Function at 0x1005db00
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push 0x1005dac0
push 0x4e7690
mov bl, 0xe8
mov edi, eax
call fcn.10110d60
push 0x1005dac0
push 0x4e775e
call fcn.10110d60
push 0x1005d800
push 0x834700
call fcn.10110d60
mov eax, dword [0x10234a28]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x18
cmp eax, 1
je 0x1005de35
cmp eax, 2
je 0x1005de35
cmp eax, 3
je 0x1005db66
cmp eax, 4
jne 0x1005e144
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x813c1a
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x813c1a], 0x28
mov edx, dword [ebp - 4]
push edx
push 1
push 0x813c1a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f34d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f34d], 0xd5d
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f34d
call esi
push 0x1005d1b0
push 0x895600
mov bl, 0xe9
call fcn.10110d60
push 0x1005d1b0
push 0x895600
call fcn.10110d60
push 0x1005d1e0
push 0x810659
mov bl, 0xe8
call fcn.10110d60
push 0x1005d230
push 0x810389
call fcn.10110d60
push 0x1005d280
push 0x80ff28
call fcn.10110d60
push 0x1005d280
push 0x8100bb
call fcn.10110d60
push 0x1005d550
push 0x80feef
call fcn.10110d60
push 0x1005d550
push 0x80fe56
call fcn.10110d60
add esp, 0x40
push 0x1005d570
push 0x810083
call fcn.10110d60
push 0x1005d590
push 0x810624
call fcn.10110d60
push 0x1005d660
push 0x810354
call fcn.10110d60
push 0x1005d740
push 0x80f8e0
mov bl, 0xe9
call fcn.10110d60
push 0x1005cac0
push 0x80f2e8
mov bl, 0xe8
call fcn.10110d60
push 0x1005cba0
push 0x80f3d3
call fcn.10110d60
push 0x1005cc80
push 0x80f4c7
call fcn.10110d60
push 0x1005cd60
push 0x80f5bb
call fcn.10110d60
add esp, 0x40
push 0x1005d080
push 0x80f6af
call fcn.10110d60
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef6b
call esi
mov ebx, str.InterfaceGFx_none.tga
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef6b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef6b
call esi
cmp dword [0x10234a28], 3
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef0b
jne 0x1005dd16
call esi
mov dword [0x80ef0b], 0x101367d0
jmp 0x1005dd22
call esi
mov dword [0x80ef0b], 0x101367ec
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x80ef0b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef2b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef2b], 0x10136810
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef2b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef4b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef4b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef4b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef8b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef8b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef8b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80efab
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80efab], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80efab
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80efcb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80efcb], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80efcb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80efeb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80efeb], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80efeb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f00b
call esi
mov dword [0x80f00b], ebx
jmp 0x1005e075
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x8137b2
call esi
xor bl, bl
lea ecx, [ebp - 4]
push ecx
mov byte [0x8137b2], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x8137b2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x812ad5
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x812ad5], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x812ad5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x813c1a
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x813c1a], 0x28
mov edx, dword [ebp - 4]
push edx
push 1
push 0x813c1a
call esi
push 0x895c0c
push 0x895b8d
mov bl, 0xe9
call fcn.10110d60
push 0x1005cac0
push 0x80f2e8
mov bl, 0xe8
call fcn.10110d60
push 0x1005cba0
push 0x80f3d3
call fcn.10110d60
push 0x1005cc80
push 0x80f4c7
call fcn.10110d60
push 0x1005cd60
push 0x80f5bb
call fcn.10110d60
push 0x1005d080
push 0x80f6af
call fcn.10110d60
add esp, 0x30
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef6b
call esi
mov ebx, str.CustomInterfaceS2_none.tga
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef6b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef6b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef0b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef0b], 0x101366a4
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef0b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef2b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef2b], 0x101366c8
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef2b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef4b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef4b], 0x101366ec
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef4b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80ef8b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80ef8b], 0x10136710
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80ef8b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80efab
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80efab], 0x10136734
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80efab
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80efcb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80efcb], 0x10136758
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80efcb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80efeb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80efeb], 0x10136778
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80efeb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f00b
call esi
mov dword [0x80f00b], 0x10136798
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x80f00b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f06b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f06b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f06b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f08b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f08b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f08b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f0ab
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f0ab], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f0ab
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f0cb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f0cb], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f0cb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f0eb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f0eb], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f0eb
call esi
push 0x1005c9c0
push 0x8123d7
mov bl, 0xe8
call fcn.10110d60
push 0x1005c8f0
push 0x80f92d
call fcn.10110d60
push 0x1005c090
push 0x636420
mov bl, 0xe9
call fcn.10110d60
push 0x1005c0b0
push 0x636450
call fcn.10110d60
push 0x1005c810
push 0x857746
mov bl, 0xe8
call fcn.10110d60
push 0x1005afc0
push 0x4d2180
call fcn.10110d60
push 0x1005c940
push 0x8119e6
call fcn.10110d60
push 0x1005c940
push 0x811b1a
call fcn.10110d60
add esp, 0x40
push 0x1005c940
push 0x811b61
call fcn.10110d60
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x420260
call esi
lea ebx, [edi + 0x18]
lea ecx, [ebp - 4]
push ecx
mov dword [0x420260], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x420260
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x42053f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x42053f], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x42053f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6387b9
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6387b9], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6387b9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b1e7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b1e7], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b1e7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b2b8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b2b8], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b2b8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b3a4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b3a4], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b3a4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8b4fad
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8b4fad], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8b4fad
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8b50cd
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8b50cd], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8b50cd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d146e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d146e], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d146e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d7199
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d7199], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d7199
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d7a31
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d7a31], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d7a31
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d990f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d990f], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d990f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x596b8b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x596b8b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x596b8b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x779a7c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x779a7c], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x779a7c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x779c59
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x779c59], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x779c59
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x77a648
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x77a648], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x77a648
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x787a60
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x787a60], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x787a60
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7918b2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7918b2], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7918b2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b940
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b940], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b940
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x88e320
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x88e320], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x88e320
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x420277
call esi
lea ebx, [edi + 0x20]
lea ecx, [ebp - 4]
mov dword [0x420277], ebx
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x420277
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x420553
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x420553], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x420553
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7c0565
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7c0565], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7c0565
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f905
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f905], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f905
