Function at 0x10013c40
Capabilities:
Allocate or change rwx memory
Check for time delay via gettickcount
Execute shellcode via indirect call
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10021d81
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x1002d018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.10013760
call fcn.100139d0
cmp dword [0x10032da8], 0
je 0x10013ced
mov edi, str._9__860__87_9__
sub edi, 0x6fad512a
lea esi, [ebp - 0x3c]
call fcn.10019f70
mov dword [ebp - 4], 0
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
fld dword [0x10028c60]
mov ecx, dword [eax]
mov edi, 0x10028458
fstp dword [ecx]
sub edi, 0x16440e0f
lea esi, [ebp - 0x3c]
call fcn.1001a1f0
mov dword [ebp - 4], 1
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
fld dword [0x10028d28]
mov ecx, dword [eax]
fstp dword [ecx + 4]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x10032e4c], 1
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
jne 0x10013d6f
mov edi, 0x100260e4
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x2c]
call fcn.1001a0b0
mov dword [ebp - 4], 2
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x8c]
push ecx
push 0x40
mov esi, eax
push 3
push esi
call ebx
push 3
push 0x10028484
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x8c]
add esp, 0xc
lea edx, [ebp - 0x90]
push edx
push eax
push 3
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x10032e4c], 0
jne 0x10013deb
mov edi, 0x100260e4
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x2c]
call fcn.1001a0b0
mov dword [ebp - 4], 3
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x8c]
push ecx
push 0x40
mov esi, eax
push 3
push esi
call ebx
push 3
push 0x10028488
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x8c]
add esp, 0xc
lea edx, [ebp - 0x90]
push edx
push eax
push 3
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x10032e54], 1
jne 0x10013e67
mov edi, 0x10028490
sub edi, 0x48f9e3f3
lea esi, [ebp - 0x2c]
call fcn.10019ff0
mov dword [ebp - 4], 4
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x8c]
push ecx
push 0x40
mov esi, eax
push 3
push esi
call ebx
push 3
push 0x1002848c
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x8c]
add esp, 0xc
lea edx, [ebp - 0x90]
push edx
push eax
push 3
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x10032e54], 0
jne 0x10013ee3
mov edi, 0x10028490
sub edi, 0x48f9e3f3
lea esi, [ebp - 0x2c]
call fcn.10019ff0
mov dword [ebp - 4], 5
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x8c]
push ecx
push 0x40
mov esi, eax
push 3
push esi
call ebx
push 3
push 0x10028488
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x8c]
add esp, 0xc
lea edx, [ebp - 0x90]
push edx
push eax
push 3
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x10032de8], 0
je 0x10013f0b
call fcn.10009a00
push eax
call fcn.10008020
push eax
call fcn.10007ef0
cmp byte [eax], 0
je 0x10013f0b
mov byte [eax], 0
inc eax
cmp byte [eax], 0
jne 0x10013f02
mov edi, 0x100267e0
sub edi, 0x1e7b41dd
cmp dword [0x10032e0c], 0
lea esi, [ebp - 0x34]
je 0x10013f62
mov dword [0x10032e08], 0
call fcn.10019b90
mov dword [ebp - 4], 6
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push 5
push eax
mov eax, dword [edx + 0x40]
call eax
lea esi, [eax + 0xd]
mov eax, 0x10012a00
call fcn.100020a0
fldz
fstp dword [0x100324e0]
jmp 0x1001408c
cmp dword [0x10032e08], 0
je 0x1001402d
mov dword [0x10032e0c], 0
call fcn.10019b90
mov dword [ebp - 4], 7
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push 5
push eax
mov eax, dword [edx + 0x40]
call eax
lea esi, [eax + 0xd]
mov eax, 0x10012a00
call fcn.100020a0
mov dword [ebp - 4], 0xffffffff
push 0x12
mov dword [0x10030674], 0x100026d0
call fcn.100026d0
movsx ecx, ax
shr ecx, 0x10
test ecx, ecx
je 0x10013ff2
cmp byte [0x100315a8], 0
je 0x10013fe4
cmp dword [0x100315ac], 0
je 0x10013ff9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x100315ac], eax
ja 0x10013ff9
mov byte [0x100315a8], 1
mov eax, 1
jmp 0x10013ffb
mov byte [0x100315a8], 0
xor eax, eax
test al, 1
je 0x10014003
fldz
jmp 0x10014009
fld dword [0x10028d24]
push str.BomControl_Aktif__OFF___Tekan_ALT_
fstp dword [0x100324e0]
push 0xffffff00
push 0xdc
mov ecx, 0x15e
call fcn.100101e0
add esp, 0xc
jmp 0x1001408c
call fcn.10019b90
mov dword [ebp - 4], 8
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x8c]
push ecx
push 0x40
lea esi, [eax + 0xd]
push 5
push esi
call ebx
push 5
push 0x100284d0
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x8c]
add esp, 0xc
lea edx, [ebp - 0x90]
push edx
push eax
push 5
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov eax, dword [0x10032e10]
cmp eax, 1
jne 0x100141a4
fld dword [0x10028d20]
mov edi, 0x100267a4
sub edi, 0x1e7b41dd
fstp dword [0x100308e8]
lea esi, [ebp - 0x30]
call fcn.1001a270
mov dword [ebp - 4], 9
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push 5
push eax
mov eax, dword [edx + 0x40]
call eax
lea esi, [eax + 0xd]
mov eax, 0x10012a10
call fcn.100020a0
mov eax, dword [0x10032e10]
test eax, eax
jne 0x10014153
mov edi, 0x100267a4
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x30]
call fcn.1001a270
mov dword [ebp - 4], 0xa
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x8c]
push ecx
push 0x40
lea esi, [eax + 0xd]
push 5
push esi
call ebx
push 5
push 0x100284d0
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x8c]
add esp, 0xc
lea edx, [ebp - 0x90]
push edx
push eax
push 5
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov edi, 0x10025d2c
lea esi, [ebp - 0x38]
sub edi, 0x2ba2e0db
call fcn.1001a1b0
cmp dword [0x10032eac], 0
je 0x10014210
mov dword [ebp - 4], 0xb
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x8c]
push ecx
push 0x40
mov esi, eax
push 7
push esi
call ebx
push 7
push 0x100284d8
jmp 0x1001423c
cmp eax, 2
jne 0x100141b7
fld dword [0x10028c64]
fstp dword [0x100308e8]
jmp 0x10014153
cmp eax, 3
jne 0x100141ca
fld dword [0x10028d1c]
fstp dword [0x100308e8]
jmp 0x10014153
cmp eax, 4
jne 0x100141e0
fld dword [0x1002d1cc]
fstp dword [0x100308e8]
jmp 0x10014153
cmp eax, 5
jne 0x100141f6
fld dword [0x10028d18]
fstp dword [0x100308e8]
jmp 0x10014153
cmp eax, 6
jne 0x100140e2
fld dword [0x10028d14]
fstp dword [0x100308e8]
jmp 0x10014153
mov dword [ebp - 4], 0xc
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x8c]
push ecx
push 0x40
mov esi, eax
push 7
push esi
call ebx
push 7
push 0x100284e0
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x8c]
add esp, 0xc
lea edx, [ebp - 0x90]
push edx
push eax
push 7
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x10032d6c], 0
je 0x10014294
call fcn.10008020
push eax
call fcn.10007f90
push eax
call fcn.10008d40
add esp, 4
mov esi, eax
call fcn.10008a50
cmp dword [0x10032d7c], 0
je 0x100143c8
call fcn.10009220
cmp dword [eax + 0x50], 0
je 0x1001433c
mov edi, 0x100284ec
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x74]
call fcn.10019fb0
mov dword [ebp - 4], 0xd
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x8c]
push ecx
push 0x40
mov esi, eax
push 2
push esi
call ebx
push 2
push 0x100284e8
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x8c]
add esp, 0xc
lea edx, [ebp - 0x90]
push edx
push eax
push 2
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x60], al
jmp 0x1001444f
mov edi, str.__2_4
sub edi, 0x6fad512a
lea esi, [ebp - 0x54]
call fcn.1001a4b0
mov dword [ebp - 4], 0xe
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x98]
push ecx
push 0x40
mov esi, eax
push 2
push esi
call ebx
push 2
push 0x10028504
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x98]
add esp, 0xc
lea edx, [ebp - 0xa0]
push edx
push eax
push 2
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], al
jmp 0x1001444f
mov edi, 0x10028520
sub edi, 0x16440e0f
lea esi, [ebp - 0x28]
call fcn.10019f30
mov dword [ebp - 4], 0xf
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x9c]
push ecx
push 0x40
mov esi, eax
push 2
push esi
call ebx
push 2
push 0x10028504
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x9c]
add esp, 0xc
lea edx, [ebp - 0xa4]
push edx
push eax
push 2
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], al
cmp dword [0x10032dec], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
je 0x10014518
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x40]
push 0
push 2
push 0x9c
push 0xd
push str.AddressFF
call eax
push eax
push 4
push str.keybd_event
push 0x100266e4
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call fcn.10019d10
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x1c
call edi
cmp dword [0x10032f50], eax
ja 0x1001451e
push 0x70a
call fcn.10009570
mov edi, str.Exit_Game
mov esi, eax
call fcn.100094b0
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x40]
push 0
push 0
push 0x9c
push 0xd
push str.AddressFF
call eax
push eax
push 4
push str.keybd_event
push 0x100266e4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call fcn.10019d10
add esp, 0x1c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0x64
mov dword [0x10032f50], eax
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x10032da4], 0
je 0x10014616
push str.Tekan_CapsLook_Untuk_Aktif
push 0xffffff00
push 0xf0
mov ecx, 0x140
mov dword [0x10032d60], 0
call fcn.100101e0
add esp, 0xc
push 0x14
mov dword [0x10030674], 0x100026d0
call fcn.100026d0
movsx ecx, ax
shr ecx, 0x10
test ecx, ecx
je 0x100145a0
cmp byte [0x100315b8], 0
je 0x1001458b
cmp dword [0x100315bc], 0
je 0x100145a7
call edi
mov edx, dword [0x100315bc]
inc edx
cmp edx, eax
ja 0x100145a7
mov byte [0x100315b8], 1
call edi
mov dword [0x100315bc], eax
mov eax, 1
jmp 0x100145a9
mov byte [0x100315b8], 0
xor eax, eax
push str.NxCharacter.2.8.1.dll
test al, 1
je 0x100145e4
call esi
lea esi, [eax + 0x3365c]
lea eax, [ebp - 0x9c]
push eax
push 0x40
push 2
push esi
call ebx
push 2
push 0x10028560
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov edx, dword [ebp - 0x9c]
lea ecx, [ebp - 0xa4]
jmp 0x1001464b
call esi
lea esi, [eax + 0x3365c]
lea eax, [ebp - 0x98]
push eax
push 0x40
push 2
push esi
call ebx
push 2
push 0x1002857c
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov edx, dword [ebp - 0x98]
lea ecx, [ebp - 0xa8]
jmp 0x1001464b
push str.NxCharacter.2.8.1.dll
call esi
lea esi, [eax + 0x3365c]
lea eax, [ebp - 0x8c]
push eax
push 0x40
push 2
push esi
call ebx
push 2
push 0x1002857c
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov edx, dword [ebp - 0x8c]
lea ecx, [ebp - 0xb0]
add esp, 0xc
push ecx
push edx
push 2
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
cmp dword [0x10032d94], 1
jne 0x100147ef
push 0x20
mov dword [0x10030674], 0x100026d0
call fcn.100026d0
cwde
shr eax, 0x10
test eax, eax
je 0x100146bf
cmp byte [0x10031618], 0
je 0x100146aa
cmp dword [0x1003161c], 0
je 0x100146c6
call edi
mov ecx, dword [0x1003161c]
inc ecx
cmp ecx, eax
ja 0x100146c6
mov byte [0x10031618], 1
call edi
mov dword [0x1003161c], eax
mov eax, 1
jmp 0x100146c8
mov byte [0x10031618], 0
xor eax, eax
test al, 1
je 0x10014762
mov edi, 0x100268e4
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x30]
call fcn.1001a270
mov dword [ebp - 4], 0x10
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0xa0]
push ecx
push 0x40
mov esi, eax
push 3
push esi
call ebx
push 3
push 0x10028580
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0xa0]
add esp, 0xc
lea edx, [ebp - 0xac]
push edx
push eax
push 3
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], al
jmp 0x100147ef
mov edi, 0x10026904
sub edi, 0x6fad512a
lea esi, [ebp - 0x5c]
call fcn.1001a2f0
mov dword [ebp - 4], 0x11
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x90]
push ecx
push 0x40
mov esi, eax
push 3
push esi
call ebx
push 3
push 0x10028584
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x90]
add esp, 0xc
lea edx, [ebp - 0x94]
push edx
push eax
push 3
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], al
cmp dword [0x10032d94], 0
jne 0x1001484e
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x40]
push str.IFHPB.Function.UpdateJumping
call eax
lea ecx, [ebp - 0x90]
push ecx
push 0x40
mov esi, eax
push 3
push esi
call ebx
push 3
push 0x10028584
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x90]
add esp, 0xc
lea edx, [ebp - 0x94]
push edx
push eax
push 3
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
cmp dword [0x10032d58], 0
je 0x10014879
call fcn.10008020
push eax
call fcn.10007f90
push eax
call fcn.10008d40
add esp, 4
mov edi, eax
call fcn.100096b0
mov esi, eax
call fcn.10009600
mov edi, 0x10025894
sub edi, 0x6fad512a
cmp dword [0x10032d5c], 0
lea esi, [ebp - 0x2c]
je 0x100148cd
mov dword [0x10032d58], 0
call fcn.10019dc0
mov dword [ebp - 4], 0x12
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x90]
push ecx
push 0x40
mov esi, eax
push 3
push esi
call ebx
push 3
push 0x100285a8
jmp 0x100148fe
call fcn.10019dc0
mov dword [ebp - 4], 0x13
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
lea ecx, [ebp - 0x90]
push ecx
push 0x40
mov esi, eax
push 3
push esi
call ebx
push 3
push 0x10028488
push esi
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x90]
add esp, 0xc
lea edx, [ebp - 0x94]
push edx
push eax
push 3
push esi
call ebx
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
cmp dword [0x10032d84], 0
lea esi, [ebp - 0x2c]
je 0x100149a7
mov edi, 0x100272d4
sub edi, 0x6fad512a
call fcn.1001a470
mov ebx, eax
mov edi, 0x4cde016b
lea esi, [ebp - 0x58]
mov dword [ebp - 4], 0x14
call fcn.1001a070
mov edi, eax
mov byte [ebp - 4], 0x15
call fcn.10008020
push eax
call fcn.10007f90
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
lea esi, [eax + eax*8]
mov eax, dword [edx + 0x40]
add esi, esi
add esi, esi
push edi
add esi, esi
call eax
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
add esi, eax
mov eax, dword [edx + 0x40]
push ebx
call eax
mov ecx, dword [eax]
mov dword [ecx + esi + 0xa8], 0x44096546
jmp 0x10014a85
mov ebx, 0x100272d4
lea edi, [ebx - 0x6fad512a]
call fcn.1001a470
mov dword [ebp - 0x90], eax
mov edi, 0x4cde016b
lea esi, [ebp - 0x58]
mov dword [ebp - 4], 0x16
call fcn.1001a070
mov edi, eax
mov byte [ebp - 4], 0x17
call fcn.10008020
push eax
call fcn.10007f90
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
lea esi, [eax + eax*8]
mov eax, dword [edx + 0x40]
