Function at 0x100be6e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1013e00c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push edi
push eax
push 0x40
push 4
push 0xd27bfc
mov edi, ecx
call esi
lea eax, [ebp - 8]
mov dword [0xd27bfc], 0x42140000
push eax
push dword [ebp - 8]
push 4
push 0xd27bfc
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd2570c
call esi
lea eax, [ebp - 8]
mov dword [0xd2570c], 0x451c4000
push eax
push dword [ebp - 8]
push 4
push 0xd2570c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0xd2c894
call esi
lea eax, [ebp - 8]
mov dword [0xd2c894], 0x451c4000
push eax
push dword [ebp - 8]
push 4
push 0xd2c894
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x48e201
call esi
lea eax, [ebp - 8]
mov dword [0x48e201], 0x102b6788
push eax
push dword [ebp - 8]
push 4
push 0x48e201
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77296a
call esi
lea eax, [ebp - 8]
mov dword [0x77296a], 0x102b6788
push eax
push dword [ebp - 8]
push 4
push 0x77296a
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7c70a0
call esi
lea eax, [ebp - 8]
mov dword [0x7c70a0], 0x102b6788
push eax
push dword [ebp - 8]
push 4
push 0x7c70a0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x85458f
call esi
lea eax, [ebp - 8]
mov dword [0x85458f], 0x102b6788
push eax
push dword [ebp - 8]
push 4
push 0x85458f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8cc615
call esi
lea eax, [ebp - 8]
mov dword [0x8cc615], 0x102b6788
push eax
push dword [ebp - 8]
push 4
push 0x8cc615
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x943c70
call esi
lea eax, [ebp - 8]
mov dword [0x943c70], 0x102b6788
push eax
push dword [ebp - 8]
push 4
push 0x943c70
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x62ca67
call esi
lea eax, [ebp - 8]
mov dword [0x62ca67], 0x102b6784
push eax
push dword [ebp - 8]
push 4
push 0x62ca67
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x62cac8
call esi
lea eax, [ebp - 8]
mov dword [0x62cac8], 0x102b6784
push eax
push dword [ebp - 8]
push 4
push 0x62cac8
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x62cb17
call esi
lea eax, [ebp - 8]
mov dword [0x62cb17], 0x102b6784
push eax
push dword [ebp - 8]
push 4
push 0x62cb17
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x574fcd
call esi
lea eax, [ebp - 8]
mov dword [0x574fcd], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x574fcd
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x57509b
call esi
lea eax, [ebp - 8]
mov dword [0x57509b], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x57509b
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x575245
call esi
lea eax, [ebp - 8]
mov dword [0x575245], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x575245
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x57527a
call esi
lea eax, [ebp - 8]
mov dword [0x57527a], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x57527a
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x57538e
call esi
lea eax, [ebp - 8]
mov dword [0x57538e], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x57538e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5753c3
call esi
lea eax, [ebp - 8]
mov dword [0x5753c3], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x5753c3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5754d7
call esi
lea eax, [ebp - 8]
mov dword [0x5754d7], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x5754d7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x57550c
call esi
lea eax, [ebp - 8]
mov dword [0x57550c], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x57550c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x57568e
call esi
lea eax, [ebp - 8]
mov dword [0x57568e], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x57568e
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x575756
call esi
lea eax, [ebp - 8]
mov dword [0x575756], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x575756
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5758c5
call esi
lea eax, [ebp - 8]
mov dword [0x5758c5], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x5758c5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5758fa
call esi
lea eax, [ebp - 8]
mov dword [0x5758fa], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x5758fa
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x58885c
call esi
mov dword [0x58885c], 0x102b6780
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x58885c
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b9b61
call esi
lea eax, [ebp - 8]
mov dword [0x5b9b61], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x5b9b61
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b9c67
call esi
lea eax, [ebp - 8]
mov dword [0x5b9c67], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x5b9c67
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5dd586
call esi
lea eax, [ebp - 8]
mov dword [0x5dd586], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x5dd586
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x62c9f7
call esi
lea eax, [ebp - 8]
mov dword [0x62c9f7], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x62c9f7
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x63d256
call esi
lea eax, [ebp - 8]
mov dword [0x63d256], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x63d256
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x63d497
call esi
lea eax, [ebp - 8]
mov dword [0x63d497], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x63d497
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7ef34a
call esi
lea eax, [ebp - 8]
mov dword [0x7ef34a], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x7ef34a
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81b021
call esi
lea eax, [ebp - 8]
mov dword [0x81b021], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x81b021
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81b050
call esi
lea eax, [ebp - 8]
mov dword [0x81b050], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x81b050
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81b073
call esi
lea eax, [ebp - 8]
mov dword [0x81b073], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x81b073
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81b0da
call esi
lea eax, [ebp - 8]
mov dword [0x81b0da], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x81b0da
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x81b106
call esi
lea eax, [ebp - 8]
mov dword [0x81b106], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x81b106
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82ac8b
call esi
lea eax, [ebp - 8]
mov dword [0x82ac8b], 0x102b6780
push eax
push dword [ebp - 8]
push 4
push 0x82ac8b
call esi
push 0x100be3a0
push 0x4d8514
push 0xe9
call fcn.100c88d0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x420260
call esi
lea eax, [ebp - 8]
push eax
lea esi, [edi + 0x18]
mov dword [0x420260], esi
push dword [ebp - 8]
push 4
push 0x420260
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x42053f
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x42053f], esi
push eax
push dword [ebp - 8]
push 4
push 0x42053f
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b1e7
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x82b1e7], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b1e7
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b2b8
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x82b2b8], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b2b8
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b3a4
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x82b3a4], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b3a4
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8b4fad
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x8b4fad], esi
push eax
push dword [ebp - 8]
push 4
push 0x8b4fad
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8b50cd
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x8b50cd], esi
push eax
push dword [ebp - 8]
push 4
push 0x8b50cd
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d146e
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x4d146e], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d146e
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7199
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x4d7199], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d7199
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d7a31
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x4d7a31], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d7a31
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d990f
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x4d990f], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d990f
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db1bd
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db1bd], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db1bd
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db242
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db242], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db242
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db335
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db335], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db335
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db3ba
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db3ba], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db3ba
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db480
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db480], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db480
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db4c0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db4c0], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db4c0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db4e8
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db4e8], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db4e8
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db547
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db547], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db547
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db5d7
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db5d7], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db5d7
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db63b
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db63b], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db63b
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5db69f
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x5db69f], esi
push eax
push dword [ebp - 8]
push 4
push 0x5db69f
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x596b8b
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x596b8b], esi
push eax
push dword [ebp - 8]
push 4
push 0x596b8b
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6387b9
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [0x6387b9], esi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x6387b9
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x779a7c
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x779a7c], esi
push eax
push dword [ebp - 8]
push 4
push 0x779a7c
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x779c59
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x779c59], esi
push eax
push dword [ebp - 8]
push 4
push 0x779c59
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77a648
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x77a648], esi
push eax
push dword [ebp - 8]
push 4
push 0x77a648
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x787a60
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x787a60], esi
push eax
push dword [ebp - 8]
push 4
push 0x787a60
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7918b2
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x7918b2], esi
push eax
push dword [ebp - 8]
push 4
push 0x7918b2
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b940
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x82b940], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b940
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x88e320
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x88e320], esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push dword [ebp - 8]
push 4
push 0x88e320
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x420277
call esi
lea eax, [ebp - 8]
push eax
lea esi, [edi + 0x20]
mov dword [0x420277], esi
push dword [ebp - 8]
push 4
push 0x420277
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x420553
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x420553], esi
push eax
push dword [ebp - 8]
push 4
push 0x420553
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7c0565
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x7c0565], esi
push eax
push dword [ebp - 8]
push 4
push 0x7c0565
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x80f905
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x80f905], esi
push eax
push dword [ebp - 8]
push 4
push 0x80f905
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b391
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x82b391], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b391
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b320
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x82b320], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b320
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b0dd
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x82b0dd], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b0dd
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8b4fbf
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x8b4fbf], esi
push eax
push dword [ebp - 8]
push 4
push 0x8b4fbf
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8b50df
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x8b50df], esi
push eax
push dword [ebp - 8]
push 4
push 0x8b50df
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d1496
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x4d1496], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d1496
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x596b97
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x596b97], esi
push eax
push dword [ebp - 8]
push 4
push 0x596b97
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6387f2
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x6387f2], esi
push eax
push dword [ebp - 8]
push 4
push 0x6387f2
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x63882a
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x63882a], esi
push eax
push dword [ebp - 8]
push 4
push 0x63882a
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x6388be
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x6388be], esi
push eax
push dword [ebp - 8]
push 4
push 0x6388be
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x779aa2
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x779aa2], esi
push eax
push dword [ebp - 8]
push 4
push 0x779aa2
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x779c7f
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x779c7f], esi
push eax
push dword [ebp - 8]
push 4
push 0x779c7f
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x77a66e
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x77a66e], esi
push eax
push dword [ebp - 8]
push 4
push 0x77a66e
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x787a95
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x787a95], esi
push eax
push dword [ebp - 8]
push 4
push 0x787a95
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x7918d8
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x7918d8], esi
push eax
push dword [ebp - 8]
push 4
push 0x7918d8
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82b965
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x82b965], esi
push eax
push dword [ebp - 8]
push 4
push 0x82b965
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x88e350
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
mov dword [0x88e350], esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push dword [ebp - 8]
push 4
push 0x88e350
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82abf4
call esi
lea eax, [ebp - 8]
push eax
lea esi, [edi + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [0x82abf4], esi
push dword [ebp - 8]
push 4
push 0x82abf4
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x82401b
call edi
lea eax, [ebp - 8]
mov dword [0x82401b], esi
push eax
push dword [ebp - 8]
push 4
push 0x82401b
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b97c4
call edi
lea eax, [ebp - 8]
mov dword [0x5b97c4], esi
push eax
push dword [ebp - 8]
push 4
push 0x5b97c4
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b9834
call edi
lea eax, [ebp - 8]
mov dword [0x5b9834], esi
push eax
push dword [ebp - 8]
push 4
push 0x5b9834
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x5b98ec
call edi
lea eax, [ebp - 8]
mov dword [0x5b98ec], esi
push eax
push dword [ebp - 8]
push 4
push 0x5b98ec
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8c2df7
call edi
lea eax, [ebp - 8]
mov dword [0x8c2df7], esi
push eax
push dword [ebp - 8]
push 4
push 0x8c2df7
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8c2e67
call edi
lea eax, [ebp - 8]
mov dword [0x8c2e67], esi
push eax
push dword [ebp - 8]
push 4
push 0x8c2e67
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8cc6fb
call edi
lea eax, [ebp - 8]
mov dword [0x8cc6fb], esi
push eax
push dword [ebp - 8]
push 4
push 0x8cc6fb
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8cc770
call edi
mov dword [0x8cc770], esi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x8cc770
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8d99a0
call edi
lea eax, [ebp - 8]
mov dword [0x8d99a0], esi
push eax
push dword [ebp - 8]
push 4
push 0x8d99a0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8d9a15
call edi
lea eax, [ebp - 8]
mov dword [0x8d9a15], esi
push eax
push dword [ebp - 8]
push 4
push 0x8d9a15
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8ef463
call edi
lea eax, [ebp - 8]
mov dword [0x8ef463], esi
push eax
push dword [ebp - 8]
push 4
push 0x8ef463
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8ef4d5
call edi
lea eax, [ebp - 8]
mov dword [0x8ef4d5], esi
push eax
push dword [ebp - 8]
push 4
push 0x8ef4d5
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8ef5ad
call edi
lea eax, [ebp - 8]
mov dword [0x8ef5ad], esi
push eax
push dword [ebp - 8]
push 4
push 0x8ef5ad
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x8ef642
call edi
lea eax, [ebp - 8]
mov dword [0x8ef642], esi
push eax
push dword [ebp - 8]
push 4
push 0x8ef642
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x914fb1
call edi
lea eax, [ebp - 8]
mov dword [0x914fb1], esi
push eax
push dword [ebp - 8]
push 4
push 0x914fb1
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x915026
call edi
lea eax, [ebp - 8]
mov dword [0x915026], esi
push eax
push dword [ebp - 8]
push 4
push 0x915026
call edi
push 0x100be3e0
push 0x86f25c
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x86f298
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x86f2d4
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x88d9f3
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x88da2f
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x88da79
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be3e0
push 0x88dabd
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x88db41
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x88db74
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x88dba7
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x88dbda
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x8dbf89
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be3e0
push 0x8dbfca
push 0xe8
call fcn.100c88d0
push 0x100be3e0
push 0x8dc00a
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7bf4e8
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7bf54f
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7bfddf
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7bfd44
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be560
push 0x7bfd8d
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7bfc87
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7bfcca
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7c0094
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7bffc1
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7c0029
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be560
push 0x7bfed2
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7bff2e
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7c02c0
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7c0225
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7c026e
push 0xe8
call fcn.100c88d0
push 0x100be560
push 0x7c0168
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be560
push 0x7c01ab
push 0xe8
call fcn.100c88d0
push 0x100be5e0
push 0x7bfbb3
push 0xe8
call fcn.100c88d0
push 0x100be5e0
push 0x7bfa42
push 0xe8
call fcn.100c88d0
push 0x100be5e0
push 0x7bfafe
push 0xe8
call fcn.100c88d0
push 0x100be5e0
push 0x7bf8c4
push 0xe8
call fcn.100c88d0
push 0x100be5e0
push 0x7bf968
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be460
push 0x7bf3e3
push 0xe8
call fcn.100c88d0
push 0x100bdb70
push 0x636420
push 0xe9
call fcn.100c88d0
push 0x100bdb80
push 0x636450
push 0xe9
call fcn.100c88d0
push 0x100be320
push 0x857746
push 0xe8
call fcn.100c88d0
push 0x100bc9c0
push 0x4d2180
push 0xe8
call fcn.100c88d0
push 0x100be690
push 0x4e7690
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be690
push 0x4e775e
push 0xe8
call fcn.100c88d0
add esp, 0xc
cmp dword [0x101eaee0], 0
pop edi
pop esi
jne 0x100bfd1c
push 0x10025b30
push 0x81a146
push 0xe8
call fcn.100c88d0
push 0x10025b30
push 0x81a199
push 0xe8
call fcn.100c88d0
push 0x100bdb90
push 0x819415
push 0xe8
call fcn.100c88d0
push 0x100bdc20
push 0x81aa9c
push 0xe8
call fcn.100c88d0
push 0x100bdc20
push 0x81aa42
push 0xe8
call fcn.100c88d0
push 0x100bdc20
push 0x81a9e8
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100bdc20
push 0x81a977
push 0xe8
call fcn.100c88d0
push 0x100bdc20
push 0x81a944
push 0xe8
call fcn.100c88d0
push 0x100bdc20
push 0x81a73d
push 0xe8
call fcn.100c88d0
push 0x100bdc20
push 0x81a6f4
push 0xe8
call fcn.100c88d0
add esp, 0x30
mov al, byte [0x101eb18e]
test al, al
jne 0x100bfdc0
push 0x100bdca0
push 0x943d7f
push 0xe8
call fcn.100c88d0
push 0x100bdd40
push 0x8240a9
push 0xe8
call fcn.100c88d0
push 0x100bdde0
push 0x945114
push 0xe8
call fcn.100c88d0
push 0x100bddb0
push 0x945180
push 0xe8
call fcn.100c88d0
push 0x100bde70
push 0x85c446
push 0xe8
call fcn.100c88d0
push 0x100bdef0
push 0x9448c2
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100bdef0
push 0x81944b
push 0xe8
call fcn.100c88d0
mov al, byte [0x101eb18e]
add esp, 0xc
cmp al, 1
jne 0x100bfddb
push 0x100bdef0
push 0x81944b
push 0xe8
call fcn.100c88d0
add esp, 0xc
push 0x100be1c0
push 0x7c57b9
push 0xe8
call fcn.100c88d0
push 0x100be200
push 0x4d7c0d
push 0xe8
call fcn.100c88d0
push 0x100be200
push 0x4d7c98
push 0xe8
call fcn.100c88d0
push 0x100be140
push 0x7d5e92
push 0xe8
call fcn.100c88d0
push 0x100be000
push 0x7d60b0
push 0xe8
call fcn.100c88d0
push 0x100be100
push 0x7d5df4
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be0c0
push 0x7d5d56
push 0xe8
call fcn.100c88d0
push 0x100bdf80
push 0x7d6150
push 0xe8
call fcn.100c88d0
push 0x100be040
push 0x7d5fce
push 0xe8
call fcn.100c88d0
push 0x100bdf40
push 0x7d6060
push 0xe8
call fcn.100c88d0
push 0x100bdfc0
push 0x856486
push 0xe8
call fcn.100c88d0
push 0x100bdfc0
push 0x85f1b9
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be080
push 0x7d5f30
push 0xe8
call fcn.100c88d0
push 0x100be180
push 0x7d5ee0
push 0xe8
call fcn.100c88d0
push 0x100be180
push 0x7d5e42
push 0xe8
call fcn.100c88d0
push 0x100be180
push 0x7d5da4
push 0xe8
call fcn.100c88d0
push 0x100be180
push 0x7d61ef
push 0xe8
call fcn.100c88d0
push 0x100be180
push 0x7d6100
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be180
push 0x7d601c
push 0xe8
call fcn.100c88d0
push 0x100be180
push 0x7d619e
push 0xe8
call fcn.100c88d0
push 0x100be180
push 0x7d5f7e
push 0xe8
call fcn.100c88d0
push 0x100bdb40
push 0x40f2e9
push 0xe8
call fcn.100c88d0
push 0x100bdb40
push 0x4d714e
push 0xe8
call fcn.100c88d0
push 0x100bdb40
push 0x4d79e7
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100bdb40
push 0x4d9756
push 0xe8
call fcn.100c88d0
push 0x100bdb20
push 0x5db1aa
push 0xe8
call fcn.100c88d0
push 0x100bdb20
push 0x5db22f
push 0xe8
call fcn.100c88d0
push 0x100bdb20
push 0x5db322
push 0xe8
call fcn.100c88d0
push 0x100bdb20
push 0x5db3a7
push 0xe8
call fcn.100c88d0
push 0x100bdb20
push 0x5db46d
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100bdb20
push 0x5db4ad
push 0xe8
call fcn.100c88d0
push 0x100bdb20
push 0x5db4d5
push 0xe8
call fcn.100c88d0
push 0x100bdb20
push 0x5db534
push 0xe8
call fcn.100c88d0
push 0x100bdb20
push 0x5db5c4
push 0xe8
call fcn.100c88d0
push 0x100bdb20
push 0x5db628
push 0xe8
call fcn.100c88d0
push 0x100bdb20
push 0x5db68c
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100bdb20
push 0x5db6ed
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x791bd0
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x791c40
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x792e80
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x792f30
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7a0c58
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be2a0
push 0x7a229f
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7a3534
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7a47cc
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7a557c
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7a703e
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7a8227
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be2a0
push 0x7a8ed1
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7a9331
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7a9a11
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7a9ec7
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7aab57
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7ab8ef
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be2a0
push 0x7ac60f
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7ad597
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7addf7
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7ae642
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7b26c2
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7b2ff2
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be2a0
push 0x7b3aa2
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7b4632
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7b5332
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7b5d22
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7b670e
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x7b74c7
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be2a0
push 0x7b85c2
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x947a52
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x948814
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x94a2b4
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x94b4af
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x94bdd5
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100be2a0
push 0x94c8a4
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x94da92
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x94f0f2
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x94fe84
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x95093c
push 0xe8
call fcn.100c88d0
push 0x100be2a0
push 0x9515b9
push 0xe8
call fcn.100c88d0
mov ecx, dword [ebp - 4]
add esp, 0x48
xor ecx, ebp
call fcn.100d7712
mov esp, ebp
pop ebp
ret