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8b4fbf
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8b4fbf], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8b4fbf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8b50df
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8b50df], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8b50df
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d1496
call esi
mov dword [0x4d1496], ebx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x4d1496
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x596b97
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x596b97], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x596b97
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x779aa2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x779aa2], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x779aa2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x779c7f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x779c7f], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x779c7f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x77a66e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x77a66e], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x77a66e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x787a95
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x787a95], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x787a95
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7918d8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7918d8], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7918d8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b965
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b965], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b965
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x88e350
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x88e350], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x88e350
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82abf4
call esi
add edi, 0x10
lea ecx, [ebp - 4]
push ecx
mov dword [0x82abf4], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82abf4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82401b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82401b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82401b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b97c4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b97c4], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b97c4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b9834
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b9834], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b9834
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b98ec
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b98ec], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b98ec
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8c2df7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8c2df7], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8c2df7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8c2e67
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8c2e67], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8c2e67
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8cc6fb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8cc6fb], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8cc6fb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8cc770
call esi
lea ecx, [ebp - 4]
mov dword [0x8cc770], edi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x8cc770
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8d99a0
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8d99a0], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8d99a0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8d9a15
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8d9a15], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8d9a15
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8ef463
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8ef463], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8ef463
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8ef4d5
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8ef4d5], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8ef4d5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8ef5ad
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8ef5ad], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8ef5ad
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8ef642
call esi
mov dword [0x8ef642], edi
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x8ef642
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x914fb1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x914fb1], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x914fb1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x915026
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x915026], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x915026
call esi
push 0x1005c1d0
push 0x81a146
mov bl, 0xe8
call fcn.10110d60
push 0x1005c1d0
push 0x81a199
call fcn.10110d60
push 0x1005c0d0
push 0x819415
call fcn.10110d60
push 0x1005c160
push 0x81aa9c
call fcn.10110d60
push 0x1005c160
push 0x81aa42
call fcn.10110d60
push 0x1005c160
push 0x81a9e8
call fcn.10110d60
push 0x1005c160
push 0x81a977
call fcn.10110d60
push 0x1005c160
push 0x81a944
call fcn.10110d60
add esp, 0x40
push 0x1005c160
push 0x81a73d
call fcn.10110d60
push 0x1005c160
push 0x81a6f4
call fcn.10110d60
push 0x1005c210
push 0x943d7f
call fcn.10110d60
push 0x1005c2a0
push 0x8240a9
call fcn.10110d60
push 0x1005c340
push 0x945114
call fcn.10110d60
push 0x1005c300
push 0x945180
call fcn.10110d60
push 0x1005c3b0
push 0x85c446
call fcn.10110d60
push 0x1005c410
push 0x9448c2
call fcn.10110d60
add esp, 0x40
push 0x1005c410
push 0x81944b
call fcn.10110d60
push 0x1005c6e0
push 0x7c57b9
call fcn.10110d60
push 0x1005c720
push 0x4d7c0d
call fcn.10110d60
push 0x1005c720
push 0x4d7c98
call fcn.10110d60
push 0x1005c660
push 0x7d5e92
call fcn.10110d60
push 0x1005c520
push 0x7d60b0
call fcn.10110d60
push 0x1005c620
push 0x7d5df4
call fcn.10110d60
push 0x1005c5e0
push 0x7d5d56
call fcn.10110d60
add esp, 0x40
push 0x1005c4a0
push 0x7d6150
call fcn.10110d60
push 0x1005c560
push 0x7d5fce
call fcn.10110d60
push 0x1005c460
push 0x7d6060
call fcn.10110d60
push 0x1005c4e0
push 0x856486
call fcn.10110d60
push 0x1005c4e0
push 0x85f1b9
call fcn.10110d60
push 0x1005c5a0
push 0x7d5f30
call fcn.10110d60
push 0x1005c6a0
push 0x7d5ee0
call fcn.10110d60
push 0x1005c6a0
push 0x7d5e42
call fcn.10110d60
add esp, 0x40
push 0x1005c6a0
push 0x7d5da4
call fcn.10110d60
push 0x1005c6a0
push 0x7d61ef
call fcn.10110d60
push 0x1005c6a0
push 0x7d6100
call fcn.10110d60
push 0x1005c6a0
push 0x7d601c
call fcn.10110d60
push 0x1005c6a0
push 0x7d619e
call fcn.10110d60
push 0x1005c6a0
push 0x7d5f7e
call fcn.10110d60
push 0x1005c040
push 0x7f3f87
call fcn.10110d60
push 0x1005c040
push 0x7f4a63
call fcn.10110d60
add esp, 0x40
push 0x1005c040
push 0x85f90c
call fcn.10110d60
push 0x1005c040
push 0x8605bf
call fcn.10110d60
push 0x1005c060
push 0x40f2e9
call fcn.10110d60
push 0x1005c060
push 0x4d714e
call fcn.10110d60
push 0x1005c060
push 0x4d79e7
call fcn.10110d60
push 0x1005c060
push 0x4d9756
call fcn.10110d60
push 0x1005c060
push 0x5db4d5
call fcn.10110d60
push 0x1005c060
push 0x5db1aa
call fcn.10110d60
add esp, 0x40
push 0x1005c060
push 0x5db22f
call fcn.10110d60
push 0x1005c060
push 0x5db322
call fcn.10110d60
push 0x1005c060
push 0x5db3a7
call fcn.10110d60
push 0x1005c060
push 0x5db46d
call fcn.10110d60
push 0x1005c060
push 0x5db4ad
call fcn.10110d60
push 0x1005c060
push 0x5db534
call fcn.10110d60
push 0x1005c060
push 0x5db5c4
call fcn.10110d60
push 0x1005c060
push 0x5db628
call fcn.10110d60
add esp, 0x40
push 0x1005c060
push 0x5db68c
call fcn.10110d60
push 0x1005c060
push 0x5db6ed
call fcn.10110d60
push 0x1005c7a0
push 0x791bd0
call fcn.10110d60
push 0x1005c7a0
push 0x791c40
call fcn.10110d60
push 0x1005c7a0
push 0x792e80
call fcn.10110d60
push 0x1005c7a0
push 0x792f30
call fcn.10110d60
push 0x1005c7a0
push 0x7a0c58
call fcn.10110d60
push 0x1005c7a0
push 0x7a229f
call fcn.10110d60
add esp, 0x40
push 0x1005c7a0
push 0x7a3534
call fcn.10110d60
push 0x1005c7a0
push 0x7a47cc
call fcn.10110d60
push 0x1005c7a0
push 0x7a557c
call fcn.10110d60
push 0x1005c7a0
push 0x7a703e
call fcn.10110d60
push 0x1005c7a0
push 0x7a8227
call fcn.10110d60
push 0x1005c7a0
push 0x7a8ed1
call fcn.10110d60
push 0x1005c7a0
push 0x7a9331
call fcn.10110d60
push 0x1005c7a0
push 0x7a9a11
call fcn.10110d60
add esp, 0x40
push 0x1005c7a0
push 0x7a9ec7
call fcn.10110d60
push 0x1005c7a0
push 0x7aab57
call fcn.10110d60
push 0x1005c7a0
push 0x7ab8ef
call fcn.10110d60
push 0x1005c7a0
push 0x7ac60f
call fcn.10110d60
push 0x1005c7a0
push 0x7ad597
call fcn.10110d60
push 0x1005c7a0
push 0x7addf7
call fcn.10110d60
push 0x1005c7a0
push 0x7ae642
call fcn.10110d60
push 0x1005c7a0
push 0x7b26c2
call fcn.10110d60
add esp, 0x40
push 0x1005c7a0
push 0x7b2ff2
call fcn.10110d60
push 0x1005c7a0
push 0x7b3aa2
call fcn.10110d60
push 0x1005c7a0
push 0x7b4632
call fcn.10110d60
push 0x1005c7a0
push 0x7b5332
call fcn.10110d60
push 0x1005c7a0
push 0x7b5d22
call fcn.10110d60
push 0x1005c7a0
push 0x7b670e
call fcn.10110d60
push 0x1005c7a0
push 0x7b74c7
call fcn.10110d60
push 0x1005c7a0
push 0x7b85c2
call fcn.10110d60
add esp, 0x40
push 0x1005c7a0
push 0x947a52
call fcn.10110d60
push 0x1005c7a0
push 0x948814
call fcn.10110d60
push 0x1005c7a0
push 0x94a2b4
call fcn.10110d60
push 0x1005c7a0
push 0x94b4af
call fcn.10110d60
push 0x1005c7a0
push 0x94bdd5
call fcn.10110d60
push 0x1005c7a0
push 0x94c8a4
call fcn.10110d60
push 0x1005c7a0
push 0x94da92
call fcn.10110d60
push 0x1005c7a0
push 0x94f0f2
call fcn.10110d60
add esp, 0x40
push 0x1005c7a0
push 0x94fe84
call fcn.10110d60
push 0x1005c7a0
push 0x95093c
call fcn.10110d60
push 0x1005c7a0
push 0x9515b9
call fcn.10110d60
push 0x1005c880
push 0x88d9f3
call fcn.10110d60
push 0x1005c880
push 0x88da2f
call fcn.10110d60
push 0x1005c880
push 0x88da79
call fcn.10110d60
push 0x1005c880
push 0x88dabd
call fcn.10110d60
push 0x1005c880
push 0x88db41
call fcn.10110d60
add esp, 0x40
push 0x1005c880
push 0x88db74
call fcn.10110d60
push 0x1005c880
push 0x88dba7
call fcn.10110d60
push 0x1005c880
push 0x88dbda
call fcn.10110d60
push 0x1005cf80
push 0x7bf4e8
call fcn.10110d60
push 0x1005cf80
push 0x7bf54f
call fcn.10110d60
push 0x1005cf80
push 0x7bfddf
call fcn.10110d60
push 0x1005cf80
push 0x7bfd44
call fcn.10110d60
push 0x1005cf80
push 0x7bfd8d
call fcn.10110d60
add esp, 0x40
push 0x1005cf80
push 0x7bfc87
call fcn.10110d60
push 0x1005cf80
push 0x7bfcca
call fcn.10110d60
push 0x1005cf80
push 0x7c0094
call fcn.10110d60
push 0x1005cf80
push 0x7bffc1
call fcn.10110d60
push 0x1005cf80
push 0x7c0029
call fcn.10110d60
push 0x1005cf80
push 0x7bfed2
call fcn.10110d60
push 0x1005cf80
push 0x7bff2e
call fcn.10110d60
push 0x1005cf80
push 0x7c02c0
call fcn.10110d60
add esp, 0x40
push 0x1005cf80
push 0x7c0225
call fcn.10110d60
push 0x1005cf80
push 0x7c026e
call fcn.10110d60
push 0x1005cf80
push 0x7c0168
call fcn.10110d60
push 0x1005cf80
push 0x7c01ab
call fcn.10110d60
push 0x1005cff0
push 0x7bfbb3
call fcn.10110d60
push 0x1005cff0
push 0x7bfa42
call fcn.10110d60
push 0x1005cff0
push 0x7bfafe
call fcn.10110d60
push 0x1005cff0
push 0x7bf8c4
call fcn.10110d60
add esp, 0x40
push 0x1005cff0
push 0x7bf968
call fcn.10110d60
push 0x1005ce90
push 0x7bf3e3
call fcn.10110d60
add esp, 0x10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret