Function at 0x100851a0
Capabilities:
Connect to http server
Create http request
Read and send data from client to server
Read file on windows
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
mov eax, dword [0x10100008]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [ebp + 0x18], 0
push ebx
push esi
push edi
je 0x10085c16
cmp dword [ebp + 0x30], 0
je 0x10085c16
cmp dword [ebp + 0x60], 0
je 0x10085c16
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp - 0x138]
call fcn.100b2820
cmp dword [ebp - 0x124], 0x10
lea ecx, [ebp - 0xd8]
lea eax, [ebp - 0x138]
cmovae eax, dword [ebp - 0x138]
push ecx
push eax
call fcn.100caa75
mov edx, dword [ebp - 0x124]
or ebx, 0xffffffff
add esp, 8
test eax, eax
cmove ebx, dword [ebp - 0xc4]
cmp edx, 0x10
jb 0x1008524d
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085243
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d25
push edx
push ecx
call fcn.100bede4
add esp, 8
mov dword [ebp - 0x128], 0
lea esi, [ebp - 7]
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
test ebx, ebx
jns 0x100852a0
neg ebx
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x10085271
dec esi
mov byte [esi], 0x2d
jmp 0x100852c2
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x100852a0
lea eax, [ebp - 7]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
cmp esi, eax
je 0x100852f3
sub eax, esi
lea ecx, [ebp - 0x110]
push eax
push esi
call fcn.100b2fb0
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x50]
call fcn.10083800
mov edx, dword [ebp - 0xfc]
cmp edx, 0x10
jb 0x1008533b
mov ecx, dword [ebp - 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085331
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d2a
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edi, dword [ebp - 0x40]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
lea eax, [edi + 0x30]
push eax
call fcn.100b5970
push str.Content_Type:_multipart_form_data__boundary____
lea ecx, [ebp - 0x34]
call fcn.100b26a0
cmp dword [ebp - 0x3c], 0x10
lea ecx, [ebp - 0x50]
mov esi, dword [ebp - 0x20]
mov eax, esi
mov ebx, dword [ebp - 0x50]
cmovae ecx, ebx
mov edx, dword [ebp - 0x24]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x100853a8
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
lea esi, [eax + edx]
push esi
call fcn.100c22c0
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x100853c4
mov byte [ebp - 0xe8], 0
lea ecx, [ebp - 0x34]
push dword [ebp - 0xe8]
push edi
call fcn.100b4450
mov edi, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x50]
lea eax, [edi + 6]
mov dword [ebp - 0xc], 0
push eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.100b5970
push str.______
lea ecx, [ebp - 0x1c]
call fcn.100b26a0
cmp dword [ebp - 0x3c], 0x10
lea ecx, [ebp - 0x50]
mov esi, dword [ebp - 8]
mov eax, esi
mov edx, dword [ebp - 0xc]
cmovae ecx, ebx
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x1008542b
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x1c]
cmovae eax, dword [ebp - 0x1c]
lea esi, [eax + edx]
push esi
call fcn.100c22c0
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x10085447
mov byte [ebp - 0xe8], 0
lea ecx, [ebp - 0x1c]
push dword [ebp - 0xe8]
push edi
call fcn.100b4450
mov edi, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x50]
push str._r_nContent_Disposition:_form_data__name_data___filename_
lea ecx, [ebp - 0x1c]
call fcn.100b26a0
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x110]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x138], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x128], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp + 0x50]
push eax
call fcn.100b3550
add esp, 4
mov ecx, eax
push str.__r_nContent_Type:_application_octet_stream_r_n_r_n
call fcn.100b26a0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x80], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x70], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0xfc]
cmp edx, 0x10
jb 0x100854fc
mov ecx, dword [ebp - 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100854f2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d2f
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
cmp edx, 0x10
jb 0x10085551
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085547
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d2f
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edx, dword [ebp - 8]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
cmp edx, 0x10
jb 0x100855a0
mov ecx, dword [ebp - 0x1c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085596
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d2f
push edx
push ecx
call fcn.100bede4
add esp, 8
lea eax, [edi + 8]
mov dword [ebp - 0xc], 0
push eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
call fcn.100b5970
push str._r_n______
lea ecx, [ebp - 0x1c]
call fcn.100b26a0
cmp dword [ebp - 0x3c], 0x10
lea ecx, [ebp - 0x50]
mov esi, dword [ebp - 8]
mov eax, esi
mov edx, dword [ebp - 0xc]
cmovae ecx, ebx
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x10085607
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x1c]
cmovae eax, dword [ebp - 0x1c]
lea esi, [eax + edx]
push esi
call fcn.100c22c0
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x1008561d
mov byte [ebp - 0xe8], 0
lea ecx, [ebp - 0x1c]
push dword [ebp - 0xe8]
push edi
call fcn.100b4450
push str.___r_n
lea ecx, [ebp - 0x1c]
call fcn.100b26a0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x68], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x58], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 8]
cmp edx, 0x10
jb 0x10085680
mov ecx, dword [ebp - 0x1c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085676
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d34
push edx
push ecx
call fcn.100bede4
add esp, 8
cmp dword [ebp - 0x20], 0x10
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x68]
cmovae eax, dword [ebp - 0x34]
cmp dword [ebp - 0x6c], 0x10
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0x80]
cmovae eax, dword [ebp - 0x80]
cmp dword [ebp - 0x54], 0x10
mov ebx, eax
mov dword [ebp - 0xdc], eax
cmovae ecx, dword [ebp - 0x68]
mov dword [ebp - 0xe4], ecx
lea edx, [ebx + 1]
mov al, byte [ebx]
inc ebx
test al, al
jne 0x100856b8
sub ebx, edx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100856c4
xorps xmm0, xmm0
mov dword [ebp - 0xf0], 0
sub ecx, edx
movlpd qword [ebp - 0xa4], xmm0
push 0x10000
mov dword [ebp - 0x118], ecx
movlpd qword [ebp - 0x9c], xmm0
movlpd qword [ebp - 0x94], xmm0
movlpd qword [ebp - 0x88], xmm0
call fcn.100bedf2
add esp, 4
mov dword [ebp - 0x114], eax
push 0x10000
push 0
push eax
call fcn.100c1720
add esp, 0xc
lea ecx, [ebp + 0x38]
cmp dword [ebp + 0x4c], 0x10
cmovae ecx, dword [ebp + 0x38]
push 0
push 0x8000080
push 3
push 0
push 1
push 0x80000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
lea ecx, [ebp - 0x110]
lea eax, [ebp + 0x38]
mov dword [ebp - 0xf4], edi
push eax
call fcn.100b2820
cmp dword [ebp - 0xfc], 0x10
lea ecx, [ebp - 0xd8]
lea eax, [ebp - 0x110]
cmovae eax, dword [ebp - 0x110]
push ecx
push eax
call fcn.100caa75
mov edx, dword [ebp - 0xfc]
add esp, 8
test eax, eax
mov eax, 0xffffffff
cmove eax, dword [ebp - 0xc4]
mov dword [ebp - 0xec], eax
cmp edx, 0x10
jb 0x100857d0
mov ecx, dword [ebp - 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100857c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d39
push edx
push ecx
call fcn.100bede4
add esp, 8
push 0
push 0
push 0
push 1
push 0x100f1e78
call dword [sym.imp.WININET.dll_InternetOpenA]
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp + 8]
push 0
cmovae ecx, dword [ebp + 8]
push 0
push 3
push 0
push 0
push 0x50
push ecx
push eax
mov dword [ebp - 0xe8], eax
call dword [sym.imp.WININET.dll_InternetConnectA]
cmp dword [ebp + 0x34], 0x10
lea ecx, [ebp + 0x20]
push 0
cmovae ecx, dword [ebp + 0x20]
push 0
push 0
push 0
push 0
push ecx
push str.POST
push eax
mov dword [ebp - 0x11c], eax
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
push 0xa0000000
push 0xffffffffffffffff
push dword [ebp - 0xe0]
mov esi, eax
push esi
call dword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0xec]
push 0
add eax, ebx
mov dword [ebp - 0xa8], 0x28
push 8
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0xa8]
push 0
push eax
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestExW]
test ebx, ebx
je 0x100858aa
mov edi, dword [ebp - 0xdc]
lea eax, [ebp - 0xdc]
push eax
push ebx
push edi
push esi
call dword [sym.imp.WININET.dll_InternetWriteFile]
test eax, eax
je 0x100858a4
add edi, dword [ebp - 0xdc]
sub ebx, dword [ebp - 0xdc]
jne 0x10085882
mov edi, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xec]
test eax, eax
je 0x1008594c
nop dword [eax + eax]
sub eax, dword [ebp - 0xf0]
mov ecx, 4
cmp eax, ecx
push 0
cmovb ecx, eax
lea eax, [ebp - 0x38]
push eax
push ecx
push dword [ebp - 0x114]
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10085ad7
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xdc], eax
test ebx, ebx
je 0x1008592c
mov edi, eax
lea eax, [ebp - 0xe0]
push eax
push ebx
push edi
push esi
call dword [sym.imp.WININET.dll_InternetWriteFile]
test eax, eax
je 0x10085923
add edi, dword [ebp - 0xe0]
sub ebx, dword [ebp - 0xe0]
jne 0x10085901
mov ebx, dword [ebp - 0x38]
mov edi, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xf0]
add eax, ebx
cmp eax, dword [ebp - 0xec]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xec]
jb 0x100858c0
mov ebx, dword [ebp - 0x118]
test ebx, ebx
je 0x10085988
mov edi, dword [ebp - 0xe4]
nop dword [eax]
lea eax, [ebp - 0xe4]
push eax
push ebx
push edi
push esi
call dword [sym.imp.WININET.dll_InternetWriteFile]
test eax, eax
je 0x10085982
add edi, dword [ebp - 0xe4]
sub ebx, dword [ebp - 0xe4]
jne 0x10085960
mov edi, dword [ebp - 0xf4]
push 0
push 8
push 0
push esi
call dword [sym.imp.WININET.dll_HttpEndRequestA]
mov ebx, dword [sym.imp.WININET.dll_InternetCloseHandle]
test esi, esi
je 0x100859a2
push esi
call ebx
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x100859af
push eax
call ebx
mov eax, dword [ebp - 0xe8]
test eax, eax
je 0x100859bc
push eax
call ebx
test edi, edi
je 0x100859cc
cmp edi, 0xffffffff
je 0x100859cc
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x54]
cmp edx, 0x10
jb 0x10085a00
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100859f6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d3e
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x10085a46
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085a3c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d3e
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x10085a8c
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085a82
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d3e
push edx
push ecx
call fcn.100bede4
add esp, 8
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp eax, 0x10
jb 0x10085c16
mov ecx, dword [ebp - 0x50]
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x10085c0c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d3e
jmp 0x10085c0c
mov ebx, dword [sym.imp.WININET.dll_InternetCloseHandle]
test esi, esi
je 0x10085ae4
push esi
call ebx
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x10085af1
push eax
call ebx
mov eax, dword [ebp - 0xe8]
test eax, eax
je 0x10085afe
push eax
call ebx
test edi, edi
je 0x10085b0e
cmp edi, 0xffffffff
je 0x10085b0e
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x54]
cmp edx, 0x10
jb 0x10085b42
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085b38
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d3e
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 0x10
jb 0x10085b88
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085b7e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d3e
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 0x10
jb 0x10085bce
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085bc4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d3e
push edx
push ecx
call fcn.100bede4
add esp, 8
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp eax, 0x10
jb 0x10085c16
mov ecx, dword [ebp - 0x50]
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x10085c0c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d3e
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x10085c4a
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085c40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d43
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edx, dword [ebp + 0x34]
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 0xf
mov byte [ebp + 8], 0
cmp edx, 0x10
jb 0x10085c90
mov ecx, dword [ebp + 0x20]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085c86
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d43
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edx, dword [ebp + 0x4c]
mov dword [ebp + 0x30], 0
mov dword [ebp + 0x34], 0xf
mov byte [ebp + 0x20], 0
cmp edx, 0x10
jb 0x10085cd2
mov ecx, dword [ebp + 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085cc8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d43
push edx
push ecx
call fcn.100bede4
add esp, 8
mov edx, dword [ebp + 0x64]
mov dword [ebp + 0x48], 0
mov dword [ebp + 0x4c], 0xf
mov byte [ebp + 0x38], 0
cmp edx, 0x10
jb 0x10085d14
mov ecx, dword [ebp + 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085d0a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085d43
push edx
push ecx
call fcn.100bede4
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100be889
mov esp, ebp
pop ebp
ret
call fcn.100cb7f0
call fcn.100cb7f0
call fcn.100cb7f0
call fcn.100cb7f0
call fcn.100cb7f0
call fcn.100cb7f0
call fcn.100cb7f0
int3