Function at 0x1005df80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100baf1e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x80
push esi
push edi
mov eax, dword [0x100cc008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x65766f6d
push eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x34], 0x746e656d
mov byte [ebp - 0x30], 0
call fcn.1001d770
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0
push eax
mov ecx, esi
call fcn.10036880
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 1
call fcn.1001d720
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x18], 0x706f6862
lea edi, [esi + 0x30]
mov byte [ebp - 0x14], 0
call fcn.1001d770
mov dword [ebp - 4], 2
xor ecx, ecx
mov dword [ebp - 0x40], 0xcdd6d7c3
mov dword [ebp - 0x3c], 0xcbd6c3cf
mov dword [ebp - 0x38], 0xd7c882c1
mov word [ebp - 0x34], 0xd2cf
mov byte [ebp - 0x32], 0xa2
nop dword [eax + eax]
xor byte [ebp + ecx - 0x40], 0xa2
inc ecx
cmp ecx, 0xf
jb 0x1005e050
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x58]
call fcn.1001d770
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 3
push eax
lea ecx, [esi + 0x68]
call fcn.10036880
lea eax, [ebp - 0x58]
mov byte [esi + 0x99], 1
push eax
lea ecx, [esi + 0xa0]
call fcn.10036880
mov byte [esi + 0x9c], 0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 4
call fcn.1001d720
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 5
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], edi
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x64726961
push eax
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x34], 0x6b6375
call fcn.1001d770
mov dword [ebp - 4], 6
xor ecx, ecx
mov dword [ebp - 0x1c], 0xc9c1d7c6
mov dword [ebp - 0x18], 0x82cccb82
mov dword [ebp - 0x14], 0xa2d0cbc3
xor byte [ebp + ecx - 0x1c], 0xa2
inc ecx
cmp ecx, 0xc
jb 0x1005e127
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x70]
call fcn.1001d770
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 7
push eax
lea ecx, [esi + 0xf0]
call fcn.10036880
lea eax, [ebp - 0x70]
mov byte [esi + 0x121], 1
push eax
lea ecx, [esi + 0x128]
call fcn.10036880
mov byte [esi + 0x124], 0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 8
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 9
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0xb8]
mov dword [ebp - 0x14], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
mov dword [ebp - 0x3c], 0xcdd6d7c3
xor ecx, ecx
mov dword [ebp - 0x38], 0xc3d0d6d1
mov word [ebp - 0x34], 0xc7c4
mov byte [ebp - 0x32], 0xa2
nop dword [eax]
xor byte [ebp + ecx - 0x3c], 0xa2
inc ecx
cmp ecx, 0xb
jb 0x1005e1f0
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x58]
call fcn.1001d770
mov dword [ebp - 4], 0xa
lea eax, [ebp - 0x24]
movaps xmm0, xmmword [0x100c1db0]
lea ecx, [ebp - 0x70]
pxor xmm0, xmmword [0x100c1ae0]
push eax
movups xmmword [ebp - 0x24], xmm0
mov byte [ebp - 0x14], 0
call fcn.1001d770
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [esi + 0x178]
call fcn.10036880
lea eax, [ebp - 0x70]
mov byte [esi + 0x1a9], 1
push eax
lea ecx, [esi + 0x1b0]
call fcn.10036880
mov byte [esi + 0x1ac], 0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xc
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xd
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0x140]
mov dword [ebp - 0x14], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x72747363
push eax
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x34], 0x656661
call fcn.1001d770
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x1c], 0x74732d63
mov dword [ebp - 0x18], 0x65666172
mov byte [ebp - 0x14], 0
call fcn.1001d770
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [esi + 0x238]
call fcn.10036880
lea eax, [ebp - 0x58]
push eax
lea ecx, [esi + 0x200]
call fcn.10036880
mov dword [esi + 0x234], 0xffffffff
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x10
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0x11
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0x1c8]
mov dword [ebp - 0x14], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x72747361
push eax
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x34], 0x656661
call fcn.1001d770
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x1c], 0x74732d61
mov dword [ebp - 0x18], 0x65666172
mov byte [ebp - 0x14], 0
call fcn.1001d770
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [esi + 0x2c8]
call fcn.10036880
lea eax, [ebp - 0x58]
push eax
lea ecx, [esi + 0x290]
call fcn.10036880
mov dword [esi + 0x2c4], 0xffffffff
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x14
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0x15
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0x258]
mov dword [ebp - 0x14], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x7274737a
push eax
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x34], 0x656661
call fcn.1001d770
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x1c], 0x74732d7a
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], 0x65666172
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 0x14], 0
call fcn.1001d770
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [esi + 0x358]
call fcn.10036880
lea eax, [ebp - 0x58]
push eax
lea ecx, [esi + 0x320]
call fcn.10036880
mov dword [esi + 0x354], 0xffffffff
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x18
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0x19
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0x2e8]
mov dword [ebp - 0x14], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
xor eax, eax
mov dword [ebp - 0x18], 0x7a0068
mov word [ebp - 0x14], ax
lea ecx, [ebp - 0x58]
lea eax, [ebp - 0x18]
push eax
call fcn.1008e160
mov dword [ebp - 4], 0x1a
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x38], 0x72665f7a
mov word [ebp - 0x34], 0x7165
mov byte [ebp - 0x32], 0
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x1b
call fcn.1001d770
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [esi + 0x3b0]
call fcn.10036880
lea eax, [ebp - 0x58]
mov byte [esi + 0x3e1], 0
mov dword [esi + 0x430], 0
lea ecx, [esi + 0x418]
mov dword [esi + 0x388], 8
mov dword [esi + 0x38c], 8
mov dword [esi + 0x3ec], 0x3f800000
mov dword [esi + 0x3f0], 0x42c80000
mov dword [esi + 0x3e8], 0x42480000
mov dword [esi + 0x3fc], 0
mov dword [esi + 0x3f4], 0x3f000000
push eax
call fcn.1008e130
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x1d
call fcn.1001d720
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x1e
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0x1f
call fcn.1003c160
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0x378]
mov dword [ebp - 0x14], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x25
push eax
lea ecx, [ebp - 0x58]
call fcn.1008e160
mov dword [ebp - 4], 0x20
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x38], 0x69645f7a
mov word [ebp - 0x34], 0x7473
mov byte [ebp - 0x32], 0
call fcn.1001d770
push 0x100c051d
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x21
call fcn.1001d770
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [esi + 0x46c]
call fcn.10036880
lea eax, [ebp - 0x58]
mov byte [esi + 0x49d], 0
push eax
lea ecx, [esi + 0x4d4]
mov dword [esi + 0x4ec], 0
mov dword [esi + 0x444], 8
mov dword [esi + 0x448], 8
mov dword [esi + 0x4a8], 0x3f800000
mov dword [esi + 0x4ac], 0x42c80000
mov dword [esi + 0x4a4], 0x41a00000
mov dword [esi + 0x4b8], 0
mov dword [esi + 0x4b0], 0x3f000000
call fcn.1008e130
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x23
call fcn.1001d720
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x24
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0x25
call fcn.1003c160
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0x434]
mov dword [ebp - 0x14], eax
mov dword [eax + 0x18], 0
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x656b6166
push eax
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x34], 0x6b6c6177
mov byte [ebp - 0x30], 0
call fcn.1001d770
mov dword [ebp - 4], 0x26
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x1c], 0x656b6166
mov dword [ebp - 0x18], 0x6c61772d
mov word [ebp - 0x14], 0x6b
call fcn.1001d770
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [esi + 0x560]
call fcn.10036880
lea eax, [ebp - 0x58]
push eax
