Function at 0x1003607b
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x1005f175
call fcn.1005d8a0
sub esp, 0x310
cmp byte [ebp + 0x14], 0
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x50], dl
mov dword [ebp - 0x30], ebx
je 0x1003620c
mov dword [ebp + 0x14], 0x6526
xor ebx, ebx
cmp dword [ebp + 0x14], 0x6888
jle 0x100360f2
push ebx
push ebx
push 0x77e
push ebx
call dword [sym.imp.USER32.dll_AppendMenuA]
mov edi, ebx
mov esi, 0x100788d8
mov dword [ebp - 0x30], ebx
mov eax, ebx
mov ecx, esi
xor eax, edi
cdq
push edx
push eax
call fcn.10001e5c
inc ebx
cmp ebx, 0x2f37
jl 0x100360cd
inc edi
push 0
pop ebx
cmp edi, 0x13c
jl 0x100360ca
jmp 0x100360f7
mov esi, 0x100788d8
mov dword [ebp - 4], ebx
cmp dword [ebp + 0x14], 0x63e6
jge 0x1003610f
mov edx, str.ngicaqql_moeuzxa_uqnx_ftldde
mov ecx, esi
call fcn.10003d65
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0x18], 0
je 0x100361fc
mov eax, dword [ebp + 0x10]
cmp byte [eax], 0
je 0x10036139
push ecx
push 0x1ef2
push ebx
mov edx, 0x7042
call fcn.100373f5
add esp, 0xc
mov dword [ebp - 0x24], 0x649f
cmp dword [ebp - 0x24], 0x6734
jle 0x10036197
mov edi, ebx
mov dword [ebp - 0x3c], ebx
mov eax, ebx
mov ebx, dword [ebp - 0x3c]
mov dword [ebp + 0x14], eax
add eax, ebx
mov ecx, esi
xor eax, edi
cdq
push edx
push eax
call fcn.10001e5c
mov eax, dword [ebp + 0x14]
inc eax
mov dword [ebp + 0x14], eax
cmp eax, 0x420e
jl 0x10036156
inc ebx
push 0
mov dword [ebp - 0x3c], ebx
cmp ebx, 0xe24
pop ebx
jl 0x1003614e
inc edi
cmp edi, 0x8db
jl 0x1003614b
push ebx
push ebx
push 0x677
call dword [sym.imp.ADVAPI32.dll_CopySid]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x6162
jge 0x100361b3
mov edx, str.hiruu_nyj_ipcozerf_qwmfpsrwd_ftetf
mov ecx, esi
call fcn.10003d65
jmp 0x10036b6c
push 0xeed
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x10036b6c
test dl, dl
je 0x100362b6
mov dword [ebp - 0x34], 0x77f2
cmp dword [ebp - 0x34], 0x7b24
jle 0x10036292
xor ebx, ebx
xor edi, edi
mov ecx, ebx
inc edi
mov dword [ebp + 0x14], ecx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x24], 0x14f6
mov dword [ebp - 0x3c], eax
and eax, ecx
lea ecx, [ebp - 0xf0]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036256
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xf0]
call fcn.10002352
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp + 0x14]
add eax, esi
dec dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
jne 0x1003623c
inc esi
cmp esi, 0x16ff
jl 0x10036230
inc ecx
mov dword [ebp + 0x14], ecx
cmp ecx, 0x640a
jl 0x1003622e
mov ebx, dword [ebp - 0x30]
cmp dword [ebp - 0x34], 0x7440
jge 0x100362a6
push str.edg_mvj_xzttvyj_bqb_nmd_epjlr_xudnzziox_bww_vejgyr_wjdat_glts_yyjd
call fcn.10047084
pop ecx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebx]
or dword [eax + ecx*4], 0xffffffff
jmp 0x10036b6c
mov dword [ebp - 0x24], 0x350e
cmp dword [ebp - 0x24], 0x3680
jle 0x1003634f
push 0x10f2
push 0x1530
push 0x2146
push 0xe8c
push 0x1a23
push 0x12a7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
xor ebx, ebx
xor edi, edi
mov esi, ebx
inc edi
mov eax, ebx
mov dword [ebp + 0x14], ebx
add eax, esi
lea ecx, [ebp - 0x108]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036322
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x108]
call fcn.10002352
mov eax, dword [ebp + 0x14]
inc eax
mov dword [ebp + 0x14], eax
cmp eax, 0x78fd
jl 0x10036308
inc esi
cmp esi, 0x1dc1
jl 0x10036303
jmp 0x10036354
xor edi, edi
xor ebx, ebx
inc edi
cmp dword [ebp - 0x24], 0x31f7
jge 0x10036368
push str.ymzbj_cuinaai_fnsu_bqb_vvjmjn_ghbzopo_tgqpu_xfypzqgc_kcuwgewrk_umy_tvrwpjucg_mgilejplq_aymdn_obi
call fcn.10047084
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac]
mov dword [ebp + 0x14], 5
mov dword [ebp - 0x20], 0xc3203bd6
push 0xfffffffffffffffd
mov dword [ebp - 0x30], 0x108531d1
pop esi
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x20], 0xad5befa1
mov dword [ebp - 0x20], 0xfffffff9
push 2
call fcn.10001fe6
mov dword [ebp - 4], 8
mov dword [ebp - 0x20], 0x9ee491ba
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x20], 0x66798564
mov dword [ebp - 0x1c], ebx
jmp 0x100363dd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd8], 4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100363cc
mov dword [ebp - 0x1c], ebx
jmp 0x100363f5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd0], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100363e8
push ebx
push 0x1181
push 0x1e04
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x1c]
call fcn.10037117
add esp, 0xc
mov dword [ebp - 0x1c], ebx
jmp 0x10036429
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x88], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003641c
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp + 0x14]
dec dword [ebp + 0x14]
cmp eax, ecx
mov ecx, edi
cmovg ecx, ebx
inc dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
add eax, ecx
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x30], eax
or dword [ebp - 4], 0xffffffff
call fcn.10002048
mov dword [ebp + 0x14], edi
xor ecx, ecx
mov eax, dword [ebp + 0x14]
mov eax, dword [ebp + 0x14]
mov eax, dword [ebp + 0x14]
mov eax, dword [ebp + 0x14]
cmp eax, esi
mov eax, dword [ebp + 0x14]
setne cl
inc eax
add ecx, eax
xor edx, edx
mov eax, dword [ebp + 0x14]
cmp ecx, eax
setle dl
sub edx, dword [ebp + 0x14]
jne 0x1003648a
mov eax, dword [ebp + 0x14]
mov byte [ebp + 0x17], bl
cmp byte [ebp + 0x17], 0
je 0x100364bd
push 0x1463
push 0x227c
push 0x3b6f
push ebx
push 0x401
push edi
push 0x31ae
mov edx, 0x77d
xor cl, cl
call fcn.1003748b
add esp, 0x1c
mov eax, dword [ebp + 0x1c]
xor ecx, ecx
inc ecx
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], 0xb743d837
mov dword [ebp - 0x24], 4
mov dword [ebp + 0x14], 0xea381e16
mov dword [ebp - 0x34], 0xc37
mov dword [ebp + 0x14], ebx
jmp 0x100364f7
mov eax, dword [ebp + 0x14]
mov dword [ebp + eax*4 - 0x38], 0x624039b
inc dword [ebp + 0x14]
cmp dword [ebp + 0x14], ecx
jl 0x100364e9
mov byte [ebp + 0x17], bl
cmp byte [ebp + 0x17], 0
je 0x1003651c
push 0x1d3d
push 0x7fae
push ecx
mov dl, cl
xor cl, cl
call fcn.10034deb
add esp, 0xc
mov dword [ebp - 0x2c], ebx
jmp 0x100366ef
movdqa xmm0, xmmword [0x1006c4f0]
lea eax, [ebp - 0xb4]
mov dword [ebp + 0x14], 2
lea ecx, [ebp - 0x6c]
push dword [ebp + 0x14]
mov dword [ebp - 0x28], 0x4b3f4b14
push eax
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x6c], ebx
push eax
push ebx
movdqu xmmword [ebp - 0xc4], xmm0
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call fcn.100046f5
mov dword [ebp - 4], 9
xor edx, edx
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp + 0x14], 0xffffffff
mov dword [ebp + 0x14], 0xceb8a064
mov dword [ebp + 0x14], ebx
jmp 0x10036593
mov eax, dword [ebp + 0x14]
mov dword [ebp + eax*4 - 0x70], 0xbef27779
inc dword [ebp + 0x14]
cmp dword [ebp + 0x14], edx
jl 0x10036585
mov dword [ebp + 0x14], ebx
cmp dword [ebp + 0x14], ebx
jl 0x100366d9
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x18], ebx
jmp 0x100365c7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb4], 0xb8b2ef5e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100365b6
mov eax, dword [ebp + 0x14]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + 0x14]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + 0x14]
cmp dword [ebp - 0x38], ebx
je 0x10036600
mov esi, edx
cmp dword [ebp - 0x28], ebx
jne 0x10036602
mov esi, ebx
mov eax, dword [ebp + 0x14]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp + 0x14]
mov eax, dword [ebp + eax*4 - 0x38]
cmp esi, eax
sete cl
xor eax, eax
cmp ecx, dword [edi + 8]
setle al
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + 0x14]
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
jmp 0x100366c7
mov dword [ebp - 0x20], 0x94bf
mov dword [ebp - 0x30], 0x6a6d983a
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], 0x69b92b2c
cmp dword [ebp - 0x28], ebx
jne 0x100366d0
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x100366c4
mov dword [ebp - 0x44], 0x1fdf20be
mov dword [ebp - 0x4c], 6
mov dword [ebp - 0x4c], 0x9d6240c4
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x4c], 0xbeba6e32
mov ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x34]
push 1
cmp ecx, eax
mov eax, edx
mov edx, dword [ebp - 0x44]
cmovne eax, ebx
imul edx, dword [ebp - 0x20]
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0x24]
cmp edx, eax
pop edx
setg cl
xor eax, eax
cmp ecx, 0xffffffff
setne al
mov dword [ebp - 0x70], eax
dec dword [ebp - 0x28]
jns 0x10036664
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1003663f
dec dword [ebp + 0x14]
jns 0x100365a7
xor cl, cl
call fcn.100350d3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.10002048
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x10036524
mov dword [ebp + 0x14], 0x7561
cmp dword [ebp + 0x14], 0x7940
jle 0x1003672f
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x100788d8
xor eax, esi
cdq
push edx
push eax
call fcn.10001e5c
inc edi
cmp edi, 0x4d7d
jl 0x1003670c
inc esi
cmp esi, 0x3969
jl 0x1003670a
mov esi, ebx
mov cl, byte [ebp + esi - 0x3c]
mov dl, 0xbe
call fcn.1003e166
mov byte [ebp + esi - 0x3c], al
inc esi
cmp esi, 4
jb 0x10036731
mov dword [ebp - 4], 0xa
cmp dword [ebp + 0x14], 0x724c
jge 0x10036783
mov edx, str.cte_blnmxz_yglvswrlp_vbnhiu_dqpzmectf_phdemqqk_iwu_oquqan_pzteqcexl_suqfegox_fghiue
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x10036783
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
xor edi, edi
mov dword [ebp - 0x2c], 0xfe64fd9e
push 4
inc edi
call fcn.10001fe6
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x44], 0x4d0f
mov dword [ebp + 0x14], 0x9a13
push edi
call fcn.10001fe6
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x28], 0x4d99
mov dword [ebp - 0x30], 0x3508
mov dword [ebp + 0x14], 0x1673
cmp dword [ebp + 0x14], 0x5f5
jge 0x100369a2
lea eax, [ebp - 0x48]
push eax
push 0x1044a3c4
push str._d__d
call fcn.10047342
add esp, 0xc
cmp eax, 2
jne 0x100369a2
cmp dword [0x1044a3c4], 0
mov edi, ebx
jle 0x10036831
lea esi, [ebp - 0x31c]
lea esi, [esi + edi*4]
push esi
push 0x10067770
call fcn.10047342
mov eax, dword [esi]
mov dword [ebp + edi*4 - 0x214], eax
inc edi
pop ecx
pop ecx
cmp edi, dword [0x1044a3c4]
jl 0x10036809
push 0x104
push ebx
push 0x1044a3d0
call fcn.10030b13
mov eax, dword [0x1044a3c4]
lea edx, [ebp - 0x214]
add esp, 0xc
mov byte [ebp - 0x60], bl
lea ecx, [ebp - 0x214]
lea edx, [edx + eax*4]
push dword [ebp - 0x60]
mov eax, edx
sub eax, ecx
sar eax, 2
push eax
call fcn.1003e3e3
pop ecx
pop ecx
mov ecx, dword [0x1044a3c4]
mov edi, ebx
dec ecx
mov dword [ebp + 0x14], edi
mov eax, ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x18], eax
js 0x10036975
mov dword [ebp - 0x34], ebx
test ecx, ecx
je 0x100368bf
mov esi, dword [ebp + eax*4 - 0x31c]
mov edi, ebx
sub esi, dword [ebp - 0x48]
lea eax, [ecx + edi]
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp + eax*4 - 0x214], esi
jge 0x100368b0
lea edi, [eax + 1]
jmp 0x100368b2
mov ecx, eax
cmp edi, ecx
jne 0x1003689a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], edi
mov edi, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x24]
mov esi, ebx
test ecx, ecx
je 0x100368f8
mov eax, dword [ebp + eax*4 - 0x31c]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov edi, eax
lea eax, [esi + 1]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp + eax*4 - 0x214], edi
jle 0x100368ef
lea ecx, [eax - 1]
jmp 0x100368f1
mov esi, eax
cmp esi, ecx
jne 0x100368d7
mov edi, dword [ebp + 0x14]
lea ecx, [esi + 1]
call fcn.10036029
mov ecx, dword [ebp - 0x34]
mov esi, eax
call fcn.10036029
sub esi, eax
jns 0x10036911
add esi, 0x41
add edi, esi
mov dword [ebp + 0x14], edi
cmp edi, 0x41
jl 0x10036921
sub edi, 0x41
mov dword [ebp + 0x14], edi
mov ecx, dword [ebp - 0x24]
mov edi, ebx
test ecx, ecx
je 0x10036957
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x31c]
mov ebx, eax
mov dword [ebp - 0x20], eax
lea eax, [ecx + edi]
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp + eax*4 - 0x214], ebx
jge 0x1003694f
lea edi, [eax + 1]
jmp 0x10036951
mov ecx, eax
cmp edi, ecx
jne 0x10036939
xor ebx, ebx
lea edx, [esi + 1]
lea ecx, [edi + 1]
call fcn.1003604b
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp + 0x14]
dec eax
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
jns 0x10036887
push edi
push 0x1006abf0
call fcn.10047084
lea eax, [ebp - 0x48]
push eax
push 0x1044a3c4
push str._d__d
call fcn.10047342
add esp, 0x14
cmp eax, 2
je 0x100367fe
xor edi, edi
inc edi
cmp dword [ebp - 0x30], 0x359e
jle 0x100369ff
push 0x3f3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
mov edi, ebx
mov esi, ebx
mov dword [ebp + 0x14], ebx
mov eax, ebx
mov ecx, 0x100788d8
or eax, esi
or eax, edi
cdq
push edx
push eax
call fcn.10001e5c
inc ebx
cmp ebx, 0x24dd
jl 0x100369cb
inc esi
push 0
pop ebx
cmp esi, 0x321d
jl 0x100369c8
inc edi
cmp edi, 0x3231
jl 0x100369c6
xor edi, edi
inc edi
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x30], 0x319a
jge 0x10036a3c
mov edx, str.ikafjzd_nrml_zbb_rmfw_ilu_fakak
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x10036a3c
push edi
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xd
call fcn.10001fe6
push 0x41d4
push ebx
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x10
push eax
push ecx
lea edx, [ebp - 0x7c]
mov ecx, 0x47ea
call fcn.10034fdd
pop ecx
pop ecx
lea eax, [ebp - 0x40]
push edi
push eax
lea ecx, [ebp - 0x5c]
call fcn.10033b4c
add esp, 0x10
mov dword [ebp - 0x40], ebx
jmp 0x10036a93
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xa0], 0xaf9031ea
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jl 0x10036a82
lea eax, [ebp - 0x94]
mov edx, 0x83a
push eax
lea eax, [ebp - 0x40]
xor cl, cl
push eax
push 0x410a
sub esp, 0xc
call fcn.10034aff
mov eax, dword [ebp - 0x2c]
add esp, 0x18
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x7c]
mov dword [eax + 8], ecx
cmp dword [ebp - 0x2c], ecx
jl 0x10036b25
mov eax, dword [ebp - 0x5c]
cmp dword [eax], ebx
jne 0x10036ada
mov eax, ebx
cmp dword [ebp - 0x2c], ebx
je 0x10036adc
mov eax, edi
xor ecx, ecx
cmp eax, 0x3d37f4a1
mov eax, dword [ebp - 0x9c]
setg cl
add eax, 0x25005768
inc dword [ebp - 0x9c]
add eax, ecx
jne 0x10036b04
mov eax, dword [ebp - 0x5c]
mov ecx, ebx
cmp dword [eax], ebx
je 0x10036b06
mov ecx, edi
mov eax, dword [ebp - 0x28]
xor edx, edx
add ecx, 0x90611bc3
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x5c]
neg edx
sbb edx, edx
inc edx
cmp edx, dword [eax]
je 0x10036b27
mov edi, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edi, eax
mov eax, dword [ebp - 0x5c]
setg cl
cmp ecx, dword [eax]
jne 0x10036b3b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
lea ecx, [ebp - 0x94]
call fcn.10002048
lea ecx, [ebp - 0x5c]
call fcn.10002048
lea ecx, [ebp - 0x7c]
call fcn.10002048
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x3c]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret