Function at 0x1011df0
Capabilities:
Check for time delay via gettickcount
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x50c
mov eax, dword [0x101cdb0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
push esi
mov esi, dword [ebp + 0xc]
push edi
xor edi, edi
mov dword [ebp - 0x418], edi
mov dword [ebp - 0x41c], 0xffffffff
mov dword [ebp - 0x428], edi
call ebx
push 0x100b2cc
push 0x100a038
mov dword [ebp - 0x48c], eax
mov dword [ebp - 0x420], edi
mov dword [ebp - 0x490], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, edi
je 0x1011e5f
push edi
push edi
push 1
push edi
call eax
mov eax, dword [ebp + 8]
push 0x60
lea ecx, [ebp - 0x488]
push 0
push ecx
mov dword [0x101d470], eax
mov dword [0x101d46c], esi
mov dword [0x101cd64], 0xffffffff
call sub.msvcrt.dll_memset
push 0x54
lea edx, [ebp - 0x504]
push 0
push edx
mov dword [ebp - 0x440], 2
call sub.msvcrt.dll_memset
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
xor eax, eax
push 0xa
mov dword [ebp - 0x4b0], eax
push 0x1001ba0
mov dword [ebp - 0x504], 0x54
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], eax
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x494], eax
mov dword [ebp - 0x4b0], 0x20
call edi
add esp, 0x20
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
mov eax, dword [0x101d470]
cmp eax, 2
jge 0x1011f23
push 0xa
push 0xa
push 0x1002f78
push 0x100a028
call edi
add esp, 0x10
jmp case.0x1012030.63
cmp eax, 1
jge 0x1011f5d
mov dword [0x101cd64], eax
xor eax, eax
movzx ecx, word [eax]
push ecx
push 0x100349c
call dword [sym.imp.msvcrt.dll_wcschr]
add esp, 8
test eax, eax
jne 0x1011f76
push 0xa
push 0xa
push 0x1002f00
push 0x100a028
call edi
add esp, 0x10
jmp case.0x1012030.63
mov dword [0x101cd64], 1
cmp eax, 1
je 0x1011f2d
mov eax, dword [0x101d46c]
mov eax, dword [eax + 4]
jmp 0x1011f2f
push esi
push 0x10036b0
push 0x40
push 0x101d168
call fcn.0101429d
push esi
push 0x1003690
push 0x40
push 0x101d368
call fcn.0101429d
push esi
push 0x1003670
push 0x40
push 0x101d2e8
call fcn.0101429d
push esi
push 0x100364c
push 0x40
push 0x101d268
call fcn.0101429d
add esp, 0x40
push esi
push 0x100362c
push 0x40
push 0x101d0e8
call fcn.0101429d
push esi
push 0x100360c
push 0x40
push 0x101d3e8
call fcn.0101429d
push esi
push 0x10035e8
push 0x40
push 0x101d1e8
call fcn.0101429d
mov eax, dword [0x101cd64]
add esp, 0x30
cmp eax, 0xffffffff
je 0x1012017
cmp dword [0x101d470], eax
je 0x1012017
mov edx, dword [0x101d46c]
mov eax, dword [edx + eax*4]
jmp 0x1012019
xor eax, eax
movzx eax, word [eax + 2]
add eax, 0xffffffc1
cmp eax, 0x3b
ja case.0x1012030.64
movzx eax, byte [eax + 0x1013a74]
jmp dword [eax*4 + 0x1013a4c]
mov dword [ebp - 0x464], 1
push 0x1010e90
lea esi, [ebp - 0x488]
call fcn.0100f6f0
test eax, eax
jne 0x1012173
mov ecx, dword [0x101d470]
xor eax, eax
cmp ecx, eax
jge 0x101213e
mov dword [0x101cd64], ecx
jmp 0x101214e
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x464], 2
mov dword [ebp - 0x45c], 0x40
mov dword [ebp - 0x468], ecx
push 0x1011060
jmp 0x1012046
mov dword [ebp - 0x464], 0
push 0x1011400
jmp 0x1012046
or dword [ebp - 0x460], 0x10000
mov dword [ebp - 0x464], 0xc
push 0x10114f0
jmp 0x1012046
mov dword [ebp - 0x464], 6
push 0x1011620
jmp 0x1012046
lea edx, [ebp - 0x504]
mov dword [ebp - 0x464], 5
mov dword [ebp - 0x468], edx
push 0x1011770
jmp 0x1012046
mov dword [ebp - 0x464], 0xd
push 0x1011970
jmp 0x1012046
mov dword [ebp - 0x464], 8
push 0x100f4a0
jmp 0x1012046
push 0xa
push 0xa
push 0x1002ec8
push 0x100a028
call edi
add esp, 0x10
jmp case.0x1012030.63
mov dword [0x101cd64], eax
cmp ecx, eax
je 0x101214e
mov eax, dword [0x101d46c]
mov eax, dword [eax]
push eax
call dword [sym.imp.msvcrt.dll__wcsupr]
add esp, 4
mov edi, eax
call fcn.01010b60
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.010140f3
mov esp, ebp
pop ebp
ret
push 0
push 1
push 0x81
push 0
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
push 0x100b2bc
push 0
push 0x22
push 0
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 1
push 0x9c
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0x101d168
push 0
push 1
push 0
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
mov eax, dword [ebp - 0x460]
test al, 1
jne 0x1012202
call fcn.01010af0
mov eax, dword [ebp - 0x460]
mov ecx, dword [ebp - 0x464]
cmp ecx, 0xa
je 0x1012212
cmp ecx, 3
jne 0x1012224
test eax, 0x3a01000
jne 0x1012224
or eax, 0x200000
mov dword [ebp - 0x460], eax
test eax, 0x2000000
je 0x101223f
push 0
push 0x800
push 0x40
push 0
lea edx, [ebp - 0x418]
push edx
jmp 0x1012258
test eax, 0x200000
je 0x101226d
push 0
push 0x1000
push 0x40
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
mov eax, dword [ebp - 0x460]
test eax, 0x1000
je 0x1012288
push 0
push 0x2000
push 0x40
push 0
lea ecx, [ebp - 0x418]
push ecx
jmp 0x10122bc
test eax, 0x1000000
je 0x10122a3
push 0
push 0x4000
push 0x40
push 0
lea edx, [ebp - 0x418]
push edx
jmp 0x10122bc
test eax, 0x800000
je 0x10122cb
push 0
push 0x8000
push 0x40
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
lea ecx, [ebp - 0x488]
call fcn.0100f0c0
mov esi, eax
test esi, esi
jl 0x1013937
call ebx
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x464]
cmp eax, 0xd
ja case.0x10122f7.3
jmp dword [eax*4 + 0x1013ab0]
cmp dword [ebp - 0x470], 0
jne 0x101232b
push 0x100b298
push 0x1003200
call edi
push 0xa
push 0xa
push 0x1009d48
call edi
add esp, 0x14
mov esi, 0xfffffc15
jmp 0x1013937
push 0xa
push 0x100b25c
call edi
mov ecx, dword [ebp - 0x470]
push 0xa
push ecx
push 0x100b224
call edi
mov eax, dword [ebp - 0x43c]
add esp, 0x14
test eax, eax
je 0x1012381
push 0xa
push eax
push 0x100b1ec
call edi
mov edx, dword [ebp - 0x43c]
add esp, 0xc
push 0
push edx
push 0x13
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
mov eax, dword [ebp - 0x484]
test eax, eax
jne 0x1012390
mov eax, 0x100b1c4
push 0xa
push eax
push 0x100b18c
call edi
mov eax, dword [ebp - 0x480]
add esp, 0xc
test eax, eax
jne 0x10123ac
mov eax, 0x100b1c4
push 0xa
push eax
push 0x100b154
call edi
mov eax, dword [ebp - 0x488]
add esp, 0xc
test eax, eax
je 0x10123ff
cmp eax, 0x10036c8
jne 0x10123cf
mov eax, 0x100b1c4
push 0xa
push eax
push 0x100b11c
call edi
mov ecx, dword [ebp - 0x488]
add esp, 0xc
push ecx
push 0
push 0x71
push 0
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
test dword [ebp - 0x460], 0x400000
je 0x1012429
push 0
push 1
push 0x34
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
mov eax, dword [ebp - 0x430]
test eax, eax
je 0x10124a2
xor esi, esi
test eax, eax
jle 0x101248d
lea esp, [esp]
mov ecx, dword [ebp - 0x42c]
mov eax, dword [ecx + esi*8 + 4]
test eax, eax
jne 0x1012453
mov eax, 0x100b10c
push eax
push 0x100b0d0
call edi
mov edx, dword [ebp - 0x42c]
mov eax, dword [edx + esi*8]
add esp, 8
push 0xa
test eax, eax
je 0x101247a
push eax
push 0x100b088
call edi
add esp, 0xc
jmp 0x1012484
push 0x1001ba0
call edi
add esp, 8
inc esi
cmp esi, dword [ebp - 0x430]
jl 0x1012440
test byte [ebp - 0x45c], 0x20
je 0x10124a2
push 0xa
push 0x100b040
call edi
add esp, 8
push 0x100b034
push 0
push 0x22
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0xa
push 0x1001ba0
call edi
add esp, 8
test byte [ebp - 0x45c], 8
je 0x10124f7
push 0
push 0
push 0x30
push 0
lea ecx, [ebp - 0x418]
push ecx
call dword [0x101cd40]
mov esi, eax
test esi, esi
jl 0x1013937
lea edi, [ebp - 0x488]
lea esi, [ebp - 0x418]
call fcn.0100ff10
mov esi, eax
test esi, esi
jl 0x1013931
mov edx, edi
push edx
lea ecx, [ebp - 0x418]
call fcn.01011b60
mov esi, eax
test esi, esi
jl 0x1013931
mov eax, dword [ebp - 0x478]
test eax, eax
jne 0x10125f0
mov eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4ac], ecx
test eax, eax
jne 0x101255b
or dword [ebp - 0x45c], 0x20
push 0x100affc
mov dword [ebp - 0x494], 0x100edb0
mov dword [ebp - 0x420], 1
call dword [sym.imp.msvcrt.dll_wprintf]
mov edx, dword [ebp - 0x45c]
add esp, 4
push edx
lea eax, [ebp - 0x4b0]
push eax
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetInit3W
mov esi, eax
mov edi, esi
test esi, esi
jge 0x10125b0
mov edx, dword [ebp - 0x418]
push 2
push edx
call dword [0x101cd3c]
jmp 0x10125cb
mov eax, dword [ebp - 0x418]
push 1
push eax
call dword [0x101cd3c]
mov esi, eax
test esi, esi
jne 0x10125cd
test edi, edi
jle 0x10125cb
mov esi, edi
test esi, esi
jl 0x1013931
push 0xa
push 0xa
push 0x1009d48
call dword [sym.imp.msvcrt.dll_wprintf]
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
add esp, 0xc
jmp 0x10138a7
mov ecx, dword [ebp - 0x474]
push eax
test ecx, ecx
je 0x101260c
push ecx
push 0x100afbc
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 0xc
jmp 0x101261a
push 0x100af60
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 8
mov ecx, dword [ebp - 0x474]
mov edx, dword [ebp - 0x478]
push 0x100edb0
push ecx
push edx
call sub.ESENT.dll_JetRestore2W
push 0xa
push 0xa
push 0x1009d48
mov esi, eax
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 0xc
test esi, esi
jl 0x1013931
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
jmp 0x10138a7
push 0x101d268
xor ebx, ebx
lea ecx, [ebp - 0x488]
call fcn.0100f130
mov esi, eax
test esi, esi
jl 0x1013937
push 0xa
push 0x100af24
call edi
mov eax, dword [ebp - 0x488]
push 0xa
push eax
push 0x100aef4
call edi
mov ecx, dword [ebp - 0x47c]
push 0xa
push ecx
push 0x100aec4
call edi
add esp, 0x20
push 0x100aeac
push ebx
push 0x22
push ebx
lea edx, [ebp - 0x418]
push edx
mov dword [ebp - 0x420], 1
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
mov ecx, dword [ebp - 0x418]
push 0x20a
lea eax, [ebp - 0x220]
push eax
push ebx
push 1
push ebx
push ecx
call sub.ESENT.dll_JetGetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
mov edx, dword [ebp - 0x47c]
push edx
push ebx
push 1
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x2e
push ebx
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x23
push ebx
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x100
push 0x12
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x2d
push ebx
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x36
push ebx
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x2710
push 6
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x2710
push 7
push ebx
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 1
push 0x41
push ebx
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x80
push 5
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x2710
push 0xa
push ebx
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
lea edi, [ebp - 0x488]
lea esi, [ebp - 0x418]
call fcn.0100ff10
mov esi, eax
test esi, esi
jl 0x1013931
lea edx, [ebp - 0x418]
push edx
call dword [0x101cd34]
mov esi, eax
test esi, esi
jl 0x1013931
mov ecx, dword [ebp - 0x418]
push 0x10015c0
push 0x10036cc
lea eax, [ebp - 0x41c]
push eax
push ecx
call sub.ESENT.dll_JetBeginSessionW
mov esi, eax
test esi, esi
jl 0x10135d3
mov ecx, dword [ebp - 0x460]
xor eax, eax
test ecx, 0x100
je 0x10128a2
mov eax, 0x100
test ecx, 0x200
je 0x10128ad
or eax, 8
test ecx, 0x100000
je 0x10128bc
or eax, 0x10000
jmp 0x10128c6
test cl, 1
je 0x10128c6
or eax, 0x8000
mov edx, dword [ebp - 0x46c]
mov ecx, dword [ebp - 0x478]
push eax
mov eax, dword [ebp - 0x468]
push 0x100edb0
push edx
mov edx, dword [ebp - 0x488]
push eax
mov eax, dword [ebp - 0x41c]
push ecx
push edx
push eax
call fcn.0100fb40
mov esi, eax
cmp esi, 0xfffffb38
jne 0x1012c21
mov eax, dword [ebp - 0x41c]
mov ebx, dword [ebp - 0x418]
xor ecx, ecx
call fcn.0100ffb0
lea ecx, [ebp - 0x220]
push ecx
push 0
push 1
push 0
lea edx, [ebp - 0x418]
push edx
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x41c], 0xffffffff
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013931
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
mov al, byte [ebp - 0x460]
mov dword [ebp - 0x424], 0
test al, 8
je 0x1012970
mov dword [ebp - 0x424], 0x20
test al, 2
je 0x101297b
or dword [ebp - 0x424], 0x40
test al, 4
je 0x1012989
or dword [ebp - 0x424], 0x100
push 0x101d368
xor ebx, ebx
lea ecx, [ebp - 0x488]
call fcn.0100f130
mov esi, eax
test esi, esi
jl 0x10135d9
push 0xa
push 0x100ae60
call edi
mov eax, dword [ebp - 0x488]
push 0xa
push eax
push 0x100ae28
call edi
add esp, 0x14
push 0x100a10c
push ebx
push 0x22
push ebx
lea ecx, [ebp - 0x418]
push ecx
mov dword [ebp - 0x420], 1
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x23
push ebx
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x100
push 0x12
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x2e
push ebx
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x2d
push ebx
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x36
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x2710
push 6
push ebx
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x2710
push 7
push ebx
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x2710
push 0xa
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 1
push 0x41
push ebx
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
lea edi, [ebp - 0x488]
lea esi, [ebp - 0x418]
call fcn.0100ff10
mov esi, eax
test esi, esi
jl 0x1013931
lea edx, [ebp - 0x418]
push edx
call dword [0x101cd34]
mov esi, eax
test esi, esi
jl 0x1013931
mov ecx, dword [ebp - 0x418]
push 0x10015c0
push 0x10036cc
lea eax, [ebp - 0x41c]
push eax
push ecx
call sub.ESENT.dll_JetBeginSessionW
mov esi, eax
test esi, esi
jl 0x10135d3
mov edx, dword [ebp - 0x47c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x488]
mov eax, dword [ebp - 0x41c]
mov edx, dword [ebp - 0x47c]
mov dword [ebp - 0x4e8], ecx
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x424]
lea ecx, [ebp - 0x504]
push ecx
mov dword [ebp - 0x4f4], 0x11
mov dword [ebp - 0x4dc], edx
mov dword [ebp - 0x4d8], ebx
mov dword [ebp - 0x4ec], eax
mov dword [ebp - 0x4b8], 0x100edb0
call sub.ESENT.dll_JetDBUtilitiesW
mov esi, eax
test esi, esi
jl 0x10135d3
mov eax, dword [ebp - 0x41c]
mov ebx, dword [ebp - 0x418]
xor ecx, ecx
call fcn.0100ffb0
mov esi, eax
test esi, esi
jl 0x1013931
mov ebx, edi
call fcn.010119d0
mov esi, eax
test esi, esi
jl 0x1013931
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
push 0xa
push 0xa
push 0x100ae14
call edi
push 0xa
push 0x100ad90
call edi
push 0xa
push 0x100ad10
call edi
push 0xa
push 0x100ac88
call edi
push 0xa
push 0xa
push 0x100ac30
call edi
add esp, 0x30
jmp 0x10138a7
test esi, esi
jl 0x10135d3
mov eax, dword [ebp - 0x41c]
mov ebx, dword [ebp - 0x418]
xor ecx, ecx
mov dword [ebp - 0x428], esi
call fcn.0100ffb0
mov esi, eax
test esi, esi
jl 0x1013931
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
push 0xa
push 0x100ac1c
call edi
push 0xa
push 0x100ad90
call edi
push 0xa
push 0x100ad10
call edi
push 0xa
push 0x100aba8
call edi
push 0xa
push 0xa
push 0x100ac30
call edi
add esp, 0x2c
jmp 0x10138a7
mov edx, dword [ebp - 0x488]
xor eax, eax
push edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x424], eax
call fcn.0100f3f0
or dword [ebp - 0x460], 0x4000000
push 0x101d1e8
lea ebx, [ebp - 0x424]
lea ecx, [ebp - 0x488]
mov dword [ebp - 8], eax
call fcn.0100f130
mov ebx, dword [ebp - 0x424]
mov esi, eax
test ebx, ebx
jne 0x1012cdd
cmp dword [ebp - 8], ebx
je 0x1012cdd
mov ebx, 3
xor esi, esi
jmp 0x1012ce5
test esi, esi
jl 0x1013937
push 0xa
push 0x100ab6c
call edi
add esp, 8
mov dword [ebp - 0x420], 1
cmp ebx, 5
ja case.0x1012d04.0
jmp dword [ebx*4 + 0x1013ae8]
mov eax, dword [ebp - 0x488]
push 0xa
push eax
push 0x100ab3c
call edi
add esp, 0xc
or dword [ebp - 0x460], 0x10000
jmp 0x1012e37
cmp dword [ebp - 8], 0
jne 0x1012d46
mov ecx, dword [ebp - 0x488]
push 0xa
push ecx
push 0x100ab10
call edi
add esp, 0xc
mov ecx, dword [ebp - 0x488]
and dword [ebp - 0x460], 0xfffeffff
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x504]
push ecx
mov esi, eax
mov dword [ebp - 0x468], edx
mov dword [ebp - 0x464], 5
mov dword [ebp - 0x4f4], 8
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x4ec], 0x40
call fcn.01011710
push 0
push 0
push 0x2d
push 0
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 1
push 0x41
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
lea eax, [ebp - 0x488]
lea ebx, [ebp - 0x504]
call fcn.01010890
mov esi, eax
test esi, esi
jl 0x1013937
jmp 0x1012e37
mov ecx, dword [ebp - 0x488]
push 0xa
push 0xa
push ecx
push 0x100aadc
call edi
push 0xa
push 0x100aa38
call edi
add esp, 0x18
and dword [ebp - 0x460], 0xfffeffff
jmp 0x1012e37
mov edx, dword [ebp - 0x488]
push 0xa
push edx
push 0x100aef4
call edi
mov eax, dword [ebp - 0x47c]
push 0xa
push eax
push 0x100aec4
call edi
add esp, 0x18
test dword [ebp - 0x460], 0x10000
je 0x1012ea3
push 0xa
push 0xa
push 0x1009d48
call edi
add esp, 0xc
push 4
push 0
lea ecx, [ebp - 8]
push ecx
push 0x40
push 0xffffffffffffffff
push 0xffffffffffffffff
mov dword [ebp - 8], 0
call sub.ESENT.dll_JetGetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
mov eax, dword [ebp - 0x444]
mov ecx, dword [ebp - 0x448]
lea edx, [ebp - 0x10]
push edx
mov edx, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0x488]
push ecx
push 0
push edx
push eax
call fcn.01019b30
test eax, eax
je 0x1012fb3
xor esi, esi
cmp dword [ebp - 0x10], 0
je 0x1012f6f
mov esi, 0xfffffb4a
jmp 0x1013937
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x420], 1
test eax, eax
jne 0x1012ee4
push 0x100aa1c
push 0x1003200
call edi
add esp, 8
mov esi, 0xfffffc15
jmp 0x1013937
mov ebx, dword [sym.imp.msvcrt.dll__wfullpath]
push 0x104
push eax
lea ecx, [ebp - 0x220]
push ecx
call ebx
add esp, 0xc
test eax, eax
jne 0x1012f1b
mov edx, dword [ebp - 0x488]
push edx
push 0x100a9b8
call edi
add esp, 8
mov esi, 0xfffffc01
jmp 0x1013937
mov eax, dword [ebp - 0x47c]
test eax, eax
jne 0x1012f82
mov eax, dword [ebp - 0x488]
push eax
mov ecx, 0x20a
lea edi, [ebp - 0x220]
call fcn.0100f4e0
mov ecx, edi
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
mov dword [ebp - 0x47c], ecx
push 0xa
push 0x100a978
call edi
mov ecx, dword [ebp - 0x47c]
mov edx, dword [ebp - 0x488]
add esp, 8
push ecx
push edx
call fcn.010190b0
test eax, eax
je 0x1012fb3
xor esi, esi
push 0xa
push 0xa
push 0x1009d48
call edi
add esp, 0xc
jmp 0x10138a7
push 0x104
push eax
lea edx, [ebp - 0x220]
push edx
call ebx
add esp, 0xc
test eax, eax
jne 0x1012f4a
mov eax, dword [ebp - 0x47c]
push eax
push 0x100a908
call edi
add esp, 8
mov esi, 0xfffffc01
jmp 0x1013937
mov dword [ebp - 0x490], 1
jmp 0x1013937
push 0x101d3e8
xor ebx, ebx
lea ecx, [ebp - 0x488]
call fcn.0100f130
mov esi, eax
test esi, esi
jl 0x1013937
push 0xa
push 0x100a8d0
call edi
mov eax, dword [ebp - 0x488]
push 0xa
push eax
push 0x100aef4
call edi
add esp, 0x14
push 0x100a8bc
push ebx
push 0x22
push ebx
lea ecx, [ebp - 0x418]
push ecx
mov dword [ebp - 0x420], 1
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x23
push ebx
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x2d
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x36
push ebx
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 1
push 0x41
push ebx
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x10
push 5
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
lea edi, [ebp - 0x488]
lea esi, [ebp - 0x418]
call fcn.0100ff10
mov esi, eax
test esi, esi
jl 0x1013931
lea ecx, [ebp - 0x418]
push ecx
call dword [0x101cd34]
mov esi, eax
test esi, esi
jl 0x1013931
mov eax, dword [ebp - 0x418]
push 0x10015c0
push 0x10036cc
lea edx, [ebp - 0x41c]
push edx
push eax
call sub.ESENT.dll_JetBeginSessionW
mov esi, eax
test esi, esi
jl 0x10135d3
mov ecx, dword [ebp - 0x488]
mov edx, dword [ebp - 0x41c]
push ebx
push 0x100edb0
push ecx
push edx
call fcn.0100fbb0
mov esi, eax
test esi, esi
jl 0x10135d3
mov eax, dword [ebp - 0x41c]
mov ebx, dword [ebp - 0x418]
xor ecx, ecx
call fcn.0100ffb0
mov esi, eax
test esi, esi
jl 0x1013931
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
push 0xa
push 0x100a8a4
call edi
push 0xa
push 0xa
push 0x100a838
call edi
push 0xa
push 0x100ac1c
call edi
push 0xa
push 0x100ad90
call edi
push 0xa
push 0x100ad10
call edi
push 0xa
push 0x100aba8
call edi
push 0xa
push 0xa
push 0x100ac30
call edi
add esp, 0x40
jmp 0x10138a7
push 0x101d0e8
xor ebx, ebx
lea ecx, [ebp - 0x488]
call fcn.0100f130
mov esi, eax
test esi, esi
jl 0x1013937
push 0xa
push 0x100a7f4
call edi
mov eax, dword [ebp - 0x488]
push 0xa
push eax
push 0x100aef4
call edi
mov ecx, dword [ebp - 0x47c]
push 0xa
push ecx
push 0x100aec4
call edi
mov eax, dword [ebp - 0x468]
add esp, 0x20
test eax, eax
je 0x10131f5
push 0xa
push eax
push 0x100a7c4
call edi
add esp, 0xc
push 0x100a10c
push 0
push 0x22
push 0
lea edx, [ebp - 0x418]
push edx
mov dword [ebp - 0x420], 1
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
mov eax, dword [ebp - 0x47c]
push eax
push 0
push 1
push 0
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 0
push 0x23
push 0
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 0
push 0x2e
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 0
push 0x2d
push 0
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 0
push 0x36
push 0
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 0x2710
push 6
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 0x2710
push 7
push 0
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 1
push 0x41
push 0
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 0x80
push 5
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 0x2710
push 0xa
push 0
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
lea edi, [ebp - 0x488]
lea esi, [ebp - 0x418]
call fcn.0100ff10
mov esi, eax
test esi, esi
jl 0x1013931
lea edx, [ebp - 0x418]
push edx
call dword [0x101cd34]
mov esi, eax
test esi, esi
jl 0x1013931
mov ecx, dword [ebp - 0x418]
push 0x10015c0
push 0x10036cc
lea eax, [ebp - 0x41c]
push eax
push ecx
call sub.ESENT.dll_JetBeginSessionW
mov esi, eax
test esi, esi
jl 0x10135d3
mov ecx, dword [ebp - 0x460]
mov eax, 0x100
test ecx, 0x200
je 0x10133ce
mov eax, 0x108
test ecx, 0x400
je 0x10133db
or eax, 0x800
test cl, 1
je 0x10133e5
or eax, 0x8000
mov edx, dword [ebp - 0x46c]
mov ecx, dword [ebp - 0x478]
push eax
mov eax, dword [ebp - 0x468]
push 0x100edb0
push edx
mov edx, dword [ebp - 0x488]
push eax
mov eax, dword [ebp - 0x41c]
push ecx
push edx
push eax
call fcn.0100fb40
mov esi, eax
test esi, esi
jl 0x10135d3
mov eax, dword [ebp - 0x41c]
mov ebx, dword [ebp - 0x418]
xor ecx, ecx
call fcn.0100ffb0
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
mov esi, eax
test esi, esi
jl 0x1013937
jmp 0x10138a7
push 0x101d2e8
xor ebx, ebx
lea ecx, [ebp - 0x488]
call fcn.0100f130
mov esi, eax
test esi, esi
jl 0x1013937
push 0x100a10c
push ebx
push 0x22
push ebx
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x23
push ebx
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x100
push 0x12
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push ebx
push 0x2e
push ebx
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x2710
push 6
push ebx
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push ebx
push 0x2710
push 7
push ebx
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
lea edi, [ebp - 0x488]
lea esi, [ebp - 0x418]
mov dword [ebp - 0x420], 1
call fcn.0100ff10
mov esi, eax
test esi, esi
jl 0x1013931
lea ecx, [ebp - 0x418]
push ecx
call dword [0x101cd34]
mov esi, eax
test esi, esi
jl 0x1013931
mov eax, dword [ebp - 0x418]
push 0x10015c0
push 0x10036cc
lea edx, [ebp - 0x41c]
push edx
push eax
call sub.ESENT.dll_JetBeginSessionW
mov esi, eax
test esi, esi
jl 0x10135d3
mov ecx, dword [ebp - 0x47c]
mov edx, dword [ebp - 0x41c]
push ecx
push edx
call dword [0x101cd50]
mov eax, dword [ebp - 0x47c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x460]
mov edx, dword [ebp - 0x488]
mov ecx, edx
test al, 0x20
jne 0x10135ab
mov ecx, dword [ebp - 0x47c]
and eax, 8
add eax, eax
add eax, eax
push eax
lea eax, [ebp - 0x50c]
push eax
push 0x100edb0
push ecx
mov ecx, dword [ebp - 0x41c]
push edx
push ecx
call sub.ESENT.dll_JetCompactW
mov esi, eax
test esi, esi
jge 0x10135f1
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
mov eax, dword [ebp - 0x41c]
mov ebx, dword [ebp - 0x418]
mov ecx, esi
call fcn.0100ffb0
jmp 0x1013937
mov eax, dword [ebp - 0x41c]
mov ebx, dword [ebp - 0x418]
xor ecx, ecx
call fcn.0100ffb0
mov esi, eax
test esi, esi
jl 0x1013931
lea ebx, [ebp - 0x488]
call fcn.010119d0
mov esi, eax
test esi, esi
jl 0x1013931
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
jmp 0x10138a7
cmp eax, 5
jne case.0x10136c7.11
push 0
push 0
push 0x2d
push 0
lea edx, [ebp - 0x418]
push edx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 0
push 0x36
push 0
lea eax, [ebp - 0x418]
push eax
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
push 0
push 1
push 0x41
push 0
lea ecx, [ebp - 0x418]
push ecx
call sub.ESENT.dll_JetSetSystemParameterW
mov esi, eax
test esi, esi
jl 0x1013937
cmp dword [ebp - 0x488], 0
jne 0x10136a4
push 0x100a7a0
jmp 0x101230c
push 0xa
push 0x100a760
call edi
mov eax, dword [ebp - 0x4f4]
dec eax
add esp, 8
cmp eax, 0x12
ja case.0x10136c7.11
movzx edx, byte [eax + 0x1013b28]
jmp dword [edx*4 + 0x1013b00]
mov ecx, dword [ebp - 0x488]
lea eax, [ebp - 0x14]
push ecx
mov esi, eax
mov dword [ebp - 0x470], eax
call fcn.01011710
jmp case.0x10136c7.11
mov edx, dword [ebp - 0x488]
push 0xa
push edx
push 0x100a734
call edi
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [ebp - 0x4d0]
mov edx, dword [ebp - 0x4fc]
push 0xa
push eax
push ecx
push edx
push 0x100a6fc
call edi
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x4c8]
push 0xa
push eax
push ecx
push edx
push 0x100a6b8
call edi
add esp, 0x34
jmp case.0x10136c7.11
mov eax, dword [ebp - 0x488]
push 0xa
push eax
push 0x100a67c
jmp 0x101387b
push 0x101d168
xor ebx, ebx
lea ecx, [ebp - 0x488]
call fcn.0100f130
mov esi, eax
test esi, esi
jl 0x1013937
mov ecx, dword [ebp - 0x488]
push 0xa
push ecx
push 0x100a600
jmp 0x101387b
or dword [ebp - 0x460], 0x4000000
push 0x101d168
xor ebx, ebx
lea ecx, [ebp - 0x488]
call fcn.0100f130
mov esi, eax
test esi, esi
jl 0x1013937
mov edx, dword [ebp - 0x488]
push 0xa
push edx
push 0x100a5d0
call edi
add esp, 0xc
cmp dword [ebp - 0x4d8], ebx
jne case.0x10136c7.11
mov eax, dword [ebp - 0x4d0]
push 0xa
push eax
push 0x100a5a4
jmp 0x101387b
push 0x101d168
xor ebx, ebx
lea ecx, [ebp - 0x488]
call fcn.0100f130
mov esi, eax
test esi, esi
jl 0x1013937
mov ecx, dword [ebp - 0x488]
push 0xa
push ecx
push 0x100a5d0
call edi
mov edx, dword [ebp - 0x4cc]
mov eax, dword [ebp - 0x4d0]
push 0xa
push edx
push eax
push 0x100a574
call edi
add esp, 0x1c
jmp case.0x10136c7.11
or dword [ebp - 0x460], 0x4000000
push 0x101d168
xor ebx, ebx
lea ecx, [ebp - 0x488]
call fcn.0100f130
mov esi, eax
test esi, esi
jl 0x1013937
mov ecx, dword [ebp - 0x488]
push 0xa
push ecx
jmp 0x1013876
push 0x101d168
xor ebx, ebx
lea ecx, [ebp - 0x488]
call fcn.0100f130
mov esi, eax
test esi, esi
jl 0x1013937
mov edx, dword [ebp - 0x488]
push 0xa
push edx
push 0x100a544
call edi
add esp, 0xc
lea eax, [ebp - 0x488]
lea ebx, [ebp - 0x504]
call fcn.01010890
mov esi, eax
test esi, esi
jl 0x1013937
push 0xa
push 0x1001ba0
call edi
add esp, 8
mov eax, dword [ebp - 0x48c]
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 8]
push edx
push eax
call fcn.0100ed80
mov ebx, dword [ebp - 0x428]
test ebx, ebx
je 0x1013a17
push 0x400
lea edx, [ebp - 0x414]
push edx
lea eax, [ebp - 0x428]
push eax
xor ecx, ecx
push 0x46
mov word [ebp - 0x414], cx
mov ecx, dword [ebp - 0x418]
push 0xffffffffffffffff
push ecx
mov dword [ebp - 0x428], ebx
call sub.ESENT.dll_JetGetSystemParameterW
cmp dword [ebp - 0x420], 0
je 0x1013912
push 0xa
push 0xa
push 0x1009d48
call edi
add esp, 0xc
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
push edx
push eax
lea ecx, [ebp - 0x414]
push ecx
push ebx
push 0x1002698
call edi
add esp, 0x14
jmp 0x1013a29
mov edi, dword [sym.imp.msvcrt.dll_wprintf]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x48c]
xor edx, edx
mov ecx, 0x3e8
div ecx
cmp dword [ebp - 0x420], 0
mov ebx, edx
mov dword [ebp - 0x428], eax
je 0x101396b
push 0xa
push 0xa
push 0x1009d48
call edi
add esp, 0xc
cmp dword [ebp - 0x490], 0
je 0x101398e
mov edx, dword [ebp - 0x428]
push ebx
push edx
push 0x10025a0
call edi
add esp, 0xc
or esi, 0xffffffff
jmp 0x1013a29
push 0x400
lea ecx, [ebp - 0x414]
push ecx
lea edx, [ebp - 0x428]
push edx
xor eax, eax
push 0x46
mov word [ebp - 0x414], ax
mov eax, dword [ebp - 0x418]
push 0xffffffffffffffff
push eax
mov dword [ebp - 0x428], esi
call sub.ESENT.dll_JetGetSystemParameterW
cmp dword [ebp - 0x464], 2
jne 0x10139fa
cmp esi, 0xfffffdba
je 0x10139ec
cmp esi, 0xfffffdb6
je 0x10139ec
cmp esi, 0xfffffdf0
jne 0x10139fa
push 0xa
push 0xa
push 0x100a460
jmp 0x10139f5
push 0xa
push 0xa
push 0x100a388
call edi
add esp, 0xc
mov ecx, dword [ebp - 0x48c]
mov edx, dword [ebp - 0x420]
push ecx
push edx
lea eax, [ebp - 0x414]
push eax
push esi
call fcn.01010000
jmp 0x1013a29
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
push edx
push eax
push 0x1002720
call edi
add esp, 0xc
push 0xa
push 0xa
push 0x1009d48
call edi
mov ecx, dword [ebp - 4]
add esp, 0xc
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.010140f3
mov esp, ebp
pop ebp
ret