Function at 0x40d8a0
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x447980
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x45b4b8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
push 9
push str.iTeleport
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
call fcn.004028c0
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 0
push eax
mov ecx, ebx
call fcn.0040ffe0
mov edi, eax
cmp dword [edi + 0x28], 0
je 0x40d912
mov esi, 1
jmp 0x40dbbb
sub esp, 0x18
mov dword [edi + 8], 0
mov ecx, esp
mov dword [ebp - 0x64], esp
mov dword [edi], 0
mov dword [edi + 4], 2
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 1
mov dword [edi + 0x2c], 1
mov dword [edi + 0x34], 1
push 0x212
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.50_53_31_C0_83_3D_00_02_68_0E_01_75_38_8D_1D_04_02_68_0E_F2_0F_10_86_00_01_00_00_F2_0F_11_03_F2_0F_10_86_08_01_00_00_F2_0F_11_43_08_F2_0F_10_86_10_01_00_00_F2_0F_11_43_10_85_C0_74_60_8D_1D_04_02_68_0E_EB_1C_83_3D_00_02_68_0E_02_75_3B_83_3D_04_02_68_0E_FF_74_46_8D_1D_1C_02_68_0E_B0_01_EB_B2_F2_0F_10_03_F2_0F_11_86_00_01_00_00_F2_0F_10_43_08_F2_0F_11_86_08_01_00_00_F2_0F_10_43_10_F2_0F_11_86_10_01_00_00_EB_14_83_3D_00_02_68_0E_03_75_0B_8D_1D_1C_02_68_0E_83_3B_FF_75_C4_5B_58_C7_05_00_02_68_0E_00_00_00_00_F3_0F_7E_86_00_01_00_00
mov byte [ecx], 0
call fcn.004028c0
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0x17
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.F3_0F_7E_86_00_01_00_00
mov byte [ecx], 0
call fcn.004028c0
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
push 0x38
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.F3_0F_7E_86_00_01_00_00_F3_0F_10_8E_60_01_00_00_0F_94_C0
mov byte [ecx], 0
call fcn.004028c0
mov ecx, edi
mov byte [ebp - 4], 0
call fcn.00403900
mov eax, dword [ebx + 0x2c]
test eax, eax
je 0x40d9e2
push 0x40
push 0x3000
push 0x1000
push 0
push dword [eax + 0x1c]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
push eax
push ecx
mov dword [edi + 0xc], eax
lea eax, [edi + 0x74]
push 0xe680000
push eax
call fcn.00403b70
push 1
push 0x451500
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.004028c0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x28]
mov esi, dword [edi + 0xc]
mov ecx, ebx
push eax
add esi, 0x200
call fcn.0040ff30
mov byte [ebp - 4], 0
mov dword [eax + 8], esi
mov dword [eax + 0x20], 1
mov dword [eax], 3
cmp dword [ebp - 0x14], 0x10
jb 0x40da53
push dword [ebp - 0x28]
call fcn.0042d3ab
add esp, 4
push 1
push 0x453638
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.004028c0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x28]
mov esi, dword [edi + 0xc]
mov ecx, ebx
push eax
add esi, 0x200
call fcn.0040ff30
mov byte [ebp - 4], 0
mov dword [eax + 8], esi
mov dword [eax + 0x20], 2
mov dword [eax], 3
cmp dword [ebp - 0x14], 0x10
jb 0x40dab1
push dword [ebp - 0x28]
call fcn.0042d3ab
add esp, 4
push 1
push 0x45363c
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.004028c0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x28]
mov esi, dword [edi + 0xc]
mov ecx, ebx
push eax
add esi, 0x200
call fcn.0040ff30
mov byte [ebp - 4], 0
mov dword [eax + 8], esi
mov dword [eax + 0x20], 3
mov dword [eax], 3
cmp dword [ebp - 0x14], 0x10
jb 0x40db0f
push dword [ebp - 0x28]
call fcn.0042d3ab
add esp, 4
push 0x8f
push str.FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF_FF
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
call fcn.004028c0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x40]
call fcn.0040b080
lea eax, [ebp - 0x60]
push eax
mov eax, dword [edi + 0xc]
lea ecx, [ebx + 0x2c]
add eax, 0x204
push eax
call fcn.00412980
test eax, eax
jne 0x40db6d
xor esi, esi
jmp 0x40db82
sub esp, 0xc
lea eax, [ebp - 0x58]
mov ecx, ebx
push 0
sub esp, 0xc
push eax
call fcn.0040ee90
mov esi, eax
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x40db98
cmp dword [ebp - 0x5c], 0
jle 0x40db98
push eax
call fcn.0042dd04
add esp, 4
cmp dword [ebp - 0x2c], 0x10
jb 0x40dba9
push dword [ebp - 0x40]
call fcn.0042d3ab
add esp, 4
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp dword [ebp - 0x44], 0x10
jb 0x40dbcc
push dword [ebp - 0x58]
call fcn.0042d3ab
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042d3b0
mov esp, ebp
pop ebp
ret