Function at 0x10012410
Capabilities:
Allocate or change rwx memory
Check for time delay via gettickcount
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10061d70
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x1007f018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.autoGM
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x100124f0
mov ecx, dword [0x100900ac]
mov edx, dword [0x1008e490]
mov dl, byte [edx + ecx]
xor eax, eax
movsx esi, dl
cmp eax, esi
je 0x1001248e
add eax, 2
cmp eax, 0x10
jl 0x10012471
mov eax, 1
cmp eax, esi
je 0x1001248e
add eax, 2
cmp eax, 0x10
jl 0x10012482
movzx eax, dl
mov esi, eax
imul eax, dword [0x1008e49c]
add eax, dword [0x1008e484]
imul esi, esi, 0x2b
add esi, dword [0x1008e48c]
lea edi, [ecx + eax]
add esi, ecx
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.autoGM
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x100124f0
mov ecx, 0xffff
mov word [esi + 0x10], cx
mov edx, dword [str._COL]
mov dword [edi], edx
mov ax, word [0x1007b968]
mov word [edi + 4], ax
mov cl, byte [0x1007b96a]
mov byte [edi + 6], cl
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.autoGM
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 2
jne 0x100125ac
mov ecx, dword [0x100900ac]
mov edx, dword [0x1008e490]
mov dl, byte [edx + ecx]
xor eax, eax
movsx esi, dl
cmp eax, esi
je 0x10012543
add eax, 2
cmp eax, 0x10
jl 0x10012526
mov eax, 1
cmp eax, esi
je 0x10012543
add eax, 2
cmp eax, 0x10
jl 0x10012537
movzx eax, dl
mov esi, eax
imul eax, dword [0x1008e49c]
add eax, dword [0x1008e484]
imul esi, esi, 0x2b
add esi, dword [0x1008e48c]
lea edi, [ecx + eax]
add esi, ecx
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.autoGM
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 2
jne 0x100125ac
mov ecx, 0xffff
mov word [esi + 0x10], cx
mov edx, dword [str.Katou_Megumi]
mov dword [edi], edx
mov eax, dword [0x1007b970]
mov dword [edi + 4], eax
mov ecx, dword [0x1007b974]
mov dword [edi + 8], ecx
mov dl, byte [0x1007b978]
mov byte [edi + 0xc], dl
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.autoGM
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 3
jne 0x10012668
mov ecx, dword [0x100900ac]
mov edx, dword [0x1008e490]
mov dl, byte [edx + ecx]
xor eax, eax
movsx esi, dl
cmp eax, esi
je 0x100125ff
add eax, 2
cmp eax, 0x10
jl 0x100125e2
mov eax, 1
cmp eax, esi
je 0x100125ff
add eax, 2
cmp eax, 0x10
jl 0x100125f3
movzx eax, dl
mov esi, eax
imul eax, dword [0x1008e49c]
add eax, dword [0x1008e484]
imul esi, esi, 0x2b
add esi, dword [0x1008e48c]
lea edi, [ecx + eax]
add esi, ecx
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.autoGM
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 2
jne 0x10012668
mov ecx, 0xffff
mov word [esi + 0x10], cx
mov edx, dword [str.Chess_System]
mov dword [edi], edx
mov eax, dword [0x1007b980]
mov dword [edi + 4], eax
mov ecx, dword [0x1007b984]
mov dword [edi + 8], ecx
mov dl, byte [0x1007b988]
mov byte [edi + 0xc], dl
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.autoGM
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 4
jne 0x10012737
mov ecx, dword [0x100900ac]
mov edx, dword [0x1008e490]
mov dl, byte [edx + ecx]
xor eax, eax
movsx esi, dl
mov edi, edi
cmp eax, esi
je 0x100126bd
add eax, 2
cmp eax, 0x10
jl 0x100126a0
mov eax, 1
cmp eax, esi
je 0x100126bd
add eax, 2
cmp eax, 0x10
jl 0x100126b1
movzx eax, dl
mov esi, eax
imul eax, dword [0x1008e49c]
add eax, dword [0x1008e484]
imul esi, esi, 0x2b
add esi, dword [0x1008e48c]
lea edi, [ecx + eax]
add esi, ecx
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.autoGM
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 2
jne 0x10012737
mov ecx, 0xffff
mov word [esi + 0x10], cx
mov edx, dword [str.Sawamura_Spencer_Eri]
mov dword [edi], edx
mov eax, dword [0x1007b990]
mov dword [edi + 4], eax
mov ecx, dword [0x1007b994]
mov dword [edi + 8], ecx
mov edx, dword [0x1007b998]
mov dword [edi + 0xc], edx
mov eax, dword [0x1007b99c]
mov dword [edi + 0x10], eax
mov cl, byte [0x1007b9a0]
mov byte [edi + 0x14], cl
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.AntiKick
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
mov edi, 0x46c25ced
test eax, eax
je 0x100127a3
lea esi, [ebp - 0x68]
call fcn.1001b6e0
mov dword [ebp - 4], 0
mov ecx, dword [0x100900a0]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x20]
call eax
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 0x78]
push ecx
push 0x40
mov esi, eax
push 1
push esi
call edi
mov ecx, dword [ebp - 0x78]
mov dl, byte [0x1007b81c]
lea eax, [ebp - 0x7c]
push eax
push ecx
push 1
push esi
mov byte [esi], dl
call edi
lea edx, [ebp - 0x68]
jmp 0x100127eb
lea esi, [ebp - 0x3c]
call fcn.1001b6e0
mov dword [ebp - 4], 1
mov ecx, dword [0x100900a0]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x20]
call eax
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 0x6c]
push ecx
push 0x40
mov esi, eax
push 1
push esi
call edi
mov ecx, dword [ebp - 0x6c]
mov dl, byte [0x1007b9d0]
lea eax, [ebp - 0x70]
push eax
push ecx
push 1
push esi
mov byte [esi], dl
call edi
lea edx, [ebp - 0x3c]
push 0x2b
push 0
push edx
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
add esp, 0xc
push str.GameHack.Player.SkillUp
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x1001282b
push 0x35
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 2
jne 0x10012857
push 0x34
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 3
jne 0x10012883
push 0x33
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 4
jne 0x100128af
push 0x32
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 5
jne 0x100128db
push 0x31
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 6
jne 0x10012907
push 0x30
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 7
jne 0x10012933
push 0x29
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 8
jne 0x1001295f
push 0x28
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 9
jne 0x1001298b
push 0x27
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0xa
jne 0x100129b7
push 0x26
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0xb
jne 0x100129e3
push 0x25
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0xc
jne 0x10012a0f
push 0x24
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0xd
jne 0x10012a3b
push 0x23
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0xe
jne 0x10012a67
push 0x22
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0xf
jne 0x10012a93
push 0x21
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x10
jne 0x10012abf
push 0x20
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x11
jne 0x10012aeb
push 0x19
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x12
jne 0x10012b17
push 0x18
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x13
jne 0x10012b43
push 0x17
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x14
jne 0x10012b6f
push 0x16
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x15
jne 0x10012b9a
push eax
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x16
jne 0x10012bc6
push 0x14
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x17
jne 0x10012bf2
push 0x13
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x18
jne 0x10012c1e
push 0x12
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x19
jne 0x10012c4a
push 0x11
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x1a
jne 0x10012c76
push 0x10
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x1b
jne 0x10012ca2
push 9
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x1c
jne 0x10012cce
push 8
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x1d
jne 0x10012cfa
push 7
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x1e
jne 0x10012d26
push 6
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x1f
jne 0x10012d52
push 5
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x20
jne 0x10012d7e
push 4
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x21
jne 0x10012daa
push 3
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x22
jne 0x10012dd6
push 2
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SkillUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 0x23
jne 0x10012e02
push 1
call fcn.100094b0
mov edi, eax
call fcn.100096d0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.AutoInviteRoom
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10012e76
mov edi, dword [0x100900b4]
call fcn.1000aaf0
test eax, eax
jne 0x10012e76
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
cmp dword [0x100936b4], eax
ja 0x10012e76
push 0x86
xor edi, edi
xor esi, esi
call fcn.100097b0
lea esp, [esp]
push esi
call fcn.10009870
inc esi
cmp esi, 8
jl 0x10012e50
push 0x87
xor edi, edi
xor esi, esi
call fcn.100097b0
call ebx
add eax, 0x1f4
mov dword [0x100936b4], eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.BypassRoomPassword
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10012ece
mov esi, dword [0x1008e270]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 0x6c]
push ecx
push 0x40
push 4
push esi
mov byte [0x1008ff9f], 1
call edi
mov ecx, dword [ebp - 0x6c]
lea eax, [ebp - 0x70]
push eax
push ecx
mov edx, 0x1000f620
sub edx, esi
push 4
sub edx, 5
push esi
mov byte [esi], 0xe9
mov dword [esi + 1], edx
call edi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.BypassServerFull
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10012f4b
mov edi, dword [0x100900b4]
call fcn.1000aaf0
test eax, eax
jne 0x10012f4b
call fcn.10009940
xor esi, esi
call fcn.100099e0
inc esi
cmp esi, 0xa
jl 0x10012f01
mov ecx, dword [0x100900a0]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push str.XFHPB.Values.GaugeMultiplier
call eax
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 0x6c]
push ecx
push 0x40
mov esi, eax
push 8
push esi
call edi
mov edx, dword [0x1007b9d4]
mov dword [esi], edx
mov eax, dword [0x1007b9d8]
mov edx, dword [ebp - 0x6c]
lea ecx, [ebp - 0x70]
push ecx
mov dword [esi + 4], eax
push edx
jmp 0x10012f89
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
push str.XFHPB.Values.GaugeMultiplier
call edx
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov esi, eax
lea eax, [ebp - 0x74]
push eax
push 0x40
push 8
push esi
call edi
mov ecx, dword [0x1007b9e0]
mov dword [esi], ecx
mov edx, dword [0x1007b9e4]
mov ecx, dword [ebp - 0x74]
lea eax, [ebp - 0x80]
push eax
mov dword [esi + 4], edx
push ecx
push 8
push esi
call edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001b930
mov esp, ebp
pop ebp
ret