Function at 0x101d1bc0
Capabilities:
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101f86fc
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x1025f074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x6c], ecx
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
movq qword [ebp - 0x40], xmm0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 4], 0
push str.B8403B48_6FD4_497A_B591_544E9E87A804_FM_RBRTP
push 0
push 0xf001f
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x38], eax
test edi, edi
je 0x101d2691
push 0
push 0
push 0
push 4
push edi
mov dword [ebp - 0x40], edi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, eax
mov dword [ebp - 0x3c], esi
test esi, esi
jne 0x101d1d5d
cmp dword [0x102682b0], eax
je 0x101d1d43
push ecx
mov ecx, 0x102682b0
call fcn.100950c0
mov eax, dword [0x102682b0]
cmp byte [eax + 0x54], 0
je 0x101d1d43
cmp dword [eax + 0x58], 5
jb 0x101d1d43
mov al, byte [eax + 0x5c]
mov byte [ebp - 0x61], al
xor eax, eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
push 0xd
push 0x10215e34
call fcn.10008490
push 0x128
push str.RC::RCRcmdBrowser::ReadSharedData
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_rtpsystem_src2345safebho_rcrcmdbrowser.cpp
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
push 5
call fcn.10095ac0
cmp byte [ebp - 0x61], 0
je 0x101d1cf1
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
call fcn.10095de0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x101d1d2f
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x101d1d25
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27a2
push edx
push ecx
call fcn.101b37a2
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0xffffffff
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x40], 0
jmp 0x101d2785
movups xmm1, xmmword [esi]
mov ecx, dword [esi + 0x20]
movups xmm0, xmmword [esi + 0x10]
movd eax, xmm1
movups xmmword [ebp - 0x9c], xmm1
movups xmmword [ebp - 0x8c], xmm0
cmp eax, 0x10000
je 0x101d1e7d
push 5
mov ecx, 0x102682b0
call fcn.10095a80
mov dword [ebp - 0x6c], eax
test eax, eax
je 0x101d1e55
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
push 0xa
push 0x10215e50
call fcn.10008490
push 0x13a
push str.RC::RCRcmdBrowser::ReadSharedData
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_rtpsystem_src2345safebho_rcrcmdbrowser.cpp
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
push 5
call fcn.10095ac0
cmp dword [ebp - 0x6c], 1
jbe 0x101d1e03
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
call fcn.10095de0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x101d1e41
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x101d1e37
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27a7
push edx
push ecx
call fcn.101b37a2
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0xffffffff
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push edi
mov dword [ebp - 0x3c], 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x40], 0
jmp 0x101d2785
mov esi, dword [ebp - 0x6c]
test ecx, ecx
mov eax, dword [ebp - 0x90]
mov ecx, 0x102682b0
push 4
mov dword [esi + 0x74], eax
mov eax, dword [ebp - 0x84]
mov dword [esi + 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [esi + 0x84], eax
mov eax, dword [ebp - 0x8c]
mov dword [esi + 0x78], eax
mov eax, dword [ebp - 0x88]
mov dword [esi + 0x7c], eax
setne al
mov byte [esi + 9], al
call fcn.10095a80
mov edi, eax
test edi, edi
je 0x101d1f8e
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 5
movzx eax, byte [esi + 9]
push eax
lea eax, [ebp - 0x28]
push str.S_MRqQ
push eax
call fcn.10095f60
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push 0x143
push str.RC::RCRcmdBrowser::ReadSharedData
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_rtpsystem_src2345safebho_rcrcmdbrowser.cpp
push eax
push 4
call fcn.10095ac0
cmp edi, 1
jbe 0x101d1f3c
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
call fcn.10095de0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x101d1f7a
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x101d1f70
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27ac
push edx
push ecx
call fcn.101b37a2
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov esi, dword [ebp - 0x98]
lea edi, [esi + 1]
push edi
mov dword [ebp - 0x78], edi
call fcn.101b380c
push edi
push 0
push eax
mov dword [ebp - 0x68], eax
call fcn.101b5530
push esi
mov esi, dword [ebp - 0x3c]
lea ecx, [esi + 0x24]
push ecx
push dword [ebp - 0x68]
call fcn.101b5ac0
add esp, 0x1c
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x3c], 0
call fcn.1008a990
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x68]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
test esi, esi
je 0x101d2531
test edi, edi
je 0x101d2531
mov eax, dword [ebp - 0x94]
test eax, eax
jne 0x101d203e
lea eax, [ebp - 0x34]
push eax
push edi
mov ecx, eax
call fcn.10009540
push edi
push esi
push dword [ebp - 0x34]
call fcn.101b5ac0
add esp, 0xc
jmp 0x101d21a5
cmp eax, 1
je 0x101d204c
cmp eax, 2
jne 0x101d2531
push edi
call fcn.101b380c
push edi
mov esi, eax
push 0
push esi
mov dword [ebp - 0x70], esi
call fcn.101b5530
push edi
push dword [ebp - 0x68]
push esi
call fcn.101b5ac0
add esp, 0x1c
cmp dword [ebp - 0x94], 2
jne 0x101d213e
push 0x108
mov dword [ebp - 0x44], 0
call fcn.101b37dc
push 0x102
mov esi, eax
push 0
push esi
mov dword [ebp - 0x44], esi
call fcn.101b5530
add esp, 0x10
mov dword [esi + 0x104], 0
mov byte [ebp - 4], 7
xor dh, dh
xor eax, eax
mov byte [eax + esi], al
inc eax
cmp eax, 0x100
jb 0x101d20b2
xor edi, edi
mov word [esi + 0x100], 0
mov dword [ebp - 0x74], edi
nop dword [eax + eax]
mov dl, byte [edi + esi]
movzx eax, dh
inc dh
movzx ecx, dl
and dh, 0xf
movzx eax, byte [eax + str.MjM0NVNhZmVCaG8]
add eax, dword [ebp - 0x74]
add ecx, eax
movzx eax, cl
lea ecx, [eax + esi]
mov dword [ebp - 0x74], eax
mov al, byte [ecx]
mov byte [edi + esi], al
inc edi
mov byte [ecx], dl
cmp edi, 0x100
jb 0x101d20d0
mov edx, dword [ebp - 0x70]
mov edi, dword [ebp - 0x78]
mov dword [esi + 0x104], 0x10
test edx, edx
je 0x101d2122
push edi
mov ecx, esi
call fcn.10083cf0
add esp, 4
mov byte [ebp - 4], 6
push 0x108
push esi
call fcn.101b37a2
mov esi, dword [ebp - 0x70]
add esp, 8
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x34]
mov edx, edi
mov dword [ebp - 0x30], eax
mov ecx, esi
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0
push eax
call fcn.1000cb50
mov edi, eax
add esp, 4
test edi, edi
jne 0x101d2166
mov byte [ebp - 0x61], al
jmp 0x101d218f
mov esi, dword [ebp - 0x44]
lea eax, [ebp - 0x34]
push eax
push esi
mov ecx, eax
call fcn.10009540
push esi
push edi
push dword [ebp - 0x34]
call fcn.101b5ac0
push edi
call fcn.101b3133
mov esi, dword [ebp - 0x70]
add esp, 0x10
mov byte [ebp - 0x61], 1
push esi
call fcn.101b3133
mov esi, dword [ebp - 0x68]
add esp, 4
cmp byte [ebp - 0x61], 0
je 0x101d2531
push esi
call fcn.101b3133
mov ecx, dword [ebp - 0x30]
add esp, 4
mov eax, dword [ebp - 0x34]
sub ecx, eax
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.100092a0
mov byte [ebp - 4], 9
lea edi, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0x10
mov dword [ebp - 0x44], 0
jb 0x101d21df
mov edi, dword [ebp - 0x60]
test edi, edi
je 0x101d22a0
push 4
call fcn.101b37dc
add esp, 4
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 0xa
mov ecx, eax
mov dword [eax], 0
call fcn.10088000
mov esi, eax
mov byte [ebp - 4], 9
mov eax, dword [esi]
mov ecx, eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x68], eax
call fcn.10088530
mov ecx, dword [ebp - 0x68]
call fcn.100884e0
mov ecx, dword [ebp - 0x68]
lea ecx, [ecx + 0x38]
call fcn.10088480
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x104c]
test eax, eax
je 0x101d2248
push eax
call fcn.101b3133
mov eax, dword [ebp - 0x68]
add esp, 4
mov dword [eax + 0x104c], 0
push 0
push edi
mov ecx, esi
call fcn.100882b0
test al, al
je 0x101d22a0
mov eax, dword [esi]
mov ecx, dword [eax + 0x18]
call fcn.10093d30
mov dword [ebp - 0x44], eax
test eax, eax
jne 0x101d235e
mov esi, dword [esi]
mov ecx, esi
call fcn.10088530
mov ecx, esi
call fcn.100884e0
lea ecx, [esi + 0x38]
call fcn.10088480
mov eax, dword [esi + 0x104c]
test eax, eax
je 0x101d22a0
push eax
call fcn.101b3133
add esp, 4
mov dword [esi + 0x104c], 0
push 5
mov ecx, 0x102682b0
call fcn.10095a80
mov esi, eax
test esi, esi
je 0x101d245f
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
push 0xb
push 0x10215ed0
call fcn.10008490
push 0x15e
push str.RC::RCRcmdBrowser::ReadSharedData
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_rtpsystem_src2345safebho_rcrcmdbrowser.cpp
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
push 5
call fcn.10095ac0
cmp esi, 1
jbe 0x101d231d
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
call fcn.10095de0
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x101d244b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x101d2441
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27b1
jmp 0x101d2441
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x48]
add eax, 8
push eax
call fcn.101d08d0
mov byte [ebp - 0x61], al
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x101d23a8
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x101d239e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27b6
push edx
push ecx
call fcn.101b37a2
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x101d2407
mov edx, dword [ebp - 0x2c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x101d23e8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27bb
push edx
push ecx
call fcn.101b37a2
add esp, 8
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x101d2424
push eax
mov eax, dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
call eax
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x101d2439
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x40], 0
mov al, byte [ebp - 0x61]
jmp 0x101d2787
push edx
push ecx
call fcn.101b37a2
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x101d2497
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x101d248d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27c0
push edx
push ecx
call fcn.101b37a2
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x101d24f6
mov edx, dword [ebp - 0x2c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x101d24d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27c5
push edx
push ecx
call fcn.101b37a2
add esp, 8
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x101d2513
push eax
mov eax, dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
call eax
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x101d2785
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x40], 0
jmp 0x101d2785
push esi
call fcn.101b3133
add esp, 4
mov ecx, 0x102682b0
push 5
call fcn.10095a80
mov esi, eax
test esi, esi
je 0x101d2609
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x28]
push 0x10
push 0x10215eac
call fcn.10008490
push 0x153
push str.RC::RCRcmdBrowser::ReadSharedData
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_rtpsystem_src2345safebho_rcrcmdbrowser.cpp
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
push 5
call fcn.10095ac0
cmp esi, 1
jbe 0x101d25b7
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
call fcn.10095de0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x101d25f5
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x101d25eb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27ca
push edx
push ecx
call fcn.101b37a2
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x101d2656
mov edx, dword [ebp - 0x2c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x101d2637
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27cf
push edx
push ecx
call fcn.101b37a2
add esp, 8
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x101d2673
push eax
mov eax, dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
call eax
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x101d2785
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x40], 0
jmp 0x101d2785
cmp dword [0x102682b0], 0
je 0x101d277e
push ecx
mov ecx, 0x102682b0
call fcn.100950c0
mov eax, dword [0x102682b0]
cmp byte [eax + 0x54], 0
je 0x101d277e
cmp dword [eax + 0x58], 5
jb 0x101d277e
mov al, byte [eax + 0x5c]
mov byte [ebp - 0x61], al
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
push 0xd
push 0x10215dd4
call fcn.10008490
push 0x122
push str.RC::RCRcmdBrowser::ReadSharedData
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_rtpsystem_src2345safebho_rcrcmdbrowser.cpp
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
push 5
call fcn.10095ac0
cmp byte [ebp - 0x61], 0
je 0x101d2730
lea eax, [ebp - 0x28]
mov ecx, 0x102682b0
push eax
call fcn.10095de0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x101d276a
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x101d2760
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101d27d4
push edx
push ecx
call fcn.101b37a2
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0xffffffff
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101b3122
mov esp, ebp
pop ebp
ret
call fcn.101b7ad8
call fcn.101b7ad8
call fcn.101b7ad8
call fcn.101b7ad8
call fcn.101b7ad8
call fcn.101b7ad8
call fcn.101b7ad8
call fcn.101b7ad8
call fcn.101b7ad8
call fcn.101b7ad8
call fcn.101b7ad8
int3