Function at 0x100b0150
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d074e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1d8
mov eax, dword [0x100e1040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x124], edx
mov edi, ecx
mov dword [ebp - 0x104], edi
mov eax, dword [0x1010bc88]
mov dword [ebp - 0xf4], 0
test al, 1
jne 0x100b01ec
or eax, 1
mov dword [0x1010bc88], eax
mov eax, dword [0x101065c4]
mov dword [0x1010bc9c], eax
mov dword [0x1010bca0], 0
mov dword [0x1010bca4], 0
mov dword [0x1010bca8], 0
mov dword [0x1010bcac], 0
push 0x30
xorps xmm0, xmm0
mov dword [ebp - 0x10c], 4
lea eax, [ebp - 0x74]
movss dword [ebp - 0xf8], xmm0
push 0
push eax
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x78], 0
xorps xmm0, xmm0
lea eax, [ebp - 0xcc]
movups xmmword [ebp - 0x98], xmm0
push 0x30
push 0
push eax
movups xmmword [ebp - 0x88], xmm0
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [edi]
xorps xmm0, xmm0
mov eax, dword [0x101065b0]
add esp, 0xc
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xd0], 0
movups xmmword [ebp - 0xe0], xmm0
mov al, byte [ecx + eax]
test al, al
je 0x100b02ec
movss xmm4, dword [0x100e10b8]
movss xmm5, dword [0x100e10bc]
movss xmm6, dword [0x100e10c0]
mov eax, dword [0x100e1438]
mov ecx, dword [0x100e1440]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x108], ecx
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm5
movss dword [ebp - 0x110], xmm6
jmp 0x100b0516
mov eax, dword [0x101066d4]
add eax, 0xffffffa4
xor eax, 0x495f252f
mov eax, dword [eax + ecx]
mov ecx, dword [0x10106424]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov dword [ebp - 0x140], eax
test eax, eax
je 0x100b0e46
mov ecx, dword [eax]
mov edx, dword [ecx + 0x6f8]
mov ecx, eax
call edx
mov dword [ebp - 0x108], eax
test eax, eax
je 0x100b0e46
mov edi, dword [edi]
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov ecx, dword [edi]
push eax
mov edx, dword [ecx + 0x28c]
mov ecx, edi
call edx
cmp dword [edi + 0x39e1], 0
je 0x100b04d6
mov eax, dword [0x101065b4]
mov edi, dword [edi + eax]
test edi, edi
je 0x100b04d6
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x100b04d6
cmp byte [edi + 0x109], 0
movss xmm1, dword [ebp - 0xf8]
jne 0x100b03ef
mov eax, dword [0x10106664]
add eax, 0xffffffc0
xor eax, 0x495f2513
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x100b03ef
mov eax, dword [0x101066d8]
add eax, 0xffffffa3
xor eax, 0x495f2530
mov eax, dword [eax + ecx]
mov ecx, dword [0x10106424]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x100b04d6
movss xmm1, dword [ebp - 0xf8]
mov ecx, dword [0x101066cc]
mov eax, dword [edi + 0x60]
add ecx, 0xffffffa6
xor ecx, 0x495f252d
mov eax, dword [ecx + eax]
test eax, eax
je 0x100b04d6
movss xmm3, dword [eax + 0x1ac]
movss xmm2, dword [ebp - 0x134]
cvtps2pd xmm3, xmm3
cvtps2pd xmm0, xmm2
addsd xmm3, qword [0x100d5798]
comisd xmm0, xmm3
movsd qword [ebp - 0x130], xmm3
jbe 0x100b04d6
subsd xmm0, xmm3
movaps xmm4, xmm1
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x100d57ec]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100d5780]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x100b049a
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm2, dword [ebp - 0x134]
add esp, 8
movsd xmm3, qword [ebp - 0x130]
fstp dword [ebp - 0x128]
movss xmm4, dword [ebp - 0x128]
movaps xmm1, xmm4
mulss xmm1, xmm4
cvtps2pd xmm2, xmm2
movaps xmm0, xmm1
addss xmm1, xmm1
mulss xmm0, dword [0x100d57d0]
subsd xmm3, xmm2
mulss xmm1, xmm4
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x134], xmm0
movq xmm0, qword [ebp - 0x13c]
mov eax, dword [ebp - 0x134]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
movq qword [ebp - 0x118], xmm0
movss xmm5, dword [ebp - 0x114]
movss xmm4, dword [ebp - 0x118]
mov dword [ebp - 0x110], eax
movss xmm6, dword [ebp - 0x110]
movd xmm0, dword [ecx + 0xec]
lea esi, [ebp - 0x164]
movss xmm1, dword [ecx + 0xf8]
lea eax, [ebp - 0x168]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x168], 0
movss xmm7, dword [edi + 8]
movss dword [ebp - 0xfc], xmm0
subss xmm7, xmm4
movss xmm0, dword [0x100d57e8]
divss xmm0, xmm1
movss xmm3, dword [edi + 0xc]
comiss xmm0, dword [ebp - 0xf8]
movss xmm2, dword [edi + 0x10]
subss xmm3, xmm5
movss dword [ebp - 0x164], xmm0
subss xmm2, xmm6
movss dword [ebp - 0x128], xmm1
cmovbe esi, eax
movaps xmm1, xmm7
mulss xmm1, xmm7
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm1, xmm0
movaps xmm0, xmm2
mulss xmm0, xmm2
addss xmm0, xmm1
call fcn.1001b2b0
addss xmm0, dword [0x100d5648]
movss xmm1, dword [0x100d5750]
mov eax, dword [edi]
mov dword [0x1010bca0], eax
mov dword [0x1010bcac], 0
divss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm7, xmm1
mulss xmm0, xmm3
mulss xmm1, xmm2
movaps xmm3, xmm0
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [ebp - 0xfc]
comiss xmm0, dword [ebp - 0xf8]
movss dword [ebp - 0x20], xmm7
movss dword [ebp - 0x1c], xmm3
movss dword [ebp - 0x18], xmm1
jbe 0x100b0e46
nop dword [eax]
movss xmm0, dword [ecx + 0x104]
subss xmm0, dword [ebp - 0x120]
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 0x19b], 1
mulss xmm7, xmm0
mulss xmm3, xmm0
mulss xmm1, xmm0
addss xmm7, xmm4
addss xmm3, xmm5
movss dword [ebp - 0x12c], xmm0
addss xmm1, xmm6
movaps xmm2, xmm7
movss dword [ebp - 0x34], xmm7
subss xmm2, xmm4
movaps xmm0, xmm3
movss dword [ebp - 0x11c], xmm3
subss xmm0, xmm5
movss dword [ebp - 0x38], xmm1
subss xmm1, xmm6
movss dword [ebp - 0x1d0], xmm2
mulss xmm2, xmm2
movss dword [ebp - 0x1cc], xmm0
mulss xmm0, xmm0
movss dword [ebp - 0x1c8], xmm1
mulss xmm1, xmm1
addss xmm2, xmm0
addss xmm2, xmm1
ucomiss xmm2, dword [ebp - 0xf8]
lahf
test ah, 0x44
jp 0x100b06b5
mov byte [ebp - 0x19b], 0
mov ecx, dword [0x1010643c]
lea edx, [ebp - 0x98]
push edx
mov dword [ebp - 0x1a0], 0
lea edx, [ebp - 0x1e0]
mov byte [ebp - 0x19c], 1
movss dword [ebp - 0x1e0], xmm4
movss dword [ebp - 0x1dc], xmm5
movss dword [ebp - 0x1d8], xmm6
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1b0], 0
mov eax, dword [ecx]
push 0x1010bc9c
push 0x4600400b
push edx
mov eax, dword [eax + 0x14]
call eax
mov eax, dword [edi + 4]
test eax, eax
je 0x100b07c0
movss xmm1, dword [0x100d584c]
lea edx, [ebp - 0x13c]
movss xmm0, dword [ebp - 0x20]
mulss xmm0, xmm1
push ecx
push eax
lea eax, [ebp - 0x98]
addss xmm0, dword [ebp - 0x34]
push eax
push ecx
lea ecx, [ebp - 0x118]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x1c]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x11c]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x18]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x38]
movss dword [ebp - 0x134], xmm0
call fcn.100afd40
add esp, 0x10
jmp 0x100b09e9
movss xmm3, dword [0x100d584c]
lea eax, [ebp - 0x98]
movss xmm2, dword [ebp - 0x20]
movss xmm1, dword [ebp - 0x1c]
movss xmm0, dword [ebp - 0x18]
mulss xmm2, xmm3
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x178]
mulss xmm1, xmm3
mov dword [ebp - 0x24], 0xc2700000
addss xmm2, dword [ebp - 0x34]
mulss xmm0, xmm3
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x118]
addss xmm1, dword [ebp - 0x11c]
mov dword [ebp - 0x3c], 0x1010bc9c
addss xmm0, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
mov eax, dword [0x1010b850]
movss dword [ebp - 0x178], xmm2
movss dword [ebp - 0x174], xmm1
movss dword [ebp - 0x170], xmm0
test al, 1
jne 0x100b09c3
or eax, 1
mov dword [0x1010b850], eax
mov dword [ebp - 4], 0
mov eax, 0x10
movaps xmm0, xmmword [0x100d6840]
xorps xmm0, xmmword [0x100d6370]
mov dword [ebp - 0x150], 0x5f4b4e5f
mov dword [ebp - 0x14c], 0x4a5f3e47
mov dword [ebp - 0x148], 0x484c5f49
mov byte [ebp - 0x144], 0x7f
movups xmmword [ebp - 0x160], xmm0
xor byte [ebp + eax - 0x160], 0x7f
inc eax
cmp eax, 0x1d
jb 0x100b0891
xorps xmm0, xmm0
mov dword [ebp - 0x180], 0
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x17c], 0
movups xmmword [ebp - 0x190], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b08c6
sub ecx, edx
lea eax, [ebp - 0x160]
push ecx
push eax
lea ecx, [ebp - 0x190]
call fcn.100244e0
mov byte [ebp - 4], 1
mov eax, dword [0x101063e4]
test eax, eax
je 0x100b08f4
mov edi, dword [eax + 0x50]
jmp 0x100b08f6
xor edi, edi
mov eax, dword [0x101063dc]
mov ecx, dword [ebp - 0xf4]
test eax, eax
je 0x100b090d
mov edx, dword [eax + 0x18]
or ecx, 4
jmp 0x100b0912
or ecx, 8
xor edx, edx
mov eax, ecx
mov dword [ebp - 0xf4], ecx
and ecx, 0xfffffff7
test al, 8
cmove ecx, eax
mov dword [ebp - 0xf4], ecx
and dword [ebp - 0xf4], 0xfffffffb
test cl, 4
mov eax, dword [ebp - 0xf4]
cmove eax, ecx
lea ecx, [ebp - 0x16c]
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x190]
push eax
push edx
mov edx, edi
call fcn.1001b500
mov eax, dword [ebp - 0x16c]
add esp, 8
test eax, eax
je 0x100b0973
mov ecx, dword [eax + 1]
test ecx, ecx
jne 0x100b096e
xor eax, eax
jmp 0x100b0973
add eax, 5
add eax, ecx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x17c]
mov dword [0x1010b854], eax
cmp ecx, 0xf
jbe 0x100b09b6
mov edx, dword [ebp - 0x190]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b09ac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b0ddf
push ecx
push edx
call fcn.100c65b7
add esp, 8
mov edi, dword [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x1010b854], 0
je 0x100b09e9
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x24]
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
push 0x4600400b
call dword [0x1010b854]
add esp, 0x10
movss xmm1, dword [ebp - 0x6c]
ucomiss xmm1, dword [0x100d5750]
lahf
test ah, 0x44
jnp 0x100b0e46
mulss xmm1, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x108]
addss xmm1, dword [ebp - 0x120]
movss xmm0, dword [eax + 0x108]
movss dword [ebp - 0x12c], xmm1
mulss xmm1, dword [0x100d565c]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_powf
mulss xmm0, dword [ebp - 0xfc]
mov ecx, dword [edi + 4]
movss dword [ebp - 0xfc], xmm0
test ecx, ecx
je 0x100b0ae0
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x100b0b3d
cmp eax, ecx
jne 0x100b0b3d
mov edx, dword [ebp - 0x54]
cmp edx, 1
jl 0x100b0a6d
cmp edx, 7
jle 0x100b0a76
cmp edx, 0xa
jne 0x100b0b3d
mov eax, dword [0x101066ec]
xor edi, edi
mov esi, dword [ebp - 0x140]
add eax, 0xffffff9e
xor eax, 0x495f2535
movaps xmm1, xmm0
cmp dword [eax + esi], 0x1f
mov eax, dword [ebp - 0x108]
cmove edx, edi
movss xmm2, dword [eax + 0xf0]
call fcn.100af310
mov esi, dword [ebp - 0x124]
cmp dword [ebp - 0x10c], 4
mov ecx, dword [ebp - 0x104]
setne al
mov byte [esi + 0xc], al
mov dword [esi + 8], edx
movss dword [esi + 4], xmm0
mov eax, dword [ecx + 4]
mov dword [esi], eax
jne 0x100b0de5
comiss xmm0, dword [ecx + 0x14]
setae al
jmp 0x100b0e48
mov edi, dword [ebp - 0x10c]
cmp edi, 4
mov ecx, dword [ebp - 0x124]
setne al
mov byte [ecx + 0xc], al
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x100b0b2c
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x100b0b24
mov edx, dword [ebp - 0x54]
cmp edx, 1
jl 0x100b0b1b
cmp edx, 7
jle 0x100b0dee
cmp edx, 0xa
je 0x100b0dee
movss xmm0, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x124]
mov edi, dword [ebp - 0x104]
movss dword [eax + 4], xmm0
cmp byte [edi + 0x1c], 0
je 0x100b0e46
mov ecx, dword [0x10106460]
movsx edx, word [ebp - 0x58]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movss xmm0, dword [ebp - 0x12c]
mov edx, eax
comiss xmm0, dword [0x100d5920]
mov dword [ebp - 0x3c], edx
movss xmm1, dword [ebp - 0x128]
movss xmm0, dword [ebp - 0xf8]
jbe 0x100b0b8c
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x100b0e46
movss xmm2, dword [0x100d56b4]
comiss xmm2, dword [edx + 0x58]
ja 0x100b0e46
mov al, byte [ebp - 0x56]
mov ecx, dword [ebp - 0x68]
movzx edi, word [edx + 0x60]
mov edx, dword [ebp - 0x10c]
shr al, 7
shr ecx, 3
and al, 1
and ecx, 0xffffff01
mov byte [ebp - 0xfd], al
mov dword [ebp - 0x12c], ecx
test edx, edx
jne 0x100b0be2
test al, al
jne 0x100b0be2
test cl, cl
jne 0x100b0be2
cmp edi, 0x47
je 0x100b0be2
cmp edi, 0x59
jne 0x100b0e46
comiss xmm0, xmm1
jae 0x100b0e46
test edx, edx
jle 0x100b0e46
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x8c]
call fcn.100af470
add esp, 0xc
test al, al
jne 0x100b0c3c
mov ecx, dword [0x1010643c]
lea edx, [ebp - 0x30]
push 0
push 0x600400b
push edx
mov eax, dword [ecx]
mov eax, dword [eax]
call eax
test eax, 0x600400b
je 0x100b0e46
mov ecx, dword [0x10106460]
movsx edx, word [ebp - 0xb0]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movzx edx, word [eax + 0x60]
mov ecx, edx
cmp edi, 0x47
je 0x100b0ca4
cmp edi, 0x59
je 0x100b0ca4
cmp byte [ebp - 0xfd], 0
jne 0x100b0c8a
cmp byte [ebp - 0x12c], 0
jne 0x100b0c8a
movss xmm3, dword [eax + 0x58]
mov eax, dword [ebp - 0x3c]
addss xmm3, dword [eax + 0x58]
mulss xmm3, dword [0x100d5718]
jmp 0x100b0c92
movss xmm3, dword [0x100d5750]
movss xmm7, dword [0x100d56c0]
movss xmm0, dword [0x100d57d0]
jmp 0x100b0cb7
movss xmm0, dword [0x100d57d0]
movss xmm7, dword [0x100d569c]
movaps xmm3, xmm0
cmp edi, ecx
jne 0x100b0cd7
cmp ecx, 0x55
je 0x100b0cd4
cmp ecx, 0x57
je 0x100b0cd4
cmp edx, 0x4c
jne 0x100b0cd7
movss xmm3, dword [0x100d57a4]
jmp 0x100b0cd7
movaps xmm3, xmm0
movss xmm4, dword [ebp - 0xe4]
movss xmm5, dword [ebp - 0xe0]
movaps xmm2, xmm4
subss xmm2, dword [ebp - 0x8c]
movss xmm6, dword [ebp - 0xdc]
movaps xmm0, xmm5
subss xmm0, dword [ebp - 0x88]
movaps xmm1, xmm6
subss xmm1, dword [ebp - 0x84]
mulss xmm2, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.1001b2b0
movss xmm2, dword [0x100d5750]
divss xmm2, xmm3
mulss xmm7, dword [ebp - 0xfc]
maxss xmm2, dword [ebp - 0xf8]
movss dword [ebp - 0x120], xmm0
mulss xmm0, xmm0
movaps xmm1, xmm2
mulss xmm2, dword [0x100d5698]
mulss xmm1, dword [0x100d57d0]
mulss xmm0, xmm2
mulss xmm1, dword [esi]
addss xmm1, xmm7
addss xmm1, xmm0
movss xmm0, dword [ebp - 0xfc]
maxss xmm1, dword [ebp - 0xf8]
subss xmm0, xmm1
movss xmm1, dword [0x100d5750]
comiss xmm1, xmm0
movss dword [ebp - 0xfc], xmm0
ja 0x100b0e46
dec dword [ebp - 0x10c]
movss xmm1, dword [ebp - 0x18]
movss xmm3, dword [ebp - 0x1c]
movss xmm7, dword [ebp - 0x20]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm5
movss dword [ebp - 0x110], xmm6
jmp 0x100b0610
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
comiss xmm0, dword [ecx + 0x18]
setae al
jmp 0x100b0e48
mov eax, dword [0x101066ec]
xor ecx, ecx
mov esi, dword [ebp - 0x140]
add eax, 0xffffff9e
movss xmm1, dword [ebp - 0xfc]
xor eax, 0x495f2535
cmp dword [eax + esi], 0x1f
mov eax, dword [ebp - 0x108]
cmove edx, ecx
mov ecx, dword [ebp - 0x4c]
movss xmm2, dword [eax + 0xf0]
call fcn.100af310
mov eax, dword [ebp - 0x124]
cmp edi, 4
mov dword [eax], ecx
mov ecx, dword [ebp - 0x104]
mov dword [eax + 8], edx
movss dword [eax + 4], xmm0
jmp 0x100b0ace
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100c613c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret