, 0x40c660
mov dword [eax + 1], ecx
mov word [eax + 5], dx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x40c65b
call esi
test eax, eax
je 0x10009ec8
mov ecx, dword [ebp - 0xc]
mov edx, 0x40c65b
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x10009ec8
push 7
push 0x40c65b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10009f49
mov ecx, 0x1000b480
mov byte [eax], 0xe9
sub ecx, 0x403787
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x403782
call esi
test eax, eax
je 0x10009f49
mov ecx, dword [ebp - 0xc]
mov edx, 0x403782
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x10009f49
push 6
push 0x403782
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x10009fd1
mov ecx, 0x1000b5b0
mov byte [eax], 0xe9
sub ecx, 0x402339
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x402334
call esi
test eax, eax
je 0x10009fd1
mov ecx, dword [ebp - 0xc]
mov edx, 0x402334
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x10009fd1
push 9
push 0x402334
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a05d
mov ecx, 0x1000b560
mov byte [eax], 0xe9
sub ecx, 0x403882
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x40387d
call esi
test eax, eax
je 0x1000a05d
mov ecx, dword [ebp - 0xc]
mov edx, 0x40387d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000a05d
push 7
push 0x40387d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x54833a
call esi
test eax, eax
je 0x1000a08e
lea eax, [ebp - 8]
mov byte [0x54833a], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x54833a
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x539a34
call esi
test eax, eax
je 0x1000a0bf
lea eax, [ebp - 8]
mov byte [0x539a34], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x539a34
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x539b1c
call esi
test eax, eax
je 0x1000a0f0
lea eax, [ebp - 8]
mov byte [0x539b1c], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x539b1c
call esi
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a16a
mov byte [eax], 0xe9
mov dword [eax + 1], 0x8e
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x51dce1
call esi
test eax, eax
je 0x1000a16a
mov ecx, dword [ebp - 0xc]
mov edx, 0x51dce1
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a16a
push 6
push 0x51dce1
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a1e4
mov byte [eax], 0xe9
mov dword [eax + 1], 0xb1
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x52f02d
call esi
test eax, eax
je 0x1000a1e4
mov ecx, dword [ebp - 0xc]
mov edx, 0x52f02d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a1e4
push 6
push 0x52f02d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x54833a
call esi
test eax, eax
je 0x1000a215
lea eax, [ebp - 8]
mov byte [0x54833a], 0xeb
push eax
push dword [ebp - 8]
push 4
push 0x54833a
call esi
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a29d
mov ecx, 0x1000b750
mov byte [eax], 0xe9
sub ecx, 0x420830
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x42082b
call esi
test eax, eax
je 0x1000a29d
mov ecx, dword [ebp - 0xc]
mov edx, 0x42082b
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x1000a29d
push 9
push 0x42082b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a311
mov byte [eax], 0xe9
mov dword [eax + 1], 1
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x539c48
call esi
test eax, eax
je 0x1000a311
mov ecx, dword [ebp - 0xc]
mov edx, 0x539c48
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a311
push 5
push 0x539c48
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a385
mov byte [eax], 0xe9
mov dword [eax + 1], 4
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x539b1c
call esi
test eax, eax
je 0x1000a385
mov ecx, dword [ebp - 0xc]
mov edx, 0x539b1c
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a385
push 5
push 0x539b1c
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a3f9
mov byte [eax], 0xe9
mov dword [eax + 1], 5
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4404de
call esi
test eax, eax
je 0x1000a3f9
mov ecx, dword [ebp - 0xc]
mov edx, 0x4404de
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a3f9
push 5
push 0x4404de
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a485
mov ecx, 0x1000b650
mov byte [eax], 0xe9
sub ecx, 0x425a9b
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x425a96
call esi
test eax, eax
je 0x1000a485
mov ecx, dword [ebp - 0xc]
mov edx, 0x425a96
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000a485
push 7
push 0x425a96
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 0xa
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a513
mov byte [eax], 0xe9
mov ecx, 0x1000b680
sub ecx, 0x423704
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
mov byte [eax + 9], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x4236ff
call esi
test eax, eax
je 0x1000a513
mov ecx, dword [ebp - 0xc]
mov edx, 0x4236ff
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ax, word [ecx + 8]
mov word [edx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push edx
call esi
test eax, eax
je 0x1000a513
push 0xa
push 0x4236ff
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a59b
mov ecx, 0x1000ba30
mov byte [eax], 0xe9
sub ecx, 0x423f6e
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x423f69
call esi
test eax, eax
je 0x1000a59b
mov ecx, dword [ebp - 0xc]
mov edx, 0x423f69
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x1000a59b
push 9
push 0x423f69
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a61c
mov ecx, 0x1000b620
mov byte [eax], 0xe9
sub ecx, 0x4211ab
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4211a6
call esi
test eax, eax
je 0x1000a61c
mov ecx, dword [ebp - 0xc]
mov edx, 0x4211a6
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a61c
push 6
push 0x4211a6
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a6a4
mov ecx, 0x1000ba70
mov byte [eax], 0xe9
sub ecx, 0x40cd32
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x40cd2d
call esi
test eax, eax
je 0x1000a6a4
mov ecx, dword [ebp - 0xc]
mov edx, 0x40cd2d
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x1000a6a4
push 9
push 0x40cd2d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a725
mov byte [eax], 0xe9
mov dword [eax + 1], 0x15
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x40cd75
call esi
test eax, eax
je 0x1000a725
mov ecx, dword [ebp - 0xc]
mov edx, 0x40cd75
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x1000a725
push 9
push 0x40cd75
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a7a4
mov ecx, 0x1000b600
mov word [eax], 0x8d0f
sub ecx, 0x428baf
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x428ba9
call esi
test eax, eax
je 0x1000a7a4
mov ecx, dword [ebp - 0xc]
mov edx, 0x428ba9
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a7a4
push 6
push 0x428ba9
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a81f
mov ecx, 0x1000b5d0
mov byte [eax], 0xe9
sub ecx, 0x428ff2
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x428fed
call esi
test eax, eax
je 0x1000a81f
mov ecx, dword [ebp - 0xc]
mov edx, 0x428fed
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000a81f
push 5
push 0x428fed
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x477a8d
call esi
test eax, eax
je 0x1000a850
lea eax, [ebp - 8]
mov byte [0x477a8d], 0x1f
push eax
push dword [ebp - 8]
push 1
push 0x477a8d
call esi
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a8dc
mov ecx, 0x1000b9f0
mov byte [eax], 0xe9
sub ecx, 0x46ed60
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x46ed5b
call esi
test eax, eax
je 0x1000a8dc
mov ecx, dword [ebp - 0xc]
mov edx, 0x46ed5b
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000a8dc
push 7
push 0x46ed5b
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a95b
mov ecx, 0x1000ba90
mov word [eax], 0x840f
sub ecx, 0x49b3a0
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x49b39a
call esi
test eax, eax
je 0x1000a95b
mov ecx, dword [ebp - 0xc]
mov edx, 0x49b39a
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a95b
push 6
push 0x49b39a
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000a9da
mov ecx, 0x1000ba90
mov word [eax], 0x840f
sub ecx, 0x49b3b0
mov dword [eax + 2], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x49b3aa
call esi
test eax, eax
je 0x1000a9da
mov ecx, dword [ebp - 0xc]
mov edx, 0x49b3aa
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000a9da
push 6
push 0x49b3aa
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000aa55
mov ecx, 0x1000bb50
mov byte [eax], 0xe9
sub ecx, 0x46ec8f
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x46ec8a
call esi
test eax, eax
je 0x1000aa55
mov ecx, dword [ebp - 0xc]
mov edx, 0x46ec8a
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000aa55
push 5
push 0x46ec8a
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x60aa00
call esi
test eax, eax
je 0x1000aa89
lea eax, [ebp - 8]
mov dword [0x60aa00], 0x1e
push eax
push dword [ebp - 8]
push 4
push 0x60aa00
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x60aa04
call esi
test eax, eax
je 0x1000aabd
lea eax, [ebp - 8]
mov dword [0x60aa04], 0x1e
push eax
push dword [ebp - 8]
push 4
push 0x60aa04
call esi
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ab38
mov ecx, 0x1000bb20
mov byte [eax], 0xe9
sub ecx, 0x4df20d
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x4df208
call esi
test eax, eax
je 0x1000ab38
mov ecx, dword [ebp - 0xc]
mov edx, 0x4df208
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000ab38
push 5
push 0x4df208
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000abb9
mov ecx, 0x1000baf0
mov byte [eax], 0xe9
sub ecx, 0x4e0462
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4e045d
call esi
test eax, eax
je 0x1000abb9
mov ecx, dword [ebp - 0xc]
mov edx, 0x4e045d
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000abb9
push 6
push 0x4e045d
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 9
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ac41
mov ecx, 0x1000bab0
mov byte [eax], 0xe9
sub ecx, 0x4ccbe1
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x4ccbdc
call esi
test eax, eax
je 0x1000ac41
mov ecx, dword [ebp - 0xc]
mov edx, 0x4ccbdc
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov al, byte [ecx + 8]
mov byte [edx + 8], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push edx
call esi
test eax, eax
je 0x1000ac41
push 9
push 0x4ccbdc
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000acc2
mov ecx, 0x1000bbf0
mov byte [eax], 0xe9
sub ecx, 0x424f1e
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x424f19
call esi
test eax, eax
je 0x1000acc2
mov ecx, dword [ebp - 0xc]
mov edx, 0x424f19
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000acc2
push 6
push 0x424f19
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ad43
mov ecx, 0x1000bc50
mov byte [eax], 0xe9
sub ecx, 0x4bac64
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4bac5f
call esi
test eax, eax
je 0x1000ad43
mov ecx, dword [ebp - 0xc]
mov edx, 0x4bac5f
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000ad43
push 6
push 0x4bac5f
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 0xa
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000add1
mov byte [eax], 0xe9
mov ecx, 0x1000bc90
sub ecx, 0x47dbb4
mov dword [eax + 1], ecx
mov dword [eax + 5], 0x90909090
mov byte [eax + 9], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 0xa
push 0x47dbaf
call esi
test eax, eax
je 0x1000add1
mov ecx, dword [ebp - 0xc]
mov edx, 0x47dbaf
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ax, word [ecx + 8]
mov word [edx + 8], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xa
push edx
call esi
test eax, eax
je 0x1000add1
push 0xa
push 0x47dbaf
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000ae52
mov ecx, 0x1000bcf0
mov byte [eax], 0xe9
sub ecx, 0x44e7ea
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x44e7e5
call esi
test eax, eax
je 0x1000ae52
mov ecx, dword [ebp - 0xc]
mov edx, 0x44e7e5
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000ae52
push 6
push 0x44e7e5
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000aecd
mov ecx, 0x1000bd10
mov byte [eax], 0xe9
sub ecx, 0x44534b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x445346
call esi
test eax, eax
je 0x1000aecd
mov ecx, dword [ebp - 0xc]
mov edx, 0x445346
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000aecd
push 5
push 0x445346
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000af59
mov ecx, 0x1000bd50
mov byte [eax], 0xe9
sub ecx, 0x50d5bd
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x50d5b8
call esi
test eax, eax
je 0x1000af59
mov ecx, dword [ebp - 0xc]
mov edx, 0x50d5b8
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000af59
push 7
push 0x50d5b8
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000afda
mov ecx, 0x1000bda0
mov byte [eax], 0xe9
sub ecx, 0x4abcc0
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x4abcbb
call esi
test eax, eax
je 0x1000afda
mov ecx, dword [ebp - 0xc]
mov edx, 0x4abcbb
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000afda
push 6
push 0x4abcbb
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b055
mov ecx, 0x1000bdd0
mov byte [eax], 0xe9
sub ecx, 0x50ee5b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50ee56
call esi
test eax, eax
je 0x1000b055
mov ecx, dword [ebp - 0xc]
mov edx, 0x50ee56
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b055
push 5
push 0x50ee56
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 7
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b0e1
mov ecx, 0x1000be00
mov byte [eax], 0xe9
sub ecx, 0x53cddd
mov dword [eax + 1], ecx
mov ecx, 0x90909090
mov word [eax + 5], cx
lea eax, [ebp - 8]
push eax
push 0x40
push 7
push 0x53cdd8
call esi
test eax, eax
je 0x1000b0e1
mov ecx, dword [ebp - 0xc]
mov edx, 0x53cdd8
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
mov al, byte [ecx + 6]
mov byte [edx + 6], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 7
push edx
call esi
test eax, eax
je 0x1000b0e1
push 7
push 0x53cdd8
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b15c
mov ecx, 0x1000be50
mov byte [eax], 0xe9
sub ecx, 0x50f45b
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50f456
call esi
test eax, eax
je 0x1000b15c
mov ecx, dword [ebp - 0xc]
mov edx, 0x50f456
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b15c
push 5
push 0x50f456
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
push 0x100245a5
push 5
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b1d7
mov ecx, 0x1000be80
mov byte [eax], 0xe9
sub ecx, 0x50ddcc
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x50ddc7
call esi
test eax, eax
je 0x1000b1d7
mov ecx, dword [ebp - 0xc]
mov edx, 0x50ddc7
mov eax, dword [ecx]
mov dword [edx], eax
mov al, byte [ecx + 4]
mov byte [edx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push edx
call esi
test eax, eax
je 0x1000b1d7
push 5
push 0x50ddc7
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x42aaf9
call esi
test eax, eax
je 0x1000b20b
lea eax, [ebp - 8]
mov dword [0x42aaf9], 0
push eax
push dword [ebp - 8]
push 4
push 0x42aaf9
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x46eced
call esi
test eax, eax
je 0x1000b23f
lea eax, [ebp - 8]
mov dword [0x46eced], 0
push eax
push dword [ebp - 8]
push 4
push 0x46eced
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x547cac
call esi
test eax, eax
je 0x1000b273
lea eax, [ebp - 8]
mov dword [0x547cac], 0
push eax
push dword [ebp - 8]
push 4
push 0x547cac
call esi
push 0x100245a5
push 6
mov dword [ebp - 8], 0
call fcn.1000df7c
add esp, 8
mov dword [ebp - 0xc], eax
test eax, eax
je 0x1000b2f4
mov ecx, 0x1000beb0
mov byte [eax], 0xe9
sub ecx, 0x44bb21
mov dword [eax + 1], ecx
mov byte [eax + 5], 0x90
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x44bb1c
call esi
test eax, eax
je 0x1000b2f4
mov ecx, dword [ebp - 0xc]
mov edx, 0x44bb1c
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx + 4]
mov word [edx + 4], ax
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push edx
call esi
test eax, eax
je 0x1000b2f4
push 6
push 0x44bb1c
call ebx
push eax
call edi
push dword [ebp - 0xc]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000dd30
mov esp, ebp
pop ebp
ret