Function at 0x10013c20
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Inspect section memory permissions

Disassembly:
mov edi, edi
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10021e9b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x490
mov eax, dword [0x10064318]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov dword [ebp - 0x478], esi
mov byte [ebp - 0x46b], cl
cmp word [0x10065150], 0
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x490], eax
je 0x100141e1
mov eax, dword [0x1006536c]
mov dword [ebp - 0x484], 0
cmp eax, 1
jne 0x100141ed
mov eax, dword [0x10064c58]
cmp dword [eax], 0
jne 0x100140d4
xor eax, eax
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0
jne 0x10013e40
mov ecx, dword fs:[0x30]
xor dl, dl
xor eax, eax
mov byte [ebp - 0x469], dl
mov ecx, dword [ecx + 0x1e4]
and ecx, 0x20000000
or eax, ecx
jne 0x10024f9f
cmp byte [0x10064c54], 0
je 0x10014242
mov al, byte [0x10064c55]
mov edi, dword [ebx + 8]
test al, al
jne 0x1001433c
push 0x30
lea eax, [ebp - 0x468]
mov dword [ebp - 0x470], 0
push 0
push eax
call sub.msvcrt.dll_memset
mov edx, dword [ebx + 0xc]
xor cl, cl
add esp, 0xc
mov dword [ebp - 0x468], 0x30
mov byte [ebp - 0x469], cl
mov dword [ebp - 0x47c], edx
cmp edi, 0x14
jb 0x10013d4a
cmp edi, 0x8002
jb case.0x10013ec0.6
cmp edi, 0x800b
je 0x10013e60
cmp edi, 0x8002
jbe 0x10013ea7
mov eax, edi
sub eax, 0x8003
je 0x1001411c
sub eax, 2
je 0x10013fd1
mov al, byte [ebp - 0x46b]
test al, al
jne 0x10013ec7
test cl, cl
jne 0x100253d2
test al, al
jne 0x10013ee6
test esi, esi
je 0x10013e40
cmp dword [0x100649e0], esi
je 0x10013e40
test cl, cl
jne 0x10013f6f
cmp dword [ebp - 0x47c], 0xfffffff8
je 0x10013f6f
cmp byte [0x100649f9], 0
jne 0x10013e40
cmp byte [0x10065149], 0
jne 0x10013e40
cmp dword [0x100649dc], 0
jne 0x10013e34
cmp dword [ebp - 0x470], 0
jne 0x10013e05
lea eax, [ebp - 0x468]
push eax
push 0
call dword [sym.imp.USER32.dll_GetGUIThreadInfo]
lea eax, [ebp - 0x470]
push eax
push dword [ebp - 0x45c]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
lea eax, [ebp - 0x494]
mov dword [ebp - 0x494], 0
push eax
push dword [ebp - 0x45c]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov esi, eax
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentThreadId]
cmp esi, eax
je 0x10013e79
mov esi, dword [ebp - 0x478]
cmp esi, dword [0x100649dc]
je 0x100254a5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1001f1e0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
test edx, edx
jne case.0x10013ec0.6
cmp esi, dword [0x100649d8]
jne case.0x10013ec0.6
jmp 0x100253bb
mov eax, dword [0x1006554c]
push 2
push eax
mov dword [0x100649dc], eax
call dword [sym.imp.USER32.dll_GetAncestor]
mov dword [0x100649d8], eax
mov eax, dword [0x10065548]
mov dword [0x100649d4], eax
mov eax, dword [0x10065544]
mov dword [0x100649d0], eax
jmp 0x10013e2e
je 0x1001403e
lea eax, [edi - 5]
cmp eax, 0xe
ja case.0x10013ec0.6
movzx eax, byte [eax + 0x100144d0]
jmp dword [eax*4 + 0x100144b0]
cmp byte [0x100649f9], 0
jne 0x10013e40
cmp byte [0x10065149], 0
je 0x10013d86
jmp 0x10013e40
mov edx, esi
mov ecx, 0x10064a40
call fcn.10014500
cmp edi, 3
je 0x10013f08
xor eax, eax
mov ecx, 0x100654a4
xchg dword [ecx], eax
test eax, eax
jne 0x10025423
mov dword [0x10064a38], 0x10000
cmp edi, 3
ja case.default.0x10013f17
jmp dword [edi*4 + 0x100144e0]
mov ecx, dword [ebp - 0x490]
mov edx, 1
mov dword [0x100649e0], esi
mov eax, dword [ecx]
mov dword [0x100649bc], eax
mov eax, dword [ecx + 4]
mov dword [0x100649c0], eax
mov eax, dword [ecx + 8]
mov dword [0x100649c4], eax
mov eax, dword [ecx + 0xc]
mov ecx, esi
mov dword [0x100649c8], eax
mov byte [0x100649fb], 1
call fcn.10011540
mov cl, byte [ebp - 0x469]
test cl, cl
je 0x10013e40
jmp 0x10014306
mov edx, esi
mov ecx, 0x10064a40
call fcn.10014500
cmp dword [0x10064a44], 0
je 0x10013e40
cmp edi, 0x8003
ja case.default.0x10013fca
cmp dword [ebp - 0x47c], 0xfffffff8
jne case.default.0x10013fca
cmp dword [0x10064a4c], 1
je case.default.0x10013fca
cmp byte [0x100645c0], 0
je case.default.0x10013fca
add edi, 0xffff8000
cmp edi, 3
ja case.default.0x10013fca
jmp dword [edi*4 + 0x100144f0]
mov al, byte [0x10064328]
mov byte [ebp - 0x471], al
mov eax, dword fs:[0x30]
mov byte [ebp - 0x46a], 0
mov ecx, dword [eax + 0x1e4]
xor eax, eax
and ecx, 0x20000000
or eax, ecx
jne 0x100251c2
mov al, byte [ebp - 0x46a]
cmp byte [ebp - 0x471], 0
je 0x100251cf
test al, al
jne 0x100251e6
cmp dword [0x100649f4], 0
jg 0x100251e6
push 0
push dword [ebx + 0xc]
push dword [0x10065138]
push esi
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x10013e40
test edx, edx
jne case.0x10013ec0.6
cmp dword [ebx + 0x10], edx
jne case.0x10013ec0.6
push 0x104
lea eax, [ebp - 0x228]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameW]
add eax, eax
cmp eax, 0x20a
jae 0x100144a8
xor ecx, ecx
mov word [ebp + eax - 0x228], cx
mov ecx, 0x10007f74
lea eax, [ebp - 0x228]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100143ed
test dx, dx
je 0x100140ae
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100143ed
add eax, 4
add ecx, 4
test dx, dx
jne 0x10014084
xor eax, eax
test eax, eax
je 0x10025139
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, eax
js 0x10014293
mov cl, byte [ebp - 0x469]
jmp case.0x10013ec0.6
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentThreadId]
mov ecx, dword [0x10064c58]
cmp dword [ecx], eax
jne 0x10013cae
mov eax, 1
jmp 0x10013cb0
mov ecx, dword [ebp - 0x490]
mov eax, dword [ecx]
mov dword [0x100649ac], eax
mov eax, dword [ecx + 4]
mov dword [0x100649b0], eax
mov eax, dword [ecx + 8]
mov dword [0x100649b4], eax
mov eax, dword [ecx + 0xc]
mov dword [0x100649b8], eax
jmp case.default.0x10013f17
test edx, edx
jne case.0x10013ec0.6
cmp dword [ebx + 0x10], edx
jne case.0x10013ec0.6
push 0x104
lea eax, [ebp - 0x438]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameW]
