Function at 0x473b70
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c087b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x248
mov eax, dword [0x4e04c4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xf0], ecx
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 0x10]
mov esi, dword [ebx + 0x14]
movss xmm0, dword [eax + 0x38]
subss xmm0, dword [ecx + 0x38]
mov edi, dword [ebx + 0x18]
mov dword [ebp - 0xdc], edx
lea edx, [ebp - 0xc0]
push edx
lea edx, [ebp - 0x100]
mov dword [ebp - 0xec], ecx
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [eax + 0x34]
subss xmm0, dword [ecx + 0x34]
push edx
push eax
push ecx
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [eax + 0x30]
subss xmm0, dword [ecx + 0x30]
movss dword [ebp - 0x10c], xmm0
call fcn.00447550
movss xmm0, dword [ebp - 0xc0]
movss xmm1, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xdc]
mulss xmm1, xmm0
movss dword [ebp - 0x114], xmm1
movss xmm1, dword [ebp - 0xfc]
mulss xmm1, xmm0
movss dword [ebp - 0x110], xmm1
movss xmm1, dword [ebp - 0x100]
mulss xmm1, xmm0
movss xmm0, dword [esi + 0x38]
subss xmm0, dword [eax + 0x38]
movss dword [ebp - 0x118], xmm1
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [esi + 0x34]
subss xmm0, dword [eax + 0x34]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [esi + 0x30]
subss xmm0, dword [eax + 0x30]
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x100]
push eax
push esi
mov esi, dword [ebp - 0xdc]
push esi
movss dword [ebp - 0x124], xmm0
call fcn.00447550
movss xmm0, dword [ebp - 0xc0]
add esp, 0x20
movss xmm1, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf0]
mulss xmm1, xmm0
mov ecx, dword [ecx + 0xc]
movss dword [ebp - 0x128], xmm1
movss xmm1, dword [ebp - 0xfc]
mulss xmm1, xmm0
mov eax, dword [ecx]
movss dword [ebp - 0x12c], xmm1
movss xmm1, dword [ebp - 0x100]
mov eax, dword [eax + 0xc]
mulss xmm1, xmm0
movss dword [ebp - 0x130], xmm1
call eax
mov edx, dword [ebp - 0xf0]
fstp dword [ebp - 0xd4]
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x473d3f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov edx, dword [ebp - 0xf0]
fstp dword [ebp - 0xc0]
movss xmm2, dword [ebp - 0xc0]
jmp 0x473d42
xorps xmm2, xmm2
movss xmm0, dword [ebp - 0x110]
movss xmm1, dword [ebp - 0x118]
movss xmm3, dword [ebp - 0x114]
mulss xmm0, xmm0
mulss xmm1, xmm1
movss dword [ebp - 0x194], xmm0
movss xmm4, dword [ebp - 0x128]
addss xmm0, xmm1
mulss xmm3, xmm3
movss dword [ebp - 0x198], xmm1
xorps xmm1, xmm1
mulss xmm4, xmm4
addss xmm0, xmm3
movss dword [ebp - 0x19c], xmm3
movss xmm3, dword [ebp - 0x130]
mulss xmm3, xmm3
movss dword [ebp - 0x17c], xmm4
sqrtss xmm1, xmm0
movss xmm0, dword [ebp - 0x12c]
mulss xmm0, xmm0
movss dword [ebp - 0x174], xmm3
mulss xmm1, dword [ebp - 0xd4]
movss dword [ebp - 0x178], xmm0
addss xmm0, xmm3
xorps xmm3, xmm3
addss xmm0, xmm4
movss xmm4, dword [ebp - 0x11c]
subss xmm4, dword [ebp - 0x104]
sqrtss xmm3, xmm0
movss xmm0, dword [ebp - 0x124]
subss xmm0, dword [ebp - 0x10c]
mulss xmm3, xmm2
movss xmm2, dword [ebp - 0x120]
subss xmm2, dword [ebp - 0x108]
addss xmm3, xmm1
movss dword [ebp - 0x138], xmm0
movaps xmm1, xmm0
movss dword [ebp - 0x13c], xmm4
mulss xmm1, xmm0
movaps xmm0, xmm2
movss dword [ebp - 0x134], xmm2
mulss xmm0, xmm2
movss dword [ebp - 0x140], xmm3
addss xmm1, xmm0
movaps xmm0, xmm4
mulss xmm0, xmm4
addss xmm1, xmm0
xorps xmm0, xmm0
sqrtss xmm0, xmm1
xorps xmm1, xmm1
addss xmm0, xmm3
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x474892
xor ecx, ecx
movss dword [ebp - 0xd8], xmm1
movss dword [ebp - 0x144], xmm1
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x210], 0x4c2f28
mov dword [ebp - 0x1e0], 0x5d5e0b6b
mov byte [ebp - 0x1dc], cl
lea eax, [ebp - 0x210]
mov dword [ebp - 4], ecx
push eax
push esi
push dword [ebp - 0xec]
mov ecx, edx
call fcn.004748c0
cmp byte [ebp - 0x1dc], 0
movaps xmm4, xmmword [ebp - 0x1f0]
movaps xmmword [ebp - 0x1d0], xmm4
je 0x474892
movaps xmm3, xmmword [ebp - 0x200]
movss xmm2, dword [ebp - 0x1e0]
movaps xmm0, xmm3
addss xmm2, dword [edi + 0xb8]
movss xmm5, dword [0x4c2580]
movaps xmm1, xmm3
mulss xmm1, dword [ebp - 0x138]
shufps xmm0, xmm3, 0x55
mulss xmm0, dword [ebp - 0x134]
movss dword [ebp - 0xc0], xmm2
movaps xmmword [ebp - 0x100], xmm3
addss xmm1, xmm0
movaps xmm0, xmm3
shufps xmm0, xmm3, 0xaa
mulss xmm0, dword [ebp - 0x13c]
addss xmm0, dword [ebp - 0x140]
addss xmm1, xmm0
comiss xmm5, xmm1
jae 0x474892
movss xmm7, dword [0x4d4328]
comiss xmm2, xmm7
jbe 0x47485a
movss xmm5, dword [0x4c3000]
movss xmm6, dword [0x4d4340]
mov ecx, dword [edi + 0xb4]
test ecx, ecx
je 0x473fb9
movaps xmm0, xmmword [0x4d4420]
lea edx, [ebp - 0x1c0]
push edx
movaps xmmword [ebp - 0x1c0], xmm0
lea edx, [ebp - 0x1d0]
mov eax, dword [ecx]
push ecx
mov dword [esp], 0x3e4ccccd
push edx
call dword [eax + 0x14]
movss xmm2, dword [ebp - 0xc0]
movss xmm5, dword [0x4c3000]
movss xmm6, dword [0x4d4340]
movss xmm7, dword [0x4d4328]
movss xmm0, dword [ebp - 0x100]
mulss xmm0, dword [ebp - 0x138]
movss xmm1, dword [ebp - 0xfc]
mulss xmm1, dword [ebp - 0x134]
movss xmm4, dword [0x4c2580]
addss xmm1, xmm0
movss xmm0, dword [ebp - 0x13c]
mulss xmm0, dword [ebp - 0xf8]
addss xmm0, dword [ebp - 0x140]
addss xmm1, xmm0
comiss xmm4, xmm1
jae 0x474892
divss xmm2, xmm1
addss xmm2, dword [ebp - 0xd8]
movaps xmm3, xmm2
comiss xmm3, dword [0x4d4354]
movss dword [ebp - 0xd8], xmm3
ja 0x474892
xorps xmm0, xmm0
comiss xmm0, xmm3
ja 0x474892
movss xmm0, dword [ebp - 0x144]
comiss xmm0, xmm3
jae 0x474892
movss xmm0, dword [ebp - 0x10c]
mov eax, dword [ebp - 0xec]
movss xmm2, dword [ebp - 0x104]
movss xmm1, dword [ebp - 0x108]
mulss xmm0, xmm3
mov dword [ebp - 0x24], 0
mulss xmm2, xmm3
addss xmm0, dword [eax + 0x30]
mulss xmm1, xmm3
addss xmm2, dword [eax + 0x38]
movss dword [ebp - 0x144], xmm3
addss xmm1, dword [eax + 0x34]
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [ebp - 0x194]
addss xmm0, dword [ebp - 0x198]
movss dword [ebp - 0x28], xmm2
xorps xmm2, xmm2
movss dword [ebp - 0x2c], xmm1
movss dword [ebp - 0xa4], xmm2
addss xmm0, dword [ebp - 0x19c]
comiss xmm0, xmm4
jbe 0x4740d9
xorps xmm2, xmm2
sqrtss xmm2, xmm0
movss dword [ebp - 0xa4], xmm2
movaps xmm0, xmm2
mulss xmm0, xmm3
comiss xmm0, xmm5
jbe 0x4740f4
movaps xmm2, xmm5
divss xmm2, xmm3
movss dword [ebp - 0xa4], xmm2
comiss xmm7, xmm2
movaps xmm0, xmm2
jbe 0x474124
movaps xmm1, xmm3
mulss xmm0, xmm2
mulss xmm1, xmm3
movaps xmm4, xmm3
mulss xmm0, dword [0x4c2ffc]
mulss xmm1, xmm3
mulss xmm4, xmm6
mulss xmm1, xmm0
subss xmm4, xmm1
jmp 0x474150
mulss xmm0, xmm6
mulss xmm0, xmm3
call fcn.004a3e6b
movss xmm2, dword [ebp - 0xa4]
movaps xmm4, xmm0
movss xmm3, dword [ebp - 0xd8]
movss xmm6, dword [0x4d4340]
divss xmm4, xmm2
movaps xmm0, xmm4
mulss xmm2, xmm3
mulss xmm0, dword [ebp - 0x110]
movaps xmm1, xmm4
mulss xmm4, dword [ebp - 0x118]
movss dword [ebp - 0xa4], xmm0
movss xmm0, dword [ebp - 0x114]
mulss xmm0, xmm1
mulss xmm2, xmm6
movss dword [ebp - 0xd4], xmm0
movss dword [ebp - 0xc0], xmm4
movaps xmm0, xmm2
call fcn.004a3d1e
mov ecx, dword [ebp - 0xec]
lea eax, [ebp - 0x1b0]
push eax
movss dword [ebp - 0xd0], xmm0
call fcn.004339a0
movss xmm2, dword [ebp - 0x1b0]
movss xmm4, dword [ebp - 0x1a4]
movaps xmm1, xmm2
movss xmm6, dword [ebp - 0xc0]
movaps xmm7, xmm4
mulss xmm7, dword [ebp - 0xd0]
movss xmm3, dword [ebp - 0x1ac]
movss xmm5, dword [ebp - 0xd4]
movaps xmm0, xmm3
mulss xmm0, dword [ebp - 0xa4]
mulss xmm1, xmm6
subss xmm7, xmm1
movss xmm1, dword [ebp - 0x1a8]
subss xmm7, xmm0
movaps xmm0, xmm1
mulss xmm0, xmm5
subss xmm7, xmm0
movaps xmm0, xmm4
mulss xmm0, xmm5
movss dword [ebp - 0xd4], xmm7
movaps xmm7, xmm1
mulss xmm7, dword [ebp - 0xd0]
addss xmm7, xmm0
movaps xmm0, xmm3
mulss xmm0, xmm6
addss xmm7, xmm0
movaps xmm0, xmm2
mulss xmm0, dword [ebp - 0xa4]
subss xmm7, xmm0
movaps xmm0, xmm4
mulss xmm0, dword [ebp - 0xa4]
mulss xmm4, xmm6
movss dword [ebp - 0xc0], xmm7
movaps xmm7, xmm3
mulss xmm7, dword [ebp - 0xd0]
mulss xmm3, xmm5
addss xmm7, xmm0
movaps xmm0, xmm2
mulss xmm0, xmm5
addss xmm7, xmm0
movaps xmm0, xmm1
mulss xmm1, dword [ebp - 0xa4]
mulss xmm0, xmm6
subss xmm7, xmm0
movss xmm0, dword [ebp - 0xd0]
mulss xmm0, xmm2
movss xmm2, dword [ebp - 0xd4]
movss dword [ebp - 0x154], xmm2
movaps xmm6, xmm0
movss dword [ebp - 0xd0], xmm0
addss xmm6, xmm4
movss dword [ebp - 0x15c], xmm7
movaps xmm0, xmm7
mulss xmm0, xmm7
addss xmm6, xmm1
movaps xmm1, xmm2
subss xmm6, xmm3
movss xmm3, dword [ebp - 0xc0]
movss dword [ebp - 0x158], xmm3
movaps xmm5, xmm6
movss dword [ebp - 0x160], xmm6
mulss xmm5, xmm6
addss xmm5, xmm0
movss xmm4, dword [0x4c2580]
movaps xmm0, xmm3
mulss xmm1, xmm2
mulss xmm0, xmm3
addss xmm1, xmm0
addss xmm5, xmm1
comiss xmm5, xmm4
jbe 0x474361
xorps xmm0, xmm0
movss xmm1, dword [0x4d4354]
sqrtss xmm0, xmm5
divss xmm1, xmm0
shufps xmm1, xmm1, 0
mulps xmm1, xmmword [ebp - 0x160]
movaps xmmword [ebp - 0x160], xmm1
movss xmm2, dword [ebp - 0x154]
movss xmm3, dword [ebp - 0x158]
movss xmm7, dword [ebp - 0x15c]
movss xmm6, dword [ebp - 0x160]
mulss xmm7, xmm7
mulss xmm6, xmm6
mulss xmm2, xmm2
mulss xmm3, xmm3
addss xmm7, xmm6
addss xmm2, xmm3
addss xmm7, xmm2
comiss xmm7, xmm4
jbe 0x47439b
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x60]
call fcn.00410550
movss xmm4, dword [0x4c2580]
jmp 0x4743b8
mov eax, dword [ebp - 0xec]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x60], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0x50], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ebp - 0x40], xmm0
movss xmm3, dword [ebp - 0xd8]
movss xmm0, dword [ebp - 0x124]
movss xmm2, dword [ebp - 0x11c]
movss xmm1, dword [ebp - 0x120]
mulss xmm0, xmm3
mov dword [ebp - 0x64], 0
mulss xmm2, xmm3
addss xmm0, dword [esi + 0x30]
mulss xmm1, xmm3
addss xmm2, dword [esi + 0x38]
addss xmm1, dword [esi + 0x34]
movss dword [ebp - 0x70], xmm0
movss xmm0, dword [ebp - 0x174]
addss xmm0, dword [ebp - 0x178]
movss dword [ebp - 0x68], xmm2
xorps xmm2, xmm2
movss dword [ebp - 0x6c], xmm1
movss dword [ebp - 0xa4], xmm2
addss xmm0, dword [ebp - 0x17c]
comiss xmm0, xmm4
jbe 0x474440
xorps xmm2, xmm2
sqrtss xmm2, xmm0
movss dword [ebp - 0xa4], xmm2
movss xmm1, dword [0x4c3000]
movaps xmm0, xmm2
mulss xmm0, xmm3
comiss xmm0, xmm1
jbe 0x474463
movaps xmm2, xmm1
divss xmm2, xmm3
movss dword [ebp - 0xa4], xmm2
movss xmm0, dword [0x4d4328]
comiss xmm0, xmm2
jbe 0x47449f
movaps xmm1, xmm3
movaps xmm0, xmm3
mulss xmm0, dword [0x4c2ffc]
movaps xmm4, xmm3
mulss xmm4, dword [0x4d4340]
mulss xmm1, xmm3
mulss xmm1, xmm0
mulss xmm1, xmm2
mulss xmm1, xmm2
subss xmm4, xmm1
jmp 0x4744ca
movaps xmm0, xmm2
mulss xmm0, dword [0x4d4340]
mulss xmm0, xmm3
call fcn.004a3e6b
movss xmm2, dword [ebp - 0xa4]
movaps xmm4, xmm0
movss xmm3, dword [ebp - 0xd8]
divss xmm4, xmm2
movss xmm0, dword [ebp - 0x128]
movaps xmm5, xmm4
mulss xmm2, xmm3
movaps xmm1, xmm4
mulss xmm1, dword [ebp - 0x12c]
mulss xmm2, dword [0x4d4340]
mulss xmm4, dword [ebp - 0x130]
mulss xmm0, xmm5
movss dword [ebp - 0xa4], xmm1
movss dword [ebp - 0xe8], xmm4
movss dword [ebp - 0xd4], xmm0
movaps xmm0, xmm2
call fcn.004a3d1e
lea eax, [ebp - 0x190]
movss dword [ebp - 0xc0], xmm0
push eax
mov ecx, esi
call fcn.004339a0
movss xmm4, dword [ebp - 0xc0]
movss xmm6, dword [ebp - 0xe8]
movaps xmm7, xmm4
movss xmm2, dword [ebp - 0x184]
movss xmm1, dword [ebp - 0x190]
movss xmm3, dword [ebp - 0x18c]
mulss xmm7, xmm2
movaps xmm0, xmm3
mulss xmm0, dword [ebp - 0xa4]
mulss xmm1, xmm6
subss xmm7, xmm1
movss xmm1, dword [ebp - 0x188]
subss xmm7, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [ebp - 0xd4]
subss xmm7, xmm0
movaps xmm0, xmm2
mulss xmm0, dword [ebp - 0xd4]
movss dword [ebp - 0xe8], xmm0
movaps xmm0, xmm4
movss xmm5, dword [ebp - 0xe8]
mulss xmm0, xmm1
movss dword [ebp - 0x164], xmm7
addss xmm5, xmm0
movaps xmm0, xmm3
mulss xmm0, xmm6
addss xmm5, xmm0
movss xmm0, dword [ebp - 0x190]
mulss xmm0, dword [ebp - 0xa4]
subss xmm5, xmm0
movaps xmm0, xmm2
mulss xmm0, dword [ebp - 0xa4]
mulss xmm2, xmm6
movss dword [ebp - 0xd0], xmm0
movaps xmm0, xmm4
movss xmm4, dword [ebp - 0xd0]
mulss xmm0, xmm3
mulss xmm3, dword [ebp - 0xd4]
addss xmm4, xmm0
movss dword [ebp - 0xe8], xmm5
movss xmm0, dword [ebp - 0x190]
mulss xmm0, dword [ebp - 0xd4]
addss xmm4, xmm0
movaps xmm0, xmm1
mulss xmm1, dword [ebp - 0xa4]
mulss xmm0, xmm6
subss xmm4, xmm0
movss xmm0, dword [ebp - 0x190]
mulss xmm0, dword [ebp - 0xc0]
movss dword [ebp - 0xd0], xmm4
movaps xmm4, xmm0
addss xmm4, xmm2
movss dword [ebp - 0xc0], xmm0
movss xmm2, dword [ebp - 0xd0]
movss dword [ebp - 0x16c], xmm2
movaps xmm0, xmm2
addss xmm4, xmm1
subss xmm4, xmm3
movaps xmm3, xmm5
movss dword [ebp - 0x168], xmm3
movaps xmm6, xmm4
movss dword [ebp - 0x170], xmm4
mulss xmm6, xmm4
movss xmm5, dword [0x4c2580]
movaps xmm1, xmm3
mulss xmm0, xmm2
mulss xmm1, xmm3
addss xmm6, xmm0
movaps xmm0, xmm7
mulss xmm0, xmm7
addss xmm1, xmm0
addss xmm6, xmm1
comiss xmm6, xmm5
jbe 0x474710
xorps xmm0, xmm0
movss xmm1, dword [0x4d4354]
sqrtss xmm0, xmm6
divss xmm1, xmm0
shufps xmm1, xmm1, 0
mulps xmm1, xmmword [ebp - 0x170]
movaps xmmword [ebp - 0x170], xmm1
movss xmm7, dword [ebp - 0x164]
movss xmm3, dword [ebp - 0x168]
movss xmm2, dword [ebp - 0x16c]
movss xmm4, dword [ebp - 0x170]
nop word [eax + eax]
mulss xmm7, xmm7
mulss xmm3, xmm3
mulss xmm2, xmm2
mulss xmm4, xmm4
addss xmm7, xmm3
addss xmm2, xmm4
addss xmm7, xmm2
comiss xmm7, xmm5
jbe 0x474745
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0xa0]
call fcn.00410550
jmp 0x474762
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0xa0], xmm0
movups xmm0, xmmword [esi + 0x10]
movups xmmword [ebp - 0x90], xmm0
movups xmm0, xmmword [esi + 0x20]
movups xmmword [ebp - 0x80], xmm0
mov ecx, dword [edi + 0xb4]
test ecx, ecx
je 0x474792
movaps xmm0, xmmword [0x4d43b0]
lea edx, [ebp - 0x1c0]
push edx
movaps xmmword [ebp - 0x1c0], xmm0
lea edx, [ebp - 0x30]
mov eax, dword [ecx]
push ecx
mov dword [esp], 0x3e4ccccd
push edx
call dword [eax + 0x14]
mov eax, dword [edi]
movss xmm0, dword [ebp - 0xd8]
push ecx
mov ecx, edi
movss dword [esp], xmm0
call dword [eax]
mov dword [ebp - 0x250], 0x4c2f28
mov dword [ebp - 0x220], 0x5d5e0b6b
mov byte [ebp - 0x21c], 0
mov ecx, dword [ebp - 0xf0]
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004748c0
cmp byte [ebp - 0x21c], 0
mov ecx, dword [ebp - 0xdc]
je 0x474888
movss xmm2, dword [ebp - 0x220]
inc ecx
movaps xmm4, xmmword [ebp - 0x230]
movaps xmm3, xmmword [ebp - 0x240]
movaps xmmword [ebp - 0x1d0], xmm4
movaps xmmword [ebp - 0x100], xmm3
mov dword [ebp - 0xdc], ecx
addss xmm2, dword [edi + 0xb8]
movss dword [ebp - 0xc0], xmm2
cmp ecx, 0x40
jg 0x47487c
movss xmm7, dword [0x4d4328]
comiss xmm2, xmm7
mov byte [ebp - 4], 0
movss xmm5, dword [0x4c3000]
movss xmm6, dword [0x4d4340]
ja 0x473f66
movss xmm0, dword [ebp - 0xd8]
mov al, 1
movss dword [edi + 0xb0], xmm0
movups xmmword [edi + 0x90], xmm3
movups xmmword [edi + 0xa0], xmm4
jmp 0x474894
mov eax, dword [edi]
push ecx
push 0xfffffffffffffffe
mov ecx, edi
call dword [eax + 8]
jmp 0x474892
mov eax, dword [edi]
push ecx
push 0xffffffffffffffff
mov ecx, edi
call dword [eax + 8]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004968dc
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x14