Function at 0x63d45a
Capabilities:
Create new key via cryptacquirecontext
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
push 0x114
mov eax, 0x7b9eae
call fcn.00700ca1
mov dword [ebp - 0x114], ecx
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x11c], eax
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x60], ebx
push str.Microsoft_Enhanced_RSA_and_AES_Cryptographic_Provider
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
call fcn.004c097f
mov esi, dword [ebp - 0x114]
push str.aes128
mov dword [ebp - 4], ebx
lea ecx, [esi + 0x28]
call fcn.004d2b1c
movzx eax, al
lea ecx, [ebp - 0x28]
xor eax, 1
mov byte [ebp - 0x108], bl
push str.forceCryptAcquireContextFail
push dword [ebp - 0x108]
mov dword [ebp - 0x18], ebx
lea eax, [eax*2 + 0x660e]
mov dword [ebp - 0x14], 0xf
push 0x1c
mov dword [ebp - 0x120], eax
mov byte [ebp - 0x28], bl
call fcn.0043a610
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 1
push ebx
push eax
call fcn.0062e37e
mov byte [ebp - 0x109], al
mov edi, 0x1000
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], bl
pop ecx
pop ecx
cmp eax, 0x10
jb 0x63d54c
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x104], ecx
cmp eax, edi
jb 0x63d543
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x110]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
cmp byte [ebp - 0x109], 0
jne 0x63d99b
cmp dword [ebp - 0x5c], 8
lea eax, [ebp - 0x70]
push ebx
cmovae eax, dword [ebp - 0x70]
add esi, 0x18
push 0x18
push eax
push ebx
push esi
mov dword [ebp - 0x110], esi
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x63dd38
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xa
mov esi, eax
mov dword [ebp - 0x48], ebx
push str.MSEUtility
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x118], esi
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00439710
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 2
push eax
call fcn.006210e3
pop ecx
push ebx
push 0x858903
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov edi, eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00439710
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 3
push esi
push eax
call fcn.006211a2
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.0061c551
mov esi, eax
push ebx
push 0x858903
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 5
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.00439710
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 6
push str.CryptAcquireContext
push eax
call fcn.006212a1
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 7
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.0061c551
push esi
push eax
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.00621517
lea ecx, [ebp - 0xb8]
call fcn.00438e20
lea ecx, [ebp - 0xd0]
call fcn.00438e20
lea ecx, [ebp - 0x88]
call fcn.00438e20
mov eax, dword [ebp - 0x2c]
mov esi, 0x1000
cmp eax, 0x10
jb 0x63d6c4
mov ecx, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x108], ecx
cmp eax, esi
jb 0x63d6bb
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x104]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x108]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.00438e20
lea ecx, [ebp - 0x100]
call fcn.00438e20
lea ecx, [ebp - 0xa0]
call fcn.00438e20
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x63d738
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
cmp eax, esi
jb 0x63d72f
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
mov byte [ebp - 4], bl
cmp eax, 0x10
jb 0x63d78e
mov ecx, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
cmp eax, esi
jb 0x63d785
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov esi, 0x80090024
cmp dword [ebp - 0x118], esi
jne 0x63d9ff
push 0xa
push str.MSEUtility
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00439710
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 9
push eax
call fcn.006210e3
pop ecx
push ebx
push 0x858903
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov edi, eax
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.00439710
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0xa
push esi
push eax
call fcn.006211a2
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xb
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.0061c551
mov esi, eax
push ebx
push 0x858903
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00439710
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0xd
push str.CryptAcquireContext_NTE_TEMPORARY_PROFILE
push eax
call fcn.006212a1
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.0061c551
mov byte [ebp - 4], 0xf
push esi
push eax
mov ecx, edi
call fcn.00621517
lea ecx, [ebp - 0xe8]
call fcn.00438e20
lea ecx, [ebp - 0x100]
call fcn.00438e20
lea ecx, [ebp - 0xa0]
call fcn.00438e20
mov eax, dword [ebp - 0x14]
mov edi, 0x1000
cmp eax, 0x10
jb 0x63d8d4
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x108], eax
cmp eax, edi
jb 0x63d8cb
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00438e20
lea ecx, [ebp - 0xd0]
call fcn.00438e20
lea ecx, [ebp - 0x88]
call fcn.00438e20
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x63d948
mov ecx, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
cmp eax, edi
jb 0x63d93f
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov eax, dword [ebp - 0x44]
mov byte [ebp - 0x40], bl
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], ebx
cmp eax, 0x10
jb 0x63d99b
mov ecx, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x108], eax
cmp eax, edi
jb 0x63d992
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov ecx, dword [ebp - 0x114]
call fcn.0063990b
mov eax, dword [ebp - 0x5c]
cmp eax, 8
jb 0x63d9f5
mov ecx, dword [ebp - 0x70]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
cmp eax, 0x1000
jb 0x63d9ec
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov al, bl
call fcn.00700c4b
ret 4
cmp dword [ebp - 0x5c], 8
lea eax, [ebp - 0x70]
mov esi, dword [ebp - 0x110]
cmovae eax, dword [ebp - 0x70]
push 0x10
push 0x18
push eax
push ebx
push esi
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x63dd1f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xa
push str.MSEUtility
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], ebx
mov esi, eax
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00439710
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x10
push eax
call fcn.006210e3
pop ecx
push ebx
push 0x858903
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov edi, eax
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.00439710
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x11
push esi
push eax
call fcn.006211a2
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x12
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.0061c551
mov esi, eax
push ebx
push 0x858903
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00439710
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x14
push str.CryptAcquireContext_delete_key_set
push eax
call fcn.006212a1
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.0061c551
push esi
push eax
mov ecx, edi
mov byte [ebp - 4], 0x16
call fcn.00621517
lea ecx, [ebp - 0xe8]
call fcn.00438e20
lea ecx, [ebp - 0x100]
call fcn.00438e20
lea ecx, [ebp - 0xa0]
call fcn.00438e20
mov eax, dword [ebp - 0x14]
mov esi, 0x1000
cmp eax, 0x10
jb 0x63db62
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
cmp eax, esi
jb 0x63db59
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00438e20
lea ecx, [ebp - 0xd0]
call fcn.00438e20
lea ecx, [ebp - 0x88]
call fcn.00438e20
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x63dbd6
mov ecx, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
cmp eax, esi
jb 0x63dbcd
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
mov byte [ebp - 4], bl
cmp eax, 0x10
jb 0x63dc2c
mov ecx, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
cmp eax, esi
jb 0x63dc23
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x108]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov esi, dword [ebp - 0x110]
cmp dword [ebp - 0x5c], 8
lea eax, [ebp - 0x70]
push 8
cmovae eax, dword [ebp - 0x70]
push 0x18
push eax
push ebx
push esi
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x63dd38
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xa
push str.MSEUtility
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], ebx
mov esi, eax
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00439710
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x17
push eax
call fcn.006210e3
pop ecx
push ebx
push 0x858903
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov edi, eax
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.00439710
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x18
push esi
push eax
call fcn.006211a2
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x19
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.0061c551
mov esi, eax
push ebx
push 0x858903
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00439710
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x1b
push str.CryptAcquireContext_
push eax
call fcn.006212a1
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.0061c551
mov byte [ebp - 4], 0x1d
jmp 0x63d85f
cmp dword [esi], 0
je 0x63dc32
push ebx
push dword [esi]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov dword [esi], ebx
jmp 0x63dc32
mov edi, dword [ebp - 0x114]
add edi, 0x24
push edi
push ebx
push ebx
push 0x800c
push dword [esi]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x63de26
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xa
push str.MSEUtility
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], ebx
mov esi, eax
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00439710
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x1e
push eax
call fcn.006210e3
pop ecx
push ebx
push 0x858903
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov edi, eax
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.00439710
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x1f
push esi
push eax
call fcn.006211a2
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x20
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.0061c551
mov esi, eax
push ebx
push 0x858903
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00439710
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x22
push str.CryptCreateHash_
push eax
call fcn.006212a1
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.0061c551
mov byte [ebp - 4], 0x24
jmp 0x63d85f
mov eax, dword [ebp - 0x11c]
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x63de37
mov eax, dword [eax]
push ebx
push ecx
push eax
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
jne 0x63df17
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xa
push str.MSEUtility
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], ebx
mov esi, eax
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00439710
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x25
push eax
call fcn.006210e3
pop ecx
push ebx
push 0x858903
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov edi, eax
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.00439710
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x26
push esi
push eax
call fcn.006211a2
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x27
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.0061c551
mov esi, eax
push ebx
push 0x858903
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00439710
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x29
push str.CryptHashData_
push eax
call fcn.006212a1
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2a
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.0061c551
mov byte [ebp - 4], 0x2b
jmp 0x63d85f
mov eax, dword [ebp - 0x114]
add eax, 0x1c
push eax
push 1
push dword [edi]
push dword [ebp - 0x120]
push dword [esi]
call dword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
test eax, eax
jne 0x63e008
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xa
push str.MSEUtility
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], ebx
mov esi, eax
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00439710
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x2c
push eax
call fcn.006210e3
pop ecx
push ebx
push 0x858903
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov edi, eax
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.00439710
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x2d
push esi
push eax
call fcn.006211a2
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2e
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.0061c551
mov esi, eax
push ebx
push 0x858903
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00439710
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x30
push str.CryptHashData_
push eax
call fcn.006212a1
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x31
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.0061c551
mov byte [ebp - 4], 0x32
jmp 0x63d85f
mov bl, 1
jmp 0x63d9a6