Function at 0x1000a310
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10049298
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
mov eax, dword [0x10063018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x26
xor eax, eax
mov dl, byte [eax + str.oINFDN_f_OCKW_]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x20], dl
jns 0x1000a362
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0xe
jl 0x1000a345
mov esi, dword [0x10075068]
mov ebx, dword [sym.imp.MSVCR100.dll__strdup]
lea eax, [esi + esi*4]
lea esi, [esi + esi*4]
lea ecx, [ebp - 0x20]
add esi, esi
push ecx
mov byte [ebp - 0x12], 0
mov dword [eax*4 + 0x10071f58], 1
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d688
mov dword [esi + 0x10071f50], 0x1007484c
mov edi, 2
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
inc esi
add esp, 4
cmp dword [0x1007484c], 0
mov dword [0x10075068], esi
je 0x1000a511
mov dword [ebp - 0x18], 0x65746144
mov byte [ebp - 0x14], 0
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0x100
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new___unsigned_int_]
movzx ecx, word [ebp - 0x2a]
movzx edx, word [ebp - 0x2e]
add esp, 4
push ecx
movzx ecx, word [ebp - 0x30]
push edx
push ecx
push str._d__d__d
push eax
mov dword [ebp - 0xd4], eax
call dword [sym.imp.MSVCR100.dll_sprintf]
mov esi, dword [0x10075068]
lea edx, [esi + esi*4]
lea esi, [esi + esi*4]
lea eax, [ebp - 0x18]
add esp, 0x14
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], edi
add esi, esi
call ebx
mov ecx, dword [ebp - 0xd4]
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], ecx
xor eax, eax
mov dword [esi + 0x10071f50], eax
mov dword [esi + 0x10071f54], eax
mov esi, dword [0x10075068]
inc esi
lea edx, [esi + esi*4]
mov dword [0x10075068], esi
mov byte [ebp - 0x14], al
lea esi, [esi + esi*4]
lea eax, [ebp - 0x18]
add esp, 4
add esi, esi
push eax
mov dword [ebp - 0x18], 0x656d6954
mov dword [edx*4 + 0x10071f58], edi
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x10074850
xor eax, eax
mov dword [esi + 0x10071f50], eax
mov dword [esi + 0x10071f54], eax
mov esi, dword [0x10075068]
inc esi
lea ecx, [esi + esi*4]
mov dword [0x10075068], esi
lea esi, [esi + esi*4]
lea edx, [ebp - 0xd4]
add esp, 4
add esi, esi
push edx
mov dword [ebp - 0xd4], 0x737046
mov dword [ecx*4 + 0x10071f58], edi
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x10073e78
xor eax, eax
mov dword [esi + 0x10071f50], eax
mov dword [esi + 0x10071f54], eax
mov esi, dword [0x10075068]
add esp, 4
inc esi
mov dword [0x10075068], esi
mov ecx, 0x1019014e
lea eax, [ebp - 0x1c]
call fcn.10015280
lea ecx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [ecx*4 + 0x10071f58], 1
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d688
mov dword [esi + 0x10071f50], 0x10074d78
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
inc esi
add esp, 4
cmp dword [0x10074d78], 0
mov dword [0x10075068], esi
je 0x1000a7ca
mov ecx, 0x1019015a
lea eax, [ebp - 0x1c]
call fcn.10015280
lea edx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov eax, dword [0x10075068]
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x1007501c
mov dword [esi + 0x10071f54], edi
inc eax
lea esi, [eax + eax*4]
lea edx, [ebp - 0x18]
add esp, 4
lea ecx, [eax + eax*4]
add esi, esi
push edx
mov dword [0x10075068], eax
mov dword [ebp - 0x18], 0x656e694c
mov byte [ebp - 0x14], 0
mov dword [ecx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov eax, dword [0x10075068]
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10075018
mov dword [esi + 0x10071f54], edi
inc eax
lea esi, [eax + eax*4]
lea edx, [ebp - 0x18]
add esp, 4
lea ecx, [eax + eax*4]
add esi, esi
push edx
mov dword [0x10075068], eax
mov dword [ebp - 0x18], 0x656d614e
mov byte [ebp - 0x14], 0
mov dword [ecx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov eax, dword [0x10075068]
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10075004
mov dword [esi + 0x10071f54], edi
inc eax
lea esi, [eax + eax*4]
lea edx, [ebp - 0xd4]
add esp, 4
lea ecx, [eax + eax*4]
add esi, esi
push edx
mov dword [0x10075068], eax
mov dword [ebp - 0xd4], 0x786f42
mov dword [ecx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov eax, dword [0x10075068]
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10075028
inc eax
mov dword [esi + 0x10071f54], edi
lea esi, [eax + eax*4]
add esp, 4
lea ecx, [eax + eax*4]
add esi, esi
lea edx, [ebp - 0x18]
mov dword [0x10075068], eax
mov dword [ebp - 0x18], 0x6c616548
mov word [ebp - 0x14], 0x6874
mov byte [ebp - 0x12], 0
mov dword [ecx*4 + 0x10071f58], 4
add esi, esi
push edx
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10075030
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
inc esi
add esp, 4
mov ecx, 0x1037107f
lea eax, [ebp - 0x1c]
mov dword [0x10075068], esi
call fcn.100152f0
lea ecx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [ecx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x1007502c
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
inc esi
add esp, 4
mov ecx, 0x1007fdc3
lea eax, [ebp - 0x1c]
mov dword [0x10075068], esi
call fcn.10015360
lea edx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x1007500c
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
add esp, 4
inc esi
mov dword [0x10075068], esi
mov ecx, 0x1005f86c
lea eax, [ebp - 0x1c]
call fcn.100153d0
lea ecx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [ecx*4 + 0x10071f58], 1
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d688
mov dword [esi + 0x10071f50], 0x10072a38
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
inc esi
add esp, 4
cmp dword [0x10072a38], 0
mov dword [0x10075068], esi
je 0x1000aa3e
lea edx, [esi + esi*4]
lea esi, [esi + esi*4]
lea eax, [ebp - 0x1c]
add esi, esi
push eax
mov dword [ebp - 0x1c], 0x206d6941
mov dword [ebp - 0x18], 0x766f46
mov dword [edx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10074de4
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
inc esi
add esp, 4
cmp dword [0x10074de4], 0
mov dword [0x10075068], esi
je 0x1000a986
xor ecx, ecx
xor eax, eax
mov dl, byte [eax + str.___PljqNf]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x20], dl
jns 0x1000a8b3
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0xb
jl 0x1000a896
lea eax, [esi + esi*4]
lea esi, [esi + esi*4]
lea ecx, [ebp - 0x20]
add esi, esi
push ecx
mov byte [ebp - 0x15], 0
mov dword [eax*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov eax, dword [0x10075068]
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10074de8
inc eax
add esp, 4
mov dword [esi + 0x10071f54], edi
xor ecx, ecx
mov dword [0x10075068], eax
xor esi, esi
lea ebx, [ebx]
mov dl, byte [esi + str.___Qeaor_Ldz]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + esi - 0x20], dl
jns 0x1000a92d
dec ecx
or ecx, 0xffffff00
inc ecx
inc esi
cmp esi, 0xd
jl 0x1000a910
lea esi, [eax + eax*4]
lea edx, [ebp - 0x20]
lea ecx, [eax + eax*4]
add esi, esi
push edx
mov byte [ebp - 0x13], 0
mov dword [ecx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d660
mov dword [esi + 0x10071f50], 0x10074dec
mov dword [esi + 0x10071f54], 5
mov esi, dword [0x10075068]
add esp, 4
inc esi
mov dword [0x10075068], esi
lea eax, [esi + esi*4]
lea esi, [esi + esi*4]
lea ecx, [ebp - 0x18]
add esi, esi
push ecx
mov dword [ebp - 0x18], 0x67726154
mov word [ebp - 0x14], 0x7465
mov byte [ebp - 0x12], 0
mov dword [eax*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov eax, dword [0x10075068]
mov dword [esi + 0x10071f60], 0x1006cfd4
mov dword [esi + 0x10071f50], 0x10074e0c
inc eax
mov ecx, 4
mov dword [esi + 0x10071f54], ecx
lea edx, [eax + eax*4]
lea esi, [eax + eax*4]
mov dword [0x10075068], eax
lea eax, [ebp - 0x1c]
add esp, 4
add esi, esi
push eax
mov dword [ebp - 0x1c], 0x206d6941
mov dword [ebp - 0x18], 0x79654b
mov dword [edx*4 + 0x10071f58], ecx
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d55c
mov dword [esi + 0x10071f50], 0x10074e1c
mov dword [esi + 0x10071f54], 7
mov esi, dword [0x10075068]
add esp, 4
inc esi
mov dword [0x10075068], esi
mov ecx, 0xb
xor eax, eax
mov dl, byte [eax + str.il_1Zrw]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x20], dl
jns 0x1000aa62
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0xb
jl 0x1000aa45
lea eax, [esi + esi*4]
lea esi, [esi + esi*4]
lea ecx, [ebp - 0x20]
add esi, esi
push ecx
mov byte [ebp - 0x15], 0
mov dword [eax*4 + 0x10071f58], 1
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d688
mov dword [esi + 0x10071f50], 0x10073224
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
inc esi
add esp, 4
cmp dword [0x10073224], 0
mov dword [0x10075068], esi
je 0x1000ac85
mov ecx, 0x55fb7b9c
lea eax, [ebp - 0x1c]
call fcn.10015440
lea edx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], 4
add esi, esi
call ebx
inc dword [0x10075068]
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10074fd8
mov dword [esi + 0x10071f54], edi
mov edi, 0x1005e4ac
add esp, 4
sub edi, 0x6fad512a
lea esi, [ebp - 0x20]
call fcn.100154c0
mov ecx, dword [0x10075068]
lea esi, [ecx + ecx*4]
lea edx, [ecx + ecx*4]
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], 4
add esi, esi
call ebx
inc dword [0x10075068]
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10074fa0
mov edi, str._VWZ__
mov dword [esi + 0x10071f54], 2
add esp, 4
sub edi, 0x5ec4cd49
lea esi, [ebp - 0x20]
call fcn.10015500
mov ecx, dword [0x10075068]
lea esi, [ecx + ecx*4]
lea edx, [ecx + ecx*4]
mov edi, 4
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], edi
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10074f98
mov dword [esi + 0x10071f54], 2
mov esi, dword [0x10075068]
inc esi
add esp, 4
mov ecx, 0x1036f029
lea eax, [ebp - 0x1c]
mov dword [0x10075068], esi
call fcn.10015540
lea ecx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [ecx*4 + 0x10071f58], edi
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d5cc
mov dword [esi + 0x10071f50], 0x10074f88
mov dword [esi + 0x10071f54], 2
mov esi, dword [0x10075068]
inc esi
add esp, 4
mov ecx, 0x1036f035
lea eax, [ebp - 0x1c]
mov dword [0x10075068], esi
call fcn.10015540
lea edx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
mov dword [edx*4 + 0x10071f58], edi
add esi, esi
push eax
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d5cc
mov dword [esi + 0x10071f50], 0x10074fb0
mov dword [esi + 0x10071f54], 3
mov esi, dword [0x10075068]
add esp, 4
inc esi
mov dword [0x10075068], esi
mov edi, 2
mov ecx, 0x101901f6
lea eax, [ebp - 0x1c]
call fcn.100155d0
lea ecx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [ecx*4 + 0x10071f58], 1
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d688
mov dword [esi + 0x10071f50], 0x10071444
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
inc esi
add esp, 4
cmp dword [0x10071444], 0
mov dword [0x10075068], esi
je 0x1000ae53
mov ecx, 0x1dd9b289
lea eax, [ebp - 0x1c]
call fcn.10015660
lea edx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10074f34
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
inc esi
add esp, 4
mov ecx, 0x101b1143
lea eax, [ebp - 0x1c]
mov dword [0x10075068], esi
call fcn.100156d0
lea ecx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [ecx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10074eec
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
mov ecx, 0x1005e508
inc esi
add esp, 4
sub ecx, 0x594bc5bc
lea eax, [ebp - 0x1c]
mov dword [0x10075068], esi
call fcn.10015740
lea edx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], 4
add esi, esi
call ebx
inc dword [0x10075068]
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d590
mov dword [esi + 0x10071f50], 0x10074e7c
mov edi, 0x1005e514
mov dword [esi + 0x10071f54], 7
add esp, 4
sub edi, 0x13b3a1f0
lea esi, [ebp - 0x30]
call fcn.100157c0
mov ecx, dword [0x10075068]
lea esi, [ecx + ecx*4]
lea edx, [ecx + ecx*4]
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10074f18
mov dword [esi + 0x10071f54], 2
mov esi, dword [0x10075068]
add esp, 4
inc esi
mov dword [0x10075068], esi
mov edi, 2
lea eax, [esi + esi*4]
lea esi, [esi + esi*4]
lea ecx, [ebp - 0x1c]
add esi, esi
push ecx
mov dword [ebp - 0x1c], 0x4d204247
mov dword [ebp - 0x18], 0x756e65
mov dword [eax*4 + 0x10071f58], 1
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006d688
mov dword [esi + 0x10071f50], 0x10074264
mov dword [esi + 0x10071f54], edi
mov esi, dword [0x10075068]
inc esi
add esp, 4
cmp dword [0x10074264], 0
mov dword [0x10075068], esi
je 0x1000afca
mov edi, 0x1024f771
lea esi, [ebp - 0x20]
call fcn.10015800
mov ecx, dword [0x10075068]
lea esi, [ecx + ecx*4]
lea edx, [ecx + ecx*4]
mov edi, 4
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], edi
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10074f10
mov dword [esi + 0x10071f54], 2
mov esi, dword [0x10075068]
inc esi
add esp, 4
mov ecx, 0x37d09605
lea eax, [ebp - 0x1c]
mov dword [0x10075068], esi
call fcn.10015840
lea ecx, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push eax
mov dword [ecx*4 + 0x10071f58], edi
add esi, esi
call ebx
inc dword [0x10075068]
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf2c
mov dword [esi + 0x10071f50], 0x10074f08
mov dword [esi + 0x10071f54], 5
add esp, 4
mov edi, 0x5d1a8314
lea esi, [ebp - 0x20]
call fcn.100158d0
mov ecx, dword [0x10075068]
lea esi, [ecx + ecx*4]
lea edx, [ecx + ecx*4]
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], 4
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
mov dword [esi + 0x10071f60], 0x1006cf0c
mov dword [esi + 0x10071f50], 0x10074f0c
add esp, 4
inc dword [0x10075068]
mov dword [esi + 0x10071f54], 2
mov esi, dword [0x10075068]
mov edi, 2
lea eax, [esi + esi*4]
lea esi, [esi + esi*4]
add esi, esi
push 0x1005c870
mov dword [eax*4 + 0x10071f58], edi
add esi, esi
call ebx
inc dword [0x10075068]
mov dword [esi + 0x10071f5c], eax
xor eax, eax
mov dword [esi + 0x10071f60], 0x1005bb80
mov dword [esi + 0x10071f50], eax
mov dword [esi + 0x10071f54], eax
add esp, 4
mov edi, 0x102c1199
lea esi, [ebp - 0xd0]
call fcn.10015910
mov ecx, dword [0x10075068]
lea esi, [ecx + ecx*4]
lea edx, [ecx + ecx*4]
add esi, esi
push eax
mov dword [edx*4 + 0x10071f58], 2
add esi, esi
call ebx
mov dword [esi + 0x10071f5c], eax
xor eax, eax
mov dword [esi + 0x10071f60], 0x1005bb80
add esp, 4
inc dword [0x10075068]
mov dword [esi + 0x10071f50], eax
mov dword [esi + 0x10071f54], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100197a5
mov esp, ebp
pop ebp
ret