Function at 0x10009bf0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x1005ddfc], 1
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
jne 0x1000ab32
push edi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x6249e5
call esi
mov eax, 0x90909090
mov ecx, 0x6249e5
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x6249e5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x6092d6
call esi
mov eax, 0x90909090
mov ecx, 0x6092d6
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x6092d6
call esi
push 0x10008830
push 0x6248d4
mov bl, 0xe8
call fcn.1000ded0
push 0x100089d0
push 0x6248fe
call fcn.1000ded0
add esp, 0x10
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x6092f0
call esi
mov eax, 0x90909090
mov ecx, 0x6092f0
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x6092f0
call esi
push 0x10008a50
push 0x62492e
call fcn.1000ded0
push 0x10008b80
push 0x62495b
call fcn.1000ded0
add esp, 0x10
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x60930a
call esi
mov ecx, 0x60930a
mov eax, 0x90909090
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x60930a
call esi
push 0x10008be0
push 0x62498b
call fcn.1000ded0
push 0x10008d10
push 0x6249b8
call fcn.1000ded0
add esp, 0x10
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x609327
call esi
mov eax, 0x90909090
mov ecx, 0x609327
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x609327
call esi
push 0x10008d80
push 0x6249e5
call fcn.1000ded0
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x609378
call esi
mov eax, 0x90909090
mov ecx, 0x609378
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x609378
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x609392
call esi
mov eax, 0x90909090
mov ecx, 0x609392
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x609392
call esi
push 0x10008ea0
push 0x626128
call fcn.1000ded0
push 0x10009930
push 0x626188
call fcn.1000ded0
push 0x10009bd0
push 0x6233b8
mov bl, 0xe9
call fcn.1000ded0
push 0x10009be0
push 0x6233cb
call fcn.1000ded0
push 0x10009bb0
push 0x626130
call fcn.1000ded0
add esp, 0x28
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6233e5
call esi
mov edi, 0xa7
lea ecx, [ebp - 4]
push ecx
mov dword [0x6233e5], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6233e5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x626146
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x626146], 0x46
mov edx, dword [ebp - 4]
push edx
push 1
push 0x626146
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x626151
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x626151], 0x94
mov edx, dword [ebp - 4]
push edx
push 4
push 0x626151
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x626158
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x626158], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x626158
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x626108
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x626108], 0
mov edx, dword [ebp - 4]
push edx
push 1
push 0x626108
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x6093ac
call esi
mov eax, 0x90909090
mov ecx, 0x6093ac
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x6093ac
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x6093c9
call esi
mov eax, 0x90909090
mov ecx, 0x6093c9
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x6093c9
call esi
push 0x10008fd0
push 0x6261ca
mov bl, 0xe8
call fcn.1000ded0
push 0x10009800
push 0x626229
call fcn.1000ded0
add esp, 0x10
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6261d4
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6261d4], 7
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6261d4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6261e7
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6261e7], 0x46
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6261e7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6261f2
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6261f2], 0x94
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6261f2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6261f9
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6261f9], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6261f9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x62619b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x62619b], 0x1b2
mov edx, dword [ebp - 4]
push edx
push 4
push 0x62619b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x609341
call esi
mov eax, 0x90909090
mov ecx, 0x609341
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x609341
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x60935b
call esi
mov eax, 0x90909090
mov ecx, 0x60935b
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x60935b
call esi
push 0x10009100
push 0x62605c
call fcn.1000ded0
push 0x10009a60
push 0x6260bb
call fcn.1000ded0
push 0x10009ba0
push 0x6232ba
mov bl, 0xe9
call fcn.1000ded0
add esp, 0x18
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6232b6
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6232b6], 0x11e
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6232b6
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6232c8
call esi
mov edi, 0x164
lea ecx, [ebp - 4]
push ecx
mov dword [0x6232c8], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6232c8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6232e2
call esi
mov bl, 0x19
lea ecx, [ebp - 4]
push ecx
mov byte [0x6232e2], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6232e2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x62606f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x62606f], 0x11e
mov edx, dword [ebp - 4]
push edx
push 4
push 0x62606f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x62607a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x62607a], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x62607a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x62606c
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x62606c], 0x2e
mov edx, dword [ebp - 4]
push edx
push 1
push 0x62606c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x62608c
call esi
lea ecx, [ebp - 4]
mov byte [0x62608c], bl
push ecx
mov edx, dword [ebp - 4]
push edx
push 1
push 0x62608c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x6093e3
call esi
mov eax, 0x90909090
mov ecx, 0x6093e3
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x6093e3
call esi
push 0x10009240
push 0x625a80
mov bl, 0xe8
call fcn.1000ded0
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x6093fd
call esi
mov eax, 0x90909090
mov ecx, 0x6093fd
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x6093fd
call esi
push 0x10009370
push 0x625abb
call fcn.1000ded0
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x609434
call esi
mov eax, 0x90909090
mov ecx, 0x609434
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x609434
call esi
push 0x100094e0
push 0x625d20
call fcn.1000ded0
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625cda
call esi
lea ecx, [ebp - 4]
mov dword [0x625cda], 0x14f
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x625cda
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625ce5
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x625ce5], 0x197
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625ce5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625c65
call esi
mov edi, 0x13f
lea ecx, [ebp - 4]
push ecx
mov dword [0x625c65], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625c65
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x625cf1
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x625cf1], 0x15
mov edx, dword [ebp - 4]
push edx
push 1
push 0x625cf1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x60941a
call esi
mov eax, 0x90909090
mov ecx, 0x60941a
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x60941a
call esi
push 0x10009610
push 0x625cbc
call fcn.1000ded0
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x623871
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x623871], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x623871
call esi
push 0x10009740
push 0x625b26
call fcn.1000ded0
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625acb
call esi
mov edi, 0xa6
lea ecx, [ebp - 4]
push ecx
mov dword [0x625acb], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625acb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625ad1
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x625ad1], 0x16b
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625ad1
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625adc
call esi
mov ebx, 0x17f
lea ecx, [ebp - 4]
push ecx
mov dword [0x625adc], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625adc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x625aee
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x625aee], 0x13
mov edx, dword [ebp - 4]
push edx
push 1
push 0x625aee
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625b61
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x625b61], 0x43b68000
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625b61
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x623722
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x623722], 0x16b
mov edx, dword [ebp - 4]
push edx
push 4
push 0x623722
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x623736
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x623736], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x623736
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x62372b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x62372b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x62372b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x623748
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x623748], 0x13
mov edx, dword [ebp - 4]
push edx
push 1
push 0x623748
call esi
push 0x100097a0
push 0x625bf7
mov bl, 0xe8
call fcn.1000ded0
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625b9c
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x625b9c], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625b9c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625ba2
call esi
lea ecx, [ebp - 4]
mov dword [0x625ba2], 0x180
mov edx, dword [ebp - 4]
push ecx
push edx
push 4
push 0x625ba2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625bad
call esi
mov ebx, 0x194
lea ecx, [ebp - 4]
push ecx
mov dword [0x625bad], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625bad
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x625bbf
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x625bbf], 0x13
mov edx, dword [ebp - 4]
push edx
push 1
push 0x625bbf
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625c34
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x625c34], 0x43c00000
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625c34
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6237bc
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6237bc], 0x167
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6237bc
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6237c7
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6237c7], ebx
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6237c7
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6237e0
call esi
mov byte [0x6237e0], 0x13
lea ecx, [ebp - 4]
mov edx, dword [ebp - 4]
push ecx
push edx
push 1
push 0x6237e0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x62372b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x62372b], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x62372b
call esi
push 0x100094b0
push 0x625e44
mov bl, 0xe8
call fcn.1000ded0
add esp, 8
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625f0d
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x625f0d], 0x11b
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625f0d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x625f08
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x625f08], 0x3c
mov edx, dword [ebp - 4]
push edx
push 1
push 0x625f08
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625d3e
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x625d3e], 0x96
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625d3e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x625db4
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x625db4], 0x11c
mov edx, dword [ebp - 4]
push edx
push 4
push 0x625db4
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x609579
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x609579], 6
mov edx, dword [ebp - 4]
push edx
push 1
push 0x609579
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624a8d
call esi
mov eax, 0x90909090
mov ecx, 0x624a8d
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624a8d
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624aba
call esi
mov eax, 0x90909090
mov ecx, 0x624aba
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624aba
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624b08
call esi
mov eax, 0x90909090
mov ecx, 0x624b08
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624b08
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624b43
call esi
mov ecx, 0x624b43
mov eax, 0x90909090
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624b43
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624b8a
call esi
mov eax, 0x90909090
mov ecx, 0x624b8a
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624b8a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624be2
call esi
mov eax, 0x90909090
mov ecx, 0x624be2
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624be2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624c53
call esi
mov eax, 0x90909090
mov ecx, 0x624c53
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624c53
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624ca2
call esi
mov eax, 0x90909090
mov ecx, 0x624ca2
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624ca2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624d05
call esi
mov ecx, 0x624d05
mov eax, 0x90909090
mov dword [ecx], eax
mov byte [ecx + 4], al
lea ecx, [ebp - 4]
push ecx
mov edx, dword [ebp - 4]
push edx
push 5
push 0x624d05
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624d54
call esi
mov eax, 0x90909090
mov ecx, 0x624d54
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624d54
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624dac
call esi
mov eax, 0x90909090
mov ecx, 0x624dac
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624dac
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624e11
call esi
mov eax, 0x90909090
mov ecx, 0x624e11
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624e11
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624e71
call esi
mov eax, 0x90909090
mov ecx, 0x624e71
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624e71
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624ee2
call esi
mov eax, 0x90909090
mov ecx, 0x624ee2
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624ee2
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624f60
call esi
mov eax, 0x90909090
mov ecx, 0x624f60
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624f60
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x624fc5
call esi
mov eax, 0x90909090
mov ecx, 0x624fc5
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x624fc5
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x625022
call esi
mov eax, 0x90909090
mov ecx, 0x625022
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x625022
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x62506e
call esi
mov eax, 0x90909090
mov ecx, 0x62506e
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x62506e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x6250bd
call esi
mov eax, 0x90909090
mov ecx, 0x6250bd
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x6250bd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x62510c
call esi
mov eax, 0x90909090
mov ecx, 0x62510c
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 5
push 0x62510c
call esi
pop edi
cmp dword [0x1005ddfc], 0
jne 0x1000abe7
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6094bb
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6094bb], 0x100117f8
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6094bb
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x6094d8
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x6094d8], 0x10011808
mov edx, dword [ebp - 4]
push edx
push 4
push 0x6094d8
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x609532
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x609532], 0x10011818
mov edx, dword [ebp - 4]
push edx
push 4
push 0x609532
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x60954f
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x60954f], 0x10011828
mov edx, dword [ebp - 4]
push edx
push 4
push 0x60954f
call esi
cmp dword [0x1005ddd8], 1
jne 0x1000ac04
push 0x10008770
push 0x598c11
mov bl, 0xe8
call fcn.1000ded0
add esp, 8
pop esi
pop ebx
mov esp, ebp
pop ebp
ret