Function at 0x100351e0
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
mov eax, dword [0x10064018]
xor eax, ebp
mov dword [ebp - 4], eax
push 0
push 0
push 0
push 0x10035130
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 4
lea eax, [ebp - 0x11c]
push eax
push 0x22
push 0xffffffffffffffff
mov dword [ebp - 0x11c], 2
call dword [0x101ddc70]
push 0x333ccc
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
test eax, eax
je 0x1003523f
mov dword [eax], vtable.CProtect.0
jmp 0x10035241
xor eax, eax
mov dword [0x100cb10c], eax
call fcn.10050810
test al, al
jne 0x1003526b
push 0x10
push str.Error
push str.LordGaming.Premium_Danificado_Gere_novamente_o_Main_Info_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0xe61144
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0xe61144], 0xa0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0xe61144
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d1e69
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d1e69], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d1e69
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d228d
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d228d], 0xe9
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d228d
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d228e
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d228e], 0x8b
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d228e
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d228f
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d228f], 0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d228f
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d2290
call esi
mov byte [0x4d2290], 0
mov eax, dword [ebp - 0x108]
lea edx, [ebp - 0x108]
push edx
push eax
push 1
push 0x4d2290
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d2291
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d2291], 0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d2291
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d559c
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d559c], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d559c
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x633f7a
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x633f7a], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x633f7a
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x634403
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x634403], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x634403
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x63e6c4
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x63e6c4], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x63e6c4
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d2246
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d2246], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d2246
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x501163
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x501163], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x501163
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40af0a
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x40af0a], 0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40af0a
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40b4bc
call esi
mov bl, 0x50
lea edx, [ebp - 0x108]
push edx
mov byte [0x40b4bc], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40b4bc
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40b4c5
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x40b4c5], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40b4c5
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40b4cf
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x40b4cf], 0x18
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40b4cf
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40af0a
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x40af0a], 0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40af0a
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40afd5
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x40afd5], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40afd5
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x777fd6
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x777fd6], 0x70
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x777fd6
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x777fd7
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x777fd7], 0x17
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x777fd7
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4ebec7
call esi
mov bl, 0x3c
lea edx, [ebp - 0x108]
push edx
mov byte [0x4ebec7], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4ebec7
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x5c4004
call esi
lea edx, [ebp - 0x108]
mov byte [0x5c4004], bl
mov eax, dword [ebp - 0x108]
push edx
push eax
push 1
push 0x5c4004
