Function at 0x100e28e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
push 0x100d5f90
push 0x7c1872
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c18ac
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c18f5
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c1950
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c199b
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x7c2676
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x7c26aa
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c26ea
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c273c
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c2782
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x7c46e6
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c471a
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x7c4757
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c47a0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c47df
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x7c6bcc
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c6c06
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c6c49
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x7c6c98
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c6cdd
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x7c7d0c
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c7d46
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c7d89
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7c7dd8
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x7c7e1d
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x841e49
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x841e7d
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x841eba
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x841f03
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x841f42
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x100d5f90
push 0x843826
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84385a
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x843897
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8438e0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84391f
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x845956
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x84598a
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8459c7
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x845a10
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x845a4f
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x8470a6
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8470da
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x847117
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x847160
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84719f
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x77f209
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x77f23d
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x77f27a
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x77f2c3
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x77f302
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x850966
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x85099a
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8509d7
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x850a20
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x850a5f
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x852476
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8524aa
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8524e7
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x852530
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x85256f
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x100d5f90
push 0x8540b6
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8540ea
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x854127
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x854170
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8541af
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x87f886
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x87f8ba
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x87f8f7
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x87f940
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x87f97f
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x882f52
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x882f8c
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x882fd5
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x883030
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x88307b
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x893102
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x89313c
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x893185
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x8931e0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x89322b
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x8812a2
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8812dc
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x881325
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x881380
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x8813cb
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x879ee2
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x879f1c
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x879f65
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x879fc0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x87a00b
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x100d5f90
push 0x8747b6
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8747f0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x87483c
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8748a0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8748f2
push 0xe8
call fcn.100d5c50
push 0x100d5f90
push 0x8781bc
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x8781f0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x878230
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x878282
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8782c8
push 0xe8
call fcn.100d5c50
push 0x100d6b70
push 0x7dc904
push 0xe9
call fcn.100d5c50
push 0x100d6bd0
push 0x7dc9e6
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x100d6bd0
push 0x7dca78
push 0xe8
call fcn.100d5c50
push 0x100d6bd0
push 0x7dcb05
push 0xe8
call fcn.100d5c50
push 0x100d6bd0
push 0x7dcb96
push 0xe8
call fcn.100d5c50
push 0x100d6bd0
push 0x7dcc16
push 0xe8
call fcn.100d5c50
push 0x100d6bd0
push 0x7dcca8
push 0xe8
call fcn.100d5c50
push 0x100d6bd0
push 0x7dcd35
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x100d6bd0
push 0x7dcdb4
push 0xe8
call fcn.100d5c50
push 0x100d6bd0
push 0x7dce51
push 0xe8
call fcn.100d5c50
push 0x100d6bd0
push 0x7dcee7
push 0xe8
call fcn.100d5c50
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
add esp, 0x24
push eax
push 0x40
push 5
push 0x40a87e
call esi
mov eax, 0x40a87e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x40a87e
call esi
push 0x100dfba0
mov dword [0x102cefe0], 0
mov dword [0x102cefd4], 0
push 0x77f7ee
push 0xe8
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x10
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x77e906
mov byte [ebx + 4], 0x90
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x100e3286
mov eax, dword [ebx]
mov ecx, 0x77e906
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e3288
call edi
push 0x100e1db0
push 0x77f8ca
push 0xe9
call fcn.100d5c50
push 0x100e1dc0
push 0x77fa1c
push 0xe9
call fcn.100d5c50
push 0x100e1dd0
push 0x77faa7
push 0xe9
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x28
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x77f822
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e331a
mov eax, dword [ebx]
mov ecx, 0x77f822
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e331c
call edi
push 0x100e13a0
push 0x7801d7
push 0xe9
call fcn.100d5c50
push 0x100e1410
push 0x780215
push 0xe9
call fcn.100d5c50
push 0x100e14e0
push 0x781758
push 0xe9
call fcn.100d5c50
push 0x100e1520
push 0x781805
push 0xe9
call fcn.100d5c50
push 0x100e1560
push 0x78190b
push 0xe9
call fcn.100d5c50
push 0x100e15d0
push 0x78194c
push 0xe9
call fcn.100d5c50
add esp, 0x48
push 0x100e16a0
push 0x782854
push 0xe9
call fcn.100d5c50
push 0x100e16e0
push 0x782a30
push 0xe9
call fcn.100d5c50
push 0x100e1720
push 0x782b83
push 0xe9
call fcn.100d5c50
push 0x100e1780
push 0x782d13
push 0xe9
call fcn.100d5c50
push 0x100e17f0
push 0x782d54
push 0xe9
call fcn.100d5c50
push 0x100e1920
push 0x782f69
push 0xe9
call fcn.100d5c50
add esp, 0x48
push 0x100e1960
push 0x782fdf
push 0xe9
call fcn.100d5c50
push 0x100e19a0
push 0x7830ed
push 0xe9
call fcn.100d5c50
push 0x100e1a10
push 0x78312e
push 0xe9
call fcn.100d5c50
push 0x100e1ae0
push 0x7832d5
push 0xe9
call fcn.100d5c50
push 0x100e1b20
push 0x784029
push 0xe9
call fcn.100d5c50
push 0x100e1b50
push 0x78482d
push 0xe9
call fcn.100d5c50
add esp, 0x48
push 0x100e1b80
push 0x7848a5
push 0xe9
call fcn.100d5c50
push 0x100e1bb0
push 0x784904
push 0xe9
call fcn.100d5c50
push 0x100e1be0
push 0x784973
push 0xe9
call fcn.100d5c50
push 0x100e1c10
push 0x7849e4
push 0xe9
call fcn.100d5c50
push 0x100e1c40
push 0x784a64
push 0xe9
call fcn.100d5c50
push 0x100e1c70
push 0x784b6b
push 0xe9
call fcn.100d5c50
add esp, 0x48
push 0x100e1ce0
push 0x784bac
push 0xe9
call fcn.100d5c50
push 0x100d5f90
push 0x7cb6f6
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7cb72a
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7cb767
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7cb7b0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7cb7ef
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x100d5fb0
push 0x7cb8e5
push 0xe8
call fcn.100d5c50
push 0x100d6000
push 0x7cb924
push 0xe8
call fcn.100d5c50
push 0x100d6000
push 0x7cb959
push 0xe8
call fcn.100d5c50
push 0x100d6000
push 0x7cb98e
push 0xe8
call fcn.100d5c50
push 0x100d6050
push 0x7d1786
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7d17ba
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x7d17f7
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7d1840
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7d187f
push 0xe8
call fcn.100d5c50
add esp, 0x24
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x7d18d8
call esi
mov eax, 0x7d18d8
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x7d18d8
call esi
mov eax, 0x100d60e0
mov byte [ebp - 0x10], 0xe8
sub eax, 0x7f65ab
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x7f65a6
call esi
test eax, eax
je 0x100e36bd
mov eax, dword [ebp - 0x10]
mov ecx, 0x7f65a6
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e36bf
call edi
push 0x1003a6f0
push 0x7f65e6
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7f6638
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7f66a2
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7f66fa
push 0xe8
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x34
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x7f6753
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e3765
mov eax, dword [ebx]
mov ecx, 0x7f6753
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e3767
call edi
mov eax, 0x100d6190
mov byte [ebp - 0x10], 0xe8
sub eax, 0x80c84d
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x80c848
call esi
test eax, eax
je 0x100e37b9
mov eax, dword [ebp - 0x10]
mov ecx, 0x80c848
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e37bb
call edi
push 0x1003a6f0
push 0x80c87c
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x80c8bc
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x80c90e
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x80c954
push 0xe8
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x34
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x80d78f
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e3861
mov eax, dword [ebx]
mov ecx, 0x80d78f
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e3863
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x80d772
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e38b9
mov eax, dword [ebx]
mov ecx, 0x80d772
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e38bb
call edi
push 0x100d5f90
push 0x836ef6
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x836f2a
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x836f67
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x836fb0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x836fef
push 0xe8
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x40
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x83e6a0
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e3975
mov eax, dword [ebx]
mov ecx, 0x83e6a0
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e3977
call edi
push 0x100d6510
push 0x83ed80
push 0xe9
call fcn.100d5c50
push 0x100d6530
push 0x83edde
push 0xe9
call fcn.100d5c50
push 0x100d6470
push 0x83f760
push 0xe9
call fcn.100d5c50
push 0x100d6450
push 0x83f9e8
push 0xe9
call fcn.100d5c50
push 0x100d6430
push 0x83f9b0
push 0xe9
call fcn.100d5c50
push 0x100d6410
push 0x83f958
push 0xe9
call fcn.100d5c50
add esp, 0x48
push 0x100d63f0
push 0x83f8a4
push 0xe9
call fcn.100d5c50
push 0x100d63d0
push 0x83f86c
push 0xe9
call fcn.100d5c50
push 0x100d63b0
push 0x83f814
push 0xe9
call fcn.100d5c50
push 0x100d6390
push 0x83f728
push 0xe9
call fcn.100d5c50
push 0x100d6370
push 0x83f6d0
push 0xe9
call fcn.100d5c50
push 0x100d6490
push 0x83f4e7
push 0xe9
call fcn.100d5c50
add esp, 0x48
push 0x100d64b0
push 0x83f516
push 0xe9
call fcn.100d5c50
push 0x100d64d0
push 0x83f54c
push 0xe9
call fcn.100d5c50
push 0x100d64f0
push 0x83f582
push 0xe9
call fcn.100d5c50
push 0x100d6310
push 0x83f618
push 0xe8
call fcn.100d5c50
push 0x100d6310
push 0x83f690
push 0xe8
call fcn.100d5c50
push 0x100d6310
push 0x83f7d4
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x100d6310
push 0x83f918
push 0xe8
call fcn.100d5c50
push 0x100d66f0
push 0x83ea16
push 0xe9
call fcn.100d5c50
add esp, 0x18
mov byte [ebp - 0x10], 0xe8
mov eax, 0x100d6240
mov dword [ebp - 4], 0
sub eax, 0x89422b
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x894226
call esi
test eax, eax
je 0x100e3b65
mov eax, dword [ebp - 0x10]
mov ecx, 0x894226
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e3b67
call edi
push 0x1003a6f0
push 0x89425a
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x894297
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8942e0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x89431f
push 0xe8
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x34
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x8943a1
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e3c0d
mov eax, dword [ebx]
mov ecx, 0x8943a1
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e3c0f
call edi
push 0x100d6710
push 0x84d189
push 0xe9
call fcn.100d5c50
push 0x100d5f90
push 0x84d01a
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84d05a
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84d0ac
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84d116
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84d16e
push 0xe8
call fcn.100d5c50
add esp, 0x48
cmp dword [0x101f6764], 2
jae 0x100e3cfa
push 0x100d5f90
push 0x84a546
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84a57a
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84a5ba
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84a60c
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84a652
push 0xe8
call fcn.100d5c50
add esp, 0x3c
push 0x100d6e70
push 0x7db5d0
push 0xe8
call fcn.100d5c50
push 0x100d6e70
push 0x7db63e
push 0xe8
call fcn.100d5c50
push 0x100d6e70
push 0x7db6d2
push 0xe8
call fcn.100d5c50
push 0x100d6e70
push 0x7db737
push 0xe8
call fcn.100d5c50
push 0x100d6fc0
push 0x7db4d8
push 0xe8
call fcn.100d5c50
push 0x100d6fc0
push 0x7dbd3d
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x100d6fc0
push 0x7dc197
push 0xe8
call fcn.100d5c50
push 0x100d71c0
push 0x7dd4f3
push 0xe9
call fcn.100d5c50
push 0x100d7200
push 0x7dd5c0
push 0xe8
call fcn.100d5c50
push 0x100d7160
push 0x7dc4c9
push 0xe9
call fcn.100d5c50
push 0x100d7340
push 0x7db239
push 0xe9
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x40
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x835116
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e3e2f
mov eax, dword [ebx]
mov ecx, 0x835116
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e3e31
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x8337b0
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e3e87
mov eax, dword [ebx]
mov ecx, 0x8337b0
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e3e89
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x83443c
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e3edf
mov eax, dword [ebx]
mov ecx, 0x83443c
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e3ee1
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x8337b8
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e3f37
mov eax, dword [ebx]
mov ecx, 0x8337b8
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e3f39
call edi
push 0x100d6b30
push 0x835cb1
push 0xe9
call fcn.100d5c50
push 0x100d6af0
push 0x835c86
push 0xe9
call fcn.100d5c50
push 0x100d6ad0
push 0x83516f
push 0xe9
call fcn.100d5c50
push 0x100d6ae0
push 0x8352b1
push 0xe9
call fcn.100d5c50
push 0x100d69e0
push 0x83538a
push 0xe8
call fcn.100d5c50
push 0x100d6910
push 0x834c8d
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x100d73d0
push 0x83510e
push 0xe8
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x10
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x7d4fa6
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e401e
mov eax, dword [ebx]
mov ecx, 0x7d4fa6
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e4020
call edi
push 0x1003a6f0
push 0x7d582d
push 0xe8
call fcn.100d5c50
push 0x100da420
push 0x7d587c
push 0xe8
call fcn.100d5c50
push 0x100d9c90
push 0x7d4f9e
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7db7b0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7db812
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7db874
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x7db8e0
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7db959
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7db9a2
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7dba20
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x7dba69
push 0xe8
call fcn.100d5c50
push 0x100d62f0
push 0x83baf4
push 0xe9
call fcn.100d5c50
add esp, 0x48
push 0x100d6300
push 0x83bb94
push 0xe9
call fcn.100d5c50
push 0x100da580
push 0x842460
push 0xe8
call fcn.100d5c50
push 0x100da520
push 0x84f406
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84f43a
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84f477
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x84f4c0
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 0x1003a6f0
push 0x84f4ff
push 0xe8
call fcn.100d5c50
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x84f59a
call esi
mov eax, 0x84f59a
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x84f59a
call esi
push 0x100db570
push 0x8679d0
push 0xe9
call fcn.100d5c50
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x78e4ca
call esi
mov eax, 0x78e4ca
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x78e4ca
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x78e68f
call esi
mov eax, 0x78e68f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x78e68f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x78e1ac
call esi
mov eax, 0x78e1ac
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 5
push 0x78e1ac
call esi
push 0x100d68f0
push 0x78e6a6
push 0xe9
call fcn.100d5c50
push 0x100d5f90
push 0x8643b6
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8643ea
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x864427
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x864470
push 0xe8
call fcn.100d5c50
push 0x1003a6f0
push 0x8644af
push 0xe8
call fcn.100d5c50
add esp, 0x48
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x847046
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e4348
mov eax, dword [ebx]
mov ecx, 0x847046
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e434a
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x847036
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e43a0
mov eax, dword [ebx]
mov ecx, 0x847036
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e43a2
call edi
push 0x100dc820
push 0x84702e
push 0xe8
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x10
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x858016
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e440c
mov eax, dword [ebx]
mov ecx, 0x858016
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e440e
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x857898
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e4464
mov eax, dword [ebx]
mov ecx, 0x857898
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e4466
call edi
push 0x100dd690
push 0x857890
push 0xe8
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x10
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x856776
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e44d0
mov eax, dword [ebx]
mov ecx, 0x856776
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e44d2
call edi
push 0x100de680
push 0x85676e
push 0xe8
call fcn.100d5c50
push 0x100e1e40
push 0x82ca22
push 0xe8
call fcn.100d5c50
push 5
call fcn.10131c6d
add esp, 0x1c
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x82ca5c
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e4550
mov eax, dword [ebx]
mov ecx, 0x82ca5c
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e4552
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x82caa5
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e45a8
mov eax, dword [ebx]
mov ecx, 0x82caa5
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e45aa
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x82cb00
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e4600
mov eax, dword [ebx]
mov ecx, 0x82cb00
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e4602
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x82cb4b
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e4658
mov eax, dword [ebx]
mov ecx, 0x82cb4b
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e465a
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x82cf1c
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e46b0
mov eax, dword [ebx]
mov ecx, 0x82cf1c
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e46b2
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x82cfb1
mov byte [ebx + 4], 0x90
call esi
test eax, eax
je 0x100e4708
mov eax, dword [ebx]
mov ecx, 0x82cfb1
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call esi
test eax, eax
jne 0x100e470a
call edi
push 0x100e2680
push 0x857dc0
push 0xe9
call fcn.100d5c50
push 0x100e2670
push 0x7d2e50
push 0xe9
call fcn.100d5c50
push 0x10025730
push 0x812120
push 0xe9
call fcn.100d5c50
add esp, 0x24
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret