Function at 0x10001710
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x10019384]
cmp dword [eax + 0xab573c], 4
jne 0x100020ec
cmp dword [eax + 0xab5738], 4
jne 0x100020ec
cmp byte [0x10019378], 0
push esi
push edi
jne 0x10001c1a
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push str..iCCup_Maphack_Bot.ini
push 0
push str.Bypass__ah_in_DotA
push str.iCCup_Maphack_Bot
mov byte [0x10019378], 1
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 1
jne 0x100017f3
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x3c639c
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0xb8
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x3c63a1
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0xeb
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x3cb872
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0xeb
push 1
push esi
call edi
push str..iCCup_Maphack_Bot.ini
push 0
push str.Make_Units_Clickable
push str.iCCup_Maphack_Bot
call ebx
cmp eax, 1
jne 0x10001836
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x2851b2
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0xeb
push 1
push esi
call edi
push str..iCCup_Maphack_Bot.ini
push 0
push str.Reveal_Illusions
push str.iCCup_Maphack_Bot
call ebx
cmp eax, 1
jne 0x1000187e
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
add esi, 0x282a5c
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov eax, 0xc340
push 2
push esi
mov word [esi], ax
call edi
push str..iCCup_Maphack_Bot.ini
push 0
push str.Reveal_Invisibles
push str.iCCup_Maphack_Bot
call ebx
cmp eax, 1
jne 0x100018c1
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x399a98
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0xeb
push 1
push esi
call edi
push str..iCCup_Maphack_Bot.ini
push 0
push str.Reveal_Units_on_Main_Map
push str.iCCup_Maphack_Bot
call ebx
cmp eax, 1
jne 0x10001934
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
add esi, 0x3a159b
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov eax, 0x9090
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x361176
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0xeb
push 1
push esi
call edi
push str..iCCup_Maphack_Bot.ini
push 0
push str.Reveal_Units_on_Mini_Map
push str.iCCup_Maphack_Bot
call ebx
cmp eax, 1
jne 0x10001977
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x36143c
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0
push 1
push esi
call edi
push str..iCCup_Maphack_Bot.ini
push 0
push str.Show_Enemies_Ping_Signals
push str.iCCup_Maphack_Bot
call ebx
cmp eax, 1
jne 0x10001a3f
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x43ee96
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x3b
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x43ee99
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x85
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x43eea9
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x3b
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x43eeac
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x85
push 1
push esi
call edi
push str..iCCup_Maphack_Bot.ini
push 0
push str.Show_Missiles
push str.iCCup_Maphack_Bot
call ebx
cmp eax, 1
jne 0x10001a82
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x38e9f1
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0xff
push 1
push esi
call edi
push str..iCCup_Maphack_Bot.ini
push 0
push str.Show_Rally_Points
push str.iCCup_Maphack_Bot
call ebx
cmp eax, 1
jne 0x10001aca
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
add esi, 0x4b7d3
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov eax, 0x9090
push 2
push esi
mov word [esi], ax
call edi
push str..iCCup_Maphack_Bot.ini
push 0
push str.Show_Runes
push str.iCCup_Maphack_Bot
call ebx
cmp eax, 1
jne 0x10001b0d
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x3a14db
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0xeb
push 1
push esi
call edi
push str..iCCup_Maphack_Bot.ini
push 0
push str.Show_Skills___Cooldowns
push str.iCCup_Maphack_Bot
call ebx
pop ebx
cmp eax, 1
jne 0x100020ea
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 6
add esi, 0x2026dc
mov dword [ebp - 4], 0
push esi
call edi
mov eax, dword [0x100160cc]
push 0
push dword [ebp - 4]
mov dword [esi], eax
mov ax, word [0x100160d0]
push 6
push esi
mov word [esi + 4], ax
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0xc838d
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x8c
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x28e1de
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0xeb
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
add esi, 0x34f2a8
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov eax, 0x9090
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x34f2e9
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0
push 1
push esi
call edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esi, 0x3c639c
push eax
push 0x40
push 1
push esi
mov byte [0x10019378], 0
mov dword [ebp - 4], 0
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x3d
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x3c63a1
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x76
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x3cb872
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x74
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 6
add esi, 0x34dda2
mov dword [ebp - 4], 0
push esi
call edi
mov eax, dword [0x100160d8]
push 0
push dword [ebp - 4]
mov dword [esi], eax
movzx eax, word [0x100160dc]
push 6
push esi
mov word [esi + 4], ax
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
add esi, 0x34ddaa
mov dword [ebp - 4], 0
push 6
push esi
call edi
mov eax, dword [0x100160e0]
push 0
push dword [ebp - 4]
mov dword [esi], eax
movzx eax, word [0x100160e4]
mov word [esi + 4], ax
push 6
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
add esi, 0x35fa4a
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov eax, 0x8eb
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x2851b2
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x75
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 5
add esi, 0x74c9f1
mov dword [ebp - 4], 0
push esi
call edi
mov eax, dword [0x100160e8]
push 0
push dword [ebp - 4]
mov dword [esi], eax
movzx eax, byte [0x100160ec]
push 5
push esi
mov byte [esi + 4], al
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 3
add esi, 0x3564b8
mov dword [ebp - 4], 0
push esi
call edi
movzx eax, word [0x100160f0]
push 0
push dword [ebp - 4]
mov word [esi], ax
movzx eax, byte [0x100160f2]
push 3
push esi
mov byte [esi + 2], al
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
add esi, 0x282a5c
mov dword [ebp - 4], 0
push 2
push esi
call edi
mov eax, 0xccc3
mov word [esi], ax
push 0
push dword [ebp - 4]
push 2
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x399a98
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x74
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
add esi, 0x3a159b
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov eax, 0xca23
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x361176
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x75
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x36143c
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 1
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x43ee96
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x85
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
add esi, 0x43ee99
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x84
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x43eea9
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x85
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x43eeac
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x84
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x38e9f1
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 4
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
add esi, 0x4b7d3
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov eax, 0x5b74
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
add esi, 0x3a14db
mov dword [ebp - 4], 0
push 0x40
push 1
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x75
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 6
add esi, 0x2026dc
mov dword [ebp - 4], 0
push esi
call edi
mov eax, dword [0x100160f4]
push 0
push dword [ebp - 4]
mov dword [esi], eax
movzx eax, word [0x100160f8]
push 6
push esi
mov word [esi + 4], ax
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0xc838d
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x84
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
add esi, 0x28e1de
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 0x75
push 1
push esi
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
push 2
add esi, 0x34f2a8
mov dword [ebp - 4], 0
push esi
call edi
push 0
push dword [ebp - 4]
mov eax, 0x874
push 2
push esi
mov word [esi], ax
call edi
mov esi, dword [0x100193a8]
lea eax, [ebp - 4]
push eax
push 0x40
add esi, 0x34f2e9
mov dword [ebp - 4], 0
push 1
push esi
call edi
push 0
push dword [ebp - 4]
mov byte [esi], 8
push 1
push esi
call edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret