Function at 0x40d9d0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5aab98
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x63a188]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x120], ecx
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x128], eax
call fcn.00435af0
test al, al
je 0x40da26
push ecx
push ecx
pop ebp
pop esi
push edi
pop ecx
pop ebx
pop eax
pop ebx
push edi
push edi
push ecx
pop esi
pop ecx
pop edi
pop edi
call fcn.00435b35
test al, al
je 0x40da4d
push ebp
push ecx
pop eax
push eax
pop edx
push esp
pop esp
pop ebp
pop esp
push esi
pop edi
pop edi
pop eax
pop ebp
push edi
pop eax
pop ecx
pop ecx
push ecx
pop esi
push esp
pop edi
pop esi
pop ebp
pop esi
pop edx
pop esi
pop esi
pop ebx
pop esi
mov dword [ebp - 0x130], 0
call fcn.00435a21
test al, al
je 0x40da73
pop ecx
pop ebx
push edi
pop eax
pop ebx
pop edi
push eax
push ebx
push edi
push ebx
push eax
push edi
pop ecx
push ebx
pop eax
pop eax
push ebx
pop edi
push ebx
mov ebx, dword [ebp - 0x120]
mov dword [ebp - 0x124], 0
lea eax, [ebx + 0x14]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00443200
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
mov dword [ebp - 4], 0
cmovae eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.004390e4
cmp dword [ebp - 0xa4], 8
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 1
cmovae eax, dword [ebp - 0xb8]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.0043902f
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004433fe
add esp, 0x20
mov byte [ebp - 4], 3
call fcn.00435952
test al, al
je 0x40db1e
pop ecx
pop edx
push esi
pop edx
push ebx
push esp
pop esp
push edi
pop esp
pop esi
push ecx
pop esp
pop ebp
pop eax
push edx
pop edi
pop esp
pop ecx
push ebx
pop edi
push ebp
pop edi
pop edx
push esi
push ecx
pop ebp
pop eax
pop ecx
push esi
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.00439cf2
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.004433fe
add esp, 0x10
mov esi, dword [ebx]
mov byte [ebp - 4], 5
cmp esi, dword [ebx + 4]
je 0x40dcc8
cmp dword [esi + 0x14], 0x10
jb 0x40db6c
mov edx, dword [esi]
jmp 0x40db6e
mov edx, esi
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp byte [edx], 0
jne 0x40db89
xor ecx, ecx
jmp 0x40db99
mov ecx, edx
lea edi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40db90
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00408000
cmp dword [ebp - 0x44], 0x10
lea ecx, [ebp - 0x58]
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x28]
cmovae ecx, dword [ebp - 0x58]
cmp dword [ebp - 0x14], 0x10
mov ebx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x48]
cmovae edx, ebx
cmp eax, edi
cmovb edi, eax
mov eax, dword [ebp - 0x14]
test edi, edi
je 0x40dc25
sub edi, 4
jb 0x40dbe3
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x40dbe8
add edx, 4
add ecx, 4
sub edi, 4
jae 0x40dbd2
cmp edi, 0xfffffffc
je 0x40dc1c
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x40dc15
cmp edi, 0xfffffffd
je 0x40dc1c
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x40dc15
cmp edi, 0xfffffffe
je 0x40dc1c
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x40dc15
cmp edi, 0xffffffff
je 0x40dc1c
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x40dc1c
sbb eax, eax
or eax, 1
jmp 0x40dc1e
xor eax, eax
test eax, eax
jne 0x40dc31
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x18]
cmp edx, ecx
jb 0x40dc31
jbe 0x40dc79
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x40dc65
inc eax
cmp eax, 0x1000
jb 0x40dc5c
test byte [ebp - 0x28], 0x1f
jne 0x40dc96
mov eax, dword [ebx - 4]
cmp eax, ebx
jae 0x40dc96
sub ebx, eax
cmp ebx, 4
jb 0x40dc96
cmp ebx, 0x23
ja 0x40dc96
mov ebx, eax
push ebx
call fcn.00431343
add esp, 4
mov eax, dword [ebp - 0x120]
add esi, 0x18
cmp esi, dword [eax + 4]
jne 0x40db62
jmp 0x40dcc8
mov dword [ebp - 0x130], 1
cmp eax, 0x10
jb 0x40dcc8
inc eax
cmp eax, 0x1000
jb 0x40dcbf
test byte [ebp - 0x28], 0x1f
je 0x40dc9b
call fcn.00451231
mov eax, dword [ebx - 4]
cmp eax, ebx
jb 0x40dca7
call fcn.00451231
sub ebx, eax
cmp ebx, 4
jae 0x40dcb3
call fcn.00451231
cmp ebx, 0x23
jbe 0x40dcbd
call fcn.00451231
mov ebx, eax
push ebx
call fcn.00431343
add esp, 4
call fcn.00435997
test al, al
je 0x40dce3
pop esi
push esi
pop ebx
push ebx
push ecx
push ecx
push esi
pop eax
push eax
pop esi
push esi
push esp
push esp
pop edx
pop eax
pop eax
push ebx
pop esi
call fcn.00435af0
test al, al
je 0x40dd07
pop edx
push edx
pop ebx
push edi
push ebp
pop edi
push ebp
push edx
push eax
pop esi
push esp
pop ebp
push esi
pop ebx
push esi
pop ebp
push edx
push esp
push eax
pop edx
pop eax
pop edi
pop eax
pop ecx
push esp
pop ecx
pop esp
call fcn.004357f9
test al, al
je 0x40dd23
pop eax
pop ebp
pop edi
push eax
push edx
pop ebp
pop ebx
pop esi
pop esi
pop ecx
push eax
push ecx
push edx
pop ebp
pop edx
push edx
pop ebx
pop edi
push ecx
cmp dword [ebp - 0x130], 0
jne 0x40dd33
xor esi, esi
jmp 0x40e3fb
call fcn.00435997
test al, al
je 0x40dd57
pop esp
push edi
push esi
push edi
push edx
push ecx
pop esp
push edi
push edi
pop ecx
push edx
pop edi
push eax
push ecx
pop edi
pop eax
pop edx
push edi
push esi
push eax
pop eax
pop ebp
pop esi
push ebp
pop ecx
pop edx
push ebx
call fcn.0043590d
test al, al
je 0x40dd7b
pop edx
push ebp
pop ebp
pop edi
push ecx
push edx
pop edi
pop eax
push esp
push esp
pop esp
push edx
push ecx
push ebx
push ecx
pop esi
pop edi
push esp
pop ebx
pop eax
push ecx
pop edx
pop edx
push eax
pop edi
pop esp
pop esi
call fcn.0043558c
test al, al
je 0x40dda1
pop ebx
pop edx
push edx
push esp
pop esi
pop ebx
pop esp
push esi
push ebp
push esi
pop ebx
pop edi
push ebp
pop ebx
push edi
pop ebp
push ebp
push ecx
pop ecx
push ebx
push ebx
pop ecx
pop esp
push ebx
push esp
pop eax
pop ecx
push eax
pop ecx
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x40ddcc
mov eax, dword [ecx]
jmp 0x40ddce
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp - 0xb8]
push edx
push eax
call fcn.00408100
mov esi, dword [ebp - 0x128]
lea eax, [ebp - 0xa0]
mov ebx, dword [ebp - 0x120]
mov ecx, ebx
push esi
push eax
call fcn.0040d840
cmp dword [ebp + 0xc], 0
mov byte [ebp - 4], 6
je 0x40dee8
call fcn.00435a21
test al, al
je 0x40de3d
pop eax
push esp
pop ebx
push ebx
pop eax
pop ebp
pop edi
pop ebx
push ebp
pop eax
push ecx
push edi
push eax
push edi
pop esi
pop ebx
pop esi
push ecx
pop esi
pop ecx
pop ecx
pop ebx
pop eax
push ebp
pop eax
push ecx
pop esp
pop ebx
push edx
mov ebx, dword [ebp - 0x120]
mov esi, dword [ebp - 0x128]
cmp dword [ebx + 0xb4], 0
je 0x40de6d
push 1
lea eax, [ebp - 0xa0]
push eax
sub esp, 0x18
lea ecx, [ebx + 0x14]
mov eax, esp
push ecx
push eax
call fcn.00443200
mov ecx, dword [ebx + 0xb4]
add esp, 8
push esi
call fcn.00409c30
cmp dword [ebp - 0x8c], 8
lea eax, [ebp - 0xa0]
cmovae eax, dword [ebp - 0xa0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40e235
lea eax, [ebp - 0x124]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x40dec2
mov eax, dword [ecx]
jmp 0x40dec4
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp - 0xa0]
push edx
push eax
call fcn.00408100
call fcn.00437cf4
add esp, 0x1c
mov dword [ebx + 0x68], eax
jmp 0x40e235
call fcn.00435bbf
test al, al
je 0x40df05
push ebp
push ebx
push esp
push esp
push esp
pop ecx
push ebx
pop esi
push edi
push ebx
pop eax
pop ebp
push ebx
push eax
pop ecx
pop esp
push edi
push esi
push ebp
pop eax
push 0xffffffffffffffff
push 0
lea ecx, [ebx + 0x14]
mov dword [ebp - 0x2c], 0xf
push ecx
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
call fcn.00407ed0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.00407ed0
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 8
push str.51391424056128321237591758114545
push eax
call fcn.00436855
mov esi, eax
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 9
push str.85398143036704401167665368184529
push eax
call fcn.00436855
push esi
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
call fcn.0043a6af
mov eax, dword [ebp - 0xec]
add esp, 0x1c
mov byte [ebp - 4], 9
cmp eax, 0x10
jb 0x40dfdf
mov ecx, dword [ebp - 0x100]
inc eax
cmp eax, 0x1000
jb 0x40dfd6
test cl, 0x1f
je 0x40dfb2
call fcn.00451231
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x40dfbe
call fcn.00451231
sub ecx, eax
cmp ecx, 4
jae 0x40dfca
call fcn.00451231
cmp ecx, 0x23
jbe 0x40dfd4
call fcn.00451231
mov ecx, eax
push ecx
call fcn.00431343
add esp, 4
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xec], 0xf
mov dword [ebp - 0xf0], 0
mov byte [ebp - 0x100], 0
mov byte [ebp - 4], 8
cmp eax, 0x10
jb 0x40e04e
mov ecx, dword [ebp - 0x118]
inc eax
cmp eax, 0x1000
jb 0x40e045
test cl, 0x1f
je 0x40e021
call fcn.00451231
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x40e02d
call fcn.00451231
sub ecx, eax
cmp ecx, 4
jae 0x40e039
call fcn.00451231
cmp ecx, 0x23
jbe 0x40e043
call fcn.00451231
mov ecx, eax
push ecx
call fcn.00431343
add esp, 4
cmp dword [ebp - 0x14], 0x10
lea ecx, [ebp - 0x28]
mov edi, dword [ebp - 0x18]
lea edx, [ebp - 0x40]
cmovae ecx, dword [ebp - 0x28]
mov esi, edi
cmp dword [ebp - 0x2c], 0x10
mov ebx, dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
cmp ebx, edi
cmovb esi, ebx
test esi, esi
je 0x40e0d0
sub esi, 4
jb 0x40e091
nop word [eax + eax]
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x40e096
add edx, 4
add ecx, 4
sub esi, 4
jae 0x40e080
cmp esi, 0xfffffffc
je 0x40e0ca
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x40e0c3
cmp esi, 0xfffffffd
je 0x40e0ca
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x40e0c3
cmp esi, 0xfffffffe
je 0x40e0ca
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x40e0c3
cmp esi, 0xffffffff
je 0x40e0ca
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x40e0ca
sbb eax, eax
or eax, 1
jmp 0x40e0cc
xor eax, eax
test eax, eax
jne 0x40e125
cmp ebx, edi
jb 0x40e125
ja 0x40e125
call fcn.0043d3b5
mov ebx, dword [ebp - 0x120]
sub esp, 0x18
mov ecx, esp
mov dword [ebx + 0xc], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40e118
mov eax, dword [ecx]
mov byte [eax], 0
lea eax, [ebx + 0x14]
jmp 0x40e1a8
mov eax, ecx
mov byte [eax], 0
lea eax, [ebx + 0x14]
jmp 0x40e1a8
call fcn.0043d3b5
mov ebx, dword [ebp - 0x120]
sub esp, 0x18
mov ecx, esp
mov dword [ebx + 0xc], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x40e15e
mov eax, dword [ecx]
jmp 0x40e160
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x40]
push 0
push eax
call fcn.00407ed0
mov ecx, ebx
call fcn.0040d490
mov dword [ebp - 0x124], eax
test eax, eax
jne 0x40e1bf
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], eax
jb 0x40e1a0
mov eax, dword [ecx]
jmp 0x40e1a2
mov eax, ecx
mov byte [eax], 0
lea eax, [ebp - 0x28]
push 0xffffffffffffffff
push 0
push eax
call fcn.00407ed0
mov ecx, ebx
call fcn.0040d490
mov dword [ebp - 0x124], eax
call fcn.0043d3b5
sub eax, dword [ebx + 0xc]
cmp dword [ebp - 0x124], 0
mov dword [ebx + 0xc], eax
lea eax, [ebp - 0x70]
jne 0x40e1da
push 1
jmp 0x40e1dc
push 2
cmp dword [ebp - 0x5c], 0x10
cmovae eax, dword [ebp - 0x70]
push eax
push 1
push 1
call fcn.0040aec0
mov ecx, eax
call fcn.0041cd30
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x40e20a
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00408320
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 6
cmp eax, 0x10
jb 0x40e235
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00408320
call fcn.00435952
test al, al
je 0x40e254
pop esp
push edi
push ebp
pop ebx
pop ebp
pop edx
push edx
push ebp
pop edx
push ebp
push ebx
push ebx
push ebp
push esi
push edi
push edi
push ebx
pop esp
pop ebx
pop eax
push esi
pop esi
call fcn.0043590d
test al, al
je 0x40e27c
pop esp
push ebp
pop edx
push ecx
push ebp
pop ebx
pop edx
push ebx
push ecx
push esi
push ebx
push ebx
pop esp
push esp
pop edx
push esp
push edi
pop esi
pop esi
push edx
pop edi
pop ecx
push ebp
push esp
pop esi
pop ebp
pop esi
push ebp
pop eax
pop ecx
push esp
cmp dword [ebp - 0x124], 0
jne 0x40e28c
xor esi, esi
jmp 0x40e3c0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x12c], 0
call fcn.0043583e
test al, al
je 0x40e2c4
push esi
pop ebp
pop ebp
pop edi
push esi
push esp
push ebp
push esi
pop ebp
push edx
pop ecx
pop ebp
pop esi
pop esi
push edi
pop esp
push esp
pop ebx
pop ebp
push esi
push ebp
pop ebx
pop ebx
push ebp
push eax
push esi
pop edi
lea ecx, [ebp - 0x119]
call fcn.0042b0b0
mov eax, dword [ebp - 0x120]
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xb
lea edi, [eax + 0x44]
push edi
push ecx
lea ecx, [ebp - 0x134]
push ecx
push dword [ebp - 0x124]
lea ecx, [ebp - 0x119]
push dword [eax + 0x68]
call fcn.0040f220
mov ecx, dword [ebp - 0x134]
test ecx, ecx
je 0x40e394
mov eax, dword [ebp - 0x12c]
test eax, eax
je 0x40e394
push eax
push ecx
call fcn.004114d0
mov esi, eax
add esp, 8
test esi, esi
jne 0x40e3b5
lea eax, [ebp - 0x118]
push edi
push eax
call fcn.00443200
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x40e343
mov eax, dword [eax]
push eax
push 0x89
call fcn.00443630
add esp, 8
lea ecx, [ebp - 0x118]
call fcn.00420480
push dword [ebp - 0x12c]
lea eax, [ebp - 0x118]
push eax
call fcn.0040b530
add esp, 8
cmp dword [eax + 0x14], 8
jb 0x40e379
mov eax, dword [eax]
push eax
push 0x89
call fcn.00443630
add esp, 8
lea ecx, [ebp - 0x118]
call fcn.00420480
jmp 0x40e3b5
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
push 0x89
call fcn.00443630
add esp, 8
xor esi, esi
lea ecx, [ebp - 0x119]
call fcn.00443630
mov eax, dword [ebp - 0x8c]
cmp eax, 8
jb 0x40e3de
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.00408370
xor eax, eax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], 0
mov word [ebp - 0xa0], ax
mov eax, dword [ebp - 0x44]
cmp eax, 0x10
jb 0x40e410
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00408320
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp eax, 8
jb 0x40e440
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.00408370
xor eax, eax
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xc0], 0
cmp eax, 0x10
jb 0x40e472
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00408320
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp eax, 8
jb 0x40e4a2
inc eax
lea ecx, [ebp - 0xe8]
push eax
push dword [ebp - 0xe8]
call fcn.00408370
xor eax, eax
mov dword [ebp - 0xd4], 7
mov word [ebp - 0xe8], ax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xd8], 0
cmp eax, 8
jb 0x40e4dd
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.00408370
mov ecx, dword [ebp - 0x74]
xor eax, eax
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xa8], 0
mov word [ebp - 0xb8], ax
cmp ecx, 8
jb 0x40e515
inc ecx
push ecx
push dword [ebp - 0x88]
lea ecx, [ebp - 0x88]
call fcn.00408370
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004315db
mov esp, ebp
pop ebp
ret 0xc