Function at 0x10015960
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x114
mov eax, dword [0x10042fd0]
xor eax, esp
mov dword [esp + 0x110], eax
push ebx
push esi
push edi
mov ebx, 0x101163e8
call fcn.1002b9f0
test al, al
jne 0x10015993
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x648d04
call edi
mov bl, 0xeb
lea ecx, [esp + 0x10]
push ecx
mov byte [0x648d04], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x648d04
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x649085
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x649085], 0xe9
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x649085
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x649086
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x649086], 0x8a
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x649086
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x649087
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x649087], 0
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x649087
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x649088
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x649088], 0
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x649088
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x649089
call edi
lea ecx, [esp + 0x10]
mov byte [0x649089], 0
push ecx
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x649089
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x675d0a
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x675d0a], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x675d0a
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x64903c
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x64903c], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x64903c
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x4a9367
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x4a9367], 0xe9
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x4a9367
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x4a9369
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x4a9369], 2
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x4a9369
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x4a936b
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x4a936b], 1
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x4a936b
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x4a936a
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x4a936a], 0
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x4a936a
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x4a936b
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x4a936b], 0
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x4a936b
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x4a95ec
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x4a95ec], 0xc3
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x4a95ec
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x533306
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x533306], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x533306
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x496f7a
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x496f7a], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x496f7a
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x4971af
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x4971af], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x4971af
call edi
mov esi, 0x57
mov ebx, 0x4c8d30
call fcn.10034d10
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x76e2b0
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x76e2b0], 0xa0
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x76e2b0
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x661e9d
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x661e9d], 0xe9
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x661e9d
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x661e9e
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x661e9e], 0x38
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x661e9e
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x661e9f
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x661e9f], 2
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x661e9f
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x661ea0
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x661ea0], 0
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x661ea0
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x4f8b3b
call edi
mov bl, 0xeb
lea ecx, [esp + 0x10]
mov byte [0x4f8b3b], bl
mov edx, dword [esp + 0x10]
push ecx
push edx
push 1
push 0x4f8b3b
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x4f8b49
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x4f8b49], 2
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x4f8b49
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x65eb3c
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x65eb3c], 0x7f
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x65eb3c
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x648c71
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x648c71], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x648c71
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x45b0a8
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x45b0a8], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x45b0a8
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x5b22e3
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x5b22e3], 0x1d
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x5b22e3
call edi
mov esi, 0x79
mov ebx, 0x564d8c
call fcn.10034d10
mov bl, byte [0x10116430]
lea eax, [esp + 0x10]
inc bl
push eax
push 0x40
push 1
push 0x77f598
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x77f598], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x77f598
call edi
mov bl, byte [0x10116432]
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x77f599
add bl, 2
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x77f599], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x77f599
call edi
mov bl, byte [0x10116433]
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x77f59a
add bl, 3
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x77f59a], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x77f59a
call edi
mov bl, byte [0x10116435]
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x77f59b
add bl, 4
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x77f59b], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x77f59b
call edi
mov bl, byte [0x10116436]
lea eax, [esp + 0x10]
push eax
push 0x40
push 1
push 0x77f59c
add bl, 5
call edi
lea ecx, [esp + 0x10]
push ecx
mov byte [0x77f59c], bl
mov edx, dword [esp + 0x14]
push edx
push 1
push 0x77f59c
call edi
mov si, word [0x1011642e]
lea eax, [esp + 0x10]
push eax
push 0x40
push 2
push 0x77eba8
call edi
lea ecx, [esp + 0x10]
push ecx
mov word [0x77eba8], si
mov edx, dword [esp + 0x14]
push edx
push 2
push 0x77eba8
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x647ccb
call edi
lea ecx, [esp + 0x10]
push ecx
mov dword [0x647ccb], 0x10116449
mov edx, dword [esp + 0x14]
push edx
push 4
push 0x647ccb
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x662262
call edi
lea ecx, [esp + 0x10]
push ecx
mov dword [0x662262], 0x10116469
mov edx, dword [esp + 0x14]
push edx
push 4
push 0x662262
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 4
push 0x647cd9
call edi
lea ecx, [esp + 0x10]
push ecx
mov dword [0x647cd9], 0x100352b0
mov edx, dword [esp + 0x14]
push edx
push 4
push 0x647cd9
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 0x20
push 0x76e2f0
call edi
push 0x20
push 0x1011640d
push 0x76e2f0
call sub.MSVCR100.dll_memcpy
mov edx, dword [esp + 0x1c]
add esp, 0xc
lea ecx, [esp + 0x10]
push ecx
push edx
push 0x20
push 0x76e2f0
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 0x11
push 0x77f5a0
call edi
mov ecx, dword [0x10116438]
mov eax, 0x77f5a0
mov dword [eax], ecx
mov edx, dword [0x1011643c]
mov dword [eax + 4], edx
mov ecx, dword [0x10116440]
mov dword [eax + 8], ecx
mov edx, dword [0x10116444]
mov dword [eax + 0xc], edx
mov cl, byte [0x10116448]
lea edx, [esp + 0x10]
push edx
mov byte [eax + 0x10], cl
mov eax, dword [esp + 0x14]
push eax
push 0x11
push 0x77f5a0
call edi
lea ecx, [esp + 0x10]
push ecx
push 0x40
push 0xe
push 0x644e22
call edi
mov ecx, 0x644e22
mov eax, 0x90909090
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea edx, [esp + 0x10]
push edx
mov word [ecx + 0xc], ax
mov eax, dword [esp + 0x14]
push eax
push 0xe
push ecx
call edi
push 0x10002c40
push 0x601db0
mov bl, 0xe9
mov byte [0x101e7b4e], 0
call fcn.10034b90
push 0x10002f50
push 0x5ef010
call fcn.10034b90
add esp, 0x10
mov dword [0x101e7a0c], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push fcn.1002d360
push 0x69c2c0
or bl, 0xff
mov dword [0x101e7b24], eax
mov dword [0x101e7b28], 0
call fcn.10034b90
add esp, 8
lea ecx, [esp + 0x10]
push ecx
push 0x40
push 4
push 0x649929
call edi
lea edx, [esp + 0x10]
push edx
mov dword [0x649929], 0x3e8
mov eax, dword [esp + 0x14]
push eax
push 4
push 0x649929
call edi
push 0x1000e1a0
push 0x59d28d
mov bl, 0xe8
call fcn.10034b90
push 0x10002090
push 0x6a0a10
mov bl, 0xe9
call fcn.10034b90
push 0x100027a0
push 0x6a1210
call fcn.10034b90
add esp, 0x18
mov esi, 5
mov ebx, 0x68c904
call fcn.10034d10
mov ebx, 0x68c1eb
call fcn.10034d10
lea ecx, [esp + 0x10]
push ecx
push 0x40
push 2
push 0x50cfde
call edi
mov edx, 0x1d65
lea eax, [esp + 0x10]
push eax
mov word [0x50cfde], dx
mov ecx, dword [esp + 0x14]
push ecx
push 2
push 0x50cfde
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 2
push 0x50cff0
call edi
mov eax, 0x1d65
lea ecx, [esp + 0x10]
push ecx
mov word [0x50cff0], ax
mov edx, dword [esp + 0x14]
push edx
push 2
push 0x50cff0
call edi
lea eax, [esp + 0x10]
push eax
push 0x40
push 2
push 0x50d007
call edi
mov ecx, 0x1d65
lea edx, [esp + 0x10]
push edx
mov word [0x50d007], cx
mov eax, dword [esp + 0x14]
push eax
push 2
push 0x50d007
call edi
lea ecx, [esp + 0x10]
push ecx
push 0x40
push 1
xor ebx, ebx
push 0x511799
mov dword [esp + 0x20], ebx
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1001625f
mov edx, 0x511799
mov al, 1
mov byte [edx], al
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
push ecx
push 1
push edx
mov dword [esp + 0x24], ebx
call edi
test eax, eax
jne 0x10016261
call esi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x5117c0
mov dword [esp + 0x20], ebx
call edi
test eax, eax
je 0x10016299
mov ecx, 0x5117c0
mov al, 0x48
mov byte [ecx], al
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push edx
push eax
push 1
push ecx
mov dword [esp + 0x24], ebx
call edi
test eax, eax
jne 0x1001629b
call esi
lea ecx, [esp + 0x10]
push ecx
push 0x40
push 1
push 0x511845
mov dword [esp + 0x20], ebx
call edi
test eax, eax
je 0x100162d3
mov edx, 0x511845
mov al, 0x48
mov byte [edx], al
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
push ecx
push 1
push edx
mov dword [esp + 0x24], ebx
call edi
test eax, eax
jne 0x100162d5
call esi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x599736
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x599736], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x599736
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x59973b
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x59973b], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x59973b
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x599740
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x599740], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x599740
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x599745
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x599745], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x599745
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x59974a
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x59974a], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x59974a
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x59974f
call edi
lea eax, [esp + 0x10]
mov byte [0x59974f], bl
mov ecx, dword [esp + 0x10]
push eax
push ecx
push 1
push 0x59974f
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x599c31
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x599c31], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x599c31
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x599c36
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x599c36], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x599c36
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x599c3b
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x599c3b], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x599c3b
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x599c40
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x599c40], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x599c40
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x599c45
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x599c45], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x599c45
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x599c4a
call edi
mov byte [0x599c4a], bl
lea eax, [esp + 0x10]
mov ecx, dword [esp + 0x10]
push eax
push ecx
push 1
push 0x599c4a
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x5b227d
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x5b227d], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x5b227d
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x5b32de
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x5b32de], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x5b32de
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x5b7ef7
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x5b7ef7], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x5b7ef7
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x5b8446
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x5b8446], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x5b8446
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x5b54b1
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x5b54b1], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x5b54b1
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x5b05a4
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x5b05a4], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x5b05a4
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x5363c0
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x5363c0], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x5363c0
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x65916c
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x65916c], 2
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x65916c
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x65929c
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x65929c], 0xeb
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x65929c
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x658fff
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x658fff], 4
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x658fff
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x659041
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x659041], 0x36
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x659041
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x6592cf
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x6592cf], 2
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x6592cf
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x5572ca
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x5572ca], 0x90
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x5572ca
call edi
mov esi, 7
mov ebx, 0x5572e8
call fcn.10034d10
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x68892e
call edi
mov bl, 0x90
lea eax, [esp + 0x10]
push eax
mov byte [0x68892e], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x68892e
call edi
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x688952
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x688952], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x688952
call edi
mov esi, 6
mov ebx, 0x688965
call fcn.10034d10
mov ebx, dword [0x101e4970]
lea edx, [esp + 0x10]
push edx
neg ebx
push 0x40
sbb bl, bl
push 1
and bl, 0x6e
push 0x614dba
add bl, 0x55
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x614dba], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x614dba
call edi
mov esi, dword [0x101e4978]
lea edx, [esp + 0x10]
push edx
push 0x40
neg esi
push 4
sbb esi, esi
push 0x6c475c
and esi, 0x1f4
call edi
lea eax, [esp + 0x10]
push eax
mov dword [0x6c475c], esi
mov ecx, dword [esp + 0x14]
push ecx
push 4
push 0x6c475c
call edi
cmp dword [0x101e497c], 0
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x6ee8c3
sete bl
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x6ee8c3], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x6ee8c3
call edi
cmp dword [0x101e4980], 0
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x6daa0c
sete bl
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x6daa0c], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x6daa0c
call edi
cmp dword [0x101e4984], 0
jne 0x10016854
push 0x6efac4
push 0x6f067e
mov bl, 0xe8
call fcn.10034b90
push 0x6efde7
push 0x6f0743
call fcn.10034b90
add esp, 0x10
jmp 0x1001686d
mov esi, 5
mov ebx, 0x6f067e
call fcn.10034d10
mov ebx, 0x6f0743
call fcn.10034d10
mov esi, dword [0x101e4978]
lea edx, [esp + 0x10]
push edx
push 0x40
neg esi
push 4
sbb esi, esi
push 0x6c475c
and esi, 0x1f4
call edi
lea eax, [esp + 0x10]
push eax
mov dword [0x6c475c], esi
mov ecx, dword [esp + 0x14]
push ecx
push 4
push 0x6c475c
call edi
cmp dword [0x101e497c], 0
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x6ee8c3
sete bl
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x6ee8c3], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x6ee8c3
call edi
cmp dword [0x101e4980], 0
lea edx, [esp + 0x10]
push edx
push 0x40
push 1
push 0x6daa0c
sete bl
call edi
lea eax, [esp + 0x10]
push eax
mov byte [0x6daa0c], bl
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x6daa0c
call edi
call fcn.10018670
lea edx, [esp + 0x10]
push edx
push 0x40
push 4
push 0x4219ac
call edi
lea eax, [esp + 0x10]
push eax
mov dword [0x4219ac], 0x10035490
mov ecx, dword [esp + 0x14]
push ecx
push 4
push 0x4219ac
call edi
call fcn.10009060
call fcn.1002abc0
mov eax, 0x10116538
call fcn.1000c330
mov eax, 0x101198c8
call fcn.1000c390
mov eax, 0x1011cc58
call fcn.1000c3f0
mov eax, 0x1011ffe8
call fcn.1000aa40
mov esi, 0xa
mov ebx, 0x5b2169
call fcn.10034d10
call fcn.10034dc0
mov eax, 0x10123954
call fcn.1000a8d0
mov eax, 0x1013cf94
call fcn.1000c4e0
mov edx, 0x10141904
call fcn.1000b980
mov eax, 0x10143524
call fcn.100148b0
mov edx, 0x10120a74
call fcn.1000cc60
mov eax, 0x101a8654
call fcn.10002010
push 0
push str.DataEnc1.dat
call fcn.10026360
push 1
push str.DataDec2.dat
call fcn.10026360
push 0x64
push 0
push 0x101d8fe8
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x10016ea0
push 0x639964
or bl, 0xff
call fcn.10034b90
push 0x10016eb0
push 0x636f24
mov bl, 0xe8
call fcn.10034b90
push 0x10016f60
push 0x49c77e
or bl, 0xff
call fcn.10034b90
add esp, 0x18
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.PSAPI.DLL_EmptyWorkingSet]
push 0x1000c990
push 0x6619c5
mov bl, 0xe8
call fcn.10034b90
push 0x1000cbb0
push 0x69d070
call fcn.10034b90
add esp, 0x10
call fcn.1000d1f0
call fcn.10011020
call fcn.1002f990
call fcn.10011490
call fcn.10011100
call fcn.10023310
call fcn.10014120
mov edx, 0x1016adf4
call fcn.100096b0
mov edx, 0x1016dcd4
call fcn.10001f10
cmp dword [0x101f1b38], 1
jne 0x10016aa3
push 0x1002ff50
push 0x661839
call fcn.10034b90
add esp, 8
mov eax, 0x101d1694
call fcn.10001f90
mov eax, 0x101d1cd4
call fcn.10003830
lea edx, [esp + 0x10]
push edx
push 0x40
push 4
push 0x756444
call edi
lea eax, [esp + 0x10]
push eax
mov dword [0x756444], 0x10003660
mov ecx, dword [esp + 0x14]
push ecx
push 4
push 0x756444
call edi
push 0x10003920
push 0x40a198
mov bl, 0xe8
call fcn.10034b90
push 0x10003940
push 0x40a476
call fcn.10034b90
add esp, 0x10
call fcn.10035260
push 0x101e79a8
call fcn.1000f3b0
call fcn.1002b6e0
call fcn.10029ca0
push 0x1002f570
push 0x648274
mov bl, 0xe9
call fcn.10034b90
push 0x1002f6f0
push 0x649553
call fcn.10034b90
push 0x1002f7a0
push 0x4eeca1
call fcn.10034b90
push 0x1002f7d0
push 0x4ee5eb
call fcn.10034b90
add esp, 0x20
call fcn.1002e8e0
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push str.Texture.dll
call esi
push str.MemRelease.dll
call esi
call fcn.1000b810
call fcn.1000c540
push 0
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 4
push 0x1002f800
push 0x65ee5f
mov bl, 0xe8
call fcn.10034b90
add esp, 8
call fcn.100078d0
test byte [0x101163ec], 1
mov edi, dword [sym.imp.KERNEL32.dll_OpenMutexA]
je 0x10016bfd
push 0x101d6888
push 0
push 0x1f0001
call edi
mov esi, eax
test esi, esi
jne 0x10016bef
push 0x10
push str.Error
push str.Abrir_MU_desde_el_Launcher__como_ADM_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test byte [0x101163ec], 2
je 0x10016c41
push 0x101d68a8
lea edx, [esp + 0x1c]
push str.DEV__s
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0x18]
push eax
push 0
push 0x1f0001
call edi
test eax, eax
jne 0x1001598b
lea ecx, [esp + 0x18]
push ecx
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov edi, 0x101163e8
call fcn.1002bae0
mov ebx, edi
call fcn.1002bbe0
call fcn.1002bce0
call fcn.1002bdb0
call fcn.1002be50
call fcn.1002bef0
call fcn.1002bfa0
call fcn.1002c040
call fcn.1002c0e0
call fcn.1002c180
call fcn.1002c220
call fcn.1002c2c0
call fcn.1002c360
call fcn.1002c400
call fcn.1002c4a0
call fcn.1002c540
call fcn.1002c5e0
call fcn.1002c680
call fcn.1002c720
call fcn.1002c7c0
call fcn.1002c860
call fcn.1002c900
call fcn.1002c9a0
call fcn.1002ca40
call fcn.1002cae0
call fcn.1002cb80
call fcn.1002cc20
call fcn.1002ccc0
call fcn.1002cd60
call fcn.1002ce00
call fcn.1002cea0
call fcn.1002cf40
call fcn.1002cfd0
mov ecx, dword [esp + 0x11c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10036e30
mov esp, ebp
pop ebp
ret