Function at 0x1000f440
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x90
mov eax, dword [ebp + 8]
mov dword [ebp - 0x94], eax
mov eax, dword [0x1008e080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x90], 0xde0aa9ae
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x98], eax
sub eax, 0x8b5dd3d4
je 0x1000fffa
jmp 0x1000f484
mov eax, dword [ebp - 0x98]
sub eax, 0x8c712d19
je 0x100100be
jmp 0x1000f49a
mov eax, dword [ebp - 0x98]
sub eax, 0x93bb2cc9
je 0x1001009f
jmp 0x1000f4b0
mov eax, dword [ebp - 0x98]
sub eax, 0x945c8e55
je 0x1000fccd
jmp 0x1000f4c6
mov eax, dword [ebp - 0x98]
sub eax, 0xa6df9f87
je 0x1000fd98
jmp 0x1000f4dc
mov eax, dword [ebp - 0x98]
sub eax, 0xa740a6eb
je 0x1000fa77
jmp 0x1000f4f2
mov eax, dword [ebp - 0x98]
sub eax, 0xb5100acb
je 0x1000fdce
jmp 0x1000f508
mov eax, dword [ebp - 0x98]
sub eax, 0xba4ad40c
je 0x1000ff9a
jmp 0x1000f51e
mov eax, dword [ebp - 0x98]
sub eax, 0xca705d57
je 0x1000fe47
jmp 0x1000f534
mov eax, dword [ebp - 0x98]
sub eax, 0xce7974a8
je 0x1000fb55
jmp 0x1000f54a
mov eax, dword [ebp - 0x98]
sub eax, 0xd1f37cf5
je 0x1000fa59
jmp 0x1000f560
mov eax, dword [ebp - 0x98]
sub eax, 0xd304bffd
je 0x1000f972
jmp 0x1000f576
mov eax, dword [ebp - 0x98]
sub eax, 0xd325e38e
je 0x1000ff29
jmp 0x1000f58c
mov eax, dword [ebp - 0x98]
sub eax, 0xd61e3af8
je 0x1000fb9e
jmp 0x1000f5a2
mov eax, dword [ebp - 0x98]
sub eax, 0xd6caee67
je 0x1000fa3c
jmp 0x1000f5b8
mov eax, dword [ebp - 0x98]
sub eax, 0xd706709e
je 0x1000fb37
jmp 0x1000f5ce
mov eax, dword [ebp - 0x98]
sub eax, 0xde0aa9ae
je 0x1000f80f
jmp 0x1000f5e4
mov eax, dword [ebp - 0x98]
sub eax, 0xf16b4db3
je 0x1000fd08
jmp 0x1000f5fa
mov eax, dword [ebp - 0x98]
sub eax, 0xf1ec6b10
je 0x1000f9eb
jmp 0x1000f610
mov eax, dword [ebp - 0x98]
sub eax, 0xf5e84be7
je 0x1000fcf1
jmp 0x1000f626
mov eax, dword [ebp - 0x98]
sub eax, 0xf8e48aca
je 0x1000feff
jmp 0x1000f63c
mov eax, dword [ebp - 0x98]
sub eax, 0xfbfd7200
je 0x10010081
jmp 0x1000f652
mov eax, dword [ebp - 0x98]
sub eax, 0xfcdb4233
je 0x1000fc5c
jmp 0x1000f668
mov eax, dword [ebp - 0x98]
sub eax, 0xfe0f38d7
je 0x1000fc4d
jmp 0x1000f67e
mov eax, dword [ebp - 0x98]
sub eax, 0x45efdb3
je 0x1000fc8e
jmp 0x1000f694
mov eax, dword [ebp - 0x98]
sub eax, 0x18764ca5
je 0x1000fca7
jmp 0x1000f6aa
mov eax, dword [ebp - 0x98]
sub eax, 0x1a5fdfde
je 0x1000f8ec
jmp 0x1000f6c0
mov eax, dword [ebp - 0x98]
sub eax, 0x2f03d962
je 0x1000f8ce
jmp 0x1000f6d6
mov eax, dword [ebp - 0x98]
sub eax, 0x3136a352
je 0x1000fb46
jmp 0x1000f6ec
mov eax, dword [ebp - 0x98]
sub eax, 0x32dde25e
je 0x1000fa8e
jmp 0x1000f702
mov eax, dword [ebp - 0x98]
sub eax, 0x387cf85f
je 0x1000f8fb
jmp 0x1000f718
mov eax, dword [ebp - 0x98]
sub eax, 0x3a0029ea
je 0x10010070
jmp 0x1000f72e
mov eax, dword [ebp - 0x98]
sub eax, 0x404be74e
je 0x1000ff42
jmp 0x1000f744
mov eax, dword [ebp - 0x98]
sub eax, 0x5349095f
je 0x1000f9dc
jmp 0x1000f75a
mov eax, dword [ebp - 0x98]
sub eax, 0x55bbb312
je 0x1000fd41
jmp 0x1000f770
mov eax, dword [ebp - 0x98]
sub eax, 0x5bc9a22c
je 0x1000fed7
jmp 0x1000f786
mov eax, dword [ebp - 0x98]
sub eax, 0x5ff96f96
je 0x1000f943
jmp 0x1000f79c
mov eax, dword [ebp - 0x98]
sub eax, 0x632cc0fe
je 0x1000ff6a
jmp 0x1000f7b2
mov eax, dword [ebp - 0x98]
sub eax, 0x68ff7a6b
je 0x1000ffa9
jmp 0x1000f7c8
mov eax, dword [ebp - 0x98]
sub eax, 0x69644784
je 0x1000fee6
jmp 0x1000f7de
mov eax, dword [ebp - 0x98]
sub eax, 0x71b2bc9d
je 0x1000fbe7
jmp 0x1000f7f4
mov eax, dword [ebp - 0x98]
sub eax, 0x7ce207c0
je 0x1000fad7
jmp 0x1000f80a
jmp 0x100100c8
mov eax, dword [ebp - 0x94]
push eax
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x84], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x80], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x7c], ecx
sub esp, 0x104
mov ecx, esp
mov dword [ebp - 0x78], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x74], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x64], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x60], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x5c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x58], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x88], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x84]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1002d4d0
add esp, 0xc
mov eax, dword [ebp - 0x88]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [ebp - 0x90], 0x2f03d962
jmp 0x100100c8
mov edx, dword [ebp - 0x80]
mov eax, 0x1a5fdfde
mov ecx, 0x387cf85f
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov dword [ebp - 0x90], 0x68ff7a6b
jmp 0x100100c8
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x84]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x84]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov dword [ebp - 0x90], 0x5ff96f96
jmp 0x100100c8
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x80]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x90], 0xd304bffd
jmp 0x100100c8
mov eax, dword [ebp - 0x78]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov edx, dword [ebp - 0x74]
mov esi, 0xffffffff
mov eax, 0xf1ec6b10
mov ecx, 0x5349095f
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov dword [ebp - 0x90], 0x68ff7a6b
jmp 0x100100c8
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov dword [ebp - 0x90], 0xd6caee67
jmp 0x100100c8
mov eax, dword [ebp - 0x70]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x4d], al
mov dword [ebp - 0x90], 0xd1f37cf5
jmp 0x100100c8
mov dl, byte [ebp - 0x4d]
mov eax, 0xa740a6eb
mov ecx, 0xce7974a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x90], 0x32dde25e
jmp 0x100100c8
mov eax, dword [0x1008f6c4]
mov ecx, dword [0x1008f6c0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfbfd7200
mov ecx, 0x7ce207c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1008f6c4]
mov ecx, dword [0x1008f6c0]
mov edx, eax
add edx, 0x1e851030
sub edx, 1
sub edx, 0x1e851030
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfbfd7200
mov ecx, 0xd706709e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov dword [ebp - 0x90], 0x3136a352
jmp 0x100100c8
mov dword [ebp - 0x90], 0x68ff7a6b
jmp 0x100100c8
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov dword [ebp - 0x90], 0xd61e3af8
jmp 0x100100c8
mov eax, dword [0x1008f6c4]
mov ecx, dword [0x1008f6c0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x93bb2cc9
mov ecx, 0x71b2bc9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
add eax, 0x3c
mov dword [ebp - 0x44], eax
mov eax, dword [0x1008f6c4]
mov ecx, dword [0x1008f6c0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x93bb2cc9
mov ecx, 0xfe0f38d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov dword [ebp - 0x90], 0xfcdb4233
jmp 0x100100c8
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
sub ecx, 0xb4ed12e0
add ecx, eax
add ecx, 0xb4ed12e0
mov eax, dword [ebp - 0x64]
mov dword [eax], ecx
mov eax, dword [ebp - 0x60]
mov word [eax], 0
mov dword [ebp - 0x90], 0x45efdb3
jmp 0x100100c8
mov eax, dword [ebp - 0x60]
mov ax, word [eax]
mov word [ebp - 0x3e], ax
mov dword [ebp - 0x90], 0x18764ca5
jmp 0x100100c8
mov ax, word [ebp - 0x3e]
movzx eax, ax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ax, word [eax + 6]
mov word [ebp - 0x36], ax
mov dword [ebp - 0x90], 0x945c8e55
jmp 0x100100c8
mov ax, word [ebp - 0x36]
movzx esi, ax
mov edx, dword [ebp - 0x3c]
mov eax, 0x404be74e
mov ecx, 0xf5e84be7
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x90], 0xf16b4db3
jmp 0x100100c8
mov eax, dword [ebp - 0x34]
sub eax, 0xe1a6924a
add eax, 0x18
add eax, 0xe1a6924a
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x90], 0x55bbb312
jmp 0x100100c8
mov eax, dword [ebp - 0x60]
movzx eax, word [eax]
imul edx, eax, 0x28
mov ecx, dword [ebp - 0x30]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1003aee5
call fcn.10030e40
add esp, 8
mov edx, eax
mov eax, 0xa6df9f87
mov ecx, 0x5bc9a22c
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov eax, dword [ebp - 0x58]
mov dword [eax], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x90], 0xb5100acb
jmp 0x100100c8
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
sub edx, 0x15a4c0f
add edx, eax
add edx, 0x15a4c0f
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x2c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x54]
mov byte [eax], cl
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x90], 0xca705d57
jmp 0x100100c8
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0xc]
mov ecx, dword [ebp - 0x1c]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x20]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1002d630
add esp, 0xc
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x7c]
mov esi, dword [eax]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0xfeea5ad6
add esi, eax
add esi, 0xfeea5ad6
mov eax, dword [ebp - 0x58]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x54]
mov byte [eax], cl
mov dword [ebp - 0x90], 0x5bc9a22c
jmp 0x100100c8
mov dword [ebp - 0x90], 0x69644784
jmp 0x100100c8
mov eax, dword [ebp - 0x60]
mov ax, word [eax]
mov word [ebp - 0x14], ax
mov dword [ebp - 0x90], 0xf8e48aca
jmp 0x100100c8
mov ax, word [ebp - 0x14]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x12], ax
mov dword [ebp - 0x90], 0xd325e38e
jmp 0x100100c8
mov eax, dword [ebp - 0x60]
mov cx, word [ebp - 0x12]
mov word [eax], cx
mov dword [ebp - 0x90], 0x45efdb3
jmp 0x100100c8
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x90], 0x632cc0fe
jmp 0x100100c8
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x8c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x90], 0xba4ad40c
jmp 0x100100c8
mov dword [ebp - 0x90], 0x68ff7a6b
jmp 0x100100c8
mov eax, dword [0x1008f6c4]
mov ecx, dword [0x1008f6c0]
mov edx, eax
add edx, 0x5ee719b5
sub edx, 1
sub edx, 0x5ee719b5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8c712d19
mov ecx, 0x8b5dd3d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov ecx, dword [0x1008f6c4]
mov eax, dword [0x1008f6c0]
mov edx, ecx
sub edx, 0x12814187
sub edx, 1
add edx, 0x12814187
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8c712d19
mov ecx, 0x3a0029ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x100100c8
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1002c6c0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x90], 0x7ce207c0
jmp 0x100100c8
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x90], 0x71b2bc9d
jmp 0x100100c8
mov dword [ebp - 0x90], 0x8b5dd3d4
jmp 0x1000f468