Function at 0x10039100
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x1013f040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x100390f0
push 0x4cf56c
push 0xe8
call fcn.100744c0
push 0x100390f0
push 0x4d04ba
push 0xe8
call fcn.100744c0
push 0x100390f0
push 0x77255e
push 0xe8
call fcn.100744c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
add esp, 0x24
push eax
push 0x40
push 4
push 0x4d57c8
call edi
lea eax, [ebp - 8]
mov dword [0x4d57c8], 0x1013261c
push eax
push dword [ebp - 8]
push 4
push 0x4d57c8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d57e8
call edi
lea eax, [ebp - 8]
mov dword [0x4d57e8], 0x10132638
push eax
push dword [ebp - 8]
push 4
push 0x4d57e8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d5808
call edi
lea eax, [ebp - 8]
mov dword [0x4d5808], 0x10132654
push eax
push dword [ebp - 8]
push 4
push 0x4d5808
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d5828
call edi
lea eax, [ebp - 8]
mov dword [0x4d5828], 0x10132670
push eax
push dword [ebp - 8]
push 4
push 0x4d5828
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d5848
call edi
lea eax, [ebp - 8]
mov dword [0x4d5848], 0x1013268c
push eax
push dword [ebp - 8]
push 4
push 0x4d5848
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d5868
call edi
lea eax, [ebp - 8]
mov dword [0x4d5868], 0x101326a8
push eax
push dword [ebp - 8]
push 4
push 0x4d5868
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x24
push 0x81028c
call edi
mov eax, 0x81028c
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x24
push 0x81028c
call edi
push 0x10037620
push 0x81028c
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 0x24
push 0x81055c
call edi
mov eax, 0x81055c
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x24
push 0x81055c
call edi
push 0x10037710
push 0x81055c
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 0x24
push 0x80ffaf
call edi
mov eax, 0x80ffaf
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x24
push 0x80ffaf
call edi
push 0x10037800
push 0x80ffaf
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 0x24
push 0x80fd5b
call edi
mov eax, 0x80fd5b
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x24
push 0x80fd5b
call edi
push 0x100378f0
push 0x80fd5b
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 0x12
push 0x80ff12
call edi
mov eax, 0x80ff12
mov ecx, 0x90909090
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov word [eax + 0x10], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x12
push 0x80ff12
call edi
push 0x100379e0
push 0x80ff12
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 0x24
push 0x8138df
call edi
mov eax, 0x8138df
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x24
push 0x8138df
call edi
push 0x10037e30
push 0x8138df
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895a49
call edi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895a49
call edi
push 0x10037f20
push 0x895a49
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895a53
call edi
mov eax, 0x895a53
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895a53
call edi
push 0x10037f90
push 0x895a53
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895a5d
call edi
mov eax, 0x895a5d
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895a5d
call edi
push 0x10038000
push 0x895a5d
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895a67
call edi
mov eax, 0x895a67
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895a67
call edi
push 0x10038070
push 0x895a67
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895abe
call edi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895abe
call edi
push 0x100380e0
push 0x895abe
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895ac8
call edi
mov eax, 0x895ac8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895ac8
call edi
push 0x10038150
push 0x895ac8
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895ad2
call edi
mov eax, 0x895ad2
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895ad2
call edi
push 0x100381c0
push 0x895ad2
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895adc
call edi
mov eax, 0x895adc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895adc
call edi
push 0x10038230
push 0x895adc
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895b33
call edi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895b33
call edi
push 0x100382a0
push 0x895b33
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895b3d
call edi
mov eax, 0x895b3d
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895b3d
call edi
push 0x10038310
push 0x895b3d
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895b47
call edi
mov eax, 0x895b47
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895b47
call edi
push 0x10038380
push 0x895b47
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 9
push 0x895b51
call edi
mov eax, 0x895b51
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov byte [eax + 8], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 9
push 0x895b51
call edi
push 0x100383f0
push 0x895b51
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 0x12
push 0x810373
call edi
mov eax, 0x810373
mov ecx, 0x90909090
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov word [eax + 0x10], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x12
push 0x810373
call edi
push 0x10037b50
push 0x810373
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 0x12
push 0x810643
call edi
mov eax, 0x810643
mov ecx, 0x90909090
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov word [eax + 0x10], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x12
push 0x810643
call edi
push 0x10037cc0
push 0x810643
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 0x7e
push 0x895b8d
call edi
push 0x7e
push 0x90
push 0x895b8d
call fcn.100dcbf0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x7e
push 0x895b8d
call edi
push 0x10038460
push 0x895b8d
push 0xe9
call fcn.100744c0
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
add esp, 0xc
push eax
divss xmm0, dword [0xe7c3d8]
push 0x40
push 4
push 0x80ff9a
subss xmm0, dword [0x10134018]
addss xmm0, dword [0x10133ff4]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x80ff9a], esi
push eax
push dword [ebp - 8]
push 4
push 0x80ff9a
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x81012d
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10134018]
addss xmm0, dword [0x10133ff4]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x81012d], esi
push eax
push dword [ebp - 8]
push 4
push 0x81012d
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x8103f8
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10134018]
addss xmm0, dword [0x10133ff4]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x8103f8], esi
push eax
push dword [ebp - 8]
push 4
push 0x8103f8
call edi
movd xmm0, dword [0xe61e5c]
lea eax, [ebp - 8]
cvtdq2ps xmm0, xmm0
push eax
push 0x40
push 4
push 0x8106da
divss xmm0, dword [0xe7c3d8]
subss xmm0, dword [0x10134018]
addss xmm0, dword [0x10133ff4]
cvttss2si esi, xmm0
call edi
lea eax, [ebp - 8]
mov dword [0x8106da], esi
push eax
push dword [ebp - 8]
push 4
push 0x8106da
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x7e
push 0x8117b2
call edi
push 0x7e
push 0x90
push 0x8117b2
call fcn.100dcbf0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x7e
push 0x8117b2
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3af2
call edi
lea eax, [ebp - 8]
mov byte [0x7d3af2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3af2
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3a4b
call edi
lea eax, [ebp - 8]
mov byte [0x7d3a4b], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3a4b
call edi
push 0x10037310
push 0x81a146
push 0xe8
call fcn.100744c0
push 0x10037310
push 0x81a199
push 0xe8
call fcn.100744c0
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 0x88
push 0x77ec97
call edi
push 0x88
push 0x90
push 0x77ec97
call fcn.100dcbf0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x88
push 0x77ec97
call edi
push 0x10038470
push 0x77ec97
push 0xe9
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x834e13
call edi
lea eax, [ebp - 8]
mov byte [0x834e13], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x834e13
call edi
push 0x8369e4
push 0x836971
push 0xe9
call fcn.100744c0
push 0x100384f0
push 0x8126c0
push 0xe9
call fcn.100744c0
push 0x10038d50
push 0x813970
push 0xe9
call fcn.100744c0
add esp, 0x24
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x95d010
call edi
lea eax, [ebp - 8]
mov byte [0x95d010], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x95d010
call edi
push 0x95dfd3
push 0x95dfbe
push 0xe9
call fcn.100744c0
push 0x856fd2
push 0x856faa
push 0xe9
call fcn.100744c0
push 0x7d3725
push 0x7d371e
push 0xe9
call fcn.100744c0
push 0x836a23
push 0x8369fa
push 0xe9
call fcn.100744c0
push 0x7d36bf
push 0x7d36b8
push 0xe9
call fcn.100744c0
push 0x7d3fa3
push 0x7d3f9c
push 0xe9
call fcn.100744c0
add esp, 0x44
mov ecx, 0xd46c8c
call fcn.10070f40
mov ecx, 0xd46c84
call fcn.10070f40
add esp, 4
lea eax, [ebp - 8]
push eax
push 0x40
push 0x30
push 0x62f876
call edi
push 0x30
push 0x90
push 0x62f876
call fcn.100dcbf0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x30
push 0x62f876
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa3ba
call edi
mov eax, 0x7aa3ba
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa3ba
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa39c
call edi
mov eax, 0x7aa39c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa39c
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7aa9b3
call edi
mov eax, 0x7aa9b3
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7aa9b3
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db7b0
call edi
mov eax, 0x7db7b0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db7b0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db812
call edi
mov eax, 0x7db812
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db812
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db874
call edi
mov eax, 0x7db874
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db874
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db8e0
call edi
mov eax, 0x7db8e0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db8e0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db959
call edi
mov eax, 0x7db959
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db959
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7db9a2
call edi
mov eax, 0x7db9a2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7db9a2
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba20
call edi
mov eax, 0x7dba20
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba20
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7dba69
call edi
mov eax, 0x7dba69
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7dba69
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x834e13
call edi
lea eax, [ebp - 8]
mov byte [0x834e13], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x834e13
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d37a2
call edi
lea eax, [ebp - 8]
mov byte [0x7d37a2], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d37a2
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d39a0
call edi
lea eax, [ebp - 8]
mov byte [0x7d39a0], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d39a0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d3c6c
call edi
lea eax, [ebp - 8]
mov byte [0x7d3c6c], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d3c6c
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x7d4110
call edi
lea eax, [ebp - 8]
mov byte [0x7d4110], 0xff
push eax
push dword [ebp - 8]
push 1
push 0x7d4110
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x7c5ad2
call edi
mov eax, 0x7c5ad2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x7c5ad2
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x52
push 0x8684f0
call edi
push 0x52
push 0x90
push 0x8684f0
call fcn.100dcbf0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x52
push 0x8684f0
call edi
push 0x77ec0e
push 0x77eb65
push 0xe9
call fcn.100744c0
push 0x10038480
push 0x77ec59
push 0xe9
call fcn.100744c0
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 0x4d1
push 0x80f270
call edi
push 0x4d1
push 0x90
push 0x80f270
call fcn.100dcbf0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x4d1
push 0x80f270
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8137b2
call edi
lea eax, [ebp - 8]
mov byte [0x8137b2], 0
push eax
push dword [ebp - 8]
push 1
push 0x8137b2
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8119a7
call edi
lea eax, [ebp - 8]
mov byte [0x8119a7], 0xeb
push eax
push dword [ebp - 8]
push 1
push 0x8119a7
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 0xac
push 0x811ac0
call edi
push 0xac
push 0x90
push 0x811ac0
call fcn.100dcbf0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0xac
push 0x811ac0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0xd461c8
call edi
movsd xmm0, qword [0x10133ce8]
lea eax, [ebp - 8]
push eax
movsd qword [0xd461c8], xmm0
push dword [ebp - 8]
push 8
push 0xd461c8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0xd461d0
call edi
movsd xmm0, qword [0x10133da8]
lea eax, [ebp - 8]
push eax
movsd qword [0xd461d0], xmm0
push dword [ebp - 8]
push 8
push 0xd461d0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4d9749
call edi
lea eax, [ebp - 8]
mov dword [0x4d9749], 0x1e0
push eax
push dword [ebp - 8]
push 4
push 0x4d9749
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 8
push 0xd27af8
call edi
movsd xmm0, qword [0x10133cd8]
lea eax, [ebp - 8]
push eax
movsd qword [0xd27af8], xmm0
push dword [ebp - 8]
push 8
push 0xd27af8
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x85af21
call edi
lea eax, [ebp - 8]
mov byte [0x85af21], 0x19
push eax
push dword [ebp - 8]
push 1
push 0x85af21
call edi
push 0x100384b0
push 0x857746
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x5b6180
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x40f2e9
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x4d714e
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x4d79e7
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x4d9756
push 0xe8
call fcn.100744c0
add esp, 0x48
push 0x100384a0
push 0x5db4d5
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x5db1aa
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x5db22f
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x5db322
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x5db3a7
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x5db46d
push 0xe8
call fcn.100744c0
add esp, 0x48
push 0x100384a0
push 0x5db4ad
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x5db534
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x5db5c4
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x5db628
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x5db68c
push 0xe8
call fcn.100744c0
push 0x100384a0
push 0x5db6ed
push 0xe8
call fcn.100744c0
add esp, 0x48
push 0x100384a0
push 0x8605bf
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x5b8344
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x47fff4
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x48007c
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x4f2a6c
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x4f2b55
push 0xe8
call fcn.100744c0
add esp, 0x48
push 0x10038490
push 0x5b4956
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x5b9e22
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x5bafe5
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x7d453e
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x7df2d9
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x7dfd4b
push 0xe8
call fcn.100744c0
add esp, 0x48
push 0x10038490
push 0x7dfd54
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x7dfd68
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x7f3f87
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x7f4a63
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x7fac46
push 0xe8
call fcn.100744c0
push 0x10038490
push 0x8346f6
push 0xe8
call fcn.100744c0
add esp, 0x48
push 0x10038490
push 0x85f90c
push 0xe8
call fcn.100744c0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x4030d4
call edi
lea eax, [ebp - 8]
mov byte [0x4030d4], 4
push eax
push dword [ebp - 8]
push 1
push 0x4030d4
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x834d94
call edi
lea eax, [ebp - 8]
mov byte [0x834d94], 0x52
push eax
push dword [ebp - 8]
push 1
push 0x834d94
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 0x198
push 0x7a8330
call edi
push 0x198
push 0x90
push 0x7a8330
call fcn.100dcbf0
add esp, 0xc
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 0x198
push 0x7a8330
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1008eacb
mov esp, ebp
pop ebp
ret