lea ecx, [esi + 0x528]
call fcn.10036880
mov dword [esi + 0x55c], 0xffffffff
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x28
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0x29
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0x4f0]
mov dword [ebp - 0x14], eax
mov dword [eax + 0x18], 1
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x6f747561
push eax
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x34], 0x6b656570
mov byte [ebp - 0x30], 0
call fcn.1001d770
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x20], 0xcdd6d7c3
mov dword [ebp - 0x1c], 0xcbd6c3cf
mov dword [ebp - 0x18], 0xc7d282c1
mov word [ebp - 0x14], 0xc9c7
mov byte [ebp - 0x12], 0xa2
xor ecx, ecx
nop dword [eax]
xor byte [ebp + ecx - 0x20], 0xa2
inc ecx
cmp ecx, 0xf
jb 0x1005e8b0
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x70]
call fcn.1001d770
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [esi + 0x5f0]
call fcn.10036880
lea eax, [ebp - 0x58]
push eax
lea ecx, [esi + 0x5b8]
call fcn.10036880
mov dword [esi + 0x5ec], 0xffffffff
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2c
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0x2d
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0x580]
mov dword [ebp - 0x14], eax
mov dword [eax + 0x18], 1
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
movaps xmm0, xmmword [0x100c1fd0]
lea eax, [ebp - 0x40]
pxor xmm0, xmmword [0x100c1ae0]
lea ecx, [ebp - 0x58]
push eax
movups xmmword [ebp - 0x40], xmm0
mov byte [ebp - 0x30], 0
call fcn.1001d770
mov dword [ebp - 4], 0x2e
mov ecx, 0x10
movaps xmm0, xmmword [0x100c1c80]
pxor xmm0, xmmword [0x100c1ae0]
mov dword [ebp - 0x7c], 0xdbc3d5ce
mov dword [ebp - 0x78], 0xcccd82d1
mov byte [ebp - 0x74], 0xa2
movups xmmword [ebp - 0x8c], xmm0
nop dword [eax + eax]
xor byte [ebp + ecx - 0x8c], 0xa2
inc ecx
cmp ecx, 0x19
jb 0x1005e9b0
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x70]
call fcn.1001d770
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [esi + 0x6d8]
call fcn.10036880
lea eax, [ebp - 0x70]
mov byte [esi + 0x709], 1
push eax
lea ecx, [esi + 0x710]
call fcn.10036880
mov byte [esi + 0x70c], 0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x30
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0x31
call fcn.1001d720
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0x6a0]
mov dword [ebp - 0x14], eax
mov dword [eax + 0x18], 1
mov ecx, dword [ebp - 0x14]
imul eax, dword [ecx + 0x18], 0xeb
add eax, 0x14
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x14]
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x1c], ecx
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x18]
call fcn.1002e3b0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x6f747561
push eax
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x34], 0x706f7473
mov byte [ebp - 0x30], 0
call fcn.1001d770
mov dword [ebp - 4], 0x32
xor ecx, ecx
mov dword [ebp - 0x20], 0xcdd6d7c3
mov dword [ebp - 0x1c], 0xcbd6c3cf
mov dword [ebp - 0x18], 0xd6d182c1
mov word [ebp - 0x14], 0xd2cd
mov byte [ebp - 0x12], 0xa2
xor byte [ebp + ecx - 0x20], 0xa2
inc ecx
cmp ecx, 0xf
jb 0x1005eaa4
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x70]
call fcn.1001d770
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [esi + 0x680]
call fcn.10036880
lea eax, [ebp - 0x58]
push eax
lea ecx, [esi + 0x648]
call fcn.10036880
mov dword [esi + 0x67c], 0xffffffff
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x34
call fcn.1001d720
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0x35
call fcn.1001d720
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
push eax
lea ecx, [esi + 0x668]
mov dword [ebp - 0x14], 0x10022320
call fcn.1002e3b0
lea eax, [esi + 0x610]
mov dword [ebp - 0x2c], eax
lea ecx, [esi + 0x18]
mov dword [eax + 0x18], 1
mov edx, dword [ebp - 0x2c]
imul eax, dword [edx + 0x18], 0xeb
add eax, 0x14
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0xc], 0xaf
mov eax, dword [ebp - 0x2c]
mov edx, dword [esi + 0x2c]
mov dword [eax + 0x1c], edx
lea eax, [ebp - 0x2c]
push eax
call fcn.1002e3b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret