Function at 0x1000c9b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xc8
mov eax, dword [0x10010098]
mov word [esp + 0x1c], ax
mov al, byte [0x10010006]
mov byte [esp + 0xf], al
mov al, byte [0x10010030]
mov byte [esp + 0x24], al
mov byte [esp + 0xe], 0xe6
mov al, byte [0x1001002e]
mov byte [esp + 0x26], al
movzx eax, al
mov dword [esp + 0x84], eax
movsx eax, word [0x10010068]
cdq
mov dword [esp + 0x60], eax
movsx eax, byte [0x10010016]
push esi
push edi
mov edi, edx
mov dword [esp + 0x34], 0xd9
cdq
mov dword [esp + 0x5c], eax
mov eax, dword [0x1001006c]
mov dword [esp + 0x60], edx
cdq
mov dword [esp + 0x74], eax
mov al, byte [0x1001002e]
mov ecx, dword [0x10010080]
mov byte [esp + 0x2b], al
mov al, byte [0x1001006c]
mov byte [esp + 0x1f], al
mov byte [esp + 0x4f], al
movzx eax, cx
mov dword [esp + 0x30], eax
movzx eax, word [0x10010004]
mov dword [esp + 0x3c], edx
cdq
mov dword [esp + 0x64], eax
mov eax, 0xc8
mov word [esp + 0x20], ax
mov eax, 0xffffe6d5
movzx esi, word [0x1001008c]
mov word [esp + 0x58], ax
mov dword [esp + 0x40], 0xad
movzx ecx, word [0x10010014]
mov byte [esp + 0x2f], cl
mov byte [esp + 0x2f], 1
mov eax, dword [0x10010028]
mov byte [esp + 0x2f], 0x11
mov eax, dword [0x1001005c]
mov al, byte [section..data]
mov al, byte [0x10010007]
mov eax, dword [0x100101ec]
mov dword [esp + 0x18], eax
movsx eax, si
mov byte [esp + 0x2d], 0x4d
mov dword [esp + 0x70], edx
cmp eax, dword [0x1001006c]
jne 0x1000cadc
mov eax, dword [0x10010030]
add eax, 0x3da5a05b
mov dword [esp + 0x74], eax
mov eax, dword [0x10010034]
adc eax, 0x37a7d
mov dword [esp + 0x3c], eax
jmp 0x1000cb08
mov eax, dword [0x10010040]
or eax, dword [0x10010044]
je 0x1000cb08
mov ax, word [0x10010070]
mov ecx, 0x1c00
xor ax, cx
mov word [0x1001009c], ax
mov eax, 0x1a
mov word [0x10010084], ax
mov eax, dword [esp + 0x18]
sub esp, 0x38
add eax, 0x358
mov dword [esp + 0xb0], eax
mov al, byte [0x10010017]
call fcn.10001410
add esp, 0x38
mov dword [0x1001001c], eax
cmp dword [0x1001001c], 0
jge 0x1000cb61
mov al, byte [esp + 0x1f]
mov ecx, dword [esp + 0x68]
sub al, 0x2f
mov byte [0x1001001b], al
mov eax, 0x29
nop word [eax + eax]
add ecx, 1
adc edi, 0
sub eax, 1
jne 0x1000cb50
mov dword [esp + 0x68], ecx
jmp 0x1000cb66
mov al, byte [0x1001002e]
mov eax, dword [esp + 0x18]
add eax, 0x30a
mov dword [esp + 0x6c], eax
movsx eax, word [esp + 0x20]
movsx ecx, word [0x10010038]
and eax, 0xffffff26
add ecx, eax
mov eax, dword [esp + 0x18]
neg ecx
sbb ecx, ecx
add eax, 0x1e2
inc ecx
mov dword [esp + 0x18], eax
movzx esi, cx
xor edx, edx
movzx ecx, word [0x1001008c]
movsx eax, word [esp + 0x20]
cmp ecx, eax
mov dword [esp + 0x38], esi
mov ax, word [0x1001008c]
mov cx, 0x3a
setle dl
cmp cx, ax
sbb eax, eax
inc eax
cmp edx, eax
jb 0x1000cbe8
cmp byte [esp + 0x2b], 0
mov ecx, dword [0x100101ec]
mov byte [esp + 0x2d], cl
je 0x1000cc25
movsx ax, byte [0x10010016]
movzx eax, ax
mov dword [esp + 0x38], eax
jmp 0x1000cc25
mov ecx, dword [0x10010078]
mov eax, dword [0x1001007c]
or ecx, eax
jne 0x1000cbfc
lea edx, [ecx + 1]
jmp 0x1000cbfe
xor edx, edx
movzx eax, byte [esp + 0x2b]
xor ecx, ecx
cmp word [0x10010088], cx
sete cl
imul eax, edx
or ecx, dword [esp + 0x74]
sub eax, ecx
mov ecx, dword [0x100101ec]
not eax
mov dword [0x10010098], eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x20]
dec byte [esp + 0x1f]
add eax, 0x32c0
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x50], eax
mov al, byte [0x10010006]
mov byte [0x10010003], al
mov eax, dword [esp + 0x20]
add eax, 0x1595
mov dword [esp + 0x40], eax
mov byte [0x10010003], 0x2f
mov eax, dword [esp + 0x20]
add eax, 0x92c2
mov dword [esp + 0x20], eax
movsx eax, byte [0x10010016]
cdq
sub ecx, eax
mov eax, dword [esp + 0x70]
sbb eax, edx
or ecx, eax
jne 0x1000cc86
mov ecx, 1
xor esi, esi
jmp 0x1000cc97
xorps xmm0, xmm0
movlpd qword [esp + 0x40], xmm0
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
movzx eax, word [0x1001003c]
push esi
cdq
push ecx
push edx
push eax
call fcn.1000e090
mov dword [0x10010090], eax
xor eax, eax
cmp word [0x1001004c], ax
mov dword [0x10010094], edx
movsx ecx, byte [0x10010007]
sete al
movsx edx, byte [esp + 0x2c]
and ecx, eax
mov ax, word [esp + 0x24]
xor ecx, 1
xor ax, dx
mov dword [esp + 0x84], edx
sub cx, ax
mov word [0x10010018], cx
mov ecx, dword [esp + 0x30]
movzx eax, cx
mov dword [esp + 0x70], eax
lea ecx, [eax - 7]
mov eax, 0x1b3
nop dword [eax]
mov si, word [0x1001003c]
mov dword [0x1001005c], ecx
sub eax, 1
jne 0x1000cd00
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
sub ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x20]
or edx, dword [esp + 0x50]
imul ecx, eax
xor edx, 0xb23b
mov eax, dword [esp + 0x18]
xor eax, dword [esp + 0x18]
add edx, ecx
mov ecx, dword [esp + 0x6c]
xor ecx, eax
mov eax, dword [esp + 0x6c]
xor eax, ecx
mov dword [0x10010010], 0x2bc296af
sub edx, eax
mov ecx, 0xd9
mov eax, dword [0x100101ec]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x18], eax
mov ax, word [esp + 0x24]
cmp ax, cx
jne 0x1000cd7c
cmp byte [esp + 0x2c], 0
jne 0x1000cd7c
xor edx, edx
jmp 0x1000cd81
mov edx, 1
cmp byte [0x1001002c], 0
jne 0x1000cdbd
cmp byte [0x10010017], 0
jne 0x1000cd9c
mov ecx, 1
xor eax, eax
jmp 0x1000cdad
xorps xmm0, xmm0
movlpd qword [esp + 0x40], xmm0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
cmp eax, edi
jl 0x1000cdbd
jg 0x1000cdb9
cmp ecx, dword [esp + 0x68]
jbe 0x1000cdbd
xor eax, eax
jmp 0x1000cdc2
mov eax, 1
cmp edx, eax
ja 0x1000cde7
mov cl, byte [0x10010006]
mov al, cl
add al, 0x66
or cl, al
movzx eax, word [0x100100a4]
shr eax, 5
mov byte [0x10010006], cl
mov dword [0x10010024], eax
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x5c]
add eax, 9
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x40], eax
mov eax, 0x33d
nop
add edx, 1
adc ecx, 0
dec eax
test eax, eax
jg 0x1000ce00
mov eax, dword [esp + 0x18]
add eax, 3
mov dword [esp + 0x60], ecx
mov dword [esp + 0x40], eax
movsx ecx, byte [0x10010002]
movzx eax, word [0x10010004]
mov dword [esp + 0x5c], edx
cmp ecx, eax
jg 0x1000ce81
cmp word [0x1001008c], 0
jne 0x1000ce94
mov eax, dword [0x10010008]
or eax, dword [0x1001000c]
je 0x1000ce50
mov byte [0x10010001], 0xe7
jmp 0x1000ce94
mov eax, 0xd9
cmp word [esp + 0x30], ax
jbe 0x1000ce94
cmp dword [0x10010080], 0
mov eax, 0xffffffa9
jne 0x1000ce71
movsx eax, word [0x1001004c]
mov byte [esp + 0x17], al
mov al, byte [esp + 0x16]
sub byte [0x1001002d], al
jmp 0x1000ce94
shr si, 2
mov eax, 0x1b54
sub si, ax
movzx ecx, si
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x18]
add eax, 0x1699
mov dword [esp + 0x40], eax
movzx eax, word [0x1003a6f0]
mov dword [0x10010058], 0x1c2f36
mov dword [esp + 0x78], eax
mov eax, dword [0x100101ec]
mov dword [esp + 0x88], 0x226
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
add eax, 0x2913
cmp word [esp + 0x38], 0
mov dword [esp + 0x50], eax
je 0x1000cef0
imul eax, dword [0x10010010], 0x40430cb4
mov dword [0x10010064], eax
jmp 0x1000cf4c
cmp byte [0x10010003], 0
je 0x1000cf06
mov al, byte [esp + 0x16]
sub al, 0x2f
mov byte [0x10010002], al
jmp 0x1000cf4c
cmp byte [0x10010017], 0
je 0x1000cf25
mov eax, 0x2d
sub eax, edx
add ax, word [0x10010084]
mov word [0x10010084], ax
jmp 0x1000cf4c
cmp byte [0x1001002e], 0
je 0x1000cf4c
movzx eax, byte [esp + 0x2d]
mov dword [0x10010010], eax
movsx eax, word [0x1001009c]
cdq
sub dword [0x10010008], eax
sbb dword [0x1001000c], edx
mov eax, dword [esp + 0x18]
add eax, 0x65
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x18]
add eax, 0x3618
mov dword [esp + 0x40], eax
mov esi, dword [0x10010090]
mov edi, dword [0x10010094]
movzx eax, byte [esp + 0x2e]
cdq
sub esi, eax
mov eax, dword [0x10010090]
mov ecx, dword [0x10010094]
sbb edi, edx
sub esi, eax
mov dword [0x10010090], esi
sbb edi, ecx
mov dword [0x10010094], edi
mov eax, dword [esp + 0x50]
movq xmm0, qword [str.access_denied]
xor eax, 0x2807
mov dword [esp + 0x40], eax
mov eax, dword [0x1000f20c]
mov dword [esp + 0x98], eax
mov ax, word [0x1000f210]
mov word [esp + 0x9c], ax
lea eax, [esp + 0x90]
push eax
movq qword [esp + 0x94], xmm0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov byte [0x1001002d], al
xor edx, edx
mov eax, dword [0x100101ec]
mov dword [esp + 0x20], eax
movsx ax, byte [0x1001001b]
cmp ax, word [0x1001004c]
setl dl
xor eax, eax
cmp byte [0x1001001b], 0x2c
setl al
cmp edx, eax
jb 0x1000d024
mov eax, dword [0x1001006c]
mov esi, dword [esp + 0x78]
add eax, eax
mov dword [0x1001006c], eax
mov al, byte [section..data]
jmp 0x1000d04b
mov ecx, dword [0x10010090]
mov eax, dword [0x10010094]
mov eax, 0x70f8
add cx, ax
mov ax, word [esp + 0x58]
sub ax, word [0x10010020]
movzx esi, cx
mov word [esp + 0x58], ax
mov eax, dword [esp + 0x20]
add eax, 0x4c72
mov dword [esp + 0x38], eax
cmp byte [esp + 0x16], 0
je 0x1000d1d6
sub esp, 8
call fcn.100012e0
cwde
add esp, 8
mov dword [esp + 0x18], eax
mov al, byte [0x10010007]
movzx eax, byte [0x10010003]
cmp si, ax
jg 0x1000d08d
mov edx, 1
xor esi, esi
jmp 0x1000d09e
xorps xmm0, xmm0
movlpd qword [esp + 0x50], xmm0
mov esi, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
mov ecx, dword [0x10010078]
mov eax, dword [0x1001007c]
or ecx, edx
or eax, esi
ja 0x1000d10f
jb 0x1000d0b5
test ecx, ecx
jne 0x1000d10f
movzx eax, byte [esp + 0x16]
xor edx, edx
cmp ax, word [0x10010004]
mov al, byte [esp + 0x16]
mov esi, dword [esp + 0x34]
setne dl
xor ecx, ecx
mov cl, 1
cmp edx, ecx
jne 0x1000d0f9
imul eax, dword [0x1001006c], 0xffff0056
mov dword [0x10010080], eax
movsx eax, si
cdq
mov dword [0x100780b8], eax
mov dword [0x100780bc], edx
jmp 0x1000d1f6
movsx eax, word [0x10010068]
add eax, 0xe99b
cdq
mov dword [esp + 0x64], eax
jmp 0x1000d1f6
movsx eax, byte [0x10010006]
cdq
cmp dword [0x10010054], edx
jb 0x1000d183
ja 0x1000d129
cmp dword [0x10010050], eax
jb 0x1000d183
movzx eax, word [esp + 0x24]
mov ecx, dword [0x1001005c]
sub ecx, eax
movsx eax, word [0x100100a0]
cdq
xor edx, dword [esp + 0x3c]
xor eax, dword [esp + 0x74]
not edx
push 0
push ecx
not eax
push edx
push eax
call fcn.1000e090
or eax, edx
jne 0x1000d16f
mov al, byte [esp + 0x5c]
mov cl, 1
not al
sub al, 0x57
not al
sub al, cl
mov byte [esp + 0x17], al
jmp 0x1000d1f2
mov al, byte [esp + 0x5c]
xor cl, cl
not al
sub al, 0x57
not al
sub al, cl
mov byte [esp + 0x17], al
jmp 0x1000d1f2
mov ecx, dword [0x10010058]
movsx eax, word [0x1001009c]
not ecx
cmp eax, ecx
ja 0x1000d1a8
mov esi, dword [esp + 0x34]
movzx eax, si
shl eax, 8
mov word [0x10010018], ax
jmp 0x1000d1f6
mov eax, dword [0x10010008]
or eax, dword [0x1001000c]
je 0x1000d1f2
mov eax, 8
mov dword [0x10010030], 0xaad2aa6
mov word [0x10010060], ax
mov dword [0x10010034], 0
jmp 0x1000d1f2
movsx eax, byte [0x10010038]
imul eax, eax, 0x1a
mov byte [esp + 0x17], al
imul eax, dword [0x1001005c], 0xdc80
mov dword [esp + 0x18], eax
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x20]
add eax, 0xbe
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x20]
add eax, 0xf6
mov dword [esp + 0x50], eax
movzx eax, byte [esp + 0x1f]
mov cl, al
mov dword [esp + 0x78], eax
add cl, byte [esp + 0x70]
mov al, byte [esp + 0x18]
add al, byte [0x1001009c]
movzx ecx, cl
movzx eax, al
imul ecx, eax
movsx eax, word [0x10010060]
mov byte [0x10010003], cl
xor ecx, ecx
cmp dword [0x10010098], ecx
mov edx, dword [0x10010078]
sete cl
sub esp, 8
movsx ecx, cx
imul ecx, eax
mov eax, dword [0x1001007c]
movzx ecx, cx
add dx, cx
movzx ecx, byte [esp + 0x36]
add cx, word [0x1001005c]
add cx, 0x55
movzx eax, dx
cwde
movsx ecx, cx
imul ecx, eax
mov word [esp + 0x28], cx
mov ecx, 0x149f7
mov eax, dword [esp + 0x40]
or eax, 0xfe3b
sub ecx, eax
mov eax, dword [esp + 0x40]
sub ecx, eax
mov eax, dword [esp + 0x58]
add eax, ecx
mov dword [esp + 0x58], eax
mov ax, word [0x100100a0]
call fcn.10001000
movzx eax, al
add esp, 8
mov dword [0x10010064], eax
test eax, eax
je 0x1000d2cd
mov ecx, dword [esp + 0x30]
movzx eax, cx
xor al, 0x5b
mov byte [0x10010006], al
jmp 0x1000d335
mov eax, dword [esp + 0x78]
cmp dword [0x1001001c], eax
jne 0x1000d2ec
movsx eax, byte [0x10010007]
sub eax, 0xc863687
mov dword [0x1001005c], eax
jmp 0x1000d335
mov ax, word [0x10010084]
movsx eax, word [0x10010014]
movzx edx, byte [esp + 0x16]
xor edx, eax
xor eax, eax
cmp byte [esp + 0x4f], 1
sete al
sub edx, eax
movzx eax, word [0x10010084]
movsx ecx, byte [0x10010006]
add ecx, eax
movsx eax, si
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [esp + 0x84]
add eax, ecx
imul eax, edx
mov dword [0x10010080], eax
mov eax, dword [0x100101ec]
mov dword [esp + 0x30], eax
mov al, byte [0x1001002e]
mov eax, dword [esp + 0x30]
add eax, 0x1aa
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x8c]
cmp dword [0x10010028], eax
jne 0x1000d36a
mov ax, word [0x10010084]
jmp 0x1000d397
movzx eax, byte [esp + 0x16]
push dword [0x10010054]
cdq
push dword [0x10010050]
push edx
push eax
call fcn.1000e090
or eax, edx
je 0x1000d397
mov dword [esp + 0x64], 1
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x30]
add eax, dword [esp + 0x6c]
mov dword [esp + 0x3c], eax
mov eax, dword [0x1001005c]
mov cx, word [0x1001009c]
and ax, cx
add cx, ax
mov eax, dword [esp + 0x30]
add eax, dword [esp + 0x88]
mov word [0x1001009c], cx
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x88]
or eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
or ecx, eax
mov eax, dword [esp + 0x3c]
add eax, dword [esp + 0x84]
cmp eax, ecx
je 0x1000d6ae
movzx eax, byte [0x1001002d]
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [esp + 0x40], eax
cmp edi, esi
jne 0x1000d4fa
mov eax, dword [esp + 0x34]
xor edx, edx
movzx ecx, word [0x1001003c]
cwde
cmp eax, ecx
mov ecx, dword [esp + 0x34]
setl dl
xor eax, eax
cmp cx, 0x3e
setl al
cmp edx, eax
jne 0x1000d475
movups xmm0, xmmword [str.UnhandledException]
mov eax, dword [0x1000f234]
mov dword [esp + 0xc0], eax
mov ax, word [0x1000f238]
movups xmmword [esp + 0xa0], xmm0
mov word [esp + 0xc4], ax
lea eax, [esp + 0xa0]
movups xmm0, xmmword [0x1000f224]
push eax
movups xmmword [esp + 0xb4], xmm0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
sub esp, 8
call fcn.10001000
movzx eax, al
add esp, 8
mov word [0x10010088], ax
test ax, ax
je 0x1000d4b7
mov eax, dword [0x10010090]
sub esp, 8
mov ecx, dword [0x10010094]
call fcn.10001000
add esp, 8
lea eax, [edi + esi]
push eax
push str.kaD15EGeo
push str.htW06YihNu3Jq8
jmp 0x1000d6a6
mov edx, dword [0x10010058]
mov ecx, 0x5c64
movsx ax, byte [0x10010007]
add ax, word [esp + 0x40]
add ax, cx
xor ecx, ecx
movzx eax, ax
cmp edx, 0xffffff52
cmove ecx, eax
lea eax, [edi + esi]
push eax
push str.kaD15EGeo
mov word [0x10010038], cx
push str.htW06YihNu3Jq8
jmp 0x1000d6a6
mov ax, word [0x10010048]
mov ecx, 0x7ed7
mov edi, dword [esp + 0x60]
sub ax, cx
mov word [esp + 0x24], ax
mov esi, 0x231
mov eax, dword [0x100101ec]
mov dword [esp + 0x30], eax
nop
cmp byte [esp + 0x17], 0
je 0x1000d53a
imul eax, dword [esp + 0x18], 0x2e
mov word [esp + 0x24], ax
mov byte [0x10010002], 0x9f
jmp 0x1000d569
mov eax, dword [esp + 0x5c]
or eax, edi
jne 0x1000d547
lea edx, [eax + 1]
jmp 0x1000d549
xor edx, edx
mov ax, word [0x10010018]
mov cx, word [0x10010070]
add cx, ax
not cx
add cx, dx
not cx
mov word [0x10010014], cx
sub esi, 1
jne 0x1000d520
mov eax, dword [esp + 0x30]
xor edx, edx
add eax, 0x337
mov dword [esp + 0x3c], eax
movzx ecx, byte [esp + 0x16]
movsx eax, byte [esp + 0x17]
cmp eax, ecx
mov al, byte [esp + 0x17]
setge dl
xor ecx, ecx
cmp al, 0x5a
setge cl
cmp edx, ecx
ja 0x1000d5d2
mov ax, word [esp + 0x24]
mov ecx, 0x62
cmp cx, ax
ja 0x1000d5d7
mov eax, dword [esp + 0x5c]
or eax, dword [esp + 0x60]
je 0x1000d5d7
movsx ecx, byte [0x10010002]
movsx eax, word [0x1001004c]
sub ecx, eax
mov al, byte [0x10010002]
add al, cl
mov byte [0x10010002], al
jmp 0x1000d5d7
mov al, byte [0x10010007]
mov eax, dword [esp + 0x30]
add eax, 0xb
mov edi, dword [ebp + 8]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x64]
add eax, 0x77b
movzx edx, ax
mov al, byte [0x100101ec]
mov byte [esp + 0x16], al
mov eax, dword [esp + 0x30]
add eax, 0x33f
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x38]
sub ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
and eax, ecx
cmp dword [esp + 0x38], eax
je 0x1000d6ae
movzx ecx, byte [0x1001002e]
mov eax, dword [0x10010058]
sub ecx, eax
movsx eax, word [0x10010068]
movsx esi, dx
not esi
and esi, eax
movsx eax, word [0x10010048]
not eax
xor esi, ecx
cdq
xor ecx, ecx
and eax, 0x579d8e44
and edx, 0x883c1
sub esi, eax
movzx eax, byte [0x10010017]
sbb ecx, edx
cdq
add eax, esi
adc edx, ecx
or eax, edx
jne 0x1000d66f
mov eax, 1
jmp 0x1000d671
xor eax, eax
movsx ecx, byte [0x100100a4]
mov word [esp + 0x20], ax
mov eax, dword [esp + 0x68]
add eax, 0xffffff80
mov dword [esp + 0x18], eax
movsx eax, byte [0x10010006]
imul ecx, eax
sub edi, dword [ebp + 0xc]
push edi
push str.pGMZRo1iMkSAPaAN
push str.aUKh
mov byte [0x10010006], cl
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, dword [esp + 0x18]
mov cl, byte [0x1001002e]
movzx eax, al
imul eax, eax, 0x56
pop edi
pop esi
sub cl, al
mov byte [0x1001002e], cl
mov eax, dword [esp + 0x48]
mov esp, ebp
pop ebp
ret 8