Function at 0x1003e234
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x10155018]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x1003ad10
push 0x7dc9e6
push 0xe8
call fcn.10087110
push 0x1003ad10
push 0x7dca78
push 0xe8
call fcn.10087110
push 0x1003ad10
push 0x7dcb05
push 0xe8
call fcn.10087110
push 0x1003ad10
push 0x7dcb96
push 0xe8
call fcn.10087110
push 0x1003ad10
push 0x7dcc16
push 0xe8
call fcn.10087110
push 0x1003ad10
push 0x7dcca8
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003ad10
push 0x7dcd35
push 0xe8
call fcn.10087110
push 0x1003ad10
push 0x7dcdb4
push 0xe8
call fcn.10087110
push 0x1003ad10
push 0x7dce51
push 0xe8
call fcn.10087110
push 0x1003ad10
push 0x7dcee7
push 0xe8
call fcn.10087110
push 0x1003ace0
push 0x895600
push 0xe9
call fcn.10087110
push 0x1003ac80
push 0x814f0d
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003ac30
push 0x814e63
push 0xe8
call fcn.10087110
push 0x1003ab90
push 0x814dc1
push 0xe8
call fcn.10087110
push 0x1003ab90
push 0x814d4d
push 0xe8
call fcn.10087110
push 0x100396e0
push 0x8126c0
push 0xe9
call fcn.10087110
push 0x1003a6a0
push 0x813970
push 0xe9
call fcn.10087110
push 0x1003a130
push 0x80f833
push 0xe8
call fcn.10087110
mov eax, dword [0x10229dfc]
add esp, 0x48
cmp eax, 4
ja case.default.0x1003de81
push esi
push edi
jmp dword [eax*4 + 0x10040714]
push 0x1003c5d0
push 0x7dfa60
push 0xe9
call fcn.10087110
push 0x10039320
push 0x895a48
push 0xe9
call fcn.10087110
push 0x100393c0
push 0x895abd
push 0xe9
call fcn.10087110
push 0x10039460
push 0x895b32
push 0xe9
call fcn.10087110
push 0x10039500
push 0x895ba7
push 0xe9
call fcn.10087110
push 0x10039200
push 0x80ff28
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x10039200
push 0x8100bb
push 0xe8
call fcn.10087110
push 0x10039200
push 0x810389
push 0xe8
call fcn.10087110
push 0x10039200
push 0x810659
push 0xe8
call fcn.10087110
push 0x10039200
push 0x810f45
push 0xe8
call fcn.10087110
push 0x10039200
push 0x8117ee
push 0xe8
call fcn.10087110
push 0x10038ff0
push 0x80ffa7
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x10038ff0
push 0x81013a
push 0xe8
call fcn.10087110
push 0x10038ff0
push 0x810408
push 0xe8
call fcn.10087110
push 0x10038ff0
push 0x8106ea
push 0xe8
call fcn.10087110
push 0x10038fb0
push 0x80ff56
push 0xe8
call fcn.10087110
push 0x10038fb0
push 0x8100e9
push 0xe8
call fcn.10087110
push 0x10038fb0
push 0x8103b7
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x10038fb0
push 0x810699
push 0xe8
call fcn.10087110
push 0x10038e70
push 0x810a1a
push 0xe8
call fcn.10087110
push 0x10038e70
push 0x810be5
push 0xe8
call fcn.10087110
push 0x10038e70
push 0x810d2c
push 0xe8
call fcn.10087110
push 0x10038e70
push 0x810dc3
push 0xe8
call fcn.10087110
push 0x10038e70
push 0x810ef0
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x10038e70
push 0x8112a6
push 0xe8
call fcn.10087110
push 0x10038e70
push 0x81147f
push 0xe8
call fcn.10087110
push 0x10038e70
push 0x8115c9
push 0xe8
call fcn.10087110
push 0x10038e70
push 0x811660
push 0xe8
call fcn.10087110
push 0x10038e70
push 0x811790
push 0xe8
call fcn.10087110
push 0x10038f30
push 0x810a97
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x10038f30
push 0x810c62
push 0xe8
call fcn.10087110
push 0x10038f30
push 0x810e40
push 0xe8
call fcn.10087110
push 0x10038f30
push 0x811323
push 0xe8
call fcn.10087110
push 0x10038f30
push 0x8114fc
push 0xe8
call fcn.10087110
push 0x10038f30
push 0x8116dd
push 0xe8
call fcn.10087110
push 0x10039290
push 0x8119e6
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x10038d00
push 0x80f92d
push 0xe8
call fcn.10087110
push 0x10038d70
push 0x80f968
push 0xe8
call fcn.10087110
push 0x10038d00
push 0x80f9a3
push 0xe8
call fcn.10087110
push 0x10038d70
push 0x80fa02
push 0xe8
call fcn.10087110
push 0x10038c50
push 0x80feef
push 0xe8
call fcn.10087110
push 0x10038c50
push 0x80fe56
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x10038c50
push 0x810083
push 0xe8
call fcn.10087110
push 0x10038c50
push 0x810354
push 0xe8
call fcn.10087110
push 0x10038c50
push 0x810624
push 0xe8
call fcn.10087110
add esp, 0x24
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a3a28
mov esp, ebp
pop ebp
ret
push 0x1003c7c0
push 0x7dfa60
push 0xe9
call fcn.10087110
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0xc
push eax
push 0x40
push 5
push 0x7db7b0
call esi
mov eax, 0x7db7b0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db7b0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db812
call esi
mov eax, 0x7db812
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db812
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db874
call esi
mov eax, 0x7db874
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db874
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db8e0
call esi
mov eax, 0x7db8e0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db8e0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db959
call esi
mov eax, 0x7db959
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db959
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db9a2
call esi
mov eax, 0x7db9a2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db9a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba20
call esi
mov eax, 0x7dba20
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba20
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba69
call esi
mov eax, 0x7dba69
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba69
call esi
push 0x1003c1b0
push 0x7db308
push 0xe9
call fcn.10087110
push 0x1003c1d0
push 0x7db5d0
push 0xe8
call fcn.10087110
push 0x1003c440
push 0x895a48
push 0xe9
call fcn.10087110
push 0x1003c4c0
push 0x895abd
push 0xe9
call fcn.10087110
push 0x1003c540
push 0x895b32
push 0xe9
call fcn.10087110
push 0x1003c5c0
push 0x895b8d
push 0xe9
call fcn.10087110
add esp, 0x48
push 0x1003c060
push 0x80ff28
push 0xe8
call fcn.10087110
push 0x1003c0b0
push 0x8100bb
push 0xe8
call fcn.10087110
push 0x1003c100
push 0x810389
push 0xe8
call fcn.10087110
push 0x1003c150
push 0x810659
push 0xe8
call fcn.10087110
push 0x1003bad0
push 0x80feef
push 0xe8
call fcn.10087110
push 0x1003bad0
push 0x80fe56
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003bad0
push 0x810083
push 0xe8
call fcn.10087110
push 0x1003bad0
push 0x810354
push 0xe8
call fcn.10087110
push 0x1003bad0
push 0x810624
push 0xe8
call fcn.10087110
push 0x1003bf10
push 0x80ff56
push 0xe8
call fcn.10087110
push 0x1003bf10
push 0x8100e9
push 0xe8
call fcn.10087110
push 0x1003bf10
push 0x8103b7
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003bf10
push 0x810699
push 0xe8
call fcn.10087110
push 0x1003bfd0
push 0x80ffa7
push 0xe8
call fcn.10087110
push 0x1003bfd0
push 0x81013a
push 0xe8
call fcn.10087110
push 0x1003bfd0
push 0x810408
push 0xe8
call fcn.10087110
push 0x1003bfd0
push 0x8106ea
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x80f2e8
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003b3e0
push 0x80f3d3
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x80f4c7
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x80f5bb
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x80f6af
push 0xe8
call fcn.10087110
push 0x1003b3f0
push 0x80f92d
push 0xe8
call fcn.10087110
push 0x10038d00
push 0x80f968
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003b5b0
push 0x80f9a3
push 0xe8
call fcn.10087110
push 0x10038d00
push 0x80fa02
push 0xe8
call fcn.10087110
push 0x1003b3b0
push 0x810f45
push 0xe8
call fcn.10087110
push 0x1003b3b0
push 0x8117ee
push 0xe8
call fcn.10087110
push 0x1003b390
push 0x810fe7
push 0xe8
call fcn.10087110
push 0x1003b390
push 0x811890
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003b360
push 0x810f97
push 0xe8
call fcn.10087110
push 0x1003b360
push 0x811840
push 0xe8
call fcn.10087110
push 0x1003b130
push 0x810a1a
push 0xe8
call fcn.10087110
push 0x1003b1d0
push 0x810be5
push 0xe8
call fcn.10087110
push 0x1003b130
push 0x810d2c
push 0xe8
call fcn.10087110
push 0x1003b130
push 0x810dc3
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003b130
push 0x810ef0
push 0xe8
call fcn.10087110
push 0x1003b2b0
push 0x810a97
push 0xe8
call fcn.10087110
push 0x1003b2b0
push 0x810c62
push 0xe8
call fcn.10087110
push 0x1003b2b0
push 0x810e40
push 0xe8
call fcn.10087110
push 0x1003b130
push 0x8112a6
push 0xe8
call fcn.10087110
push 0x1003b1d0
push 0x81147f
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003b130
push 0x8115c9
push 0xe8
call fcn.10087110
push 0x1003b130
push 0x811660
push 0xe8
call fcn.10087110
push 0x1003b130
push 0x811790
push 0xe8
call fcn.10087110
push 0x1003b2b0
push 0x811323
push 0xe8
call fcn.10087110
push 0x1003b2b0
push 0x8114fc
push 0xe8
call fcn.10087110
push 0x1003b2b0
push 0x8116dd
push 0xe8
call fcn.10087110
add esp, 0x48
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0xd46c8c
call esi
mov eax, 0xd46c8c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0xd46c8c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0xd46c84
call esi
mov eax, 0xd46c84
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0xd46c84
call esi
push 0x856fd2
push 0x856faa
push 0xe9
call fcn.10087110
push 0x7d3725
push 0x7d371e
push 0xe9
call fcn.10087110
push 0x836a23
push 0x8369fa
push 0xe9
call fcn.10087110
push 0x7d36bf
push 0x7d36b8
push 0xe9
call fcn.10087110
push 0x7d3fa3
push 0x7d3f9c
push 0xe9
call fcn.10087110
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 0x198
push 0x7a8330
call esi
push 0x198
push 0x90
push 0x7a8330
call fcn.100f1950
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x198
push 0x7a8330
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3d57
call esi
lea eax, [ebp - 8]
mov byte [0x7d3d57], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3d57
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
mov byte [0x7d37a2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
mov byte [0x7d37a2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3af2
call esi
lea eax, [ebp - 8]
mov byte [0x7d3af2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3af2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x834e13
call esi
lea eax, [ebp - 8]
mov byte [0x834e13], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x834e13
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3c6c
call esi
lea eax, [ebp - 8]
mov byte [0x7d3c6c], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3c6c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d39a0
call esi
lea eax, [ebp - 8]
mov byte [0x7d39a0], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d39a0
call esi
push 0x1003db70
push 0x77ebb0
push 0xe8
call fcn.10087110
push 0x1003db80
push 0x77ec59
push 0xe8
call fcn.10087110
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x87500f
call esi
mov eax, 0x87500f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x87500f
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x8743ff
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1003eab8
lea eax, [ebp - 0xc]
mov byte [0x8743ff], 7
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x8743ff
call esi
test eax, eax
jne 0x1003eaba
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x874d5a
call esi
test eax, eax
je 0x1003eaf6
lea eax, [ebp - 0xc]
mov byte [0x874d5a], 7
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x874d5a
call esi
test eax, eax
jne 0x1003eaf8
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x877edf
call esi
test eax, eax
je 0x1003eb34
lea eax, [ebp - 0xc]
mov byte [0x877edf], 6
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x877edf
call esi
test eax, eax
jne 0x1003eb36
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x878b5f
call esi
mov eax, 0x878b5f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x878b5f
call esi
push 0x7e4d16
push 0x7e4ca4
push 0xe9
call fcn.10087110
add esp, 0xc
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7e4cba
call esi
test eax, eax
je 0x1003ebb7
lea eax, [ebp - 0xc]
mov byte [0x7e4cba], 0
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x7e4cba
call esi
test eax, eax
jne 0x1003ebb9
call edi
push 0x100395a0
push 0x77f7ee
push 0xe8
call fcn.10087110
add esp, 0xc
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77e936
call esi
test eax, eax
je 0x1003ec0f
lea eax, [ebp - 0xc]
mov dword [0x77e936], 0xc85a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x77e936
call esi
test eax, eax
jne 0x1003ec11
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e94b
call esi
test eax, eax
je 0x1003ec4d
lea eax, [ebp - 0xc]
mov byte [0x77e94b], 0x18
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e94b
call esi
test eax, eax
jne 0x1003ec4f
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e94d
call esi
test eax, eax
je 0x1003ec8b
lea eax, [ebp - 0xc]
mov byte [0x77e94d], 0x18
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e94d
call esi
test eax, eax
jne 0x1003ec8d
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e959
call esi
test eax, eax
je 0x1003ecc9
lea eax, [ebp - 0xc]
mov byte [0x77e959], 0x75
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e959
call esi
test eax, eax
jne 0x1003eccb
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e965
call esi
test eax, eax
je 0x1003ed07
lea eax, [ebp - 0xc]
mov byte [0x77e965], 0x82
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e965
call esi
test eax, eax
jne 0x1003ed09
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x77e97f
call esi
test eax, eax
je 0x1003ed48
lea eax, [ebp - 0xc]
mov dword [0x77e97f], 0xc85a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x77e97f
call esi
test eax, eax
jne 0x1003ed4a
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e997
call esi
test eax, eax
je 0x1003ed86
lea eax, [ebp - 0xc]
mov byte [0x77e997], 0x18
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e997
call esi
test eax, eax
jne 0x1003ed88
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e999
call esi
test eax, eax
je 0x1003edc4
lea eax, [ebp - 0xc]
mov byte [0x77e999], 0x18
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e999
call esi
test eax, eax
jne 0x1003edc6
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e9a5
call esi
test eax, eax
je 0x1003ee02
lea eax, [ebp - 0xc]
mov byte [0x77e9a5], 0xac
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e9a5
call esi
test eax, eax
jne 0x1003ee04
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e9b5
call esi
test eax, eax
je 0x1003ee40
lea eax, [ebp - 0xc]
mov byte [0x77e9b5], 0x82
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e9b5
call esi
test eax, eax
jne 0x1003ee42
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x77e9d2
call esi
test eax, eax
je 0x1003ee81
lea eax, [ebp - 0xc]
mov dword [0x77e9d2], 0xc85a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x77e9d2
call esi
test eax, eax
jne 0x1003ee83
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e9ea
call esi
test eax, eax
je 0x1003eebf
lea eax, [ebp - 0xc]
mov byte [0x77e9ea], 0x18
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e9ea
call esi
test eax, eax
jne 0x1003eec1
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e9ec
call esi
test eax, eax
je 0x1003eefd
lea eax, [ebp - 0xc]
mov byte [0x77e9ec], 0x18
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e9ec
call esi
test eax, eax
jne 0x1003eeff
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77e9f7
call esi
test eax, eax
je 0x1003ef3b
lea eax, [ebp - 0xc]
mov byte [0x77e9f7], 0xed
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77e9f7
call esi
test eax, eax
jne 0x1003ef3d
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea07
call esi
test eax, eax
je 0x1003ef79
lea eax, [ebp - 0xc]
mov byte [0x77ea07], 0x82
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea07
call esi
test eax, eax
jne 0x1003ef7b
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x77ea24
call esi
test eax, eax
je 0x1003efba
lea eax, [ebp - 0xc]
mov dword [0x77ea24], 0xc85a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x77ea24
call esi
test eax, eax
jne 0x1003efbc
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea3c
call esi
test eax, eax
je 0x1003eff8
lea eax, [ebp - 0xc]
mov byte [0x77ea3c], 0x18
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea3c
call esi
test eax, eax
jne 0x1003effa
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea3e
call esi
test eax, eax
je 0x1003f036
lea eax, [ebp - 0xc]
mov byte [0x77ea3e], 0x18
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea3e
call esi
test eax, eax
jne 0x1003f038
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea4a
call esi
test eax, eax
je 0x1003f074
lea eax, [ebp - 0xc]
mov byte [0x77ea4a], 0x24
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea4a
call esi
test eax, eax
jne 0x1003f076
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea59
call esi
test eax, eax
je 0x1003f0b2
lea eax, [ebp - 0xc]
mov byte [0x77ea59], 0x82
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea59
call esi
test eax, eax
jne 0x1003f0b4
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x77ea76
call esi
test eax, eax
je 0x1003f0f3
lea eax, [ebp - 0xc]
mov dword [0x77ea76], 0xc85a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x77ea76
call esi
test eax, eax
jne 0x1003f0f5
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea8e
call esi
test eax, eax
je 0x1003f131
lea eax, [ebp - 0xc]
mov byte [0x77ea8e], 0x18
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea8e
call esi
test eax, eax
jne 0x1003f133
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea90
call esi
test eax, eax
je 0x1003f16f
lea eax, [ebp - 0xc]
mov byte [0x77ea90], 0x18
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea90
call esi
test eax, eax
jne 0x1003f171
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77ea9c
call esi
test eax, eax
je 0x1003f1ad
lea eax, [ebp - 0xc]
mov byte [0x77ea9c], 0x5b
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77ea9c
call esi
test eax, eax
jne 0x1003f1af
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x77eaac
call esi
test eax, eax
je 0x1003f1eb
lea eax, [ebp - 0xc]
mov byte [0x77eaac], 0x82
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x77eaac
call esi
test eax, eax
jne 0x1003f1ed
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x7801da
call esi
test eax, eax
je 0x1003f229
lea eax, [ebp - 0xc]
mov byte [0x7801da], 4
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x7801da
call esi
test eax, eax
jne 0x1003f22b
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x7801de
call esi
test eax, eax
je 0x1003f267
lea eax, [ebp - 0xc]
mov byte [0x7801de], 0x2a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x7801de
call esi
test eax, eax
jne 0x1003f269
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x780218
call esi
test eax, eax
je 0x1003f2a5
lea eax, [ebp - 0xc]
mov byte [0x780218], 2
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x780218
call esi
test eax, eax
jne 0x1003f2a7
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x78023c
call esi
test eax, eax
je 0x1003f2e3
lea eax, [ebp - 0xc]
mov byte [0x78023c], 0x38
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x78023c
call esi
test eax, eax
jne 0x1003f2e5
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x78190e
call esi
test eax, eax
je 0x1003f321
lea eax, [ebp - 0xc]
mov byte [0x78190e], 4
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x78190e
call esi
test eax, eax
jne 0x1003f323
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x781912
call esi
test eax, eax
je 0x1003f35f
lea eax, [ebp - 0xc]
mov byte [0x781912], 0x2a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x781912
call esi
test eax, eax
jne 0x1003f361
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x78194f
call esi
test eax, eax
je 0x1003f39d
lea eax, [ebp - 0xc]
mov byte [0x78194f], 2
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x78194f
call esi
test eax, eax
jne 0x1003f39f
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x781975
call esi
test eax, eax
je 0x1003f3db
lea eax, [ebp - 0xc]
mov byte [0x781975], 0x38
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x781975
call esi
test eax, eax
jne 0x1003f3dd
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x7830f0
call esi
test eax, eax
je 0x1003f419
lea eax, [ebp - 0xc]
mov byte [0x7830f0], 4
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x7830f0
call esi
test eax, eax
jne 0x1003f41b
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x7830f4
call esi
test eax, eax
je 0x1003f457
lea eax, [ebp - 0xc]
mov byte [0x7830f4], 0x2a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x7830f4
call esi
test eax, eax
jne 0x1003f459
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x783131
call esi
test eax, eax
je 0x1003f495
lea eax, [ebp - 0xc]
mov byte [0x783131], 2
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x783131
call esi
test eax, eax
jne 0x1003f497
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x783157
call esi
test eax, eax
je 0x1003f4d3
lea eax, [ebp - 0xc]
mov byte [0x783157], 0x38
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x783157
call esi
test eax, eax
jne 0x1003f4d5
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d16
call esi
test eax, eax
je 0x1003f511
lea eax, [ebp - 0xc]
mov byte [0x782d16], 4
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d16
call esi
test eax, eax
jne 0x1003f513
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d1a
call esi
test eax, eax
je 0x1003f54f
lea eax, [ebp - 0xc]
mov byte [0x782d1a], 0x2a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d1a
call esi
test eax, eax
jne 0x1003f551
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d57
call esi
test eax, eax
je 0x1003f58d
lea eax, [ebp - 0xc]
mov byte [0x782d57], 2
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d57
call esi
test eax, eax
jne 0x1003f58f
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d7e
call esi
test eax, eax
je 0x1003f5cb
lea eax, [ebp - 0xc]
mov byte [0x782d7e], 0x38
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d7e
call esi
test eax, eax
jne 0x1003f5cd
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d16
call esi
test eax, eax
je 0x1003f609
lea eax, [ebp - 0xc]
mov byte [0x782d16], 4
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d16
call esi
test eax, eax
jne 0x1003f60b
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d1a
call esi
test eax, eax
je 0x1003f647
lea eax, [ebp - 0xc]
mov byte [0x782d1a], 0x2a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d1a
call esi
test eax, eax
jne 0x1003f649
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d57
call esi
test eax, eax
je 0x1003f685
lea eax, [ebp - 0xc]
mov byte [0x782d57], 2
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d57
call esi
test eax, eax
jne 0x1003f687
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x782d7e
call esi
test eax, eax
je 0x1003f6c3
lea eax, [ebp - 0xc]
mov byte [0x782d7e], 0x38
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x782d7e
call esi
test eax, eax
jne 0x1003f6c5
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x784b6e
call esi
test eax, eax
je 0x1003f701
lea eax, [ebp - 0xc]
mov byte [0x784b6e], 4
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x784b6e
call esi
test eax, eax
jne 0x1003f703
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x784b72
call esi
test eax, eax
je 0x1003f73f
lea eax, [ebp - 0xc]
mov byte [0x784b72], 0x2a
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x784b72
call esi
test eax, eax
jne 0x1003f741
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x784baf
call esi
test eax, eax
je 0x1003f77d
lea eax, [ebp - 0xc]
mov byte [0x784baf], 2
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x784baf
call esi
test eax, eax
jne 0x1003f77f
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x784bd6
call esi
test eax, eax
je 0x1003f7bb
lea eax, [ebp - 0xc]
mov byte [0x784bd6], 0x38
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x784bd6
call esi
test eax, eax
jne 0x1003f7bd
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x52
push 0x8684f0
call esi
push 0x52
push 0x90
push 0x8684f0
call fcn.100f1950
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x52
push 0x8684f0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x25
push 0x7c5a68
call esi
mov eax, 0x7c5a68
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
mov byte [eax + 0x24], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x25
push 0x7c5a68
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x159
push 0x7c4430
call esi
push 0x159
push 0x90
push 0x7c4430
call fcn.100f1950
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x159
push 0x7c4430
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7c5ad2
call esi
mov eax, 0x7c5ad2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7c5ad2
call esi
push 0x100396a0
push 0x8350e9
push 0xe8
call fcn.10087110
push 0x10039690
push 0x77f803
push 0xe8
call fcn.10087110
add esp, 0x18
jmp 0x10040165
push 0x1003c7c0
push 0x7dfa60
push 0xe9
call fcn.10087110
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0xc
push eax
push 0x40
push 5
push 0x7db7b0
call esi
mov eax, 0x7db7b0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db7b0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db812
call esi
mov eax, 0x7db812
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db812
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db874
call esi
mov eax, 0x7db874
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db874
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db8e0
call esi
mov eax, 0x7db8e0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db8e0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db959
call esi
mov eax, 0x7db959
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db959
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db9a2
call esi
mov eax, 0x7db9a2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db9a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba20
call esi
mov eax, 0x7dba20
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba20
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba69
call esi
mov eax, 0x7dba69
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba69
call esi
push 0x1003c1b0
push 0x7db308
push 0xe9
call fcn.10087110
push 0x1003c1d0
push 0x7db5d0
push 0xe8
call fcn.10087110
push 0x100396a0
push 0x8350e9
push 0xe8
call fcn.10087110
push 0x1003d9e0
push 0x895a48
push 0xe9
call fcn.10087110
push 0x1003da60
push 0x895abd
push 0xe9
call fcn.10087110
push 0x1003dae0
push 0x895b32
push 0xe9
call fcn.10087110
add esp, 0x48
push 0x1003db60
push 0x895ba7
push 0xe9
call fcn.10087110
push 0x1003b3e0
push 0x80f2e8
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x80f3d3
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x80f4c7
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x80f5bb
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x80f6af
push 0xe8
call fcn.10087110
add esp, 0x48
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x80f258
call esi
mov eax, 0x80f258
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80f258
call esi
push 0x1003d0b0
push 0x80f92d
push 0xe8
call fcn.10087110
push fcn.10033610
push 0x80f968
push 0xe8
call fcn.10087110
push 0x1003d260
push 0x80f9a3
push 0xe8
call fcn.10087110
push fcn.10033610
push 0x80fa02
push 0xe8
call fcn.10087110
push 0x1003b100
push 0x810f45
push 0xe8
call fcn.10087110
push 0x1003b100
push 0x8117ee
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003aed0
push 0x8112a6
push 0xe8
call fcn.10087110
push 0x1003af70
push 0x81147f
push 0xe8
call fcn.10087110
push 0x1003aed0
push 0x8115c9
push 0xe8
call fcn.10087110
push 0x1003aed0
push 0x811660
push 0xe8
call fcn.10087110
push 0x1003aed0
push 0x811790
push 0xe8
call fcn.10087110
push 0x1003b050
push 0x811323
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003b050
push 0x8114fc
push 0xe8
call fcn.10087110
push 0x1003b050
push 0x8116dd
push 0xe8
call fcn.10087110
push 0x1003cdf0
push 0x80feef
push 0xe8
call fcn.10087110
push 0x1003cdf0
push 0x80fe56
push 0xe8
call fcn.10087110
push 0x1003cdf0
push 0x810083
push 0xe8
call fcn.10087110
push 0x1003cdf0
push 0x810624
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003cdf0
push 0x810354
push 0xe8
call fcn.10087110
push 0x1003dbf0
push 0x80ff28
push 0xe8
call fcn.10087110
push 0x1003dc40
push 0x8100bb
push 0xe8
call fcn.10087110
push 0x1003dc90
push 0x810389
push 0xe8
call fcn.10087110
push 0x1003db90
push 0x810659
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x80ffa7
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003b3e0
push 0x81013a
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x810408
push 0xe8
call fcn.10087110
push 0x1003b3e0
push 0x8106ea
push 0xe8
call fcn.10087110
push 0x836a23
push 0x8369fa
push 0xe9
call fcn.10087110
push 0x7d36bf
push 0x7d36b8
push 0xe9
call fcn.10087110
push 0x7d3fa3
push 0x7d3f9c
push 0xe9
call fcn.10087110
add esp, 0x48
push 0x856fd2
push 0x856faa
push 0xe9
call fcn.10087110
push 0x7d3725
push 0x7d371e
push 0xe9
call fcn.10087110
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 0x52
push 0x8684f0
call esi
push 0x52
push 0x90
push 0x8684f0
call fcn.100f1950
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x52
push 0x8684f0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x25
push 0x7c5a68
call esi
mov eax, 0x7c5a68
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
mov byte [eax + 0x24], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x25
push 0x7c5a68
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x159
push 0x7c4430
call esi
push 0x159
push 0x90
push 0x7c4430
call fcn.100f1950
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x159
push 0x7c4430
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7c5ad2
call esi
mov eax, 0x7c5ad2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7c5ad2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x87500f
call esi
mov eax, 0x87500f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x87500f
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x8743ff
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1003ffa6
lea eax, [ebp - 0xc]
mov byte [0x8743ff], 7
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x8743ff
call esi
test eax, eax
jne 0x1003ffa8
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x874d5a
call esi
test eax, eax
je 0x1003ffe4
lea eax, [ebp - 0xc]
mov byte [0x874d5a], 7
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x874d5a
call esi
test eax, eax
jne 0x1003ffe6
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x877edf
call esi
test eax, eax
je 0x10040022
lea eax, [ebp - 0xc]
mov byte [0x877edf], 6
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x877edf
call esi
test eax, eax
jne 0x10040024
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x878b5f
call esi
mov eax, 0x878b5f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x878b5f
call esi
push 0x7e4d16
push 0x7e4ca4
push 0xe9
call fcn.10087110
add esp, 0xc
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7e4cba
call esi
test eax, eax
je 0x100400a5
lea eax, [ebp - 0xc]
mov byte [0x7e4cba], 0
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x7e4cba
call esi
test eax, eax
jne 0x100400a7
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3d57
call esi
lea eax, [ebp - 8]
mov byte [0x7d3d57], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3d57
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
mov byte [0x7d37a2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
mov byte [0x7d37a2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d37a2
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3c6c
call esi
lea eax, [ebp - 8]
mov byte [0x7d3c6c], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3c6c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d39a0
call esi
lea eax, [ebp - 8]
mov byte [0x7d39a0], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d39a0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x198
push 0x7a8330
call esi
push 0x198
push 0x90
push 0x7a8330
call fcn.100f1950
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x198
push 0x7a8330
call esi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a3a28
mov esp, ebp
pop ebp
ret
push 0x1003d9e0
push 0x895a48
push 0xe9
call fcn.10087110
push 0x1003da60
push 0x895abd
push 0xe9
call fcn.10087110
push 0x1003dae0
push 0x895b32
push 0xe9
call fcn.10087110
push 0x1003db60
push 0x895ba7
push 0xe9
call fcn.10087110
push 0x1003c5d0
push 0x7dfa60
push 0xe9
call fcn.10087110
push 0x1003cd70
push 0x810f45
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003cd70
push 0x8117ee
push 0xe8
call fcn.10087110
push 0x1003cd00
push 0x810fe7
push 0xe8
call fcn.10087110
push 0x1003cd00
push 0x811890
push 0xe8
call fcn.10087110
push 0x1003cc90
push 0x810f97
push 0xe8
call fcn.10087110
push 0x1003cc90
push 0x811840
push 0xe8
call fcn.10087110
push 0x1003ca00
push 0x810a1a
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003cac0
push 0x810be5
push 0xe8
call fcn.10087110
push 0x1003ca00
push 0x810d2c
push 0xe8
call fcn.10087110
push 0x1003ca00
push 0x810dc3
push 0xe8
call fcn.10087110
push 0x1003ca00
push 0x810ef0
push 0xe8
call fcn.10087110
push 0x1003ca00
push 0x8112a6
push 0xe8
call fcn.10087110
push 0x1003cac0
push 0x81147f
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003ca00
push 0x8115c9
push 0xe8
call fcn.10087110
push 0x1003ca00
push 0x811660
push 0xe8
call fcn.10087110
push 0x1003ca00
push 0x811790
push 0xe8
call fcn.10087110
push 0x1003cbc0
push 0x810a97
push 0xe8
call fcn.10087110
push 0x1003cbc0
push 0x810c62
push 0xe8
call fcn.10087110
push 0x1003cbc0
push 0x810e40
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003cbc0
push 0x811323
push 0xe8
call fcn.10087110
push 0x1003cbc0
push 0x8114fc
push 0xe8
call fcn.10087110
push 0x1003cbc0
push 0x8116dd
push 0xe8
call fcn.10087110
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0x24
push eax
push 0x40
push 5
push 0x80f845
call esi
mov eax, 0x80f845
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80f845
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x80f855
call esi
mov eax, 0x80f855
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80f855
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x80f84d
call esi
mov eax, 0x80f84d
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80f84d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x80ff28
call esi
mov eax, 0x80ff28
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80ff28
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x8100bb
call esi
mov eax, 0x8100bb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x8100bb
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x810389
call esi
mov eax, 0x810389
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x810389
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x810659
call esi
mov eax, 0x810659
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x810659
call esi
push 0x1003c060
push 0x80ff28
push 0xe8
call fcn.10087110
push 0x1003c0b0
push 0x8100bb
push 0xe8
call fcn.10087110
push 0x1003c100
push 0x810389
push 0xe8
call fcn.10087110
push 0x1003c150
push 0x810659
push 0xe8
call fcn.10087110
push 0x1003bd30
push 0x80feef
push 0xe8
call fcn.10087110
push 0x1003bd30
push 0x80fe56
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003bd30
push 0x810083
push 0xe8
call fcn.10087110
push 0x1003bd30
push 0x810354
push 0xe8
call fcn.10087110
push 0x1003bd30
push 0x810624
push 0xe8
call fcn.10087110
push 0x1003bf10
push 0x80ff56
push 0xe8
call fcn.10087110
push 0x1003bf10
push 0x8100e9
push 0xe8
call fcn.10087110
push 0x1003bf10
push 0x8103b7
push 0xe8
call fcn.10087110
add esp, 0x48
push 0x1003bf10
push 0x810699
push 0xe8
call fcn.10087110
push 0x1003bfd0
push 0x80ffa7
push 0xe8
call fcn.10087110
push 0x1003bfd0
push 0x81013a
push 0xe8
call fcn.10087110
push 0x1003bfd0
push 0x810408
push 0xe8
call fcn.10087110
push 0x1003bfd0
push 0x8106ea
push 0xe8
call fcn.10087110
add esp, 0x3c
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x80f258
call esi
mov eax, 0x80f258
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x80f258
call esi
push 0x1003d0b0
push 0x80f92d
push 0xe8
call fcn.10087110
push fcn.10033610
push 0x80f968
push 0xe8
call fcn.10087110
push 0x1003d260
push 0x80f9a3
push 0xe8
call fcn.10087110
push fcn.10033610
push 0x80fa02
push 0xe8
call fcn.10087110
add esp, 0x30
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100a3a28
mov esp, ebp
pop ebp
ret