Function at 0x1000a9d0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002cba0
mov eax, dword fs:[0]
push eax
sub esp, 0x11c
mov eax, dword [0x1003800c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0xc0
lea eax, [ebp - 0xd4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xd4]
push 1
call fcn.1002a170
mov dword [ebp - 4], 0
mov cl, 0x31
mov dword [ebp - 0xe4], 0x6d0b7231
xor eax, eax
mov dword [ebp - 0xe0], 0x5555507d
mov dword [ebp - 0xdc], 0x581f4354
mov word [ebp - 0xd8], 0x585f
mov byte [ebp - 0xd6], 0
nop dword [eax + eax]
xor byte [ebp + eax - 0xe3], cl
inc eax
cmp eax, 0xd
jae 0x1000aa75
mov cl, byte [ebp - 0xe4]
jmp 0x1000aa60
push 0x40
push 2
lea eax, [ebp - 0xe3]
mov byte [ebp - 0xd6], 0
push eax
lea ecx, [ebp - 0xd4]
call fcn.1002a080
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd4]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator__void_const]
test al, al
jne 0x1000b71e
mov cl, 0x18
mov byte [ebp - 0xd6], 0
mov al, 0x12
mov byte [ebp - 0xd8], cl
xor al, cl
mov byte [ebp - 0xd6], 0
lea edx, [ebp - 0xd7]
mov byte [ebp - 0xd7], al
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034940]
xor ecx, ecx
movups xmmword [ebp - 0x124], xmm0
mov dword [ebp - 0xf4], 0x9090909
movaps xmm0, xmmword [0x10034f70]
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0xf0], 0x9090909
movaps xmm0, xmmword [0x10034930]
movups xmmword [ebp - 0x104], xmm0
mov dword [ebp - 0xec], 0x3090909
mov word [ebp - 0xe8], 0x29
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp - 0x124]
xor byte [ebp + ecx - 0x123], al
inc ecx
cmp ecx, 0x3c
jb 0x1000ab40
lea edx, [ebp - 0x123]
mov byte [ebp - 0xe7], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034b10]
xor ecx, ecx
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0xf4], 0x2b2b2b2b
movaps xmm0, xmmword [0x10034b20]
movups xmmword [ebp - 0x104], xmm0
mov dword [ebp - 0xf0], 0x24242b2b
mov dword [ebp - 0xec], 0x12b21
nop word [eax + eax]
mov al, byte [ebp - 0x114]
xor byte [ebp + ecx - 0x113], al
inc ecx
cmp ecx, 0x2a
jb 0x1000abb0
lea edx, [ebp - 0x113]
mov byte [ebp - 0xe9], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034e40]
xor ecx, ecx
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0xf0], 0x30303f6d
movaps xmm0, xmmword [0x10034cb0]
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0xec], 0x153f35
movaps xmm0, xmmword [0x10035130]
movups xmmword [ebp - 0x100], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x120]
xor byte [ebp + ecx - 0x11f], al
inc ecx
cmp ecx, 0x36
jb 0x1000ac20
lea edx, [ebp - 0x11f]
mov byte [ebp - 0xe9], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034b00]
xor ecx, ecx
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0xf0], 0x686d6d62
movaps xmm0, xmmword [0x10034bd0]
movups xmmword [ebp - 0x110], xmm0
mov word [ebp - 0xec], 0x4862
movaps xmm0, xmmword [0x10034f10]
movups xmmword [ebp - 0x100], xmm0
mov byte [ebp - 0xea], 0
mov al, byte [ebp - 0x120]
xor byte [ebp + ecx - 0x11f], al
inc ecx
cmp ecx, 0x35
jb 0x1000ac91
lea edx, [ebp - 0x11f]
mov byte [ebp - 0xea], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034b50]
xor ecx, ecx
movups xmmword [ebp - 0x11c], xmm0
mov dword [ebp - 0xec], 0x2c262323
movaps xmm0, xmmword [0x10035170]
movups xmmword [ebp - 0x10c], xmm0
mov word [ebp - 0xe8], 6
movaps xmm0, xmmword [0x10034b40]
movups xmmword [ebp - 0xfc], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x11c]
xor byte [ebp + ecx - 0x11b], al
inc ecx
cmp ecx, 0x34
jb 0x1000ad00
lea edx, [ebp - 0x11b]
mov byte [ebp - 0xe7], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034d10]
xor ecx, ecx
movups xmmword [ebp - 0x11c], xmm0
mov dword [ebp - 0xec], 0x2c060c09
movaps xmm0, xmmword [0x10034db0]
movups xmmword [ebp - 0x10c], xmm0
mov byte [ebp - 0xe8], 0
movaps xmm0, xmmword [0x10034900]
movups xmmword [ebp - 0xfc], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x11c]
xor byte [ebp + ecx - 0x11b], al
inc ecx
cmp ecx, 0x33
jb 0x1000ad70
lea edx, [ebp - 0x11b]
mov byte [ebp - 0xe8], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034ea0]
xor ecx, ecx
movups xmmword [ebp - 0x11c], xmm0
mov dword [ebp - 0xec], 0x765c56
movaps xmm0, xmmword [0x10034920]
movups xmmword [ebp - 0x10c], xmm0
movaps xmm0, xmmword [0x10034da0]
movups xmmword [ebp - 0xfc], xmm0
mov al, byte [ebp - 0x11c]
xor byte [ebp + ecx - 0x11b], al
inc ecx
cmp ecx, 0x32
jb 0x1000add1
lea edx, [ebp - 0x11b]
mov byte [ebp - 0xe9], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034f20]
xor ecx, ecx
movups xmmword [ebp - 0x10c], xmm0
mov dword [ebp - 0xec], 0x4963696c
movaps xmm0, xmmword [0x10034fc0]
movups xmmword [ebp - 0xfc], xmm0
mov byte [ebp - 0xe8], 0
nop dword [eax + eax]
mov al, byte [ebp - 0x10c]
xor byte [ebp + ecx - 0x10b], al
inc ecx
cmp ecx, 0x23
jb 0x1000ae30
lea edx, [ebp - 0x10b]
mov byte [ebp - 0xe8], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x100348a0]
xor ecx, ecx
movups xmmword [ebp - 0x118], xmm0
mov word [ebp - 0xe8], 0x21
movaps xmm0, xmmword [0x100348b0]
movups xmmword [ebp - 0x108], xmm0
movaps xmm0, xmmword [0x10034970]
movups xmmword [ebp - 0xf8], xmm0
mov al, byte [ebp - 0x118]
xor byte [ebp + ecx - 0x117], al
inc ecx
cmp ecx, 0x30
jb 0x1000ae90
lea edx, [ebp - 0x117]
mov byte [ebp - 0xe7], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov cl, 0x38
mov dword [ebp - 0xe4], 0x17171238
mov dword [ebp - 0xe0], 0x6c76777b
xor eax, eax
mov dword [ebp - 0xdc], 0x2187077
mov word [ebp - 0xd8], 0x3218
mov byte [ebp - 0xd6], 0
nop dword [eax]
xor byte [ebp + eax - 0xe3], cl
inc eax
cmp eax, 0xd
jae 0x1000af05
mov cl, byte [ebp - 0xe4]
jmp 0x1000aef0
lea edx, [ebp - 0xe3]
mov byte [ebp - 0xd6], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov ch, 0x22
mov byte [ebp - 0xd6], 0
mov cl, 0xd
mov byte [ebp - 0xdc], ch
mov dl, cl
mov byte [ebp - 0xd6], 0
xor dl, ch
xor cl, ch
mov al, 8
mov byte [ebp - 0xda], cl
mov ah, 0x28
mov byte [ebp - 0xd9], dl
mov bl, 2
lea edx, [ebp - 0xdb]
xor al, ch
xor bl, ch
xor ah, ch
mov byte [ebp - 0xdb], al
lea ecx, [ebp - 0xc4]
mov byte [ebp - 0xd8], bl
mov byte [ebp - 0xd7], ah
call fcn.100016e0
movaps xmm0, xmmword [0x10035140]
xor ecx, ecx
movups xmmword [ebp - 0x100], xmm0
mov dword [ebp - 0xf0], 0x5f5f5866
mov dword [ebp - 0xec], 0x3b114354
mov byte [ebp - 0xe8], 0
mov al, byte [ebp - 0x100]
xor byte [ebp + ecx - 0xff], al
inc ecx
cmp ecx, 0x17
jb 0x1000afa1
lea edx, [ebp - 0xff]
mov byte [ebp - 0xe8], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034f60]
xor ecx, ecx
movups xmmword [ebp - 0x100], xmm0
mov dword [ebp - 0xf0], 0x5f5f4360
mov dword [ebp - 0xec], 0x260c5e49
mov byte [ebp - 0xe8], 0
nop word [eax + eax]
mov al, byte [ebp - 0x100]
xor byte [ebp + ecx - 0xff], al
inc ecx
cmp ecx, 0x17
jb 0x1000b000
lea edx, [ebp - 0xff]
mov byte [ebp - 0xe8], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov cl, 0xc
mov byte [ebp - 0xd6], 0
mov al, 6
mov byte [ebp - 0xd8], cl
xor al, cl
mov byte [ebp - 0xd6], 0
lea edx, [ebp - 0xd7]
mov byte [ebp - 0xd7], al
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x100350b0]
xor ecx, ecx
movups xmmword [ebp - 0x118], xmm0
mov dword [ebp - 0xf8], 0x6b626f66
movaps xmm0, xmmword [0x100350c0]
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf4], 0x236a4723
mov dword [ebp - 0xf0], 0x2d6a704a
mov word [ebp - 0xec], 0x923
mov byte [ebp - 0xea], 0
nop dword [eax + eax]
mov al, byte [ebp - 0x118]
xor byte [ebp + ecx - 0x117], al
inc ecx
cmp ecx, 0x2d
jb 0x1000b0b0
lea edx, [ebp - 0x117]
mov byte [ebp - 0xea], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10035070]
xor ecx, ecx
movups xmmword [ebp - 0x11c], xmm0
mov word [ebp - 0xec], 0x1238
movaps xmm0, xmmword [0x10035050]
movups xmmword [ebp - 0x10c], xmm0
mov byte [ebp - 0xea], 0
movaps xmm0, xmmword [0x10034be0]
movups xmmword [ebp - 0xfc], xmm0
nop word [eax + eax]
mov al, byte [ebp - 0x11c]
xor byte [ebp + ecx - 0x11b], al
inc ecx
cmp ecx, 0x31
jb 0x1000b120
lea edx, [ebp - 0x11b]
mov byte [ebp - 0xea], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov cl, 0x19
mov byte [ebp - 0xd6], 0
mov al, 0x13
mov byte [ebp - 0xd8], cl
xor al, cl
mov byte [ebp - 0xd6], 0
lea edx, [ebp - 0xd7]
mov byte [ebp - 0xd7], al
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034c40]
xor ecx, ecx
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0xf4], 0x2a593138
movaps xmm0, xmmword [0x10034b70]
movups xmmword [ebp - 0x104], xmm0
mov dword [ebp - 0xf0], 0x53303730
mov dword [ebp - 0xec], 0x59535353
mov word [ebp - 0xe8], 0x73
mov al, byte [ebp - 0x114]
xor byte [ebp + ecx - 0x113], al
inc ecx
cmp ecx, 0x2c
jb 0x1000b1c1
lea edx, [ebp - 0x113]
mov byte [ebp - 0xe7], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034cd0]
xor ecx, ecx
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0xf4], 0x46464646
movaps xmm0, xmmword [0x10034cc0]
movups xmmword [ebp - 0x104], xmm0
mov dword [ebp - 0xf0], 0x46464646
mov dword [ebp - 0xec], 0x464c4646
mov word [ebp - 0xe8], 0x6c
mov al, byte [ebp - 0x114]
xor byte [ebp + ecx - 0x113], al
inc ecx
cmp ecx, 0x2c
jb 0x1000b231
lea edx, [ebp - 0x113]
mov byte [ebp - 0xe7], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034dd0]
xor ecx, ecx
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0xf4], 0x54545454
movaps xmm0, xmmword [0x10034dc0]
movups xmmword [ebp - 0x104], xmm0
mov dword [ebp - 0xf0], 0x54545454
mov dword [ebp - 0xec], 0x545e5454
mov word [ebp - 0xe8], 0x7e
mov al, byte [ebp - 0x114]
xor byte [ebp + ecx - 0x113], al
inc ecx
cmp ecx, 0x2c
jb 0x1000b2a1
lea edx, [ebp - 0x113]
mov byte [ebp - 0xe7], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov byte [ebp - 0xe0], 0x45
mov al, 0x1e
xor al, byte [ebp - 0xe0]
mov cl, 6
mov byte [ebp - 0xdf], al
mov dl, 0xd
mov al, byte [ebp - 0xe0]
mov ch, 0x18
mov dh, 0x65
mov byte [ebp - 0xd7], 0
xor cl, al
mov byte [ebp - 0xd7], 0
xor dl, al
mov byte [ebp - 0xde], cl
xor ch, al
mov byte [ebp - 0xdd], dl
xor dh, al
mov byte [ebp - 0xda], ch
mov ah, 0x17
mov byte [ebp - 0xd9], dh
mov bl, 4
lea edx, [ebp - 0xdf]
mov bh, 0x4f
lea ecx, [ebp - 0xc4]
xor bl, al
xor ah, al
xor bh, al
mov byte [ebp - 0xdc], bl
mov byte [ebp - 0xdb], ah
mov byte [ebp - 0xd8], bh
call fcn.100016e0
movaps xmm0, xmmword [0x10034890]
xor ecx, ecx
movups xmmword [ebp - 0x108], xmm0
mov byte [ebp - 0xe8], 0
movaps xmm0, xmmword [0x10034ad0]
movups xmmword [ebp - 0xf8], xmm0
mov al, byte [ebp - 0x108]
xor byte [ebp + ecx - 0x107], al
inc ecx
cmp ecx, 0x1f
jb 0x1000b371
lea edx, [ebp - 0x107]
mov byte [ebp - 0xe8], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov byte [ebp - 0xe4], 0x7a
mov al, 0x2d
xor al, byte [ebp - 0xe4]
mov cl, 0x13
xor cl, byte [ebp - 0xe4]
mov dh, 0x5a
mov byte [ebp - 0xe3], al
mov dl, 0x14
mov byte [ebp - 0x125], dh
mov bl, dl
mov al, byte [ebp - 0x125]
mov ch, 8
mov byte [ebp - 0xe2], cl
mov ah, 0x1f
mov cl, byte [ebp - 0xe4]
mov bh, 0x47
xor al, cl
mov byte [ebp - 0x126], 0x70
xor dl, cl
mov byte [ebp - 0xdb], al
mov al, byte [ebp - 0x126]
xor dh, cl
xor ch, cl
mov byte [ebp - 0xe1], dl
xor bl, cl
mov byte [ebp - 0xde], ch
xor ah, cl
mov byte [ebp - 0xdd], dh
xor bh, cl
mov byte [ebp - 0xd9], 0
xor al, cl
mov byte [ebp - 0xe0], bl
lea edx, [ebp - 0xe3]
mov byte [ebp - 0xdf], ah
lea ecx, [ebp - 0xc4]
mov byte [ebp - 0xdc], bh
mov byte [ebp - 0xda], al
mov byte [ebp - 0xd9], 0
call fcn.100016e0
mov byte [ebp - 0xe4], 0x10
mov cl, 0x7f
xor cl, byte [ebp - 0xe4]
mov ch, 0x30
mov al, 0x5c
mov byte [ebp - 0x126], ch
xor al, byte [ebp - 0xe4]
mov dh, ch
mov byte [ebp - 0xe3], al
mov dl, 0x63
mov al, byte [ebp - 0x126]
mov bl, 0x75
mov byte [ebp - 0xe2], cl
mov ah, 0x62
mov cl, byte [ebp - 0xe4]
mov bh, 0x2d
xor al, cl
mov byte [ebp - 0x125], 0x1a
xor dl, cl
mov byte [ebp - 0xdb], al
mov al, byte [ebp - 0x125]
xor dh, cl
xor bl, cl
mov byte [ebp - 0xd9], 0
xor ah, cl
mov byte [ebp - 0xe1], dl
xor ch, cl
mov byte [ebp - 0xdd], dh
xor bh, cl
mov byte [ebp - 0xde], ch
xor al, cl
mov byte [ebp - 0xe0], bl
mov byte [ebp - 0xdf], ah
lea edx, [ebp - 0xe3]
mov byte [ebp - 0xdc], bh
lea ecx, [ebp - 0xc4]
mov byte [ebp - 0xda], al
mov byte [ebp - 0xd9], 0
call fcn.100016e0
movaps xmm0, xmmword [0x10034c70]
xor ecx, ecx
movups xmmword [ebp - 0x108], xmm0
mov byte [ebp - 0xe8], 0
movaps xmm0, xmmword [str.7]
movups xmmword [ebp - 0xf8], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x108]
xor byte [ebp + ecx - 0x107], al
inc ecx
cmp ecx, 0x1f
jb 0x1000b520
lea edx, [ebp - 0x107]
mov byte [ebp - 0xe8], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034d50]
xor ecx, ecx
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0xf4], 0x48484848
movaps xmm0, xmmword [0x10034d40]
movups xmmword [ebp - 0x104], xmm0
mov dword [ebp - 0xf0], 0x48484848
mov dword [ebp - 0xec], 0x48424848
mov word [ebp - 0xe8], 0x62
mov al, byte [ebp - 0x114]
xor byte [ebp + ecx - 0x113], al
inc ecx
cmp ecx, 0x2c
jb 0x1000b590
lea edx, [ebp - 0x113]
mov byte [ebp - 0xe7], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10034e80]
xor ecx, ecx
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0xf4], 0x5b5b5b5b
movaps xmm0, xmmword [0x10034e70]
movups xmmword [ebp - 0x104], xmm0
mov dword [ebp - 0xf0], 0x5b5b5b5b
mov dword [ebp - 0xec], 0x515b5b5b
mov word [ebp - 0xe8], 0x7b
mov al, byte [ebp - 0x114]
xor byte [ebp + ecx - 0x113], al
inc ecx
cmp ecx, 0x2c
jb 0x1000b600
lea edx, [ebp - 0x113]
mov byte [ebp - 0xe7], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov cl, 0xd
mov dword [ebp - 0xf8], 0x51374e0d
mov dword [ebp - 0xf4], 0x69696c41
xor eax, eax
mov dword [ebp - 0xf0], 0x64237f68
mov word [ebp - 0xec], 0x6463
mov byte [ebp - 0xea], 0
nop dword [eax]
xor byte [ebp + eax - 0xf7], cl
inc eax
cmp eax, 0xd
jae 0x1000b675
mov cl, byte [ebp - 0xf8]
jmp 0x1000b660
push 0x40
push 1
lea eax, [ebp - 0xf7]
mov byte [ebp - 0xea], 0
push eax
lea ecx, [ebp - 0xd4]
call fcn.1002a080
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd4]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator__void_const]
test al, al
jne 0x1000b71e
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd4]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::eof_void_const]
test al, al
jne 0x1000b6f7
nop dword [eax]
nop dword [eax + eax]
lea edx, [ebp - 0x11]
lea ecx, [ebp - 0xd4]
call fcn.1002a510
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd4]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::eof_void_const]
test al, al
je 0x1000b6d0
lea ecx, [ebp - 0xbc]
call fcn.10001520
test eax, eax
jne 0x1000b71e
push eax
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd4]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0x5c]
call fcn.1002a0c0
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002b830
mov esp, ebp
pop ebp
ret