Function at 0x100e8c00
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10108d5e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1d8
mov eax, dword [0x1011c0c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x124], edx
mov edi, ecx
mov dword [ebp - 0x104], edi
mov eax, dword [0x101f61f4]
mov dword [ebp - 0xf4], 0
test al, 1
jne 0x100e8c9c
or eax, 1
mov dword [0x101f61f4], eax
mov eax, dword [0x101c3b64]
mov dword [0x101f61e0], eax
mov dword [0x101f61e4], 0
mov dword [0x101f61e8], 0
mov dword [0x101f61ec], 0
mov dword [0x101f61f0], 0
push 0x30
xorps xmm0, xmm0
mov dword [ebp - 0x10c], 4
lea eax, [ebp - 0x74]
movss dword [ebp - 0xf8], xmm0
push 0
push eax
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x78], 0
xorps xmm0, xmm0
lea eax, [ebp - 0xcc]
movups xmmword [ebp - 0x98], xmm0
push 0x30
push 0
push eax
movups xmmword [ebp - 0x88], xmm0
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [edi]
xorps xmm0, xmm0
mov eax, dword [0x101c3b4c]
add esp, 0xc
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xd0], 0
movups xmmword [ebp - 0xe0], xmm0
mov al, byte [ecx + eax]
test al, al
je 0x100e8d9c
movss xmm4, dword [0x1011d964]
movss xmm5, dword [0x1011d968]
movss xmm6, dword [0x1011d96c]
mov eax, dword [0x1011dce0]
mov ecx, dword [0x1011dce8]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x108], ecx
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm5
movss dword [ebp - 0x110], xmm6
jmp 0x100e8fc6
mov eax, dword [0x101c501c]
add eax, 0xffffff9b
xor eax, 0x930318f
mov eax, dword [eax + ecx]
mov ecx, dword [0x101c39b4]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov dword [ebp - 0x140], eax
test eax, eax
je 0x100e98f6
mov ecx, dword [eax]
mov edx, dword [ecx + 0x6f8]
mov ecx, eax
call edx
mov dword [ebp - 0x108], eax
test eax, eax
je 0x100e98f6
mov edi, dword [edi]
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov ecx, dword [edi]
push eax
mov edx, dword [ecx + 0x28c]
mov ecx, edi
call edx
cmp dword [edi + 0x39e1], 0
je 0x100e8f86
mov eax, dword [0x101c3b50]
mov edi, dword [edi + eax]
test edi, edi
je 0x100e8f86
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x100e8f86
cmp byte [edi + 0x109], 0
movss xmm1, dword [ebp - 0xf8]
jne 0x100e8e9f
mov eax, dword [0x101c4f9c]
add eax, 0xffffffbb
xor eax, 0x930316f
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x100e8e9f
mov eax, dword [0x101c5020]
add eax, 0xffffff9a
xor eax, 0x9303190
mov eax, dword [eax + ecx]
mov ecx, dword [0x101c39b4]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x100e8f86
movss xmm1, dword [ebp - 0xf8]
mov ecx, dword [0x101c5014]
mov eax, dword [edi + 0x60]
add ecx, 0xffffff9d
xor ecx, 0x930318d
mov eax, dword [ecx + eax]
test eax, eax
je 0x100e8f86
movss xmm3, dword [eax + 0x1ac]
movss xmm2, dword [ebp - 0x134]
cvtps2pd xmm3, xmm3
cvtps2pd xmm0, xmm2
addsd xmm3, qword [0x1010f958]
comisd xmm0, xmm3
movsd qword [ebp - 0x130], xmm3
jbe 0x100e8f86
subsd xmm0, xmm3
movaps xmm4, xmm1
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x1010f9a4]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x1010f938]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x100e8f4a
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm2, dword [ebp - 0x134]
add esp, 8
movsd xmm3, qword [ebp - 0x130]
fstp dword [ebp - 0x128]
movss xmm4, dword [ebp - 0x128]
movaps xmm1, xmm4
mulss xmm1, xmm4
cvtps2pd xmm2, xmm2
movaps xmm0, xmm1
addss xmm1, xmm1
mulss xmm0, dword [0x1010f990]
subsd xmm3, xmm2
mulss xmm1, xmm4
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x134], xmm0
movq xmm0, qword [ebp - 0x13c]
mov eax, dword [ebp - 0x134]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
movq qword [ebp - 0x118], xmm0
movss xmm5, dword [ebp - 0x114]
movss xmm4, dword [ebp - 0x118]
mov dword [ebp - 0x110], eax
movss xmm6, dword [ebp - 0x110]
movd xmm0, dword [ecx + 0xec]
lea esi, [ebp - 0x164]
movss xmm1, dword [ecx + 0xf8]
lea eax, [ebp - 0x168]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x168], 0
movss xmm7, dword [edi + 8]
movss dword [ebp - 0xfc], xmm0
subss xmm7, xmm4
movss xmm0, dword [0x1010f9a0]
divss xmm0, xmm1
movss xmm3, dword [edi + 0xc]
comiss xmm0, dword [ebp - 0xf8]
movss xmm2, dword [edi + 0x10]
subss xmm3, xmm5
movss dword [ebp - 0x164], xmm0
subss xmm2, xmm6
movss dword [ebp - 0x128], xmm1
cmovbe esi, eax
movaps xmm1, xmm7
mulss xmm1, xmm7
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm1, xmm0
movaps xmm0, xmm2
mulss xmm0, xmm2
addss xmm0, xmm1
call fcn.10027aa0
addss xmm0, dword [0x1010f828]
movss xmm1, dword [0x1010f918]
mov eax, dword [edi]
mov dword [0x101f61e4], eax
mov dword [0x101f61f0], 0
divss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm7, xmm1
mulss xmm0, xmm3
mulss xmm1, xmm2
movaps xmm3, xmm0
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [ebp - 0xfc]
comiss xmm0, dword [ebp - 0xf8]
movss dword [ebp - 0x20], xmm7
movss dword [ebp - 0x1c], xmm3
movss dword [ebp - 0x18], xmm1
jbe 0x100e98f6
nop dword [eax]
movss xmm0, dword [ecx + 0x104]
subss xmm0, dword [ebp - 0x120]
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 0x19b], 1
mulss xmm7, xmm0
mulss xmm3, xmm0
mulss xmm1, xmm0
addss xmm7, xmm4
addss xmm3, xmm5
movss dword [ebp - 0x12c], xmm0
addss xmm1, xmm6
movaps xmm2, xmm7
movss dword [ebp - 0x34], xmm7
subss xmm2, xmm4
movaps xmm0, xmm3
movss dword [ebp - 0x11c], xmm3
subss xmm0, xmm5
movss dword [ebp - 0x38], xmm1
subss xmm1, xmm6
movss dword [ebp - 0x1d0], xmm2
mulss xmm2, xmm2
movss dword [ebp - 0x1cc], xmm0
mulss xmm0, xmm0
movss dword [ebp - 0x1c8], xmm1
mulss xmm1, xmm1
addss xmm2, xmm0
addss xmm2, xmm1
ucomiss xmm2, dword [ebp - 0xf8]
lahf
test ah, 0x44
jp 0x100e9165
mov byte [ebp - 0x19b], 0
mov ecx, dword [0x101c39cc]
lea edx, [ebp - 0x98]
push edx
mov dword [ebp - 0x1a0], 0
lea edx, [ebp - 0x1e0]
mov byte [ebp - 0x19c], 1
movss dword [ebp - 0x1e0], xmm4
movss dword [ebp - 0x1dc], xmm5
movss dword [ebp - 0x1d8], xmm6
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1b0], 0
mov eax, dword [ecx]
push 0x101f61e0
push 0x4600400b
push edx
mov eax, dword [eax + 0x14]
call eax
mov eax, dword [edi + 4]
test eax, eax
je 0x100e9270
movss xmm1, dword [0x1010fa08]
lea edx, [ebp - 0x13c]
movss xmm0, dword [ebp - 0x20]
mulss xmm0, xmm1
push ecx
push eax
lea eax, [ebp - 0x98]
addss xmm0, dword [ebp - 0x34]
push eax
push ecx
lea ecx, [ebp - 0x118]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x1c]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x11c]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x18]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x38]
movss dword [ebp - 0x134], xmm0
call fcn.100e87f0
add esp, 0x10
jmp 0x100e9499
movss xmm3, dword [0x1010fa08]
lea eax, [ebp - 0x98]
movss xmm2, dword [ebp - 0x20]
movss xmm1, dword [ebp - 0x1c]
movss xmm0, dword [ebp - 0x18]
mulss xmm2, xmm3
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x178]
mulss xmm1, xmm3
mov dword [ebp - 0x24], 0xc2700000
addss xmm2, dword [ebp - 0x34]
mulss xmm0, xmm3
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x118]
addss xmm1, dword [ebp - 0x11c]
mov dword [ebp - 0x3c], 0x101f61e0
addss xmm0, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
mov eax, dword [0x101f604c]
movss dword [ebp - 0x178], xmm2
movss dword [ebp - 0x174], xmm1
movss dword [ebp - 0x170], xmm0
test al, 1
jne 0x100e9473
or eax, 1
mov dword [0x101f604c], eax
mov dword [ebp - 4], 0
mov eax, 0x10
movaps xmm0, xmmword [0x10110ae0]
xorps xmm0, xmmword [0x10110700]
mov dword [ebp - 0x150], 0x4e5a5f4e
mov dword [ebp - 0x14c], 0x5b4e2f56
mov dword [ebp - 0x148], 0x595d4e58
mov byte [ebp - 0x144], 0x6e
movups xmmword [ebp - 0x160], xmm0
xor byte [ebp + eax - 0x160], 0x6e
inc eax
cmp eax, 0x1d
jb 0x100e9341
xorps xmm0, xmm0
mov dword [ebp - 0x180], 0
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x17c], 0
movups xmmword [ebp - 0x190], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100e9376
sub ecx, edx
lea eax, [ebp - 0x160]
push ecx
push eax
lea ecx, [ebp - 0x190]
call fcn.10035b40
mov byte [ebp - 4], 1
mov eax, dword [0x101c3974]
test eax, eax
je 0x100e93a4
mov edi, dword [eax + 0x50]
jmp 0x100e93a6
xor edi, edi
mov eax, dword [0x101c396c]
mov ecx, dword [ebp - 0xf4]
test eax, eax
je 0x100e93bd
mov edx, dword [eax + 0x18]
or ecx, 4
jmp 0x100e93c2
or ecx, 8
xor edx, edx
mov eax, ecx
mov dword [ebp - 0xf4], ecx
and ecx, 0xfffffff7
test al, 8
cmove ecx, eax
mov dword [ebp - 0xf4], ecx
and dword [ebp - 0xf4], 0xfffffffb
test cl, 4
mov eax, dword [ebp - 0xf4]
cmove eax, ecx
lea ecx, [ebp - 0x16c]
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x190]
push eax
push edx
mov edx, edi
call fcn.10027d00
mov eax, dword [ebp - 0x16c]
add esp, 8
test eax, eax
je 0x100e9423
mov ecx, dword [eax + 1]
test ecx, ecx
jne 0x100e941e
xor eax, eax
jmp 0x100e9423
add eax, 5
add eax, ecx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x17c]
mov dword [0x101f6050], eax
cmp ecx, 0xf
jbe 0x100e9466
mov edx, dword [ebp - 0x190]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100e945c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100e988f
push ecx
push edx
call fcn.100fe0da
add esp, 8
mov edi, dword [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x101f6050], 0
je 0x100e9499
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x24]
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
push 0x4600400b
call dword [0x101f6050]
add esp, 0x10
movss xmm1, dword [ebp - 0x6c]
ucomiss xmm1, dword [0x1010f918]
lahf
test ah, 0x44
jnp 0x100e98f6
mulss xmm1, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x108]
addss xmm1, dword [ebp - 0x120]
movss xmm0, dword [eax + 0x108]
movss dword [ebp - 0x12c], xmm1
mulss xmm1, dword [0x1010f838]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_powf
mulss xmm0, dword [ebp - 0xfc]
mov ecx, dword [edi + 4]
movss dword [ebp - 0xfc], xmm0
test ecx, ecx
je 0x100e9590
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x100e95ed
cmp eax, ecx
jne 0x100e95ed
mov edx, dword [ebp - 0x54]
cmp edx, 1
jl 0x100e951d
cmp edx, 7
jle 0x100e9526
cmp edx, 0xa
jne 0x100e95ed
mov eax, dword [0x101c5034]
xor edi, edi
mov esi, dword [ebp - 0x140]
add eax, 0xffffff95
xor eax, 0x9303195
movaps xmm1, xmm0
cmp dword [eax + esi], 0x1f
mov eax, dword [ebp - 0x108]
cmove edx, edi
movss xmm2, dword [eax + 0xf0]
call fcn.100e7d00
mov esi, dword [ebp - 0x124]
cmp dword [ebp - 0x10c], 4
mov ecx, dword [ebp - 0x104]
setne al
mov byte [esi + 0xc], al
mov dword [esi + 8], edx
movss dword [esi + 4], xmm0
mov eax, dword [ecx + 4]
mov dword [esi], eax
jne 0x100e9895
comiss xmm0, dword [ecx + 0x14]
setae al
jmp 0x100e98f8
mov edi, dword [ebp - 0x10c]
cmp edi, 4
mov ecx, dword [ebp - 0x124]
setne al
mov byte [ecx + 0xc], al
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x100e95dc
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x100e95d4
mov edx, dword [ebp - 0x54]
cmp edx, 1
jl 0x100e95cb
cmp edx, 7
jle 0x100e989e
cmp edx, 0xa
je 0x100e989e
movss xmm0, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x124]
mov edi, dword [ebp - 0x104]
movss dword [eax + 4], xmm0
cmp byte [edi + 0x1c], 0
je 0x100e98f6
mov ecx, dword [0x101c39f0]
movsx edx, word [ebp - 0x58]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movss xmm0, dword [ebp - 0x12c]
mov edx, eax
comiss xmm0, dword [0x1010fae0]
mov dword [ebp - 0x3c], edx
movss xmm1, dword [ebp - 0x128]
movss xmm0, dword [ebp - 0xf8]
jbe 0x100e963c
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x100e98f6
movss xmm2, dword [0x1010f87c]
comiss xmm2, dword [edx + 0x58]
ja 0x100e98f6
mov al, byte [ebp - 0x56]
mov ecx, dword [ebp - 0x68]
movzx edi, word [edx + 0x60]
mov edx, dword [ebp - 0x10c]
shr al, 7
shr ecx, 3
and al, 1
and ecx, 0xffffff01
mov byte [ebp - 0xfd], al
mov dword [ebp - 0x12c], ecx
test edx, edx
jne 0x100e9692
test al, al
jne 0x100e9692
test cl, cl
jne 0x100e9692
cmp edi, 0x47
je 0x100e9692
cmp edi, 0x59
jne 0x100e98f6
comiss xmm0, xmm1
jae 0x100e98f6
test edx, edx
jle 0x100e98f6
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x8c]
call fcn.100e7e60
add esp, 0xc
test al, al
jne 0x100e96ec
mov ecx, dword [0x101c39cc]
lea edx, [ebp - 0x30]
push 0
push 0x600400b
push edx
mov eax, dword [ecx]
mov eax, dword [eax]
call eax
test eax, 0x600400b
je 0x100e98f6
mov ecx, dword [0x101c39f0]
movsx edx, word [ebp - 0xb0]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movzx edx, word [eax + 0x60]
mov ecx, edx
cmp edi, 0x47
je 0x100e9754
cmp edi, 0x59
je 0x100e9754
cmp byte [ebp - 0xfd], 0
jne 0x100e973a
cmp byte [ebp - 0x12c], 0
jne 0x100e973a
movss xmm3, dword [eax + 0x58]
mov eax, dword [ebp - 0x3c]
addss xmm3, dword [eax + 0x58]
mulss xmm3, dword [0x1010f8d8]
jmp 0x100e9742
movss xmm3, dword [0x1010f918]
movss xmm7, dword [0x1010f88c]
movss xmm0, dword [0x1010f990]
jmp 0x100e9767
movss xmm0, dword [0x1010f990]
movss xmm7, dword [0x1010f864]
movaps xmm3, xmm0
cmp edi, ecx
jne 0x100e9787
cmp ecx, 0x55
je 0x100e9784
cmp ecx, 0x57
je 0x100e9784
cmp edx, 0x4c
jne 0x100e9787
movss xmm3, dword [0x1010f964]
jmp 0x100e9787
movaps xmm3, xmm0
movss xmm4, dword [ebp - 0xe4]
movss xmm5, dword [ebp - 0xe0]
movaps xmm2, xmm4
subss xmm2, dword [ebp - 0x8c]
movss xmm6, dword [ebp - 0xdc]
movaps xmm0, xmm5
subss xmm0, dword [ebp - 0x88]
movaps xmm1, xmm6
subss xmm1, dword [ebp - 0x84]
mulss xmm2, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.10027aa0
movss xmm2, dword [0x1010f918]
divss xmm2, xmm3
mulss xmm7, dword [ebp - 0xfc]
maxss xmm2, dword [ebp - 0xf8]
movss dword [ebp - 0x120], xmm0
mulss xmm0, xmm0
movaps xmm1, xmm2
mulss xmm2, dword [0x1010f860]
mulss xmm1, dword [0x1010f990]
mulss xmm0, xmm2
mulss xmm1, dword [esi]
addss xmm1, xmm7
addss xmm1, xmm0
movss xmm0, dword [ebp - 0xfc]
maxss xmm1, dword [ebp - 0xf8]
subss xmm0, xmm1
movss xmm1, dword [0x1010f918]
comiss xmm1, xmm0
movss dword [ebp - 0xfc], xmm0
ja 0x100e98f6
dec dword [ebp - 0x10c]
movss xmm1, dword [ebp - 0x18]
movss xmm3, dword [ebp - 0x1c]
movss xmm7, dword [ebp - 0x20]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm5
movss dword [ebp - 0x110], xmm6
jmp 0x100e90c0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
comiss xmm0, dword [ecx + 0x18]
setae al
jmp 0x100e98f8
mov eax, dword [0x101c5034]
xor ecx, ecx
mov esi, dword [ebp - 0x140]
add eax, 0xffffff95
movss xmm1, dword [ebp - 0xfc]
xor eax, 0x9303195
cmp dword [eax + esi], 0x1f
mov eax, dword [ebp - 0x108]
cmove edx, ecx
mov ecx, dword [ebp - 0x4c]
movss xmm2, dword [eax + 0xf0]
call fcn.100e7d00
mov eax, dword [ebp - 0x124]
cmp edi, 4
mov dword [eax], ecx
mov ecx, dword [ebp - 0x104]
mov dword [eax + 8], edx
movss dword [eax + 4], xmm0
jmp 0x100e957e
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100fdc5c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret