Function at 0x101daa60
Capabilities:
Encrypt data using chaskey

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
mov dword [esp + 0x10], ebx
lea eax, [esi + 0x48]
mov dword [ebx + 0xbe28], esi
mov dword [ebx + 0xf940], 0
lea ecx, [ebx + 0x140]
push eax
mov dword [ebx + 0xf870], 0
call fcn.101db7f0
mov eax, 1
cmp eax, dword [esi + 0x5db8]
mov eax, dword [ebx + 0x162c]
sbb ecx, ecx
and eax, 0xffffff7f
and ecx, 0x80
or ecx, eax
mov dword [ebx + 0x162c], ecx
mov eax, dword [esi + 0x5dc0]
shl eax, 8
xor eax, ecx
and eax, 0x8000
xor ecx, eax
lea eax, [ebx + 0xf944]
mov dword [ebx + 0x162c], ecx
mov dword [esp + 0xc], eax
test cl, cl
jns 0x101daaff
mov edx, dword [esi + 0x5db8]
mov dword [eax], edx
cmp edx, 4
jne 0x101dab06
mov edi, dword [esi + 0x5dc0]
jmp 0x101dab08
mov edx, 1
mov dword [eax], edx
xor edi, edi
shl edi, 0xd
xor edi, ecx
and edi, 0x2000
xor edi, ecx
mov ecx, 0x3e7
mov dword [ebx + 0x162c], edi
mov eax, dword [esi + 0x5dc0]
shl eax, 0xd
xor eax, edi
and eax, 0x4000
xor edi, eax
mov dword [ebx + 0x162c], edi
mov eax, dword [esi + 0x5dc0]
shl eax, 7
xor eax, edi
and eax, 0x200
xor edi, eax
mov dword [ebx + 0x162c], edi
mov eax, dword [esi + 0x5dc0]
shl eax, 4
xor eax, edi
and eax, 0x100
xor edi, eax
mov dword [ebx + 0x162c], edi
mov eax, dword [esi + 0x5dc0]
shl eax, 7
xor eax, edi
and eax, 0x1000
xor eax, edi
lea edi, [ebx + 0x6ac8]
mov dword [ebx + 0x162c], eax
mov eax, dword [esi + 0x5dc0]
shr eax, 6
and al, 1
mov byte [ebx + 0xf65d], al
movups xmm0, xmmword [esi + 0x5dc4]
movups xmmword [ebx + 0xf948], xmm0
movups xmm0, xmmword [esi + 0x5dd4]
add esi, 0xc495
movups xmmword [ebx + 0xf958], xmm0
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor edi, edi
test edx, edx
je 0x101dac1d
mov edx, dword [ebp + 8]
lea ecx, [ebx + 0xeae4]
add edx, 0x7a8d
mov eax, dword [edx - 4]
lea edx, [edx + 0x28]
mov dword [ecx - 4], eax
lea ecx, [ecx + 0x28]
mov eax, dword [edx - 0x28]
inc edi
mov dword [ecx - 0x28], eax
mov eax, dword [edx - 0x24]
mov dword [ecx - 0x24], eax
mov eax, dword [edx - 0x20]
mov dword [ecx - 0x20], eax
mov eax, dword [edx - 0x1c]
mov dword [ecx - 0x1c], eax
mov eax, dword [edx - 0x18]
mov dword [ecx - 0x18], eax
mov eax, dword [edx - 0x14]
mov dword [ecx - 0x14], eax
mov eax, dword [edx - 0x10]
mov dword [ecx - 0x10], eax
mov eax, dword [edx - 0xc]
mov dword [ecx - 0xc], eax
mov eax, dword [edx - 8]
mov dword [ecx - 8], eax
cmp edi, dword [ebx + 0xf944]
jb 0x101dabd2
mov eax, dword [ebx + 0xbe28]
lea ecx, [ebx + 0xd298]
mov esi, dword [ebp + 8]
push dword [eax + 0x40]
call fcn.101d9a40
mov eax, dword [esi + 0xc235]
xor edi, edi
mov ecx, dword [esi + 0xc239]
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], ecx
mov eax, dword [esi + 0xc23d]
mov ecx, dword [esi + 0xc241]
mov dword [ebx + 0xe890], eax
mov dword [ebx + 0xe894], ecx
mov dword [ebx + 0xe898], 0
mov dword [ebx + 0xe89c], 0
mov dword [ebx + 0xe8a0], 0
mov dword [ebx + 0xe8a8], 0
mov dword [ebx + 0xe8ac], 0
cmp dword [esi + 0x81c9], edi
jbe 0x101dacef
lea eax, [esi + 0x8225]
test byte [eax], 4
mov ecx, dword [eax - 0x58]
mov edx, dword [eax - 0x54]
jne 0x101dace3
test edx, edx
jne 0x101dacb7
cmp ecx, 0x100000
jb 0x101dace3
test byte [eax - 0x44], 1
je 0x101daccb
mov dword [ebx + 0xe8a8], ecx
mov dword [ebx + 0xe8ac], edx
jmp 0x101dace3
test byte [eax - 0x44], 4
jne 0x101dace3
add dword [ebx + 0xe898], ecx
adc dword [ebx + 0xe89c], edx
inc dword [ebx + 0xe8a0]
inc edi
add eax, 0x64
cmp edi, dword [esi + 0x81c9]
jb 0x101daca0
mov ecx, dword [esi + 0xc24d]
mov eax, dword [esi + 0xc251]
add ecx, 0xffffffff
mov dword [ebx + 8], ecx
adc eax, 0xffffffff
mov dword [ebx + 0xc], eax
mov eax, dword [esi + 0xc469]
shl eax, 5
xor eax, dword [ebx + 0x162c]
and eax, 0x20
xor dword [ebx + 0x162c], eax
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
and eax, 1
mov dword [ebx + 0xe8c8], 0
shl eax, 5
lea edx, [esi + 0x7de5]
or dword [ebx + 0x162c], eax
xor edi, edi
lea eax, [edx + 0x3e0]
mov dword [ebx + 0xe8c4], 0
mov dword [esp + 0x18], eax
cmp dword [eax], edi
jbe 0x101dad8d
mov esi, eax
nop dword [eax]
mov ecx, dword [edx]
lea eax, [ecx - 0xb]
cmp eax, 5
ja 0x101dad82
lea eax, [ecx - 0xb]
mov ecx, dword [ebx + 0xe8c8]
bts ecx, eax
inc dword [ebx + 0xe8c4]
mov dword [ebx + 0xe8c8], ecx
inc edi
add edx, 0x20
cmp edi, dword [esi]
jb 0x101dad60
mov esi, dword [ebp + 8]
mov ecx, dword [ebx + 0xe8c8]
mov edx, dword [0x11d0c5b8]
mov edi, dword fs:[0x2c]
test cl, 2
je 0x101dadd9
test ecx, ecx
je 0x101dadb0
lea eax, [ecx - 1]
test ecx, eax
je 0x101dadd9
mov eax, dword [edi + edx*4]
mov eax, dword [eax + 0x10]
test dword [eax + 0xd330], 0x200
je 0x101dadd9
mov dword [ebx + 0xe8c8], 2
mov dword [ebx + 0xe8c4], 1
mov eax, dword [esi + 0x3c85]
mov ecx, 0x200
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], 0
mov eax, dword [esi + 0xd5a8]
mov dword [ebx + 0x30668], 0x40000
push 0x10
lea eax, [eax + eax*4]
add eax, eax
mov dword [ebx + 0x30658], eax
cmove eax, ecx
mov dword [ebx + 0x30658], eax
mov eax, dword [edi + edx*4]
mov dword [esp + 0x1c], eax
mov eax, dword [eax + 0x10]
push dword [eax + 0x30668]
call fcn.10434a32
add esp, 8
mov dword [ebx + 0x30660], eax
lea eax, [ebx + 0xe8b0]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea eax, [ebx + 0xe8b8]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov ecx, ebx
mov dword [ebx + 0x2fe34], 0
call fcn.101ded60
mov eax, dword [ebx + 0x6ab4]
mov esi, dword [esi + 0xd590]
test eax, eax
je 0x101dae83
push eax
call fcn.10434a18
add esp, 4
mov dword [ebx + 0x6ab4], 0
mov eax, dword [ebx + 0x6aac]
test eax, eax
je 0x101daea0
push eax
call fcn.10434a18
add esp, 4
mov dword [ebx + 0x6aac], 0
mov eax, dword [esi + 0x26c]
test eax, eax
je 0x101daedd
imul eax, eax, 0x6c
push 0x10
push eax
call fcn.10434a32
add esp, 8
mov dword [ebx + 0x6aac], eax
test eax, eax
je 0x101db7da
imul ecx, dword [esi + 0x26c], 0x6c
push ecx
push dword [esi + 0x268]
push eax
call fcn.10425d60
add esp, 0xc
mov eax, dword [esi + 0x26c]
mov dword [ebx + 0x6aa8], eax
mov eax, dword [esi + 0x274]
test eax, eax
je 0x101daf28
shl eax, 5
push 0x10
push eax
call fcn.10434a32
add esp, 8
mov dword [ebx + 0x6ab4], eax
test eax, eax
je 0x101db7da
mov ecx, dword [esi + 0x274]
shl ecx, 5
push ecx
push dword [esi + 0x270]
push eax
call fcn.10425d60
add esp, 0xc
mov eax, dword [esi + 0x274]
mov dword [ebx + 0x6ab0], eax
mov eax, dword [esi + 0x378]
shl eax, 2
push eax
lea eax, [esi + 0x278]
push eax
lea eax, [ebx + 0x20]
push eax
call fcn.10425d60
mov eax, dword [esi + 0x378]
lea edi, [ebx + 0xd5c0]
add esi, 4
mov dword [ebx + 0x120], eax
add esp, 0xc
mov ecx, 0x99
cmp dword [ebx + 0xd45c], 1
rep movsd dword es:[edi], dword [esi]
jne 0x101daf7d
mov ecx, ebx
call fcn.101dfcf0
lea ecx, [ebx + 0x7a80]
call fcn.1004f240
test al, al
je 0x101db7da
test dword [ebx + 0x190], 0x3fff00
je 0x101db7cc
push 0x10
push 0x1a480
call fcn.10434a32
mov esi, eax
add esp, 8
mov dword [esp + 0x14], esi
test esi, esi
je 0x101db191
push 0x1a480
push 0
push esi
call fcn.10425c00
add esp, 0xc
mov ecx, esi
call fcn.100b7910
push 0x80
lea edi, [esi + 0x196b8]
mov dword [esi], 0x1122a180
push 0
push edi
mov dword [edi + 0x80], 8
call fcn.10425c00
xor edx, edx
add esp, 0xc
cmp dword [edi + 0x80], edx
jbe 0x101db030
lea eax, [ebx + 0xf944]
or ebx, 0xffffffff
lea ecx, [edi + 0xc]
mov dword [esp + 0xc], eax
lea eax, [edx - 0x2c2f80ff]
mov word [ecx], bx
mov dword [ecx - 8], eax
lea ecx, [ecx + 0x10]
inc edx
cmp edx, dword [edi + 0x80]
jb 0x101db014
mov ebx, dword [esp + 0x10]
mov byte [edi + 0x84], 0
lea eax, [esi + 0x19b10]
and byte [esi + 0x19b0c], 0xfa
mov ecx, 7
mov dword [esi + 0x198a0], 0
mov edx, 0xffff
mov dword [esi + 0x19b04], 0
mov dword [esi + 0x19b08], 0
nop dword [eax]
mov dword [eax], 0
lea eax, [eax + 0x14]
mov dword [eax - 0x10], 0
mov dword [eax - 0xc], 0
mov dword [eax - 8], 0
mov byte [eax - 2], 0
mov word [eax - 4], dx
sub ecx, 1
jne 0x101db070
mov dword [esi + 0x19ba0], ecx
lea edi, [esi + 0x19bac]
mov dword [esi + 0x19ba4], ecx
xor eax, eax
mov dword [esi + 0x19ba8], ecx
xorps xmm0, xmm0
mov dword [esi + 0x19b9c], 0x1122a178
mov ecx, 0x100
rep stosd dword es:[edi], eax
mov dword [esi + 0x19fac], eax
lea edi, [esi + 0x19fec]
mov dword [esi + 0x19fb0], eax
mov ecx, 0x80
mov dword [esi + 0x19fb4], eax
mov dword [esi + 0x19fb8], eax
mov dword [esi + 0x19fbc], 0x80
mov dword [esi + 0x19fc0], eax
mov dword [esi + 0x19fc4], eax
mov dword [esi + 0x19fcc], eax
mov word [esi + 0x19fdc], ax
mov dword [esi + 0x19fd4], 0x1122a148
rep stosd dword es:[edi], eax
movups xmmword [esi + 0x1a22c], xmm0
lea ecx, [esi + 0x1a328]
movups xmmword [esi + 0x1a23c], xmm0
movups xmmword [esi + 0x1a24c], xmm0
movups xmmword [esi + 0x1a25c], xmm0
movups xmmword [esi + 0x1a26c], xmm0
movups xmmword [esi + 0x1a27c], xmm0
movups xmmword [esi + 0x1a28c], xmm0
movups xmmword [esi + 0x1a29c], xmm0
mov dword [esi], 0x1122a994
mov dword [esi + 0x1a2c8], eax
mov byte [esi + 0x1a2d4], 1
mov dword [esi + 0x1a2c4], 0x1122b154
mov dword [esi + 0x1a2d0], 8
mov dword [esi + 0x1a2cc], 0x40
call fcn.101873a0
jmp 0x101db1a1
xor esi, esi
lea eax, [ebx + 0xf944]
mov dword [esp + 0x14], esi
mov dword [esp + 0xc], eax
push 0x10
push 0x15d8
mov dword [ebx + 0x7a68], esi
call fcn.10434a32
mov edi, eax
add esp, 8
test edi, edi
je 0x101db34d
xorps xmm0, xmm0
lea esi, [edi + 0x70]
movups xmmword [edi + 4], xmm0
mov dword [edi + 0x14], 0
mov ebx, 2
mov dword [edi + 0x18], 0
movups xmmword [edi + 0x1c], xmm0
movq qword [edi + 0x2c], xmm0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
movq qword [edi + 0x3c], xmm0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 1
mov dword [edi + 0x50], 2
mov dword [edi + 0x4c], 2
mov byte [edi + 0x54], 0
mov dword [edi], 0x11225c08
mov byte [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], fcn.101dc240
push 0xa58
push 0
push esi
call fcn.10425c00
and byte [esi + 0xb1], 0xef
lea eax, [esi + 0x1c0]
add esp, 0xc
mov dword [esi + 0x98], 0xffffffff
mov dword [esi + 0x9c], 0xffffffff
mov dword [esi + 0xa0], 0xffffffff
mov dword [esi + 0x70], 0
push 0x800
push 0
push eax
mov dword [esi + 0x1b8], 0
mov dword [esi + 0x1bc], 0
mov dword [esi + 0xa54], 0
call fcn.10425c00
mov dword [esi + 0x9c8], 0
add esp, 0xc
add esi, 0xa58
sub ebx, 1
jne 0x101db238
push 0x14b0
lea eax, [edi + 0x70]
mov dword [edi + 0x1520], ebx
push ebx
push eax
mov dword [edi + 0x1524], ebx
mov dword [edi + 0x1528], ebx
mov dword [edi + 0x152c], ebx
mov dword [edi + 0x1530], ebx
mov dword [edi + 0x1534], 1
mov dword [edi + 0x15b8], ebx
mov word [edi + 0x15bc], bx
mov dword [edi + 0x15c0], ebx
mov dword [edi + 0x15c4], ebx
mov dword [edi + 0x15c8], ebx
call fcn.10425c00
add esp, 0xc
lea eax, [edi + 0x1538]
push 0x80
push ebx
push eax
call fcn.10425c00
mov eax, dword [esp + 0x20]
xorps xmm0, xmm0
mov ebx, dword [esp + 0x1c]
add esp, 0xc
movq qword [edi + 0x68], xmm0
mov dword [edi], 0x11225c98
mov dword [edi + 0x15d0], eax
jmp 0x101db34f
xor edi, edi
mov eax, dword [ebx + 0x7a68]
mov dword [eax + 0x164d0], edi
mov eax, dword [0x11d21c10]
mov dword [0x11d0d5e4], eax
test eax, eax
je 0x101db7c6
push 0x1046cf40
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x11d0d808], eax
test eax, eax
je 0x101db7c6
push 0x11d0d80c
lea ecx, [esp + 0x24]
mov dword [esp + 0x24], 0x525e8493
push ecx
push 0x4f434741
push 0x534d434c
mov dword [esp + 0x34], 0xe3c19d34
mov dword [esp + 0x38], 0x9c618c6a
mov dword [esp + 0x3c], 0xe8abd1d2
call eax
test eax, eax
jne 0x101db7c6
cmp dword [0x11d0d80c], eax
je 0x101db7c6
mov ecx, dword [ebx + 0x7a68]
test ecx, ecx
je 0x101db7da
mov edx, dword [esp + 0x18]
mov eax, dword [ecx]
push dword [edx + 0x10]
mov eax, dword [eax + 0xc]
call eax
test al, al
je 0x101db7da
mov ecx, dword [ebx + 0x7a68]
mov eax, dword [ecx]
call dword [eax + 0x140]
push 0x10
push 0x30
mov dword [ebx + 0xd260], 0
call fcn.10434a32
mov esi, eax
add esp, 8
test esi, esi
je 0x101db7ae
push 0x4000
mov dword [esi + 0x10], 0x1000
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
call fcn.10450898
add esp, 4
mov dword [esi + 0x28], eax
test eax, eax
je 0x101db798
push 0x200
mov ecx, esi
mov dword [esi + 4], 0
mov dword [esi], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
call fcn.100a8eb0
test al, al
je 0x101db798
mov dword [esi + 0x18], 0
lea eax, [ebx + 0x7e80]
mov dword [esi + 0x1c], 0
mov dword [esi + 0x14], 0
mov dword [ebx + 0x7a70], esi
lea esi, [ebx + 0x7d80]
push eax
mov ecx, esi
mov dword [ebx + 0x7d9c], ebx
mov dword [ebx + 0x7d84], 0
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x8180]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x8a80]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x87c0]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x7e00]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x7e40]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x7dc0]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x8040]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x8000]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x8100]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x8800]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
lea eax, [ebx + 0x89c0]
mov ecx, esi
push eax
call fcn.1012d550
test al, al
je 0x101db7cc
test byte [ebx + 0x7d98], 1
jne 0x101db620
mov ecx, dword [ebx + 0x7d94]
lea edi, [ebx + 0x7d88]
mov eax, dword [edi]
xor esi, esi
mov dword [ebx + 0x7da0], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ecx
test ecx, ecx
jle 0x101db619
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc], ecx
mov ecx, dword [eax + 8]
push dword [ebx + 0x7d9c]
mov eax, dword [ecx]
mov eax, dword [eax]
call eax
test al, al
je 0x101db6b8
mov eax, dword [esp + 0x14]
inc esi
mov eax, dword [eax]
mov dword [esp + 0x14], eax
cmp esi, dword [esp + 0x1c]
jl 0x101db5f1
or byte [ebx + 0x7d98], 1
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0xc]
mov ecx, dword [eax + 0x10]
add ecx, 0x3066c
push ecx
call fcn.1007ba40
mov dword [ebx + 0xbe30], eax
test eax, eax
je 0x101db7cc
inc dword [eax + 0xb98]
mov ecx, dword [ebx + 0x162c]
mov eax, ecx
shr eax, 7
test al, 1
je 0x101db729
bt ecx, 0xf
jb 0x101db729
mov eax, dword [ebx + 0xbe30]
mov esi, 0x1122b500
mov edx, 0x134a8233
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x1c], ecx
mov ecx, 0x7a671031
mov dword [esp + 0x18], eax
nop
cmp ecx, dword [esp + 0x1c]
jne 0x101db6a3
cmp edx, eax
jne 0x101db6a3
call fcn.1022f920
test al, al
jne 0x101db719
mov ecx, dword [esi + 8]
add esi, 8
mov eax, ecx
mov edx, dword [esi + 4]
or eax, edx
je 0x101db729
mov eax, dword [esp + 0x18]
jmp 0x101db690
mov eax, dword [ebx + 0x7d94]
mov esi, dword [edi]
mov dword [esp + 0x1c], eax
test eax, eax
jle 0x101db704
mov ebx, eax
nop word [eax + eax]
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov edx, esi
mov esi, dword [esi]
cmp edi, dword [edi]
je 0x101db6fb
mov eax, dword [edx + 4]
push 0xc
push edx
mov dword [eax], esi
mov ecx, dword [edx]
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
call fcn.1045088a
add esp, 8
dec dword [edi + 0xc]
sub ebx, 1
jne 0x101db6d0
mov ebx, dword [esp + 0x10]
and byte [ebx + 0x7d98], 0xfe
mov eax, 0x80004005
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
and dword [ebx + 0x162c], 0xffffff7f
mov dword [edi], 1
push 0x10
push 0x54
call fcn.10434a32
add esp, 8
test eax, eax
je 0x101db780
mov dword [eax + 8], 0x10
lea edx, [eax + 0x10]
mov dword [eax + 0x50], 0
xor ecx, ecx
mov word [eax], 1
mov dword [eax + 4], 0
mov dword [eax + 0xc], 0
nop
mov dword [edx], 0
lea edx, [edx + 4]
inc ecx
cmp ecx, dword [eax + 8]
jl 0x101db760
mov dword [ebx + 0x2fd80], eax
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov dword [ebx + 0x2fd80], 0
mov eax, 0x80004005
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push dword [esi + 0x28]
call fcn.10450877
add esp, 4
push 0x30
push esi
call fcn.1045088a
add esp, 8
mov dword [ebx + 0x7a70], 0
mov eax, 0x80004005
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, 0x80004005
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
pop edi
pop esi
mov eax, 0x8007000e
pop ebx
mov esp, ebp
pop ebp
ret 0xc