Function at 0x100134dd
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
push ebx
mov edx, 0xd
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x100134e4
call fcn.100b8f80
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x34], 0
je 0x10013511
mov ebx, dword [ebp + 0x2c]
cmp ebx, 1
jl 0x10013511
mov eax, 1
jmp 0x10013513
xor eax, eax
and eax, eax
je 0x100136e7
lea ebp, [0x1021c24c]
mov ebx, dword [ebp + 0x20]
and ebx, ebx
je 0x10013677
lea ebp, [0x1021c24c]
push dword [ebp + 0x24]
lea edx, [0x101f40a8]
pop ecx
call fcn.10044420
jne 0x100135eb
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f40a0]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov edx, dword [ebp + 0x24]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.Changing_the_memory_protection
push edx
call fcn.100b8eb0
call fcn.100b8f10
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x10013675
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.Changing_the_memory_protection
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x100136ce
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
lea edx, str.Changing_the_memory_protection
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x30], 0
je 0x100136e7
lea eax, str.Changing_the_memory_protection
push eax
call dword [0x102093a0]
lea eax, [esp + 0x2c]
push eax
push 0x40
push 0x456000
push 0x400000
call sub.KERNEL32.dll_VirtualProtect
mov ebx, eax
and ebx, ebx
jne 0x1001371e
lea eax, str.Unable_to_remove_executable_memory_protection
push eax
lea eax, str.Fatal_Error
push eax
call fcn.1003bb24
jmp 0x1001390f
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x34], 0
je 0x10013739
mov ebx, dword [ebp + 0x2c]
cmp ebx, 1
jl 0x10013739
mov eax, 1
jmp 0x1001373b
xor eax, eax
and eax, eax
je 0x1001390f
lea ebp, [0x1021c24c]
mov ebx, dword [ebp + 0x20]
and ebx, ebx
je 0x1001389f
lea ebp, [0x1021c24c]
push dword [ebp + 0x24]
lea edx, [0x101f40a8]
pop ecx
call fcn.10044420
jne 0x10013813
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f40a0]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov edx, dword [ebp + 0x24]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, [0x101f8adc]
push edx
call fcn.100b8eb0
call fcn.100b8f10
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x1001389d
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, [0x101f8adc]
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x100138f6
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
lea edx, [0x101f8adc]
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x30], 0
je 0x1001390f
lea eax, [0x101f8adc]
push eax
call dword [0x102093a0]
lea eax, str.Direct3D8EnableMaximizedWindowedModeShim
push eax
lea eax, [0x101faa84]
push eax
call fcn.10040fbb
mov dword [esp + 0x20], eax
cmp dword [esp + 0x20], 0
je 0x10014074
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x34], 0
je 0x1001394c
mov ebx, dword [ebp + 0x2c]
cmp ebx, 1
jl 0x1001394c
mov eax, 1
jmp 0x1001394e
xor eax, eax
and eax, eax
je 0x10013bff
lea ebp, [0x1021c24c]
mov ebx, dword [ebp + 0x20]
and ebx, ebx
je 0x10013b11
lea ebp, [0x1021c24c]
push dword [ebp + 0x24]
lea edx, [0x101f40a8]
pop ecx
call fcn.10044420
jne 0x10013a54
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f40a0]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov edx, dword [ebp + 0x24]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.Disabling_Direct3D8EnableMaximizedWindowedModeShim__0x
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push 5
mov eax, dword [esp + 0x34]
cdq
push edx
push eax
call fcn.100b6470
pop eax
lea edx, str._...
push edx
call fcn.100b8eb0
call fcn.100b8f10
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x10013b0c
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.Disabling_Direct3D8EnableMaximizedWindowedModeShim__0x
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push 5
mov eax, dword [esp + 0x34]
cdq
push edx
push eax
call fcn.100b6470
pop eax
lea edx, str._...
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x10013b96
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
lea edx, str.Disabling_Direct3D8EnableMaximizedWindowedModeShim__0x
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push 5
mov eax, dword [esp + 0x34]
cdq
push edx
push eax
call fcn.100b6470
pop eax
lea edx, str._...
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x30], 0
je 0x10013bff
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, str.Disabling_Direct3D8EnableMaximizedWindowedModeShim__0x
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push 5
mov eax, dword [esp + 0x34]
cdq
push edx
push eax
call fcn.100b6470
pop eax
lea edx, str._...
push edx
call fcn.100b8eb0
call fcn.100443f2
add dword [esp], edx
call dword [0x102093a0]
call fcn.10044410
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x18]
push eax
push 0x40
push 9
push dword [esp + 0x2c]
call sub.KERNEL32.dll_VirtualProtect
push 0
push 1
lea eax, [esp + 0x24]
push eax
mov ebx, dword [esp + 0x2c]
add ebx, 6
push ebx
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
mov ebx, dword [esp + 0x20]
add ebx, 2
push ebx
pop eax
call fcn.10044380
mov dword [esp + 0x30], eax
cmp dword [esp + 0x30], 0
je 0x10013e83
push dword [esp + 0x30]
lea ebp, [0x1021bf70]
pop eax
mov dword [ebp], eax
mov dword [esp + 0x20], 0
push 0
push 4
lea eax, [esp + 0x28]
push eax
push dword [esp + 0x3c]
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x34], 0
je 0x10013ca8
mov ebx, dword [ebp + 0x2c]
cmp ebx, 1
jl 0x10013ca8
mov eax, 1
jmp 0x10013caa
xor eax, eax
and eax, eax
je 0x10013e7e
lea ebp, [0x1021c24c]
mov ebx, dword [ebp + 0x20]
and ebx, ebx
je 0x10013e0e
lea ebp, [0x1021c24c]
push dword [ebp + 0x24]
lea edx, [0x101f40a8]
pop ecx
call fcn.10044420
jne 0x10013d82
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f40a0]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov edx, dword [ebp + 0x24]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.Success
push edx
call fcn.100b8eb0
call fcn.100b8f10
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x10013e0c
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.Success
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x10013e65
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
lea edx, str.Success
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x30], 0
je 0x10013e7e
lea eax, str.Success
push eax
call dword [0x102093a0]
jmp 0x10014074
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x34], 0
je 0x10013e9e
mov ebx, dword [ebp + 0x2c]
cmp ebx, 1
jl 0x10013e9e
mov eax, 1
jmp 0x10013ea0
xor eax, eax
and eax, eax
je 0x10014074
lea ebp, [0x1021c24c]
mov ebx, dword [ebp + 0x20]
and ebx, ebx
je 0x10014004
lea ebp, [0x1021c24c]
push dword [ebp + 0x24]
lea edx, [0x101f40a8]
pop ecx
call fcn.10044420
jne 0x10013f78
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f40a0]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov edx, dword [ebp + 0x24]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.Failed
push edx
call fcn.100b8eb0
call fcn.100b8f10
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x10014002
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.Failed
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x1001405b
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
lea edx, str.Failed
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x30], 0
je 0x10014074
lea eax, str.Failed
push eax
call dword [0x102093a0]
lea eax, str.loadmods
push eax
push dword [0x1021c544]
call fcn.100ad6db
mov ebp, eax
push dword [ebp]
lea edx, [0x101f46c4]
pop ecx
call fcn.10044420
je 0x100140ad
lea ebp, [0x1021c24c]
mov ebx, dword [ebp + 0x3c]
and ebx, ebx
jle 0x100140ad
mov eax, 1
jmp 0x100140af
xor eax, eax
and eax, eax
je 0x100140b8
call fcn.1001fa0d
lea ebp, [0x1021c24c]
mov ebx, dword [ebp + 8]
and ebx, ebx
jne 0x100140d4
call fcn.1000ba79
call fcn.10034a90
jmp 0x100142c5
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x34], 0
je 0x100140ef
mov ebx, dword [ebp + 0x2c]
cmp ebx, 1
jl 0x100140ef
mov eax, 1
jmp 0x100140f1
xor eax, eax
and eax, eax
je 0x100142c5
lea ebp, [0x1021c24c]
mov ebx, dword [ebp + 0x20]
and ebx, ebx
je 0x10014255
lea ebp, [0x1021c24c]
push dword [ebp + 0x24]
lea edx, [0x101f40a8]
pop ecx
call fcn.10044420
jne 0x100141c9
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f40a0]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov edx, dword [ebp + 0x24]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.Not_loading_scripts__user_option_
push edx
call fcn.100b8eb0
call fcn.100b8f10
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x10014253
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.Not_loading_scripts__user_option_
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x100142ac
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
lea edx, str.Not_loading_scripts__user_option_
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x30], 0
je 0x100142c5
lea eax, str.Not_loading_scripts__user_option_
push eax
call dword [0x102093a0]
mov byte [esp + 0xc], 0x90
push 6
lea eax, str.EndScene
push eax
lea eax, [0x100098ba]
push eax
push 0x61f0da
call fcn.1000b1ea
push 6
lea eax, str.BeginScene
push eax
lea eax, [0x1002c075]
push eax
push 0x61ef75
call fcn.1000b1ea
push 5
lea eax, [0x101f9cd6]
push eax
lea eax, [0x10030aae]
push eax
push 0x625a2e
call fcn.1000b1ea
push 6
lea eax, str.DrawIndexedPrimitive
push eax
lea eax, [0x100151ca]
push eax
push 0x6265e4
call fcn.1000b1ea
push 6
lea eax, str.DrawPrimitiveUP
push eax
lea eax, [0x10011548]
push eax
push 0x626668
call fcn.1000b1ea
push 6
lea eax, str.DrawIndexedPrimitiveUP
push eax
lea eax, [0x100319da]
push eax
push 0x62670b
call fcn.1000b1ea
push 5
lea eax, str.Reset
push eax
lea eax, [0x10028a07]
push eax
push 0x61be5e
call fcn.1000b1ea
mov byte [esp + 0x1c], 0x50
push 0
push 1
lea eax, [esp + 0x24]
push eax
push 0x62391a
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
push 5
lea eax, str.ReleaseTexture
push eax
lea eax, [0x10011e17]
push eax
push 0x62391b
call fcn.1000b1ea
push 0
push 1
lea eax, [esp + 0x24]
push eax
push 0x6232d2
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
push 5
lea eax, str.ReleaseTexture
push eax
lea eax, [0x10011e17]
push eax
push 0x6232d3
call fcn.1000b1ea
push 6
lea eax, str.CreateWindowEx
push eax
lea eax, [0x100403b8]
push eax
push 0x40967d
call fcn.1000b1ea
push 6
lea eax, str.Release
push eax
lea eax, [0x1003bf96]
push eax
push 0x61bbda
call fcn.1000b1ea
push 6
lea eax, str.SetTexture
push eax
lea eax, [0x10024005]
push eax
push 0x622a38
call fcn.1000b1ea
push 6
lea eax, str.CreateVertexShader
push eax
lea eax, [0x100313ea]
push eax
push 0x62bbb2
call fcn.1000b1ea
push 6
lea eax, str.CreatePixelShader
push eax
lea eax, [0x10040d37]
push eax
push 0x62bcfd
call fcn.1000b1ea
push 5
lea eax, str.SetRenderTarget
push eax
lea eax, [0x1004124a]
push eax
push 0x61ef6d
call fcn.1000b1ea
mov dword [esp + 0x14], 0x61ef6a
jmp 0x100144c8
mov eax, 0x61ef6c
cmp eax, dword [esp + 0x14]
jl 0x100144f6
push 0
push 1
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x20]
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
inc dword [esp + 0x14]
jno 0x100144c8
push 5
lea eax, str.TestCooperativeLevel
push eax
lea eax, [0x10039c12]
push eax
push 0x6266bb
call fcn.1000b1ea
mov dword [esp + 0x14], 0x6266b8
jmp 0x1001451d
mov eax, 0x6266ba
cmp eax, dword [esp + 0x14]
jl 0x1001454b
push 0
push 1
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x20]
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
inc dword [esp + 0x14]
jno 0x1001451d
push 6
lea eax, str.SetViewPort
push eax
lea eax, [0x10040dd5]
push eax
push 0x61ef87
call fcn.1000b1ea
push 6
lea eax, str.SetVertexShader
push eax
lea eax, [0x1000ca25]
push eax
push 0x6263fb
call fcn.1000b1ea
push 6
lea eax, str.SetVertexShader
push eax
lea eax, [0x1000ca25]
push eax
push 0x6263ce
call fcn.1000b1ea
push 6
lea eax, str.SetIndices
push eax
lea eax, [0x1003e1d9]
push eax
push 0x6264c6
call fcn.1000b1ea
push 6
lea eax, str.SetVertexShaderConstant
push eax
lea eax, [0x100094e5]
push eax
push 0x626427
call fcn.1000b1ea
push 6
lea eax, str.SetPixelShader
push eax
lea eax, [0x10042edf]
push eax
push 0x6264fd
call fcn.1000b1ea
push 6
lea eax, str.SetStreamSource
push eax
lea eax, [0x10038f25]
push eax
push 0x626454
call fcn.1000b1ea
push 6
lea eax, str.SetTextureStageState
push eax
lea eax, [0x1003a785]
push eax
push 0x622c47
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x621add
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x621b01
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x621b25
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x621b52
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x621b69
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x61aba2
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x621a5a
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x621aa5
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x621ab9
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x621b01
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x61acac
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x61ac7c
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x61ac19
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x61ac49
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x61d63a
call fcn.1000b1ea
push 6
lea eax, str.SetRenderState
push eax
lea eax, [0x1002fefd]
push eax
push 0x61ad3f
call fcn.1000b1ea
push 6
lea eax, str.SetTransform
push eax
lea eax, [0x1003a7d3]
push eax
push 0x61f6f9
call fcn.1000b1ea
push 6
lea eax, str.SetTransform
push eax
lea eax, [0x1003a7d3]
push eax
push 0x61f710
call fcn.1000b1ea
push 6
lea eax, str.SetTransform
push eax
lea eax, [0x1003a7d3]
push eax
push 0x61f6e2
call fcn.1000b1ea
push 6
lea eax, str.Clear
push eax
lea eax, [0x1003bf6a]
push eax
push 0x61f14d
call fcn.1000b1ea
push 6
lea eax, str.GetAdapterDisplayMode
push eax
lea eax, [0x1003848b]
push eax
push 0x61bc9f
call fcn.1000b1ea
mov dword [esp + 0x14], 0x61bc9c
jmp 0x1001489e
mov eax, 0x61bc9e
cmp eax, dword [esp + 0x14]
jl 0x100148cc
push 0
push 1
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x20]
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
inc dword [esp + 0x14]
jno 0x1001489e
push 6
lea eax, str.EnumAdapterModes
push eax
lea eax, [0x1003f462]
push eax
push 0x673277
call fcn.1000b1ea
mov dword [esp + 0x14], 0x673274
jmp 0x100148f3
mov eax, 0x673276
cmp eax, dword [esp + 0x14]
jl 0x10014921
push 0
push 1
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x20]
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
inc dword [esp + 0x14]
jno 0x100148f3
push 5
lea eax, str.GetDeviceState
push eax
lea eax, [0x100319cb]
push eax
push 0x65a0a8
call fcn.100017fe
push 6
lea eax, str.Frame_subroutine
push eax
lea eax, [0x10001fee]
push eax
push 0x6669fc
call fcn.1000b1ea
push 5
lea eax, str.CreateDevice
push eax
lea eax, [0x1000243a]
push eax
push 0x61c1e4
call fcn.1000b1ea
lea ebp, [0x1021bd98]
push dword [ebp]
lea edx, [0x101f40a8]
pop ecx
call fcn.10044420
jne 0x10014cce
lea eax, [0x100152a1]
push eax
lea eax, str.SHGetSpecialFolderPathA
push eax
lea eax, str.shell32.dll
push eax
call fcn.10040fbb
push eax
call fcn.100287c6
push eax
lea ebp, [0x1021c31c]
pop eax
mov dword [ebp + 0x20], eax
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x34], 0
je 0x100149d9
mov ebx, dword [ebp + 0x2c]
cmp ebx, 1
jl 0x100149d9
mov eax, 1
jmp 0x100149db
xor eax, eax
and eax, eax
je 0x10014cce
lea ebp, [0x1021c24c]
mov ebx, dword [ebp + 0x20]
and ebx, ebx
je 0x10014bc2
lea ebp, [0x1021c24c]
push dword [ebp + 0x24]
lea edx, [0x101f40a8]
pop ecx
call fcn.10044420
jne 0x10014af6
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f40a0]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov edx, dword [ebp + 0x24]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.SHGetSpecialFolderPathA__0x
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push 5
lea eax, str.SHGetSpecialFolderPathA
push eax
lea eax, str.shell32.dll
push eax
call fcn.10040fbb
cdq
push edx
push eax
call fcn.100b6470
pop eax
lea edx, str.__hooked
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x10014bbd
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, [0x101f4b1e]
push edx
call fcn.100b8eb0
lea ebp, [0x1021c24c]
mov ebp, dword [ebp + 0x20]
mov edx, dword [ebp + 8]
push edx
call fcn.100b8eb0
lea edx, [0x101f4902]
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
pop eax
lea edx, str.SHGetSpecialFolderPathA__0x
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push 5
lea eax, str.SHGetSpecialFolderPathA
push eax
lea eax, str.shell32.dll
push eax
call fcn.10040fbb
cdq
push edx
push eax
call fcn.100b6470
pop eax
lea edx, str.__hooked
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
jmp 0x10014c56
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
call fcn.100afe7c
push eax
lea eax, str._mm__dd__yy___hh:_ii:_ss__
push eax
call fcn.100b0110
lea edx, str.SHGetSpecialFolderPathA__0x
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push 5
lea eax, str.SHGetSpecialFolderPathA
push eax
lea eax, str.shell32.dll
push eax
call fcn.10040fbb
cdq
push edx
push eax
call fcn.100b6470
pop eax
lea edx, str.__hooked
push edx
call fcn.100b8eb0
call fcn.100b8f10
lea ebp, [0x1021c24c]
push dword [ebp + 0x34]
call fcn.100443f2
add dword [esp + 4], edx
call fcn.100ae840
call fcn.10044410
lea ebp, [0x1021c24c]
cmp dword [ebp + 0x30], 0
je 0x10014cce
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
lea edx, str.SHGetSpecialFolderPathA__0x
push edx
call fcn.100b8eb0
push edx
call fcn.100b8e70
pop edx
push eax
push edx
call fcn.100b8e70
pop edx
push eax
push 5
lea eax, str.SHGetSpecialFolderPathA
push eax
lea eax, str.shell32.dll
push eax
call fcn.10040fbb
cdq
push edx
push eax
call fcn.100b6470
pop eax
lea edx, str.__hooked
push edx
call fcn.100b8eb0
call fcn.100443f2
add dword [esp], edx
call dword [0x102093a0]
call fcn.10044410
mov dword [esp + 0x14], 0
jmp 0x10014cd8
mov eax, 0xb
cmp eax, dword [esp + 0x14]
jl 0x10014d0d
push 0
push 1
lea eax, [esp + 0x14]
push eax
mov ebx, dword [esp + 0x20]
add ebx, 0x61d0e2
push ebx
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
inc dword [esp + 0x14]
jno 0x10014cd8
mov byte [esp + 0x1c], 0x50
push 0
push 1
lea eax, [esp + 0x24]
push eax
push 0x61d0e2
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
mov byte [esp + 0x1c], 0xb8
lea eax, [0x100373fb]
push eax
pop eax
mov dword [esp + 0x20], eax
push 0
push 1
lea eax, [esp + 0x24]
push eax
push 0x61d0e3
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
push 0
push 4
lea eax, [esp + 0x28]
push eax
push 0x61d0e4
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
mov byte [esp + 0x1c], 0xff
push 0
push 1
lea eax, [esp + 0x24]
push eax
push 0x61d0e8
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
mov byte [esp + 0x1c], 0xd0
push 0
push 1
lea eax, [esp + 0x24]
push eax
push 0x61d0e9
push 0xffffffff
call sub.KERNEL32.dll_WriteProcessMemory
push 0
push 0
push 0xffffffff
call sub.KERNEL32.dll_FlushInstructionCache
jmp 0x10014ddb
add esp, 0x34
pop ebx
pop ebp
ret