Function at 0x10a76ac
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push 0x164
mov eax, 0x11b2415
call fcn.010b1478
mov edi, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xcc], ecx
mov eax, dword [0x11f200c]
xor ebx, ebx
cmp eax, 0x11f200c
je 0x10a7701
test byte [eax + 0x5c], 0x10
je 0x10a7701
cmp ecx, ebx
jne 0x10a76ea
mov ecx, 0x1002a64
push dword [ebp + 0x10]
push ecx
push edi
push 0x1007ec4
push 0xb
push dword [eax + 0x54]
push dword [eax + 0x50]
call fcn.010a6af9
lea ecx, [ebp - 0xdc]
call fcn.01058ad3
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], ebx
mov dword [ebp - 0xd8], ebx
call fcn.010368a4
lea ecx, [ebp - 0xbc]
call fcn.010368a4
lea eax, [ebp - 0xbc]
push eax
push 0x66
push edi
mov byte [ebp - 4], 2
call fcn.0103afc1
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x25c
push edi
call fcn.0103afc1
push eax
call fcn.010a75fe
lea ecx, [ebp - 0x10c]
call fcn.01188d11
lea eax, [ebp - 0x10c]
push eax
mov byte [ebp - 4], 3
call fcn.01043503
test al, al
jne 0x10a77bd
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 2
call fcn.01041aaa
push ebx
push 1
lea ecx, [ebp - 0xbc]
call fcn.010362ea
push ebx
push 1
lea ecx, [ebp - 0xa0]
call fcn.010362ea
push dword [ebp - 0xdc]
or dword [ebp - 4], 0xffffffff
call dword [sym.imp.msvcrt.dll_void____cdecl___void____cdecl_set_terminate_void____cdecl___void__]
pop ecx
push 0xfffffffffffffffe
pop eax
call fcn.010b14e3
ret 0xc
call fcn.0103c736
push ebx
mov byte [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
cmp esi, ebx
jne 0x10a77e4
call fcn.011565b2
push ebx
push 0x1002f00
push eax
call fcn.011657a2
push 0x104
lea ecx, [ebp - 0xfc]
call fcn.0103a945
mov byte [ebp - 4], 5
cmp dword [ebp - 0xf8], ebx
jne 0x10a7804
xor eax, eax
jmp 0x10a7812
mov eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0xf8]
sar eax, 1
push eax
push dword [ebp - 0xf8]
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x10a7835
call fcn.011565b2
push ebx
push 0x1002f00
push eax
call fcn.011657a2
xor ebx, ebx
push ebx
push 8
pop esi
push esi
push dword [ebp - 0xf8]
call fcn.011675ec
mov dword [ebp - 0xd0], ebx
test eax, eax
je 0x10a7859
mov ebx, eax
mov dword [ebp - 0xd0], ebx
mov byte [ebp - 4], 6
mov dword [0x11fcf38], ebx
mov eax, dword [0x11f200c]
cmp eax, 0x11f200c
je 0x10a7887
test byte [eax + 0x5c], 8
je 0x10a7887
push 0x1007ec4
push 0xc
push dword [eax + 0x54]
push dword [eax + 0x50]
call fcn.01034b88
mov eax, dword [0x11f2714]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x12c]
push eax
push edi
mov dword [ebp - 0x12c], 0x1165c0b
mov dword [ebp - 0x128], 0x1165c2c
mov dword [ebp - 0x120], fcn.01158076
call fcn.0116528c
push 0x1f4
call fcn.01165cd1
push 4
lea eax, [ebp - 0x110]
push eax
push 0
mov dword [ebp - 0x110], 2
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [0x11f2710]
push 0
push 0x1002a64
call dword [0x11f270c]
call dword [0x11f2718]
lea ecx, [ebp - 0xe4]
call fcn.010a6f05
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0x11c]
push eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x11c], esi
mov dword [ebp - 0x118], 0xc416
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov edi, dword [ebp - 0xcc]
test edi, edi
je 0x10a7b56
mov esi, dword [sym.imp.msvcrt.dll_wcsstr]
push 0x1007fe8
push edi
call esi
pop ecx
pop ecx
test eax, eax
jne 0x10a796a
push 0x1007fd0
push edi
call esi
pop ecx
pop ecx
test eax, eax
je 0x10a7b56
and dword [ebp - 0xcc], 0
and dword [ebp - 0xc8], 0
push ebx
lea ecx, [ebp - 0x24]
call fcn.0104833b
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.010454c0
push 0x1007fbc
push edi
mov byte [ebp - 4], 0xa
call esi
pop ecx
pop ecx
test eax, eax
jne 0x10a7a4b
push 0x1007fa8
push edi
call esi
pop ecx
pop ecx
test eax, eax
jne 0x10a7a4b
push 0x1007f88
push edi
call esi
pop ecx
pop ecx
test eax, eax
jne 0x10a7a08
push 0x1007f68
push edi
call esi
pop ecx
pop ecx
test eax, eax
jne 0x10a7a08
mov eax, dword [0x11f200c]
mov edi, 0x11f200c
cmp eax, edi
je 0x10a7ae6
test dword [eax + 0x5c], 0x80000
je 0x10a7ae6
push 0x1007ec4
push 0xf
push dword [eax + 0x54]
push dword [eax + 0x50]
call fcn.01034b88
jmp 0x10a7ae1
push 1
call fcn.010ae221
lea eax, [ebp - 0xc8]
push eax
push 0
push 4
lea eax, [ebp - 0x40]
push eax
push 0x1007ea4
call dword [sym.imp.ole32.dll_CoRegisterClassObject]
mov esi, eax
mov eax, dword [0x11f200c]
mov edi, 0x11f200c
cmp eax, edi
je 0x10a7a9c
test dword [eax + 0x5c], 0x80000
je 0x10a7a9c
push 0x1007ec4
push 0xe
jmp 0x10a7a8c
push 2
call fcn.010ae221
lea eax, [ebp - 0xcc]
push eax
push 0
push 4
lea eax, [ebp - 0x24]
push eax
push 0x1007eb4
call dword [sym.imp.ole32.dll_CoRegisterClassObject]
mov esi, eax
mov eax, dword [0x11f200c]
mov edi, 0x11f200c
cmp eax, edi
je 0x10a7a9c
test dword [eax + 0x5c], 0x80000
je 0x10a7a9c
push 0x1007ec4
push 0xd
push dword [eax + 0x54]
push dword [eax + 0x50]
call fcn.01034b88
mov eax, dword [0x11f200c]
test esi, esi
jl 0x10a7ae6
push 0x3c
call fcn.010b0174
pop ecx
mov ecx, eax
mov dword [ebp - 0xe8], ecx
xor eax, eax
mov byte [ebp - 4], 0xb
cmp ecx, eax
je 0x10a7ac1
push eax
push ebx
call fcn.0106d0ea
push eax
push 0x11fc7d0
mov byte [ebp - 4], 0xa
call fcn.010a725e
mov ecx, dword [0x11fc7d4]
call fcn.0106d1a8
mov dword [ebp - 0xd8], eax
mov eax, dword [0x11f200c]
cmp dword [ebp - 0xcc], 0
je 0x10a7b00
push dword [ebp - 0xcc]
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
mov eax, dword [0x11f200c]
cmp dword [ebp - 0xc8], 0
je 0x10a7b1a
push dword [ebp - 0xc8]
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
mov eax, dword [0x11f200c]
cmp eax, edi
je 0x10a7b39
test dword [eax + 0x5c], 0x80000
je 0x10a7b39
push 0x1007ec4
push 0x10
push dword [eax + 0x54]
push dword [eax + 0x50]
call fcn.01034b88
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.0104542a
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 8
call fcn.01048304
jmp 0x10a82c3
push 0
call fcn.010ae221
push ebx
call fcn.010668e5
push ebx
call fcn.0113e00d
push ebx
call fcn.0106fe41
push ebx
call fcn.01056b71
push ebx
call fcn.010a6a66
lea ecx, [ebp - 0x4c]
call fcn.010368a4
lea ecx, [ebp - 0x84]
call fcn.010368a4
and dword [ebp - 0xcc], 0
push edi
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xd
mov byte [ebp - 0xc1], 0
mov byte [ebp - 0xc2], 0
call fcn.01038fe3
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xe
call fcn.0103cf9d
mov esi, dword [ebp - 0xc0]
push 0x20
pop edi
push 0x22
pop ebx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x68]
call fcn.01035f4a
cmp esi, dword [eax]
jae 0x10a80a9
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x68]
call fcn.01035f4a
cmp esi, dword [eax]
jae 0x10a7c02
cmp word [esi], di
jne 0x10a7c02
inc esi
inc esi
jmp 0x10a7be6
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x68]
call fcn.01035f4a
cmp esi, dword [eax]
jae 0x10a80a9
movzx eax, word [esi]
cmp ax, 0x2d
je 0x10a7cf8
cmp ax, 0x2f
je 0x10a7cf8
cmp ax, bx
je 0x10a7c81
cmp dword [ebp - 0x38], 0
jne 0x10a8006
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xc0], edi
call fcn.01035f4a
lea ecx, [ebp - 0xc0]
push ecx
push dword [eax]
lea eax, [ebp - 0x100]
push esi
push eax
call fcn.010a6fdd
push dword [ebp - 0x100]
mov eax, dword [eax]
push eax
push esi
lea ecx, [ebp - 0x4c]
call fcn.0103a742
jmp 0x10a8006
inc esi
inc esi
cmp dword [ebp - 0x38], 0
jne 0x10a7cc6
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xc0], ebx
call fcn.01035f4a
lea ecx, [ebp - 0xc0]
push ecx
push dword [eax]
lea eax, [ebp - 0x114]
push esi
push eax
call fcn.010a6fdd
push dword [ebp - 0x114]
mov eax, dword [eax]
push eax
push esi
lea ecx, [ebp - 0x4c]
call fcn.0103a742
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xc0], ebx
call fcn.01035f4a
lea ecx, [ebp - 0xc0]
push ecx
push dword [eax]
lea eax, [ebp - 0x134]
push esi
push eax
call fcn.010a6fdd
mov esi, dword [eax]
jmp 0x10a8006
lea eax, [ebp - 0x130]
inc esi
push eax
lea ecx, [ebp - 0x68]
inc esi
mov dword [ebp - 0xc0], edi
call fcn.01035f4a
lea ecx, [ebp - 0xc0]
push ecx
push dword [eax]
lea eax, [ebp - 0x144]
push esi
push eax
call fcn.010a6fdd
push dword [eax]
lea ecx, [ebp - 0x30]
push esi
call fcn.010a71e5
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xf
call fcn.0103cf9d
mov edi, eax
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x30]
call fcn.01035f4a
mov ebx, eax
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x30]
call fcn.0103cf9d
push dword [sym.imp.msvcrt.dll_towlower]
push dword [edi]
push dword [ebx]
push dword [eax]
lea eax, [ebp - 0x164]
push eax
call fcn.010a700d
mov eax, dword [0x11f200c]
cmp eax, 0x11f200c
je 0x10a7db1
test byte [eax + 0x5c], 8
je 0x10a7db1
cmp dword [ebp - 0x18], 8
mov ecx, dword [ebp - 0x2c]
jae 0x10a7d9b
lea ecx, [ebp - 0x2c]
push ecx
mov ebx, 0x1007ec4
push ebx
push 0x11
push dword [eax + 0x54]
push dword [eax + 0x50]
call fcn.0103ca73
jmp 0x10a7db6
mov ebx, 0x1007ec4
push 0x1007f64
lea ecx, [ebp - 0x30]
call fcn.0104963b
xor edi, edi
cmp eax, edi
jne 0x10a7dd5
mov byte [ebp - 0xc1], 1
jmp 0x10a7ff1
push 0x1007f5c
lea ecx, [ebp - 0x30]
call fcn.0104963b
cmp eax, edi
jne 0x10a7df5
mov dword [ebp - 0xcc], 1
jmp 0x10a7ff1
push 0x1007f54
lea ecx, [ebp - 0x30]
call fcn.0104963b
cmp eax, edi
jne 0x10a7e15
mov dword [ebp - 0xcc], 2
jmp 0x10a7ff1
push 0x1007f4c
lea ecx, [ebp - 0x30]
call fcn.0104963b
cmp eax, edi
jne 0x10a7e35
mov dword [ebp - 0xcc], 3
jmp 0x10a7ff1
push 0x1007f48
lea ecx, [ebp - 0x30]
call fcn.0104963b
cmp eax, edi
jne 0x10a7f04
push dword [ebp - 0xc8]
push 0x162
push 0x15f
push 0x15e
call fcn.010a753f
xor esi, esi
push edi
inc esi
push esi
lea ecx, [ebp - 0x30]
call fcn.010362ea
push edi
push esi
lea ecx, [ebp - 0x68]
call fcn.010362ea
push edi
push esi
lea ecx, [ebp - 0x84]
call fcn.010362ea
push edi
push esi
lea ecx, [ebp - 0x4c]
call fcn.010362ea
cmp dword [ebp - 0xe0], edi
jl 0x10a7ea0
call dword [sym.imp.ole32.dll_CoUninitialize]
push dword [ebp - 0xe4]
call sub.gdiplus.dll_GdiplusShutdown
lea eax, [ebp - 0xd0]
push eax
call fcn.010a704c
lea ecx, [ebp - 0xfc]
call fcn.0112c1e2
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 2
call fcn.01041aaa
push edi
push esi
lea ecx, [ebp - 0xbc]
call fcn.010362ea
push edi
push esi
lea ecx, [ebp - 0xa0]
call fcn.010362ea
push dword [ebp - 0xdc]
or dword [ebp - 4], 0xffffffff
call dword [sym.imp.msvcrt.dll_void____cdecl___void____cdecl_set_terminate_void____cdecl___void__]
pop ecx
or eax, 0xffffffff
jmp 0x10a77b5
cmp dword [ebp - 0x1c], 2
jbe 0x10a8038
push edi
lea ecx, [ebp - 0x30]
call fcn.0106d7bf
cmp word [eax], 0x6f
jne 0x10a8038
push 1
lea ecx, [ebp - 0x30]
call fcn.0106d7bf
cmp word [eax], 0x3a
jne 0x10a8038
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x30]
call fcn.0103cf9d
mov edi, dword [eax]
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x30]
add edi, 4
call fcn.01035f4a
push dword [ebp - 0xec]
mov eax, dword [eax]
push eax
push edi
lea ecx, [ebp - 0x84]
call fcn.0103a742
cmp dword [ebp - 0x70], 2
jbe 0x10a7fe4
push 0
lea ecx, [ebp - 0x84]
call fcn.0106d7bf
mov edi, eax
mov eax, dword [ebp - 0x70]
dec eax
push eax
lea ecx, [ebp - 0x84]
call fcn.0106d7bf
push 0x22
pop ebx
cmp word [edi], bx
jne 0x10a7fe4
cmp word [eax], bx
jne 0x10a7fe4
push dword [ebp - 0xec]
add edi, 2
push eax
push edi
lea ecx, [ebp - 0x84]
call fcn.0103a705
lea eax, [ebp - 0x160]
inc esi
push eax
lea ecx, [ebp - 0x68]
inc esi
mov dword [ebp - 0xc0], ebx
call fcn.01035f4a
lea ecx, [ebp - 0xc0]
push ecx
push dword [eax]
lea eax, [ebp - 0x140]
push esi
push eax
call fcn.010a6fdd
mov esi, dword [eax]
cmp dword [ebp - 0x70], 0
setne byte [ebp - 0xc2]
xor edi, edi
push edi
push 1
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xe
call fcn.010362ea
push 0x20
pop edi
push 0x22
pop ebx
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xc0], edi
call fcn.01035f4a
lea ecx, [ebp - 0xc0]
push ecx
push dword [eax]
lea eax, [ebp - 0xd4]
push esi
push eax
call fcn.010a6fdd
mov esi, dword [eax]
jmp 0x10a7bcf
mov eax, dword [0x11f200c]
cmp eax, 0x11f200c
je 0x10a8065
test byte [eax + 0x5c], 0x10
je 0x10a8065
cmp dword [ebp - 0x18], 8
mov ecx, dword [ebp - 0x2c]
jae 0x10a8056
lea ecx, [ebp - 0x2c]
push ecx
push ebx
push 0x12
push dword [eax + 0x54]
push dword [eax + 0x50]
call fcn.0103ca73
push dword [ebp - 0xc8]
push 0x66
push 0x161
push 0x160
call fcn.010a753f
mov eax, dword [0x11f200c]
cmp eax, 0x11f200c
je 0x10a7e64
test byte [eax + 0x5c], 0x10
je 0x10a7e64
push ebx
push 0x13
push dword [eax + 0x54]
push dword [eax + 0x50]
call fcn.01034b88
jmp 0x10a7e64
push 0x88
call fcn.010b0174
pop ecx
mov ecx, eax
mov dword [ebp - 0xd4], ecx
xor ebx, ebx
mov byte [ebp - 4], 0x10
cmp ecx, ebx
je 0x10a80cf
call fcn.01047ab9
mov edi, eax
jmp 0x10a80d1
xor edi, edi
push 0x3c
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xe8], edi
call fcn.010b0174
pop ecx
mov ecx, eax
mov dword [ebp - 0xd4], ecx
mov byte [ebp - 4], 0x11
cmp ecx, ebx
je 0x10a8103
push edi
push dword [ebp - 0xd0]
call fcn.0106d0ea
mov esi, eax
jmp 0x10a8105
xor esi, esi
push 0x9fc
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xc8], esi
call fcn.010b0174
pop ecx
mov ecx, eax
mov dword [ebp - 0xd4], ecx
mov byte [ebp - 4], 0x12
cmp ecx, ebx
je 0x10a8144
push dword [ebp - 0xcc]
push edi
push esi
push dword [ebp + 0x10]
push dword [ebp - 0xd0]
call fcn.0106505a
mov esi, eax
jmp 0x10a8146
xor esi, esi
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xc0], esi
cmp dword [ebp - 0x38], ebx
je 0x10a825c
cmp dword [ebp - 0x34], 8
mov eax, dword [ebp - 0x48]
jae 0x10a8165
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x10a818e
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0x13
call fcn.010a73a8
lea eax, [ebp - 0x4c]
push eax
call fcn.010a7470
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x38], ebx
je 0x10a825c
lea eax, [ebp - 0x4c]
push eax
mov ecx, esi
call fcn.0106466a
test al, al
je 0x10a8237
cmp byte [ebp - 0xc1], 0
je 0x10a81bd
mov ecx, 0x11fc9e0
call fcn.01035376
cmp byte [ebp - 0xc2], 0
je 0x10a8237
mov esi, dword [sym.imp.WINMM.dll_timeGetTime]
call esi
mov edi, eax
call esi
sub eax, edi
cmp eax, 0xbb8
jae 0x10a8216
mov ecx, dword [ebp - 0xc8]
push ebx
call fcn.0106ce06
jmp 0x10a81d0
sub esp, 0x1c
lea eax, [ebp - 0x84]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.01038630
mov ecx, 0x11fca28
call fcn.010a7217
cmp dword [ebp - 0x38], ebx
je 0x10a825c
cmp byte [ebp - 0xc1], 0
jne 0x10a824e
cmp byte [ebp - 0xc2], 0
je 0x10a825c
mov ecx, dword [0x11fca90]
call dword [0x11fca94]
jmp 0x10a826d
mov ecx, dword [ebp - 0xc8]
call fcn.0106d1a8
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xc0]
cmp ecx, ebx
je 0x10a827d
mov eax, dword [ecx]
push 1
call dword [eax]
mov ecx, dword [ebp - 0xc8]
cmp ecx, ebx
je 0x10a828e
push 1
call fcn.010a6dd1
mov ecx, dword [ebp - 0xe8]
cmp ecx, ebx
je 0x10a829f
push 1
call fcn.010a71bf
push ebx
push 1
lea ecx, [ebp - 0x68]
call fcn.010362ea
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.010362ea
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.010362ea
xor esi, esi
cmp dword [ebp - 0xe0], esi
jl 0x10a82d3
call dword [sym.imp.ole32.dll_CoUninitialize]
push dword [ebp - 0xe4]
call sub.gdiplus.dll_GdiplusShutdown
lea eax, [ebp - 0xd0]
push eax
call fcn.010a704c
lea ecx, [ebp - 0xfc]
call fcn.0112c1e2
mov dword [ebp - 4], 3
mov eax, dword [0x11f200c]
cmp eax, 0x11f200c
je 0x10a8326
test byte [eax + 0x5c], 0x10
je 0x10a8326
push dword [ebp - 0xd8]
push 0x1007ec4
push 0x14
push dword [eax + 0x54]
push dword [eax + 0x50]
call fcn.01034bae
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 2
call fcn.01041aaa
push esi
push 1
lea ecx, [ebp - 0xbc]
call fcn.010362ea
push esi
push 1
lea ecx, [ebp - 0xa0]
call fcn.010362ea
push dword [ebp - 0xdc]
or dword [ebp - 4], 0xffffffff
call dword [sym.imp.msvcrt.dll_void____cdecl___void____cdecl_set_terminate_void____cdecl___void__]
mov eax, dword [ebp - 0xd8]
pop ecx
jmp 0x10a77b5