Function at 0x100b09c0
Capabilities:
Read file via mapping
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x100c8277
mov eax, dword fs:[0]
push eax
sub esp, 0x2f4
mov eax, dword [0x100ef07c]
xor eax, esp
mov dword [esp + 0x2f0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x100ef07c]
xor eax, esp
push eax
lea eax, [esp + 0x308]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, edx
xor esi, esi
lea ecx, [esp + 0x78]
mov dword [esp + 0x64], edi
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x80], esi
call dword [0x100ca800]
lea ecx, [esp + 0x54]
mov dword [esp + 0x310], esi
call dword [0x100ca800]
lea ecx, [esp + 0x5c]
call dword [0x100ca800]
mov byte [esp + 0x310], 2
mov eax, dword [ebx + 0x34]
cmp dword [eax - 0xc], esi
jne 0x100b0a81
mov ecx, dword [edi + 0x7c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x14]
lea eax, [esp + 0x78]
push eax
lea eax, [ebx + 4]
push eax
call edx
test eax, eax
jne 0x100b0a81
lea ecx, [esp + 0x5c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x78]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
xor eax, eax
jmp 0x100b1d5e
lea ecx, [esp + 0x194]
call sub.mfc90u.dll_CFile::CFile
lea eax, [esp + 0x2e0]
push eax
mov byte [esp + 0x314], 3
call fcn.100bfb70
push esi
mov byte [esp + 0x314], 4
mov eax, dword [ebx + 4]
push 0x20
push eax
lea ecx, [esp + 0x1a0]
call sub.mfc90u.dll_CFile::Open
test eax, eax
je 0x100b1d11
lea ecx, [esp + 0x194]
call sub.mfc90u.dll_CFile::GetLength
mov edi, eax
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], edx
cmp edx, esi
ja 0x100b1d05
jb 0x100b0af7
cmp edi, 0x25800000
jae 0x100b1d05
mov ecx, dword [esp + 0x198]
push esi
push esi
push esi
push 0x8000002
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov ebp, eax
mov dword [esp + 0x8c], ebp
cmp ebp, esi
je 0x100b1cfe
push edi
push esi
push esi
push 4
push ebp
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [esp + 0x7c], eax
cmp eax, esi
je 0x100b1cfe
and dword [esp + 0x44], 0xfffffe00
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x48], esi
xor ebp, ebp
mov dword [esp + 0x268], 0x8003
mov dword [esp + 0x26c], ebp
mov dword [esp + method.CHash.virtual_0], vtable.CMD5Hash.0
lea edx, [esp + 0x1a4]
push edx
mov ecx, edi
mov edx, eax
mov byte [esp + 0x314], 7
call fcn.1000f300
test eax, eax
je 0x100b1432
push 0x100ccd58
lea edi, [esp + 0x1f8]
lea ecx, [esp + 0x1a8]
call fcn.1000f8d0
mov ebx, 8
push 0x100e094c
lea edi, [esp + 0x230]
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x314], bl
call fcn.1000f8d0
push 0x100e096c
lea edi, [esp + 0x214]
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x314], 9
call fcn.1000f8d0
push 0x100cbe84
lea edi, [esp + 0x24c]
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x314], 0xa
call fcn.1000f8d0
push 0x8003
lea ecx, [esp + 0x268]
mov byte [esp + 0x314], 0xb
call fcn.10021150
mov eax, dword [esp + 0x208]
cmp eax, esi
je 0x100b0c51
mov ecx, dword [esp + 0x1f8]
cmp dword [esp + 0x20c], ebx
jae 0x100b0c41
lea ecx, [esp + 0x1f8]
add eax, eax
push eax
push ecx
lea ecx, [esp + 0x26c]
call fcn.10021180
mov ecx, dword [esp + 0x240]
cmp ecx, esi
je 0x100b0c83
mov eax, dword [esp + 0x230]
cmp dword [esp + 0x244], ebx
jae 0x100b0c73
lea eax, [esp + 0x230]
add ecx, ecx
push ecx
push eax
lea ecx, [esp + 0x26c]
call fcn.10021180
mov ecx, dword [esp + 0x224]
cmp ecx, esi
je 0x100b0cb6
mov eax, dword [esp + 0x214]
cmp dword [esp + 0x228], ebx
jae 0x100b0ca5
lea eax, [esp + 0x214]
lea edx, [ecx + ecx]
push edx
push eax
lea ecx, [esp + 0x26c]
call fcn.10021180
mov ecx, dword [esp + 0x25c]
cmp ecx, esi
je 0x100b0ce8
mov eax, dword [esp + 0x24c]
cmp dword [esp + 0x260], ebx
jae 0x100b0cd8
lea eax, [esp + 0x24c]
add ecx, ecx
push ecx
push eax
lea ecx, [esp + 0x26c]
call fcn.10021180
lea esi, [esp + 0x270]
lea ebx, [esp + 0x2c8]
call fcn.10021ac0
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0x268]
call fcn.100211b0
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x94]
push 0xfde9
mov dword [esp + 0x94], eax
push ecx
lea eax, [esp + 0x98]
call fcn.100a8e10
mov byte [esp + 0x310], 0xc
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov edx, esi
push edx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0xd
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0xc
call fcn.100bcb30
mov byte [esp + 0x310], 0xb
mov eax, dword [esp + 0x90]
mov edi, dword [sym.imp.MSVCR90.dll_free]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b0d91
push eax
call edi
add esp, 4
cmp dword [esp + 0x20c], 8
mov eax, dword [esp + 0x1f8]
jae 0x100b0da9
lea eax, [esp + 0x1f8]
push 0xfde9
lea edx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], edx
call fcn.100a8e10
mov byte [esp + 0x310], 0xe
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov eax, esi
push eax
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0xf
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0xe
call fcn.100bcb30
mov byte [esp + 0x310], 0xb
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b0e24
push eax
call edi
add esp, 4
cmp dword [esp + 0x244], 8
mov eax, dword [esp + 0x230]
jae 0x100b0e3c
lea eax, [esp + 0x230]
push 0xfde9
lea edx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], edx
call fcn.100a8e10
mov byte [esp + 0x310], 0x10
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov eax, esi
push eax
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x11
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x10
call fcn.100bcb30
mov byte [esp + 0x310], 0xb
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b0eb7
push eax
call edi
add esp, 4
cmp dword [esp + 0x228], 8
mov eax, dword [esp + 0x214]
jae 0x100b0ecf
lea eax, [esp + 0x214]
push 0xfde9
lea edx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], edx
call fcn.100a8e10
mov byte [esp + 0x310], 0x12
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov eax, esi
push eax
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x13
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x12
call fcn.100bcb30
mov byte [esp + 0x310], 0xb
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b0f4a
push eax
call edi
add esp, 4
cmp dword [esp + 0x260], 8
mov eax, dword [esp + 0x24c]
jae 0x100b0f62
lea eax, [esp + 0x24c]
push 0xfde9
lea edx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], edx
call fcn.100a8e10
mov byte [esp + 0x310], 0x14
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov eax, esi
push eax
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x15
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x14
call fcn.100bcb30
mov bl, 0xb
mov byte [esp + 0x310], bl
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b0fde
push eax
call edi
add esp, 4
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2e8]
call fcn.100bfbd0
mov byte [esp + 0x310], 0x16
cmp dword [eax + 0x18], 0x10
jb 0x100b1007
mov eax, dword [eax + 4]
jmp 0x100b100a
add eax, 4
push 0xfde9
lea ecx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], ecx
call fcn.1000d380
mov byte [esp + 0x310], 0x17
mov ebp, dword [esp + 0x64]
mov ecx, dword [ebp + 0x7c]
mov eax, dword [esp + 0x90]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
push eax
push str.pe_version
call edx
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b1065
push eax
call edi
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x310], bl
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0x38]
call dword [0x100ca800]
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x74]
push ecx
lea eax, [esp + 0x1b0]
mov byte [esp + 0x31c], 0x18
call fcn.1000faa0
test eax, eax
je 0x100b13c7
lea edx, [esp + 0x1a4]
push edx
lea ecx, [esp + 0x3c]
call fcn.1000faf0
push 0x8003
lea ecx, [esp + 0x268]
call fcn.10021150
lea eax, [esp + 0x6c]
push 2
push eax
lea eax, [esp + 0x278]
call fcn.100219c0
lea ecx, [esp + 0x68]
push 2
push ecx
lea eax, [esp + 0x280]
call fcn.100219c0
lea edx, [esp + 0x68]
push 2
push edx
lea eax, [esp + 0x288]
call fcn.100219c0
mov ecx, dword [esp + 0x50]
mov eax, dword [ecx - 0xc]
xor edi, edi
add esp, 0x18
cmp eax, edi
je 0x100b1126
add eax, eax
push eax
push ecx
lea ecx, [esp + 0x26c]
call fcn.10021180
lea esi, [esp + 0x270]
lea ebx, [esp + 0x2c8]
call fcn.10021ac0
lea ecx, [esp + 0x5c]
push ecx
lea ecx, [esp + 0x268]
call fcn.100211b0
lea eax, [esp + 0x3c]
call fcn.100bd210
mov eax, dword [esp + 0x5c]
push 0xfde9
lea edx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], edx
call fcn.100a8e10
mov byte [esp + 0x310], 0x19
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov ecx, esi
push ecx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x1a
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x19
call fcn.100bcb30
mov eax, dword [esp + 0x90]
lea edx, [esp + 0x94]
cmp eax, edx
je 0x100b11ce
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
movzx eax, word [esp + 0x6c]
mov ecx, dword [esp + 0x1c]
and ecx, 0xffffff01
cdq
or ecx, 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x1b
call fcn.100bd6f0
mov bl, 0x18
lea eax, [esp + 0x14]
mov byte [esp + 0x310], bl
call fcn.100bcb30
movzx eax, word [esp + 0x60]
mov ecx, dword [esp + 0x1c]
and ecx, 0xffffff01
cdq
or ecx, 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x1c
call fcn.100bd6f0
lea eax, [esp + 0x14]
mov byte [esp + 0x310], bl
call fcn.100bcb30
movzx eax, word [esp + 0x58]
mov ecx, dword [esp + 0x1c]
and ecx, 0xffffff01
cdq
or ecx, 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x1d
call fcn.100bd6f0
lea eax, [esp + 0x14]
mov byte [esp + 0x310], bl
call fcn.100bcb30
mov ecx, dword [esp + 0x38]
lea eax, [esp + 0x94]
push 0xfde9
mov dword [esp + 0x94], eax
push ecx
lea eax, [esp + 0x98]
call fcn.100a8e10
mov byte [esp + 0x310], 0x1e
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov edx, esi
push edx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x1f
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x1e
call fcn.100bcb30
mov bl, 0x18
mov byte [esp + 0x310], bl
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b132f
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2e8]
call fcn.100bfbd0
mov byte [esp + 0x310], 0x20
cmp dword [eax + 0x18], 0x10
jb 0x100b1358
mov eax, dword [eax + 4]
jmp 0x100b135b
add eax, 4
push 0xfde9
lea ecx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], ecx
call fcn.1000d380
mov byte [esp + 0x310], 0x21
mov ecx, dword [ebp + 0x7c]
mov eax, dword [esp + 0x90]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
push eax
push str.pe_head_info
call edx
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b13b6
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x310], bl
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0x38]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x248]
mov byte [esp + 0x310], 0xa
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x210]
mov byte [esp + 0x310], 9
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x22c]
mov byte [esp + 0x310], 8
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x310], 7
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov ebp, dword [esp + 0x26c]
mov ebx, dword [esp + 0x4c]
xor esi, esi
lea ecx, [esp + 0x68]
call dword [0x100ca800]
lea ecx, [esp + 0x74]
call dword [0x100ca800]
mov byte [esp + 0x310], 0x23
mov edx, dword [ebx + 0x38]
lea edi, [ebx + 0x38]
cmp dword [edx - 0xc], esi
jne 0x100b1557
lea eax, [esp + 0x1a4]
push eax
call fcn.10097370
mov bl, 0x24
push 0x8003
lea eax, [esp + 0x1a8]
mov byte [esp + 0x314], bl
call fcn.10097720
push 0x800c
lea eax, [esp + 0x1a8]
call fcn.10097720
lea eax, [esp + 0x1a4]
call fcn.100974e0
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x7c]
push ecx
push edx
lea eax, [esp + 0x1ac]
push eax
call fcn.100975c0
lea ecx, [esp + 0x1a4]
push ecx
call fcn.10097670
push 0x8003
lea edx, [esp + 0x3c]
push edx
lea esi, [esp + 0x1ac]
call fcn.10097740
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x314], 0x25
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
push eax
mov ecx, edi
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
lea ecx, [esp + 0x38]
mov byte [esp + 0x310], bl
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 0x800c
lea eax, [esp + 0x3c]
push eax
call fcn.10097740
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x314], 0x26
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
mov ecx, dword [esp + 0x4c]
push eax
add ecx, 0x3c
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
lea ecx, [esp + 0x38]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ecx, esi
push ecx
mov byte [esp + 0x314], 0x23
call fcn.100973d0
jmp 0x100b1570
push edi
lea ecx, [esp + 0x6c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
add ebx, 0x3c
push ebx
lea ecx, [esp + 0x78]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
lea eax, [esp + 0x3c]
call fcn.100bd210
mov eax, dword [esp + 0x68]
push 0xfde9
lea edx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], edx
call fcn.100a8e10
mov byte [esp + 0x310], 0x27
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov ecx, esi
push ecx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x28
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x27
call fcn.100bcb30
mov eax, dword [esp + 0x90]
mov edi, dword [sym.imp.MSVCR90.dll_free]
lea edx, [esp + 0x94]
cmp eax, edx
je 0x100b15f6
push eax
call edi
add esp, 4
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
and eax, 0xffffff02
or eax, 2
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], 0
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x29
call fcn.100bd6f0
lea eax, [esp + 0x14]
mov byte [esp + 0x310], 0x23
call fcn.100bcb30
mov edx, dword [esp + 0x5c]
push 0xfde9
lea ecx, [esp + 0x98]
push edx
lea eax, [esp + 0x98]
mov dword [esp + 0x98], ecx
call fcn.100a8e10
mov byte [esp + 0x310], 0x2a
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov eax, esi
push eax
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x2b
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x2a
call fcn.100bcb30
mov byte [esp + 0x310], 0x23
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b16ca
push eax
call edi
add esp, 4
mov eax, dword [esp + 0x54]
push 0xfde9
lea edx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], edx
call fcn.100a8e10
mov byte [esp + 0x310], 0x2c
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov ecx, esi
push ecx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x2d
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x2c
call fcn.100bcb30
mov byte [esp + 0x310], 0x23
mov eax, dword [esp + 0x90]
lea edx, [esp + 0x94]
cmp eax, edx
je 0x100b1749
push eax
call edi
add esp, 4
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0x94]
push 0xfde9
mov dword [esp + 0x94], eax
push ecx
lea eax, [esp + 0x98]
call fcn.100a8e10
mov byte [esp + 0x310], 0x2e
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov edx, esi
push edx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x2f
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x2e
call fcn.100bcb30
mov bl, 0x23
mov byte [esp + 0x310], bl
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b17c9
push eax
call edi
add esp, 4
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x1f8]
push eax
lea ecx, [esp + 0x2e8]
call fcn.100bfbd0
mov byte [esp + 0x310], 0x30
cmp dword [eax + 0x18], 0x10
jb 0x100b17f5
mov eax, dword [eax + 4]
jmp 0x100b17f8
add eax, 4
push 0xfde9
lea ecx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], ecx
call fcn.1000d380
mov byte [esp + 0x310], 0x31
mov edi, dword [esp + 0x64]
mov ecx, dword [edi + 0x7c]
mov eax, dword [esp + 0x90]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
push eax
push str.pe_info
call edx
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b1857
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x310], bl
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0x50]
call dword [0x100ca800]
mov byte [esp + 0x310], 0x32
mov ebx, dword [esp + 0x4c]
mov edx, dword [ebx + 0x34]
cmp dword [edx - 0xc], 0
lea esi, [ebx + 0x34]
jne 0x100b18b6
mov ecx, dword [edi + 0x7c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
lea edx, [esp + 0x50]
push edx
lea edx, [ebx + 8]
push edx
lea edx, [esp + 0x80]
push edx
lea edx, [esp + 0x74]
push edx
call eax
lea ecx, [esp + 0x50]
push ecx
mov ecx, esi
jmp 0x100b18bb
push esi
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
mov edx, dword [ebx]
push edx
lea eax, [esp + 0x74]
push eax
mov ecx, edi
call fcn.100b01a0
mov byte [esp + 0x310], 0x33
mov ecx, dword [esp + 0x70]
cmp dword [ecx - 0xc], 0
je 0x100b1c9c
lea eax, [esp + 0x3c]
call fcn.100bd210
push 0x8003
lea ecx, [esp + 0x268]
mov dword [esp + 0x68], 1
mov dword [esp + 0x3c], 0
call fcn.10021150
mov ecx, dword [esp + 0x70]
mov eax, dword [ecx - 0xc]
test eax, eax
je 0x100b192c
lea edx, [eax + eax]
push edx
push ecx
lea ecx, [esp + 0x26c]
call fcn.10021180
lea eax, [esp + 0x64]
push 4
push eax
lea eax, [esp + 0x278]
call fcn.100219c0
lea ecx, [esp + 0x40]
push 4
push ecx
lea eax, [esp + 0x280]
call fcn.100219c0
mov eax, dword [esp + 0x60]
mov ecx, dword [eax - 0xc]
add esp, 0x10
lea edx, [ecx + ecx]
push edx
push eax
lea ecx, [esp + 0x26c]
call fcn.10021180
lea esi, [esp + 0x270]
lea ebx, [esp + 0x2c8]
call fcn.10021ac0
lea ecx, [esp + 0x4c]
call dword [0x100ca800]
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x268]
mov byte [esp + 0x314], 0x34
call fcn.100211b0
mov edx, dword [esp + 0x4c]
push 0xfde9
lea ecx, [esp + 0x98]
push edx
lea eax, [esp + 0x98]
mov dword [esp + 0x98], ecx
call fcn.100a8e10
mov byte [esp + 0x310], 0x35
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov eax, esi
push eax
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x36
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x35
call fcn.100bcb30
mov byte [esp + 0x310], 0x34
mov eax, dword [esp + 0x90]
mov ebp, dword [sym.imp.MSVCR90.dll_free]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b1a28
push eax
call ebp
add esp, 4
mov eax, dword [esp + 0x70]
push 0xfde9
lea edx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], edx
call fcn.100a8e10
mov byte [esp + 0x310], 0x37
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov ecx, esi
push ecx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x38
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x37
call fcn.100bcb30
mov eax, dword [esp + 0x90]
lea edx, [esp + 0x94]
cmp eax, edx
je 0x100b1a9f
push eax
call ebp
add esp, 4
movzx eax, word [esp + 0x64]
mov ecx, dword [esp + 0x1c]
and ecx, 0xffffff01
cdq
or ecx, 1
xor esi, esi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x39
call fcn.100bd6f0
mov bl, 0x34
lea eax, [esp + 0x14]
mov byte [esp + 0x310], bl
call fcn.100bcb30
movzx eax, word [esp + 0x38]
mov ecx, dword [esp + 0x1c]
and ecx, 0xffffff01
cdq
or ecx, 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x3a
call fcn.100bd6f0
lea eax, [esp + 0x14]
mov byte [esp + 0x310], bl
call fcn.100bcb30
mov ebx, 0x100d767b
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov eax, esi
push eax
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x3b
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x34
call fcn.100bcb30
mov edx, dword [esp + 0x50]
push 0xfde9
lea ecx, [esp + 0x98]
push edx
lea eax, [esp + 0x98]
mov dword [esp + 0x98], ecx
call fcn.100a8e10
mov byte [esp + 0x310], 0x3c
mov ebx, dword [esp + 0x90]
lea esi, [esp + 0x14]
call fcn.100bc9c0
mov eax, esi
push eax
lea eax, [esp + 0x40]
mov byte [esp + 0x314], 0x3d
call fcn.100bd6f0
mov eax, esi
mov byte [esp + 0x310], 0x3c
call fcn.100bcb30
mov bl, 0x34
mov byte [esp + 0x310], bl
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b1be6
push eax
call ebp
add esp, 4
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x1f8]
push eax
lea ecx, [esp + 0x2e8]
call fcn.100bfbd0
mov byte [esp + 0x310], 0x3e
cmp dword [eax + 0x18], 0x10
jb 0x100b1c12
mov eax, dword [eax + 4]
jmp 0x100b1c15
add eax, 4
push 0xfde9
lea ecx, [esp + 0x98]
push eax
lea eax, [esp + 0x98]
mov dword [esp + 0x98], ecx
call fcn.1000d380
mov byte [esp + 0x310], 0x3f
mov ecx, dword [edi + 0x7c]
mov eax, dword [esp + 0x90]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
push eax
push str.operate_info
call edx
mov eax, dword [esp + 0x90]
lea ecx, [esp + 0x94]
cmp eax, ecx
je 0x100b1c6c
push eax
call ebp
add esp, 4
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x310], bl
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0x4c]
mov dword [esp + 0x80], 1
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ebp, dword [esp + 0x26c]
mov edx, dword [esp + 0x7c]
push edx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea ecx, [esp + 0x70]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x50]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x74]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x68]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov byte [esp + 0x310], 6
test ebp, ebp
je 0x100b1ce6
mov eax, dword [ebp]
mov edx, dword [eax]
push 1
mov ecx, ebp
call edx
lea eax, [esp + 0x3c]
mov byte [esp + 0x310], 4
call fcn.100bcb30
mov ebp, dword [esp + 0x8c]
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x194]
call sub.mfc90u.dll_CFile::Close
lea ecx, [esp + 0x2e0]
mov byte [esp + 0x310], 3
call fcn.100ad9d0
lea ecx, [esp + 0x194]
mov byte [esp + 0x310], 2
call fcn.100c036a
lea ecx, [esp + 0x5c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x78]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x308]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2f0]
xor ecx, esp
call fcn.100c09bd
add esp, 0x300
ret