Function at 0x10064250
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x2c
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [0x100c3fc8]
xor eax, dword [0x100c3fcc]
and eax, 0xcc651621
add eax, 0xee9e3697
add eax, 0xcefcd2e3
xor eax, 0x36fc91ec
imul eax, eax, 0xed499844
or eax, 0xe317c2a4
mov ecx, 0xceed4937
xor edx, edx
div ecx
sub eax, 0xd6805fde
mov ecx, 0x1d17eb9b
xor edx, edx
div ecx
add eax, 0x5918f380
sub eax, 0x842b6e71
imul eax, eax, 0x66c26411
imul eax, eax, 0x26c990e
imul eax, eax, 0x82852871
xor eax, 0xc4fbf788
or eax, 0x5933577a
and eax, 0xf472f840
and eax, 0xc1bb3d81
add eax, 0xbb2cdfdb
sub eax, 0xd31a7a08
xor eax, 0x333aa64c
add eax, 0xebf2c3ee
imul eax, eax, 0x966e9a3b
or eax, 0xae2a2d97
mov ecx, 0x5e214fa
xor edx, edx
div ecx
imul eax, eax, 0x2d734eeb
xor eax, 0x89de204c
and eax, 0x8a0629a2
add eax, 0x2c42e782
imul eax, eax, 0x1162f66
mov ecx, 0xff804a32
xor edx, edx
div ecx
sub eax, 0xce132a
mov ecx, 0xf0cc9017
xor edx, edx
div ecx
mov ecx, 0x7a0c6e88
xor edx, edx
div ecx
add eax, 0xe15eb766
or eax, 0x4e6c03b3
sub eax, 0xd2ce8503
and eax, 0x6cd11906
imul eax, eax, 0xb0182d83
sub eax, 0x33973357
xor eax, 0x281fea29
mov ecx, 0xf1602e15
xor edx, edx
div ecx
add eax, 0x1b7d3721
add eax, 0x3fce463a
sub eax, 0xb226a0b7
sub eax, 0xb09d7cc8
or eax, 0xcc88ee55
xor eax, 0xa9653df3
or eax, 0x22be50e0
add eax, 0x87f9668b
or eax, 0xd22499f0
and eax, 0x68d0b2df
imul eax, eax, 0xed2a968d
xor eax, 0x6d96f2b1
add eax, 0x346ad905
xor eax, 0xea0e9196
or eax, 0xd9ae4046
or eax, 0xab3cedb1
imul eax, eax, 0x8cc34bf5
and eax, 0xc4e1ae3c
imul eax, eax, 0x8817217a
imul eax, eax, 0x6ea07491
or eax, 0xb83d273f
imul eax, eax, 0xfd7ba8da
and eax, 0x113e0718
and eax, 0x3b486472
xor eax, 0xcac65c93
or eax, 0x29d51ca7
imul eax, eax, 0x11449f3d
and eax, 0x8a296a8c
xor eax, 0x5b44b210
xor eax, 0x3d64471f
cmp eax, 0x5fb8f6cd
je 0x10064f55
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
mov eax, 0x88eb120f
push eax
mov edx, esp
mov dword [ebp - 0x2c], edx
push eax
mov ebx, esp
mov dword [ebp - 0x28], ebx
push eax
mov edx, esp
mov dword [ebp - 0x24], edx
push eax
mov edx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ecx], edi
mov dword [edx], esi
mov edx, dword [edx]
mov dword [ebp - 0x20], edx
cmp dword [ecx], 0
sete cl
mov byte [ebp - 0x19], cl
cmp eax, 0x85d210a7
jbe 0x10064f55
mov al, byte [ebp - 0x19]
test al, 1
jne 0x10064465
jmp 0x100647ed
mov eax, dword [0x100c3fd8]
or eax, dword [0x100c3fdc]
sub eax, 0xe133b329
or eax, 0xbd9045ce
imul eax, eax, 0x945a1fb9
and eax, 0x3eb306e0
imul eax, eax, 0x394a74e3
or eax, 0x1fb4a45
or eax, 0x7d00cbbf
imul eax, eax, 0xf54765fe
or eax, 0x3ab04aa8
or eax, 0x13c7d9ac
mov ecx, 0xe6120411
xor edx, edx
div ecx
and eax, 0x99c3156a
sub eax, 0xc7c3b0ca
or eax, 0xc2913bd7
mov ecx, 0xd425252a
xor edx, edx
div ecx
and eax, 0x42b79f92
sub eax, 0xb39d9015
imul eax, eax, 0x57009bb
or eax, 0x6b9af742
and eax, 0x4af56904
mov ecx, 0xbe59a3b2
xor edx, edx
div ecx
mov ecx, 0x3798be5d
xor edx, edx
div ecx
add eax, 0xc8fbedb5
and eax, 0x9c6b971b
or eax, 0xc49d1a8a
add eax, 0x3cf70b1e
or eax, 0xef574e76
and eax, 0xa54e60a3
sub eax, 0x2ca3aea5
imul eax, eax, 0x2abbedba
sub eax, 0xeb5ea1ed
xor eax, 0x4c938664
and eax, 0x4c7d5683
add eax, 0xed936696
xor eax, 0x17921a03
mov ecx, 0x9cd19c0f
xor edx, edx
div ecx
and eax, 0x210c663b
and eax, 0xd0eb2d07
and eax, 0xde4aade4
sub eax, 0xf7f6bff4
xor eax, 0x4b114691
imul eax, eax, 0x55888b71
and eax, 0xa12f98d3
xor eax, 0x55ffcbf6
xor eax, 0xcd551ea7
and eax, 0x1d3bf289
mov ecx, 0xed570a05
xor edx, edx
div ecx
sub eax, 0x2249910a
imul eax, eax, 0xbb6c00f4
imul eax, eax, 0x1650ee1c
and eax, 0x8bdc6934
or eax, 0xd46b120c
and eax, 0xf17ceee1
add eax, 0x7d5e41ad
xor eax, 0x5dabed10
and eax, 0x10097b94
or eax, 0x91bfdded
mov ecx, 0x9597210c
xor edx, edx
div ecx
add eax, 0x678c74b9
sub eax, 0x32e19d55
mov ecx, 0xfab781a6
xor edx, edx
div ecx
xor eax, 0xbabefe13
xor eax, 0x9c072616
or eax, 0x97d2ec92
or eax, 0x7c81df9d
sub eax, 0x5f235fd0
add eax, 0x1ca9a1ee
or eax, 0x9f2fd9a1
xor eax, 0x72c48598
or eax, 0x4667bf58
mov ecx, 0xd59b8c6f
xor edx, edx
div ecx
xor eax, 0xdb4a7e7d
cmp eax, 0x71c4a94
je 0x10064f73
mov ecx, dword [ebp - 0x20]
mov eax, dword [0x100c3fe0]
imul eax, dword [0x100c3fe4]
imul eax, eax, 0x3aa8bcbf
imul eax, eax, 0x580c0839
xor eax, 0xa993ea55
add eax, 0xe31ae88b
or eax, 0x8fb9e9e1
add eax, 0x2a7efcbe
xor eax, 0x9220e943
and eax, 0xae2ed891
add eax, 0x6e7250e6
add eax, 0x4ebe169d
xor eax, 0x4085a424
or eax, 0xe159118e
or eax, 0x6e1735cf
sub eax, 0x9c36b918
and eax, 0x838cb76a
or eax, 0x96c8ee66
imul eax, eax, 0xd120cd1f
mov esi, 0x50b0ce0f
xor edx, edx
div esi
imul eax, eax, 0xdd31ceb9
imul eax, eax, 0xbb039fbc
xor eax, 0x861b96e7
xor eax, 0xa921ad00
imul eax, eax, 0x63e74ffa
or eax, 0x2ff398e
sub eax, 0xd4f8cc51
or eax, 0x30c8786b
and eax, 0xf6456c4a
imul eax, eax, 0x5b2f121a
and eax, 0x7489ae62
sub eax, 0x679f8b6e
imul eax, eax, 0x8d0e362
imul eax, eax, 0x3ed87c0
and eax, 0x913b6684
mov esi, 0x499266f2
xor edx, edx
div esi
mov esi, 0xeba89f8e
xor edx, edx
div esi
xor eax, 0xa5420819
or eax, 0x4c18d778
sub eax, 0x8404dab6
add eax, 0x62f7851b
xor eax, 0xc106bc99
xor eax, 0x46730b51
xor eax, 0xe3f76533
and eax, 0xc78134e7
add eax, 0x16fde046
or eax, 0x874a9067
imul eax, eax, 0x34f30e16
mov esi, 0x532aa875
xor edx, edx
div esi
mov esi, 0xa374f29b
xor edx, edx
div esi
sub eax, 0x3b027575
add eax, 0x4d31af58
mov esi, 0x7ed5f6be
xor edx, edx
div esi
sub eax, 0xc2e95f90
add eax, 0xf1ccab41
imul eax, eax, 0x4c70c2c
xor eax, 0xc3c8cd0a
add eax, 0xbae95e61
mov esi, 0x5e26cd8a
xor edx, edx
div esi
and eax, 0x806b406f
sub eax, 0xd2c4dab
imul eax, eax, 0x50da0c93
mov esi, 0xe21972b1
xor edx, edx
div esi
add eax, 0xbfcdba83
sub eax, 0xb6019e3c
mov esi, 0xaf5de8a4
xor edx, edx
div esi
and eax, 0xb31e04c7
sub eax, 0xf9909f91
mov esi, 0x2c9634bc
xor edx, edx
div esi
mov edx, eax
mov eax, dword [ebp - 0x28]
xor edx, 0x1246d6f6
or edx, 0x7dde9fe4
imul edx, edx, 0x8c88ecdc
or edx, 0xbf70c3e1
sub edx, 0x7fdc5d01
mov dword [ebp - 0x30], edx
mov edx, dword [eax]
mov eax, dword [ecx]
sub esp, 4
mov dword [esp], edx
call dword [eax]
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov eax, dword [ebp - 0x30]
mov dword [ecx], edx
cmp eax, 0xb3ed78a
jb 0x1006460f
jmp 0x10064bcb
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0
jne 0x1006481a
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
mov eax, dword [ecx]
sub esp, 4
mov dword [esp], edx
call dword [eax + 4]
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
jmp 0x10064bcb
mov eax, dword [0x100c3fe8]
xor edx, edx
div dword [0x100c3fec]
or eax, 0xab7ddc2c
or eax, 0xf5cada3f
xor eax, 0x663f655d
xor eax, 0x36a21ecf
imul eax, eax, 0xdb34e05d
or eax, 0xb838c2d0
imul eax, eax, 0x1e4e2661
add eax, 0x7c43847e
or eax, 0x1dcb0f68
or eax, 0xa6ddcd7f
imul eax, eax, 0xdb450930
xor eax, 0x37dae6d9
or eax, 0xcbd251d9
add eax, 0x2854f9b
xor eax, 0xa293ad77
and eax, 0xcad5a663
add eax, 0x30ac7804
or eax, 0x2bb900b2
imul eax, eax, 0x7249893c
or eax, 0x14908406
and eax, 0x63e4a1ea
xor eax, 0x4104b404
and eax, 0xdbedef7
add eax, 0x298e9e0d
imul eax, eax, 0xf06e00ef
and eax, 0x4c297016
imul eax, eax, 0x607ed1e9
imul eax, eax, 0x7a69445c
mov ecx, 0x7026031f
xor edx, edx
div ecx
or eax, 0x97920d6a
mov ecx, 0x95c1bc49
xor edx, edx
div ecx
xor eax, 0x4f9d49f9
or eax, 0x82e05c6f
sub eax, 0xa93d7f1a
or eax, 0xd3e161a6
imul eax, eax, 0x850e50eb
sub eax, 0xbd400e6a
xor eax, 0xad743c8a
xor eax, 0x909d1c29
and eax, 0x86988a94
imul eax, eax, 0x9402ac3a
imul eax, eax, 0x76cebed1
sub eax, 0x7008fb92
imul eax, eax, 0x7c9f567d
add eax, 0xad11e5f
xor eax, 0xca8b433c
imul eax, eax, 0x34c7b342
and eax, 0xa0151d27
imul eax, eax, 0x9ac7d009
and eax, 0x4a61bd36
mov ecx, 0xcb2aeca9
xor edx, edx
div ecx
add eax, 0xdcc944e7
mov ecx, 0xe51f099e
xor edx, edx
div ecx
xor eax, 0xe330390b
add eax, 0xd80be8f5
add eax, 0x354abcb9
imul eax, eax, 0x9813f4c8
xor eax, 0x22313837
sub eax, 0x961bb5d6
or eax, 0x2a983518
or eax, 0x856046ce
mov ecx, 0x585ea73b
xor edx, edx
div ecx
imul eax, eax, 0x68102281
xor eax, 0x3deae189
mov ecx, 0x55c1e825
xor edx, edx
div ecx
mov ecx, 0x2920e778
xor edx, edx
div ecx
xor eax, 0x82317397
imul eax, eax, 0x4b90d8e1
or eax, 0x2b23fbf3
xor eax, 0x66be278b
and eax, 0x6114a3c3
mov ecx, 0x96241bf1
xor edx, edx
div ecx
cmp eax, 0xa5db5fc1
je 0x10064f91
mov ecx, dword [ebp - 0x24]
mov eax, dword [0x100c3ff0]
sub eax, dword [0x100c3ff4]
xor eax, 0x5dedbda1
xor eax, 0xb2167696
or eax, 0x9960a0b3
mov esi, 0xaff143fb
xor edx, edx
div esi
mov esi, 0x66373da5
xor edx, edx
div esi
add eax, 0x2d344eed
add eax, 0xe32a2bcc
mov esi, 0xe5815b35
xor edx, edx
div esi
add eax, 0xbedd7742
and eax, 0xe2b2d589
and eax, 0xa93477fd
mov esi, 0x855b950a
xor edx, edx
div esi
sub eax, 0x41743228
and eax, 0xf23131de
or eax, 0xaf28c53
imul eax, eax, 0x2d953f1c
and eax, 0xa73a66f2
sub eax, 0x8b740829
xor eax, 0x3c8f24d5
sub eax, 0x61a39575
and eax, 0xd7853f79
or eax, 0xa10a7d5d
sub eax, 0xce1d2146
add eax, 0x1ca7c606
mov esi, 0x6673c72b
xor edx, edx
div esi
and eax, 0x8d7b7feb
xor eax, 0x89b47688
mov esi, 0xe989aeb2
xor edx, edx
div esi
mov esi, 0x969d052
xor edx, edx
div esi
imul eax, eax, 0x3996580a
and eax, 0xa4682654
add eax, 0xdfe0be94
xor eax, 0x747fd60d
or eax, 0xe3c24f92
mov esi, 0xe7ffadce
xor edx, edx
div esi
or eax, 0xcb2b6b73
xor eax, 0x4220f47a
add eax, 0x7bc0bebe
and eax, 0xe2d565a6
or eax, 0xe4470e9
imul eax, eax, 0xcbac8ada
add eax, 0xd11d728f
or eax, 0xa7689750
or eax, 0x3ab83623
or eax, 0x69962deb
or eax, 0xe4e644af
imul eax, eax, 0xf00824ab
add eax, 0x88efa28d
mov esi, 0x85637c30
xor edx, edx
div esi
add eax, 0x34d27e35
and eax, 0x9703546d
xor eax, 0xadac5f83
imul eax, eax, 0x8d1f68de
mov esi, 0x5013a830
xor edx, edx
div esi
mov esi, 0xfd287c4b
xor edx, edx
div esi
xor eax, 0x87f94177
sub eax, 0x20d709fb
or eax, 0xa2492646
xor eax, 0x43d4bf96
and eax, 0xeb836ed7
mov esi, 0x1acc146f
xor edx, edx
div esi
mov esi, 0xa5e03a4f
xor edx, edx
div esi
sub eax, 0x11afd265
or eax, 0x4137e0bd
mov esi, 0x8ca8449c
xor edx, edx
div esi
or eax, 0xf832a06d
and eax, 0xacabd8d
xor eax, 0x19efe9bc
and eax, 0xa4de07c8
xor eax, 0x829f219e
and eax, 0x93faa0b7
mov esi, 0x73caa0c8
xor edx, edx
div esi
mov edx, dword [ebp - 0x20]
mov esi, eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], esi
mov eax, dword [eax]
mov ecx, dword [ecx]
mov edx, dword [edx + 4]
xor esi, esi
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov eax, dword [ebp - 0x34]
mov dword [ecx], edx
cmp eax, 0x80a2bbbc
ja 0x100649ca
jmp 0x10064bcb
mov eax, dword [0x100c3ff8]
add eax, dword [0x100c3ffc]
mov ecx, 0x4635be16
xor edx, edx
div ecx
sub eax, 0xac9bcb3e
mov ecx, 0xa9d3a717
xor edx, edx
div ecx
or eax, 0x90ec7d4f
imul eax, eax, 0xd046e1e
mov ecx, 0x6b21729f
xor edx, edx
div ecx
sub eax, 0x9e2c1540
and eax, 0x4b02e133
and eax, 0x2edc3bc8
add eax, 0x3f473e49
or eax, 0x83cfffc8
mov ecx, 0xba4e46c3
xor edx, edx
div ecx
sub eax, 0xe9518d42
sub eax, 0x8d00c032
mov ecx, 0x59b9776f
xor edx, edx
div ecx
or eax, 0x850025e5
imul eax, eax, 0x6dae2a9a
and eax, 0xb83e08b1
imul eax, eax, 0xe9acf31f
sub eax, 0x36525c83
sub eax, 0xe8a676eb
xor eax, 0xee90515d
sub eax, 0x731451e1
sub eax, 0x8d5d295b
and eax, 0x2e07c6d1
add eax, 0xe52d0097
and eax, 0x719a4b6d
sub eax, 0x14beeb5b
add eax, 0xb38303f2
mov ecx, 0xa4f42999
xor edx, edx
div ecx
mov ecx, 0x3b7a191a
xor edx, edx
div ecx
add eax, 0xe7687d64
xor eax, 0x2469c63f
or eax, 0xbe90c884
mov ecx, 0x20a87a55
xor edx, edx
div ecx
sub eax, 0xadb5c1eb
xor eax, 0x21101af5
add eax, 0xd0adfbd3
mov ecx, 0x98b35373
xor edx, edx
div ecx
sub eax, 0x459b55da
imul eax, eax, 0xbeb10ada
add eax, 0xaa98b051
sub eax, 0x7b5ac40e
mov ecx, 0xd1779071
xor edx, edx
div ecx
or eax, 0x523ef311
imul eax, eax, 0xccc0ad11
imul eax, eax, 0xd51a82ed
mov ecx, 0xe6a8e6ba
xor edx, edx
div ecx
add eax, 0xd81bf91f
add eax, 0x361bf680
or eax, 0xb41ffa1b
imul eax, eax, 0x9108a0f9
xor eax, 0x71b138da
mov ecx, 0xfb747338
xor edx, edx
div ecx
imul eax, eax, 0x9660c23f
imul eax, eax, 0xa94eecce
sub eax, 0x7952915f
mov ecx, 0xdeb3d6b6
xor edx, edx
div ecx
or eax, 0xf8f7f854
mov ecx, 0x7ba09a9b
xor edx, edx
div ecx
and eax, 0xed0f2913
and eax, 0x6e4806c
imul eax, eax, 0xa7446390
and eax, 0x43799495
imul eax, eax, 0x882d9264
sub eax, 0x6d99e828
and eax, 0x76873685
imul eax, eax, 0xb041bc24
or eax, 0xd04150fc
and eax, 0x79ee1b96
sub eax, 0x540c717d
xor eax, 0x9858aa53
cmp eax, 0x8dfca362
ja 0x10064fcb
mov ecx, dword [ebp - 0x2c]
mov eax, dword [0x100c4000]
add eax, dword [0x100c4004]
add eax, 0x24ee4d35
mov esi, 0xd62222
xor edx, edx
div esi
mov esi, 0x6a214b3c
xor edx, edx
div esi
or eax, 0xd94155d5
add eax, 0x24fbe319
sub eax, 0x3b7aec8e
sub eax, 0x65de37c6
mov esi, 0x87751dc3
xor edx, edx
div esi
sub eax, 0xd55dad22
add eax, 0x334a3dc7
imul eax, eax, 0x8e4a4d7e
mov esi, 0x7d3455b8
xor edx, edx
div esi
mov esi, 0xb3a084c0
xor edx, edx
div esi
and eax, 0xf92ac008
add eax, 0x1127637e
add eax, 0xf615a0d4
xor eax, 0x5b8098ff
imul eax, eax, 0x6e486784
add eax, 0xdeb841c8
xor eax, 0x858a06e1
imul eax, eax, 0x1b78c311
mov esi, 0x883b63bf
xor edx, edx
div esi
imul eax, eax, 0xa7ff44bb
mov esi, 0xed83235c
xor edx, edx
div esi
or eax, 0x11b32191
sub eax, 0xe48c0a4f
mov esi, 0x23a43257
xor edx, edx
div esi
imul eax, eax, 0x9b70e5ac
sub eax, 0x238a91b9
sub eax, 0x94d069d8
add eax, 0x4fe93e55
xor eax, 0x3859d52c
and eax, 0x6d576fdc
add eax, 0x7cd44e6f
and eax, 0xfdfcb12
or eax, 0x61d2b062
sub eax, 0xffb5ae1f
or eax, 0x14002501
add eax, 0x2aec88cd
sub eax, 0x8fcc1085
and eax, 0x6d787917
xor eax, 0xb0b17186
add eax, 0x21a15d9c
sub eax, 0x6cae7547
add eax, 0x457262e6
and eax, 0xbc04b3ff
or eax, 0xc5655fb0
add eax, 0xb5db024
and eax, 0x5c4b18cf
or eax, 0xf5ccdd90
sub eax, 0x3aeff1f
and eax, 0xdc82767c
mov esi, 0x5e69194e
xor edx, edx
div esi
sub eax, 0xd7ff7669
add eax, 0x4009aae0
and eax, 0xdf9aa897
and eax, 0xea402e73
mov esi, 0x91e186bd
xor edx, edx
div esi
sub eax, 0xa4c24b8f
xor eax, 0x23b3bcff
mov esi, 0x5be4fb00
xor edx, edx
div esi
sub eax, 0xc7a16fba
mov esi, 0xffb551eb
xor edx, edx
div esi
sub eax, 0x88cc2675
xor eax, 0x2ef9fe26
add eax, 0x62752aa1
and eax, 0x5d95141d
or eax, 0x50ffcc37
add eax, 0x8c3adc5
sub eax, 0xde4aade1
and eax, 0xdcadf21f
add eax, 0x4e840e93
mov ecx, dword [ecx]
mov dword [ebp - 0x38], ecx
cmp eax, 0xcb4a31c8
jbe 0x10064d8d
mov eax, dword [ebp - 0x38]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 8
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x14]
push eax
push eax
mov edi, esp
push eax
mov edx, esp
push eax
mov eax, esp
mov dword [edi], ebx
mov dword [edx], esi
mov dword [eax], ecx
jmp 0x10064410
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
mov eax, dword [ecx]
sub esp, 4
mov dword [esp], edx
call dword [eax]
mov ecx, eax
mov eax, dword [ebp - 0x2c]
mov dword [eax], ecx
jmp 0x1006460f
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov edx, dword [edx + 4]
xor esi, esi
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov ecx, eax
mov eax, dword [ebp - 0x2c]
mov dword [eax], ecx
jmp 0x100649ca
jmp 0x10064d8d