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x7e40bb
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x7e40bb], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x7e40bb
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x81b546
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x81b546], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x81b546
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x81b58d
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x81b58d], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x81b58d
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x86e284
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x86e284], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x86e284
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x86e44c
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x86e44c], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x86e44c
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x86e573
call esi
mov byte [0x86e573], bl
mov eax, dword [ebp - 0x108]
lea edx, [ebp - 0x108]
push edx
push eax
push 1
push 0x86e573
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x86f8fc
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x86f8fc], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x86f8fc
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x7da373
call esi
mov bl, 0xb7
lea edx, [ebp - 0x108]
push edx
mov byte [0x7da373], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x7da373
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x7e1c44
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x7e1c44], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x7e1c44
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x52100d
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x52100d], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x52100d
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x9543c4
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x9543c4], 0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x9543c4
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 0x1b
push 0xd20170
call esi
mov ecx, 0xd20170
mov eax, 0x90909090
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov word [ecx + 0x18], ax
lea edx, [ebp - 0x108]
push edx
mov byte [ecx + 0x1a], al
mov eax, dword [ebp - 0x108]
push eax
push 0x1b
push ecx
call esi
mov ecx, dword [0x100cb10c]
mov ebx, dword [ecx + 0x298]
lea edx, [ebp - 0x108]
push edx
neg ebx
push 0x40
sbb bl, bl
push 1
and bl, 0x8a
push 0x64cbd1
add bl, 0xeb
call esi
lea eax, [ebp - 0x108]
push eax
mov byte [0x64cbd1], bl
mov ecx, dword [ebp - 0x108]
push ecx
push 1
push 0x64cbd1
call esi
mov edx, dword [0x100cb10c]
mov bl, byte [edx + 0x29c]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x64cbd0
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x64cbd0], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x64cbd0
call esi
mov eax, dword [0x100cb10c]
mov bl, byte [eax + 0x29c]
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x95ceef
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x95ceef], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x95ceef
call esi
mov ecx, dword [0x100cb10c]
mov bl, byte [ecx + 0x29c]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 1
push 0x95cf14
call esi
mov byte [0x95cf14], bl
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 1
push 0x95cf14
call esi
mov edx, dword [0x100cb10c]
mov bl, byte [edx + 0x68]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f68
inc bl
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f68], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f68
call esi
mov eax, dword [0x100cb10c]
mov bl, byte [eax + 0x6a]
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0xe61f69
add bl, 2
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0xe61f69], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0xe61f69
call esi
mov ecx, dword [0x100cb10c]
mov bl, byte [ecx + 0x6b]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 1
push 0xe61f6a
add bl, 3
call esi
lea eax, [ebp - 0x108]
push eax
mov byte [0xe61f6a], bl
mov ecx, dword [ebp - 0x108]
push ecx
push 1
push 0xe61f6a
call esi
mov edx, dword [0x100cb10c]
mov bl, byte [edx + 0x6d]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f6b
add bl, 4
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f6b], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f6b
call esi
mov eax, dword [0x100cb10c]
mov bl, byte [eax + 0x6e]
lea ecx, [ebp - 0x108]
push ecx
add bl, 5
push 0x40
push 1
push 0xe61f6c
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0xe61f6c], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0xe61f6c
call esi
mov ecx, dword [0x100cb10c]
movzx edi, word [ecx + 0x66]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 2
push 0xe609e4
call esi
lea eax, [ebp - 0x108]
push eax
mov word [0xe609e4], di
mov ecx, dword [ebp - 0x108]
push ecx
push 2
push 0xe609e4
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4d597b
call esi
mov edi, 0x100cfdc8
lea eax, [ebp - 0x108]
push eax
mov dword [0x4d597b], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4d597b
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4da289
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4da289], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4da289
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4da297
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4da297], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4da297
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4da3a2
call esi
lea eax, [ebp - 0x108]
mov dword [0x4da3a2], edi
mov ecx, dword [ebp - 0x108]
push eax
push ecx
push 4
push 0x4da3a2
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4da3ce
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4da3ce], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4da3ce
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4da3d9
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4da3d9], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4da3d9
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x63d326
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x63d326], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x63d326
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x642112
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x642112], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x642112
call esi
push 0x100257e0
push 0x4da280
mov bl, 0xe9
call fcn.10056900
push 0x10025810
push 0x4da3a1
call fcn.10056900
add esp, 0x10
mov ebx, 0xc
mov edi, 0x4d9d39
call fcn.10056980
mov ebx, 7
mov edi, 0x4d9d45
call fcn.10056980
mov ebx, 0xf
mov edi, 0x4d9efc
call fcn.10056980
mov ebx, 8
mov edi, 0x4dac5c
call fcn.10056980
mov ebx, 5
mov edi, 0x5451f7
call fcn.10056980
mov ebx, 8
mov edi, 0x545230
call fcn.10056980
mov edi, 0x5a52e9
call fcn.10056980
mov edi, dword [0x100cb10c]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4d0e09
add edi, 0x81
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4d0e09], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4d0e09
call esi
mov edi, dword [0x100cb10c]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4d9f55
add edi, 0xa1
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4d9f55], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4d9f55
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 0x69d
push 0x6097b0
call esi
push 0x69d
push 0x90
push 0x6097b0
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x108]
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push ecx
push 0x69d
push 0x6097b0
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57bf78
call esi
mov eax, 0x90909090
mov ecx, 0x57bf78
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57bf78
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57c125
call esi
mov eax, 0x90909090
mov ecx, 0x57c125
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57c125
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57be80
call esi
mov eax, 0x90909090
mov ecx, 0x57be80
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57be80
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57c057
call esi
mov eax, 0x90909090
mov ecx, 0x57c057
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57c057
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57bf0e
call esi
mov eax, 0x90909090
mov ecx, 0x57bf0e
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57bf0e
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57c0bb
call esi
mov eax, 0x90909090
mov ecx, 0x57c0bb
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57c0bb
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57aba9
call esi
mov eax, 0x90909090
mov ecx, 0x57aba9
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57aba9
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57acbf
call esi
mov eax, 0x90909090
mov ecx, 0x57acbf
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57acbf
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57ad03
call esi
mov eax, 0x90909090
mov ecx, 0x57ad03
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57ad03
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57ad47
call esi
mov eax, 0x90909090
mov ecx, 0x57ad47
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57ad47
call esi
lea esi, [ebx - 3]
mov ebx, 0xd46c84
call fcn.100560c0
push 0x55c790
push 0x55c782
mov bl, 0xe9
call fcn.10056900
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
lea edx, [ebp - 0x108]
push edx
push 0x40
push 1
push 0x5c914e
call edi
mov byte [0x5c914e], 0
lea eax, [ebp - 0x108]
mov ecx, dword [ebp - 0x108]
push eax
push ecx
push 1
push 0x5c914e
call edi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 0x14
push 0x63e908
call edi
mov eax, 0x90909090
mov ecx, 0x63e908
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 0x14
push 0x63e908
call edi
push 0x644537
push 0x64452a
call fcn.10056900
push 0x5db408
push 0x5db322
call fcn.10056900
push 0x720894
push 0x71b1a3
call fcn.10056900
push 0x95dfd3
push 0x95dfbe
call fcn.10056900
add esp, 0x20
call fcn.10025680
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x59c6fe
call edi
lea eax, [ebp - 0x108]
push eax
mov dword [0x59c6fe], 0
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x59c6fe
call edi
push 0x100ce3e0
lea eax, [esi + 0x66]
call fcn.10056ab0
push 0x100ce5c0
lea eax, [esi + 0x67]
call fcn.10056ab0
push 0x100ce4d0
lea eax, [esi + 0x65]
call fcn.10056ab0
mov esi, dword [0x100cb10c]
add esp, 0xc
lea edx, [ebp - 0x10c]
push edx
push 0x40
push 0x20
push 0xe611b2
add esi, 0x45
call edi
push 0x20
push esi
push 0xe611b2
call sub.MSVCR100.dll_memcpy
mov ecx, dword [ebp - 0x10c]
add esp, 0xc
lea eax, [ebp - 0x10c]
push eax
push ecx
push 0x20
push 0xe611b2
call edi
mov esi, dword [0x100cb10c]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 0x11
push 0xe61f70
call edi
mov ecx, dword [esi + 0x70]
mov eax, 0xe61f70
mov dword [eax], ecx
mov edx, dword [esi + 0x74]
mov dword [eax + 4], edx
mov ecx, dword [esi + 0x78]
mov dword [eax + 8], ecx
mov edx, dword [esi + 0x7c]
mov dword [eax + 0xc], edx
mov cl, byte [esi + 0x80]
lea edx, [ebp - 0x108]
push edx
mov byte [eax + 0x10], cl
mov eax, dword [ebp - 0x108]
push eax
push 0x11
push 0xe61f70
call edi
push fcn.100512d0
push 0x65fd79
or bl, 0xff
call fcn.10056900
push 0x10025a60
push 0x5b96e8
mov bl, 0xe8
call fcn.10056900
mov esi, dword [0x100cb10c]
add esp, 0x10
lea eax, [esi + 0x450]
call fcn.10022710
lea eax, [esi + 0x37e0]
call fcn.10022770
lea eax, [esi + 0x6b70]
call fcn.100227d0
lea eax, [esi + 0x9f00]
call fcn.100211f0
lea edx, [esi + 0xa98c]
call fcn.10024de0
lea eax, [esi + 0x14d9c]
call fcn.10019960
mov esi, dword [0x100cb10c]
lea eax, [esi + 0x1a155c]
call fcn.1000f070
lea eax, [esi + 0x1a1610]
call fcn.1000fd60
lea eax, [esi + 0x1a3870]
call fcn.10010c50
mov ebx, 1
test byte [0x101ddda0], bl
jne 0x100362e6
or dword [0x101ddda0], ebx
call fcn.10005f60
push 0x1005a8b0
call fcn.10058df0
mov esi, dword [0x100cb10c]
add esp, 4
lea edx, [esi + 0x2e3dc]
push 0x101ddda4
call fcn.100061c0
test byte [0x101ddda0], bl
jne 0x10036316
or dword [0x101ddda0], ebx
call fcn.10005f60
push 0x1005a8b0
call fcn.10058df0
add esp, 4
mov edx, dword [0x100cb10c]
add edx, 0xe7c9c
push 0x101ddda4
call fcn.100063c0
mov esi, dword [0x100cb10c]
lea eax, [esi + 0x1a66b8]
call fcn.10011730
lea eax, [esi + 0x1a3fa8]
call fcn.10031b50
mov esi, dword [0x100cb10c]
lea eax, [esi + 0x1a7270]
call fcn.10022a40
lea edx, [esi + 0x1abbe0]
call fcn.10023520
lea eax, [esi + 0x1ada58]
call fcn.10011f75
mov eax, dword [0x100cb10c]
add eax, 0x1acea0
call fcn.1000dc50
mov eax, dword [0x100cb10c]
add eax, 0x1af290
call fcn.10023800
mov eax, dword [0x100cb10c]
add eax, 0x1b96a0
call fcn.1000f300
mov eax, dword [0x100cb10c]
add eax, 0x1bec90
call fcn.1001cd70
mov esi, dword [0x100cb10c]
lea ecx, [esi + 0x1c6990]
call fcn.10010c00
lea eax, [esi + 0x1c6fd0]
call fcn.10023430
lea eax, [esi + 0x1c7930]
call fcn.10037bd0
mov eax, dword [0x100cb10c]
add eax, 0x1d53f0
call fcn.10012fe0
mov esi, dword [0x100cb10c]
lea edx, [esi + 0x1e8c70]
call fcn.1001aa70
lea eax, [esi + 0x1ef9d0]
call fcn.10033fa0
lea eax, [esi + 0x1efb50]
call fcn.1001b500
mov eax, dword [0x100cb10c]
add eax, 0x264e50
call fcn.1001b570
mov eax, dword [0x100cb10c]
add eax, 0x323530
call fcn.1004d540
mov eax, dword [0x100cb10c]
add eax, 0x32a290
call fcn.100104e0
mov esi, dword [0x100cb10c]
lea ecx, [esi + 0x32f290]
call fcn.10001350
lea eax, [esi + 0x3326e8]
call fcn.10001470
test byte [0x101ddd88], bl
jne 0x10036471
or dword [0x101ddd88], ebx
call fcn.10003950
push 0x1005a8c0
call fcn.10058df0
add esp, 4
mov eax, dword [0x100cb10c]
add eax, 0x332d28
push 0x101ddd8c
call fcn.10003b50
push 0
push str.DataEnc1.dat
call fcn.1004bf80
push ebx
push str.DataDec2.dat
call fcn.1004bf80
mov eax, dword [0x100cb10c]
test byte [eax + 4], bl
je 0x100364c2
add eax, 5
push eax
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x100364bd
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x100cb10c]
test byte [eax + 4], 2
je 0x1003650e
add eax, 0x45
push eax
lea ecx, [ebp - 0x104]
push str.XTEAM_MAIN_10405__s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x104]
push edx
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x10035263
lea eax, [ebp - 0x104]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
call fcn.10050980
call fcn.10050a90
call fcn.10050bc0
call fcn.10050cf0
call fcn.10050e20
call fcn.10050f50
call fcn.10051080
call fcn.100511b0
call fcn.1002edf0
push 0x1004f2c0
push 0x5bafab
mov bl, 0xe8
call fcn.10056900
push 0x1004f250
push 0x7c5db0
call fcn.10056900
add esp, 0x10
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push 4
push 0x597694
call edi
lea edx, [ebp - 0x10c]
push edx
mov dword [0x597694], 0x4b0
mov eax, dword [ebp - 0x10c]
push eax
push 4
push 0x597694
call edi
mov eax, dword [0x100cb10c]
mov esi, 1
cmp dword [eax + 0x39c], esi
jne 0x100365c9
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
push 0x10054d70
push 0x4d70d4
call fcn.10056900
mov eax, dword [0x100cb10c]
add esp, 0x10
cmp dword [eax + 0x3a4], esi
jne 0x100365e0
call fcn.1000bbe0
call fcn.1000c020
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x3a4], 0
jne 0x100365fb
cmp dword [eax + 0x3a0], esi
jne 0x10036608
call fcn.1000bd50
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x3a0], esi
jne 0x10036608
call fcn.10053750
push 0x1001cdf0
push 0x5d0b94
mov bl, 0xe8
call fcn.10056900
xor ebx, ebx
add esp, 8
mov dword [0x100cd0ac], ebx
mov dword [0x100cd0b0], ebx
mov byte [0x100cd0b4], bl
call fcn.1000ac20
mov ecx, dword [0x100cb10c]
cmp dword [ecx + 0x374], ebx
jne 0x10036648
call fcn.10003720
mov edx, dword [0x100cb10c]
cmp dword [edx + 0x37c], ebx
jne 0x10036688
call fcn.1004d8e0
call fcn.1004d1d0
call fcn.1004ee70
push 0x100138f0
push 0x56f476
mov bl, 0xe8
call fcn.10056900
push 0x100138f0
push 0x5ebbe6
call fcn.10056900
add esp, 0x10
call fcn.1002cc40
call fcn.1002cd10
call fcn.1002cd90
call fcn.1004f460
call fcn.10052500
push 0x10052fd0
push 0x4d13c2
mov bl, 0xe9
call fcn.10056900
push 0x10053180
push 0x4d2782
call fcn.10056900
push 0x10053250
push 0x830c3a
call fcn.10056900
add esp, 0x18
call fcn.1000b120
xor eax, eax
mov dword [0x100cd118], eax
mov byte [0x100cd104], al
or eax, 0xffffffff
mov dword [0x100cd10c], eax
mov dword [0x100cd114], eax
mov dword [0x100cd108], eax
call fcn.10025f40
call fcn.1004f380
call fcn.100123d0
lea eax, [ebp - 0x10c]
push eax
push 0x40
push 5
push 0x502a95
call edi
mov eax, 0x90909090
mov ecx, 0x502a95
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x10c]
lea ecx, [ebp - 0x10c]
push ecx
push edx
push 5
push 0x502a95
call edi
push 0x100105b0
push 0x502a95
mov bl, 0xe8
call fcn.10056900
mov esi, 5
mov ebx, 0xd46c8c
call fcn.100560c0
push 0x10052fc0
push 0x835234
mov bl, 0xe9
call fcn.10056900
add esp, 0x10
call fcn.100184b0
call fcn.100095e0
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x364], 0
jne 0x10036790
mov byte [0x101ddcb0], 1
push 0x1004af00
push 0x842460
mov bl, 0xe8
call fcn.10056900
push 0x1004b880
push 0x7e4641
or bl, 0xff
call fcn.10056900
push 0x1004b910
push 0x7e4753
or bl, 0xff
call fcn.10056900
push 0x1004b860
push 0x7e46a0
mov bl, 0xe9
call fcn.10056900
add esp, 0x20
call fcn.10057f00
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.100583e0
push 0x100117c0
push 0x100d5fc8
call fcn.100579b0
push 0x100119d0
push 0x100d5fcc
call fcn.100579b0
call fcn.10057f70
mov ecx, dword [0x100cb10c]
mov esi, 1
cmp dword [ecx + 0x324], esi
jne 0x10036825
call fcn.10022b20
call fcn.10039170
mov edx, dword [0x100cb10c]
xor ebx, ebx
cmp dword [edx + 0x370], ebx
jne 0x1003683f
call fcn.1000e720
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x36c], ebx
jne 0x10036884
push 0x10011f50
push 0x5d01d0
mov bl, 0xe9
call fcn.10056900
push 0x10011c80
push 0x50d905
mov bl, 0xe8
call fcn.10056900
push 0x10011e90
push 0x5f91c2
mov bl, 0xe9
call fcn.10056900
add esp, 0x18
xor ebx, ebx
call fcn.10022180
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x304], esi
jne 0x100368a0
call fcn.10031350
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x2d0], esi
jne 0x10036b30
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89c6
call edi
lea edx, [ebp - 0x10c]
push edx
mov byte [0x5b89c6], bl
mov eax, dword [ebp - 0x10c]
push eax
push esi
push 0x5b89c6
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89cc
call edi
lea edx, [ebp - 0x10c]
push edx
mov byte [0x5b89cc], bl
mov eax, dword [ebp - 0x10c]
push eax
push esi
push 0x5b89cc
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89d2
call edi
lea edx, [ebp - 0x10c]
push edx
mov byte [0x5b89d2], bl
mov eax, dword [ebp - 0x10c]
push eax
push esi
push 0x5b89d2
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89d8
call edi
lea edx, [ebp - 0x10c]
push edx
mov byte [0x5b89d8], bl
mov eax, dword [ebp - 0x10c]
push eax
push esi
push 0x5b89d8
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89de
call edi
lea edx, [ebp - 0x10c]
push edx
mov byte [0x5b89de], bl
mov eax, dword [ebp - 0x10c]
push eax
push esi
push 0x5b89de
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89e4
call edi
lea edx, [ebp - 0x10c]
mov byte [0x5b89e4], bl
mov eax, dword [ebp - 0x10c]
push edx
push eax
push esi
push 0x5b89e4
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push 2
push 0x5b89ea
call edi
xor edx, edx
lea eax, [ebp - 0x10c]
push eax
mov word [0x5b89ea], dx
mov ecx, dword [ebp - 0x10c]
push ecx
push 2
push 0x5b89ea
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c6316
call edi
lea eax, [ebp - 0x10c]
push eax
mov byte [0x5c6316], bl
mov ecx, dword [ebp - 0x10c]
push ecx
push esi
push 0x5c6316
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c6329
call edi
lea eax, [ebp - 0x10c]
push eax
mov byte [0x5c6329], bl
mov ecx, dword [ebp - 0x10c]
push ecx
push esi
push 0x5c6329
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c633c
call edi
lea eax, [ebp - 0x10c]
push eax
mov byte [0x5c633c], bl
mov ecx, dword [ebp - 0x10c]
push ecx
push esi
push 0x5c633c
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c634f
call edi
lea eax, [ebp - 0x10c]
push eax
mov byte [0x5c634f], bl
mov ecx, dword [ebp - 0x10c]
push ecx
push esi
push 0x5c634f
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c6362
call edi
mov byte [0x5c6362], bl
mov ecx, dword [ebp - 0x10c]
lea eax, [ebp - 0x10c]
push eax
push ecx
push esi
push 0x5c6362
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c6375
call edi
lea eax, [ebp - 0x10c]
push eax
mov byte [0x5c6375], bl
mov ecx, dword [ebp - 0x10c]
push ecx
push esi
push 0x5c6375
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push 2
push 0x5c6388
call edi
xor eax, eax
lea ecx, [ebp - 0x10c]
push ecx
mov word [0x5c6388], ax
mov edx, dword [ebp - 0x10c]
push edx
push 2
push 0x5c6388
call edi
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x2c4], 3
jne 0x10036b6c
lea eax, [ebp - 0x108]
push eax
push 0x40
push esi
push 0x4030d4
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4030d4], 6
mov edx, dword [ebp - 0x108]
push edx
push esi
push 0x4030d4
call edi
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x2c4], 2
jne 0x10036ba8
lea eax, [ebp - 0x110]
push eax
push 0x40
push esi
push 0x4030d4
call edi
lea ecx, [ebp - 0x110]
push ecx
mov byte [0x4030d4], 5
mov edx, dword [ebp - 0x110]
push edx
push esi
push 0x4030d4
call edi
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x2c4], esi
jne 0x10036be3
lea eax, [ebp - 0x118]
push eax
push 0x40
push esi
push 0x4030d4
call edi
lea ecx, [ebp - 0x118]
push ecx
mov byte [0x4030d4], 4
mov edx, dword [ebp - 0x118]
push edx
push esi
push 0x4030d4
call edi
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x1d4], esi
jne 0x10036cda
lea esi, [eax + 0x1d8]
lea eax, [ebp - 0x114]
push eax
push 0x40
push 4
push 0x954149
call edi
lea ecx, [ebp - 0x114]
push ecx
mov dword [0x954149], esi
mov edx, dword [ebp - 0x114]
push edx
push 4
push 0x954149
call edi
mov esi, dword [0x100cb10c]
lea eax, [ebp - 0x114]
push eax
push 0x40
push 4
push 0x954116
add esi, 0x200
call edi
lea ecx, [ebp - 0x114]
push ecx
mov dword [0x954116], esi
mov edx, dword [ebp - 0x114]
push edx
push 4
push 0x954116
call edi
mov esi, dword [0x100cb10c]
lea eax, [ebp - 0x114]
push eax
push 0x40
push 4
push 0x9540e3
add esi, 0x228
call edi
lea ecx, [ebp - 0x114]
push ecx
mov dword [0x9540e3], esi
mov edx, dword [ebp - 0x114]
push edx
push 4
push 0x9540e3
call edi
mov esi, dword [0x100cb10c]
lea eax, [ebp - 0x114]
push eax
push 0x40
push 4
push 0x9540ad
add esi, 0x250
call edi
lea ecx, [ebp - 0x114]
push ecx
mov dword [0x9540ad], esi
mov edx, dword [ebp - 0x114]
push edx
push 4
push 0x9540ad
call edi
mov eax, dword [0x100cb10c]
movzx esi, word [eax + 0x420]
lea eax, [ebp - 0x114]
push eax
push 0x40
push 2
push 0x405b7c
call edi
lea ecx, [ebp - 0x114]
push ecx
mov word [0x405b7c], si
mov edx, dword [ebp - 0x114]
push edx
push 2
push 0x405b7c
call edi
mov eax, dword [0x100cb10c]
movzx esi, word [eax + 0x420]
lea ecx, [ebp - 0x114]
push ecx
push 0x40
push 2
push 0x40cc40
call edi
lea edx, [ebp - 0x114]
push edx
mov word [0x40cc40], si
mov eax, dword [ebp - 0x114]
push eax
push 2
push 0x40cc40
call edi
mov ecx, dword [0x100cb10c]
cmp dword [ecx + 0x424], 1
jne 0x10036d8f
push 9
mov esi, 0x7af176
call fcn.10055f90
push 9
mov esi, 0x7af416
call fcn.10055f90
push 9
mov esi, 0x7af796
call fcn.10055f90
push 9
mov esi, 0x7b0316
call fcn.10055f90
add esp, 0x10
mov edx, dword [0x100cb10c]
mov esi, 1
cmp dword [edx + 0x43c], esi
jne 0x10036e6f
lea eax, [ebp - 0x118]
push eax
push 0x40
push 0x1db
push 0x853770
call edi
push 0x1db
push 0x90
push 0x853770
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x118]
add esp, 0xc
lea ecx, [ebp - 0x118]
push ecx
push edx
push 0x1db
push 0x853770
call edi
lea eax, [ebp - 0x118]
push eax
push 0x40
push 0x5a
push 0x853710
call edi
push 0x5a
push 0x90
push 0x853710
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x118]
add esp, 0xc
lea ecx, [ebp - 0x118]
push ecx
push edx
push 0x5a
push 0x853710
call edi
lea eax, [ebp - 0x118]
push eax
push 0x40
push 0x273
push 0x7d31f0
call edi
push 0x273
push 0x90
push 0x7d31f0
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x118]
add esp, 0xc
lea ecx, [ebp - 0x118]
push ecx
push edx
push 0x273
push 0x7d31f0
call edi
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x440], esi
jne 0x100370af
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push esi
push 0x501957
call edi
lea edx, [ebp - 0x110]
push edx
mov byte [0x501957], bl
mov eax, dword [ebp - 0x110]
push eax
push esi
push 0x501957
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54eae1
call edi
mov ecx, 0x54eae1
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54fc92
call edi
mov ecx, 0x54fc92
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push esi
push 0x50226b
call edi
lea edx, [ebp - 0x110]
push edx
mov byte [0x50226b], bl
mov eax, dword [ebp - 0x110]
push eax
push esi
push 0x50226b
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54eca3
call edi
mov ecx, 0x54eca3
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54fcec
call edi
mov ecx, 0x54fcec
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push esi
push 0x502c4d
call edi
lea edx, [ebp - 0x110]
push edx
mov byte [0x502c4d], bl
mov eax, dword [ebp - 0x110]
push eax
push esi
push 0x502c4d
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54ed6d
call edi
mov ecx, 0x54ed6d
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54fd5f
call edi
mov ecx, 0x54fd5f
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54fe3e
call edi
mov ecx, 0x54fe3e
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54fd23
call edi
mov ecx, 0x54fd23
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
mov ecx, dword [0x100cb10c]
cmp dword [ecx + 0x444], ebx
jne 0x1003714d
lea edx, [ebp - 0x10c]
push edx
push 0x40
push 0x15e
push 0x944e50
call edi
push 0x15e
push 0x90
push 0x944e50
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x10c]
add esp, 0xc
lea eax, [ebp - 0x10c]
push eax
push ecx
push 0x15e
push 0x944e50
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push 0x145
push 0x661700
call edi
push 0x145
push 0x90
push 0x661700
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x10c]
add esp, 0xc
lea eax, [ebp - 0x10c]
push eax
push ecx
push 0x145
push 0x661700
call edi
mov edx, dword [0x100cb10c]
cmp dword [edx + 0x448], ebx
jne 0x1003723f
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x830ba6
call edi
mov eax, 0x90909090
mov ecx, 0x830ba6
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x830ba6
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x832ed8
call edi
mov eax, 0x90909090
mov ecx, 0x832ed8
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x832ed8
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x83279c
call edi
mov eax, 0x90909090
mov ecx, 0x83279c
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x83279c
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x8329a2
call edi
mov eax, 0x90909090
mov ecx, 0x8329a2
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x8329a2
call edi
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x44c], ebx
jne 0x10037280
mov esi, 5
mov ebx, 0x6e899d
call fcn.100560c0
mov ebx, 0x7126fa
call fcn.100560c0
mov ebx, 0x5b768f
call fcn.100560c0
mov ebx, 0x5b770c
call fcn.100560c0
xor ebx, ebx
mov esi, 1
mov ecx, dword [0x100cb10c]
cmp dword [ecx + 0x2d4], esi
jne 0x100372bc
lea edx, [ebp - 0x134]
push edx
push 0x40
push esi
push 0x5528a0
call edi
lea eax, [ebp - 0x134]
push eax
mov byte [0x5528a0], 0xc3
mov ecx, dword [ebp - 0x134]
push ecx
push esi
push 0x5528a0
call edi
cmp dword [0x100bc080], ebx
je 0x1003730a
lea edx, [ebp - 0x13c]
push edx
push 0x40
push 0x11e
push 0x771310
call edi
push 0x11e
push 0x90
push 0x771310
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x13c]
add esp, 0xc
lea eax, [ebp - 0x13c]
push eax
push ecx
push 0x11e
push 0x771310
call edi
cmp dword [0x100bc07c], ebx
je 0x10037358
lea edx, [ebp - 0x12c]
push edx
push 0x40
push 0x10c50
push 0x74cd30
call edi
push 0x10c50
push 0x90
push 0x74cd30
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x12c]
add esp, 0xc
lea eax, [ebp - 0x12c]
push eax
push ecx
push 0x10c50
push 0x74cd30
call edi
cmp dword [0x100bc078], ebx
je 0x100373f0
lea edx, [ebp - 0x128]
push edx
push 0x40
push 0x2fe2
push 0x626190
call edi
push 0x2fe2
push 0x90
push 0x626190
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x128]
add esp, 0xc
lea eax, [ebp - 0x128]
push eax
push ecx
push 0x2fe2
push 0x626190
call edi
lea edx, [ebp - 0x128]
push edx
push 0x40
push 0x87a2
push 0x72d1b0
call edi
push 0x87a2
push 0x90
push 0x72d1b0
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x128]
add esp, 0xc
lea eax, [ebp - 0x128]
push eax
push ecx
push 0x87a2
push 0x72d1b0
call edi
mov edx, dword [0x100cb10c]
cmp dword [edx + 0x2cc], esi
jne 0x10037447
lea eax, [ebp - 0x120]
push eax
push 0x40
push esi
push 0x8193fe
call edi
lea ecx, [ebp - 0x120]
push ecx
mov byte [0x8193fe], 0x6e
mov edx, dword [ebp - 0x120]
push edx
push esi
push 0x8193fe
call edi
push 0x100351d0
push 0x7d3a4c
mov bl, 0xe8
call fcn.10056900
add esp, 8
mov esi, 1
xor ebx, ebx
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x354], ebx
jne 0x1003749a
lea ecx, [ebp - 0x120]
push ecx
push 0x40
push 0x69d
push 0x6097b0
call edi
push 0x69d
push 0x90
push 0x6097b0
call sub.MSVCR100.dll_memset
mov eax, dword [ebp - 0x120]
add esp, 0xc
lea edx, [ebp - 0x120]
push edx
push eax
push 0x69d
push 0x6097b0
call edi
mov ecx, dword [0x100cb10c]
cmp dword [ecx + 0x358], esi
jne 0x100374f1
lea edx, [ebp - 0x124]
push edx
push 0x40
push esi
push 0x7c446c
call edi
lea eax, [ebp - 0x124]
push eax
mov byte [0x7c446c], 0x78
mov ecx, dword [ebp - 0x124]
push ecx
push esi
push 0x7c446c
call edi
push 0x7c5af2
push 0x7c5a88
mov bl, 0xe9
call fcn.10056900
add esp, 8
mov esi, 1
xor ebx, ebx
mov edx, dword [0x100cb10c]
cmp dword [edx + 0x35c], esi
jne 0x1003753c
lea eax, [ebp - 0x124]
push eax
push 0x40
push 0x30
push 0x62f876
call edi
push 0x30
push 0x90
push 0x62f876
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x124]
add esp, 0xc
lea ecx, [ebp - 0x124]
push ecx
push edx
push 0x30
push 0x62f876
call edi
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x384], esi
jne 0x10037564
push 0x100351c0
push 0x83693c
mov bl, 0xe9
call fcn.10056900
add esp, 8
mov esi, 1
xor ebx, ebx
mov ecx, dword [0x100cb10c]
cmp dword [ecx + 0x388], esi
jne 0x1003758d
push 0x100351b0
push 0x8369af
mov bl, 0xe9
call fcn.10056900
add esp, 8
mov esi, 1
xor ebx, ebx
mov edx, dword [0x100cb10c]
cmp dword [edx + 0x38c], esi
jne 0x100375b6
push 0x100351a0
push 0x836a23
mov bl, 0xe9
call fcn.10056900
add esp, 8
mov esi, 1
xor ebx, ebx
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x390], esi
jne 0x100375de
push 0x10035170
push 0x77ebb0
mov bl, 0xe9
call fcn.10056900
add esp, 8
mov esi, 1
xor ebx, ebx
mov ecx, dword [0x100cb10c]
cmp dword [ecx + 0x394], esi
jne 0x10037607
push 0x10035180
push 0x77ec59
mov bl, 0xe9
call fcn.10056900
add esp, 8
mov esi, 1
xor ebx, ebx
mov edx, dword [0x100cb10c]
cmp dword [edx + 0x398], esi
jne 0x10037630
push 0x10035190
push 0x77ece2
mov bl, 0xe9
call fcn.10056900
add esp, 8
mov esi, 1
xor ebx, ebx
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x368], ebx
jne 0x10037665
push 0x1002f090
push 0x61041c
mov bl, 0xe8
call fcn.10056900
push 0x1002f090
push 0x5666c1
call fcn.10056900
add esp, 0x10
mov esi, 1
mov ecx, dword [0x100cb10c]
cmp dword [ecx + 0x340], esi
jne 0x100376a1
lea edx, [ebp - 0x138]
push edx
push 0x40
push esi
push 0x5528a0
call edi
lea eax, [ebp - 0x138]
push eax
mov byte [0x5528a0], 0xc3
mov ecx, dword [ebp - 0x138]
push ecx
push esi
push 0x5528a0
call edi
mov edx, dword [0x100cb10c]
cmp dword [edx + 0x360], esi
jne 0x100376d5
push 0xff
mov esi, 0x7d4001
call fcn.10055f90
push 0xff
mov esi, 0x7d4110
call fcn.10055f90
add esp, 8
mov esi, 1
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x380], esi
jne 0x1003770a
mov esi, 5
mov ebx, 0xd46c8c
call fcn.100560c0
push 0x10052fc0
push 0x835234
mov bl, 0xe9
call fcn.10056900
add esp, 8
mov esi, 1
mov ecx, dword [0x100cb10c]
cmp dword [ecx + 0x42c], esi
jne 0x10037746
lea edx, [ebp - 0x130]
push edx
push 0x40
push esi
push 0x4215a7
call edi
lea eax, [ebp - 0x130]
push eax
mov byte [0x4215a7], 0xeb
mov ecx, dword [ebp - 0x130]
push ecx
push esi
push 0x4215a7
call edi
mov edx, dword [0x100cb10c]
cmp dword [edx + 0x430], esi
jne 0x10037782
lea eax, [ebp - 0x11c]
push eax
push 0x40
push esi
push 0x507aeb
call edi
lea ecx, [ebp - 0x11c]
push ecx
mov byte [0x507aeb], 0x72
mov edx, dword [ebp - 0x11c]
push edx
push esi
push 0x507aeb
call edi
mov eax, dword [0x100cb10c]
cmp dword [eax + 0x434], esi
jne 0x100377bd
lea ecx, [ebp - 0x11c]
push ecx
push 0x40
push esi
push 0x507afd
call edi
lea edx, [ebp - 0x11c]
push edx
mov byte [0x507afd], 0xeb
mov eax, dword [ebp - 0x11c]
push eax
push esi
push 0x507afd
call edi
push 0x1000ac00
push 0x4d7cf8
mov bl, 0xe9
call fcn.10056900
push 0x4f9238
push 0x4f921d
call fcn.10056900
push 0x63f058
push 0x63f040
call fcn.10056900
push 0x100551a0
push 0x4f131e
mov bl, 0xe8
call fcn.10056900
add esp, 0x20
call fcn.10033d00
call fcn.10019e80
call fcn.10043c90
call fcn.10047dc0
call fcn.10049570
call fcn.10002700
call fcn.10041f40
call fcn.10013c60
call fcn.10049f20
call fcn.10004f40
mov ebx, 1
test byte [0x101ddd88], bl
jne 0x10037857
or dword [0x101ddd88], ebx
call fcn.10003950
push 0x1005a8c0
call fcn.10058df0
add esp, 4
call fcn.10003eb0
test byte [0x101dde54], bl
jne 0x10037881
or dword [0x101dde54], ebx
push 0x1005aed0
mov dword [0x101dde58], 0x1005efc0
call fcn.10058df0
add esp, 4
mov eax, 0x101dde58
call fcn.10040180
test byte [0x101dde08], bl
jne 0x100378b6
or dword [0x101dde08], ebx
push 0x1005aee0
mov dword [0x101dde0c], 0x1005f2e0
mov dword [0x101dde10], ebx
call fcn.10058df0
add esp, 4
push 0x1004a830
push 0x5a2304
mov bl, 0xe9
call fcn.10056900
push 0x1004aa50
push 0x85c99b
mov bl, 0xe8
call fcn.10056900
push 0x1004aa20
push 0x8676b3
call fcn.10056900
push 0x1004acd0
push 0x8678ea
call fcn.10056900
mov ebx, 1
add esp, 0x20
test byte [0x101ddddc], bl
jne 0x10037923
or dword [0x101ddddc], ebx
push 0x1005a950
mov dword [0x101ddde0], 0x1005f218
call fcn.10058df0
add esp, 4
call fcn.1004a4e0
test byte [0x101ddda0], bl
jne 0x10037948
or dword [0x101ddda0], ebx
call fcn.10005f60
push 0x1005a8b0
call fcn.10058df0
add esp, 4
push 0x100067b0
push 0x61041c
mov bl, 0xe8
call fcn.10056900
push 0x100067b0
push 0x5666c1
call fcn.10056900
add esp, 0x10
pop edi
mov eax, 1
pop esi
pop ebx
test byte [0x101dde18], al
jne 0x10037993
or dword [0x101dde18], eax
call fcn.10043ed0
push 0x1005aef0
call fcn.10058df0
add esp, 4
call fcn.10044e30
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10058d40
mov esp, ebp
pop ebp
ret