Function at 0x10040180
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov edi, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd27bfc
call esi
fld dword [0x100605f4]
lea ecx, [ebp - 4]
fstp dword [0xd27bfc]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0xd27bfc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd2570c
call esi
fld dword [0x10060678]
lea ecx, [ebp - 4]
fstp dword [0xd2570c]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0xd2570c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0xd2c894
call esi
fld dword [0x10060678]
lea ecx, [ebp - 4]
fstp dword [0xd2c894]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0xd2c894
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x48e201
call esi
mov ebx, 0x100bb784
lea ecx, [ebp - 4]
push ecx
mov dword [0x48e201], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x48e201
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x77296a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x77296a], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x77296a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7c70a0
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7c70a0], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7c70a0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x85458f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x85458f], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x85458f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8cc615
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8cc615], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8cc615
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x943c70
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x943c70], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x943c70
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x62ca67
call esi
mov ebx, 0x100bb788
lea ecx, [ebp - 4]
push ecx
mov dword [0x62ca67], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x62ca67
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x62cac8
call esi
lea ecx, [ebp - 4]
mov dword [0x62cac8], ebx
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x62cac8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x62cb17
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x62cb17], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x62cb17
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x574fcd
call esi
mov ebx, 0x100bb780
lea ecx, [ebp - 4]
push ecx
mov dword [0x574fcd], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x574fcd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x57509b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x57509b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x57509b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x575245
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x575245], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x575245
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x57527a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x57527a], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x57527a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x57538e
call esi
mov dword [0x57538e], ebx
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x57538e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5753c3
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5753c3], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5753c3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5754d7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5754d7], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5754d7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x57550c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x57550c], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x57550c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x57568e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x57568e], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x57568e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x575756
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x575756], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x575756
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5758c5
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5758c5], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5758c5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5758fa
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5758fa], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5758fa
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x58885c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x58885c], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x58885c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b9b61
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b9b61], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b9b61
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b9c67
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b9c67], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b9c67
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5dd586
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5dd586], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5dd586
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x62c9f7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x62c9f7], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x62c9f7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x63d256
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x63d256], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x63d256
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x63d497
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x63d497], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x63d497
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7ef34a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7ef34a], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7ef34a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81b021
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81b021], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81b021
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81b050
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81b050], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81b050
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81b073
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81b073], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81b073
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81b0da
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81b0da], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81b0da
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81b106
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81b106], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81b106
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82ac8b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82ac8b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82ac8b
call esi
push 0x1003fd80
push 0x4d8514
mov bl, 0xe9
call fcn.10056900
push 0x10040070
push 0x4d1cf0
call fcn.10056900
add esp, 0x10
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x420260
call esi
lea ebx, [edi + 0x18]
lea ecx, [ebp - 4]
push ecx
mov dword [0x420260], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x420260
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x42053f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x42053f], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x42053f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b1e7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b1e7], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b1e7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b2b8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b2b8], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b2b8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b3a4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b3a4], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b3a4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8b4fad
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8b4fad], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8b4fad
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8b50cd
call esi
lea ecx, [ebp - 4]
mov dword [0x8b50cd], ebx
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x8b50cd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d146e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d146e], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d146e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d7199
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d7199], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d7199
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d7a31
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d7a31], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d7a31
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d990f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d990f], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d990f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db1bd
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5db1bd], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db1bd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db242
call esi
lea ecx, [ebp - 4]
mov dword [0x5db242], ebx
push ecx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db242
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db335
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5db335], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db335
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db3ba
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5db3ba], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db3ba
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db480
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5db480], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db480
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db4c0
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5db4c0], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db4c0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db4e8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5db4e8], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db4e8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db547
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5db547], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db547
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db5d7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5db5d7], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db5d7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db63b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5db63b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db63b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5db69f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5db69f], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5db69f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x596b8b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x596b8b], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x596b8b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6387b9
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6387b9], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6387b9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x779a7c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x779a7c], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x779a7c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x779c59
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x779c59], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x779c59
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x77a648
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x77a648], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x77a648
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x787a60
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x787a60], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x787a60
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7918b2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7918b2], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7918b2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b940
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b940], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b940
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x88e320
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x88e320], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x88e320
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x420277
call esi
lea ebx, [edi + 0x20]
lea ecx, [ebp - 4]
push ecx
mov dword [0x420277], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x420277
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x420553
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x420553], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x420553
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7c0565
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7c0565], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7c0565
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x80f905
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x80f905], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x80f905
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b391
call esi
lea ecx, [ebp - 4]
mov dword [0x82b391], ebx
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x82b391
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b320
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b320], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b320
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b0dd
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b0dd], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b0dd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8b4fbf
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8b4fbf], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8b4fbf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8b50df
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8b50df], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8b50df
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d1496
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d1496], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d1496
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x596b97
call esi
mov dword [0x596b97], ebx
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 4
push 0x596b97
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6387f2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6387f2], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6387f2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x63882a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x63882a], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x63882a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6388be
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6388be], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6388be
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x779aa2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x779aa2], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x779aa2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x779c7f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x779c7f], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x779c7f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x77a66e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x77a66e], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x77a66e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x787a95
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x787a95], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x787a95
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x7918d8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x7918d8], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x7918d8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82b965
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82b965], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82b965
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x88e350
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x88e350], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x88e350
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82abf4
call esi
add edi, 0x10
lea ecx, [ebp - 4]
push ecx
mov dword [0x82abf4], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82abf4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x82401b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x82401b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x82401b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b97c4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b97c4], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b97c4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b9834
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b9834], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b9834
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x5b98ec
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x5b98ec], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x5b98ec
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8c2df7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8c2df7], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8c2df7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8c2e67
call esi
lea ecx, [ebp - 4]
mov dword [0x8c2e67], edi
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x8c2e67
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8cc6fb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8cc6fb], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8cc6fb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8cc770
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8cc770], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8cc770
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8d99a0
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8d99a0], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8d99a0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8d9a15
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8d9a15], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8d9a15
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8ef463
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8ef463], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8ef463
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8ef4d5
call esi
mov dword [0x8ef4d5], edi
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x8ef4d5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8ef5ad
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8ef5ad], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8ef5ad
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8ef642
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8ef642], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8ef642
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x914fb1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x914fb1], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x914fb1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x915026
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x915026], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x915026
call esi
push 0x1003fdc0
push 0x86f25c
mov bl, 0xe8
call fcn.10056900
push 0x1003fdc0
push 0x86f298
call fcn.10056900
push 0x1003fdc0
push 0x86f2d4
call fcn.10056900
push 0x1003fdc0
push 0x88d9f3
call fcn.10056900
push 0x1003fdc0
push 0x88da2f
call fcn.10056900
push 0x1003fdc0
push 0x88da79
call fcn.10056900
push 0x1003fdc0
push 0x88dabd
call fcn.10056900
push 0x1003fdc0
push 0x88db41
call fcn.10056900
add esp, 0x40
push 0x1003fdc0
push 0x88db74
call fcn.10056900
push 0x1003fdc0
push 0x88dba7
call fcn.10056900
push 0x1003fdc0
push 0x88dbda
call fcn.10056900
push 0x1003fdc0
push 0x8dbf89
call fcn.10056900
push 0x1003fdc0
push 0x8dbfca
call fcn.10056900
push 0x1003fdc0
push 0x8dc00a
call fcn.10056900
push 0x1003ff20
push 0x7bf4e8
call fcn.10056900
push 0x1003ff20
push 0x7bf54f
call fcn.10056900
add esp, 0x40
push 0x1003ff20
push 0x7bfddf
call fcn.10056900
push 0x1003ff20
push 0x7bfd44
call fcn.10056900
push 0x1003ff20
push 0x7bfd8d
call fcn.10056900
push 0x1003ff20
push 0x7bfc87
call fcn.10056900
push 0x1003ff20
push 0x7bfcca
call fcn.10056900
push 0x1003ff20
push 0x7c0094
call fcn.10056900
push 0x1003ff20
push 0x7bffc1
call fcn.10056900
push 0x1003ff20
push 0x7c0029
call fcn.10056900
add esp, 0x40
push 0x1003ff20
push 0x7bfed2
call fcn.10056900
push 0x1003ff20
push 0x7bff2e
call fcn.10056900
push 0x1003ff20
push 0x7c02c0
call fcn.10056900
push 0x1003ff20
push 0x7c0225
call fcn.10056900
push 0x1003ff20
push 0x7c026e
call fcn.10056900
push 0x1003ff20
push 0x7c0168
call fcn.10056900
push 0x1003ff20
push 0x7c01ab
call fcn.10056900
push 0x1003ffa0
push 0x7bfbb3
call fcn.10056900
add esp, 0x40
push 0x1003ffa0
push 0x7bfa42
call fcn.10056900
push 0x1003ffa0
push 0x7bfafe
call fcn.10056900
push 0x1003ffa0
push 0x7bf8c4
call fcn.10056900
push 0x1003ffa0
push 0x7bf968
call fcn.10056900
push 0x1003fe30
push 0x7bf3e3
call fcn.10056900
push 0x1003f560
push 0x636420
mov bl, 0xe9
call fcn.10056900
push 0x1003f580
push 0x636450
call fcn.10056900
push 0x1003fce0
push 0x857746
mov bl, 0xe8
call fcn.10056900
add esp, 0x40
push 0x1003e530
push 0x4d2180
call fcn.10056900
push 0x10040030
push 0x4e7690
call fcn.10056900
push 0x10040030
push 0x4e775e
call fcn.10056900
push 0x1003f6b0
push 0x81a146
call fcn.10056900
push 0x1003f6b0
push 0x81a199
call fcn.10056900
push 0x1003f5a0
push 0x819415
call fcn.10056900
push 0x1003f640
push 0x81aa9c
call fcn.10056900
push 0x1003f640
push 0x81aa42
call fcn.10056900
add esp, 0x40
push 0x1003f640
push 0x81a9e8
call fcn.10056900
push 0x1003f640
push 0x81a977
call fcn.10056900
push 0x1003f640
push 0x81a944
call fcn.10056900
push 0x1003f640
push 0x81a73d
call fcn.10056900
push 0x1003f640
push 0x81a6f4
call fcn.10056900
push 0x1003f6f0
push 0x943d7f
call fcn.10056900
push 0x1003f780
push 0x8240a9
call fcn.10056900
push 0x1003f820
push 0x945114
call fcn.10056900
add esp, 0x40
push 0x1003f7e0
push 0x945180
call fcn.10056900
push 0x1003f890
push 0x85c446
call fcn.10056900
push 0x1003f8f0
push 0x9448c2
call fcn.10056900
push 0x1003f8f0
push 0x81944b
call fcn.10056900
push 0x1003fbc0
push 0x7c57b9
call fcn.10056900
push 0x1003fc00
push 0x4d7c0d
call fcn.10056900
push 0x1003fc00
push 0x4d7c98
call fcn.10056900
push 0x1003fb40
push 0x7d5e92
call fcn.10056900
add esp, 0x40
push 0x1003fa00
push 0x7d60b0
call fcn.10056900
push 0x1003fb00
push 0x7d5df4
call fcn.10056900
push 0x1003fac0
push 0x7d5d56
call fcn.10056900
push 0x1003f980
push 0x7d6150
call fcn.10056900
push 0x1003fa40
push 0x7d5fce
call fcn.10056900
push 0x1003f940
push 0x7d6060
call fcn.10056900
push 0x1003f9c0
push 0x856486
call fcn.10056900
push 0x1003f9c0
push 0x85f1b9
call fcn.10056900
add esp, 0x40
push 0x1003fa80
push 0x7d5f30
call fcn.10056900
push 0x1003fb80
push 0x7d5ee0
call fcn.10056900
push 0x1003fb80
push 0x7d5e42
call fcn.10056900
push 0x1003fb80
push 0x7d5da4
call fcn.10056900
push 0x1003fb80
push 0x7d61ef
call fcn.10056900
push 0x1003fb80
push 0x7d6100
call fcn.10056900
push 0x1003fb80
push 0x7d601c
call fcn.10056900
push 0x1003fb80
push 0x7d619e
call fcn.10056900
add esp, 0x40
push 0x1003fb80
push 0x7d5f7e
call fcn.10056900
push 0x1003f510
push 0x7f3f87
call fcn.10056900
push 0x1003f510
push 0x7f4a63
call fcn.10056900
push 0x1003f510
push 0x85f90c
call fcn.10056900
push 0x1003f510
push 0x8605bf
call fcn.10056900
push 0x1003f530
push 0x40f2e9
call fcn.10056900
push 0x1003f530
push 0x4d714e
call fcn.10056900
push 0x1003f530
push 0x4d79e7
call fcn.10056900
add esp, 0x40
push 0x1003f530
push 0x4d9756
call fcn.10056900
push 0x1003f510
push 0x5db1aa
call fcn.10056900
push 0x1003f510
push 0x5db22f
call fcn.10056900
push 0x1003f510
push 0x5db322
call fcn.10056900
push 0x1003f510
push 0x5db3a7
call fcn.10056900
push 0x1003f510
push 0x5db46d
call fcn.10056900
push 0x1003f510
push 0x5db4ad
call fcn.10056900
push 0x1003f510
push 0x5db4d5
call fcn.10056900
add esp, 0x40
push 0x1003f510
push 0x5db534
call fcn.10056900
push 0x1003f510
push 0x5db5c4
call fcn.10056900
push 0x1003f510
push 0x5db628
call fcn.10056900
push 0x1003f510
push 0x5db68c
call fcn.10056900
push 0x1003f510
push 0x5db6ed
call fcn.10056900
push 0x1003fc80
push 0x791bd0
call fcn.10056900
push 0x1003fc80
push 0x791c40
call fcn.10056900
push 0x1003fc80
push 0x792e80
call fcn.10056900
add esp, 0x40
push 0x1003fc80
push 0x792f30
call fcn.10056900
push 0x1003fc80
push 0x7a0c58
call fcn.10056900
push 0x1003fc80
push 0x7a229f
call fcn.10056900
push 0x1003fc80
push 0x7a3534
call fcn.10056900
push 0x1003fc80
push 0x7a47cc
call fcn.10056900
push 0x1003fc80
push 0x7a557c
call fcn.10056900
push 0x1003fc80
push 0x7a703e
call fcn.10056900
push 0x1003fc80
push 0x7a8227
call fcn.10056900
add esp, 0x40
push 0x1003fc80
push 0x7a8ed1
call fcn.10056900
push 0x1003fc80
push 0x7a9331
call fcn.10056900
push 0x1003fc80
push 0x7a9a11
call fcn.10056900
push 0x1003fc80
push 0x7a9ec7
call fcn.10056900
push 0x1003fc80
push 0x7aab57
call fcn.10056900
push 0x1003fc80
push 0x7ab8ef
call fcn.10056900
push 0x1003fc80
push 0x7ac60f
call fcn.10056900
push 0x1003fc80
push 0x7ad597
call fcn.10056900
add esp, 0x40
push 0x1003fc80
push 0x7addf7
call fcn.10056900
push 0x1003fc80
push 0x7ae642
call fcn.10056900
push 0x1003fc80
push 0x7b26c2
call fcn.10056900
push 0x1003fc80
push 0x7b2ff2
call fcn.10056900
push 0x1003fc80
push 0x7b3aa2
call fcn.10056900
push 0x1003fc80
push 0x7b4632
call fcn.10056900
push 0x1003fc80
push 0x7b5332
call fcn.10056900
push 0x1003fc80
push 0x7b5d22
call fcn.10056900
add esp, 0x40
push 0x1003fc80
push 0x7b670e
call fcn.10056900
push 0x1003fc80
push 0x7b74c7
call fcn.10056900
push 0x1003fc80
push 0x7b85c2
call fcn.10056900
push 0x1003fc80
push 0x947a52
call fcn.10056900
push 0x1003fc80
push 0x948814
call fcn.10056900
push 0x1003fc80
push 0x94a2b4
call fcn.10056900
push 0x1003fc80
push 0x94b4af
call fcn.10056900
push 0x1003fc80
push 0x94bdd5
call fcn.10056900
add esp, 0x40
push 0x1003fc80
push 0x94c8a4
call fcn.10056900
push 0x1003fc80
push 0x94da92
call fcn.10056900
push 0x1003fc80
push 0x94f0f2
call fcn.10056900
push 0x1003fc80
push 0x94fe84
call fcn.10056900
push 0x1003fc80
push 0x95093c
call fcn.10056900
push 0x1003fc80
push 0x9515b9
call fcn.10056900
add esp, 0x30
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret