Function at 0x100246c0
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [0x10059898]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [ebp + 0xc], 0
mov eax, dword [ebp + 0x18]
push ebx
push esi
mov dword [ebp - 0x14], 0
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x3c], eax
je 0x10024789
push str.windmode.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
mov dword [0x1013e13c], eax
lea eax, [ebp - 0xc]
push 2
push eax
push 0x41f80a
mov word [ebp - 0xc], 0x9066
call edi
push eax
call esi
push 0
push 2
lea eax, [ebp - 0xc]
push eax
push 0x48ad1d
call edi
push eax
call esi
push 0
push 2
lea eax, [ebp - 0xc]
push eax
push 0x5d95f8
call edi
push eax
call esi
push 0
push 2
lea eax, [ebp - 0xc]
push eax
push 0x5df91b
call edi
push eax
call esi
lea eax, [ebp - 0x38]
push eax
push 0x40
push 6
push 0x4f00de
call ebx
mov eax, 0x4f00de
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
push 6
push 0x4f00de
call ebx
lea eax, [ebp - 0xc]
mov byte [ebp - 0x30], 0xe9
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 0x48b547
call edi
push eax
call esi
mov eax, 0x10026290
sub eax, 0x48b54c
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 0x34]
push eax
push 0x48b548
call edi
push eax
call esi
lea eax, [ebp - 0x38]
push eax
push 0x40
push 1
push 0x48b54c
call ebx
mov eax, 0x48b54c
mov byte [eax], 0x90
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
push 1
push 0x48b54c
call ebx
call fcn.1002caf0
cmp byte [ebp + 0x10], 0
je 0x1002484a
mov eax, dword [0x1004c9f8]
mov edx, 0xf
mov ecx, dword [0x1004c9f4]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x2c]
push 0x1004c9f0
mov dword [ebp - 0x2c], 0
push eax
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x2c], ecx
mov byte [ebp - 0x24], 0
mov dword [ebp - 0x14], 1
call fcn.10038c61
add esp, 8
test eax, eax
je 0x1002484a
push eax
call fcn.10038d35
add esp, 4
mov byte [ebp - 0x30], 1
jmp 0x1002484e
mov byte [ebp - 0x30], 0
test byte [ebp - 0x14], 1
je 0x10024888
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x10024888
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002487e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002538d
push ecx
push edx
call fcn.1002f2ed
add esp, 8
cmp byte [ebp - 0x30], 0
je 0x100249d1
push dword [ebp + 0x14]
mov dword [0x1013df60], 1
call fcn.100262b0
mov eax, dword [0x1004c9f8]
mov edx, 0xf
mov ecx, dword [0x1004c9f4]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x2c]
push 0x1004c9f0
mov dword [ebp - 0x2c], 0
push eax
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x2c], ecx
mov byte [ebp - 0x24], 0
call fcn.10038c61
add esp, 0xc
test eax, eax
je 0x100248f3
push eax
call fcn.10038d35
add esp, 4
mov byte [ebp - 0x30], 1
jmp 0x100248f7
mov byte [ebp - 0x30], 0
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x1002492b
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10024921
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10025392
push ecx
push edx
call fcn.1002f2ed
add esp, 8
cmp byte [ebp - 0x30], 0
je 0x100249d1
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x5b187f
call ebx
mov byte [0x5b187f], 0xe9
mov eax, 0x10027cc0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffa4e77c
mov dword [0x5b1880], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x5b187f
call ebx
push 0
push 5
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0xf423f68
push eax
push 0x4505f3
mov byte [ebp - 0x10], 0
mov dword [ebp - 0xc], 0xf423fb9
mov byte [ebp - 8], 0
call edi
push eax
call esi
push 0
push 5
lea eax, [ebp - 0xc]
push eax
push 0x4d768c
call edi
push eax
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x4d7691
call ebx
mov eax, 0x4d7691
mov byte [eax], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 1
push 0x4d7691
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 6
push 0x4f8468
call ebx
mov eax, 0x4f8468
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 6
push 0x4f8468
call ebx
lea eax, [ebp - 0x34]
mov byte [ebp - 0x30], 0xe9
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 0x404ac8
call edi
push eax
call esi
mov eax, 0x10028f70
sub eax, 0x404acd
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x34]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x404ac9
call edi
push eax
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 4
push 0x404acd
call ebx
mov eax, 0x404acd
mov dword [eax], 0x90909090
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 4
push 0x404acd
call ebx
lea eax, [ebp - 0x34]
mov byte [ebp - 0x30], 0xe9
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 0x4e6c84
call edi
push eax
call esi
mov eax, 0x10029330
sub eax, 0x4e6c89
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x34]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x4e6c85
call edi
push eax
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 2
push 0x4e6c89
call ebx
mov ecx, 0x90909090
mov eax, 0x4e6c89
mov word [eax], cx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 2
push 0x4e6c89
call ebx
push dword [ebp + 8]
call fcn.1002ef90
add esp, 4
mov word [ebp - 0xc], 0x23eb
lea eax, [ebp - 0xc]
push 0
push 2
push eax
push 0x4f46e8
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 0x30]
mov byte [ebp - 0x30], 0xeb
push eax
push 0x4f4685
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 0x30]
mov byte [ebp - 0x30], 0xeb
push eax
push 0x4f8564
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 0x30]
mov byte [ebp - 0x30], 0x26
push eax
push 0x4f8565
call edi
push eax
call esi
call fcn.1002eda0
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x42e901
call ebx
mov byte [0x42e901], 0xe9
mov eax, 0x10029c90
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffbd16fa
mov dword [0x42e902], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x42e901
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x47ae20
call ebx
mov byte [0x47ae20], 0xe9
mov eax, 0x10029cb0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffb851db
mov dword [0x47ae21], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x47ae20
call ebx
call fcn.10029840
call fcn.1002d540
lea eax, [ebp - 0x1c]
mov dword [0x1013e3e4], 0x4e5c5c
push eax
push 0x40
push 5
push 0x4e5c57
mov dword [0x1013e3e8], 0x4dff50
call ebx
mov byte [0x4e5c57], 0xe9
mov eax, 0x100245c0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffb1a3a4
mov dword [0x4e5c58], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x4e5c57
call ebx
lea eax, [ebp - 0x1c]
mov dword [0x1013e3d8], 0x4e6070
push eax
push 0x40
push 5
push 0x4dee9a
call ebx
mov byte [0x4dee9a], 0xe9
mov eax, 0x10024550
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffb21161
mov dword [0x4dee9b], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x4dee9a
call ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x30], 0xf
push eax
push 1
lea eax, [ebp - 0x30]
mov byte [ebp - 8], 0x87
push eax
push 0x5b30bd
call edi
push eax
call esi
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x5b30be
call edi
push eax
call esi
mov eax, 0x10024680
sub eax, 0x5b30c3
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x34]
push eax
push 0x5b30bf
call edi
push eax
call esi
lea eax, [ebp - 0x14]
mov dword [0x1013e3ec], 0x472e50
push eax
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0xf
push eax
mov byte [ebp - 0x30], 0x87
push 0x53ae42
call edi
push eax
call esi
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 0x53ae43
call edi
push eax
call esi
mov eax, 0x10024600
sub eax, 0x53ae48
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x34]
push eax
push 0x53ae44
call edi
push eax
call esi
call fcn.10024300
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x43c7f1
call ebx
mov byte [0x43c7f1], 0xe9
mov eax, 0x100294b0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffbc380a
mov dword [0x43c7f2], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x43c7f1
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x43c8d1
call ebx
mov byte [0x43c8d1], 0xe9
mov eax, 0x100294d0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffbc372a
mov dword [0x43c8d2], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x43c8d1
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x4dca37
call ebx
mov byte [0x4dca37], 0xe9
mov eax, 0x1002d2f0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffb235c4
mov dword [0x4dca38], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x4dca37
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 4
push 0x4dca3c
call ebx
mov eax, 0x4dca3c
mov dword [eax], 0x90909090
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 4
push 0x4dca3c
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x4dcac1
call ebx
mov byte [0x4dcac1], 0xe9
mov eax, 0x1002d320
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffb2353a
mov dword [0x4dcac2], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x4dcac1
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 4
push 0x4dcac6
call ebx
mov eax, 0x4dcac6
mov dword [eax], 0x90909090
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 4
push 0x4dcac6
call ebx
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0xfa
push eax
push 0x4fda37
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 9
push eax
push 0x4fc77a
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x90
push eax
push 0x5cd549
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x90
push eax
push 0x5cd54a
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x90
push eax
push 0x5cd54b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x90
push eax
push 0x5cd54c
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x90
push eax
push 0x5cd54d
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x90
push eax
push 0x5cd54e
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x90
push eax
push 0x5cd54f
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x90
push eax
push 0x5cd550
call edi
push eax
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x5b812a
call ebx
mov byte [0x5b812a], 0xe9
mov eax, 0x100294f0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffa47ed1
mov dword [0x5b812b], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x5b812a
call ebx
call fcn.1002adf0
push 0
push 0x10
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0x656d6167
push eax
push 0x65d400
mov dword [ebp - 0x20], 0x61746164
mov dword [ebp - 0x1c], 0x2e633032
mov dword [ebp - 0x18], 0x737264
call edi
push eax
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x4bd298
call ebx
mov byte [0x4bd298], 0xe9
mov eax, 0x1002d4a0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffb42d63
mov dword [0x4bd299], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x4bd298
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x4bd26d
call ebx
mov byte [0x4bd26d], 0xe9
mov eax, 0x1002d480
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffb42d8e
mov dword [0x4bd26e], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x4bd26d
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x4fc853
call ebx
mov byte [0x4fc853], 0xe9
mov eax, 0x10024040
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffb037a8
mov dword [0x4fc854], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x4fc853
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x4f7433
call ebx
mov byte [0x4f7433], 0xe9
mov eax, 0x10024010
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffb08bc8
mov dword [0x4f7434], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x4f7433
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x4e3ec5
call ebx
mov byte [0x4e3ec5], 0xe9
mov eax, 0x100240a0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffb1c136
mov dword [0x4e3ec6], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x4e3ec5
call ebx
call fcn.10025580
call fcn.10028c20
test al, al
je 0x100251b8
lea eax, [ebp - 0x34]
mov byte [ebp - 8], 0xe8
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x539aab
call edi
push eax
call esi
mov eax, 0x10027de0
sub eax, 0x539ab0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x34]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x539aac
call edi
push eax
call esi
lea eax, [ebp - 0x34]
mov byte [ebp - 8], 0xe9
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x53ae4a
call edi
push eax
call esi
mov eax, 0x10027ed0
sub eax, 0x53ae4f
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x34]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x53ae4b
call edi
push eax
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 1
push 0x53ae4f
call ebx
mov eax, 0x53ae4f
mov byte [eax], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 1
push 0x53ae4f
call ebx
lea eax, [ebp - 0x34]
mov byte [ebp - 8], 0xe9
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x4e284b
call edi
push eax
call esi
mov eax, 0x100254d0
sub eax, 0x4e2850
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x34]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push 0x4e284c
call edi
push eax
call esi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 4
push 0x4e2850
call ebx
mov eax, 0x4e2850
mov dword [eax], 0x90909090
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 4
push 0x4e2850
call ebx
jmp 0x100251bd
call fcn.10026d60
push 0x1004cdc0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1013ef64], eax
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x41c938
call ebx
mov byte [0x41c938], 0xe9
mov eax, 0x100253c0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffbe36c3
mov dword [0x41c939], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x41c938
call ebx
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x41c920
call ebx
mov byte [0x41c920], 0xe9
mov eax, 0x100253a0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0xffbe36db
mov dword [0x41c921], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 5
push 0x41c920
call ebx
push dword [ebp - 0x3c]
call fcn.10027520
add esp, 4
mov word [ebp - 0x14], 0x8024
lea eax, [ebp - 0x14]
mov byte [ebp - 0x12], 0x74
push 0
push 3
push eax
push 0x5df41c
call edi
push eax
call esi
push 0
push 3
lea eax, [ebp - 0x14]
push eax
push 0x451c29
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x64
push eax
push 0x5df4c1
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x80
push eax
push 0x5df4c4
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x84
push eax
push 0x5df4c6
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x24
push eax
push 0x5c84e0
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x80
push eax
push 0x5c84e2
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x95
push eax
push 0x5c84e4
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x64
push eax
push 0x451c38
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x80
push eax
push 0x451c3b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 8]
mov byte [ebp - 8], 0x84
push eax
push 0x451c3d
call edi
push eax
call esi
call fcn.10025de0
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 0xb
push 0x5c675c
call ebx
mov eax, 0x5c675c
mov ecx, 0x90909090
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov word [eax + 8], cx
mov byte [eax + 0xa], cl
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push 0xb
push 0x5c675c
call ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
xor ecx, ebp
call fcn.1002f2fb
mov esp, ebp
pop ebp
ret
call fcn.10032cfe
call fcn.10032cfe
int3