Function at 0x100645b0
Capabilities:
Delete file
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007a47e
mov eax, dword fs:[0]
push eax
sub esp, 0x368
mov eax, dword [0x10094610]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
call fcn.10062910
mov dword [ebp - 0x354], eax
test eax, eax
je 0x10065254
mov eax, dword [0x1009443c]
mov esi, 8
mov dword [ebp - 0x338], 0x5a0
cmp dword [0x10094450], esi
jae 0x10064620
mov eax, 0x1009443c
mov edx, dword [0x10094438]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x340]
push ecx
push 1
push 0
push eax
push edx
call edi
test eax, eax
jne 0x1006468a
mov edx, dword [ebp - 0x340]
lea eax, [ebp - 0x350]
push eax
lea ecx, [ebp - 0x34c]
push ecx
push 0
push 0
push 0x1007f994
push edx
mov dword [ebp - 0x350], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1006467d
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x338], eax
mov ecx, dword [ebp - 0x340]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [0x1009443c]
cmp dword [0x10094450], esi
jae 0x1006469c
mov eax, 0x1009443c
lea edx, [ebp - 0x340]
push edx
push 1
push 0
push eax
mov eax, dword [0x10094438]
push eax
call edi
test eax, eax
jne 0x1006472d
lea ecx, [ebp - 0x350]
push ecx
lea edx, [ebp - 0x34c]
push edx
push eax
push eax
mov eax, dword [ebp - 0x340]
push 0x1007f98c
push eax
mov dword [ebp - 0x350], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, dword [ebp - 0x34c]
mov esi, eax
test esi, esi
je 0x100646f2
mov ebx, dword [ebp - 0x354]
mov ecx, dword [ebp - 0x340]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x1006472d
push esi
call fcn.10065ef1
mov ecx, dword [ebp - 0x338]
mov dword [ebp - 0x344], edx
mov edx, ecx
shl edx, 4
sub edx, ecx
add edx, edx
add edx, edx
sub eax, edx
add esp, 4
cmp ebx, eax
jae 0x10065254
xor ebx, ebx
push ebx
call fcn.10065ef1
mov ecx, dword [0x1009443c]
add esp, 4
cmp dword [0x10094450], 8
mov dword [ebp - 0x344], edx
jae 0x10064752
mov ecx, 0x1009443c
push eax
push 0x1007f98c
push ecx
mov ecx, dword [0x10094438]
push ecx
call fcn.10061860
xor edx, edx
add esp, 0x10
mov dword [ebp - 0x294], 7
mov dword [ebp - 0x298], ebx
mov word [ebp - 0x2a8], dx
mov ecx, dword [0x10098744]
push 0x104
lea eax, [ebp - 0x21c]
push eax
push ecx
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push ebx
push ebx
push 3
push ebx
push 1
push SysReAllocString
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x1006480a
push ebx
push ebx
lea eax, [ebp - 0x348]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
mov ecx, dword [ebp - 0x344]
mov edx, dword [ebp - 0x348]
push ecx
push edx
lea eax, [ebp - 0x238]
push eax
call fcn.10061f80
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x224], 8
jb 0x1006480a
mov ecx, dword [ebp - 0x238]
push ecx
call fcn.100660ce
add esp, 4
mov eax, dword [0x1009443c]
mov esi, 8
cmp dword [0x10094450], esi
jae 0x10064821
mov eax, 0x1009443c
lea edx, [ebp - 0x340]
push edx
push 0x1007f984
push eax
mov eax, dword [0x10094438]
push eax
call fcn.10061770
add esp, 0x10
test eax, eax
je 0x10064878
push ebx
call fcn.10065ef1
mov ecx, dword [0x1009443c]
add esp, 4
mov dword [ebp - 0x340], eax
cmp dword [0x10094450], esi
jae 0x10064862
mov ecx, 0x1009443c
push eax
push 0x1007f984
push ecx
mov ecx, dword [0x10094438]
push ecx
call fcn.10061860
add esp, 0x10
lea edx, [ebp - 0x338]
push edx
push 1
push ebx
push str.SOFTWAREMicrosoftNET_Framework_SetupNDP_v2.0.50727
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x350], ebx
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x360], ebx
mov dword [ebp - 0x358], ebx
mov dword [ebp - 0x35c], ebx
call edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp eax, ebx
mov ebx, 4
jne 0x100648fe
mov edx, dword [ebp - 0x338]
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x344]
push ecx
push 0
push 0
push str.Install
push edx
mov dword [ebp - 0x33c], ebx
call esi
test eax, eax
jne 0x100648f1
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x350], eax
mov ecx, dword [ebp - 0x338]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x338]
push edx
push 1
push 0
push str.SOFTWAREMicrosoftNET_Framework_SetupNDP_v3.0
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x1006495c
mov edx, dword [ebp - 0x338]
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x33c]
push ecx
push 0
push 0
push str.Install
push edx
mov dword [ebp - 0x344], ebx
call esi
test eax, eax
jne 0x1006494f
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x338]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x338]
push edx
push 1
push 0
push str.SOFTWAREMicrosoftNET_Framework_SetupNDP_v3.5
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x100649ba
mov edx, dword [ebp - 0x338]
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x33c]
push ecx
push 0
push 0
push str.Install
push edx
mov dword [ebp - 0x344], ebx
call esi
test eax, eax
jne 0x100649ad
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x338]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x338]
push edx
push 1
push 0
push str.SOFTWAREMicrosoftNET_Framework_SetupNDP_v4Client
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x10064a18
mov edx, dword [ebp - 0x338]
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x33c]
push ecx
push 0
push 0
push str.Install
push edx
mov dword [ebp - 0x344], ebx
call esi
test eax, eax
jne 0x10064a0b
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x358], eax
mov ecx, dword [ebp - 0x338]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x338]
push edx
push 1
push 0
push str.SOFTWAREMicrosoftNET_Framework_SetupNDP_v4Full
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x10064a76
mov edx, dword [ebp - 0x338]
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x33c]
push ecx
push 0
push 0
push str.Install
push edx
mov dword [ebp - 0x344], ebx
call esi
test eax, eax
jne 0x10064a69
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x35c], eax
mov ecx, dword [ebp - 0x338]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edx, edx
mov dword [ebp - 0x278], 7
mov dword [ebp - 0x27c], 0
mov word [ebp - 0x28c], dx
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 3
call fcn.10001100
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 4
call fcn.10001510
mov esi, dword [eax + 0x10]
mov ecx, esi
cmp ecx, esi
jae 0x10064ac1
mov ecx, esi
cmp esi, 2
jb 0x10064acd
mov ecx, 2
mov edi, 0x10
cmp dword [eax + 0x14], edi
jb 0x10064ad9
mov eax, dword [eax]
push ecx
push 0x10082130
push eax
call fcn.100090d0
add esp, 0xc
test eax, eax
jne 0x10064b00
cmp esi, 2
jae 0x10064af6
or eax, 0xffffffff
jmp 0x10064afe
xor eax, eax
cmp esi, 2
setne al
test eax, eax
sete bl
mov byte [ebp - 4], 4
cmp dword [ebp - 0x224], edi
jb 0x10064b1e
mov ecx, dword [ebp - 0x238]
push ecx
call fcn.100660ce
add esp, 4
test bl, bl
je 0x10064b88
push 0x10082144
push 0x1008211c
lea edx, [ebp - 0x238]
push 0x10082130
push edx
call fcn.10064470
add esp, 0x10
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 6
mov edi, 8
cmp ecx, eax
je 0x10064c76
cmp dword [eax + 0x14], edi
jb 0x10064b60
mov edx, dword [eax]
jmp 0x10064b62
mov edx, eax
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10064b67
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [ebp - 0x28c]
call fcn.1004dce6
jmp 0x10064c76
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x374]
call fcn.10001510
mov esi, dword [eax + 0x10]
mov ecx, esi
cmp ecx, esi
jae 0x10064ba3
mov ecx, esi
cmp esi, 2
jb 0x10064baf
mov ecx, 2
cmp dword [eax + 0x14], edi
jb 0x10064bb6
mov eax, dword [eax]
push ecx
push 0x10082144
push eax
call fcn.100090d0
add esp, 0xc
test eax, eax
jne 0x10064bdd
cmp esi, 2
jae 0x10064bd3
or eax, 0xffffffff
jmp 0x10064bdb
xor eax, eax
cmp esi, 2
setne al
test eax, eax
sete bl
mov byte [ebp - 4], 4
cmp dword [ebp - 0x224], edi
jb 0x10064bfb
mov ecx, dword [ebp - 0x238]
push ecx
call fcn.100660ce
add esp, 4
test bl, bl
je 0x10064c43
push 0x10082130
push 0x1008211c
lea edx, [ebp - 0x238]
push 0x10082144
push edx
call fcn.10064470
add esp, 0x10
push eax
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 8
call fcn.1004e6d0
mov edi, 8
cmp dword [ebp - 0x224], edi
jb 0x10064c8d
mov eax, dword [ebp - 0x238]
push eax
jmp 0x10064c85
push 0x10082144
push 0x10082130
lea ecx, [ebp - 0x238]
push 0x1008211c
push ecx
call fcn.10064470
add esp, 0x10
push eax
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 9
call fcn.1004e6d0
mov edi, 8
cmp dword [ebp - 0x224], edi
jb 0x10064c8d
mov edx, dword [ebp - 0x238]
push edx
call fcn.100660ce
add esp, 4
mov eax, dword [0x1009443c]
mov dword [ebp - 0x338], 0
cmp dword [0x10094450], edi
jae 0x10064ca9
mov eax, 0x1009443c
mov edx, dword [0x10094438]
lea ecx, [ebp - 0x338]
push ecx
push 0x1007f258
push eax
push edx
call fcn.10061770
mov edi, 7
xor eax, eax
add esp, 0x10
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 0x2b4], 0
mov word [ebp - 0x2c4], ax
mov eax, dword [0x1009443c]
mov esi, 8
mov byte [ebp - 4], 0xa
cmp dword [0x10094450], esi
jae 0x10064cfe
mov eax, 0x1009443c
mov edx, dword [0x10094438]
lea ecx, [ebp - 0x2c4]
push ecx
push str.DATA
push eax
push edx
call fcn.100618c0
xor eax, eax
add esp, 0x10
mov dword [ebp - 0x25c], edi
mov dword [ebp - 0x260], 0
mov word [ebp - 0x270], ax
mov eax, dword [0x1009443c]
mov bl, 0xb
mov byte [ebp - 4], bl
cmp dword [0x10094450], esi
jae 0x10064d4a
mov eax, 0x1009443c
mov edx, dword [0x10094438]
lea ecx, [ebp - 0x270]
push ecx
push str.UUID
push eax
push edx
call fcn.100618c0
add esp, 0x10
cmp dword [ebp - 0x260], 0
jne 0x10064e16
lea eax, [ebp - 0x238]
push eax
call fcn.100619f0
add esp, 4
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xc
cmp ecx, eax
je 0x10064dc1
cmp dword [eax + 0x14], esi
jb 0x10064d99
mov edx, dword [eax]
jmp 0x10064d9b
mov edx, eax
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10064da0
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [ebp - 0x270]
call fcn.1004dce6
mov esi, 8
mov byte [ebp - 4], bl
cmp dword [ebp - 0x224], esi
jb 0x10064ddb
mov edx, dword [ebp - 0x238]
push edx
call fcn.100660ce
add esp, 4
mov ecx, dword [ebp - 0x270]
cmp dword [ebp - 0x25c], esi
jae 0x10064def
lea ecx, [ebp - 0x270]
mov eax, dword [0x1009443c]
cmp dword [0x10094450], esi
jae 0x10064e01
mov eax, 0x1009443c
push ecx
push str.UUID
push eax
mov eax, dword [0x10094438]
push eax
call fcn.100617e0
add esp, 0x10
push 5
call fcn.1004eea0
lea ecx, [ebp - 0x2fc]
add esp, 4
push ecx
call fcn.10061990
add esp, 4
lea edx, [ebp - 0x238]
push edx
mov byte [ebp - 4], 0xd
call fcn.10061d30
add esp, 4
push str.UpdateResponse.tmp
push eax
lea eax, [ebp - 0x318]
push eax
mov byte [ebp - 4], 0xe
call fcn.10060ad0
add esp, 0xc
push 0xffffffffffffffff
xor ebx, ebx
xor ecx, ecx
push ebx
mov word [ebp - 0x254], cx
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x240], edi
mov dword [ebp - 0x244], ebx
call fcn.1004dc02
cmp dword [ebp - 0x304], esi
jb 0x10064e9c
mov edx, dword [ebp - 0x318]
push edx
call fcn.100660ce
add esp, 4
xor eax, eax
mov dword [ebp - 0x304], edi
mov dword [ebp - 0x308], ebx
mov word [ebp - 0x318], ax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x224], esi
jb 0x10064ecc
mov ecx, dword [ebp - 0x238]
push ecx
call fcn.100660ce
add esp, 4
lea eax, [ebp - 0x334]
xor edx, edx
push eax
mov dword [ebp - 0x224], edi
mov dword [ebp - 0x228], 0
mov word [ebp - 0x238], dx
call fcn.10062310
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x28c]
mov edi, 8
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x278], edi
jae 0x10064f13
lea eax, [ebp - 0x28c]
mov edx, dword [ebp - 0x2c4]
cmp dword [ebp - 0x2b0], edi
jae 0x10064f27
lea edx, [ebp - 0x2c4]
mov ecx, dword [ebp - 0x2fc]
cmp dword [ebp - 0x2e8], edi
jae 0x10064f3b
lea ecx, [ebp - 0x2fc]
mov ebx, dword [ebp + 8]
cmp dword [ebp + 0x1c], edi
jae 0x10064f46
lea ebx, [ebp + 8]
cmp dword [esi + 0x14], edi
jb 0x10064f4d
mov esi, dword [esi]
cmp dword [ebp - 0x25c], edi
mov edi, dword [ebp - 0x270]
jae 0x10064f61
lea edi, [ebp - 0x270]
push eax
mov eax, dword [ebp - 0x354]
push edx
mov edx, dword [ebp - 0x338]
push edx
mov edx, dword [ebp - 0x340]
push eax
mov eax, dword [ebp - 0x35c]
push edx
mov edx, dword [ebp - 0x358]
push eax
mov eax, dword [ebp - 0x360]
push edx
mov edx, dword [ebp - 0x34c]
push eax
mov eax, dword [ebp - 0x350]
push edx
push eax
push ecx
call fcn.100615f0
push eax
push ebx
push esi
push edi
push str.http:__www.systems_updater.com_shellext.ashx
lea ecx, [ebp - 0x2a8]
push str._s_userid_sV_sref_sos_dare_sdn2i_ddn3i_ddn35i_ddn4ci_ddn4fi_dfat_dus_dle_ded_s_s
push ecx
call fcn.1004fe20
mov edi, 8
add esp, 0x48
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x320], edi
jb 0x10064fde
mov edx, dword [ebp - 0x334]
push edx
call fcn.100660ce
add esp, 4
push 0xbb8
lea eax, [ebp - 0x334]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.1004fd80
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x14
cmp ecx, eax
je 0x10065033
cmp dword [eax + 0x14], edi
jb 0x1006500c
mov edx, dword [eax]
jmp 0x1006500e
mov edx, eax
mov eax, edx
lea esi, [eax + 2]
xor ebx, ebx
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x10065015
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [ebp - 0x2a8]
call fcn.1004dce6
jmp 0x10065035
xor ebx, ebx
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x320], edi
jb 0x10065050
mov edx, dword [ebp - 0x334]
push edx
call fcn.100660ce
add esp, 4
mov esi, dword [ebp - 0x2a8]
push 1
sub esp, 0x1c
mov dword [ebp - 0x354], esp
mov ecx, esp
cmp dword [ebp - 0x294], edi
jae 0x10065071
lea esi, [ebp - 0x2a8]
xor eax, eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], ebx
mov word [ecx], ax
mov eax, esi
lea edi, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x10065085
sub eax, edi
sar eax, 1
push eax
push esi
call fcn.1004dce6
lea ecx, [ebp - 0x2e0]
push ecx
call fcn.1004f020
add esp, 0x24
mov ecx, dword [ebp - 0x254]
mov edi, 8
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x240], edi
jae 0x100650c7
lea ecx, [ebp - 0x254]
mov eax, dword [ebp - 0x2e0]
cmp dword [ebp - 0x2cc], edi
jae 0x100650db
lea eax, [ebp - 0x2e0]
push ecx
push eax
call fcn.10061ad0
add esp, 8
cmp eax, ebx
jne 0x10065121
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x240], edi
jae 0x100650fd
lea eax, [ebp - 0x254]
push eax
call fcn.100639e0
mov eax, dword [ebp - 0x254]
add esp, 4
cmp dword [ebp - 0x240], edi
jae 0x1006511a
lea eax, [ebp - 0x254]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x2cc], edi
jb 0x10065138
mov edx, dword [ebp - 0x2e0]
push edx
call fcn.100660ce
add esp, 4
xor eax, eax
mov esi, 7
mov dword [ebp - 0x2cc], esi
mov dword [ebp - 0x2d0], ebx
mov word [ebp - 0x2e0], ax
cmp dword [ebp - 0x240], edi
jb 0x10065169
mov ecx, dword [ebp - 0x254]
push ecx
call fcn.100660ce
add esp, 4
xor edx, edx
mov dword [ebp - 0x240], esi
mov dword [ebp - 0x244], ebx
mov word [ebp - 0x254], dx
cmp dword [ebp - 0x2e8], edi
jb 0x10065195
mov eax, dword [ebp - 0x2fc]
push eax
call fcn.100660ce
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x2e8], esi
mov dword [ebp - 0x2ec], ebx
mov word [ebp - 0x2fc], cx
cmp dword [ebp - 0x25c], edi
jb 0x100651c1
mov edx, dword [ebp - 0x270]
push edx
call fcn.100660ce
add esp, 4
xor eax, eax
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x260], ebx
mov word [ebp - 0x270], ax
cmp dword [ebp - 0x2b0], edi
jb 0x100651ed
mov ecx, dword [ebp - 0x2c4]
push ecx
call fcn.100660ce
add esp, 4
xor edx, edx
lea ecx, [ebp - 0x374]
mov dword [ebp - 0x2b0], esi
mov dword [ebp - 0x2b4], ebx
mov word [ebp - 0x2c4], dx
mov byte [ebp - 4], 3
call fcn.10001190
cmp dword [ebp - 0x278], edi
jb 0x10065228
mov eax, dword [ebp - 0x28c]
push eax
call fcn.100660ce
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x278], esi
mov dword [ebp - 0x27c], ebx
mov word [ebp - 0x28c], cx
cmp dword [ebp - 0x294], edi
jb 0x10065254
mov edx, dword [ebp - 0x2a8]
push edx
call fcn.100660ce
add esp, 4
cmp dword [ebp + 0x1c], 8
jb 0x10065266
mov eax, dword [ebp + 8]
push eax
call fcn.100660ce
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100660ff
mov esp, ebp
pop ebp
ret