Function at 0x10032e10
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
mov eax, dword [0x10061018]
xor eax, ebp
mov dword [ebp - 4], eax
push 0
push 0
push 0
push 0x10032d60
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 4
lea eax, [ebp - 0x11c]
push eax
push 0x22
push 0xffffffffffffffff
mov dword [ebp - 0x11c], 2
call dword [0x101dac70]
push 0x333ccc
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
test eax, eax
je 0x10032e6f
mov dword [eax], vtable.CProtect.0
jmp 0x10032e71
xor eax, eax
mov dword [0x100c810c], eax
call fcn.1004dda0
test al, al
jne 0x10032e9b
push 0x10
push str.Error
push str.exg.emu_Danificado_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0xe61144
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0xe61144], 0xa0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0xe61144
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d1e69
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d1e69], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d1e69
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d228d
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d228d], 0xe9
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d228d
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d228e
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d228e], 0x8b
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d228e
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d228f
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d228f], 0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d228f
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d2290
call esi
mov byte [0x4d2290], 0
mov eax, dword [ebp - 0x108]
lea edx, [ebp - 0x108]
push edx
push eax
push 1
push 0x4d2290
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d2291
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d2291], 0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d2291
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d559c
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d559c], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d559c
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x633f7a
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x633f7a], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x633f7a
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x634403
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x634403], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x634403
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x63e6c4
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x63e6c4], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x63e6c4
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4d2246
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x4d2246], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4d2246
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x501163
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x501163], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x501163
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40af0a
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x40af0a], 0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40af0a
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40b4bc
call esi
mov bl, 0x50
lea edx, [ebp - 0x108]
push edx
mov byte [0x40b4bc], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40b4bc
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40b4c5
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x40b4c5], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40b4c5
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40b4cf
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x40b4cf], 0x18
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40b4cf
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40af0a
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x40af0a], 0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40af0a
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x40afd5
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x40afd5], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x40afd5
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x777fd6
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x777fd6], 0x70
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x777fd6
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x777fd7
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x777fd7], 0x17
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x777fd7
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x4ebec7
call esi
mov bl, 0x3c
lea edx, [ebp - 0x108]
push edx
mov byte [0x4ebec7], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x4ebec7
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x5c4004
call esi
lea edx, [ebp - 0x108]
mov byte [0x5c4004], bl
mov eax, dword [ebp - 0x108]
push edx
push eax
push 1
push 0x5c4004
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x7e40bb
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x7e40bb], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x7e40bb
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x81b546
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x81b546], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x81b546
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x81b58d
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x81b58d], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x81b58d
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x86e284
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x86e284], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x86e284
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x86e44c
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x86e44c], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x86e44c
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x86e573
call esi
mov byte [0x86e573], bl
mov eax, dword [ebp - 0x108]
lea edx, [ebp - 0x108]
push edx
push eax
push 1
push 0x86e573
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x86f8fc
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x86f8fc], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x86f8fc
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x7da373
call esi
mov bl, 0xb7
lea edx, [ebp - 0x108]
push edx
mov byte [0x7da373], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x7da373
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x7e1c44
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x7e1c44], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x7e1c44
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x52100d
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x52100d], 0xeb
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x52100d
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x9543c4
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x9543c4], 0
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x9543c4
call esi
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 0x1b
push 0xd20170
call esi
mov ecx, 0xd20170
mov eax, 0x90909090
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov word [ecx + 0x18], ax
lea edx, [ebp - 0x108]
push edx
mov byte [ecx + 0x1a], al
mov eax, dword [ebp - 0x108]
push eax
push 0x1b
push ecx
call esi
mov ecx, dword [0x100c810c]
mov ebx, dword [ecx + 0x298]
lea edx, [ebp - 0x108]
push edx
neg ebx
push 0x40
sbb bl, bl
push 1
and bl, 0x8a
push 0x64cbd1
add bl, 0xeb
call esi
lea eax, [ebp - 0x108]
push eax
mov byte [0x64cbd1], bl
mov ecx, dword [ebp - 0x108]
push ecx
push 1
push 0x64cbd1
call esi
mov edx, dword [0x100c810c]
mov bl, byte [edx + 0x29c]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x64cbd0
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x64cbd0], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x64cbd0
call esi
mov eax, dword [0x100c810c]
mov bl, byte [eax + 0x29c]
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0x95ceef
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0x95ceef], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0x95ceef
call esi
mov ecx, dword [0x100c810c]
mov bl, byte [ecx + 0x29c]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 1
push 0x95cf14
call esi
mov byte [0x95cf14], bl
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 1
push 0x95cf14
call esi
mov edx, dword [0x100c810c]
mov bl, byte [edx + 0x68]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f68
inc bl
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f68], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f68
call esi
mov eax, dword [0x100c810c]
mov bl, byte [eax + 0x6a]
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 1
push 0xe61f69
add bl, 2
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0xe61f69], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0xe61f69
call esi
mov ecx, dword [0x100c810c]
mov bl, byte [ecx + 0x6b]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 1
push 0xe61f6a
add bl, 3
call esi
lea eax, [ebp - 0x108]
push eax
mov byte [0xe61f6a], bl
mov ecx, dword [ebp - 0x108]
push ecx
push 1
push 0xe61f6a
call esi
mov edx, dword [0x100c810c]
mov bl, byte [edx + 0x6d]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f6b
add bl, 4
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f6b], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f6b
call esi
mov eax, dword [0x100c810c]
mov bl, byte [eax + 0x6e]
lea ecx, [ebp - 0x108]
push ecx
add bl, 5
push 0x40
push 1
push 0xe61f6c
call esi
lea edx, [ebp - 0x108]
push edx
mov byte [0xe61f6c], bl
mov eax, dword [ebp - 0x108]
push eax
push 1
push 0xe61f6c
call esi
mov ecx, dword [0x100c810c]
movzx edi, word [ecx + 0x66]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 2
push 0xe609e4
call esi
lea eax, [ebp - 0x108]
push eax
mov word [0xe609e4], di
mov ecx, dword [ebp - 0x108]
push ecx
push 2
push 0xe609e4
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4d597b
call esi
mov edi, 0x100ccdc8
lea eax, [ebp - 0x108]
push eax
mov dword [0x4d597b], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4d597b
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4da289
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4da289], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4da289
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4da297
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4da297], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4da297
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4da3a2
call esi
lea eax, [ebp - 0x108]
mov dword [0x4da3a2], edi
mov ecx, dword [ebp - 0x108]
push eax
push ecx
push 4
push 0x4da3a2
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4da3ce
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4da3ce], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4da3ce
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4da3d9
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4da3d9], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4da3d9
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x63d326
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x63d326], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x63d326
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x642112
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x642112], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x642112
call esi
push 0x10022e20
push 0x4da280
mov bl, 0xe9
call fcn.10053c00
push 0x10022e50
push 0x4da3a1
call fcn.10053c00
add esp, 0x10
mov ebx, 0xc
mov edi, 0x4d9d39
call fcn.10053c80
mov ebx, 7
mov edi, 0x4d9d45
call fcn.10053c80
mov ebx, 0xf
mov edi, 0x4d9efc
call fcn.10053c80
mov ebx, 8
mov edi, 0x4dac5c
call fcn.10053c80
mov ebx, 5
mov edi, 0x5451f7
call fcn.10053c80
mov ebx, 8
mov edi, 0x545230
call fcn.10053c80
mov edi, 0x5a52e9
call fcn.10053c80
mov edi, dword [0x100c810c]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4d0e09
add edi, 0x81
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4d0e09], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4d0e09
call esi
mov edi, dword [0x100c810c]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x4d9f55
add edi, 0xa1
call esi
lea eax, [ebp - 0x108]
push eax
mov dword [0x4d9f55], edi
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x4d9f55
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 0x69d
push 0x6097b0
call esi
push 0x69d
push 0x90
push 0x6097b0
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x108]
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push ecx
push 0x69d
push 0x6097b0
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57bf78
call esi
mov eax, 0x90909090
mov ecx, 0x57bf78
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57bf78
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57c125
call esi
mov eax, 0x90909090
mov ecx, 0x57c125
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57c125
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57be80
call esi
mov eax, 0x90909090
mov ecx, 0x57be80
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57be80
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57c057
call esi
mov eax, 0x90909090
mov ecx, 0x57c057
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57c057
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57bf0e
call esi
mov eax, 0x90909090
mov ecx, 0x57bf0e
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57bf0e
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57c0bb
call esi
mov eax, 0x90909090
mov ecx, 0x57c0bb
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57c0bb
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57aba9
call esi
mov eax, 0x90909090
mov ecx, 0x57aba9
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57aba9
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57acbf
call esi
mov eax, 0x90909090
mov ecx, 0x57acbf
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57acbf
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57ad03
call esi
mov eax, 0x90909090
mov ecx, 0x57ad03
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57ad03
call esi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 5
push 0x57ad47
call esi
mov eax, 0x90909090
mov ecx, 0x57ad47
mov dword [ecx], eax
mov byte [ecx + 4], al
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 5
push 0x57ad47
call esi
lea esi, [ebx - 3]
mov ebx, 0xd46c84
call fcn.100533c0
push 0x55c790
push 0x55c782
mov bl, 0xe9
call fcn.10053c00
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 8
lea edx, [ebp - 0x108]
push edx
push 0x40
push 1
push 0x5c914e
call edi
mov byte [0x5c914e], 0
lea eax, [ebp - 0x108]
mov ecx, dword [ebp - 0x108]
push eax
push ecx
push 1
push 0x5c914e
call edi
lea edx, [ebp - 0x108]
push edx
push 0x40
push 0x14
push 0x63e908
call edi
mov eax, 0x90909090
mov ecx, 0x63e908
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, dword [ebp - 0x108]
lea eax, [ebp - 0x108]
push eax
push ecx
push 0x14
push 0x63e908
call edi
push 0x644537
push 0x64452a
call fcn.10053c00
push 0x5db408
push 0x5db322
call fcn.10053c00
push 0x720894
push 0x71b1a3
call fcn.10053c00
push 0x95dfd3
push 0x95dfbe
call fcn.10053c00
add esp, 0x20
call fcn.10022cc0
lea edx, [ebp - 0x108]
push edx
push 0x40
push 4
push 0x59c6fe
call edi
lea eax, [ebp - 0x108]
push eax
mov dword [0x59c6fe], 0
mov ecx, dword [ebp - 0x108]
push ecx
push 4
push 0x59c6fe
call edi
push 0x100cb3e0
lea eax, [esi + 0x66]
call fcn.10053db0
push 0x100cb5c0
lea eax, [esi + 0x67]
call fcn.10053db0
push 0x100cb4d0
lea eax, [esi + 0x65]
call fcn.10053db0
mov esi, dword [0x100c810c]
add esp, 0xc
lea edx, [ebp - 0x10c]
push edx
push 0x40
push 0x20
push 0xe611b2
add esi, 0x45
call edi
push 0x20
push esi
push 0xe611b2
call sub.MSVCR100.dll_memcpy
mov ecx, dword [ebp - 0x10c]
add esp, 0xc
lea eax, [ebp - 0x10c]
push eax
push ecx
push 0x20
push 0xe611b2
call edi
mov esi, dword [0x100c810c]
lea edx, [ebp - 0x108]
push edx
push 0x40
push 0x11
push 0xe61f70
call edi
mov ecx, dword [esi + 0x70]
mov eax, 0xe61f70
mov dword [eax], ecx
mov edx, dword [esi + 0x74]
mov dword [eax + 4], edx
mov ecx, dword [esi + 0x78]
mov dword [eax + 8], ecx
mov edx, dword [esi + 0x7c]
mov dword [eax + 0xc], edx
mov cl, byte [esi + 0x80]
lea edx, [ebp - 0x108]
push edx
mov byte [eax + 0x10], cl
mov eax, dword [ebp - 0x108]
push eax
push 0x11
push 0xe61f70
call edi
push fcn.1004e860
push 0x65fd79
or bl, 0xff
call fcn.10053c00
push 0x100230a0
push 0x5b96e8
mov bl, 0xe8
call fcn.10053c00
mov esi, dword [0x100c810c]
add esp, 0x10
lea eax, [esi + 0x450]
call fcn.1001fcc0
lea eax, [esi + 0x37e0]
call fcn.1001fd20
lea eax, [esi + 0x6b70]
call fcn.1001fd80
lea eax, [esi + 0x9f00]
call fcn.1001e7c0
lea edx, [esi + 0xa98c]
call fcn.10022420
lea eax, [esi + 0x14d9c]
call fcn.100172e0
mov esi, dword [0x100c810c]
lea eax, [esi + 0x1a155c]
call fcn.1000e380
lea eax, [esi + 0x1a1610]
call fcn.1000f070
lea eax, [esi + 0x1a3870]
call fcn.1000fdf0
mov ebx, 1
test byte [0x101dada0], bl
jne 0x10033f16
or dword [0x101dada0], ebx
call fcn.10006250
push 0x10057b80
call fcn.100560f0
mov esi, dword [0x100c810c]
add esp, 4
lea edx, [esi + 0x2e3dc]
push 0x101dada4
call fcn.10006510
test byte [0x101dada0], bl
jne 0x10033f46
or dword [0x101dada0], ebx
call fcn.10006250
push 0x10057b80
call fcn.100560f0
add esp, 4
mov edx, dword [0x100c810c]
add edx, 0xe7c9c
push 0x101dada4
call fcn.10006710
mov esi, dword [0x100c810c]
lea eax, [esi + 0x1a66b8]
call fcn.10010950
lea eax, [esi + 0x1a3fa8]
call fcn.1002f6a0
mov esi, dword [0x100c810c]
lea eax, [esi + 0x1a7270]
call fcn.1001fff0
lea edx, [esi + 0x1abbe0]
call fcn.10020ad0
lea eax, [esi + 0x1ada58]
call fcn.10011195
mov eax, dword [0x100c810c]
add eax, 0x1acea0
call fcn.1000cf60
mov eax, dword [0x100c810c]
add eax, 0x1af290
call fcn.10020db0
mov eax, dword [0x100c810c]
add eax, 0x1b96a0
call fcn.1000e610
mov eax, dword [0x100c810c]
add eax, 0x1bec90
call fcn.1001a6f0
mov esi, dword [0x100c810c]
lea ecx, [esi + 0x1c6990]
call fcn.1000fda0
lea eax, [esi + 0x1c6fd0]
call fcn.100209e0
lea eax, [esi + 0x1c7930]
call fcn.100357f0
mov eax, dword [0x100c810c]
add eax, 0x1d53f0
call fcn.10012200
mov esi, dword [0x100c810c]
lea edx, [esi + 0x1e8c70]
call fcn.100183f0
lea eax, [esi + 0x1ef9d0]
call fcn.10031bd0
lea eax, [esi + 0x1efb50]
call fcn.10018e80
mov eax, dword [0x100c810c]
add eax, 0x264e50
call fcn.10018ef0
mov eax, dword [0x100c810c]
add eax, 0x323530
call fcn.1004aad0
mov eax, dword [0x100c810c]
add eax, 0x32a290
call fcn.1000f870
mov esi, dword [0x100c810c]
lea ecx, [esi + 0x32f290]
call fcn.10001350
lea eax, [esi + 0x3326e8]
call fcn.10001470
test byte [0x101dad88], bl
jne 0x100340a1
or dword [0x101dad88], ebx
call fcn.10003c10
push 0x10057b90
call fcn.100560f0
add esp, 4
mov eax, dword [0x100c810c]
add eax, 0x332d28
push 0x101dad8c
call fcn.10003e10
push 0
push str.DataEnc1.dat
call fcn.10049510
push ebx
push str.DataDec2.dat
call fcn.10049510
mov eax, dword [0x100c810c]
test byte [eax + 4], bl
je 0x100340f2
add eax, 5
push eax
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x100340ed
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x100c810c]
test byte [eax + 4], 2
je 0x1003413e
add eax, 0x45
push eax
lea ecx, [ebp - 0x104]
push str.XTEAM_MAIN_10405__s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x104]
push edx
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x10032e93
lea eax, [ebp - 0x104]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
call fcn.1004df10
call fcn.1004e020
call fcn.1004e150
call fcn.1004e280
call fcn.1004e3b0
call fcn.1004e4e0
call fcn.1004e610
call fcn.1004e740
call fcn.1002c880
push 0x1004c850
push 0x5bafab
mov bl, 0xe8
call fcn.10053c00
push 0x1004c7e0
push 0x7c5db0
call fcn.10053c00
add esp, 0x10
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push 4
push 0x597694
call edi
lea edx, [ebp - 0x10c]
push edx
mov dword [0x597694], 0x4b0
mov eax, dword [ebp - 0x10c]
push eax
push 4
push 0x597694
call edi
mov eax, dword [0x100c810c]
mov esi, 1
cmp dword [eax + 0x39c], esi
jne 0x100341f9
push 0
call dword [sym.imp.MSVCR100.dll__time64]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
push 0x10052070
push 0x4d70d4
call fcn.10053c00
mov eax, dword [0x100c810c]
add esp, 0x10
cmp dword [eax + 0x3a4], esi
jne 0x10034210
call fcn.1000aef0
call fcn.1000b330
mov eax, dword [0x100c810c]
cmp dword [eax + 0x3a4], 0
jne 0x1003422b
cmp dword [eax + 0x3a0], esi
jne 0x10034238
call fcn.1000b060
mov eax, dword [0x100c810c]
cmp dword [eax + 0x3a0], esi
jne 0x10034238
call fcn.10050cd0
push 0x1001a760
push 0x5d0b94
mov bl, 0xe8
call fcn.10053c00
xor ebx, ebx
add esp, 8
mov dword [0x100ca0ac], ebx
mov dword [0x100ca0b0], ebx
mov byte [0x100ca0b4], bl
call fcn.10009f30
mov ecx, dword [0x100c810c]
cmp dword [ecx + 0x374], ebx
jne 0x10034278
call fcn.100039e0
mov edx, dword [0x100c810c]
cmp dword [edx + 0x37c], ebx
jne 0x100342b8
call fcn.1004ae70
call fcn.1004a760
call fcn.1004c400
push 0x10012b10
push 0x56f476
mov bl, 0xe8
call fcn.10053c00
push 0x10012b10
push 0x5ebbe6
call fcn.10053c00
add esp, 0x10
call fcn.1002a6c0
call fcn.1002a790
call fcn.1002a810
call fcn.1004c9f0
call fcn.1004fa90
push 0x10050560
push 0x4d13c2
mov bl, 0xe9
call fcn.10053c00
push 0x10050710
push 0x4d2782
call fcn.10053c00
push 0x100507e0
push 0x830c3a
call fcn.10053c00
add esp, 0x18
call fcn.1000a430
xor eax, eax
mov dword [0x100ca118], eax
mov byte [0x100ca104], al
or eax, 0xffffffff
mov dword [0x100ca10c], eax
mov dword [0x100ca114], eax
mov dword [0x100ca108], eax
call fcn.10023590
call fcn.1004c910
call fcn.100115f0
lea eax, [ebp - 0x10c]
push eax
push 0x40
push 5
push 0x502a95
call edi
mov eax, 0x90909090
mov ecx, 0x502a95
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x10c]
lea ecx, [ebp - 0x10c]
push ecx
push edx
push 5
push 0x502a95
call edi
push 0x1000f940
push 0x502a95
mov bl, 0xe8
call fcn.10053c00
mov esi, 5
mov ebx, 0xd46c8c
call fcn.100533c0
push 0x10050550
push 0x835234
mov bl, 0xe9
call fcn.10053c00
add esp, 0x10
call fcn.10015f00
mov eax, dword [0x100c810c]
cmp dword [eax + 0x364], 0
jne 0x100343bb
mov byte [0x101dacb0], 1
push 0x10048490
push 0x842460
mov bl, 0xe8
call fcn.10053c00
push 0x10048e10
push 0x7e4641
or bl, 0xff
call fcn.10053c00
push 0x10048ea0
push 0x7e4753
or bl, 0xff
call fcn.10053c00
push 0x10048df0
push 0x7e46a0
mov bl, 0xe9
call fcn.10053c00
add esp, 0x20
call fcn.10055200
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.100556e0
push 0x100109e0
push 0x100d2fc8
call fcn.10054cb0
push 0x10010bf0
push 0x100d2fcc
call fcn.10054cb0
call fcn.10055270
mov ecx, dword [0x100c810c]
mov esi, 1
cmp dword [ecx + 0x324], esi
jne 0x10034450
call fcn.100200d0
call fcn.10036da0
mov edx, dword [0x100c810c]
xor ebx, ebx
cmp dword [edx + 0x370], ebx
jne 0x1003446a
call fcn.1000da30
mov eax, dword [0x100c810c]
cmp dword [eax + 0x36c], ebx
jne 0x100344af
push 0x10011170
push 0x5d01d0
mov bl, 0xe9
call fcn.10053c00
push 0x10010ea0
push 0x50d905
mov bl, 0xe8
call fcn.10053c00
push 0x100110b0
push 0x5f91c2
mov bl, 0xe9
call fcn.10053c00
add esp, 0x18
xor ebx, ebx
call fcn.1001f730
mov eax, dword [0x100c810c]
cmp dword [eax + 0x304], esi
jne 0x100344cb
call fcn.1002eea0
mov eax, dword [0x100c810c]
cmp dword [eax + 0x2d0], esi
jne 0x1003475b
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89c6
call edi
lea edx, [ebp - 0x10c]
push edx
mov byte [0x5b89c6], bl
mov eax, dword [ebp - 0x10c]
push eax
push esi
push 0x5b89c6
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89cc
call edi
lea edx, [ebp - 0x10c]
push edx
mov byte [0x5b89cc], bl
mov eax, dword [ebp - 0x10c]
push eax
push esi
push 0x5b89cc
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89d2
call edi
lea edx, [ebp - 0x10c]
push edx
mov byte [0x5b89d2], bl
mov eax, dword [ebp - 0x10c]
push eax
push esi
push 0x5b89d2
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89d8
call edi
lea edx, [ebp - 0x10c]
push edx
mov byte [0x5b89d8], bl
mov eax, dword [ebp - 0x10c]
push eax
push esi
push 0x5b89d8
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89de
call edi
lea edx, [ebp - 0x10c]
push edx
mov byte [0x5b89de], bl
mov eax, dword [ebp - 0x10c]
push eax
push esi
push 0x5b89de
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push esi
push 0x5b89e4
call edi
lea edx, [ebp - 0x10c]
mov byte [0x5b89e4], bl
mov eax, dword [ebp - 0x10c]
push edx
push eax
push esi
push 0x5b89e4
call edi
lea ecx, [ebp - 0x10c]
push ecx
push 0x40
push 2
push 0x5b89ea
call edi
xor edx, edx
lea eax, [ebp - 0x10c]
push eax
mov word [0x5b89ea], dx
mov ecx, dword [ebp - 0x10c]
push ecx
push 2
push 0x5b89ea
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c6316
call edi
lea eax, [ebp - 0x10c]
push eax
mov byte [0x5c6316], bl
mov ecx, dword [ebp - 0x10c]
push ecx
push esi
push 0x5c6316
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c6329
call edi
lea eax, [ebp - 0x10c]
push eax
mov byte [0x5c6329], bl
mov ecx, dword [ebp - 0x10c]
push ecx
push esi
push 0x5c6329
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c633c
call edi
lea eax, [ebp - 0x10c]
push eax
mov byte [0x5c633c], bl
mov ecx, dword [ebp - 0x10c]
push ecx
push esi
push 0x5c633c
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c634f
call edi
lea eax, [ebp - 0x10c]
push eax
mov byte [0x5c634f], bl
mov ecx, dword [ebp - 0x10c]
push ecx
push esi
push 0x5c634f
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c6362
call edi
mov byte [0x5c6362], bl
mov ecx, dword [ebp - 0x10c]
lea eax, [ebp - 0x10c]
push eax
push ecx
push esi
push 0x5c6362
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push esi
push 0x5c6375
call edi
lea eax, [ebp - 0x10c]
push eax
mov byte [0x5c6375], bl
mov ecx, dword [ebp - 0x10c]
push ecx
push esi
push 0x5c6375
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push 2
push 0x5c6388
call edi
xor eax, eax
lea ecx, [ebp - 0x10c]
push ecx
mov word [0x5c6388], ax
mov edx, dword [ebp - 0x10c]
push edx
push 2
push 0x5c6388
call edi
mov eax, dword [0x100c810c]
cmp dword [eax + 0x2c4], 3
jne 0x10034797
lea eax, [ebp - 0x108]
push eax
push 0x40
push esi
push 0x4030d4
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4030d4], 6
mov edx, dword [ebp - 0x108]
push edx
push esi
push 0x4030d4
call edi
mov eax, dword [0x100c810c]
cmp dword [eax + 0x2c4], 2
jne 0x100347d3
lea eax, [ebp - 0x110]
push eax
push 0x40
push esi
push 0x4030d4
call edi
lea ecx, [ebp - 0x110]
push ecx
mov byte [0x4030d4], 5
mov edx, dword [ebp - 0x110]
push edx
push esi
push 0x4030d4
call edi
mov eax, dword [0x100c810c]
cmp dword [eax + 0x2c4], esi
jne 0x1003480e
lea eax, [ebp - 0x118]
push eax
push 0x40
push esi
push 0x4030d4
call edi
lea ecx, [ebp - 0x118]
push ecx
mov byte [0x4030d4], 4
mov edx, dword [ebp - 0x118]
push edx
push esi
push 0x4030d4
call edi
mov eax, dword [0x100c810c]
cmp dword [eax + 0x1d4], esi
jne 0x10034905
lea esi, [eax + 0x1d8]
lea eax, [ebp - 0x114]
push eax
push 0x40
push 4
push 0x954149
call edi
lea ecx, [ebp - 0x114]
push ecx
mov dword [0x954149], esi
mov edx, dword [ebp - 0x114]
push edx
push 4
push 0x954149
call edi
mov esi, dword [0x100c810c]
lea eax, [ebp - 0x114]
push eax
push 0x40
push 4
push 0x954116
add esi, 0x200
call edi
lea ecx, [ebp - 0x114]
push ecx
mov dword [0x954116], esi
mov edx, dword [ebp - 0x114]
push edx
push 4
push 0x954116
call edi
mov esi, dword [0x100c810c]
lea eax, [ebp - 0x114]
push eax
push 0x40
push 4
push 0x9540e3
add esi, 0x228
call edi
lea ecx, [ebp - 0x114]
push ecx
mov dword [0x9540e3], esi
mov edx, dword [ebp - 0x114]
push edx
push 4
push 0x9540e3
call edi
mov esi, dword [0x100c810c]
lea eax, [ebp - 0x114]
push eax
push 0x40
push 4
push 0x9540ad
add esi, 0x250
call edi
lea ecx, [ebp - 0x114]
push ecx
mov dword [0x9540ad], esi
mov edx, dword [ebp - 0x114]
push edx
push 4
push 0x9540ad
call edi
mov eax, dword [0x100c810c]
movzx esi, word [eax + 0x420]
lea eax, [ebp - 0x114]
push eax
push 0x40
push 2
push 0x405b7c
call edi
lea ecx, [ebp - 0x114]
push ecx
mov word [0x405b7c], si
mov edx, dword [ebp - 0x114]
push edx
push 2
push 0x405b7c
call edi
mov eax, dword [0x100c810c]
movzx esi, word [eax + 0x420]
lea ecx, [ebp - 0x114]
push ecx
push 0x40
push 2
push 0x40cc40
call edi
lea edx, [ebp - 0x114]
push edx
mov word [0x40cc40], si
mov eax, dword [ebp - 0x114]
push eax
push 2
push 0x40cc40
call edi
mov ecx, dword [0x100c810c]
cmp dword [ecx + 0x424], 1
jne 0x100349ba
push 9
mov esi, 0x7af176
call fcn.10053290
push 9
mov esi, 0x7af416
call fcn.10053290
push 9
mov esi, 0x7af796
call fcn.10053290
push 9
mov esi, 0x7b0316
call fcn.10053290
add esp, 0x10
mov edx, dword [0x100c810c]
mov esi, 1
cmp dword [edx + 0x43c], esi
jne 0x10034a9a
lea eax, [ebp - 0x118]
push eax
push 0x40
push 0x1db
push 0x853770
call edi
push 0x1db
push 0x90
push 0x853770
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x118]
add esp, 0xc
lea ecx, [ebp - 0x118]
push ecx
push edx
push 0x1db
push 0x853770
call edi
lea eax, [ebp - 0x118]
push eax
push 0x40
push 0x5a
push 0x853710
call edi
push 0x5a
push 0x90
push 0x853710
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x118]
add esp, 0xc
lea ecx, [ebp - 0x118]
push ecx
push edx
push 0x5a
push 0x853710
call edi
lea eax, [ebp - 0x118]
push eax
push 0x40
push 0x273
push 0x7d31f0
call edi
push 0x273
push 0x90
push 0x7d31f0
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x118]
add esp, 0xc
lea ecx, [ebp - 0x118]
push ecx
push edx
push 0x273
push 0x7d31f0
call edi
mov eax, dword [0x100c810c]
cmp dword [eax + 0x440], esi
jne 0x10034cda
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push esi
push 0x501957
call edi
lea edx, [ebp - 0x110]
push edx
mov byte [0x501957], bl
mov eax, dword [ebp - 0x110]
push eax
push esi
push 0x501957
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54eae1
call edi
mov ecx, 0x54eae1
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54fc92
call edi
mov ecx, 0x54fc92
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push esi
push 0x50226b
call edi
lea edx, [ebp - 0x110]
push edx
mov byte [0x50226b], bl
mov eax, dword [ebp - 0x110]
push eax
push esi
push 0x50226b
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54eca3
call edi
mov ecx, 0x54eca3
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54fcec
call edi
mov ecx, 0x54fcec
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push esi
push 0x502c4d
call edi
lea edx, [ebp - 0x110]
push edx
mov byte [0x502c4d], bl
mov eax, dword [ebp - 0x110]
push eax
push esi
push 0x502c4d
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54ed6d
call edi
mov ecx, 0x54ed6d
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54fd5f
call edi
mov ecx, 0x54fd5f
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54fe3e
call edi
mov ecx, 0x54fe3e
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
lea ecx, [ebp - 0x110]
push ecx
push 0x40
push 6
push 0x54fd23
call edi
mov ecx, 0x54fd23
mov eax, 0x90909090
mov dword [ecx], eax
lea edx, [ebp - 0x110]
push edx
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x110]
push eax
push 6
push ecx
call edi
mov ecx, dword [0x100c810c]
cmp dword [ecx + 0x444], ebx
jne 0x10034d78
lea edx, [ebp - 0x10c]
push edx
push 0x40
push 0x15e
push 0x944e50
call edi
push 0x15e
push 0x90
push 0x944e50
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x10c]
add esp, 0xc
lea eax, [ebp - 0x10c]
push eax
push ecx
push 0x15e
push 0x944e50
call edi
lea edx, [ebp - 0x10c]
push edx
push 0x40
push 0x145
push 0x661700
call edi
push 0x145
push 0x90
push 0x661700
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x10c]
add esp, 0xc
lea eax, [ebp - 0x10c]
push eax
push ecx
push 0x145
push 0x661700
call edi
mov edx, dword [0x100c810c]
cmp dword [edx + 0x448], ebx
jne 0x10034e6a
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x830ba6
call edi
mov eax, 0x90909090
mov ecx, 0x830ba6
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x830ba6
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x832ed8
call edi
mov eax, 0x90909090
mov ecx, 0x832ed8
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x832ed8
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x83279c
call edi
mov eax, 0x90909090
mov ecx, 0x83279c
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x83279c
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x8329a2
call edi
mov eax, 0x90909090
mov ecx, 0x8329a2
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x8329a2
call edi
mov eax, dword [0x100c810c]
cmp dword [eax + 0x44c], ebx
jne 0x10034eab
mov esi, 5
mov ebx, 0x6e899d
call fcn.100533c0
mov ebx, 0x7126fa
call fcn.100533c0
mov ebx, 0x5b768f
call fcn.100533c0
mov ebx, 0x5b770c
call fcn.100533c0
xor ebx, ebx
mov esi, 1
mov ecx, dword [0x100c810c]
cmp dword [ecx + 0x2d4], esi
jne 0x10034ee7
lea edx, [ebp - 0x134]
push edx
push 0x40
push esi
push 0x5528a0
call edi
lea eax, [ebp - 0x134]
push eax
mov byte [0x5528a0], 0xc3
mov ecx, dword [ebp - 0x134]
push ecx
push esi
push 0x5528a0
call edi
cmp dword [0x100b9080], ebx
je 0x10034f35
lea edx, [ebp - 0x13c]
push edx
push 0x40
push 0x11e
push 0x771310
call edi
push 0x11e
push 0x90
push 0x771310
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x13c]
add esp, 0xc
lea eax, [ebp - 0x13c]
push eax
push ecx
push 0x11e
push 0x771310
call edi
cmp dword [0x100b907c], ebx
je 0x10034f83
lea edx, [ebp - 0x12c]
push edx
push 0x40
push 0x10c50
push 0x74cd30
call edi
push 0x10c50
push 0x90
push 0x74cd30
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x12c]
add esp, 0xc
lea eax, [ebp - 0x12c]
push eax
push ecx
push 0x10c50
push 0x74cd30
call edi
cmp dword [0x100b9078], ebx
je 0x1003501b
lea edx, [ebp - 0x128]
push edx
push 0x40
push 0x2fe2
push 0x626190
call edi
push 0x2fe2
push 0x90
push 0x626190
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x128]
add esp, 0xc
lea eax, [ebp - 0x128]
push eax
push ecx
push 0x2fe2
push 0x626190
call edi
lea edx, [ebp - 0x128]
push edx
push 0x40
push 0x87a2
push 0x72d1b0
call edi
push 0x87a2
push 0x90
push 0x72d1b0
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x128]
add esp, 0xc
lea eax, [ebp - 0x128]
push eax
push ecx
push 0x87a2
push 0x72d1b0
call edi
mov edx, dword [0x100c810c]
cmp dword [edx + 0x2cc], esi
jne 0x10035072
lea eax, [ebp - 0x120]
push eax
push 0x40
push esi
push 0x8193fe
call edi
lea ecx, [ebp - 0x120]
push ecx
mov byte [0x8193fe], 0x6e
mov edx, dword [ebp - 0x120]
push edx
push esi
push 0x8193fe
call edi
push 0x10032e00
push 0x7d3a4c
mov bl, 0xe8
call fcn.10053c00
add esp, 8
mov esi, 1
xor ebx, ebx
mov eax, dword [0x100c810c]
cmp dword [eax + 0x354], ebx
jne 0x100350c5
lea ecx, [ebp - 0x120]
push ecx
push 0x40
push 0x69d
push 0x6097b0
call edi
push 0x69d
push 0x90
push 0x6097b0
call sub.MSVCR100.dll_memset
mov eax, dword [ebp - 0x120]
add esp, 0xc
lea edx, [ebp - 0x120]
push edx
push eax
push 0x69d
push 0x6097b0
call edi
mov ecx, dword [0x100c810c]
cmp dword [ecx + 0x358], esi
jne 0x1003511c
lea edx, [ebp - 0x124]
push edx
push 0x40
push esi
push 0x7c446c
call edi
lea eax, [ebp - 0x124]
push eax
mov byte [0x7c446c], 0x78
mov ecx, dword [ebp - 0x124]
push ecx
push esi
push 0x7c446c
call edi
push 0x7c5af2
push 0x7c5a88
mov bl, 0xe9
call fcn.10053c00
add esp, 8
mov esi, 1
xor ebx, ebx
mov edx, dword [0x100c810c]
cmp dword [edx + 0x35c], esi
jne 0x10035167
lea eax, [ebp - 0x124]
push eax
push 0x40
push 0x30
push 0x62f876
call edi
push 0x30
push 0x90
push 0x62f876
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x124]
add esp, 0xc
lea ecx, [ebp - 0x124]
push ecx
push edx
push 0x30
push 0x62f876
call edi
mov eax, dword [0x100c810c]
cmp dword [eax + 0x384], esi
jne 0x1003518f
push 0x10032df0
push 0x83693c
mov bl, 0xe9
call fcn.10053c00
add esp, 8
mov esi, 1
xor ebx, ebx
mov ecx, dword [0x100c810c]
cmp dword [ecx + 0x388], esi
jne 0x100351b8
push 0x10032de0
push 0x8369af
mov bl, 0xe9
call fcn.10053c00
add esp, 8
mov esi, 1
xor ebx, ebx
mov edx, dword [0x100c810c]
cmp dword [edx + 0x38c], esi
jne 0x100351e1
push 0x10032dd0
push 0x836a23
mov bl, 0xe9
call fcn.10053c00
add esp, 8
mov esi, 1
xor ebx, ebx
mov eax, dword [0x100c810c]
cmp dword [eax + 0x390], esi
jne 0x10035209
push 0x10032da0
push 0x77ebb0
mov bl, 0xe9
call fcn.10053c00
add esp, 8
mov esi, 1
xor ebx, ebx
mov ecx, dword [0x100c810c]
cmp dword [ecx + 0x394], esi
jne 0x10035232
push 0x10032db0
push 0x77ec59
mov bl, 0xe9
call fcn.10053c00
add esp, 8
mov esi, 1
xor ebx, ebx
mov edx, dword [0x100c810c]
cmp dword [edx + 0x398], esi
jne 0x1003525b
push 0x10032dc0
push 0x77ece2
mov bl, 0xe9
call fcn.10053c00
add esp, 8
mov esi, 1
xor ebx, ebx
mov eax, dword [0x100c810c]
cmp dword [eax + 0x368], ebx
jne 0x10035290
push 0x1002cbe0
push 0x61041c
mov bl, 0xe8
call fcn.10053c00
push 0x1002cbe0
push 0x5666c1
call fcn.10053c00
add esp, 0x10
mov esi, 1
mov ecx, dword [0x100c810c]
cmp dword [ecx + 0x340], esi
jne 0x100352cc
lea edx, [ebp - 0x138]
push edx
push 0x40
push esi
push 0x5528a0
call edi
lea eax, [ebp - 0x138]
push eax
mov byte [0x5528a0], 0xc3
mov ecx, dword [ebp - 0x138]
push ecx
push esi
push 0x5528a0
call edi
mov edx, dword [0x100c810c]
cmp dword [edx + 0x360], esi
jne 0x10035300
push 0xff
mov esi, 0x7d4001
call fcn.10053290
push 0xff
mov esi, 0x7d4110
call fcn.10053290
add esp, 8
mov esi, 1
mov eax, dword [0x100c810c]
cmp dword [eax + 0x380], esi
jne 0x10035335
mov esi, 5
mov ebx, 0xd46c8c
call fcn.100533c0
push 0x10050550
push 0x835234
mov bl, 0xe9
call fcn.10053c00
add esp, 8
mov esi, 1
mov ecx, dword [0x100c810c]
cmp dword [ecx + 0x42c], esi
jne 0x10035371
lea edx, [ebp - 0x130]
push edx
push 0x40
push esi
push 0x4215a7
call edi
lea eax, [ebp - 0x130]
push eax
mov byte [0x4215a7], 0xeb
mov ecx, dword [ebp - 0x130]
push ecx
push esi
push 0x4215a7
call edi
mov edx, dword [0x100c810c]
cmp dword [edx + 0x430], esi
jne 0x100353ad
lea eax, [ebp - 0x11c]
push eax
push 0x40
push esi
push 0x507aeb
call edi
lea ecx, [ebp - 0x11c]
push ecx
mov byte [0x507aeb], 0x72
mov edx, dword [ebp - 0x11c]
push edx
push esi
push 0x507aeb
call edi
mov eax, dword [0x100c810c]
cmp dword [eax + 0x434], esi
jne 0x100353e8
lea ecx, [ebp - 0x11c]
push ecx
push 0x40
push esi
push 0x507afd
call edi
lea edx, [ebp - 0x11c]
push edx
mov byte [0x507afd], 0xeb
mov eax, dword [ebp - 0x11c]
push eax
push esi
push 0x507afd
call edi
push 0x10009f10
push 0x4d7cf8
mov bl, 0xe9
call fcn.10053c00
push 0x4f9238
push 0x4f921d
call fcn.10053c00
push 0x63f058
push 0x63f040
call fcn.10053c00
push 0x100524a0
push 0x4f131e
mov bl, 0xe8
call fcn.10053c00
add esp, 0x20
call fcn.10031930
call fcn.10017800
call fcn.10041380
call fcn.10045340
call fcn.10046af0
call fcn.10002a80
call fcn.10013070
call fcn.100474b0
call fcn.10005200
mov ebx, 1
test byte [0x101dad88], bl
jne 0x1003547d
or dword [0x101dad88], ebx
call fcn.10003c10
push 0x10057b90
call fcn.100560f0
add esp, 4
call fcn.10004170
test byte [0x101dae54], bl
jne 0x100354a7
or dword [0x101dae54], ebx
push 0x100581a0
mov dword [0x101dae58], 0x1005bb10
call fcn.100560f0
add esp, 4
mov eax, 0x101dae58
call fcn.1003ddc0
test byte [0x101dae08], bl
jne 0x100354dc
or dword [0x101dae08], ebx
push 0x100581b0
mov dword [0x101dae0c], 0x1005bdf0
mov dword [0x101dae10], ebx
call fcn.100560f0
add esp, 4
push 0x10047dc0
push 0x5a2304
mov bl, 0xe9
call fcn.10053c00
push 0x10047fe0
push 0x85c99b
mov bl, 0xe8
call fcn.10053c00
push 0x10047fb0
push 0x8676b3
call fcn.10053c00
push 0x10048260
push 0x8678ea
call fcn.10053c00
mov ebx, 1
add esp, 0x20
test byte [0x101daddc], bl
jne 0x10035549
or dword [0x101daddc], ebx
push 0x10057c20
mov dword [0x101dade0], 0x1005bd28
call fcn.100560f0
add esp, 4
call fcn.10047a70
test byte [0x101dada0], bl
jne 0x1003556e
or dword [0x101dada0], ebx
call fcn.10006250
push 0x10057b80
call fcn.100560f0
add esp, 4
push 0x10006b30
push 0x61041c
mov bl, 0xe8
call fcn.10053c00
push 0x10006b30
push 0x5666c1
call fcn.10053c00
add esp, 0x10
pop edi
mov eax, 1
pop esi
pop ebx
test byte [0x101dae18], al
jne 0x100355b9
or dword [0x101dae18], eax
call fcn.100415e0
push 0x100581c0
call fcn.100560f0
add esp, 4
call fcn.100424c0
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10056040
mov esp, ebp
pop ebp
ret