Function at 0x10006f60
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10015670
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x428
mov eax, dword [0x1001b010]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x438], esp
push 0xd
movups xmmword [ecx], xmm0
push str.WideInventory
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000a950
sub esp, 0x18
mov dword [ebp - 4], 0
mov ecx, esp
xorps xmm0, xmm0
push 7
movups xmmword [ecx], xmm0
push str.general
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.1000a950
push 1
mov dword [ebp - 4], 0xffffffff
call fcn.10002230
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
test al, al
mov byte [0x1001be90], al
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
je 0x10007514
push 0x81c968
call esi
lea eax, [ebp - 0x434]
mov dword [0x81c968], 0x132
push eax
push dword [ebp - 0x434]
push 4
push 0x81c968
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x81c518
call esi
lea eax, [ebp - 0x434]
mov dword [0x81c518], 0x138
push eax
push dword [ebp - 0x434]
push 4
push 0x81c518
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x81c513
call esi
lea eax, [ebp - 0x434]
mov dword [0x81c513], 0xda
push eax
push dword [ebp - 0x434]
push 4
push 0x81c513
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81e347
call esi
lea eax, [ebp - 0x434]
mov byte [0x81e347], 8
push eax
push dword [ebp - 0x434]
push 1
push 0x81e347
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81e34f
call esi
lea eax, [ebp - 0x434]
mov byte [0x81e34f], 8
push eax
push dword [ebp - 0x434]
push 1
push 0x81e34f
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x81dd60
call esi
lea eax, [ebp - 0x434]
mov dword [0x81dd60], 0xc3
push eax
push dword [ebp - 0x434]
push 4
push 0x81dd60
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x81cd68
call esi
mov dword [0x81cd68], 0xc4
lea eax, [ebp - 0x434]
push eax
push dword [ebp - 0x434]
push 4
push 0x81cd68
call esi
push 5
mov edx, 0x81cd6c
mov ecx, 0x100016e0
call fcn.100110e0
add esp, 4
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x81dcd9
call esi
lea eax, [ebp - 0x434]
mov dword [0x81dcd9], 0x110
push eax
push dword [ebp - 0x434]
push 4
push 0x81dcd9
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81ccbf
call esi
lea eax, [ebp - 0x434]
mov byte [0x81ccbf], 0x32
push eax
push dword [ebp - 0x434]
push 1
push 0x81ccbf
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x81ccba
call esi
lea eax, [ebp - 0x434]
mov dword [0x81ccba], 0x86
push eax
push dword [ebp - 0x434]
push 4
push 0x81ccba
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x81ccc1
call esi
lea eax, [ebp - 0x434]
mov dword [0x81ccc1], 0x126
push eax
push dword [ebp - 0x434]
push 4
push 0x81ccc1
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x81ccdb
call esi
lea eax, [ebp - 0x434]
mov dword [0x81ccdb], 0x120
push eax
push dword [ebp - 0x434]
push 4
push 0x81ccdb
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x81c4d5
call esi
lea eax, [ebp - 0x434]
mov dword [0x81c4d5], 0x126
push eax
push dword [ebp - 0x434]
push 4
push 0x81c4d5
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81ce52
call esi
lea eax, [ebp - 0x434]
mov byte [0x81ce52], 0x81
push eax
push dword [ebp - 0x434]
push 1
push 0x81ce52
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81ddfb
call esi
lea eax, [ebp - 0x434]
mov byte [0x81ddfb], 0x20
push eax
push dword [ebp - 0x434]
push 1
push 0x81ddfb
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81dbdd
call esi
lea eax, [ebp - 0x434]
mov byte [0x81dbdd], 0x20
push eax
push dword [ebp - 0x434]
push 1
push 0x81dbdd
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81e324
call esi
lea eax, [ebp - 0x434]
mov byte [0x81e324], 0x20
push eax
push dword [ebp - 0x434]
push 1
push 0x81e324
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81d295
call esi
lea eax, [ebp - 0x434]
mov byte [0x81d295], 0xe0
push eax
push dword [ebp - 0x434]
push 1
push 0x81d295
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81d085
call esi
mov byte [0x81d085], 0xfd
lea eax, [ebp - 0x434]
push eax
push dword [ebp - 0x434]
push 1
push 0x81d085
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81d297
call esi
lea eax, [ebp - 0x434]
mov byte [0x81d297], 8
push eax
push dword [ebp - 0x434]
push 1
push 0x81d297
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81d2c6
call esi
lea eax, [ebp - 0x434]
mov byte [0x81d2c6], 0xc5
push eax
push dword [ebp - 0x434]
push 1
push 0x81d2c6
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81e65c
call esi
lea eax, [ebp - 0x434]
mov byte [0x81e65c], 0x3d
push eax
push dword [ebp - 0x434]
push 1
push 0x81e65c
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81e662
call esi
lea eax, [ebp - 0x434]
mov byte [0x81e662], 0xc7
push eax
push dword [ebp - 0x434]
push 1
push 0x81e662
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81eb23
call esi
lea eax, [ebp - 0x434]
mov byte [0x81eb23], 0x1d
push eax
push dword [ebp - 0x434]
push 1
push 0x81eb23
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81eb1f
call esi
lea eax, [ebp - 0x434]
mov byte [0x81eb1f], 0x1d
push eax
push dword [ebp - 0x434]
push 1
push 0x81eb1f
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81eb51
call esi
lea eax, [ebp - 0x434]
mov byte [0x81eb51], 0xdd
push eax
push dword [ebp - 0x434]
push 1
push 0x81eb51
jmp 0x1000759a
push 0x81dcd9
call esi
lea eax, [ebp - 0x434]
mov dword [0x81dcd9], 0x89
push eax
push dword [ebp - 0x434]
push 4
push 0x81dcd9
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x81cd6d
call esi
lea eax, [ebp - 0x434]
mov byte [0x81cd6d], 8
push eax
push dword [ebp - 0x434]
push 1
push 0x81cd6d
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x81cd68
call esi
lea eax, [ebp - 0x434]
mov dword [0x81cd68], 0x10b
push eax
push dword [ebp - 0x434]
push 4
push 0x81cd68
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x490651
call esi
lea eax, [ebp - 0x434]
mov byte [0x490651], 0xeb
push eax
push dword [ebp - 0x434]
push 1
push 0x490651
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x4905ec
call esi
lea eax, [ebp - 0x434]
mov byte [0x4905ec], 0
push eax
push dword [ebp - 0x434]
push 1
push 0x4905ec
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x4905f3
call esi
lea eax, [ebp - 0x434]
mov byte [0x4905f3], 0xeb
push eax
push dword [ebp - 0x434]
push 1
push 0x4905f3
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x5304f0
call esi
lea eax, [ebp - 0x434]
mov byte [0x5304f0], 0xeb
push eax
push dword [ebp - 0x434]
push 1
push 0x5304f0
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x4f56a8
call esi
lea eax, [ebp - 0x434]
mov byte [0x4f56a8], 0xeb
push eax
push dword [ebp - 0x434]
push 1
push 0x4f56a8
call esi
push 4
mov edx, 0x8d3799
mov dword [0x1001b090], 0x7fff
mov ecx, 0x10001840
call fcn.100110e0
add esp, 4
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x620643
call esi
lea eax, [ebp - 0x434]
mov byte [0x620643], 6
push eax
push dword [ebp - 0x434]
push 1
push 0x620643
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d31ed
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d31ed], 0x428
push eax
push dword [ebp - 0x434]
push 4
push 0x8d31ed
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d3125
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d3125], 0x3dd
push eax
push dword [ebp - 0x434]
push 4
push 0x8d3125
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d2fb4
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d2fb4], 0x392
push eax
push dword [ebp - 0x434]
push 4
push 0x8d2fb4
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d358c
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d358c], 0x455
push eax
push dword [ebp - 0x434]
push 4
push 0x8d358c
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d3490
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d3490], 0x437
push eax
push dword [ebp - 0x434]
push 4
push 0x8d3490
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d3409
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d3409], 0x419
push eax
push dword [ebp - 0x434]
push 4
push 0x8d3409
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d3382
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d3382], 0x3fb
push eax
push dword [ebp - 0x434]
push 4
push 0x8d3382
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d32fb
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d32fb], 0x3dd
push eax
push dword [ebp - 0x434]
push 4
push 0x8d32fb
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d3274
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d3274], 0x3bf
push eax
push dword [ebp - 0x434]
push 4
push 0x8d3274
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d40d5
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d40d5], 0x3ac
push eax
push dword [ebp - 0x434]
push 4
push 0x8d40d5
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d369c
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d369c], 0x393
push eax
push dword [ebp - 0x434]
push 4
push 0x8d369c
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d405f
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d405f], 0x393
push eax
push dword [ebp - 0x434]
push 4
push 0x8d405f
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x849e40
call esi
lea eax, [ebp - 0x434]
mov dword [0x849e40], 0x3d3
push eax
push dword [ebp - 0x434]
push 4
push 0x849e40
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x84a5be
call esi
lea eax, [ebp - 0x434]
mov dword [0x84a5be], 0x41e
push eax
push dword [ebp - 0x434]
push 4
push 0x84a5be
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x523093
call esi
lea eax, [ebp - 0x434]
mov dword [0x523093], 0x2f5
push eax
push dword [ebp - 0x434]
push 4
push 0x523093
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x522c88
call esi
lea eax, [ebp - 0x434]
mov dword [0x522c88], 0x2f5
push eax
push dword [ebp - 0x434]
push 4
push 0x522c88
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x522e7a
call esi
lea eax, [ebp - 0x434]
mov dword [0x522e7a], 0x2f5
push eax
push dword [ebp - 0x434]
push 4
push 0x522e7a
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x52336e
call esi
lea eax, [ebp - 0x434]
mov dword [0x52336e], 0x2f5
push eax
push dword [ebp - 0x434]
push 4
push 0x52336e
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x5235aa
call esi
lea eax, [ebp - 0x434]
mov dword [0x5235aa], 0x31e
push eax
push dword [ebp - 0x434]
push 4
push 0x5235aa
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x5237a0
call esi
lea eax, [ebp - 0x434]
mov dword [0x5237a0], 0x2f5
push eax
push dword [ebp - 0x434]
push 4
push 0x5237a0
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x523992
call esi
lea eax, [ebp - 0x434]
mov dword [0x523992], 0x2f5
push eax
push dword [ebp - 0x434]
push 4
push 0x523992
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x523bc6
call esi
lea eax, [ebp - 0x434]
mov dword [0x523bc6], 0x31e
push eax
push dword [ebp - 0x434]
push 4
push 0x523bc6
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x523dc7
call esi
lea eax, [ebp - 0x434]
mov dword [0x523dc7], 0x2f5
push eax
push dword [ebp - 0x434]
push 4
push 0x523dc7
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x523fb9
call esi
lea eax, [ebp - 0x434]
mov dword [0x523fb9], 0x2f5
push eax
push dword [ebp - 0x434]
push 4
push 0x523fb9
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x5243f0
call esi
mov dword [0x5243f0], 0x999
lea eax, [ebp - 0x434]
push eax
push dword [ebp - 0x434]
push 4
push 0x5243f0
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x52315d
call esi
lea eax, [ebp - 0x434]
mov byte [0x52315d], 0x1e
push eax
push dword [ebp - 0x434]
push 1
push 0x52315d
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x52315e
call esi
lea eax, [ebp - 0x434]
mov byte [0x52315e], 3
push eax
push dword [ebp - 0x434]
push 1
push 0x52315e
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x523155
call esi
lea eax, [ebp - 0x434]
mov byte [0x523155], 0x69
push eax
push dword [ebp - 0x434]
push 1
push 0x523155
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x523156
call esi
lea eax, [ebp - 0x434]
mov byte [0x523156], 2
push eax
push dword [ebp - 0x434]
push 1
push 0x523156
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d276b
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d276b], 0x183
push eax
push dword [ebp - 0x434]
push 4
push 0x8d276b
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d8bf4
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d8bf4], 0x183
push eax
push dword [ebp - 0x434]
push 4
push 0x8d8bf4
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d2766
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d2766], 0x2bd
push eax
push dword [ebp - 0x434]
push 4
push 0x8d2766
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d29b5
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d29b5], 0x2bd
push eax
push dword [ebp - 0x434]
push 4
push 0x8d29b5
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d29ba
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d29ba], 0x22d
push eax
push dword [ebp - 0x434]
push 4
push 0x8d29ba
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d9374
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d9374], 0x22d
push eax
push dword [ebp - 0x434]
push 4
push 0x8d9374
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8dee35
call esi
lea eax, [ebp - 0x434]
mov dword [0x8dee35], 0x184
push eax
push dword [ebp - 0x434]
push 4
push 0x8dee35
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d9ac2
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d9ac2], 0x386
push eax
push dword [ebp - 0x434]
push 4
push 0x8d9ac2
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8dacf7
call esi
lea eax, [ebp - 0x434]
mov dword [0x8dacf7], 0x19a
push eax
push dword [ebp - 0x434]
push 4
push 0x8dacf7
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8dada5
call esi
lea eax, [ebp - 0x434]
mov dword [0x8dada5], 0x19e
push eax
push dword [ebp - 0x434]
push 4
push 0x8dada5
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8dae2a
call esi
lea eax, [ebp - 0x434]
mov dword [0x8dae2a], 0x19e
push eax
push dword [ebp - 0x434]
push 4
push 0x8dae2a
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8daedd
call esi
lea eax, [ebp - 0x434]
mov dword [0x8daedd], 0x1a6
push eax
push dword [ebp - 0x434]
push 4
push 0x8daedd
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8daf6c
call esi
lea eax, [ebp - 0x434]
mov dword [0x8daf6c], 0x1a7
push eax
push dword [ebp - 0x434]
push 4
push 0x8daf6c
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8daf65
call esi
lea eax, [ebp - 0x434]
mov dword [0x8daf65], 0x29d
push eax
push dword [ebp - 0x434]
push 4
push 0x8daf65
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8da46a
call esi
lea eax, [ebp - 0x434]
mov dword [0x8da46a], 0x24e
push eax
push dword [ebp - 0x434]
push 4
push 0x8da46a
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8da4f8
call esi
lea eax, [ebp - 0x434]
mov dword [0x8da4f8], 0x24f
push eax
push dword [ebp - 0x434]
push 4
push 0x8da4f8
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8da5a3
call esi
lea eax, [ebp - 0x434]
mov dword [0x8da5a3], 0x253
push eax
push dword [ebp - 0x434]
push 4
push 0x8da5a3
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8da621
call esi
lea eax, [ebp - 0x434]
mov dword [0x8da621], 0x253
push eax
push dword [ebp - 0x434]
push 4
push 0x8da621
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8da7d9
call esi
lea eax, [ebp - 0x434]
mov dword [0x8da7d9], 0x256
push eax
push dword [ebp - 0x434]
push 4
push 0x8da7d9
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8da6fc
call esi
lea eax, [ebp - 0x434]
mov dword [0x8da6fc], 0x256
push eax
push dword [ebp - 0x434]
push 4
push 0x8da6fc
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8da78c
call esi
mov dword [0x8da78c], 0x25c
lea eax, [ebp - 0x434]
push eax
push dword [ebp - 0x434]
push 4
push 0x8da78c
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8da85b
call esi
lea eax, [ebp - 0x434]
mov dword [0x8da85b], 0x263
push eax
push dword [ebp - 0x434]
push 4
push 0x8da85b
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8da915
call esi
lea eax, [ebp - 0x434]
mov dword [0x8da915], 0x26c
push eax
push dword [ebp - 0x434]
push 4
push 0x8da915
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d7823
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d7823], 0x232
push eax
push dword [ebp - 0x434]
push 4
push 0x8d7823
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d7830
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d7830], 0x387
push eax
push dword [ebp - 0x434]
push 4
push 0x8d7830
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d783d
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d783d], 0x2a7
push eax
push dword [ebp - 0x434]
push 4
push 0x8d783d
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d784a
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d784a], 0x2b6
push eax
push dword [ebp - 0x434]
push 4
push 0x8d784a
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d179b
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d179b], 0x46e
push eax
push dword [ebp - 0x434]
push 4
push 0x8d179b
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d1794
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d1794], 0x2d6
push eax
push dword [ebp - 0x434]
push 4
push 0x8d1794
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8de8e7
call esi
lea eax, [ebp - 0x434]
mov dword [0x8de8e7], 0xfffffb92
push eax
push dword [ebp - 0x434]
push 4
push 0x8de8e7
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8de8f0
call esi
lea eax, [ebp - 0x434]
mov dword [0x8de8f0], 0xfffffd90
push eax
push dword [ebp - 0x434]
push 4
push 0x8de8f0
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8d3591
call esi
lea eax, [ebp - 0x434]
mov dword [0x8d3591], 0x3e9
push eax
push dword [ebp - 0x434]
push 4
push 0x8d3591
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x89b63a
call esi
lea eax, [ebp - 0x434]
mov dword [0x89b63a], 0x230
push eax
push dword [ebp - 0x434]
push 4
push 0x89b63a
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x89b6f8
call esi
lea eax, [ebp - 0x434]
mov dword [0x89b6f8], 0x36b
push eax
push dword [ebp - 0x434]
push 4
push 0x89b6f8
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8df4b1
call esi
lea eax, [ebp - 0x434]
mov byte [0x8df4b1], 0xc9
push eax
push dword [ebp - 0x434]
push 1
push 0x8df4b1
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8df4b2
call esi
lea eax, [ebp - 0x434]
mov byte [0x8df4b2], 0xc3
push eax
push dword [ebp - 0x434]
push 1
push 0x8df4b2
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8ffff0
call esi
lea eax, [ebp - 0x434]
mov dword [0x8ffff0], 0x73
push eax
push dword [ebp - 0x434]
push 4
push 0x8ffff0
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x900063
call esi
lea eax, [ebp - 0x434]
mov byte [0x900063], 0x16
push eax
push dword [ebp - 0x434]
push 1
push 0x900063
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x9000e5
call esi
lea eax, [ebp - 0x434]
mov byte [0x9000e5], 0x29
push eax
push dword [ebp - 0x434]
push 1
push 0x9000e5
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8ff970
call esi
lea eax, [ebp - 0x434]
mov dword [0x8ff970], 0x10c
push eax
push dword [ebp - 0x434]
push 4
push 0x8ff970
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x90028a
call esi
lea eax, [ebp - 0x434]
mov dword [0x90028a], 0xb0
push eax
push dword [ebp - 0x434]
push 4
push 0x90028a
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x90027d
call esi
lea eax, [ebp - 0x434]
mov dword [0x90027d], 0xf5
push eax
push dword [ebp - 0x434]
push 4
push 0x90027d
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x902c83
call esi
lea eax, [ebp - 0x434]
mov dword [0x902c83], 0xb8
push eax
push dword [ebp - 0x434]
push 4
push 0x902c83
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x902c89
call esi
lea eax, [ebp - 0x434]
mov byte [0x902c89], 0xd
push eax
push dword [ebp - 0x434]
push 1
push 0x902c89
call esi
push 0xf
mov edx, 0x901566
mov ecx, 0x10001860
call fcn.100110e0
add esp, 4
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x903e11
call esi
lea eax, [ebp - 0x434]
mov byte [0x903e11], 0
push eax
push dword [ebp - 0x434]
push 1
push 0x903e11
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x904015
call esi
lea eax, [ebp - 0x434]
mov byte [0x904015], 2
push eax
push dword [ebp - 0x434]
push 1
push 0x904015
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8c6b66
call esi
lea eax, [ebp - 0x434]
mov dword [0x8c6b66], 0xc7
push eax
push dword [ebp - 0x434]
push 4
push 0x8c6b66
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8c6b6b
call esi
lea eax, [ebp - 0x434]
mov byte [0x8c6b6b], 0x34
push eax
push dword [ebp - 0x434]
push 1
push 0x8c6b6b
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8c6565
call esi
lea eax, [ebp - 0x434]
mov dword [0x8c6565], 0xe5
push eax
push dword [ebp - 0x434]
push 4
push 0x8c6565
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8c66fe
call esi
lea eax, [ebp - 0x434]
mov dword [0x8c66fe], 0xf7
push eax
push dword [ebp - 0x434]
push 4
push 0x8c66fe
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8c6897
call esi
lea eax, [ebp - 0x434]
mov dword [0x8c6897], 0x109
push eax
push dword [ebp - 0x434]
push 4
push 0x8c6897
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8c6a2b
call esi
lea eax, [ebp - 0x434]
mov dword [0x8c6a2b], 0x11b
push eax
push dword [ebp - 0x434]
push 4
push 0x8c6a2b
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8c4e1c
call esi
lea eax, [ebp - 0x434]
mov dword [0x8c4e1c], 0x133
push eax
push dword [ebp - 0x434]
push 4
push 0x8c4e1c
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8c4e21
call esi
lea eax, [ebp - 0x434]
mov byte [0x8c4e21], 0x7b
push eax
push dword [ebp - 0x434]
push 1
push 0x8c4e21
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8c7bcd
call esi
lea eax, [ebp - 0x434]
mov dword [0x8c7bcd], 0xe6
push eax
push dword [ebp - 0x434]
push 4
push 0x8c7bcd
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8c7c25
call esi
lea eax, [ebp - 0x434]
mov dword [0x8c7c25], 0xf8
push eax
push dword [ebp - 0x434]
push 4
push 0x8c7c25
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8c7c7d
call esi
lea eax, [ebp - 0x434]
mov dword [0x8c7c7d], 0x10a
push eax
push dword [ebp - 0x434]
push 4
push 0x8c7c7d
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8c7cd5
call esi
mov dword [0x8c7cd5], 0x11c
lea eax, [ebp - 0x434]
push eax
push dword [ebp - 0x434]
push 4
push 0x8c7cd5
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8c4e92
call esi
lea eax, [ebp - 0x434]
mov byte [0x8c4e92], 0x80
push eax
push dword [ebp - 0x434]
push 1
push 0x8c4e92
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8c57c0
call esi
lea eax, [ebp - 0x434]
mov byte [0x8c57c0], 0x80
push eax
push dword [ebp - 0x434]
push 1
push 0x8c57c0
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8c54aa
call esi
lea eax, [ebp - 0x434]
mov byte [0x8c54aa], 0x80
push eax
push dword [ebp - 0x434]
push 1
push 0x8c54aa
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8c6c66
call esi
lea eax, [ebp - 0x434]
mov byte [0x8c6c66], 0x80
push eax
push dword [ebp - 0x434]
push 1
push 0x8c6c66
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8c7d64
call esi
lea eax, [ebp - 0x434]
mov byte [0x8c7d64], 0x81
push eax
push dword [ebp - 0x434]
push 1
push 0x8c7d64
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8c7e1f
call esi
lea eax, [ebp - 0x434]
mov byte [0x8c7e1f], 0x81
push eax
push dword [ebp - 0x434]
push 1
push 0x8c7e1f
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8c7ede
call esi
lea eax, [ebp - 0x434]
mov byte [0x8c7ede], 0x81
push eax
push dword [ebp - 0x434]
push 1
push 0x8c7ede
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8c4ed6
call esi
lea eax, [ebp - 0x434]
mov byte [0x8c4ed6], 0xeb
push eax
push dword [ebp - 0x434]
push 1
push 0x8c4ed6
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8ab27b
call esi
lea eax, [ebp - 0x434]
mov byte [0x8ab27b], 0xeb
push eax
push dword [ebp - 0x434]
push 1
push 0x8ab27b
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8cba7d
call esi
lea eax, [ebp - 0x434]
mov dword [0x8cba7d], 0x99
push eax
push dword [ebp - 0x434]
push 4
push 0x8cba7d
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8cbac8
call esi
lea eax, [ebp - 0x434]
mov dword [0x8cbac8], 0x99
push eax
push dword [ebp - 0x434]
push 4
push 0x8cbac8
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8e8e2a
call esi
lea eax, [ebp - 0x434]
mov dword [0x8e8e2a], 0x7d
push eax
push dword [ebp - 0x434]
push 4
push 0x8e8e2a
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8e8e34
call esi
lea eax, [ebp - 0x434]
mov dword [0x8e8e34], 0x8b
push eax
push dword [ebp - 0x434]
push 4
push 0x8e8e34
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8e8e3d
call esi
lea eax, [ebp - 0x434]
mov dword [0x8e8e3d], 0xcd
push eax
push dword [ebp - 0x434]
push 4
push 0x8e8e3d
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8ec409
call esi
lea eax, [ebp - 0x434]
mov dword [0x8ec409], 0x6a
push eax
push dword [ebp - 0x434]
push 4
push 0x8ec409
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8ed344
call esi
lea eax, [ebp - 0x434]
mov byte [0x8ed344], 0
push eax
push dword [ebp - 0x434]
push 1
push 0x8ed344
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8ed3d4
call esi
lea eax, [ebp - 0x434]
mov byte [0x8ed3d4], 0
push eax
push dword [ebp - 0x434]
push 1
push 0x8ed3d4
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 0x109
push 0x8e943c
call esi
push 0x109
push 0x90
push 0x8e943c
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x434]
push eax
push dword [ebp - 0x434]
push 0x109
push 0x8e943c
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8e93fc
call esi
lea eax, [ebp - 0x434]
mov byte [0x8e93fc], 0x85
push eax
push dword [ebp - 0x434]
push 1
push 0x8e93fc
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8e9f0b
call esi
lea eax, [ebp - 0x434]
mov dword [0x8e9f0b], 0xd0
push eax
push dword [ebp - 0x434]
push 4
push 0x8e9f0b
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8e974e
call esi
lea eax, [ebp - 0x434]
mov dword [0x8e974e], 0xd0
push eax
push dword [ebp - 0x434]
push 4
push 0x8e974e
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8e99b3
call esi
lea eax, [ebp - 0x434]
mov dword [0x8e99b3], 0xd0
push eax
push dword [ebp - 0x434]
push 4
push 0x8e99b3
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8e9a1d
call esi
lea eax, [ebp - 0x434]
mov dword [0x8e9a1d], 0xd0
push eax
push dword [ebp - 0x434]
push 4
push 0x8e9a1d
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 4
push 0x8e9a81
call esi
lea eax, [ebp - 0x434]
mov dword [0x8e9a81], 0xd0
push eax
push dword [ebp - 0x434]
push 4
push 0x8e9a81
call esi
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push 0x8f45d5
call esi
lea eax, [ebp - 0x434]
mov byte [0x8f45d5], 3
push eax
push dword [ebp - 0x434]
push 1
push 0x8f45d5
call esi
mov dword [ebp - 0x1c], 0xf0e9
mov edi, 0x8e87c6
mov byte [ebp - 0x18], 0
mov dword [ebp - 0x438], 5
lea eax, [ebp - 0x434]
push eax
push 0x40
push 1
push edi
call esi
mov al, byte [ebp + edi - 0x8e87e2]
mov byte [edi], al
lea eax, [ebp - 0x434]
push eax
push dword [ebp - 0x434]
push 1
push edi
call esi
inc edi
sub dword [ebp - 0x438], 1
jne 0x10008ca7
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x8e87cb
call esi
mov eax, 0x8e87cb
mov byte [eax], 0x90
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 1
push 0x8e87cb
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x8ebb0f
call esi
lea eax, [ebp - 0x438]
mov byte [0x8ebb0f], 0x75
push eax
push dword [ebp - 0x438]
push 1
push 0x8ebb0f
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x8ebb37
call esi
lea eax, [ebp - 0x438]
mov byte [0x8ebb37], 0x75
push eax
push dword [ebp - 0x438]
push 1
push 0x8ebb37
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x8ebb55
call esi
lea eax, [ebp - 0x438]
mov byte [0x8ebb55], 0x75
push eax
push dword [ebp - 0x438]
push 1
push 0x8ebb55
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x8ebbc5
call esi
lea eax, [ebp - 0x438]
mov byte [0x8ebbc5], 0x75
push eax
push dword [ebp - 0x438]
push 1
push 0x8ebbc5
call esi
mov dword [ebp - 0x1c], 0xa5e9
mov edi, 0x4f2261
mov word [ebp - 0x18], 0x9000
mov dword [ebp - 0x34], 0x160e9
mov word [ebp - 0x30], 0x9000
mov dword [ebp - 0x434], 6
nop
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push edi
call esi
mov al, byte [ebp + edi - 0x4f227d]
mov byte [edi], al
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 1
push edi
call esi
inc edi
sub dword [ebp - 0x434], 1
jne 0x10008df0
mov edi, 0x4f21a6
mov dword [ebp - 0x434], 6
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push edi
call esi
mov al, byte [ebp + edi - 0x4f21da]
mov byte [edi], al
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 1
push edi
call esi
inc edi
sub dword [ebp - 0x434], 1
jne 0x10008e32
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xbd8c71
call esi
lea eax, [ebp - 0x438]
mov byte [0xbd8c71], 0x90
push eax
push dword [ebp - 0x438]
push 1
push 0xbd8c71
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xbd8c46
call esi
lea eax, [ebp - 0x438]
mov byte [0xbd8c46], 0x90
push eax
push dword [ebp - 0x438]
push 1
push 0xbd8c46
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xbd8c9d
call esi
lea eax, [ebp - 0x438]
mov byte [0xbd8c9d], 0x90
push eax
push dword [ebp - 0x438]
push 1
push 0xbd8c9d
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xbd8c91
call esi
lea eax, [ebp - 0x438]
mov byte [0xbd8c91], 0x90
push eax
push dword [ebp - 0x438]
push 1
push 0xbd8c91
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x87945d
call esi
lea eax, [ebp - 0x438]
mov byte [0x87945d], 0x74
push eax
push dword [ebp - 0x438]
push 1
push 0x87945d
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 4
push 0x91a9e3
call esi
lea eax, [ebp - 0x438]
mov dword [0x91a9e3], 0x3e7
push eax
push dword [ebp - 0x438]
push 4
push 0x91a9e3
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 4
push 0x91a682
call esi
lea eax, [ebp - 0x438]
mov dword [0x91a682], 0x163
push eax
push dword [ebp - 0x438]
push 4
push 0x91a682
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 4
push 0x91a6fb
call esi
lea eax, [ebp - 0x438]
mov dword [0x91a6fb], 0x159
push eax
push dword [ebp - 0x438]
push 4
push 0x91a6fb
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 4
push 0x91a777
call esi
lea eax, [ebp - 0x438]
mov dword [0x91a777], 0x16d
push eax
push dword [ebp - 0x438]
push 4
push 0x91a777
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 4
push 0x91a8eb
call esi
lea eax, [ebp - 0x438]
mov dword [0x91a8eb], 0x16c
push eax
push dword [ebp - 0x438]
push 4
push 0x91a8eb
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 4
push 0x91a967
call esi
lea eax, [ebp - 0x438]
mov dword [0x91a967], 0x158
push eax
push dword [ebp - 0x438]
push 4
push 0x91a967
call esi
mov ecx, 0xfe
mov dword [ebp - 0x434], 0x3f8
mov esi, 0x10017fe8
lea edi, [ebp - 0x430]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edi, 0xbe2240
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push edi
call esi
mov al, byte [ebp + edi - 0xbe2670]
mov byte [edi], al
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 1
push edi
call esi
inc edi
sub dword [ebp - 0x434], 1
jne 0x100090a3
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xbe22bc
call esi
lea eax, [ebp - 0x438]
mov byte [0xbe22bc], 0x23
push eax
push dword [ebp - 0x438]
push 1
push 0xbe22bc
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xbe244c
call esi
lea eax, [ebp - 0x438]
mov byte [0xbe244c], 0x23
push eax
push dword [ebp - 0x438]
push 1
push 0xbe244c
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xbe22c4
call esi
lea eax, [ebp - 0x438]
mov byte [0xbe22c4], 0x23
push eax
push dword [ebp - 0x438]
push 1
push 0xbe22c4
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xbe2454
call esi
lea eax, [ebp - 0x438]
mov byte [0xbe2454], 0x23
push eax
push dword [ebp - 0x438]
push 1
push 0xbe2454
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 4
push 0x800009
call esi
lea eax, [ebp - 0x438]
mov dword [0x800009], 0x86
push eax
push dword [ebp - 0x438]
push 4
push 0x800009
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x70451d
call esi
lea eax, [ebp - 0x438]
mov byte [0x70451d], 0xfc
push eax
push dword [ebp - 0x438]
push 1
push 0x70451d
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 6
push 0xa240d9
call esi
mov eax, 0xa240d9
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 6
push 0xa240d9
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 4
push 0x994cad
call esi
lea eax, [ebp - 0x438]
mov dword [0x994cad], 0x1a6
push eax
push dword [ebp - 0x438]
push 4
push 0x994cad
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x7c6682
call esi
lea eax, [ebp - 0x438]
mov byte [0x7c6682], 0x5f
push eax
push dword [ebp - 0x438]
push 1
push 0x7c6682
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x5f12f1
call esi
lea eax, [ebp - 0x438]
mov byte [0x5f12f1], 5
push eax
push dword [ebp - 0x438]
push 1
push 0x5f12f1
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x5f15f0
call esi
lea eax, [ebp - 0x438]
mov byte [0x5f15f0], 1
push eax
push dword [ebp - 0x438]
push 1
push 0x5f15f0
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x5f15f3
call esi
lea eax, [ebp - 0x438]
mov byte [0x5f15f3], 3
push eax
push dword [ebp - 0x438]
push 1
push 0x5f15f3
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x5f12ee
call esi
lea eax, [ebp - 0x438]
mov byte [0x5f12ee], 6
push eax
push dword [ebp - 0x438]
push 1
push 0x5f12ee
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x5c94fe
call esi
lea eax, [ebp - 0x438]
mov byte [0x5c94fe], 7
push eax
push dword [ebp - 0x438]
push 1
push 0x5c94fe
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x5c9500
