Function at 0x100385f0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d898e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x388
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x40], edx
mov eax, ecx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], 0
lea ebx, [eax + 0x2c]
mov dword [ebp - 0x18], ebx
lea edi, [eax + 0x64]
mov dword [ebp - 0x38], edi
movdqa xmm0, xmmword [0x10107f40]
movdqu xmmword [ebp - 0x210], xmm0
movdqa xmm0, xmmword [0x10106ec0]
movdqu xmmword [ebp - 0x200], xmm0
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x1f0], xmm0
movdqu xmmword [ebp - 0x1e0], xmm0
movdqu xmmword [ebp - 0x1d0], xmm0
movdqu xmmword [ebp - 0x1c0], xmm0
movdqu xmmword [ebp - 0x1b0], xmm0
movdqu xmmword [ebp - 0x1a0], xmm0
push 0xbc
push 0x100ed86c
push 0x12
lea eax, [ebp - 0x210]
push eax
call fcn.10055ad0
add esp, 0x10
push eax
lea ecx, [ebp - 0x34]
call fcn.10010660
mov byte [ebp - 4], 1
lea eax, [ebp - 0x34]
push eax
mov ecx, ebx
call fcn.10039c70
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.10010c90
movdqa xmm0, xmmword [0x101078c0]
movdqu xmmword [ebp - 0x390], xmm0
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x380], xmm0
movdqu xmmword [ebp - 0x370], xmm0
movdqu xmmword [ebp - 0x360], xmm0
movdqu xmmword [ebp - 0x350], xmm0
movdqu xmmword [ebp - 0x340], xmm0
movdqu xmmword [ebp - 0x330], xmm0
movdqu xmmword [ebp - 0x320], xmm0
push 0x9d
push 0x100ed880
push 0xf
lea eax, [ebp - 0x390]
push eax
call fcn.10055ad0
add esp, 0x10
push eax
lea ecx, [ebp - 0x34]
call fcn.10010660
mov byte [ebp - 4], 2
mov edx, dword [edi + 0x10]
lea ecx, [ebp - 0x90]
call fcn.10042510
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, ebx
call fcn.10039920
mov ecx, eax
call fcn.1001f120
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x90]
call fcn.10010c90
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.10010c90
movdqa xmm0, xmmword [0x10107960]
movdqu xmmword [ebp - 0x310], xmm0
movdqa xmm0, xmmword [0x10107490]
movdqu xmmword [ebp - 0x300], xmm0
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x2f0], xmm0
movdqu xmmword [ebp - 0x2e0], xmm0
movdqu xmmword [ebp - 0x2d0], xmm0
movdqu xmmword [ebp - 0x2c0], xmm0
movdqu xmmword [ebp - 0x2b0], xmm0
movdqu xmmword [ebp - 0x2a0], xmm0
push 0x7e
push 0x100ed890
push 0x18
lea eax, [ebp - 0x310]
push eax
call fcn.10055ad0
add esp, 0x10
push eax
lea ecx, [ebp - 0x34]
call fcn.10010660
mov byte [ebp - 4], 4
lea eax, [ebp - 0x34]
push eax
mov ecx, ebx
call fcn.10039c70
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x34]
call fcn.10010c90
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x98], 0xf
mov dword [ebp - 0x9c], 0
mov byte [ebp - 0xac], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe4], 0xf
mov dword [ebp - 0xe8], 0
mov byte [ebp - 0xf8], 0
mov byte [ebp - 4], 6
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov byte [ebp - 4], 7
movdqa xmm0, xmmword [0x10107ad0]
movdqu xmmword [ebp - 0x290], xmm0
movdqa xmm0, xmmword [0x10106e20]
movdqu xmmword [ebp - 0x280], xmm0
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x270], xmm0
movdqu xmmword [ebp - 0x260], xmm0
movdqu xmmword [ebp - 0x250], xmm0
movdqu xmmword [ebp - 0x240], xmm0
movdqu xmmword [ebp - 0x230], xmm0
movdqu xmmword [ebp - 0x220], xmm0
push 0x5f
push 0x100ed8ac
push 0x11
lea eax, [ebp - 0x290]
push eax
call fcn.10055ad0
add esp, 0x10
push eax
lea ecx, [ebp - 0x34]
call fcn.10010660
mov byte [ebp - 4], 8
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x44]
push eax
mov ecx, ebx
call fcn.10039cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x34]
call fcn.10010c90
mov esi, dword [ebp - 0x44]
cmp esi, dword [ebx]
je 0x10038be7
lea eax, [esi + 0x28]
lea ecx, [ebp - 0xac]
cmp ecx, eax
je 0x10038930
push 0xffffffffffffffff
push 0
push eax
call fcn.100101d0
call fcn.100392e0
mov dword [ebp - 0xc8], eax
push 1
call fcn.100ab64f
add esp, 4
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 9
lea eax, [ebp - 0x60]
push eax
lea edx, [ebp - 0xc8]
lea ecx, [ebp - 0xac]
call fcn.1003c6f0
add esp, 4
mov bl, al
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x60]
call fcn.1002d580
test bl, bl
je 0x100389bc
mov edx, edi
lea ecx, [ebp - 0x90]
call fcn.10071480
mov byte [ebp - 4], 0xa
push eax
mov ecx, edi
call fcn.1001f120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x90]
call fcn.10010c90
mov ebx, dword [ebp - 0x18]
cmp byte [ebp + 0xc], 0
jne 0x10038bea
push esi
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
call fcn.100399a0
jmp 0x10038bea
call fcn.10039340
mov dword [ebp - 0xb8], eax
push 1
call fcn.100ab64f
add esp, 4
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x94]
push eax
lea edx, [ebp - 0xb8]
lea ecx, [ebp - 0xac]
call fcn.1003c6f0
add esp, 4
mov bl, al
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x94]
call fcn.1002d580
test bl, bl
je 0x10038a51
mov edx, edi
lea ecx, [ebp - 0x90]
call fcn.10071660
mov byte [ebp - 4], 0xc
push eax
mov ecx, edi
call fcn.1001f120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x90]
call fcn.10010c90
mov ebx, dword [ebp - 0x18]
cmp byte [ebp + 0xc], 0
jne 0x10038bea
push esi
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
call fcn.100399a0
jmp 0x10038bea
call fcn.100393a0
mov dword [ebp - 0x4c], eax
push 1
call fcn.100ab64f
add esp, 4
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x44]
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0xac]
call fcn.1003c6f0
add esp, 4
mov bl, al
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x44]
call fcn.1002d580
test bl, bl
je 0x10038be7
mov edx, edi
lea ecx, [ebp - 0x34]
call fcn.10071480
mov byte [ebp - 4], 0xe
mov byte [ebp - 0x1c], 0
push 1
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x34]
call fcn.1001f990
mov edi, eax
push edi
push 0
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x34]
call fcn.100398b0
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0xf8]
call fcn.1001f120
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x90]
call fcn.10010c90
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x54]
call fcn.10034ab0
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x5c]
call fcn.1003a570
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x54]
call fcn.10013bb0
push 0xffffffffffffffff
lea eax, [edi + 1]
push eax
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x34]
call fcn.100398b0
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x34]
call fcn.1001f120
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x90]
call fcn.10010c90
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x10038b9e
lea ecx, [ebp - 0x34]
push ecx
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.10071e40
add esp, 4
mov byte [ebp - 4], 0x12
push eax
mov edi, dword [ebp - 0x38]
mov ecx, edi
call fcn.1001f120
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x90]
call fcn.10010c90
mov ebx, dword [ebp - 0x18]
cmp byte [ebp + 0xc], 0
jne 0x10038b90
push esi
lea eax, [ebp - 0x50]
push eax
mov ecx, ebx
call fcn.100399a0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x34]
call fcn.10010c90
jmp 0x10038bea
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x34]
call fcn.10010c90
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5c]
call fcn.10013bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xf8]
call fcn.10010c90
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call fcn.10010c90
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [ebp - 0x18]
call fcn.10039400
push eax
lea ecx, [ebp - 0x34]
call fcn.10010660
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x4c]
push eax
mov ecx, ebx
call fcn.10039cc0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x34]
call fcn.10010c90
mov esi, dword [ebp - 0x4c]
cmp esi, dword [ebx]
je 0x10038ca4
mov eax, dword [ebp - 0x3c]
add eax, 0x9c
push eax
call fcn.10039460
mov edx, eax
lea ecx, [ebp - 0x34]
call fcn.1003c600
add esp, 4
mov byte [ebp - 4], 0x14
add esi, 0x28
push esi
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.1003c4e0
add esp, 4
mov byte [ebp - 4], 0x15
push eax
mov ecx, 0x100033b0
call fcn.1001f120
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x90]
call fcn.10010c90
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x34]
call fcn.10010c90
mov dword [ebp - 0x48], 0
lea eax, [ebp - 0x48]
push eax
push 0
push 0
push 0x10034d70
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, eax
call fcn.100584f0
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx + 0x78]
cmp eax, 4
jne 0x10038cc0
push 0x100f9688
mov ecx, edi
call fcn.100397f0
jmp 0x1003900f
cmp eax, 2
jne 0x10038d4f
call fcn.100394c0
push eax
lea ecx, [ebp - 0x78]
call fcn.10010660
mov esi, eax
mov byte [ebp - 4], 0x16
call fcn.10039520
push eax
mov edx, esi
lea ecx, [ebp - 0x90]
call fcn.1001ccd0
add esp, 4
mov byte [ebp - 4], 0x17
mov edx, eax
lea ecx, [ebp - 0x34]
call fcn.1008c040
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x90]
call fcn.10010c90
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x78]
call fcn.10010c90
push edi
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x78]
call fcn.1008c4a0
add esp, 4
mov byte [ebp - 4], 0x1b
push eax
mov ecx, edi
call fcn.1001f120
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x78]
call fcn.10010c90
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x34]
jmp 0x1003900a
mov ecx, dword [ebp - 0x3c]
call fcn.10038120
test al, al
je 0x1003900f
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xcc], 0xf
mov dword [ebp - 0xd0], 0
mov byte [ebp - 0xe0], 0
mov byte [ebp - 4], 0x1c
mov byte [ebp - 0x11], 1
mov ecx, edi
call fcn.10034860
mov esi, eax
mov dword [ebp - 0x48], esi
cmp esi, 0xffffffff
je 0x10039000
call fcn.1000f820
test al, al
je 0x10038e31
cmp dword [ebx + 0x78], 3
jne 0x10038e31
call fcn.10039580
push eax
lea ecx, [ebp - 0x190]
call fcn.1001ab60
mov byte [ebp - 4], 0x1d
mov edx, 0x10003380
mov ecx, eax
call fcn.1001d920
mov edx, eax
lea ecx, [ebp - 0x34]
call fcn.1001acf0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x190]
call fcn.10018740
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], 0x10
cmovae eax, dword [ebp - 0x34]
push dword [ebp - 0x24]
push esi
push eax
mov ecx, edi
call fcn.1003aae0
movzx ebx, byte [ebp - 0x11]
xor ecx, ecx
cmp eax, 0xffffffff
cmovne ebx, ecx
mov byte [ebp - 0x11], bl
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x34]
call fcn.10010c90
test bl, bl
je 0x10039000
mov ebx, dword [ebp - 0x40]
cmp dword [ebx + 0x40], 0
je 0x10038e59
add ebx, 0x30
lea eax, [ebp - 0xe0]
cmp eax, ebx
je 0x10038fe3
push 0xffffffffffffffff
push 0
push ebx
mov ecx, eax
call fcn.100101d0
jmp 0x10038fe3
mov eax, dword [0x100ed850]
test al, 1
jne 0x10038ea9
or eax, 1
mov dword [0x100ed850], eax
mov byte [ebp - 4], 0x20
push 0x100f9688
lea ecx, [ebp - 0x34]
call fcn.10010660
mov byte [ebp - 4], 0x21
lea edx, [ebp - 0x34]
mov ecx, 0x100ed854
call fcn.1005e100
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x34]
call fcn.10010c90
push 0x100e9e90
call fcn.100afeed
add esp, 4
mov byte [ebp - 4], 0x1c
mov esi, dword [ebx + 0x18]
mov edi, dword [ebx + 0x1c]
mov dword [ebp - 0xc0], esi
cmp esi, edi
je 0x10038f65
push 0
push 0x101027ec
mov ecx, esi
call fcn.10039870
mov ecx, 0x101027ec
cmp eax, 0xffffffff
mov eax, 0x100f8cc8
cmovne ecx, eax
mov dword [ebp - 0xc4], ecx
call fcn.100395f0
push eax
lea ecx, [ebp - 0x190]
call fcn.1001ab60
mov byte [ebp - 4], 0x22
mov edx, 0x10003380
mov ecx, eax
call fcn.1001d920
mov edx, esi
mov ecx, eax
call fcn.1001d920
lea edx, [ebp - 0xc4]
mov ecx, eax
call fcn.1001d8b0
mov edx, 0x100ed854
mov ecx, eax
call fcn.1001d920
mov edx, eax
lea ecx, [ebp - 0x78]
call fcn.1001acf0
mov byte [ebp - 4], 0x23
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0xe0]
call fcn.1002c6c0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x78]
call fcn.10010c90
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x190]
call fcn.10018740
add esi, 0x18
jmp 0x10038eaf
mov esi, dword [ebx + 0x24]
mov edi, dword [ebx + 0x28]
mov dword [ebp - 0xb0], esi
cmp esi, edi
je 0x10038fdd
call fcn.10039660
push eax
lea ecx, [ebp - 0x190]
call fcn.1001ab60
mov byte [ebp - 4], 0x24
mov edx, 0x10003398
mov ecx, eax
call fcn.1001d920
mov edx, esi
mov ecx, eax
call fcn.1001d920
mov edx, eax
lea ecx, [ebp - 0x78]
call fcn.1001acf0
mov byte [ebp - 4], 0x25
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0xe0]
call fcn.1002c6c0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x78]
call fcn.10010c90
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x190]
call fcn.10018740
add esi, 0x18
jmp 0x10038f6b
mov edi, dword [ebp - 0x38]
mov esi, dword [ebp - 0x48]
mov eax, dword [ebp + 8]
test eax, eax
je 0x10038fed
mov byte [eax], 1
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0xe0]
push eax
push esi
mov ecx, edi
call fcn.10027600
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe0]
call fcn.10010c90
cmp byte [ebp + 0xc], 0
je 0x100391ca
cmp dword [ebp - 0x9c], 0
je 0x100391ca
call fcn.100396d0
mov dword [ebp - 0xb4], eax
push 1
call fcn.100ab64f
add esp, 4
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x38]
push eax
lea edx, [ebp - 0xb4]
lea ecx, [ebp - 0xac]
call fcn.1003c6f0
add esp, 4
mov bl, al
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x38]
call fcn.1002d580
test bl, bl
je 0x1003908e
mov edx, edi
lea ecx, [ebp - 0x78]
call fcn.10071390
mov byte [ebp - 4], 0x27
push eax
mov ecx, edi
call fcn.1001f120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x78]
jmp 0x100391c5
call fcn.10039730
mov dword [ebp - 0xbc], eax
push 1
call fcn.100ab64f
add esp, 4
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x40]
push eax
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0xac]
call fcn.1003c6f0
add esp, 4
mov bl, al
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x40]
call fcn.1002d580
test bl, bl
je 0x100390f6
mov edx, edi
lea ecx, [ebp - 0x78]
call fcn.10071570
mov byte [ebp - 4], 0x29
push eax
mov ecx, edi
call fcn.1001f120
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x78]
jmp 0x100391c5
call fcn.10039790
mov dword [ebp - 0x50], eax
push 1
call fcn.100ab64f
add esp, 4
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x3c]
push eax
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0xac]
call fcn.1003c6f0
add esp, 4
mov bl, al
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3c]
call fcn.1002d580
test bl, bl
je 0x100391ca
push edi
mov edx, dword [ebp - 0x5c]
lea ecx, [ebp - 0x34]
call fcn.10071b70
mov byte [ebp - 4], 0x2b
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x90]
call fcn.1003c760
add esp, 4
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x34]
push ecx
mov edx, eax
lea ecx, [ebp - 0x78]
call fcn.1003c4e0
add esp, 4
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x34]
call fcn.1001f120
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x78]
call fcn.10010c90
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x90]
call fcn.10010c90
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x78]
call fcn.10071390
mov byte [ebp - 4], 0x2e
push eax
mov ecx, edi
call fcn.1001f120
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x78]
call fcn.10010c90
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x34]
call fcn.10010c90
movdqa xmm0, xmmword [0x101078d0]
movdqu xmmword [ebp - 0x178], xmm0
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x168], xmm0
movdqu xmmword [ebp - 0x158], xmm0
movdqu xmmword [ebp - 0x148], xmm0
movdqu xmmword [ebp - 0x138], xmm0
movdqu xmmword [ebp - 0x128], xmm0
movdqu xmmword [ebp - 0x118], xmm0
movdqu xmmword [ebp - 0x108], xmm0
push 0xab
push 0x100ed9d8
push 0xf
lea eax, [ebp - 0x178]
push eax
call fcn.10055ad0
add esp, 0x10
push eax
lea ecx, [ebp - 0x34]
call fcn.10010660
mov byte [ebp - 4], 0x2f
mov edx, dword [edi + 0x10]
lea ecx, [ebp - 0x78]
call fcn.10042510
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x18]
call fcn.10039920
mov ecx, eax
call fcn.1001f120
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x78]
call fcn.10010c90
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x34]
call fcn.10010c90
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5c]
call fcn.10013bb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xf8]
call fcn.10010c90
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call fcn.10010c90
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret