Function at 0x100bce40
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x10146298]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x101440c4]
xor eax, dword [0x101440c8]
add eax, 0x51f41cfd
xor eax, 0x849cf98a
and eax, 0xd72a30b5
xor eax, 0xafa4b9c3
imul eax, eax, 0xb597c05a
or eax, 0x30ddc8fa
sub eax, 0x46b14202
or eax, 0x5c46398f
xor eax, 0xc473f201
imul eax, eax, 0xa9a0384
imul eax, eax, 0x665a9889
xor eax, 0x5984fcbb
mov ecx, 0xc2ba38bf
xor edx, edx
div ecx
imul eax, eax, 0x28241367
xor eax, 0x3a6e0671
mov ecx, 0x5893dd49
xor edx, edx
div ecx
mov ecx, 0x748babc6
xor edx, edx
div ecx
and eax, 0xa4e773e5
mov ecx, 0x92a9422b
xor edx, edx
div ecx
xor eax, 0x2b41f60
cmp eax, 0x9e3d3d8
je 0x100bdace
mov eax, dword [0x101440cc]
xor eax, dword [0x101440d0]
mov ecx, 0xecce10ed
xor edx, edx
div ecx
sub eax, 0x7924824c
imul eax, eax, 0x84381c3b
mov ecx, 0x4928c7af
xor edx, edx
div ecx
or eax, 0x871b9ebf
xor eax, 0x53259564
and eax, 0xa9776eca
mov ecx, 0xe157917a
xor edx, edx
div ecx
and eax, 0x23cb11dc
xor eax, 0x638871ac
or eax, 0xd30ebb39
and eax, 0xc032aed1
xor eax, 0x5b503cdf
sub eax, 0xa30ce071
xor eax, 0x41a28fac
and eax, 0xc2460ed6
mov ecx, 0xb8e10d3b
xor edx, edx
div ecx
or eax, 0xa5e181f9
add eax, 0xbd93e3b3
add eax, 0xe0965aca
cmp eax, 0xe1817745
jae 0x100bcede
mov eax, dword [0x101440d4]
xor edx, edx
div dword [str.pX]
sub eax, 0xa7542ffb
add eax, 0x999665e5
or eax, 0x8c2de315
sub eax, 0x16081c70
and eax, 0xadb9898a
mov ecx, 0x246ae869
xor edx, edx
div ecx
and eax, 0x1f0af756
sub eax, 0x5a4b6947
xor eax, 0xa76bd719
xor eax, 0x91208aa2
and eax, 0x39ccb2db
sub eax, 0x3feee125
and eax, 0xa1250991
xor eax, 0xa423b8c7
sub eax, 0x5b5abcac
xor eax, 0x8ff06a1c
xor eax, 0xac8ea043
imul eax, eax, 0xfa1abc07
and eax, 0xfe0a1be7
and eax, 0xe27ffc5a
cmp eax, 0xa2dc9ab5
jb 0x100bd988
mov eax, dword [0x101440dc]
or eax, dword [0x101440e0]
imul eax, eax, 0xe4cbcb59
xor eax, 0x24c4beaf
mov ecx, 0x2c920223
xor edx, edx
div ecx
sub eax, 0xfa7bbd76
xor eax, 0xe1c4bca2
xor eax, 0x3b52b42d
xor eax, 0xfd68b828
xor eax, 0x454736a
xor eax, 0xc9ac58f6
mov ecx, 0x2ed06374
xor edx, edx
div ecx
xor eax, 0x3f823814
and eax, 0x4ab9b7d2
and eax, 0x6e033f08
mov ecx, 0x8538744f
xor edx, edx
div ecx
and eax, 0x8f6b90e1
or eax, 0xf5971cc5
and eax, 0xba2a0836
mov ecx, 0xd5ca0664
xor edx, edx
div ecx
and eax, 0x8197b2e8
and eax, 0xfb3cc04b
cmp dword [0x10146e7c], 0
sete cl
mov byte [ebp - 5], cl
cmp eax, 0xa12930e0
jae 0x100bd988
mov eax, dword [0x101440e4]
imul eax, dword [0x101440e8]
xor eax, 0x139a630
add eax, 0x39de9b2b
or eax, 0xe0ccc8f6
and eax, 0xb2f5394
imul eax, eax, 0x647a1417
and eax, 0xbf21cb83
or eax, 0x9ca342be
or eax, 0x4a588bdc
xor eax, 0x9be39a3f
xor eax, 0x98e3611a
imul eax, eax, 0xf78bf362
or eax, 0xc5497c87
mov ecx, 0xcd5726b8
xor edx, edx
div ecx
add eax, 0xe4677bba
and eax, 0x3506148b
and eax, 0xbec77253
mov ecx, 0xf98176a2
xor edx, edx
div ecx
or eax, 0xc58064aa
or eax, 0x30476862
and eax, 0xd767856d
cmp eax, 0x1c28fc77
je 0x100bdad3
mov eax, dword [0x101440ec]
xor edx, edx
div dword [0x101440f0]
imul eax, eax, 0x9dc33ac2
and eax, 0xca24c651
xor eax, 0x11a84e9e
add eax, 0x593bca07
mov ecx, 0xc2aff54c
xor edx, edx
div ecx
or eax, 0x3a32fec2
sub eax, 0x31971f5d
and eax, 0xffa71cba
or eax, 0x57120958
mov ecx, 0xdc9c7af7
xor edx, edx
div ecx
add eax, 0x707b165
and eax, 0x55a13c1d
imul eax, eax, 0xac89a8ed
and eax, 0xfb3f40b5
imul eax, eax, 0xc82deb18
sub eax, 0x93cab459
and eax, 0x49e2fbc9
sub eax, 0xba9823a0
sub eax, 0x9e1413ed
or eax, 0x21c1cdd2
cmp eax, 0x9a11a622
jbe 0x100bd107
mov al, byte [ebp - 5]
test al, 1
jne 0x100bd19e
jmp 0x100bd355
mov eax, dword [0x101440f4]
add eax, dword [0x101440f8]
add eax, 0xc8ff47cb
sub eax, 0xf84948e4
xor eax, 0xaf9ae45
mov ecx, 0x83779d02
xor edx, edx
div ecx
mov ecx, 0xcf2319ca
xor edx, edx
div ecx
add eax, 0xaec6ac8d
mov ecx, 0xa5b8a4f6
xor edx, edx
div ecx
xor eax, 0xf8068c6a
and eax, 0xda9563be
mov ecx, 0xfa60c8e0
xor edx, edx
div ecx
add eax, 0x55ff821d
sub eax, 0x131b92a0
imul eax, eax, 0x31490277
mov ecx, 0x3c83415c
xor edx, edx
div ecx
sub eax, 0x3691811b
mov ecx, 0x287f5a0
xor edx, edx
div ecx
sub eax, 0x42ef6fb3
mov ecx, 0xb5fce615
xor edx, edx
div ecx
xor eax, 0xbeff21c0
mov ecx, 0xaec20162
xor edx, edx
div ecx
cmp eax, 0x5455679b
jae 0x100bda30
mov eax, dword [0x101440fc]
xor eax, dword [0x10144100]
sub eax, 0xe8026594
mov ecx, 0x504c1dec
xor edx, edx
div ecx
sub eax, 0x89372694
and eax, 0x65664db0
and eax, 0x34a227ae
imul eax, eax, 0xedc5748
sub eax, 0x746a897e
and eax, 0x25db9a21
and eax, 0x38641719
imul eax, eax, 0x2d8bd9a6
or eax, 0x45f3a3e1
mov ecx, 0x9c525342
xor edx, edx
div ecx
or eax, 0x11e36631
and eax, 0xa4bae254
and eax, 0x47a41f73
mov ecx, 0x9fa23975
xor edx, edx
div ecx
and eax, 0xba6edc72
mov ecx, 0xfc07df99
xor edx, edx
div ecx
xor eax, 0x298ab76c
mov ecx, 0x50cccf59
xor edx, edx
div ecx
mov cl, byte [0x1013a2ad]
xor cl, 0x36
mov byte [0x1013a2b6], cl
mov cl, byte [0x1013a2ae]
xor cl, 0xc8
mov byte [0x1013a2b7], cl
mov cl, byte [0x1013a2af]
xor cl, 0xc3
mov byte [0x1013a2b8], cl
mov cl, byte [0x1013a2b0]
xor cl, 0x97
mov byte [0x1013a2b9], cl
mov cl, byte [0x1013a2b1]
xor cl, 6
mov byte [0x1013a2ba], cl
mov cl, byte [0x1013a2b2]
xor cl, 0x7f
mov byte [0x1013a2bb], cl
mov cl, byte [0x1013a2b3]
xor cl, 0xf9
mov byte [0x1013a2bc], cl
mov cl, byte [0x1013a2b4]
xor cl, 0xde
mov byte [0x1013a2bd], cl
mov cl, byte [0x1013a2b5]
xor cl, 0xce
mov byte [0x1013a2be], cl
cmp eax, 0xbe96ec70
ja 0x100bd239
jmp 0x100bd355
mov eax, dword [0x10144104]
add eax, dword [0x10144108]
sub eax, 0x5d9942fb
xor eax, 0xd07247f5
xor eax, 0x1bfbd0c
mov ecx, 0xa464d2c4
xor edx, edx
div ecx
and eax, 0x32c9dff2
xor eax, 0xf9f4e25b
add eax, 0x273dbcf0
add eax, 0xb446af8
xor eax, 0xcd9186f7
and eax, 0xbeb397cd
and eax, 0x80c176e6
sub eax, 0xe061269b
and eax, 0x256266ed
sub eax, 0xa894ca67
mov ecx, 0x35f5b7ea
xor edx, edx
div ecx
xor eax, 0x3dac294a
or eax, 0x47ffebeb
mov ecx, 0x2ba42ab7
xor edx, edx
div ecx
xor eax, 0x34cea5cf
mov ecx, 0x66b99f4b
xor edx, edx
div ecx
cmp eax, 0x428570d6
je 0x100bdad8
mov eax, 0x3e4de83b
mov dword [ebp - 0xc], eax
mov dword [0x10146e7c], 1
push eax
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x14], ecx
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov edx, esp
mov dword [ebp - 0x10], edx
mov edx, dword [0x1013a2b6]
mov dword [ecx], edx
mov edx, dword [0x1013a2ba]
mov dword [ecx + 4], edx
mov dl, byte [0x1013a2be]
mov byte [ecx + 8], dl
xor ecx, ecx
sub esp, 0xc
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
mov ecx, dword [ebp - 0x18]
lea eax, [0x1012f48a]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10104040
mov ecx, dword [ebp - 0x18]
add esp, 8
mov eax, dword [ebp - 0x14]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10104040
sub esp, 4
mov dword [esp], 2
mov dword [esp + 4], 4
mov dword [esp + 8], 6
call fcn.10064c80
add esp, 0xc
mov eax, dword [ebp - 0x14]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.10092cd0
mov ecx, dword [ebp - 0x10]
add esp, 8
mov edx, eax
mov eax, dword [ebp - 0xc]
mov dword [ecx], edx
cmp dword [ecx], 0
sete cl
mov byte [ebp - 6], cl
cmp eax, 0x6d099bb8
ja 0x100bd3df
mov al, byte [ebp - 6]
test al, 1
jne 0x100bd4ed
jmp 0x100bd85a
mov eax, dword [0x10144114]
xor eax, dword [0x10144118]
imul eax, eax, 0xea652ce
sub eax, 0x8e94e83a
add eax, 0xeabb9ec4
or eax, 0x73e76619
add eax, 0xb6b4e8e
or eax, 0x5b32f5a
mov ecx, 0x80d0777e
xor edx, edx
div ecx
xor eax, 0x64ea8661
xor eax, 0xf411fb58
imul eax, eax, 0xeb47651e
and eax, 0x7f73fa47
xor eax, 0x343b3bc5
mov ecx, 0xa74b1ec6
xor edx, edx
div ecx
add eax, 0x35b3142
or eax, 0x23c528b9
imul eax, eax, 0x151dd1c9
mov ecx, 0x10b24603
xor edx, edx
div ecx
mov ecx, 0xf10e4e49
xor edx, edx
div ecx
and eax, 0x12e3c15f
mov ecx, 0x871d2f89
xor edx, edx
div ecx
cmp eax, 0xb7c417b7
jae 0x100bdbbc
mov eax, dword [0x1014411c]
sub eax, dword [0x10144120]
sub eax, 0x3d2d69f0
and eax, 0x662c003
xor eax, 0xab590837
add eax, 0x82666b23
mov ecx, 0xe9e3c8a7
xor edx, edx
div ecx
and eax, 0x831ff038
or eax, 0xada36639
sub eax, 0x599ad015
sub eax, 0xf84cd3c8
or eax, 0x50c0ddfb
xor eax, 0x6d87431c
xor eax, 0xf4ea3957
sub eax, 0x290a0dc3
imul eax, eax, 0xd9c3635d
add eax, 0xb7ce6f03
and eax, 0x1c57ddf0
imul eax, eax, 0x84d574a7
and eax, 0x207f6a96
xor eax, 0x1d8e71d6
and eax, 0x53c6450f
cmp eax, 0xa376a5c1
jae 0x100bdbbc
mov eax, dword [0x10144124]
or eax, dword [0x10144128]
sub eax, 0x4d163d05
and eax, 0x90113f2d
imul eax, eax, 0xf845cbc0
or eax, 0x46364102
and eax, 0x77d3c072
or eax, 0x5971a794
xor eax, 0x4a4d4dde
xor eax, 0xf61fe236
xor eax, 0xf662480
and eax, 0x2fb3e69
or eax, 0x180db822
xor eax, 0xf121b625
or eax, 0xd6b48274
add eax, 0x4cf4961a
xor eax, 0xa1d7b9fd
sub eax, 0x312a07c5
mov ecx, 0xffa564a8
xor edx, edx
div ecx
or eax, 0xbae340b7
and eax, 0x76a69dc6
xor eax, 0xce0e8c85
cmp eax, 0x66fb417c
jb 0x100bdaa1
mov eax, dword [0x1014412c]
and eax, dword [0x10144130]
or eax, 0x58389e95
imul eax, eax, 0xa7b9e7db
and eax, 0x7c354f0b
mov ecx, 0x67cff621
xor edx, edx
div ecx
xor eax, 0xb81aaa4a
and eax, 0xd2f4c5ef
xor eax, 0x52e1f761
and eax, 0xa0423d8e
imul eax, eax, 0xac4e8509
or eax, 0xb72b36e5
xor eax, 0x7592ce13
add eax, 0x601f8f89
imul eax, eax, 0xe9c465bf
mov ecx, 0xf21d1803
xor edx, edx
div ecx
and eax, 0x5c8c7386
xor eax, 0xad085585
imul eax, eax, 0x7e13ff3a
xor eax, 0xc60bf271
imul eax, eax, 0x6e7537e5
and eax, 0x83f3aa1a
cmp eax, 0x62437c6f
jb 0x100bdbc1
mov eax, dword [0x10144134]
xor edx, edx
div dword [0x10144138]
mov ecx, 0x3ff3feb1
xor edx, edx
div ecx
sub eax, 0xeb76fbe8
and eax, 0x1e30aef5
add eax, 0x9ac24ef0
mov ecx, 0x5bae10ff
xor edx, edx
div ecx
sub eax, 0xeee2df4c
imul eax, eax, 0x6bd751aa
mov ecx, 0x57adb639
xor edx, edx
div ecx
xor eax, 0xe375133
and eax, 0x44b9657d
add eax, 0xd7c3af4e
xor eax, 0xd0e439e8
sub eax, 0xa0fe9c63
sub eax, 0x940788a6
mov ecx, 0x81e91b7e
xor edx, edx
div ecx
add eax, 0xc6398443
mov ecx, 0xd7aca241
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x18]
sub ecx, 0x852c42cd
sub ecx, 0x9d294d0e
and ecx, 0xf30f7bbd
mov dword [ebp - 0x1c], ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.100bc0d0
add esp, 4
mov dword [esp], 1
call fcn.100ab930
add esp, 4
mov eax, dword [ebp - 0x1c]
cmp eax, 0x7a3aa77
jbe 0x100bdbc1
mov eax, dword [0x1014413c]
and eax, dword [0x10144140]
sub eax, 0xcc579346
add eax, 0x68afb591
imul eax, eax, 0x150795e
and eax, 0xf497acc
add eax, 0x8b1e9d4e
mov ecx, 0xb6674bc3
xor edx, edx
div ecx
add eax, 0x5dd57ed8
mov ecx, 0x7f34d955
xor edx, edx
div ecx
add eax, 0x1c683b15
add eax, 0x22076809
mov ecx, 0x96104ab9
xor edx, edx
div ecx
sub eax, 0xe708b853
sub eax, 0xe1334175
add eax, 0x4ae20fed
and eax, 0x4185eaed
imul eax, eax, 0xff93e790
and eax, 0x4fce1c27
imul eax, eax, 0x5dfa6085
mov ecx, 0xa9b14e2e
xor edx, edx
div ecx
add eax, 0xaa9244e5
cmp eax, 0xf41ef41d
ja 0x100bd67d
jmp 0x100bd85a
mov eax, dword [0x10144144]
add eax, dword [0x10144148]
xor eax, 0xc8bab496
or eax, 0xe8f1b382
xor eax, 0x68c2338f
add eax, 0xed2c4f80
and eax, 0x43a6e421
add eax, 0x39d6a6b
imul eax, eax, 0xfd4f5d96
and eax, 0xea67b4fc
sub eax, 0x727044ac
mov ecx, 0x7e53545d
xor edx, edx
div ecx
mov ecx, 0x4d4c2884
xor edx, edx
div ecx
mov ecx, 0xed5a91f6
xor edx, edx
div ecx
add eax, 0x75341748
and eax, 0x2ad14412
and eax, 0x609669bf
mov ecx, 0x45c0df6c
xor edx, edx
div ecx
imul eax, eax, 0xcda0c08d
imul eax, eax, 0x65a21419
mov ecx, 0x15c794e1
xor edx, edx
div ecx
imul eax, eax, 0x47009cad
cmp eax, 0xfd5aa169
je 0x100bdbee
mov eax, dword [0x1014414c]
or eax, dword [0x10144150]
add eax, 0xf9880d8d
sub eax, 0x14a92f3a
or eax, 0xf9a76d5e
mov ecx, 0x8c1bdc22
xor edx, edx
div ecx
add eax, 0x46aaa059
or eax, 0x466a60db
xor eax, 0xbd49bf51
imul eax, eax, 0xbc391555
mov ecx, 0x9efac54
xor edx, edx
div ecx
xor eax, 0xc338bfdc
imul eax, eax, 0xadaf665
sub eax, 0xe8daace1
and eax, 0x85facd20
mov ecx, 0x7ee9f68e
xor edx, edx
div ecx
or eax, 0x4bd86615
sub eax, 0x6ec5da9b
mov ecx, 0xf493dfed
xor edx, edx
div ecx
imul eax, eax, 0x7570af5
imul eax, eax, 0xef0268de
or eax, 0x598cde90
cmp eax, 0x150009d6
je 0x100bdbee
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e332f
mov esp, ebp
pop ebp
ret
mov eax, dword [0x10144154]
and eax, dword [0x10144158]
sub eax, 0x7b37dd28
mov ecx, 0x13e06611
xor edx, edx
div ecx
imul eax, eax, 0x42dc64cf
sub eax, 0x11e5a6fd
mov ecx, 0x9bd8271c
xor edx, edx
div ecx
mov ecx, 0x7046f0b6
xor edx, edx
div ecx
xor eax, 0xbd2c84b2
xor eax, 0x2de26c5e
imul eax, eax, 0x4febe903
and eax, 0xf3383e1f
or eax, 0x9a976f7d
add eax, 0x91da5a2a
or eax, 0x2d70e2f2
add eax, 0x6fb789e6
imul eax, eax, 0xe18648e7
xor eax, 0x3be0fc5d
add eax, 0xf4dd4fb5
xor eax, 0x37c01b03
mov ecx, 0xc44c1c47
xor edx, edx
div ecx
and eax, 0x1e40f8e2
cmp eax, 0xafb53c56
ja 0x100bdbf3
mov eax, 0x114a0430
mov ecx, dword [0x10146e7c]
cmp eax, 0x3311c50a
jae 0x100bda15
jmp 0x100bcfea
mov al, byte [0x1013a2ad]
xor al, 0x36
mov byte [0x1013a2b6], al
mov al, byte [0x1013a2ae]
xor al, 0xc8
mov byte [0x1013a2b7], al
mov al, byte [0x1013a2af]
xor al, 0xc3
mov byte [0x1013a2b8], al
mov al, byte [0x1013a2b0]
xor al, 0x97
mov byte [0x1013a2b9], al
mov al, byte [0x1013a2b1]
xor al, 6
mov byte [0x1013a2ba], al
mov al, byte [0x1013a2b2]
xor al, 0x7f
mov byte [0x1013a2bb], al
mov al, byte [0x1013a2b3]
xor al, 0xf9
mov byte [0x1013a2bc], al
mov al, byte [0x1013a2b4]
xor al, 0xde
mov byte [0x1013a2bd], al
mov al, byte [0x1013a2b5]
xor al, 0xce
mov byte [0x1013a2be], al
jmp 0x100bd239
mov eax, dword [ebp - 0x18]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.100bc0d0
add esp, 4
mov dword [esp], 1
call fcn.100ab930
add esp, 4
jmp 0x100bd67d
jmp 0x100bcede
jmp 0x100bd107
mov dword [0x10146e7c], 1
push eax
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x24], ecx
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov edx, esp
mov dword [ebp - 0x20], edx
mov edx, dword [0x1013a2b6]
mov dword [ecx], edx
mov edx, dword [0x1013a2ba]
mov dword [ecx + 4], edx
mov dl, byte [0x1013a2be]
mov byte [ecx + 8], dl
xor ecx, ecx
sub esp, 0xc
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x28]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
mov ecx, dword [ebp - 0x28]
lea eax, [0x1012f48a]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10104040
mov ecx, dword [ebp - 0x28]
add esp, 8
mov eax, dword [ebp - 0x24]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10104040
sub esp, 4
mov dword [esp], 2
mov dword [esp + 4], 4
mov dword [esp + 8], 6
call fcn.10064c80
add esp, 0xc
mov eax, dword [ebp - 0x24]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.10092cd0
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [eax], ecx
jmp 0x100bd3df
jmp 0x100bd57e
mov eax, dword [ebp - 0x18]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.100bc0d0
add esp, 4
mov dword [esp], 1
call fcn.100ab930
add esp, 4
jmp 0x100bd704
jmp 0x100bd8ec
mov eax, dword [0x10146e7c]
jmp 0x100bda15