Function at 0x1002e90b
Capabilities:
Create directory

Disassembly:
adc bh, bh
jne 0x1002a7e9
add eax, dword [eax]
add byte [eax + 0x4c], ch
test eax, 0x7c681002
test eax, 0x16a1002
add byte [eax], al
push ebp
mov ebp, esp
sub esp, 0x2e4
push ebx
push esi
push edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x144], eax
jmp 0x1002e49a
mov eax, dword [ebp - 0x144]
add eax, 0x29
mov dword [ebp - 0x144], eax
mov eax, dword [ebp + 8]
add eax, 0x59b
cmp dword [ebp - 0x144], eax
ja 0x1002f2c6
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x35c5
ja 0x1002e655
cmp dword [ebp - 0x274], 0x35c5
je 0x1002f08f
cmp dword [ebp - 0x274], 0x342b
ja 0x1002e5a9
cmp dword [ebp - 0x274], 0x342b
je 0x1002f066
cmp dword [ebp - 0x274], 0x2414
ja 0x1002e55e
cmp dword [ebp - 0x274], 0x2414
je 0x1002f02a
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x278], eax
sub dword [ebp - 0x278], 0x2370
je 0x1002f275
sub dword [ebp - 0x278], 0x29
je 0x1002f225
sub dword [ebp - 0x278], 0x29
je 0x1002f254
sub dword [ebp - 0x278], 0x29
je 0x1002e906
jmp 0x1002f2c1
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x27c], eax
sub dword [ebp - 0x27c], 0x243d
je 0x1002ec50
sub dword [ebp - 0x27c], 0x29
je 0x1002f03d
sub dword [ebp - 0x27c], 0xf73
je 0x1002eff7
sub dword [ebp - 0x27c], 0x29
je 0x1002f002
jmp 0x1002f2c1
cmp dword [ebp - 0x274], 0x34f8
ja 0x1002e60d
cmp dword [ebp - 0x274], 0x34f8
je 0x1002e8f4
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x280], eax
sub dword [ebp - 0x280], 0x3454
je 0x1002f130
sub dword [ebp - 0x280], 0x29
je 0x1002e8b1
sub dword [ebp - 0x280], 0x29
je 0x1002e8df
sub dword [ebp - 0x280], 0x29
je 0x1002f175
jmp 0x1002f2c1
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x284], eax
sub dword [ebp - 0x284], 0x3521
je 0x1002f015
sub dword [ebp - 0x284], 0x29
je 0x1002f1ca
sub dword [ebp - 0x284], 0x29
je 0x1002ef4e
sub dword [ebp - 0x284], 0x29
je 0x1002f207
jmp 0x1002f2c1
cmp dword [ebp - 0x274], 0x4b44
ja 0x1002e721
cmp dword [ebp - 0x274], 0x4b44
je 0x1002f15a
cmp dword [ebp - 0x274], 0x3692
ja 0x1002e6d9
cmp dword [ebp - 0x274], 0x3692
je 0x1002ebe7
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x288], eax
sub dword [ebp - 0x288], 0x35ee
je 0x1002f18f
sub dword [ebp - 0x288], 0x29
je 0x1002f1ea
sub dword [ebp - 0x288], 0x29
je 0x1002f07e
sub dword [ebp - 0x288], 0x29
je 0x1002e7c0
jmp 0x1002f2c1
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x28c], eax
sub dword [ebp - 0x28c], 0x36bb
je 0x1002ef9e
sub dword [ebp - 0x28c], 0x29
je 0x1002f1af
sub dword [ebp - 0x28c], 0x29
je 0x1002e94c
sub dword [ebp - 0x28c], 0x29
je 0x1002f099
jmp 0x1002f2c1
cmp dword [ebp - 0x274], 0x4c11
ja 0x1002e785
cmp dword [ebp - 0x274], 0x4c11
je 0x1002e8d7
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x290], eax
sub dword [ebp - 0x290], 0x4b6d
je 0x1002e927
sub dword [ebp - 0x290], 0x29
je 0x1002f245
sub dword [ebp - 0x290], 0x29
je 0x1002e934
sub dword [ebp - 0x290], 0x29
je 0x1002efed
jmp 0x1002f2c1
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x294], eax
sub dword [ebp - 0x294], 0x4c3a
je 0x1002e8c5
sub dword [ebp - 0x294], 0x29
je 0x1002ebdb
sub dword [ebp - 0x294], 0x29
je 0x1002ef70
jmp 0x1002f2c1
ret
and dword [ebp - 4], 0
mov eax, dword [0x100573a4]
cmp eax, dword [0x100573b0]
jmp 0x1002f2c1
push dword [ebx]
mov dword [ebp - 4], esi
call fcn.100351c7
mov dword [edi + 4], eax
jmp 0x1002f2c1
lea edx, [edi + 0xc]
jmp 0x1002f2c1
je 0x1002f245
test byte [eax + 0x3c], 2
je 0x1002f1ca
jmp 0x1002f2c1
push dword [eax + 0x30]
call fcn.1002a646
mov eax, dword [0x100573bc]
jmp 0x1002f2c1
push 0x6c
pop eax
mov word [ebp - 0x12], ax
inc ebp
out dx, al
push 0x6c
pop eax
mov word [ebp - 0x10], ax
push 0x33
pop eax
mov word [ebp - 0xe], ax
push 0x32
pop eax
mov word [ebp - 0xc], ax
jmp 0x1002f2c1
mov dword [edi], esi
mov dword [edi + 4], esi
mov dword [edi + 8], esi
jmp 0x1002f2c1
mov ecx, edi
push eax
call fcn.1002b0f7
test al, al
je 0x1002f02a
push dword [ebp + 8]
jmp 0x1002f2c1
mov dword [ebp - 0x144], 0x370d
sti
push edx
and cl, byte [edx - 0x307eb640]
dec ebp
sub cl, byte [edi - 0x63dea0bd]
mov byte [edx + 0x5c], ch
mov eax, 0x10736c9c
call 0xfd89666
mov ebx, ecx
mov eax, dword [0x1076c500]
cmp eax, 0x1076c500
je 0x1002e9a8
test byte [eax + 0x3c], 2
je 0x1002a7e8
cmp byte [eax + 0x39], 4
jb 0x1002e9a8
push ebx
push 0x102a9450
push 0x22
push dword [eax + 0x34]
push dword [eax + 0x30]
call 0xfd8eb9d
mov eax, dword [0x1076c500]
test byte [eax + 0x3c], 2
je 0x1002a7e8
cmp byte [eax + 0x39], 4
jb 0x1002a7e8
mov cl, 1
mov dword [ebp - 0x28], 0x102a96d0
mov byte [ebp - 0x24], cl
and dword [ebp - 4], 0
test byte [eax + 0x3c], 2
je 0x1002e9dd
cmp byte [eax + 0x39], 4
jb 0x1002e9dd
call 0xfd8ebc8
mov edi, dword [ebp + 0xc]
mov eax, dword [edi]
lea ecx, [ebp - 0x18]
push ecx
push edi
call dword [eax + 0xc]
and dword [ebp - 0x10], 0
lea eax, [ebp - 0x10]
push eax
push 0x100878cc
push 8
lea ecx, [ebx + 0xa0]
mov byte [ebp - 4], 1
call 0xfd8ffc4
mov esi, eax
test esi, esi
js 0x100fca17
cmp dword [ebp - 0x18], 1
jne 0x1002a7d9
mov eax, dword [edi]
and dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x1c]
push ecx
push edi
call dword [eax + 0x10]
mov esi, eax
test esi, esi
js 0x100fca40
and dword [ebp + 0xc], 0
push dword [ebp - 0x1c]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 2
call 0xfd9ac64
mov esi, eax
test esi, esi
js 0x100fca88
xor edi, edi
push edi
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x20], edi
call 0xfd92ac6
test eax, eax
je 0x1002eb8a
mov esi, dword [0x10001238]
push edi
lea ecx, [ebp + 0xc]
call 0xfdb6bea
push eax
lea eax, [ebp - 0x48]
xor ecx, ecx
push eax
mov word [ebp - 0x48], cx
call dword [0x1000123c]
test eax, eax
js 0x100fcac0
and dword [ebp - 0x30], 0
and dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], 0x1008e704
mov dword [ebp - 0x38], 0x100a03dc
push dword [0x100015a4]
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 4
call 0xfdb8267
push eax
lea ecx, [ebp - 0x38]
call 0xfd98bfe
mov edi, eax
test edi, edi
js 0x100fcb76
and dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
push eax
push 0x100878bc
push 2
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call 0xfd8ffc4
mov edi, eax
test edi, edi
js 0x100fcb37
push 0xd
pop eax
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x1002eb07
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
lea eax, [ebp - 0x68]
push eax
call dword [0x10001234]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x68]
push edx
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
mov byte [ebp - 4], 7
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x24]
mov edi, eax
test edi, edi
js 0x100fcaf7
mov esi, dword [0x10001238]
lea eax, [ebp - 0x68]
push eax
call esi
lea eax, [ebp - 0x58]
push eax
call esi
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 4
test eax, eax
je 0x1002eb5b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call 0xfd8d52a
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 2
call esi
mov edi, dword [ebp - 0x20]
inc edi
push 0
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x20], edi
call 0xfd92ac6
cmp edi, eax
jb 0x1002ea6d
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call 0xfd92ca5
push 1
push 1
mov ecx, ebx
call 0x1002f1ff
mov esi, eax
test esi, esi
js 0x100fcacf
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 0
test eax, eax
je 0x1002ebbc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor esi, esi
lea ecx, [ebp - 0x28]
call 0xfd8ff8b
mov eax, esi
call 0xfd89966
ret 8
mov eax, edi
call fcn.1002d17a
jmp 0x1002f2c1
mov dword [ebp - 0x144], 0x3692
sbb dword [ecx - 0x7ee6efb9], eax
inc edi
adc byte [ecx], bl
add dword [edi + 0x10], 0x10478119
sbb dword [ecx - 0x7ee6efb9], eax
inc edi
adc byte [edx], dh
sub eax, 0x5849106a
add dword [eax], edx
dec dword [eax + eax + 0x3ff91a10]
adc byte [eax + 0x62], al
add byte [eax], dl
xor bl, byte [edx + 0x28]
adc byte [esi - 0x15a4effb], cl
add eax, 0x3ff98b10
adc byte [ecx - 0x24efc007], ah
stc
aas
adc byte [esi], ch
cli
aas
adc byte [eax - 0x38efc006], al
test dword [esi + edi*8 + 0x3692ffff], edi
add byte [eax], al
inc esp
push 0x10
jmp 0x1002f2c1
push 0x6c
pop eax
mov word [ebp - 4], ax
xor eax, eax
mov word [ebp - 2], ax
lea eax, [ebp - 0x18]
push eax
push 0x505d
lea eax, [ebp - 0x140]
push eax
call fcn.10036ab6
add esp, 0xc
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x124], eax
push 0x4c
call fcn.10037507
pop ecx
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
je 0x1002ecb1
mov ecx, dword [ebp - 0x254]
call fcn.100379f2
mov dword [ebp - 0x298], eax
jmp 0x1002ecb8
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x12c], eax
push 8
pop ecx
xor eax, eax
mov edi, dword [ebp - 0x12c]
add edi, 0x28
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov byte [ebp - 0x250], 0
push 0x103
push 0
lea eax, [ebp - 0x24f]
push eax
call fcn.1004d4c0
add esp, 0xc
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.10037730
add esp, 0xc
lea eax, [ebp - 0x120]
push eax
push 0
push 0
push 0x1a
push 0
call dword [ebp - 0x124]
test eax, eax
jl 0x1002ef49
lea eax, [ebp - 0x120]
dec eax
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov al, byte [eax + 1]
mov byte [ebp - 0x29d], al
inc dword [ebp - 0x29c]
cmp byte [ebp - 0x29d], 0
jne 0x1002ed45
mov edi, dword [ebp - 0x29c]
mov esi, 0x10053b54
movsw word es:[edi], word [esi]
push 0
push 0
push 0
push 0
push 0
push 0
push 0x328b
call fcn.100328c5
add esp, 0x1c
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a4]
mov al, byte [eax]
mov byte [ebp - 0x2a9], al
inc dword [ebp - 0x2a4]
cmp byte [ebp - 0x2a9], 0
jne 0x1002eda7
mov eax, dword [ebp - 0x2a4]
sub eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2b0], ecx
mov dword [ebp - 0x2b4], eax
lea eax, [ebp - 0x120]
dec eax
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
mov al, byte [eax + 1]
mov byte [ebp - 0x2b9], al
inc dword [ebp - 0x2b8]
cmp byte [ebp - 0x2b9], 0
jne 0x1002edef
mov edi, dword [ebp - 0x2b8]
mov esi, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x2b4]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [ebp - 0x120]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2c0]
mov al, byte [eax]
mov byte [ebp - 0x2c5], al
inc dword [ebp - 0x2c0]
cmp byte [ebp - 0x2c5], 0
jne 0x1002ee55
mov eax, dword [ebp - 0x2c0]
sub eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
inc eax
inc eax
push eax
call fcn.1000361d
pop ecx
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x258]
mov dword [eax + 0x24], ecx
lea eax, [ebp - 0x120]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d0]
mov al, byte [eax]
mov byte [ebp - 0x2d9], al
mov eax, dword [ebp - 0x2d4]
mov cl, byte [ebp - 0x2d9]
mov byte [eax], cl
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp byte [ebp - 0x2d9], 0
jne 0x1002eecf
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax + 0x24]
dec eax
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
mov al, byte [eax + 1]
mov byte [ebp - 0x2e1], al
inc dword [ebp - 0x2e0]
cmp byte [ebp - 0x2e1], 0
jne 0x1002ef1e
mov edi, dword [ebp - 0x2e0]
mov esi, 0x10053b54
movsw word es:[edi], word [esi]
jmp 0x1002f2c1
je 0x1002f03d
cmp byte [eax + 0x39], 5
jb 0x1002f08f
call fcn.100095ea
lea ecx, [ebp - 0x18]
call fcn.1001b03e
jmp 0x1002f2c1
ret 4
mov dword [ebp - 0x144], 0x36bb
dec esp
push 0x10
stosb byte es:[edi], al
pop esi
add byte [eax], dl
dec ecx
pop eax
add dword [eax], edx
mov eax, 0xb810015c
pop esp
add dword [eax], edx
dec ecx
pop eax
add dword [eax], edx
dec ecx
pop eax
add dword [eax], edx
xor ebx, dword [ebp + 1]
adc bl, bl
mov gs, word [esi + 0x10]
push eax
lodsb al, byte [esi]
add byte [eax], dl
xchg esp, eax
pop ds
sub dl, byte [eax]
out 0x9b, al
inc edi
adc byte [esi + 0x60102a0b], bh
push 0x10
int1
jle 0x1002efe3
adc bh, bl
rol dword [ebx], cl
adc cl, ch
aam 2
add byte [eax], al
mov ecx, dword [edi]
push dword [ebx + 4]
jmp 0x1002f2c1
mov dword [ecx], 0x1002e7c1
jmp 0x1002f2c1
mov dword [ecx + 8], 0x1002e817
mov dword [ecx + 0x10], 0x1002e825
jmp 0x1002f2c1
test byte [eax + 0x3c], 2
je 0x1002f07e
cmp byte [eax + 0x39], 5
jb 0x1002e8c5
jmp 0x1002f2c1
mov dword [ebp - 0xa], 0x64002e
push 0x6c
pop eax
mov word [ebp - 6], ax
jmp 0x1002f2c1
push 0x5785
push dword [ebp - 0x12c]
call fcn.1002d964
pop ecx
pop ecx
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
jmp 0x1002f2cc
mov dword [ecx + 0x28], 0x1002e86f
jmp 0x1002ef70
mov ecx, esi
call fcn.1002d17a
call fcn.10002d45
jmp 0x1002f2c1
call fcn.10023b15
jmp 0x1002f2c1
mov dword [ebp - 0x144], 0x3736
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [eax + eax + 0x61], ch
add byte [edx], ah
outsd dx, dword [esi]
add byte [edx], dh
popal
add byte [eax + eax + 0x69], dh
add byte [edi], ch
outsb dx, byte [esi]
add byte [esi], dl
imul eax, dword [eax], 0x770065
dec ebp
add byte [edi], ch
add byte fs:[ebp], ah
insb byte es:[edi], dx
add byte [edx], bh
add byte [edx], bh
add byte [ebx], al
push edx
add byte [edi], ch
outsd dx, dword [esi]
add byte [ebp], ch
push edx
add byte [edi], ch
jae 0x1002f0e3
je 0x1002f0e5
add byte gs:[edx], dh
push esi
add byte [ecx], ch
add byte gs:[edi], dh
dec ebp
add byte [edi], ch
add byte fs:[ebp], ah
insb byte es:[edi], dx
add byte [edx], bh
add byte [edx], bh
add byte [esi], bh
inc ebx
add byte [edx], dl
outsd dx, dword [esi]
add byte [edi], ch
insd dword es:[edi], dx
add byte [edx], dl
outsd dx, dword [esi]
add byte [ebx], dh
je 0x1002f113
add byte gs:[edx], dh
push esi
add byte [ecx], ch
add byte gs:[edi], dh
dec ebp
add byte [edi], ch
add byte fs:[ebp], ah
insb byte es:[edi], dx
add byte [eax], al
add cl, ch
xchg ecx, eax
add dword [eax], eax
add al, ch
popfd
inc edi
std
dec dword [ebx - 0xf8a760f]
call fcn.100038d2
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [esi], 0x1002ebe7
mov dword [esi + 8], 0x1002ec3d
mov dword [esi + 0x10], 0x1002ef9e
mov dword [esi + 0x28], 0x1002f1af
jmp 0x1002f2c1
push 8
mov eax, 0x1002ef73
call fcn.1001bf25
mov edi, ecx
mov dword [ebp - 0x14], edi
mov ebx, dword [ebp + 8]
xor esi, esi
jmp 0x1002f2c1
cmp byte [eax + 0x39], 5
jb 0x1002e906
push esi
push 0x1002e94c
push 0xb
push dword [eax + 0x34]
jmp 0x1002f2c1
lea ecx, [esi + 0x84]
mov byte [ebp - 4], 3
call fcn.10024646
lea ecx, [esi + 0x6c]
mov byte [ebp - 4], 2
call fcn.100349db
jmp 0x1002f2c1
mov dword [ebp - 0x144], 0x36e4
movsd dword es:[edi], dword [esi]
lea eax, [eax]
adc byte [ecx - 0x60effe5a], dh
wait
inc edi
adc cl, ch
test dword [eax], 0x1b10000
mov cl, 1
jmp 0x1002f015
lea ecx, [esi + 0x58]
mov byte [ebp - 4], 1
call fcn.1003270f
lea ecx, [esi + 0x44]
mov byte [ebp - 4], 0
call fcn.100031a1
jmp 0x1002f2c1
lea ecx, [esi + 0xa4]
mov byte [ebp - 4], 5
call fcn.1003255f
lea ecx, [esi + 0x94]
mov byte [ebp - 4], 4
jmp 0x1002f2c1
push 0x61
pop eax
mov word [ebp - 0x134], ax
push 0x74
pop eax
mov word [ebp - 0x133], ax
push 0x68
pop eax
mov word [ebp - 0x132], ax
jmp 0x1002f2c1
mov eax, dword [ebx + 4]
sub eax, dword [ebx]
mov ecx, 0xd4
cdq
idiv ecx
jmp 0x1002f2c1
push 0x41
pop eax
mov word [ebp - 0x131], ax
push 0x73
pop eax
mov word [ebp - 0x18], ax
push 0x68
pop eax
mov word [ebp - 0x16], ax
push 0x65
pop eax
mov word [ebp - 0x14], ax
jmp 0x1002f2c1
mov eax, 0x4853
mov word [ebp - 0x140], ax
mov dword [ebp - 0x13e], 0x746547
push 0x46
pop eax
mov word [ebp - 0x13b], ax
mov eax, 0x6c6f
mov word [ebp - 0x13a], ax
mov eax, 0x6564
mov word [ebp - 0x138], ax
push 0x72
pop eax
mov word [ebp - 0x136], ax
push 0x50
pop eax
mov word [ebp - 0x135], ax
jmp 0x1002e48b
mov eax, dword [ebp - 0x128]
pop edi
pop esi
pop ebx
leave
ret