add esi, esi
add esi, esi
push edi
add esi, esi
call eax
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x40]
add esi, eax
mov eax, dword [ebp - 0x90]
push eax
call edx
mov eax, dword [eax]
mov dword [esi + eax + 0xa8], 0x454ce1c6
lea edi, [ebx - 0x6fad512a]
lea esi, [ebp - 0x2c]
call fcn.1001a470
mov ebx, eax
mov edi, 0x4cde016b
lea esi, [ebp - 0x58]
mov dword [ebp - 4], 0x18
call fcn.1001a070
mov edi, eax
mov byte [ebp - 4], 0x19
call fcn.10008020
push eax
call fcn.10007f90
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
lea esi, [eax + eax*8]
mov eax, dword [edx + 0x40]
add esi, esi
add esi, esi
push edi
add esi, esi
call eax
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
add esi, eax
mov eax, dword [edx + 0x40]
push ebx
call eax
mov ecx, dword [eax]
mov dword [ecx + esi + 0xa8], 0xb7a7c5ac
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
cmp dword [0x10032dc8], 0
je 0x10014cca
call fcn.10008020
push eax
call fcn.10007f90
push eax
call fcn.10008d40
add esp, 4
test eax, eax
je 0x10014ac7
fld dword [0x10028c80]
fcomp dword [eax + 0x12c]
fnstsw ax
test ah, 0x41
jne 0x10014c65
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
cmp dword [0x10032f50], eax
mov eax, dword [edx + 0x40]
push 0
push 0
ja 0x10014bb4
push 0x85
push 0x34
push str.AddressFF
call eax
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
push 4
push str.keybd_event
push 0x100266e4
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
push eax
call fcn.10019d10
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x40]
add esp, 0x1c
push 0
push 0
push 0x400
push 0x400
push 1
push str.AddressFF
call eax
push eax
push 5
push str.mouse_event
push 0x100266e4
call edi
push eax
call esi
push eax
call fcn.10019d10
add esp, 0x20
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, str._DOIUoYQESA
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x88]
call fcn.10019ef0
mov dword [ebp - 4], 0x1a
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
mov eax, dword [edx + 0x28]
mov dword [eax + 0x58], 0
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0x7d0
mov dword [0x10032f50], eax
jmp 0x10014c65
push 0
push 0
push 1
push str.AddressFF
call eax
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
push 5
push str.mouse_event
push 0x100266e4
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
push eax
call fcn.10019d10
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x40]
add esp, 0x20
push 0
push 2
push 0x85
push 0x34
push str.AddressFF
call eax
push eax
push 4
push str.keybd_event
push 0x100266e4
call edi
push eax
call esi
push eax
call fcn.10019d10
add esp, 0x1c
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, str._DOIUoYQESA
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x88]
call fcn.10019ef0
mov dword [ebp - 4], 0x1b
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
mov eax, dword [edx + 0x28]
mov dword [eax + 0x58], 0
mov dword [ebp - 4], ebx
call fcn.10008020
push eax
call fcn.10007f90
push eax
call fcn.10008d40
add esp, 4
test eax, eax
je 0x10014cca
fld dword [0x10028c80]
fcomp dword [eax + 0x12c]
fnstsw ax
test ah, 0x41
je 0x10014cca
mov edi, str._DOIUoYQESA
sub edi, 0x1e7b41dd
lea esi, [ebp - 0x88]
call fcn.10019ef0
mov dword [ebp - 4], 0x1c
mov ecx, dword [0x10032c4c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x40]
call eax
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
mov eax, dword [edx + 0x28]
mov dword [eax + 0x58], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001fd05
mov esp, ebp
pop ebp
ret