call esi
lea eax, [ebp - 0x438]
mov byte [0x5c9500], 0x8e
push eax
push dword [ebp - 0x438]
push 1
push 0x5c9500
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x9acaa8
call esi
lea eax, [ebp - 0x438]
mov byte [0x9acaa8], 0
push eax
push dword [ebp - 0x438]
push 1
push 0x9acaa8
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x9acaaa
call esi
lea eax, [ebp - 0x438]
mov byte [0x9acaaa], 0x94
push eax
push dword [ebp - 0x438]
push 1
push 0x9acaaa
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 6
push 0x4f350c
call esi
mov eax, 0x4f350c
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 6
push 0x4f350c
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 6
push 0x4f351e
call esi
mov eax, 0x4f351e
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 6
push 0x4f351e
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 0x24
push 0x4f3fa0
call esi
mov eax, 0x4f3fa0
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 0x24
push 0x4f3fa0
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 6
push 0x7c6ef7
call esi
mov eax, 0x7c6ef7
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 6
push 0x7c6ef7
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 6
push 0x7c6f03
call esi
mov eax, 0x7c6f03
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 6
push 0x7c6f03
call esi
push 2
mov edx, 0x7c7fa9
mov ecx, 0x100016f0
call fcn.100110e0
add esp, 4
mov edx, 0x4f315c
mov ecx, 0x10001710
push 2
call fcn.100110e0
add esp, 4
mov edx, 0x7c7bab
mov ecx, 0x10001730
push 2
call fcn.100110e0
add esp, 4
mov edx, 0x7c34f0
mov ecx, 0x10001750
push 2
call fcn.100110e0
add esp, 4
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x6fda67
call esi
lea eax, [ebp - 0x438]
mov byte [0x6fda67], 0x90
push eax
push dword [ebp - 0x438]
push 1
push 0x6fda67
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x6fda68
call esi
lea eax, [ebp - 0x438]
mov byte [0x6fda68], 0x90
push eax
push dword [ebp - 0x438]
push 1
push 0x6fda68
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x6fda72
call esi
lea eax, [ebp - 0x438]
mov byte [0x6fda72], 0xeb
push eax
push dword [ebp - 0x438]
push 1
push 0x6fda72
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x4f427a
call esi
lea eax, [ebp - 0x438]
mov byte [0x4f427a], 0xeb
push eax
push dword [ebp - 0x438]
push 1
push 0x4f427a
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x4f427b
call esi
lea eax, [ebp - 0x438]
mov byte [0x4f427b], 0x17
push eax
push dword [ebp - 0x438]
push 1
push 0x4f427b
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x6fcaf2
call esi
lea eax, [ebp - 0x438]
mov byte [0x6fcaf2], 0x90
push eax
push dword [ebp - 0x438]
push 1
push 0x6fcaf2
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x6fcaf3
call esi
lea eax, [ebp - 0x438]
mov byte [0x6fcaf3], 0x90
push eax
push dword [ebp - 0x438]
push 1
push 0x6fcaf3
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x755299
call esi
lea eax, [ebp - 0x438]
mov byte [0x755299], 0x42
push eax
push dword [ebp - 0x438]
push 1
push 0x755299
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x755695
call esi
lea eax, [ebp - 0x438]
mov byte [0x755695], 0x42
push eax
push dword [ebp - 0x438]
push 1
push 0x755695
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x5d07b1
call esi
lea eax, [ebp - 0x438]
mov byte [0x5d07b1], 0x83
push eax
push dword [ebp - 0x438]
push 1
push 0x5d07b1
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x5d07b2
call esi
lea eax, [ebp - 0x438]
mov byte [0x5d07b2], 0xf8
push eax
push dword [ebp - 0x438]
push 1
push 0x5d07b2
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x5d07b3
call esi
lea eax, [ebp - 0x438]
mov byte [0x5d07b3], 0x12
push eax
push dword [ebp - 0x438]
push 1
push 0x5d07b3
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x755dc2
call esi
lea eax, [ebp - 0x438]
mov byte [0x755dc2], 0x7d
push eax
push dword [ebp - 0x438]
push 1
push 0x755dc2
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 6
push 0x7544e2
call esi
mov eax, 0x7544e2
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 6
push 0x7544e2
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 6
push 0x7544ee
call esi
mov eax, 0x7544ee
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 6
push 0x7544ee
call esi
mov dword [ebp - 0x1c], 0x7cd3de68
mov edi, 0x8d10f4
mov byte [ebp - 0x18], 0xff
mov dword [ebp - 0x434], 5
nop dword [eax]
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push edi
call esi
mov al, byte [ebp + edi - 0x8d1110]
mov byte [edi], al
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 1
push edi
call esi
inc edi
sub dword [ebp - 0x434], 1
jne 0x10009890
push 0xa
mov edx, 0xa299eb
mov ecx, 0x10001770
call fcn.100110e0
add esp, 4
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xa07c61
call esi
lea eax, [ebp - 0x438]
mov byte [0xa07c61], 0x86
push eax
push dword [ebp - 0x438]
push 1
push 0xa07c61
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xa07c62
call esi
lea eax, [ebp - 0x438]
mov byte [0xa07c62], 0x1d
push eax
push dword [ebp - 0x438]
push 1
push 0xa07c62
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xa07c63
call esi
lea eax, [ebp - 0x438]
mov byte [0xa07c63], 2
push eax
push dword [ebp - 0x438]
push 1
push 0xa07c63
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0xa07c64
call esi
lea eax, [ebp - 0x438]
mov byte [0xa07c64], 0
push eax
push dword [ebp - 0x438]
push 1
push 0xa07c64
call esi
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push 0x8db38a
call esi
lea eax, [ebp - 0x438]
mov byte [0x8db38a], 0x7f
push eax
push dword [ebp - 0x438]
push 1
push 0x8db38a
call esi
mov dword [ebp - 0x434], 0xa4000000
mov edi, 0x8dbf62
mov dword [ebp - 0x1c], 4
nop dword [eax + eax]
lea eax, [ebp - 0x438]
push eax
push 0x40
push 1
push edi
call esi
mov al, byte [ebp + edi - 0x8dc396]
mov byte [edi], al
lea eax, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
push 1
push edi
call esi
inc edi
sub dword [ebp - 0x1c], 1
jne 0x100099e0
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x8dcdff
call esi
lea eax, [ebp - 0x1c]
mov byte [0x8dcdff], 6
push eax
push dword [ebp - 0x1c]
push 1
push 0x8dcdff
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x95cf02
call esi
lea eax, [ebp - 0x1c]
mov byte [0x95cf02], 0x84
push eax
push dword [ebp - 0x1c]
push 1
push 0x95cf02
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 2
push 0x7a03c8
call esi
mov eax, 0x7a03c8
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 2
push 0x7a03c8
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x5f647a
call esi
lea eax, [ebp - 0x1c]
mov byte [0x5f647a], 4
push eax
push dword [ebp - 0x1c]
push 1
push 0x5f647a
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x5f6919
call esi
lea eax, [ebp - 0x1c]
mov byte [0x5f6919], 4
push eax
push dword [ebp - 0x1c]
push 1
push 0x5f6919
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x617961
call esi
lea eax, [ebp - 0x1c]
mov byte [0x617961], 0xb3
push eax
push dword [ebp - 0x1c]
push 1
push 0x617961
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x618ccb
call esi
lea eax, [ebp - 0x1c]
mov byte [0x618ccb], 0x45
push eax
push dword [ebp - 0x1c]
push 1
push 0x618ccb
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x617966
call esi
lea eax, [ebp - 0x1c]
mov byte [0x617966], 0x3f
push eax
push dword [ebp - 0x1c]
push 1
push 0x617966
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0xa0bb23
call esi
lea eax, [ebp - 0x1c]
mov byte [0xa0bb23], 0
push eax
push dword [ebp - 0x1c]
push 1
push 0xa0bb23
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0xa0bb21
call esi
lea eax, [ebp - 0x1c]
mov byte [0xa0bb21], 0xc
push eax
push dword [ebp - 0x1c]
push 1
push 0xa0bb21
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x9ad12a
call esi
lea eax, [ebp - 0x1c]
mov byte [0x9ad12a], 3
push eax
push dword [ebp - 0x1c]
push 1
push 0x9ad12a
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x7a00ec
call esi
lea eax, [ebp - 0x1c]
mov byte [0x7a00ec], 2
push eax
push dword [ebp - 0x1c]
push 1
push 0x7a00ec
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x911255
call esi
lea eax, [ebp - 0x1c]
mov byte [0x911255], 2
push eax
push dword [ebp - 0x1c]
push 1
push 0x911255
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x519c53
call esi
lea eax, [ebp - 0x1c]
mov byte [0x519c53], 2
push eax
push dword [ebp - 0x1c]
push 1
push 0x519c53
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x90e1d4
call esi
lea eax, [ebp - 0x1c]
mov byte [0x90e1d4], 2
push eax
push dword [ebp - 0x1c]
push 1
push 0x90e1d4
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x911255
call esi
lea eax, [ebp - 0x1c]
mov byte [0x911255], 2
push eax
push dword [ebp - 0x1c]
push 1
push 0x911255
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x9192b0
call esi
lea eax, [ebp - 0x1c]
mov byte [0x9192b0], 2
push eax
push dword [ebp - 0x1c]
push 1
push 0x9192b0
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0xa0fda1
call esi
lea eax, [ebp - 0x1c]
mov byte [0xa0fda1], 2
push eax
push dword [ebp - 0x1c]
push 1
push 0xa0fda1
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0xa10264
call esi
mov byte [0xa10264], 2
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 1
push 0xa10264
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0xa0bb23
call esi
lea eax, [ebp - 0x1c]
mov byte [0xa0bb23], 2
push eax
push dword [ebp - 0x1c]
push 1
push 0xa0bb23
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x7dc6c2
call esi
lea eax, [ebp - 0x1c]
mov byte [0x7dc6c2], 2
push eax
push dword [ebp - 0x1c]
push 1
push 0x7dc6c2
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x4f454e
call esi
lea eax, [ebp - 0x1c]
mov byte [0x4f454e], 4
push eax
push dword [ebp - 0x1c]
push 1
push 0x4f454e
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x4f456a
call esi
lea eax, [ebp - 0x1c]
mov byte [0x4f456a], 0xf
push eax
push dword [ebp - 0x1c]
push 1
push 0x4f456a
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x4f456b
call esi
lea eax, [ebp - 0x1c]
mov byte [0x4f456b], 0x84
push eax
push dword [ebp - 0x1c]
push 1
push 0x4f456b
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 4
push 0x4f4578
call esi
lea eax, [ebp - 0x1c]
mov dword [0x4f4578], 0x3d2a9a
push eax
push dword [ebp - 0x1c]
push 4
push 0x4f4578
call esi
mov dword [ebp - 0x2c], 0xc0337d74
mov edi, 0x4f457c
mov dword [ebp - 0x28], 0x50505050
mov dword [ebp - 0x24], 0x89c48b51
mov dword [ebp - 0x20], 0xbf680865
mov dword [ebp - 0x438], 0x10
nop word [eax + eax]
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push edi
call esi
mov al, byte [ebp + edi - 0x4f45a8]
mov byte [edi], al
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 1
push edi
call esi
inc edi
sub dword [ebp - 0x438], 1
jne 0x10009e00
mov dword [ebp - 0x2c], 0x1f1e9
mov edi, 0x82b32d
mov dword [ebp - 0x28], 0xec458d00
mov dword [ebp - 0x24], 0x13be68
mov dword [ebp - 0x20], 0x5d895000
mov dword [ebp - 0x438], 0x10
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push edi
call esi
mov al, byte [ebp + edi - 0x82b359]
mov byte [edi], al
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 1
push edi
call esi
inc edi
sub dword [ebp - 0x438], 1
jne 0x10009e55
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100142e5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret