Function at 0x10164720
Capabilities:
Get file size
Parse pe header
Read file via mapping
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x138
mov edx, dword [0x102999e4]
mov eax, ecx
mov dword [ebp - 0x64], eax
push esi
push edi
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x7c], 1
mov esi, dword [eax + edx*4]
mov eax, dword [0x102bb984]
mov dword [ebp - 0x74], esi
cmp eax, dword [esi + 4]
jle 0x10164c35
push 0x102bb984
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb984], 0xffffffff
jne 0x10164c35
push 0
push 0x80
push 3
push 0
push 5
push connect
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push str.c:windows_syswow64_ntdll.dll
movq qword [ebp - 0x70], xmm0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0
push 0
push 2
push 0
push esi
mov dword [ebp - 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
push 0
push 0
push 0
push 4
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x20], eax
xor edi, edi
mov ecx, dword [eax + 0x3c]
lea esi, [eax + 0xf8]
add esi, ecx
mov dword [ebp - 0x18], esi
movzx edx, word [ecx + eax + 6]
mov eax, dword [ecx + eax + 0x78]
mov ecx, esi
mov dword [ebp - 0x2c], edx
mov dword [ebp - 4], eax
test edx, edx
je 0x10164aae
nop dword [eax]
mov esi, dword [ecx + 0xc]
cmp eax, esi
jb 0x10164838
mov eax, dword [ecx + 0x10]
add eax, esi
cmp dword [ebp - 4], eax
jb 0x10164a4b
mov eax, dword [ebp - 4]
inc edi
add ecx, 0x28
cmp edi, edx
jb 0x10164820
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x14], eax
xor edi, edi
mov esi, dword [ecx + 0xc]
cmp eax, esi
jb 0x1016486c
mov eax, dword [ecx + 0x10]
add eax, esi
cmp dword [ebp - 0x14], eax
jb 0x10164a76
mov eax, dword [ebp - 0x14]
inc edi
add ecx, 0x28
cmp edi, edx
jb 0x10164854
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
mov dword [ebp - 8], ecx
mov ecx, esi
mov dword [ebp - 0x14], eax
test edx, edx
je 0x101648b3
xor edi, edi
nop
mov esi, dword [ecx + 0xc]
cmp eax, esi
jb 0x101648a8
mov eax, dword [ecx + 0x10]
add eax, esi
cmp dword [ebp - 0x14], eax
jb 0x10164abc
mov eax, dword [ebp - 0x14]
inc edi
add ecx, 0x28
cmp edi, edx
jb 0x10164890
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov ecx, esi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x14], eax
test edx, edx
je 0x101648f0
xor edi, edi
nop word [eax + eax]
mov esi, dword [ecx + 0xc]
cmp eax, esi
jb 0x101648e8
mov eax, dword [ecx + 0x10]
add eax, esi
cmp dword [ebp - 0x14], eax
jb 0x10164af4
mov eax, dword [ebp - 0x14]
inc edi
add ecx, 0x28
cmp edi, edx
jb 0x101648d0
xor ecx, ecx
mov eax, dword [ebp - 0xc]
xor edi, edi
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x1c], edi
cmp dword [eax + 0x18], edi
jbe 0x10164c10
nop dword [eax]
mov eax, dword [ebp - 4]
xor esi, esi
mov ecx, dword [ebp - 8]
movzx eax, word [eax + edi*2]
mov edi, dword [ecx + eax*4]
mov eax, dword [ebp - 0x18]
mov ecx, eax
test edx, edx
je 0x1016494a
mov edx, dword [ecx + 0xc]
cmp edi, edx
jb 0x1016493c
mov eax, dword [ecx + 0x10]
add eax, edx
cmp edi, eax
jb 0x10164b08
mov edx, dword [ebp - 0x2c]
inc esi
add ecx, 0x28
cmp esi, edx
jb 0x10164928
mov eax, dword [ebp - 0x18]
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x30], eax
test edx, edx
je 0x10164993
mov eax, dword [ebp - 0x1c]
xor esi, esi
nop word [eax + eax]
mov edi, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
cmp dword [edi + eax*4], edx
mov edi, dword [ebp - 0x2c]
jb 0x1016498b
mov eax, dword [ecx + 0x10]
mov edi, dword [ebp - 0x1c]
add eax, edx
mov edx, dword [ebp - 0x14]
cmp dword [edx + edi*4], eax
mov edx, dword [ecx + 0xc]
mov edi, dword [ebp - 0x2c]
jb 0x10164b28
mov eax, dword [ebp - 0x1c]
inc esi
add ecx, 0x28
cmp esi, edi
jb 0x10164960
mov edi, dword [ebp - 0x1c]
xor esi, esi
push 1
lea ecx, [ebp - 0x138]
call fcn.100e5c20
mov edx, dword [ebp - 0x20]
lea ecx, [ebp - 0x138]
lea edx, [esi + edx]
call fcn.100511a0
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x134]
call fcn.10050eb0
lea ecx, [ebp - 0x9c]
call fcn.1000d6b0
mov ecx, eax
call fcn.10008550
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.1000d660
cmp esi, 0xbd799926
jne 0x10164bd9
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x20]
cmp byte [ecx + edx], 0xb8
jne 0x10164bd9
mov al, byte [ecx + edx + 5]
cmp al, 0xb9
jne 0x10164b42
cmp dword [ecx + edx + 0xa], 0x424548d
jne 0x10164bd9
cmp dword [ecx + edx + 0xd], 0xc015ff64
jne 0x10164bd9
movzx eax, word [ecx + edx + 0x11]
test ax, ax
jne 0x10164bd9
movzx eax, byte [ecx + edx + 0x13]
test al, al
je 0x10164b68
jmp 0x10164bd9
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x18]
sub eax, esi
add eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x24]
jb 0x10164a6c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [eax + 0x1c]
jmp 0x1016484f
mov esi, dword [ebp - 0x20]
add esi, eax
jmp 0x10164846
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x18]
sub eax, esi
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x24]
jb 0x10164a9a
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 8], esi
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x14], eax
jmp 0x1016488c
add eax, dword [ebp - 0x20]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x14], eax
jmp 0x1016488c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1c], eax
jmp 0x1016487a
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x18]
sub eax, esi
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x24]
jb 0x10164ae0
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 4], esi
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x14], eax
jmp 0x101648c8
add eax, dword [ebp - 0x20]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x14], eax
jmp 0x101648c8
mov eax, dword [ecx + 0x14]
sub eax, esi
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x24]
sbb ecx, ecx
and ecx, eax
jmp 0x101648f2
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x18]
sub eax, edx
add eax, edi
mov dword [ebp - 0x30], eax
cmp eax, dword [ebp - 0x24]
jb 0x10164955
xor eax, eax
mov dword [ebp - 0x30], eax
jmp 0x10164955
mov eax, dword [ecx + 0x14]
mov edi, dword [ebp - 0x1c]
sub eax, edx
mov ecx, dword [ebp - 0x14]
add eax, dword [ecx + edi*4]
cmp eax, dword [ebp - 0x24]
sbb esi, esi
and esi, eax
jmp 0x10164998
cmp al, 0xba
jne 0x10164b86
cmp dword [ecx + edx + 6], 0x7ffe0300
jne 0x10164b5c
mov eax, 0x12ff
cmp word [ecx + edx + 0xa], ax
je 0x10164b68
mov eax, 0xd2ff
cmp word [ecx + edx + 0xa], ax
jne 0x10164bd9
mov eax, dword [ecx + edx + 1]
mov dword [ebp - 0x4c], eax
mov ax, word [ecx + edx + 0xd]
mov word [ebp - 0x48], ax
movq xmm0, qword [ebp - 0x4c]
mov dword [ebp - 0x28], 0xa
jmp 0x10164bd4
cmp al, 0x33
jne 0x10164bd9
cmp byte [ecx + edx + 6], 0xc9
jne 0x10164bd9
cmp dword [ecx + edx + 7], 0x424548d
jne 0x10164bd9
cmp dword [ecx + edx + 0xb], 0xc015ff64
jne 0x10164bd9
movzx eax, word [ecx + edx + 0xf]
test ax, ax
jne 0x10164bd9
movzx eax, byte [ecx + edx + 0x11]
test al, al
jne 0x10164bd9
mov eax, dword [ecx + edx + 1]
mov dword [ebp - 0x40], eax
mov ax, word [ecx + edx + 0x16]
mov word [ebp - 0x3c], ax
movq xmm0, qword [ebp - 0x40]
mov dword [ebp - 0x28], 7
movq qword [ebp - 0x70], xmm0
lea ecx, [ebp - 0xe8]
call fcn.100e5b50
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xe8], 0x1025a2b4
push eax
call fcn.101e056c
mov eax, dword [ebp - 0xc]
inc edi
mov edx, dword [ebp - 0x2c]
add esp, 4
mov dword [ebp - 0x1c], edi
cmp edi, dword [eax + 0x18]
jb 0x10164910
movq xmm0, qword [ebp - 0x70]
mov eax, dword [ebp - 0x28]
push 0x102bb984
movq qword [0x102bb978], xmm0
mov dword [0x102bb980], eax
call fcn.101e236f
mov esi, dword [ebp - 0x74]
add esp, 4
mov eax, dword [0x102bb974]
cmp eax, dword [esi + 4]
jle 0x10165188
push 0x102bb974
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb974], 0xffffffff
jne 0x10165188
mov eax, dword [0x102b6294]
test eax, eax
jne 0x10165173
mov eax, dword [0x102bb980]
cmp eax, 7
je 0x10164fff
cmp eax, 0xa
je 0x10164c87
xor eax, eax
jmp 0x10165173
mov eax, dword [0x102bb998]
cmp eax, dword [esi + 4]
jle 0x10164ce7
push 0x102bb998
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb998], 0xffffffff
jne 0x10164ce7
lea eax, [ebp - 0x59]
mov dword [ebp - 0x70], 0x25ff
push eax
lea ecx, [ebp - 0x6a]
mov word [ebp - 0x6c], 0
push ecx
lea edx, [ebp - 0x70]
mov ecx, 0x102bb98c
push edx
call fcn.1012dcd0
push 0x102110b0
call fcn.101e2242
add esp, 4
push 0x102bb998
call fcn.101e236f
add esp, 4
mov eax, dword [0x102bb988]
cmp eax, dword [esi + 4]
jle 0x10164d59
push 0x102bb988
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb988], 0xffffffff
jne 0x10164d59
lea eax, [ebp - 0x5a]
mov dword [ebp - 0x40], 0xb8
push eax
lea ecx, [ebp - 0x31]
mov dword [ebp - 0x3c], 0xba00
push ecx
lea edx, [ebp - 0x40]
mov dword [ebp - 0x38], 0xd2ff0000
push edx
mov ecx, 0x102bb99c
mov word [ebp - 0x34], 0xc2
mov byte [ebp - 0x32], 0
call fcn.1012dcd0
push 0x10211110
call fcn.101e2242
add esp, 4
push 0x102bb988
call fcn.101e236f
add esp, 4
mov eax, dword [0x102bb990]
sub eax, dword [0x102bb98c]
mov dword [ebp - 0xc], eax
mov eax, dword [0x102bb9b8]
test eax, eax
jne 0x10164e0a
mov ecx, 0xa62a3b3b
call fcn.1016fc50
mov edi, dword [eax + 4]
mov eax, 0x5a4d
cmp word [edi], ax
je 0x10164d8f
xor eax, eax
jmp 0x10164e05
mov eax, dword [edi + 0x3c]
cmp dword [eax + edi], 0x4550
je 0x10164d9f
xor eax, eax
jmp 0x10164e05
mov edx, dword [eax + edi + 0x78]
xor esi, esi
mov eax, dword [edx + edi + 0x14]
add edx, edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [edx + 0x20]
add ecx, edi
mov dword [ebp - 0x14], ecx
test eax, eax
je 0x10164de5
mov ecx, dword [ecx + esi*4]
add ecx, edi
call fcn.10008550
mov edx, dword [ebp - 8]
cmp eax, 0xca67b978
mov eax, dword [edx + 0x14]
je 0x10164de2
mov ecx, dword [ebp - 0x14]
inc esi
cmp esi, eax
jb 0x10164dc1
jmp 0x10164de5
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
cmp ecx, eax
jbe 0x10164df0
xor eax, eax
jmp 0x10164e05
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
mov dword [0x102bb9b8], eax
push 0x40
push 0x3000
lea ecx, [ebp - 0xc]
push ecx
push 0
push 0x102b6298
push 0xffffffffffffffff
call eax
mov eax, dword [0x102bb990]
mov ecx, dword [0x102bb98c]
sub eax, ecx
mov dword [ebp - 0xc], eax
mov eax, dword [0x102b616c]
test eax, eax
jne 0x10164edf
mov ecx, 0xa62a3b3b
call fcn.1016fc50
mov edi, dword [eax + 4]
mov eax, 0x5a4d
cmp word [edi], ax
je 0x10164e58
xor eax, eax
jmp 0x10164ed4
mov eax, dword [edi + 0x3c]
cmp dword [eax + edi], 0x4550
je 0x10164e68
xor eax, eax
jmp 0x10164ed4
mov edx, dword [eax + edi + 0x78]
xor esi, esi
mov eax, dword [edx + edi + 0x14]
add edx, edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [edx + 0x20]
add ecx, edi
mov dword [ebp - 0x14], ecx
test eax, eax
je 0x10164eb4
nop word [eax + eax]
mov ecx, dword [ecx + esi*4]
add ecx, edi
call fcn.10008550
mov edx, dword [ebp - 8]
cmp eax, 0xbb40d3d
mov eax, dword [edx + 0x14]
je 0x10164eb1
mov ecx, dword [ebp - 0x14]
inc esi
cmp esi, eax
jb 0x10164e90
jmp 0x10164eb4
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
cmp ecx, eax
jbe 0x10164ebf
xor eax, eax
jmp 0x10164ed4
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
mov ecx, dword [0x102bb98c]
mov dword [0x102b616c], eax
mov dword [ecx + 2], eax
push dword [ebp - 0xc]
push dword [0x102bb98c]
push dword [0x102b6298]
call fcn.101e3770
mov eax, dword [0x102bb9a0]
add esp, 0xc
sub eax, dword [0x102bb99c]
mov dword [ebp - 0xc], eax
mov eax, dword [0x102bb9b8]
mov dword [ebp - 0x28], 0
test eax, eax
jne 0x10164fb9
mov ecx, 0xa62a3b3b
call fcn.1016fc50
mov edi, dword [eax + 4]
mov eax, 0x5a4d
cmp word [edi], ax
je 0x10164f36
xor eax, eax
jmp 0x10164fb4
mov eax, dword [edi + 0x3c]
cmp dword [eax + edi], 0x4550
je 0x10164f46
xor eax, eax
jmp 0x10164fb4
mov edx, dword [eax + edi + 0x78]
xor esi, esi
mov eax, dword [edx + edi + 0x14]
add edx, edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [edx + 0x20]
add ecx, edi
mov dword [ebp - 0x14], ecx
test eax, eax
je 0x10164f94
nop dword [eax + eax]
mov ecx, dword [ecx + esi*4]
add ecx, edi
call fcn.10008550
mov edx, dword [ebp - 8]
cmp eax, 0xca67b978
mov eax, dword [edx + 0x14]
je 0x10164f91
mov ecx, dword [ebp - 0x14]
inc esi
cmp esi, eax
jb 0x10164f70
jmp 0x10164f94
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
cmp ecx, eax
jbe 0x10164f9f
xor eax, eax
jmp 0x10164fb4
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
mov dword [0x102bb9b8], eax
push 0x40
push 0x3000
lea ecx, [ebp - 0xc]
push ecx
push 0
lea ecx, [ebp - 0x28]
push ecx
push 0xffffffffffffffff
call eax
mov eax, dword [0x102bb9a0]
mov ecx, dword [0x102bb99c]
sub eax, ecx
mov dword [ebp - 0xc], eax
mov eax, dword [0x102b6298]
mov dword [ecx + 6], eax
push dword [ebp - 0xc]
push dword [0x102bb99c]
push dword [ebp - 0x28]
call fcn.101e3770
mov eax, dword [ebp - 0x28]
jmp 0x1016516b
mov eax, dword [0x102bb9b4]
cmp eax, dword [esi + 4]
jle 0x1016507c
push 0x102bb9b4
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb9b4], 0xffffffff
jne 0x1016507c
lea eax, [ebp - 0x5b]
mov dword [ebp - 0x58], 0xb8
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x54], 0x8dc93300
push ecx
lea edx, [ebp - 0x58]
mov dword [ebp - 0x50], 0x64042454
push edx
mov ecx, 0x102bb9a8
mov dword [ebp - 0x4c], 0xc015ff
mov dword [ebp - 0x48], 0xc4830000
mov dword [ebp - 0x44], 0xc204
call fcn.1012dcd0
push 0x10211050
call fcn.101e2242
add esp, 4
push 0x102bb9b4
call fcn.101e236f
add esp, 4
mov eax, dword [0x102bb9ac]
sub eax, dword [0x102bb9a8]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x102bb9b8]
mov dword [ebp - 0x30], 0
test eax, eax
jne 0x10165139
mov ecx, 0xa62a3b3b
call fcn.1016fc50
mov edi, dword [eax + 4]
mov eax, 0x5a4d
cmp word [edi], ax
je 0x101650b9
xor eax, eax
jmp 0x10165134
mov eax, dword [edi + 0x3c]
cmp dword [eax + edi], 0x4550
je 0x101650c9
xor eax, eax
jmp 0x10165134
mov edx, dword [eax + edi + 0x78]
xor esi, esi
mov eax, dword [edx + edi + 0x14]
add edx, edi
mov dword [ebp - 0x28], edx
mov dword [ebp - 8], 0xffffffff
mov ecx, dword [edx + 0x20]
add ecx, edi
mov dword [ebp - 4], ecx
test eax, eax
je 0x10165114
nop dword [eax + eax]
mov ecx, dword [ecx + esi*4]
add ecx, edi
call fcn.10008550
mov edx, dword [ebp - 0x28]
cmp eax, 0xca67b978
mov eax, dword [edx + 0x14]
je 0x10165111
mov ecx, dword [ebp - 4]
inc esi
cmp esi, eax
jb 0x101650f0
jmp 0x10165114
mov dword [ebp - 8], esi
mov ecx, dword [ebp - 8]
cmp ecx, eax
jbe 0x1016511f
xor eax, eax
jmp 0x10165134
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
mov dword [0x102bb9b8], eax
push 0x40
push 0x3000
lea ecx, [ebp - 0x2c]
push ecx
push 0
lea ecx, [ebp - 0x30]
push ecx
push 0xffffffffffffffff
call eax
mov eax, dword [0x102bb9ac]
mov ecx, dword [0x102bb9a8]
sub eax, ecx
push eax
push ecx
push dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
call fcn.101e3770
mov eax, dword [ebp - 0x30]
mov dword [0x102b6294], eax
add esp, 0xc
push 0x102bb974
mov dword [0x102bb96c], eax
call fcn.101e236f
mov esi, dword [ebp - 0x74]
add esp, 4
mov eax, dword [0x102bb970]
mov edi, 0xd
cmp eax, dword [esi + 4]
jle 0x101651d1
push 0x102bb970
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb970], 0xffffffff
jne 0x101651d1
cmp dword [0x102bb980], 7
mov eax, 0x16
push 0x102bb970
cmovne eax, edi
mov dword [0x102bb968], eax
call fcn.101e236f
add esp, 4
mov edx, dword [0x102bb96c]
mov eax, dword [0x102bb978]
movzx ecx, word [0x102bb97c]
mov dword [edx + 1], eax
mov eax, dword [0x102bb968]
mov dword [eax + edx], ecx
lea eax, [ebp - 0x78]
push eax
push 0x40
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x80]
push eax
push 0xffffffffffffffff
call edx
mov edx, dword [ebp - 0x64]
mov al, byte [ebx + 8]
mov dword [ebp - 0x84], 1
mov ecx, dword [edx]
mov byte [ecx], al
mov eax, dword [edx]
mov dword [ebp - 0x6c], eax
mov eax, dword [0x102bb984]
cmp eax, dword [esi + 4]
jle 0x101656d3
push 0x102bb984
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb984], 0xffffffff
jne 0x101656d3
push 0
push 0x80
push 3
push 0
push 5
push connect
xorps xmm0, xmm0
mov dword [ebp - 8], 0
push str.c:windows_syswow64_ntdll.dll
movq qword [ebp - 0x68], xmm0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0
push 0
push 2
push 0
push esi
mov dword [ebp - 0x14], eax
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
push 0
push 0
push 0
push 4
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, eax
mov dword [ebp - 0x1c], esi
mov ecx, dword [esi + 0x3c]
lea edx, [esi + 0xf8]
add edx, ecx
mov dword [ebp - 0x20], edx
movzx eax, word [ecx + esi + 6]
mov edi, dword [ecx + esi + 0x78]
mov ecx, edx
xor esi, esi
mov dword [ebp - 0x18], eax
test eax, eax
je 0x1016554c
nop dword [eax]
mov edx, dword [ecx + 0xc]
cmp edi, edx
jb 0x101652e7
mov eax, dword [ecx + 0x10]
add eax, edx
cmp edi, eax
jb 0x101654eb
mov eax, dword [ebp - 0x18]
inc esi
add ecx, 0x28
cmp esi, eax
jb 0x101652d0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov edi, dword [edx + 0x1c]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x24], edx
xor esi, esi
mov edx, dword [ecx + 0xc]
cmp edi, edx
jb 0x10165317
mov eax, dword [ecx + 0x10]
add eax, edx
cmp edi, eax
jb 0x1016551b
mov eax, dword [ebp - 0x18]
inc esi
add ecx, 0x28
cmp esi, eax
jb 0x10165300
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x1c]
mov edi, dword [ecx + 0x24]
mov ecx, edx
mov dword [ebp - 0x30], esi
test eax, eax
je 0x10165358
xor esi, esi
mov edx, dword [ecx + 0xc]
cmp edi, edx
jb 0x1016534d
mov eax, dword [ecx + 0x10]
add eax, edx
cmp edi, eax
jb 0x1016555a
mov eax, dword [ebp - 0x18]
inc esi
add ecx, 0x28
cmp esi, eax
jb 0x10165336
mov edx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x28], ecx
mov ecx, edx
mov edi, dword [edi + 0x20]
test eax, eax
je 0x1016538f
xor esi, esi
nop dword [eax]
mov edx, dword [ecx + 0xc]
cmp edi, edx
jb 0x10165387
mov eax, dword [ecx + 0x10]
add eax, edx
cmp edi, eax
jb 0x10165591
mov eax, dword [ebp - 0x18]
inc esi
add ecx, 0x28
cmp esi, eax
jb 0x10165370
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
add edx, ecx
xor ecx, ecx
mov dword [ebp - 4], edx
mov dword [ebp - 0x2c], ecx
cmp dword [eax + 0x18], ecx
jbe 0x101656ae
nop word [eax + eax]
mov eax, dword [ebp - 0x28]
xor esi, esi
movzx eax, word [eax + ecx*2]
mov ecx, dword [ebp - 0x30]
mov edi, dword [ecx + eax*4]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
test eax, eax
je 0x101653ef
nop dword [eax]
mov edx, dword [ecx + 0xc]
cmp edi, edx
jb 0x101653e7
mov eax, dword [ecx + 0x10]
add eax, edx
cmp edi, eax
jb 0x101655a4
mov eax, dword [ebp - 0x18]
inc esi
add ecx, 0x28
cmp esi, eax
jb 0x101653d0
mov ecx, dword [ebp - 0x20]
xor edi, edi
mov dword [ebp - 0xc], edi
test eax, eax
je 0x10165439
xor esi, esi
nop dword [eax]
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp - 4]
mov edx, dword [ecx + 0xc]
cmp dword [edi + eax*4], edx
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
jb 0x10165431
mov eax, dword [ecx + 0x10]
mov edi, dword [ebp - 4]
add eax, edx
mov edx, dword [ebp - 0x2c]
cmp dword [edi + edx*4], eax
mov edx, dword [ecx + 0xc]
mov edi, dword [ebp - 0xc]
jb 0x101655c6
mov eax, dword [ebp - 0x18]
inc esi
add ecx, 0x28
cmp esi, eax
jb 0x10165400
xor esi, esi
push 1
lea ecx, [ebp - 0x138]
call fcn.100e5c20
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x138]
lea edx, [esi + edx]
call fcn.100511a0
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x134]
call fcn.10050eb0
lea ecx, [ebp - 0x9c]
call fcn.1000d6b0
mov ecx, eax
call fcn.10008550
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.1000d660
cmp esi, 0xbd799926
jne 0x10165677
mov ecx, dword [ebp - 0x1c]
cmp byte [edi + ecx], 0xb8
jne 0x10165677
mov al, byte [edi + ecx + 5]
cmp al, 0xb9
jne 0x101655e0
cmp dword [edi + ecx + 0xa], 0x424548d
jne 0x10165677
cmp dword [edi + ecx + 0xd], 0xc015ff64
jne 0x10165677
movzx eax, word [edi + ecx + 0x11]
test ax, ax
jne 0x10165677
movzx eax, byte [edi + ecx + 0x13]
test al, al
je 0x10165606
jmp 0x10165677
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x20]
sub eax, edx
add eax, edi
cmp eax, dword [ebp - 0x14]
jb 0x1016550e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], eax
mov edi, dword [eax + 0x1c]
mov eax, dword [ebp - 0x18]
jmp 0x101652fe
mov edx, dword [ebp - 0x1c]
add edx, eax
mov eax, dword [ebp - 0x18]
jmp 0x101652f5
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x20]
sub eax, edx
add eax, edi
mov edi, dword [ebp - 0xc]
mov edi, dword [edi + 0x24]
cmp eax, dword [ebp - 0x14]
jb 0x1016553e
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], edx
jmp 0x10165334
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
jmp 0x10165334
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0xc], ecx
jmp 0x10165325
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x20]
sub eax, edx
add eax, edi
cmp eax, dword [ebp - 0x14]
jb 0x1016557d
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x28], edx
mov edi, dword [eax + 0x20]
mov eax, dword [ebp - 0x18]
jmp 0x1016536a
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xc]
mov edi, dword [eax + 0x20]
mov eax, dword [ebp - 0x18]
jmp 0x1016536a
mov eax, dword [ecx + 0x14]
sub eax, edx
add eax, edi
cmp eax, dword [ebp - 0x14]
sbb ecx, ecx
and ecx, eax
jmp 0x10165391
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x20]
sub eax, edx
add eax, edi
mov edi, eax
mov dword [ebp - 0xc], eax
cmp edi, dword [ebp - 0x14]
jb 0x101653fb
xor edi, edi
mov dword [ebp - 0xc], edi
jmp 0x101653fb
mov eax, dword [ecx + 0x14]
mov ecx, dword [ebp - 0x2c]
sub eax, edx
mov edx, dword [ebp - 4]
add eax, dword [edx + ecx*4]
cmp eax, dword [ebp - 0x14]
sbb esi, esi
and esi, eax
jmp 0x1016543b
cmp al, 0xba
jne 0x10165624
cmp dword [edi + ecx + 6], 0x7ffe0300
jne 0x101655fa
mov eax, 0x12ff
cmp word [edi + ecx + 0xa], ax
je 0x10165606
mov eax, 0xd2ff
cmp word [edi + ecx + 0xa], ax
jne 0x10165677
mov eax, dword [edi + ecx + 1]
mov dword [ebp - 0x40], eax
mov ax, word [edi + ecx + 0xd]
mov word [ebp - 0x3c], ax
movq xmm0, qword [ebp - 0x40]
mov dword [ebp - 8], 0xa
jmp 0x10165672
cmp al, 0x33
jne 0x10165677
cmp byte [edi + ecx + 6], 0xc9
jne 0x10165677
cmp dword [edi + ecx + 7], 0x424548d
jne 0x10165677
cmp dword [edi + ecx + 0xb], 0xc015ff64
jne 0x10165677
movzx eax, word [edi + ecx + 0xf]
test ax, ax
jne 0x10165677
movzx eax, byte [edi + ecx + 0x11]
test al, al
jne 0x10165677
mov eax, dword [edi + ecx + 1]
mov dword [ebp - 0x4c], eax
mov ax, word [edi + ecx + 0x16]
mov word [ebp - 0x48], ax
movq xmm0, qword [ebp - 0x4c]
mov dword [ebp - 8], 7
movq qword [ebp - 0x68], xmm0
lea ecx, [ebp - 0xe8]
call fcn.100e5b50
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xe8], 0x1025a2b4
push eax
call fcn.101e056c
mov ecx, dword [ebp - 0x2c]
add esp, 4
mov eax, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, dword [eax + 0x18]
jb 0x101653b0
movq xmm0, qword [ebp - 0x68]
mov eax, dword [ebp - 8]
push 0x102bb984
movq qword [0x102bb978], xmm0
mov dword [0x102bb980], eax
call fcn.101e236f
mov esi, dword [ebp - 0x74]
add esp, 4
mov eax, dword [0x102bb974]
cmp eax, dword [esi + 4]
jle 0x10165c28
push 0x102bb974
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb974], 0xffffffff
jne 0x10165c28
mov eax, dword [0x102b6294]
test eax, eax
jne 0x10165c13
mov eax, dword [0x102bb980]
cmp eax, 7
je 0x10165a9f
cmp eax, 0xa
je 0x10165725
xor eax, eax
jmp 0x10165c13
mov eax, dword [0x102bb998]
cmp eax, dword [esi + 4]
jle 0x10165785
push 0x102bb998
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb998], 0xffffffff
jne 0x10165785
lea eax, [ebp - 0x5b]
mov dword [ebp - 0x14], 0x25ff
push eax
lea edx, [ebp - 0xe]
mov word [ebp - 0x10], 0
push edx
lea edi, [ebp - 0x14]
mov ecx, 0x102bb98c
push edi
call fcn.1012dcd0
push 0x102110b0
call fcn.101e2242
add esp, 4
push 0x102bb998
call fcn.101e236f
add esp, 4
mov eax, dword [0x102bb988]
cmp eax, dword [esi + 4]
jle 0x101657f7
push 0x102bb988
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb988], 0xffffffff
jne 0x101657f7
lea eax, [ebp - 0x5a]
mov dword [ebp - 0x40], 0xb8
push eax
lea edx, [ebp - 0x31]
mov dword [ebp - 0x3c], 0xba00
push edx
lea esi, [ebp - 0x40]
mov dword [ebp - 0x38], 0xd2ff0000
push esi
mov ecx, 0x102bb99c
mov word [ebp - 0x34], 0xc2
mov byte [ebp - 0x32], 0
call fcn.1012dcd0
push 0x10211110
call fcn.101e2242
add esp, 4
push 0x102bb988
call fcn.101e236f
add esp, 4
mov eax, dword [0x102bb990]
sub eax, dword [0x102bb98c]
mov dword [ebp - 0x24], eax
mov eax, dword [0x102bb9b8]
test eax, eax
jne 0x101658a9
mov ecx, 0xa62a3b3b
call fcn.1016fc50
mov edi, dword [eax + 4]
mov eax, 0x5a4d
cmp word [edi], ax
je 0x1016582d
xor eax, eax
jmp 0x101658a4
mov eax, dword [edi + 0x3c]
cmp dword [eax + edi], 0x4550
je 0x1016583d
xor eax, eax
jmp 0x101658a4
mov edx, dword [eax + edi + 0x78]
xor esi, esi
mov eax, dword [edx + edi + 0x14]
add edx, edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [edx + 0x20]
add ecx, edi
mov dword [ebp - 0x64], ecx
test eax, eax
je 0x10165884
nop
mov ecx, dword [ecx + esi*4]
add ecx, edi
call fcn.10008550
mov edx, dword [ebp - 8]
cmp eax, 0xca67b978
mov eax, dword [edx + 0x14]
je 0x10165881
mov ecx, dword [ebp - 0x64]
inc esi
cmp esi, eax
jb 0x10165860
jmp 0x10165884
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
cmp ecx, eax
jbe 0x1016588f
xor eax, eax
jmp 0x101658a4
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
mov dword [0x102bb9b8], eax
push 0x40
push 0x3000
lea ecx, [ebp - 0x24]
push ecx
push 0
push 0x102b6298
push 0xffffffffffffffff
call eax
mov eax, dword [0x102bb990]
mov ecx, dword [0x102bb98c]
sub eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [0x102b616c]
test eax, eax
jne 0x1016597f
mov ecx, 0xa62a3b3b
call fcn.1016fc50
mov edi, dword [eax + 4]
mov eax, 0x5a4d
cmp word [edi], ax
je 0x101658f7
xor eax, eax
jmp 0x10165974
mov eax, dword [edi + 0x3c]
cmp dword [eax + edi], 0x4550
je 0x10165907
xor eax, eax
jmp 0x10165974
mov edx, dword [eax + edi + 0x78]
xor esi, esi
mov eax, dword [edx + edi + 0x14]
add edx, edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [edx + 0x20]
add ecx, edi
mov dword [ebp - 0x64], ecx
test eax, eax
je 0x10165954
nop dword [eax]
mov ecx, dword [ecx + esi*4]
add ecx, edi
call fcn.10008550
mov edx, dword [ebp - 8]
cmp eax, 0xbb40d3d
mov eax, dword [edx + 0x14]
je 0x10165951
mov ecx, dword [ebp - 0x64]
inc esi
cmp esi, eax
jb 0x10165930
jmp 0x10165954
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
cmp ecx, eax
jbe 0x1016595f
xor eax, eax
jmp 0x10165974
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
mov ecx, dword [0x102bb98c]
mov dword [0x102b616c], eax
mov dword [ecx + 2], eax
push dword [ebp - 0x24]
push dword [0x102bb98c]
push dword [0x102b6298]
call fcn.101e3770
mov eax, dword [0x102bb9a0]
add esp, 0xc
sub eax, dword [0x102bb99c]
mov dword [ebp - 0x24], eax
mov eax, dword [0x102bb9b8]
mov dword [ebp - 0x28], 0
test eax, eax
jne 0x10165a59
mov ecx, 0xa62a3b3b
call fcn.1016fc50
mov edi, dword [eax + 4]
mov eax, 0x5a4d
cmp word [edi], ax
je 0x101659d6
xor eax, eax
jmp 0x10165a54
mov eax, dword [edi + 0x3c]
cmp dword [eax + edi], 0x4550
je 0x101659e6
xor eax, eax
jmp 0x10165a54
mov edx, dword [eax + edi + 0x78]
xor esi, esi
mov eax, dword [edx + edi + 0x14]
add edx, edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [edx + 0x20]
add ecx, edi
mov dword [ebp - 0x64], ecx
test eax, eax
je 0x10165a34
nop dword [eax + eax]
mov ecx, dword [ecx + esi*4]
add ecx, edi
call fcn.10008550
mov edx, dword [ebp - 8]
cmp eax, 0xca67b978
mov eax, dword [edx + 0x14]
je 0x10165a31
mov ecx, dword [ebp - 0x64]
inc esi
cmp esi, eax
jb 0x10165a10
jmp 0x10165a34
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
cmp ecx, eax
jbe 0x10165a3f
xor eax, eax
jmp 0x10165a54
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
mov dword [0x102bb9b8], eax
push 0x40
push 0x3000
lea ecx, [ebp - 0x24]
push ecx
push 0
lea ecx, [ebp - 0x28]
push ecx
push 0xffffffffffffffff
call eax
mov eax, dword [0x102bb9a0]
mov ecx, dword [0x102bb99c]
sub eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [0x102b6298]
mov dword [ecx + 6], eax
push dword [ebp - 0x24]
push dword [0x102bb99c]
push dword [ebp - 0x28]
call fcn.101e3770
mov eax, dword [ebp - 0x28]
jmp 0x10165c0b
mov eax, dword [0x102bb9b4]
cmp eax, dword [esi + 4]
jle 0x10165b1c
push 0x102bb9b4
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb9b4], 0xffffffff
jne 0x10165b1c
lea eax, [ebp - 0x59]
mov dword [ebp - 0x58], 0xb8
push eax
lea edx, [ebp - 0x40]
mov dword [ebp - 0x54], 0x8dc93300
push edx
lea esi, [ebp - 0x58]
mov dword [ebp - 0x50], 0x64042454
push esi
mov ecx, 0x102bb9a8
mov dword [ebp - 0x4c], 0xc015ff
mov dword [ebp - 0x48], 0xc4830000
mov dword [ebp - 0x44], 0xc204
call fcn.1012dcd0
push 0x10211050
call fcn.101e2242
add esp, 4
push 0x102bb9b4
call fcn.101e236f
add esp, 4
mov eax, dword [0x102bb9ac]
sub eax, dword [0x102bb9a8]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x102bb9b8]
mov dword [ebp - 0x30], 0
test eax, eax
jne 0x10165bd9
mov ecx, 0xa62a3b3b
call fcn.1016fc50
mov edi, dword [eax + 4]
mov eax, 0x5a4d
cmp word [edi], ax
je 0x10165b59
xor eax, eax
jmp 0x10165bd4
mov eax, dword [edi + 0x3c]
cmp dword [eax + edi], 0x4550
je 0x10165b69
xor eax, eax
jmp 0x10165bd4
mov edx, dword [eax + edi + 0x78]
xor esi, esi
mov eax, dword [edx + edi + 0x14]
add edx, edi
mov dword [ebp - 0x28], edx
mov dword [ebp - 8], 0xffffffff
mov ecx, dword [edx + 0x20]
add ecx, edi
mov dword [ebp - 0x64], ecx
test eax, eax
je 0x10165bb4
nop dword [eax + eax]
mov ecx, dword [ecx + esi*4]
add ecx, edi
call fcn.10008550
mov edx, dword [ebp - 0x28]
cmp eax, 0xca67b978
mov eax, dword [edx + 0x14]
je 0x10165bb1
mov ecx, dword [ebp - 0x64]
inc esi
cmp esi, eax
jb 0x10165b90
jmp 0x10165bb4
mov dword [ebp - 8], esi
mov ecx, dword [ebp - 8]
cmp ecx, eax
jbe 0x10165bbf
xor eax, eax
jmp 0x10165bd4
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
mov dword [0x102bb9b8], eax
push 0x40
push 0x3000
lea ecx, [ebp - 0x2c]
push ecx
push 0
lea ecx, [ebp - 0x30]
push ecx
push 0xffffffffffffffff
call eax
mov eax, dword [0x102bb9ac]
mov ecx, dword [0x102bb9a8]
sub eax, ecx
push eax
push ecx
push dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
call fcn.101e3770
mov eax, dword [ebp - 0x30]
mov dword [0x102b6294], eax
add esp, 0xc
push 0x102bb974
mov dword [0x102bb96c], eax
call fcn.101e236f
mov esi, dword [ebp - 0x74]
add esp, 4
mov eax, dword [0x102bb970]
cmp eax, dword [esi + 4]
jle 0x10165c71
push 0x102bb970
call fcn.101e23b9
add esp, 4
cmp dword [0x102bb970], 0xffffffff
jne 0x10165c71
cmp dword [0x102bb980], 7
mov ecx, 0xd
mov eax, 0x16
cmovne eax, ecx
push 0x102bb970
mov dword [0x102bb968], eax
call fcn.101e236f
add esp, 4
mov edx, dword [0x102bb96c]
mov eax, dword [0x102bb978]
movzx ecx, word [0x102bb97c]
mov dword [edx + 1], eax
mov eax, dword [0x102bb968]
mov dword [eax + edx], ecx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x78]
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x6c]
push eax
push 0xffffffffffffffff
call edx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8