Function at 0x1005f7f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1012e010]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x1005f7b0
push 0x7db314
push 0xe9
call fcn.1007ca60
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0xc
push eax
push 0x40
push 4
push 0x4d568d
call esi
lea eax, [ebp - 8]
mov dword [0x4d568d], 0x1012455c
push eax
push dword [ebp - 8]
push 4
push 0x4d568d
call esi
push 0x1005c200
push 0x80f250
push 0xe8
call fcn.1007ca60
push fcn.1000c860
push 0x8119e6
push 0xe8
call fcn.1007ca60
push fcn.1000c860
push 0x811b1a
push 0xe8
call fcn.1007ca60
push fcn.1000c860
push 0x811b61
push 0xe8
call fcn.1007ca60
push 0x10059a60
push 0x80f8e0
push 0xe9
call fcn.1007ca60
push 0x1005a3f0
push 0x80f855
push 0xe8
call fcn.1007ca60
add esp, 0x48
push fcn.1000c860
push 0x80f84d
push 0xe8
call fcn.1007ca60
push 0x10059d30
push 0x80f845
push 0xe8
call fcn.1007ca60
push 0x1005a6e0
push 0x810fe7
push 0xe8
call fcn.1007ca60
push 0x1005a6e0
push 0x811890
push 0xe8
call fcn.1007ca60
push 0x1005a750
push 0x810f45
push 0xe8
call fcn.1007ca60
push 0x1005a750
push 0x8117ee
push 0xe8
call fcn.1007ca60
add esp, 0x48
push 0x1005a790
push 0x895600
push 0xe9
call fcn.1007ca60
push 0x1005a790
push 0x895600
push 0xe9
call fcn.1007ca60
push 0x849872
push 0x849757
push 0xe9
call fcn.1007ca60
push 0x1005c880
push 0x849a52
push 0xe8
call fcn.1007ca60
push 0x1005c880
push 0x849aad
push 0xe8
call fcn.1007ca60
push 0x1005c880
push 0x849b10
push 0xe8
call fcn.1007ca60
add esp, 0x48
push 0x1005c880
push 0x849b6c
push 0xe8
call fcn.1007ca60
push 0x1005c880
push 0x849bd0
push 0xe8
call fcn.1007ca60
push 0x1005c880
push 0x849c2c
push 0xe8
call fcn.1007ca60
push 0x1005cbd0
push 0x7a9f8e
push 0xe8
call fcn.1007ca60
push 0x1005cc10
push 0x8491ae
push 0xe8
call fcn.1007ca60
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7a866e
call esi
lea eax, [ebp - 8]
mov dword [0x7a866e], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x7a866e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7a86c5
call esi
lea eax, [ebp - 8]
mov dword [0x7a86c5], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x7a86c5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7a8722
call esi
lea eax, [ebp - 8]
mov dword [0x7a8722], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x7a8722
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7a877f
call esi
mov dword [0x7a877f], 0xe35fb
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x7a877f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7a87dc
call esi
lea eax, [ebp - 8]
mov dword [0x7a87dc], 0xe35fb
push eax
push dword [ebp - 8]
push 4
push 0x7a87dc
call esi
push 0x1005cc50
push 0x7a8316
push 0xe8
call fcn.1007ca60
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77fddf
call esi
lea eax, [ebp - 8]
mov byte [0x77fddf], 0x5d
push eax
push dword [ebp - 8]
push 1
push 0x77fddf
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77fdd2
call esi
lea eax, [ebp - 8]
mov byte [0x77fdd2], 0x39
push eax
push dword [ebp - 8]
push 1
push 0x77fdd2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77fced
call esi
lea eax, [ebp - 8]
mov byte [0x77fced], 0x12
push eax
push dword [ebp - 8]
push 1
push 0x77fced
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7801da
call esi
lea eax, [ebp - 8]
mov byte [0x7801da], 1
push eax
push dword [ebp - 8]
push 1
push 0x7801da
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x780207
call esi
lea eax, [ebp - 8]
mov byte [0x780207], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x780207
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78021c
call esi
lea eax, [ebp - 8]
mov byte [0x78021c], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x78021c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78023c
call esi
lea eax, [ebp - 8]
mov byte [0x78023c], 0x14
push eax
push dword [ebp - 8]
push 1
push 0x78023c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x780218
call esi
lea eax, [ebp - 8]
mov byte [0x780218], 4
push eax
push dword [ebp - 8]
push 1
push 0x780218
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78190e
call esi
lea eax, [ebp - 8]
mov byte [0x78190e], 1
push eax
push dword [ebp - 8]
push 1
push 0x78190e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78193e
call esi
lea eax, [ebp - 8]
mov byte [0x78193e], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x78193e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x781953
call esi
mov byte [0x781953], 0x3c
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x781953
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x781975
call esi
lea eax, [ebp - 8]
mov byte [0x781975], 0x14
push eax
push dword [ebp - 8]
push 1
push 0x781975
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x78194f
call esi
lea eax, [ebp - 8]
mov byte [0x78194f], 4
push eax
push dword [ebp - 8]
push 1
push 0x78194f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x782d16
call esi
lea eax, [ebp - 8]
mov byte [0x782d16], 1
push eax
push dword [ebp - 8]
push 1
push 0x782d16
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x782d46
call esi
lea eax, [ebp - 8]
mov byte [0x782d46], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x782d46
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x782d5b
call esi
lea eax, [ebp - 8]
mov byte [0x782d5b], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x782d5b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x782d7e
call esi
lea eax, [ebp - 8]
mov byte [0x782d7e], 0x14
push eax
push dword [ebp - 8]
push 1
push 0x782d7e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x782d57
call esi
lea eax, [ebp - 8]
mov byte [0x782d57], 4
push eax
push dword [ebp - 8]
push 1
push 0x782d57
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7830f0
call esi
lea eax, [ebp - 8]
mov byte [0x7830f0], 1
push eax
push dword [ebp - 8]
push 1
push 0x7830f0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x783120
call esi
lea eax, [ebp - 8]
mov byte [0x783120], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x783120
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x783135
call esi
lea eax, [ebp - 8]
mov byte [0x783135], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x783135
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x783157
call esi
lea eax, [ebp - 8]
mov byte [0x783157], 0x14
push eax
push dword [ebp - 8]
push 1
push 0x783157
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x783131
call esi
lea eax, [ebp - 8]
mov byte [0x783131], 4
push eax
push dword [ebp - 8]
push 1
push 0x783131
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x784b6e
call esi
lea eax, [ebp - 8]
mov byte [0x784b6e], 1
push eax
push dword [ebp - 8]
push 1
push 0x784b6e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x784b9e
call esi
lea eax, [ebp - 8]
mov byte [0x784b9e], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x784b9e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x784bb3
call esi
lea eax, [ebp - 8]
mov byte [0x784bb3], 0x3c
push eax
push dword [ebp - 8]
push 1
push 0x784bb3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x784bd6
call esi
lea eax, [ebp - 8]
mov byte [0x784bd6], 0x12
push eax
push dword [ebp - 8]
push 1
push 0x784bd6
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x784baf
call esi
lea eax, [ebp - 8]
mov byte [0x784baf], 4
push eax
push dword [ebp - 8]
push 1
push 0x784baf
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e94b
call esi
lea eax, [ebp - 8]
mov byte [0x77e94b], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e94b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e94d
call esi
lea eax, [ebp - 8]
mov byte [0x77e94d], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e94d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e997
call esi
lea eax, [ebp - 8]
mov byte [0x77e997], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e997
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e999
call esi
lea eax, [ebp - 8]
mov byte [0x77e999], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e999
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e9ea
call esi
lea eax, [ebp - 8]
mov byte [0x77e9ea], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e9ea
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77e9ec
call esi
lea eax, [ebp - 8]
mov byte [0x77e9ec], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77e9ec
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77ea3c
call esi
lea eax, [ebp - 8]
mov byte [0x77ea3c], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77ea3c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77ea3e
call esi
mov byte [0x77ea3e], 0x18
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x77ea3e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77ea8e
call esi
lea eax, [ebp - 8]
mov byte [0x77ea8e], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77ea8e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x77ea90
call esi
lea eax, [ebp - 8]
mov byte [0x77ea90], 0x18
push eax
push dword [ebp - 8]
push 1
push 0x77ea90
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77e965
call esi
lea eax, [ebp - 8]
mov dword [0x77e965], 0x78
push eax
push dword [ebp - 8]
push 4
push 0x77e965
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77e9b5
call esi
lea eax, [ebp - 8]
mov dword [0x77e9b5], 0x78
push eax
push dword [ebp - 8]
push 4
push 0x77e9b5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77ea07
call esi
lea eax, [ebp - 8]
mov dword [0x77ea07], 0x78
push eax
push dword [ebp - 8]
push 4
push 0x77ea07
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77ea59
call esi
lea eax, [ebp - 8]
mov dword [0x77ea59], 0x78
push eax
push dword [ebp - 8]
push 4
push 0x77ea59
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77eaac
call esi
lea eax, [ebp - 8]
mov dword [0x77eaac], 0x78
push eax
push dword [ebp - 8]
push 4
push 0x77eaac
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784c3e
call esi
lea eax, [ebp - 8]
mov dword [0x784c3e], 0
push eax
push dword [ebp - 8]
push 4
push 0x784c3e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x784c47
call esi
lea eax, [ebp - 8]
mov dword [0x784c47], 0
push eax
push dword [ebp - 8]
push 4
push 0x784c47
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x837944
call esi
lea eax, [ebp - 8]
mov byte [0x837944], 0x2a
push eax
push dword [ebp - 8]
push 1
push 0x837944
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x841f78
call esi
lea eax, [ebp - 8]
mov byte [0x841f78], 0x2a
push eax
push dword [ebp - 8]
push 1
push 0x841f78
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84f535
call esi
lea eax, [ebp - 8]
mov byte [0x84f535], 0x26
push eax
push dword [ebp - 8]
push 1
push 0x84f535
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84733e
call esi
lea eax, [ebp - 8]
mov byte [0x84733e], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x84733e
call esi
push 0x1005d100
push 0x790b50
push 0xe9
call fcn.1007ca60
push 0x1005db10
push 0x7db308
push 0xe9
call fcn.1007ca60
push 0x1005db30
push 0x7db5d0
push 0xe8
call fcn.1007ca60
push 0x1005dd30
push 0x779410
push 0xe9
call fcn.1007ca60
push 0x1005dd80
push 0x77f7ee
push 0xe8
call fcn.1007ca60
push 0x1005e880
push 0x779a02
push 0xe8
call fcn.1007ca60
add esp, 0x48
push 0x1005ecd0
push 0x80f5bb
push 0xe8
call fcn.1007ca60
push 0x1005ed40
push 0x80f2e8
push 0xe8
call fcn.1007ca60
push 0x1005ed60
push 0x80f4c7
push 0xe8
call fcn.1007ca60
push 0x1005edd0
push 0x80f6af
push 0xe8
call fcn.1007ca60
push 0x1005ee40
push 0x80f3d3
push 0xe8
call fcn.1007ca60
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x811ac8
call esi
lea eax, [ebp - 8]
mov byte [0x811ac8], 6
push eax
push dword [ebp - 8]
push 1
push 0x811ac8
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x811e3d
call esi
lea eax, [ebp - 8]
mov byte [0x811e3d], 6
push eax
push dword [ebp - 8]
push 1
push 0x811e3d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x811e7e
call esi
lea eax, [ebp - 8]
mov byte [0x811e7e], 3
push eax
push dword [ebp - 8]
push 1
push 0x811e7e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x86014b
call esi
lea eax, [ebp - 8]
mov byte [0x86014b], 9
push eax
push dword [ebp - 8]
push 1
push 0x86014b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x85f2dc
call esi
lea eax, [ebp - 8]
mov byte [0x85f2dc], 9
push eax
push dword [ebp - 8]
push 1
push 0x85f2dc
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x85ec8d
call esi
lea eax, [ebp - 8]
mov byte [0x85ec8d], 9
push eax
push dword [ebp - 8]
push 1
push 0x85ec8d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x85f9be
call esi
lea eax, [ebp - 8]
mov byte [0x85f9be], 9
push eax
push dword [ebp - 8]
push 1
push 0x85f9be
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x80f626
call esi
lea eax, [ebp - 8]
mov dword [0x80f626], 0x81
push eax
push dword [ebp - 8]
push 4
push 0x80f626
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x80f711
call esi
lea eax, [ebp - 8]
mov dword [0x80f711], 0x80
push eax
push dword [ebp - 8]
push 4
push 0x80f711
call esi
push 0x1005ef80
push 0x85f071
push 0xe8
call fcn.1007ca60
push 0x1005efa0
push 0x86023b
push 0xe8
call fcn.1007ca60
push 0x1005efc0
push 0x85f223
push 0xe8
call fcn.1007ca60
push 0x1005efe0
push 0x860016
push 0xe8
call fcn.1007ca60
add esp, 0x30
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8137b2
call esi
lea eax, [ebp - 8]
mov byte [0x8137b2], 0
push eax
push dword [ebp - 8]
push 1
push 0x8137b2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x812ad5
call esi
lea eax, [ebp - 8]
mov byte [0x812ad5], 0
push eax
push dword [ebp - 8]
push 1
push 0x812ad5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x81517b
call esi
lea eax, [ebp - 8]
mov byte [0x81517b], 2
push eax
push dword [ebp - 8]
push 1
push 0x81517b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x815242
call esi
lea eax, [ebp - 8]
mov byte [0x815242], 2
push eax
push dword [ebp - 8]
push 1
push 0x815242
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x815321
call esi
lea eax, [ebp - 8]
mov byte [0x815321], 2
push eax
push dword [ebp - 8]
push 1
push 0x815321
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x815400
call esi
lea eax, [ebp - 8]
mov byte [0x815400], 2
push eax
push dword [ebp - 8]
push 1
push 0x815400
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8154df
call esi
lea eax, [ebp - 8]
mov byte [0x8154df], 2
push eax
push dword [ebp - 8]
push 1
push 0x8154df
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7f041d
call esi
lea eax, [ebp - 8]
mov byte [0x7f041d], 0
push eax
push dword [ebp - 8]
push 1
push 0x7f041d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x82c6fd
call esi
lea eax, [ebp - 8]
mov byte [0x82c6fd], 0
push eax
push dword [ebp - 8]
push 1
push 0x82c6fd
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x83513d
call esi
lea eax, [ebp - 8]
mov byte [0x83513d], 0
push eax
push dword [ebp - 8]
push 1
push 0x83513d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x842493
call esi
lea eax, [ebp - 8]
mov byte [0x842493], 0
push eax
push dword [ebp - 8]
push 1
push 0x842493
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x847055
call esi
lea eax, [ebp - 8]
mov byte [0x847055], 0
push eax
push dword [ebp - 8]
push 1
push 0x847055
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84f9f5
call esi
lea eax, [ebp - 8]
mov byte [0x84f9f5], 0
push eax
push dword [ebp - 8]
push 1
push 0x84f9f5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8575e4
call esi
lea eax, [ebp - 8]
mov byte [0x8575e4], 0
push eax
push dword [ebp - 8]
push 1
push 0x8575e4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8578aa
call esi
lea eax, [ebp - 8]
mov byte [0x8578aa], 0
push eax
push dword [ebp - 8]
push 1
push 0x8578aa
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8642ba
call esi
lea eax, [ebp - 8]
mov byte [0x8642ba], 0
push eax
push dword [ebp - 8]
push 1
push 0x8642ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8642d6
call esi
lea eax, [ebp - 8]
mov byte [0x8642d6], 0
push eax
push dword [ebp - 8]
push 1
push 0x8642d6
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84936b
call esi
lea eax, [ebp - 8]
mov dword [0x84936b], 0x10124b04
push eax
push dword [ebp - 8]
push 4
push 0x84936b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x84938b
call esi
lea eax, [ebp - 8]
mov dword [0x84938b], 0x10124b38
push eax
push dword [ebp - 8]
push 4
push 0x84938b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836b7b
call esi
lea eax, [ebp - 8]
mov dword [0x836b7b], 0x10124aa4
push eax
push dword [ebp - 8]
push 4
push 0x836b7b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836b9b
call esi
lea eax, [ebp - 8]
mov dword [0x836b9b], 0x10124ad4
push eax
push dword [ebp - 8]
push 4
push 0x836b9b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836bbb
call esi
lea eax, [ebp - 8]
mov dword [0x836bbb], 0x10124bd4
push eax
push dword [ebp - 8]
push 4
push 0x836bbb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836bdb
call esi
mov dword [0x836bdb], 0x10124c04
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x836bdb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836bfb
call esi
lea eax, [ebp - 8]
mov dword [0x836bfb], 0x10124b6c
push eax
push dword [ebp - 8]
push 4
push 0x836bfb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836c1b
call esi
lea eax, [ebp - 8]
mov dword [0x836c1b], 0x10124ba0
push eax
push dword [ebp - 8]
push 4
push 0x836c1b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836c3b
call esi
lea eax, [ebp - 8]
mov dword [0x836c3b], 0x10124c94
push eax
push dword [ebp - 8]
push 4
push 0x836c3b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836c5b
call esi
lea eax, [ebp - 8]
mov dword [0x836c5b], 0x10124cc4
push eax
push dword [ebp - 8]
push 4
push 0x836c5b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836c7b
call esi
lea eax, [ebp - 8]
mov dword [0x836c7b], 0x10124c34
push eax
push dword [ebp - 8]
push 4
push 0x836c7b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836c9b
call esi
lea eax, [ebp - 8]
mov dword [0x836c9b], 0x10124c64
push eax
push dword [ebp - 8]
push 4
push 0x836c9b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836cbb
call esi
lea eax, [ebp - 8]
mov dword [0x836cbb], 0x10124cf8
push eax
push dword [ebp - 8]
push 4
push 0x836cbb
call esi
push 0x1005eeb0
push 0x8370ee
push 0xe8
call fcn.1007ca60
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8367ba
call esi
lea eax, [ebp - 8]
mov dword [0x8367ba], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x8367ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8367c7
call esi
lea eax, [ebp - 8]
mov dword [0x8367c7], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x8367c7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836805
call esi
lea eax, [ebp - 8]
mov dword [0x836805], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x836805
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836812
call esi
lea eax, [ebp - 8]
mov dword [0x836812], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x836812
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836853
call esi
mov dword [0x836853], 0x14
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x836853
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x836860
call esi
lea eax, [ebp - 8]
mov dword [0x836860], 0x14
push eax
push dword [ebp - 8]
push 4
push 0x836860
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8367e0
call esi
lea eax, [ebp - 8]
mov byte [0x8367e0], 0x3a
push eax
push dword [ebp - 8]
push 1
push 0x8367e0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x83682b
call esi
lea eax, [ebp - 8]
mov byte [0x83682b], 0x3a
push eax
push dword [ebp - 8]
push 1
push 0x83682b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x836792
call esi
lea eax, [ebp - 8]
mov byte [0x836792], 0x76
push eax
push dword [ebp - 8]
push 1
push 0x836792
call esi
push ecx
mov edx, 5
mov ecx, 0xd46c8c
call fcn.1007cd10
mov edx, 5
mov ecx, 0xd46c84
call fcn.1007cd10
push 0x1005f510
push 0x835234
push 0xe9
call fcn.1007ca60
push 0x1005f140
push 0x5bfc9b
push 0xe8
call fcn.1007ca60
push 0x55c790
push 0x55c782
push 0xe9
call fcn.1007ca60
push 0x1005f000
push 0x5bafab
push 0xe8
call fcn.1007ca60
push 0x1005f0c0
push 0x7d00b9
push 0xe9
call fcn.1007ca60
add esp, 0x40
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x552dec
call esi
lea eax, [ebp - 8]
mov byte [0x552dec], 0xe8
push eax
push dword [ebp - 8]
push 1
push 0x552dec
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x5528a0
call esi
lea eax, [ebp - 8]
mov byte [0x5528a0], 0xc3
push eax
push dword [ebp - 8]
push 1
push 0x5528a0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4030d4
call esi
lea eax, [ebp - 8]
mov byte [0x4030d4], 4
push eax
push dword [ebp - 8]
push 1
push 0x4030d4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa3ba
call esi
mov eax, 0x7aa3ba
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa3ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa39c
call esi
mov eax, 0x7aa39c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa39c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa9b3
call esi
mov eax, 0x7aa9b3
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa9b3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7df968
call esi
mov eax, 0x7df968
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7df968
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x87500f
call esi
mov eax, 0x87500f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x87500f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8743ff
call esi
lea eax, [ebp - 8]
mov byte [0x8743ff], 7
push eax
push dword [ebp - 8]
push 1
push 0x8743ff
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x874d5a
call esi
lea eax, [ebp - 8]
mov byte [0x874d5a], 7
push eax
push dword [ebp - 8]
push 1
push 0x874d5a
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0xd2bf5c
call esi
mov eax, 0xd2bf5c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0xd2bf5c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0xd2bec4
call esi
mov eax, 0xd2bec4
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0xd2bec4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x1db
push 0x853770
call esi
push 0x1db
push 0x90
push 0x853770
call fcn.100cfd50
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x1db
push 0x853770
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x5a
push 0x853710
call esi
push 0x5a
push 0x90
push 0x853710
call fcn.100cfd50
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x5a
push 0x853710
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x273
push 0x7d31f0
call esi
push 0x273
push 0x90
push 0x7d31f0
call fcn.100cfd50
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x273
push 0x7d31f0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x30
push 0x62f876
call esi
push 0x30
push 0x90
push 0x62f876
call fcn.100cfd50
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x30
push 0x62f876
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x6097b0
call esi
lea eax, [ebp - 8]
mov byte [0x6097b0], 0xc3
push eax
push dword [ebp - 8]
push 1
push 0x6097b0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x57bf78
call esi
mov eax, 0x57bf78
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x57bf78
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x57c125
call esi
mov eax, 0x57c125
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x57c125
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x57be80
call esi
mov eax, 0x57be80
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x57be80
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x57c057
call esi
mov eax, 0x57c057
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x57c057
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x57bf0e
call esi
mov eax, 0x57bf0e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x57bf0e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x57c0bb
call esi
mov eax, 0x57c0bb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x57c0bb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x57aba9
call esi
mov eax, 0x57aba9
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x57aba9
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x57acbf
call esi
mov eax, 0x57acbf
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x57acbf
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x57ad03
call esi
mov eax, 0x57ad03
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x57ad03
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x57ad47
call esi
mov eax, 0x57ad47
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x57ad47
call esi
push ecx
mov edx, 5
mov ecx, 0x6e899d
call fcn.1007cd10
mov edx, 5
mov ecx, 0x7126fa
call fcn.1007cd10
mov edx, 5
mov ecx, 0x5b768f
call fcn.1007cd10
mov edx, 5
mov ecx, 0x5b770c
call fcn.1007cd10
add esp, 4
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd43220
call esi
lea eax, [ebp - 8]
mov dword [0xd43220], 0
push eax
push dword [ebp - 8]
push 4
push 0xd43220
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd43224
call esi
lea eax, [ebp - 8]
mov dword [0xd43224], 0
push eax
push dword [ebp - 8]
push 4
push 0xd43224
call esi
push 0x856fd2
push 0x856faa
push 0xe9
call fcn.1007ca60
push 0x7d3725
push 0x7d371e
push 0xe9
call fcn.1007ca60
push 0x836a23
push 0x8369fa
push 0xe9
call fcn.1007ca60
push 0x7d36bf
push 0x7d36b8
push 0xe9
call fcn.1007ca60
push 0x7d3fa3
push 0x7d3f9c
push 0xe9
call fcn.1007ca60
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7d582d
call esi
mov eax, 0x7d582d
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7d582d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x86850f
call esi
lea eax, [ebp - 8]
mov byte [0x86850f], 0x78
push eax
push dword [ebp - 8]
push 1
push 0x86850f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x834d94
call esi
lea eax, [ebp - 8]
mov byte [0x834d94], 0x52
push eax
push dword [ebp - 8]
push 1
push 0x834d94
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3d57
call esi
lea eax, [ebp - 8]
mov byte [0x7d3d57], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3d57
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
mov byte [0x7d37a2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3af2
call esi
lea eax, [ebp - 8]
mov byte [0x7d3af2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3af2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x834e13
call esi
lea eax, [ebp - 8]
mov byte [0x834e13], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x834e13
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3c6c
call esi
mov byte [0x7d3c6c], 0xff
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x7d3c6c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3a9f
call esi
lea eax, [ebp - 8]
mov byte [0x7d3a9f], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3a9f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7c446c
call esi
lea eax, [ebp - 8]
mov byte [0x7c446c], 0x78
push eax
push dword [ebp - 8]
push 1
push 0x7c446c
call esi
push 0x7c5af2
push 0x7c5a88
push 0xe9
call fcn.1007ca60
push 0x1005f100
push 0x777008
push 0xe9
call fcn.1007ca60
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x776fe4
call esi
mov eax, 0x776fe4
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x776fe4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d4001
call esi
lea eax, [ebp - 8]
mov byte [0x7d4001], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d4001
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d4110
call esi
lea eax, [ebp - 8]
mov byte [0x7d4110], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d4110
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7d2ecb
call esi
lea eax, [ebp - 8]
mov dword [0x7d2ecb], 0x1012455c
push eax
push dword [ebp - 8]
push 4
push 0x7d2ecb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7d2eeb
call esi
lea eax, [ebp - 8]
mov dword [0x7d2eeb], 0x1012455c
push eax
push dword [ebp - 8]
push 4
push 0x7d2eeb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7d2f0b
call esi
lea eax, [ebp - 8]
mov dword [0x7d2f0b], 0x1012455c
push eax
push dword [ebp - 8]
push 4
push 0x7d2f0b
call esi
push 0x1005f6d0
push 0x80b7f6
push 0xe8
call fcn.1007ca60
push 0x1005f6d0
push 0x7d2bc0
push 0xe9
call fcn.1007ca60
push 0x1005f6d0
push 0x7d2b00
push 0xe9
call fcn.1007ca60
push 0x1005f0d0
push 0x77ebb0
push 0xe9
call fcn.1007ca60
push 0x1005f0e0
push 0x77ec59
push 0xe9
call fcn.1007ca60
push 0x1005f0f0
push 0x8369af
push 0xe9
call fcn.1007ca60
add esp, 0x48
push 0x1005f130
push 0x77ece2
push 0xe9
call fcn.1007ca60
push 0x895c02
push 0x895b8d
push 0xe9
call fcn.1007ca60
push 0x895c0c
push 0x895b8d
push 0xe9
call fcn.1007ca60
push 0x7d39d8
push 0x7d399f
push 0xe9
call fcn.1007ca60
push 0x77ec0e
push 0x77eb65
push 0xe9
call fcn.1007ca60
push 0x7a8313
push 0x7a830b
push 0xe9
call fcn.1007ca60
add esp, 0x48
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x864b06
call esi
lea eax, [ebp - 8]
mov byte [0x864b06], 0x73
push eax
push dword [ebp - 8]
push 1
push 0x864b06
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x864b86
call esi
lea eax, [ebp - 8]
mov byte [0x864b86], 0x73
push eax
push dword [ebp - 8]
push 1
push 0x864b86
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x864994
call esi
lea eax, [ebp - 8]
mov byte [0x864994], 0x25
push eax
push dword [ebp - 8]
push 1
push 0x864994
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x864987
call esi
lea eax, [ebp - 8]
mov byte [0x864987], 0x26
push eax
push dword [ebp - 8]
push 1
push 0x864987
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x864920
call esi
lea eax, [ebp - 8]
mov byte [0x864920], 0xf
push eax
push dword [ebp - 8]
push 1
push 0x864920
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x864913
call esi
mov byte [0x864913], 0x1a
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x864913
call esi
push 0x1005f520
push 0x864a5a
push 0xe8
call fcn.1007ca60
push 0x864558
push 0x86453d
push 0xe8
call fcn.1007ca60
push 0x8645e9
push 0x8645ce
push 0xe8
call fcn.1007ca60
push 0x864512
push 0x8644f7
push 0xe8
call fcn.1007ca60
mov ecx, dword [ebp - 4]
add esp, 0x30
xor ecx, ebp
pop esi
call fcn.10081d3c
mov esp, ebp
pop ebp
ret