add eax, eax
cmp eax, 0x20a
jae 0x100144a8
xor ecx, ecx
mov word [ebp + eax - 0x438], cx
mov ecx, 0x10007f74
lea eax, [ebp - 0x438]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10014464
test dx, dx
je 0x1001418c
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10014464
add eax, 4
add ecx, 4
test dx, dx
jne 0x10014162
xor eax, eax
test eax, eax
je 0x100252ce
push dword [0x100649e4]
push esi
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
jne 0x1002535d
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, eax
jns 0x100140c9
cmp esi, dword [0x100649f0]
je 0x10025388
push 0x10008130
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
je 0x100140c9
jmp 0x100253b4
xor cl, cl
call fcn.100146d0
jmp 0x10013c88
cmp dword [0x10065370], 1
jne 0x10024f65
mov edi, dword [0x10065388]
test edi, edi
jne 0x10024f89
test eax, eax
jne 0x10024f7c
cmp dword [0x10065378], 5
jb 0x10024f72
mov eax, dword fs:[0x30]
mov ecx, 0x1006536c
mov eax, dword [eax + 0xa0]
add eax, 0xc
mov dword [0x10064c58], eax
mov eax, 1
xchg dword [ecx], eax
jmp 0x10013ca0
call fcn.10014c89
test al, al
jne 0x1001427c
push 0x100080f8
push 0
push 0x100000
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_OpenMutexW]
mov ecx, eax
test ecx, ecx
jne 0x10024fac
xor al, al
push ecx
mov byte [ebp - 0x46a], al
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov al, byte [ebp - 0x46a]
mov dl, byte [ebp - 0x469]
mov byte [0x10064c54], 1
mov byte [0x10064c55], al
jmp 0x10013cfa
cmp esi, dword [0x100649f0]
je 0x1002517d
push 0x10007ee0
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x1002518c
push 0x10008130
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
je 0x100140c9
jmp 0x100251b4
cmp byte [0x100649fa], 0
je 0x100142ed
cmp dword [0x100649e4], esi
jne 0x100142ed
xor edx, edx
mov byte [0x100649fb], 0
mov ecx, esi
call fcn.10011540
mov eax, dword [0x100649e8]
cmp eax, dword [0x100649dc]
jne case.default.0x10013f17
mov cl, 1
mov byte [ebp - 0x469], cl
mov esi, dword [0x100649e8]
mov dword [ebp - 0x478], esi
jmp 0x10013d96
mov ecx, dword [0x100649e0]
test ecx, ecx
je case.default.0x10013f17
jmp 0x10025431
cmp byte [0x10065559], 0
je case.0x10013ec0.6
jmp 0x100250d5
test dl, dl
jne 0x10013d05
mov dword [ebp - 0x488], 0
lea eax, [ebp - 0x488]
mov dword [ebp - 4], 0
push eax
push 0x10008340
push 0x10064b08
call fcn.1001e9a0
mov esi, dword [ebp - 0x488]
test eax, eax
js 0x100143af
mov eax, dword [esi]
push 0
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x47c], eax
cmp eax, fcn.10016180
je 0x100143f7
lea ecx, [ebp - 0x48c]
push ecx
push esi
mov ecx, eax
call dword [0x10066528]
call dword [ebp - 0x47c]
test eax, eax
js 0x100143af
cmp edi, dword [ebp - 0x48c]
je 0x10024fb3
mov dword [ebp - 4], 2
test esi, esi
je 0x100143ca
mov eax, dword [esi]
push esi
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x10066528]
call esi
mov esi, dword [ebp - 0x478]
mov dword [ebp - 4], 0xffffffff
jmp 0x10013d05
cmp esi, dword [0x100649e8]
jne case.0x10013ec0.6
jmp 0x100250c3
sbb eax, eax
or eax, 1
jmp 0x100140b0
lea eax, [ebp - 0x48c]
push eax
push esi
call fcn.10016180
jmp 0x1001439f
cmp dword [0x100649e8], esi
jne case.default.0x10013fca
mov eax, dword [0x10064a60]
test eax, eax
je 0x1002546c
cmp eax, 1
je 0x10014451
cmp dword [0x10064a58], 0
je 0x10014451
cmp byte [0x10065559], 0
jne 0x1002548d
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
sub eax, dword [0x10065554]
cmp eax, 0xfa
jbe 0x10025484
mov byte [0x100649fb], 0
xor al, al
mov byte [0x100649f8], al
jmp case.default.0x10013fca
sbb eax, eax
or eax, 1
jmp 0x1001418e
push esi
mov dword [0x100649e8], esi
mov byte [0x100649fb], 1
mov byte [0x100649f8], 0
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne case.default.0x10013fca
jmp 0x10025478
cmp dword [0x10064a50], 0
jne case.default.0x10013fca
jmp 0x1002545f
call fcn.1001f4a0
lea ecx, [ecx]
int1
dec edi
add dl, byte [eax]
fadd qword [ebx + 1]
adc byte [edx], ch
inc ebx
add dword [eax], edx
not byte [eax + 2]
adc byte [eax], bl
push ecx
add dl, byte [eax]
or edx, dword [eax + 2]
adc byte [ebp + 2014315088], dl
cmp eax, 0x7001001
add byte [ecx], al
add al, byte [ebx]
add al, 7
pop es
pop es
pop es
pop es
pop es
add eax, 1120702470
add dword [eax], edx
push ds
aas
add dword [eax], edx
inc eax
add dword [eax], edx
pop ss
inc ebx
add dword [eax], edx
xchg esi, eax
inc esp
add dword [eax], edx
push es
inc esp
add dword [eax], edx
outsb dx, byte [esi]
inc esp
add dword [eax], edx
push es
inc esp
add dword [eax], edx
rol esi, 0x45
ret 0x88ec
inc ebp
lds edi, [edx - 0x3a]
inc ebp
invalid
mov byte [di - 0x38], 0x66
rcl byte [ebx]
rcl byte [eax - 0x18], 0xc5
cld
invalid
inc ebp
invalid
fcmovb st(0), st(6)
inc ebp
idiv dword [edi - 0x39c18]
call dword [eax + 0x56]
jecxz 0x1002512f
sti
invalid
inc ebp
test dword [edx - 0x3a], esi
inc ebp
xchg byte [ebx - 0x3a], ah
inc ebp
xchg dword [edx - 0x3a], edi
inc ebp
mov byte [ebx - 0x3a], dh
inc ebp
mov dword [esi - 0x3a], ebx
inc ebp
mov dh, byte [edi - 0x3a]
inc ebp
mov edi, dword [eax - 0x3a]
inc ebp
invalid
lea edi, [edx - 0x3a]
inc ebp
invalid
invalid
dec esp
movzx eax, word [ebp + 0xc]
mov ecx, dword [ebp - 0x44]
lea eax, [eax + eax*4]
push dword [ecx + eax*8 + 0x10]
lea eax, [ecx + eax*8]
add al, 0xc1
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
add ecx, dword [ebp + 0x10]
add eax, esi
push ecx
push eax
call fcn.10024bd9
add esp, 0xc
inc dword [ebp + 0xc]
mov ax, word [ebp + 0xc]
mov eax, dword [ebp + 0xc]
cmp ax, word [edi + 6]
jb 0x100251a5
call fcn.10024c68
insd dword es:[edi], dx
fstp qword [ecx]
out dx, al
mov edi, dword [esi + 0x3c]
add edi, esi
mov dword [ebp - 0x88], edi
mov eax, dword [edi + 0x80]
cmp eax, ebx
je 0x10025457
add eax, esi
mov dword [ebp - 0x44], eax
cmp dword [eax + 4], ebx
jne 0x1002520d
cmp dword [eax + 0xc], ebx
je 0x100252b0
mov edi, dword [eax + 0xc]
add edi, esi
push edi
call dword [ebp - 0xc0]
mov dword [ebp + 0xc], eax
call fcn.10024c68
sti
jge 0x1002526e
dec ebp
cmp dword [ebp + 0xc], ebx
jne 0x1002523c
push edi
call dword [ebp - 0xb8]
cmp eax, ebx
mov dword [ebp + 0xc], eax
je 0x10025457
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax + 0x10]
mov eax, dword [eax]
cmp eax, ebx
lea edi, [ecx + esi]
jne 0x10025250
mov dword [ebp + 0x10], edi
jmp 0x10025255
add eax, esi
mov dword [ebp + 0x10], eax
call fcn.10024c68
mov bh, 0x50
cmpsb byte [esi], byte es:[edi]
test byte [ebx + 0x8b1045], 0x3b
ret
xor byte [eax + ecx + 0x25], dh
invalid
call fcn.10024c68
sub eax, 0x878b4529
mov al, byte [0x3b000000]
ret
cmp dword [eax], ebx
je 0x1002531c
mov edx, dword [eax + 4]
lea ecx, [eax + 8]
add edx, eax
mov dword [ebp + 8], ecx
cmp ecx, edx
or byte [ebx], al
ror byte [ecx - 0x35c4f7b3], 1
jae 0x10025317
mov ecx, dword [ebp + 8]
movzx ecx, word [ecx]
mov edx, ecx
and edx, 0xf000
cmp edx, 0x3000
jne 0x10025301
and ecx, 0xfff
mov edx, esi
sub edx, dword [edi + 0x34]
add ecx, esi
add ecx, dword [eax]
add dword [ecx], edx
jmp 0x10025309
cmp edx, ebx
jne 0x10025457
mov ecx, dword [eax + 4]
add dword [ebp + 8], 2
add ecx, eax
cmp dword [ebp + 8], ecx
jb 0x100252d8
add eax, dword [eax + 4]
jmp 0x100252c5
mov dword [ebp + 0xc], ebx
jmp 0x10025327
mov edi, dword [ebp - 0x88]
mov eax, dword [ebp + 0xc]
cmp ax, word [edi + 6]
jne 0x1002533f
mov edx, dword [ebp - 0xb4]
xor ecx, ecx
mov edi, 0x60000000
jmp 0x1002535d
movzx eax, ax
lea eax, [eax + eax*4]
mov ecx, dword [edi + eax*8 + 0x104]
mov edx, dword [edi + eax*8 + 0x108]
lea eax, [edi + eax*8 + 0xf8]
mov edi, dword [eax + 0x24]
lea eax, [edx + ecx - 1]
xor edx, edx
div dword [ebp - 0xac]
xor edx, edx
mov dword [ebp - 0x44], eax
mov eax, ecx
div dword [ebp - 0xac]
cmp eax, dword [ebp - 0x44]
ja 0x100253bb
mov edx, edi
mov dword [ebp + 8], edi
and dword [ebp + 8], 0x40000000
mov dword [ebp + 0x10], edi
jge 0x1002539a
and edx, 0x20000000
and dword [ebp + 0x10], 0x80000000
mov ecx, dword [ebp + 0x18]
cmp edx, ebx
je 0x100253a2
or byte [eax + ecx], 1
cmp dword [ebp + 8], ebx
je 0x100253ab
or byte [eax + ecx], 2
cmp dword [ebp + 0x10], ebx
je 0x100253b5
add ecx, eax
or byte [ecx], 4
add al, 0x40
inc eax
cmp eax, dword [ebp - 0x44]
jbe 0x10025397
inc dword [ebp + 0xc]
mov eax, dword [ebp - 0x88]
mov cx, word [ebp + 0xc]
cmp cx, word [eax + 6]
jbe 0x10025321
mov dword [ebp + 8], esi
xor edi, edi
mov eax, dword [ebp + 0x18]
push 2
pop ecx
movzx eax, byte [edi + eax]
sub eax, ecx
je 0x10025408
dec eax
je 0x100253ff
sub eax, 3
je 0x100253f6
mov dword [ebp - 4], 0x40
jmp 0x10025425
mov dword [ebp - 4], 4
jmp 0x1002540b
mov dword [ebp - 4], 0x20
jmp 0x1002540b
mov dword [ebp - 4], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 0xac]
push dword [ebp + 8]
call dword [ebp - 0xbc]
test eax, eax
je 0x10025457
mov eax, dword [ebp - 0xac]
add dword [ebp + 8], eax
inc edi
cmp edi, dword [ebp - 0x8c]
jbe 0x100253d7
je 0x10025432
invalid
invalid
mov eax, dword [ebp - 0x88]
mov edi, dword [eax + 0x28]
add edi, esi
call fcn.10024c68
fisub dword [ecx - 0x45]
dec esi
push dword [ebp + 0x14]
push 1
push esi
call edi
mov eax, esi
jmp 0x10025463
push 0x8000
push ebx
push esi
call dword [ebp - 8]
push ebp
clc
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
in al, dx
in al, dx
pop es
add byte [eax], al
push ebx
push esi
push edi
call fcn.10024c46
ret
inc ebx
clc
and byte [ebp - 0x354], 0
and byte [ebp - 0x353], 0
mov byte [ebp - 0x352], 0xda
and byte [ebp - 0x351], 0
mov byte [ebp - 0x350], 0x62
mov byte [ebp - 0x34f], 0x40
lodsd eax, dword [esi]
cld
invalid
invalid
mov byte [ebp - 0x34e], 0x51
mov byte [ebp - 0x34d], 0x75
mov byte [ebp - 0x34c], 0x57
mov byte [ebp - 0x34b], 0x4a
mov byte [ebp - 0x34a], 0x46
mov byte [ebp - 0x349], 0x40
mov byte [ebp - 0x348], 0x56
mov byte [ebp - 0x347], 0x56
mov byte [ebp - 0x346], 0x6d
mov byte [ebp - 0x345], 0x40
mov byte [ebp - 0x344], 0x44
mov byte [ebp - 0x343], 0x55
mov byte [ebp - 0x342], 0x25
lea eax, [ebp - 0x354]
push eax
call fcn.10024c78
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.10024c2d
add esp, 0xc
mov dword [ebp - 0x68c], eax
call dword [ebp - 0x68c]
mov dword [ebp - 0x674], eax
mov dword [ebp - 0x384], 4
and byte [ebp - 0x334], 0
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x333]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x670], 4
and byte [ebp - 0x3c4], 0
and byte [ebp - 0x3c3], 0
mov byte [ebp - 0x3c2], 0x99
and byte [ebp - 0x3c1], 0
mov byte [ebp - 0x3c0], 0x21
mov byte [ebp - 0x3bf], 3
mov byte [ebp - 0x3be], 0x12
mov byte [ebp - 0x3bd], 0x2b
mov byte [ebp - 0x3bc], 9
mov byte [ebp - 0x3bb], 2
mov byte [ebp - 0x3ba], 0x13
mov byte [ebp - 0x3b9], 0xa
mov byte [ebp - 0x3b8], 3
mov byte [ebp - 0x3b7], 0x20
mov byte [ebp - 0x3b6], 0xf
mov byte [ebp - 0x3b5], 0xa
mov byte [ebp - 0x3b4], 3
mov byte [ebp - 0x3b3], 0x28
mov byte [ebp - 0x3b2], 7
mov byte [ebp - 0x3b1], 0xb
mov byte [ebp - 0x3b0], 3
mov byte [ebp - 0x3af], 0x27
mov byte [ebp - 0x3ae], 0x66
lea eax, [ebp - 0x3c4]
push eax
call fcn.10024c78
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.10024c2d
add esp, 0xc
mov dword [ebp - 0x538], eax
and byte [ebp - 0x3ec], 0
and byte [ebp - 0x3eb], 0
mov byte [ebp - 0x3ea], 0x11
and byte [ebp - 0x3e9], 0
mov byte [ebp - 0x3e8], 0xa9
mov byte [ebp - 0x3e7], 0x8b
mov byte [ebp - 0x3e6], 0x9a
mov byte [ebp - 0x3e5], 0xa3
mov byte [ebp - 0x3e4], 0x81
mov byte [ebp - 0x3e3], 0x8a
mov byte [ebp - 0x3e2], 0x9b
mov byte [ebp - 0x3e1], 0x82
mov byte [ebp - 0x3e0], 0x8b
mov byte [ebp - 0x3df], 0xa6
mov byte [ebp - 0x3de], 0x8f
mov byte [ebp - 0x3dd], 0x80
mov byte [ebp - 0x3dc], 0x8a
mov byte [ebp - 0x3db], 0x82
mov byte [ebp - 0x3da], 0x8b
mov byte [ebp - 0x3d9], 0xaf
mov byte [ebp - 0x3d8], 0xee
lea eax, [ebp - 0x3ec]
push eax
call fcn.10024c78