Function at 0x100184b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push 0x100142f0
push 0x895600
mov bl, 0xe9
call fcn.10056900
push 0x100142f0
push 0x895600
call fcn.10056900
push 0x10014320
push 0x810f45
mov bl, 0xe8
call fcn.10056900
push 0x10014320
push 0x8117ee
call fcn.10056900
push 0x10016b50
push 0x8119e6
call fcn.10056900
push 0x10016b50
push 0x811b1a
call fcn.10056900
push 0x10016b50
push 0x811b61
call fcn.10056900
push 0x10013de0
push 0x80f250
call fcn.10056900
add esp, 0x40
push 0x10015d20
push 0x80f8e0
mov bl, 0xe9
call fcn.10056900
push 0x10016af0
push 0x810fe7
mov bl, 0xe8
call fcn.10056900
push 0x10016af0
push 0x811890
call fcn.10056900
push 0x10016570
push 0x80f855
call fcn.10056900
push 0x100167f0
push 0x80f84d
call fcn.10056900
push 0x10015fe0
push 0x80f845
call fcn.10056900
push 0x10016c00
push 0x614aef
call fcn.10056900
push 0x10016c00
push 0x772460
call fcn.10056900
add esp, 0x40
push 0x849872
push 0x849757
mov bl, 0xe9
call fcn.10056900
push 0x100183c0
push 0x849a52
mov bl, 0xe8
call fcn.10056900
push 0x100183c0
push 0x849aad
call fcn.10056900
push 0x100183c0
push 0x849b10
call fcn.10056900
push 0x100183c0
push 0x849b6c
call fcn.10056900
push 0x100183c0
push 0x849bd0
call fcn.10056900
push 0x100183c0
push 0x849c2c
call fcn.10056900
push 0x10018370
push 0x7a9f8e
call fcn.10056900
add esp, 0x40
push 0x10018330
push 0x8491ae
call fcn.10056900
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7a866e
call esi
mov edi, 0xe35fb
lea ecx, [ebp - 4]
push ecx
mov dword [0x7a866e], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7a866e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7a86c5
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7a86c5], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7a86c5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7a8722
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7a8722], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7a8722
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7a877f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7a877f], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7a877f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7a87dc
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7a87dc], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7a87dc
call esi
push 0x10017cf0
push 0x7a8316
call fcn.10056900
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x40a7ac
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x40a7ac], 1
mov edx, dword [ebp - 4]
push edx
push 4
push 0x40a7ac
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x40a7be
call esi
xor bl, bl
lea ecx, [ebp - 4]
push ecx
mov byte [0x40a7be], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x40a7be
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x40a7be
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x40a7be], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x40a7be
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x40a97b
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x40a97b], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x40a97b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x86850f
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x86850f], 0x78
mov edx, dword [ebp - 4]
push edx
push 1
push 0x86850f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x834d94
call esi
mov byte [0x834d94], 0x52
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 1
push 0x834d94
call esi
push 0x895c02
push 0x895b8d
mov bl, 0xe9
call fcn.10056900
push 0x895c0c
push 0x895b8d
call fcn.10056900
push 0x7d39d8
push 0x7d399f
call fcn.10056900
push 0x77ec0e
push 0x77eb65
call fcn.10056900
push 0x7a8313
push 0x7a830b
call fcn.10056900
mov eax, dword [0x100cb10c]
add esp, 0x28
cmp dword [eax + 0x428], 1
jne 0x100188f0
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x7aa3ba
call esi
mov ecx, 0x7aa3ba
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x7aa39c
call esi
mov ecx, 0x7aa39c
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 5
push 0x7aa9b3
call esi
mov ecx, 0x7aa9b3
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 4]
push edx
mov byte [ecx + 4], al
mov eax, dword [ebp - 4]
push eax
push 5
push ecx
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77fced
call esi
mov bl, 0x12
lea edx, [ebp - 4]
push edx
mov byte [0x77fced], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x77fced
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x7801da
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x7801da], 1
mov eax, dword [ebp - 4]
push eax
push 1
push 0x7801da
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x780207
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x780207], 0xf
mov eax, dword [ebp - 4]
push eax
push 1
push 0x780207
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x78021c
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x78021c], 0x3c
mov eax, dword [ebp - 4]
push eax
push 1
push 0x78021c
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x78023c
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x78023c], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x78023c
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x780218
call esi
lea edx, [ebp - 4]
mov byte [0x780218], 4
mov eax, dword [ebp - 4]
push edx
push eax
push 1
push 0x780218
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x78190e
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x78190e], 1
mov eax, dword [ebp - 4]
push eax
push 1
push 0x78190e
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x78193e
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x78193e], 0xf
mov eax, dword [ebp - 4]
push eax
push 1
push 0x78193e
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x781953
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x781953], 0x3c
mov eax, dword [ebp - 4]
push eax
push 1
push 0x781953
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x781975
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x781975], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x781975
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x78194f
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x78194f], 4
mov eax, dword [ebp - 4]
push eax
push 1
push 0x78194f
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x782d16
call esi
mov byte [0x782d16], 1
mov eax, dword [ebp - 4]
lea edx, [ebp - 4]
push edx
push eax
push 1
push 0x782d16
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x782d46
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x782d46], 0xf
mov eax, dword [ebp - 4]
push eax
push 1
push 0x782d46
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x782d5b
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x782d5b], 0x3c
mov eax, dword [ebp - 4]
push eax
push 1
push 0x782d5b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x782d7e
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x782d7e], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x782d7e
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x782d57
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x782d57], 4
mov eax, dword [ebp - 4]
push eax
push 1
push 0x782d57
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x7830f0
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x7830f0], 1
mov eax, dword [ebp - 4]
push eax
push 1
push 0x7830f0
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x783120
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x783120], 0xf
mov eax, dword [ebp - 4]
push eax
push 1
push 0x783120
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x783135
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x783135], 0x3c
mov eax, dword [ebp - 4]
push eax
push 1
push 0x783135
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x783157
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x783157], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x783157
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x783131
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x783131], 4
mov eax, dword [ebp - 4]
push eax
push 1
push 0x783131
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x784b6e
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x784b6e], 1
mov eax, dword [ebp - 4]
push eax
push 1
push 0x784b6e
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x784b9e
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x784b9e], 0xf
mov eax, dword [ebp - 4]
push eax
push 1
push 0x784b9e
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x784bb3
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x784bb3], 0x3c
mov eax, dword [ebp - 4]
push eax
push 1
push 0x784bb3
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x784bd6
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x784bd6], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x784bd6
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x784baf
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x784baf], 4
mov eax, dword [ebp - 4]
push eax
push 1
push 0x784baf
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77e94b
call esi
mov bl, 0x18
lea edx, [ebp - 4]
push edx
mov byte [0x77e94b], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x77e94b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77e94d
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x77e94d], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x77e94d
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77e997
call esi
lea edx, [ebp - 4]
mov byte [0x77e997], bl
mov eax, dword [ebp - 4]
push edx
push eax
push 1
push 0x77e997
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77e999
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x77e999], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x77e999
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77e9ea
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x77e9ea], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x77e9ea
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77e9ec
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x77e9ec], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x77e9ec
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77ea3c
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x77ea3c], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x77ea3c
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77ea3e
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x77ea3e], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x77ea3e
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77ea8e
call esi
mov byte [0x77ea8e], bl
lea edx, [ebp - 4]
mov eax, dword [ebp - 4]
push edx
push eax
push 1
push 0x77ea8e
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x77ea90
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x77ea90], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x77ea90
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x77e965
call esi
mov edi, 0x78
lea edx, [ebp - 4]
push edx
mov dword [0x77e965], edi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x77e965
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x77e9b5
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x77e9b5], edi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x77e9b5
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x77ea07
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x77ea07], edi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x77ea07
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x77ea59
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x77ea59], edi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x77ea59
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x77eaac
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x77eaac], edi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x77eaac
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x784c3e
call esi
xor edi, edi
lea edx, [ebp - 4]
push edx
mov dword [0x784c3e], edi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x784c3e
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x784c47
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x784c47], edi
mov eax, dword [ebp - 4]
push eax
push 4
push 0x784c47
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x837944
call esi
mov bl, 0x2a
lea edx, [ebp - 4]
push edx
mov byte [0x837944], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x837944
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x841f78
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x841f78], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x841f78
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x84f535
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x84f535], 0x26
mov eax, dword [ebp - 4]
push eax
push 1
push 0x84f535
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x84733e
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x84733e], 0xf
mov eax, dword [ebp - 4]
push eax
push 1
push 0x84733e
call esi
push 0x10016c30
push 0x790b50
mov bl, 0xe9
call fcn.10056900
push 0x10017f40
push 0x7db308
call fcn.10056900
push 0x10017f70
push 0x7db5d0
mov bl, 0xe8
call fcn.10056900
push 0x10017ee0
push 0x779410
mov bl, 0xe9
call fcn.10056900
push 0x10017270
push 0x77f7ee
mov bl, 0xe8
call fcn.10056900
add esp, 0x28
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x84936b
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x84936b], 0x1005e0b0
mov eax, dword [ebp - 4]
push eax
push 4
push 0x84936b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x84938b
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x84938b], 0x1005e0d4
mov eax, dword [ebp - 4]
push eax
push 4
push 0x84938b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836b7b
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836b7b], 0x1005e0f8
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836b7b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836b9b
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836b9b], 0x1005e118
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836b9b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836bbb
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836bbb], 0x1005e138
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836bbb
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836bdb
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836bdb], 0x1005e158
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836bdb
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836bfb
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836bfb], 0x1005e178
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836bfb
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836c1b
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836c1b], 0x1005e19c
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836c1b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836c3b
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836c3b], 0x1005e1c0
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836c3b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836c5b
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836c5b], 0x1005e1e0
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836c5b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836c7b
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836c7b], 0x1005e200
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836c7b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836c9b
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836c9b], 0x1005e220
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836c9b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x836cbb
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x836cbb], 0x1005e240
mov eax, dword [ebp - 4]
push eax
push 4
push 0x836cbb
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x811ac8
call esi
mov bl, 6
lea edx, [ebp - 4]
push edx
mov byte [0x811ac8], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x811ac8
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x811e3d
call esi
lea edx, [ebp - 4]
mov byte [0x811e3d], bl
mov eax, dword [ebp - 4]
push edx
push eax
push 1
push 0x811e3d
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x811e7e
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x811e7e], 3
mov eax, dword [ebp - 4]
push eax
push 1
push 0x811e7e
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x86014b
call esi
mov bl, 9
lea edx, [ebp - 4]
push edx
mov byte [0x86014b], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x86014b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x85f2dc
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x85f2dc], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x85f2dc
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x85ec8d
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x85ec8d], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x85ec8d
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x85f9be
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x85f9be], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x85f9be
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x80f626
call esi
mov dword [0x80f626], 0x81
mov eax, dword [ebp - 4]
lea edx, [ebp - 4]
push edx
push eax
push 4
push 0x80f626
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 4
push 0x80f711
call esi
lea edx, [ebp - 4]
push edx
mov dword [0x80f711], 0x80
mov eax, dword [ebp - 4]
push eax
push 4
push 0x80f711
call esi
push 0x10018430
push 0x85f071
mov bl, 0xe8
call fcn.10056900
push 0x10018450
push 0x86023b
call fcn.10056900
push 0x10018470
push 0x85f223
call fcn.10056900
push 0x10018490
push 0x860016
call fcn.10056900
add esp, 0x20
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x8137b2
call esi
xor bl, bl
lea edx, [ebp - 4]
push edx
mov byte [0x8137b2], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x8137b2
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x812ad5
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x812ad5], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x812ad5
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x81517b
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x81517b], 2
mov eax, dword [ebp - 4]
push eax
push 1
push 0x81517b
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x815242
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x815242], 2
mov eax, dword [ebp - 4]
push eax
push 1
push 0x815242
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x815321
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x815321], 2
mov eax, dword [ebp - 4]
push eax
push 1
push 0x815321
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x815400
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x815400], 2
mov eax, dword [ebp - 4]
push eax
push 1
push 0x815400
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x8154df
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x8154df], 2
mov eax, dword [ebp - 4]
push eax
push 1
push 0x8154df
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x7f041d
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x7f041d], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x7f041d
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x82c6fd
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x82c6fd], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x82c6fd
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x83513d
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x83513d], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x83513d
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x842493
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x842493], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x842493
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x847055
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x847055], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x847055
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x84f9f5
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x84f9f5], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x84f9f5
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x8575e4
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x8575e4], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x8575e4
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x8578aa
call esi
lea edx, [ebp - 4]
mov byte [0x8578aa], bl
mov eax, dword [ebp - 4]
push edx
push eax
push 1
push 0x8578aa
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x8642ba
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x8642ba], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x8642ba
call esi
lea ecx, [ebp - 4]
push ecx
push 0x40
push 1
push 0x8642d6
call esi
lea edx, [ebp - 4]
push edx
mov byte [0x8642d6], bl
mov eax, dword [ebp - 4]
push eax
push 1
push 0x8642d6
call esi
push 0x10017a50
push 0x779a02
mov bl, 0xe8
call fcn.10056900
push 0x10015c60
push 0x80f5bb
call fcn.10056900
push 0x10015b70
push 0x80f2e8
call fcn.10056900
push 0x10015c00
push 0x80f4c7
call fcn.10056900
push 0x10015cc0
push 0x80f6af
call fcn.10056900
push 0x10015ba0
push 0x80f3d3
call fcn.10056900
add esp, 0x30
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret