Function at 0x10027ca0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1019a06c]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x1024203c], 4
ja 0x10027d4f
push 0x10020320
push 0x814f0d
push 0xe8
call fcn.100bfb10
push 0x10020380
push 0x814e63
push 0xe8
call fcn.100bfb10
push 0x100203d0
push 0x814dc1
push 0xe8
call fcn.100bfb10
push 0x100203d0
push 0x814d4d
push 0xe8
call fcn.100bfb10
push 0x10020470
push 0x8126c0
push 0xe9
call fcn.100bfb10
push 0x10021370
push 0x813970
push 0xe9
call fcn.100bfb10
add esp, 0x48
push 0x10021840
push 0x80f833
push 0xe8
call fcn.100bfb10
add esp, 0xc
mov eax, dword [0x10242090]
sub eax, 1
je 0x10027d65
sub eax, 1
jne 0x10027d7c
push 0x10021d30
jmp 0x10027d6a
push fcn.10022ba0
push 0x7dfa60
push 0xe9
call fcn.100bfb10
add esp, 0xc
cmp dword [0x1030ebf0], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
jne 0x10027f41
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d9749
call esi
lea eax, [ebp - 8]
mov dword [0x4d9749], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d9749
call esi
push 0x10027c20
push 0x819415
push 0xe8
call fcn.100bfb10
push 0x10027c50
push 0x81a146
push 0xe8
call fcn.100bfb10
push 0x10027c50
push 0x81a199
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x40f2e9
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x4d714e
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x4d79e7
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10027c10
push 0x4d9756
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db4d5
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db1aa
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db22f
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db322
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db3a7
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10027c10
push 0x5db46d
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db4ad
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db534
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db5c4
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db628
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db68c
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10027c10
push 0x5db6ed
push 0xe8
call fcn.100bfb10
add esp, 0xc
mov eax, dword [0x1024203c]
cmp eax, 5
ja case.default.0x10027f4f
jmp dword [eax*4 + 0x10029758]
push 0x10021f10
push 0x895a48
push 0xe9
call fcn.100bfb10
push 0x10021ff0
push 0x895abd
push 0xe9
call fcn.100bfb10
push 0x10022090
push 0x895b32
push 0xe9
call fcn.100bfb10
push 0x10022130
push 0x895ba7
push 0xe9
call fcn.100bfb10
push 0x100221d0
push 0x80ff28
push 0xe8
call fcn.100bfb10
push 0x100221d0
push 0x8100bb
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100221d0
push 0x810389
push 0xe8
call fcn.100bfb10
push 0x100221d0
push 0x810659
push 0xe8
call fcn.100bfb10
push 0x100221d0
push 0x810f45
push 0xe8
call fcn.100bfb10
push 0x100221d0
push 0x8117ee
push 0xe8
call fcn.100bfb10
push 0x100228d0
push 0x810fe7
push 0xe8
call fcn.100bfb10
push 0x100228d0
push 0x811890
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10022880
push 0x810f97
push 0xe8
call fcn.100bfb10
push 0x10022880
push 0x811840
push 0xe8
call fcn.100bfb10
push 0x100222f0
push 0x810a1a
push 0xe8
call fcn.100bfb10
push 0x100222f0
push 0x810be5
push 0xe8
call fcn.100bfb10
push 0x100222f0
push 0x810d2c
push 0xe8
call fcn.100bfb10
push 0x100222f0
push 0x810dc3
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100222f0
push 0x810ef0
push 0xe8
call fcn.100bfb10
push 0x100222f0
push 0x8112a6
push 0xe8
call fcn.100bfb10
push 0x100222f0
push 0x81147f
push 0xe8
call fcn.100bfb10
push 0x100222f0
push 0x8115c9
push 0xe8
call fcn.100bfb10
push 0x100222f0
push 0x811660
push 0xe8
call fcn.100bfb10
push 0x100222f0
push 0x811790
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100223b0
push 0x810a97
push 0xe8
call fcn.100bfb10
push 0x100223b0
push 0x810c62
push 0xe8
call fcn.100bfb10
push 0x100223b0
push 0x810e40
push 0xe8
call fcn.100bfb10
push 0x100223b0
push 0x811323
push 0xe8
call fcn.100bfb10
push 0x100223b0
push 0x8114fc
push 0xe8
call fcn.100bfb10
push 0x100223b0
push 0x8116dd
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100227c0
push 0x80feef
push 0xe8
call fcn.100bfb10
push 0x100227c0
push 0x80fe56
push 0xe8
call fcn.100bfb10
push 0x100227c0
push 0x810083
push 0xe8
call fcn.100bfb10
push 0x100227c0
push 0x810354
push 0xe8
call fcn.100bfb10
push 0x100227c0
push 0x810624
push 0xe8
call fcn.100bfb10
push 0x100222b0
push 0x80ff56
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100222b0
push 0x8100e9
push 0xe8
call fcn.100bfb10
push 0x100222b0
push 0x8103b7
push 0xe8
call fcn.100bfb10
push 0x100222b0
push 0x810699
push 0xe8
call fcn.100bfb10
push 0x10022270
push 0x80ffa7
push 0xe8
call fcn.100bfb10
push 0x10022270
push 0x81013a
push 0xe8
call fcn.100bfb10
push 0x10022270
push 0x810408
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10022270
push 0x8106ea
push 0xe8
call fcn.100bfb10
push 0x10022440
push 0x8119e6
push 0xe8
call fcn.100bfb10
push 0x100224d0
push 0x80f92d
push 0xe8
call fcn.100bfb10
push 0x100225c0
push 0x80f968
push 0xe8
call fcn.100bfb10
push 0x100226d0
push 0x80f9a3
push 0xe8
call fcn.100bfb10
push 0x100225c0
push 0x80fa02
push 0xe8
call fcn.100bfb10
add esp, 0x48
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e34d0
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7f041d
call esi
lea eax, [ebp - 8]
mov byte [0x7f041d], 0
push eax
push dword [ebp - 8]
push 1
push 0x7f041d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x82c6fd
call esi
lea eax, [ebp - 8]
mov byte [0x82c6fd], 0
push eax
push dword [ebp - 8]
push 1
push 0x82c6fd
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x83513d
call esi
lea eax, [ebp - 8]
mov byte [0x83513d], 0
push eax
push dword [ebp - 8]
push 1
push 0x83513d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x842493
call esi
lea eax, [ebp - 8]
mov byte [0x842493], 0
push eax
push dword [ebp - 8]
push 1
push 0x842493
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x847055
call esi
lea eax, [ebp - 8]
mov byte [0x847055], 0
push eax
push dword [ebp - 8]
push 1
push 0x847055
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x84f9f5
call esi
lea eax, [ebp - 8]
mov byte [0x84f9f5], 0
push eax
push dword [ebp - 8]
push 1
push 0x84f9f5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8575e4
call esi
lea eax, [ebp - 8]
mov byte [0x8575e4], 0
push eax
push dword [ebp - 8]
push 1
push 0x8575e4
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8578aa
call esi
lea eax, [ebp - 8]
mov byte [0x8578aa], 0
push eax
push dword [ebp - 8]
push 1
push 0x8578aa
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8642ba
call esi
lea eax, [ebp - 8]
mov byte [0x8642ba], 0
push eax
push dword [ebp - 8]
push 1
push 0x8642ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8642d6
call esi
lea eax, [ebp - 8]
mov byte [0x8642d6], 0
push eax
push dword [ebp - 8]
push 1
push 0x8642d6
call esi
push 0x10022e10
push 0x7db308
push 0xe9
call fcn.100bfb10
push 0x10022e30
push 0x7db5d0
push 0xe8
call fcn.100bfb10
push 0x10023090
push 0x895a48
push 0xe9
call fcn.100bfb10
push 0x10023110
push 0x895abd
push 0xe9
call fcn.100bfb10
push 0x10023190
push 0x895b32
push 0xe9
call fcn.100bfb10
push 0x10023210
push 0x895b8d
push 0xe9
call fcn.100bfb10
add esp, 0x48
push 0x100233c0
push 0x80ff28
push 0xe8
call fcn.100bfb10
push 0x100233f0
push 0x8100bb
push 0xe8
call fcn.100bfb10
push 0x10023420
push 0x810389
push 0xe8
call fcn.100bfb10
push 0x10023450
push 0x810659
push 0xe8
call fcn.100bfb10
push 0x10023490
push 0x80feef
push 0xe8
call fcn.100bfb10
push 0x10023490
push 0x80fe56
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10023490
push 0x810083
push 0xe8
call fcn.100bfb10
push 0x10023490
push 0x810354
push 0xe8
call fcn.100bfb10
push 0x10023490
push 0x810624
push 0xe8
call fcn.100bfb10
push 0x100236f0
push 0x80ff56
push 0xe8
call fcn.100bfb10
push 0x100236f0
push 0x8100e9
push 0xe8
call fcn.100bfb10
push 0x100236f0
push 0x8103b7
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100236f0
push 0x810699
push 0xe8
call fcn.100bfb10
push 0x100237b0
push 0x80ffa7
push 0xe8
call fcn.100bfb10
push 0x100237b0
push 0x81013a
push 0xe8
call fcn.100bfb10
push 0x100237b0
push 0x810408
push 0xe8
call fcn.100bfb10
push 0x100237b0
push 0x8106ea
push 0xe8
call fcn.100bfb10
push method.std::codecvt_char__char__struct__Mbstatet_.virtual_16
push 0x80f2e8
push 0xe8
call fcn.100bfb10
add esp, 0x48
push method.std::codecvt_char__char__struct__Mbstatet_.virtual_16
push 0x80f3d3
push 0xe8
call fcn.100bfb10
push method.std::codecvt_char__char__struct__Mbstatet_.virtual_16
push 0x80f4c7
push 0xe8
call fcn.100bfb10
push method.std::codecvt_char__char__struct__Mbstatet_.virtual_16
push 0x80f5bb
push 0xe8
call fcn.100bfb10
push method.std::codecvt_char__char__struct__Mbstatet_.virtual_16
push 0x80f6af
push 0xe8
call fcn.100bfb10
push 0x10023850
push 0x80f92d
push 0xe8
call fcn.100bfb10
push 0x10023b10
push 0x80f968
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10023b90
push 0x80f9a3
push 0xe8
call fcn.100bfb10
push 0x10023b10
push 0x80fa02
push 0xe8
call fcn.100bfb10
push 0x10024240
push 0x810f45
push 0xe8
call fcn.100bfb10
push 0x10024240
push 0x8117ee
push 0xe8
call fcn.100bfb10
push 0x100242a0
push 0x810fe7
push 0xe8
call fcn.100bfb10
push 0x100242a0
push 0x811890
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10024270
push 0x810f97
push 0xe8
call fcn.100bfb10
push 0x10024270
push 0x811840
push 0xe8
call fcn.100bfb10
push 0x100242c0
push 0x810a1a
push 0xe8
call fcn.100bfb10
push 0x10024360
push 0x810be5
push 0xe8
call fcn.100bfb10
push 0x100242c0
push 0x810d2c
push 0xe8
call fcn.100bfb10
push 0x100242c0
push 0x810dc3
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100242c0
push 0x810ef0
push 0xe8
call fcn.100bfb10
push 0x10024440
push 0x810a97
push 0xe8
call fcn.100bfb10
push 0x10024440
push 0x810c62
push 0xe8
call fcn.100bfb10
push 0x10024440
push 0x810e40
push 0xe8
call fcn.100bfb10
push 0x100242c0
push 0x8112a6
push 0xe8
call fcn.100bfb10
push 0x10024360
push 0x81147f
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100242c0
push 0x8115c9
push 0xe8
call fcn.100bfb10
push 0x100242c0
push 0x811660
push 0xe8
call fcn.100bfb10
push 0x100242c0
push 0x811790
push 0xe8
call fcn.100bfb10
push 0x10024440
push 0x811323
push 0xe8
call fcn.100bfb10
push 0x10024440
push 0x8114fc
push 0xe8
call fcn.100bfb10
push 0x10024440
push 0x8116dd
push 0xe8
call fcn.100bfb10
add esp, 0x48
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e34d0
mov esp, ebp
pop ebp
ret
push 0x100257b0
push 0x80f865
push 0xe8
call fcn.100bfb10
add esp, 0xc
push 0x10022920
push 0x895a48
push 0xe9
call fcn.100bfb10
push 0x100229c0
push 0x895abd
push 0xe9
call fcn.100bfb10
push 0x10022a60
push 0x895b32
push 0xe9
call fcn.100bfb10
push 0x10022b00
push 0x895ba7
push 0xe9
call fcn.100bfb10
push 0x100257a0
push 0x812120
push 0xe9
call fcn.100bfb10
push 0x100244f0
push 0x810f45
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100244f0
push 0x8117ee
push 0xe8
call fcn.100bfb10
push 0x100228d0
push 0x810fe7
push 0xe8
call fcn.100bfb10
push 0x100228d0
push 0x811890
push 0xe8
call fcn.100bfb10
push 0x10022880
push 0x810f97
push 0xe8
call fcn.100bfb10
push 0x10022880
push 0x811840
push 0xe8
call fcn.100bfb10
push 0x10024560
push 0x810a1a
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10024630
push 0x810be5
push 0xe8
call fcn.100bfb10
push 0x10024560
push 0x810d2c
push 0xe8
call fcn.100bfb10
push 0x10024560
push 0x810dc3
push 0xe8
call fcn.100bfb10
push 0x10024560
push 0x810ef0
push 0xe8
call fcn.100bfb10
push 0x10024560
push 0x8112a6
push 0xe8
call fcn.100bfb10
push 0x10024630
push 0x81147f
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10024560
push 0x8115c9
push 0xe8
call fcn.100bfb10
push 0x10024560
push 0x811660
push 0xe8
call fcn.100bfb10
push 0x10024560
push 0x811790
push 0xe8
call fcn.100bfb10
push 0x10024740
push 0x810a97
push 0xe8
call fcn.100bfb10
push 0x10024740
push 0x810c62
push 0xe8
call fcn.100bfb10
push 0x10024740
push 0x810e40
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10024740
push 0x811323
push 0xe8
call fcn.100bfb10
push 0x10024740
push 0x8114fc
push 0xe8
call fcn.100bfb10
push 0x10024740
push 0x8116dd
push 0xe8
call fcn.100bfb10
add esp, 0x24
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x80f845
call esi
mov eax, 0x80f845
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80f845
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x80f855
call esi
mov eax, 0x80f855
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80f855
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x80f84d
call esi
mov eax, 0x80f84d
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80f84d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x80ff28
call esi
mov eax, 0x80ff28
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80ff28
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x8100bb
call esi
mov eax, 0x8100bb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x8100bb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x810389
call esi
mov eax, 0x810389
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x810389
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x810659
call esi
mov eax, 0x810659
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x810659
call esi
push 0x10024810
push 0x80feef
push 0xe8
call fcn.100bfb10
push 0x10024810
push 0x80fe56
push 0xe8
call fcn.100bfb10
push 0x10024810
push 0x810083
push 0xe8
call fcn.100bfb10
push 0x10024810
push 0x810624
push 0xe8
call fcn.100bfb10
push 0x10024810
push 0x810354
push 0xe8
call fcn.100bfb10
push 0x10024c10
push 0x80ff56
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10024c10
push 0x8100e9
push 0xe8
call fcn.100bfb10
push 0x10024c10
push 0x810699
push 0xe8
call fcn.100bfb10
push 0x10024c10
push 0x8103b7
push 0xe8
call fcn.100bfb10
push 0x10024d00
push 0x80ffa7
push 0xe8
call fcn.100bfb10
push 0x10024d00
push 0x81013a
push 0xe8
call fcn.100bfb10
push 0x10024d00
push 0x810408
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10024d00
push 0x8106ea
push 0xe8
call fcn.100bfb10
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x80f258
call esi
mov eax, 0x80f258
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80f258
call esi
push 0x10024db0
push 0x80f92d
push 0xe8
call fcn.100bfb10
push 0x100250c0
push 0x80f968
push 0xe8
call fcn.100bfb10
push 0x100256d0
push 0x80f9a3
push 0xe8
call fcn.100bfb10
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x80fa02
jmp 0x1002973c
push 0x10027bd0
push 0x812120
push 0xe9
call fcn.100bfb10
push 0x100275d0
push 0x89580c
push 0xe8
call fcn.100bfb10
push 0x100275d0
push 0x89787c
push 0xe8
call fcn.100bfb10
push 0x100275d0
push 0x897a6c
push 0xe8
call fcn.100bfb10
push 0x100275d0
push 0x897c7c
push 0xe8
call fcn.100bfb10
add esp, 0x3c
cmp dword [0x1030ebf0], 0
jne 0x10029005
push 0x10027920
push 0x4d98db
push 0xe8
call fcn.100bfb10
mov edx, 0x1e0
mov ecx, 0x4d9749
call fcn.100bfa20
push 0x10027c10
push 0x40f2e9
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x4d714e
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x4d79e7
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x4d9756
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db4d5
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10027c10
push 0x5db1aa
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db22f
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db322
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db3a7
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db46d
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db4ad
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10027c10
push 0x5db534
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db5c4
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db628
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db68c
push 0xe8
call fcn.100bfb10
push 0x10027c10
push 0x5db6ed
push 0xe8
call fcn.100bfb10
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x894b55
call esi
lea eax, [ebp - 8]
mov dword [0x894b55], 0x1030bb30
push eax
push dword [ebp - 8]
push 4
push 0x894b55
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x894b61
call esi
lea eax, [ebp - 8]
mov dword [0x894b61], 0x1030bb30
push eax
push dword [ebp - 8]
push 4
push 0x894b61
call esi
push 0x10027590
push 0x895600
push 0xe9
call fcn.100bfb10
push 0x10027630
push 0x895a73
push 0xe8
call fcn.100bfb10
push 0x10027710
push 0x895ae8
push 0xe8
call fcn.100bfb10
push 0x100277c0
push 0x895b5d
push 0xe8
call fcn.100bfb10
push 0x10027870
push 0x895bd2
push 0xe8
call fcn.100bfb10
push 0x10027490
push 0x80ff28
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100274d0
push 0x8100bb
push 0xe8
call fcn.100bfb10
push 0x10027510
push 0x810389
push 0xe8
call fcn.100bfb10
push 0x10027550
push 0x810659
push 0xe8
call fcn.100bfb10
push 0x100273a0
push 0x810f45
push 0xe8
call fcn.100bfb10
push 0x100273a0
push 0x8117ee
push 0xe8
call fcn.100bfb10
push 0x10027310
push 0x810f97
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10027310
push 0x811840
push 0xe8
call fcn.100bfb10
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x810a97
call esi
mov eax, 0x810a97
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x810a97
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x810c62
call esi
mov eax, 0x810c62
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x810c62
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x810e40
call esi
mov eax, 0x810e40
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x810e40
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x811323
call esi
mov eax, 0x811323
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x811323
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x8114fc
call esi
mov eax, 0x8114fc
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x8114fc
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x8116dd
call esi
mov eax, 0x8116dd
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x8116dd
call esi
push 0x10027350
push 0x814e63
push 0xe8
call fcn.100bfb10
push 0x100272b0
push 0x8129a3
push 0xe8
call fcn.100bfb10
push 0x100272b0
push 0x8129fc
push 0xe8
call fcn.100bfb10
push 0x100272b0
push 0x812a55
push 0xe8
call fcn.100bfb10
push 0x100272b0
push 0x812b16
push 0xe8
call fcn.100bfb10
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x812a8a
call esi
lea eax, [ebp - 8]
mov dword [0x812a8a], 0x1030bb2c
push eax
push dword [ebp - 8]
push 4
push 0x812a8a
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81295b
call esi
lea eax, [ebp - 8]
mov dword [0x81295b], 0x1030bb28
push eax
push dword [ebp - 8]
push 4
push 0x81295b
call esi
push 0x10025ef0
push 0x80f0ef
push 0xe8
call fcn.100bfb10
push 0x10026180
push 0x80f9a3
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x80fe56
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x80feef
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x810083
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x810354
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10026950
push 0x810624
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x8112a6
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x81147f
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x8115c9
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x811660
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x811790
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10026950
push 0x810a1a
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x810be5
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x810d2c
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x810dc3
push 0xe8
call fcn.100bfb10
push 0x10026950
push 0x810ef0
push 0xe8
call fcn.100bfb10
push 0x10026e30
push 0x814d4d
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x10026e30
push 0x814dc1
push 0xe8
call fcn.100bfb10
push 0x10027280
push 0x81276f
push 0xe8
call fcn.100bfb10
push 0x10027280
push 0x8127c8
push 0xe8
call fcn.100bfb10
push 0x10027280
push 0x81282d
push 0xe8
call fcn.100bfb10
push 0x10027280
push 0x812899
push 0xe8
call fcn.100bfb10
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81271e
call esi
lea eax, [ebp - 8]
mov dword [0x81271e], 0x1030bb24
push eax
push dword [ebp - 8]
push 4
push 0x81271e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x812952
call esi
lea eax, [ebp - 8]
mov dword [0x812952], 0x1030bb24
push eax
push dword [ebp - 8]
push 4
push 0x812952
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x812a81
call esi
lea eax, [ebp - 8]
mov dword [0x812a81], 0x1030bb24
push eax
push dword [ebp - 8]
push 4
push 0x812a81
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x812d4a
call esi
lea eax, [ebp - 8]
mov dword [0x812d4a], 0x1030bb20
push eax
push dword [ebp - 8]
push 4
push 0x812d4a
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8139ab
call esi
lea eax, [ebp - 8]
mov dword [0x8139ab], 0x1030bb20
push eax
push dword [ebp - 8]
push 4
push 0x8139ab
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x4d1
push 0x80f270
call esi
push 0x4d1
push 0x90
push 0x80f270
call fcn.10131ef0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x4d1
push 0x80f270
call esi
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x80f92d
push 0xe8
call fcn.100bfb10
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x80f968
push 0xe8
call fcn.100bfb10
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x80fa02
push 0xe8
call fcn.100bfb10
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x811b61
push 0xe8
call fcn.100bfb10
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x8119e6
push 0xe8
call fcn.100bfb10
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x811b1a
push 0xe8
call fcn.100bfb10
add esp, 0x48
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x811b61
push 0xe8
call fcn.100bfb10
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x813784
call esi
lea eax, [ebp - 8]
mov dword [0x813784], 0x1030bb1c
push eax
push dword [ebp - 8]
push 4
push 0x813784
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8138ea
call esi
lea eax, [ebp - 8]
mov dword [0x8138ea], 0x1030bb1c
push eax
push dword [ebp - 8]
push 4
push 0x8138ea
call esi
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x80ff56
push 0xe8
call fcn.100bfb10
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x8100e9
push 0xe8
call fcn.100bfb10
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x8103b7
push 0xe8
call fcn.100bfb10
push method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_4
push 0x810699
push 0xe8
call fcn.100bfb10
add esp, 0x30
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.100e34d0
mov esp, ebp
pop ebp
ret