Function at 0x100b7560
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d3c2e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1e8
mov eax, dword [0x100e4364]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x120], edx
mov edi, ecx
mov dword [ebp - 0x104], edi
mov eax, dword [0x10110ecc]
mov dword [ebp - 0xf4], 0
test al, 1
jne 0x100b75fc
or eax, 1
mov dword [0x10110ecc], eax
mov eax, dword [0x1010bbcc]
mov dword [0x10110eb8], eax
mov dword [0x10110ebc], 0
mov dword [0x10110ec0], 0
mov dword [0x10110ec4], 0
mov dword [0x10110ec8], 0
push 0x30
xorps xmm0, xmm0
mov dword [ebp - 0x10c], 4
lea eax, [ebp - 0x74]
movss dword [ebp - 0xf8], xmm0
push 0
push eax
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x78], 0
xorps xmm0, xmm0
lea eax, [ebp - 0xcc]
movups xmmword [ebp - 0x98], xmm0
push 0x30
push 0
push eax
movups xmmword [ebp - 0x88], xmm0
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [edi]
xorps xmm0, xmm0
mov eax, dword [0x1010bbb8]
add esp, 0xc
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xd0], 0
movups xmmword [ebp - 0xe0], xmm0
mov al, byte [ecx + eax]
test al, al
je 0x100b76fc
movss xmm4, dword [0x100e4464]
movss xmm5, dword [0x100e4468]
movss xmm6, dword [0x100e446c]
mov eax, dword [0x100e47d8]
mov ecx, dword [0x100e47e0]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x108], ecx
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm5
movss dword [ebp - 0x110], xmm6
jmp 0x100b7926
mov eax, dword [0x1010bccc]
add eax, 0xffffffa8
xor eax, 0x828e3e9d
mov eax, dword [eax + ecx]
mov ecx, dword [0x1010ba2c]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov dword [ebp - 0x140], eax
test eax, eax
je 0x100b8250
mov ecx, dword [eax]
mov edx, dword [ecx + 0x6f8]
mov ecx, eax
call edx
mov dword [ebp - 0x108], eax
test eax, eax
je 0x100b8250
mov edi, dword [edi]
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov ecx, dword [edi]
push eax
mov edx, dword [ecx + 0x28c]
mov ecx, edi
call edx
cmp dword [edi + 0x39e1], 0
je 0x100b78e6
mov eax, dword [0x1010bbbc]
mov edi, dword [edi + eax]
test edi, edi
je 0x100b78e6
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x100b78e6
cmp byte [edi + 0x109], 0
movss xmm1, dword [ebp - 0xf8]
jne 0x100b77ff
mov eax, dword [0x1010bc5c]
add eax, 0xffffffc4
xor eax, 0x828e3e81
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x100b77ff
mov eax, dword [0x1010bcd0]
add eax, 0xffffffa7
xor eax, 0x828e3e9e
mov eax, dword [eax + ecx]
mov ecx, dword [0x1010ba2c]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x100b78e6
movss xmm1, dword [ebp - 0xf8]
mov ecx, dword [0x1010bcc4]
mov eax, dword [edi + 0x60]
add ecx, 0xffffffaa
xor ecx, 0x828e3e9b
mov eax, dword [ecx + eax]
test eax, eax
je 0x100b78e6
movss xmm3, dword [eax + 0x1ac]
movss xmm2, dword [ebp - 0x134]
cvtps2pd xmm3, xmm3
cvtps2pd xmm0, xmm2
addsd xmm3, qword [0x100d9b78]
comisd xmm0, xmm3
movsd qword [ebp - 0x130], xmm3
jbe 0x100b78e6
subsd xmm0, xmm3
movaps xmm4, xmm1
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x100d9bc4]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100d9b58]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x100b78aa
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm2, dword [ebp - 0x134]
add esp, 8
movsd xmm3, qword [ebp - 0x130]
fstp dword [ebp - 0x124]
movss xmm4, dword [ebp - 0x124]
movaps xmm1, xmm4
mulss xmm1, xmm4
cvtps2pd xmm2, xmm2
movaps xmm0, xmm1
addss xmm1, xmm1
mulss xmm0, dword [0x100d9ba8]
subsd xmm3, xmm2
mulss xmm1, xmm4
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x134], xmm0
movq xmm0, qword [ebp - 0x13c]
mov eax, dword [ebp - 0x134]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
movq qword [ebp - 0x118], xmm0
movss xmm5, dword [ebp - 0x114]
movss xmm4, dword [ebp - 0x118]
mov dword [ebp - 0x110], eax
movss xmm6, dword [ebp - 0x110]
movd xmm0, dword [ecx + 0xec]
lea esi, [ebp - 0x168]
movss xmm1, dword [ecx + 0xf8]
lea eax, [ebp - 0x16c]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x16c], 0
movss xmm2, dword [edi + 8]
movss dword [ebp - 0xfc], xmm0
subss xmm2, xmm4
movss xmm0, dword [0x100d9bc0]
divss xmm0, xmm1
movss xmm3, dword [edi + 0xc]
comiss xmm0, dword [ebp - 0xf8]
movss xmm7, dword [edi + 0x10]
subss xmm3, xmm5
movss dword [ebp - 0x168], xmm0
subss xmm7, xmm6
movss dword [ebp - 0x124], xmm1
cmovbe esi, eax
movaps xmm1, xmm2
mulss xmm1, xmm2
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm1, xmm0
movaps xmm0, xmm7
mulss xmm0, xmm7
addss xmm0, xmm1
call fcn.10019ad0
addss xmm0, dword [0x100d9a68]
mov eax, dword [edi]
mov dword [0x10110ebc], eax
mov dword [0x10110ec8], 0
divss xmm2, xmm0
divss xmm3, xmm0
divss xmm7, xmm0
movss xmm0, dword [ebp - 0xfc]
comiss xmm0, dword [ebp - 0xf8]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x1c], xmm3
movss dword [ebp - 0x18], xmm7
jbe 0x100b8250
nop dword [eax]
nop word [eax + eax]
movss xmm0, dword [ecx + 0x104]
subss xmm0, dword [ebp - 0x11c]
mov dword [ebp - 0x1d4], 0
mov byte [ebp - 0x1ab], 1
mulss xmm2, xmm0
mulss xmm3, xmm0
mulss xmm7, xmm0
addss xmm2, xmm4
addss xmm3, xmm5
movss dword [ebp - 0x12c], xmm0
addss xmm7, xmm6
movss dword [ebp - 0x144], xmm2
subss xmm2, xmm4
movaps xmm0, xmm3
movss dword [ebp - 0x34], xmm3
subss xmm0, xmm5
movaps xmm1, xmm7
movss dword [ebp - 0x38], xmm7
movss dword [ebp - 0x1e0], xmm2
subss xmm1, xmm6
mulss xmm2, xmm2
movss dword [ebp - 0x1dc], xmm0
mulss xmm0, xmm0
movss dword [ebp - 0x1d8], xmm1
mulss xmm1, xmm1
addss xmm2, xmm0
addss xmm2, xmm1
ucomiss xmm2, dword [ebp - 0xf8]
lahf
test ah, 0x44
jp 0x100b7ab5
mov byte [ebp - 0x1ab], 0
mov ecx, dword [0x1010ba44]
lea edx, [ebp - 0x98]
push edx
mov dword [ebp - 0x1b0], 0
lea edx, [ebp - 0x1f0]
mov byte [ebp - 0x1ac], 1
movss dword [ebp - 0x1f0], xmm4
movss dword [ebp - 0x1ec], xmm5
movss dword [ebp - 0x1e8], xmm6
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1c0], 0
mov eax, dword [ecx]
push 0x10110eb8
push 0x4600400b
push edx
mov eax, dword [eax + 0x14]
call eax
mov eax, dword [edi + 4]
test eax, eax
je 0x100b7bc0
movss xmm1, dword [0x100d9c18]
lea edx, [ebp - 0x13c]
movss xmm0, dword [ebp - 0x20]
mulss xmm0, xmm1
push ecx
push eax
lea eax, [ebp - 0x98]
addss xmm0, dword [ebp - 0x144]
push eax
push ecx
lea ecx, [ebp - 0x118]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x1c]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x18]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x38]
movss dword [ebp - 0x134], xmm0
call fcn.100b7150
add esp, 0x10
jmp 0x100b7df3
movss xmm3, dword [0x100d9c18]
lea eax, [ebp - 0x98]
movss xmm1, dword [ebp - 0x1c]
movss xmm2, dword [ebp - 0x20]
movss xmm0, dword [ebp - 0x18]
mulss xmm1, xmm3
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x17c]
mulss xmm2, xmm3
mov dword [ebp - 0x24], 0xc2700000
addss xmm1, dword [ebp - 0x34]
mulss xmm0, xmm3
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x118]
addss xmm2, dword [ebp - 0x144]
mov dword [ebp - 0x3c], 0x10110eb8
addss xmm0, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
mov eax, dword [0x10110db8]
movss dword [ebp - 0x17c], xmm2
movss dword [ebp - 0x178], xmm1
movss dword [ebp - 0x174], xmm0
test al, 1
jne 0x100b7dcd
or eax, 1
mov dword [0x10110db8], eax
mov dword [ebp - 4], 0
mov eax, 0x10
movaps xmm0, xmmword [0x100da590]
pxor xmm0, xmmword [0x100da920]
mov dword [ebp - 0x154], 0xeefaffee
mov dword [ebp - 0x150], 0xfbee8ff6
mov dword [ebp - 0x14c], 0xf9fdeef8
mov byte [ebp - 0x148], 0xce
movups xmmword [ebp - 0x164], xmm0
xor byte [ebp + eax - 0x164], 0xce
inc eax
cmp eax, 0x1d
jb 0x100b7c92
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x184], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x180], 0xf
mov byte [ebp - 0x194], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b7cd0
sub ecx, edx
lea eax, [ebp - 0x164]
push ecx
push eax
lea ecx, [ebp - 0x194]
call fcn.100204f0
mov byte [ebp - 4], 1
mov eax, dword [0x1010b9ec]
test eax, eax
je 0x100b7cfe
mov edi, dword [eax + 0x50]
jmp 0x100b7d00
xor edi, edi
mov eax, dword [0x1010b9e4]
mov ecx, dword [ebp - 0xf4]
test eax, eax
je 0x100b7d17
mov edx, dword [eax + 0x18]
or ecx, 4
jmp 0x100b7d1c
or ecx, 8
xor edx, edx
mov eax, ecx
mov dword [ebp - 0xf4], ecx
and ecx, 0xfffffff7
test al, 8
cmove ecx, eax
mov dword [ebp - 0xf4], ecx
and dword [ebp - 0xf4], 0xfffffffb
test cl, 4
mov eax, dword [ebp - 0xf4]
cmove eax, ecx
lea ecx, [ebp - 0x170]
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x194]
push eax
push edx
mov edx, edi
call fcn.10019d20
mov eax, dword [ebp - 0x170]
add esp, 8
test eax, eax
je 0x100b7d7d
mov ecx, dword [eax + 1]
test ecx, ecx
jne 0x100b7d78
xor eax, eax
jmp 0x100b7d7d
add eax, 5
add eax, ecx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x180]
mov dword [0x10110db4], eax
cmp ecx, 0x10
jb 0x100b7dc0
mov edx, dword [ebp - 0x194]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b7db6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b81e9
push ecx
push edx
call fcn.100c9dbc
add esp, 8
mov edi, dword [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x10110db4], 0
je 0x100b7df3
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x24]
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
push 0x4600400b
call dword [0x10110db4]
add esp, 0x10
movss xmm1, dword [ebp - 0x6c]
ucomiss xmm1, dword [0x100d9b38]
lahf
test ah, 0x44
jnp 0x100b8250
mulss xmm1, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x108]
addss xmm1, dword [ebp - 0x11c]
movss xmm0, dword [eax + 0x108]
movss dword [ebp - 0x12c], xmm1
mulss xmm1, dword [0x100d9a74]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_powf
mulss xmm0, dword [ebp - 0xfc]
mov ecx, dword [edi + 4]
movss dword [ebp - 0xfc], xmm0
test ecx, ecx
je 0x100b7eea
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x100b7f47
cmp eax, ecx
jne 0x100b7f47
mov edx, dword [ebp - 0x54]
cmp edx, 1
jl 0x100b7e77
cmp edx, 7
jle 0x100b7e80
cmp edx, 0xa
jne 0x100b7f47
mov eax, dword [0x1010bce4]
xor edi, edi
mov esi, dword [ebp - 0x140]
add eax, 0xffffffa2
xor eax, 0x828e3ea3
movaps xmm1, xmm0
cmp dword [eax + esi], 0x1f
mov eax, dword [ebp - 0x108]
cmove edx, edi
movss xmm2, dword [eax + 0xf0]
call fcn.100b6650
mov esi, dword [ebp - 0x120]
cmp dword [ebp - 0x10c], 4
mov ecx, dword [ebp - 0x104]
setne al
mov byte [esi + 0xc], al
mov dword [esi + 8], edx
movss dword [esi + 4], xmm0
mov eax, dword [ecx + 4]
mov dword [esi], eax
jne 0x100b81ef
comiss xmm0, dword [ecx + 0x14]
setae al
jmp 0x100b8252
mov edi, dword [ebp - 0x10c]
cmp edi, 4
mov ecx, dword [ebp - 0x120]
setne al
mov byte [ecx + 0xc], al
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x100b7f36
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x100b7f2e
mov edx, dword [ebp - 0x54]
cmp edx, 1
jl 0x100b7f25
cmp edx, 7
jle 0x100b81f8
cmp edx, 0xa
je 0x100b81f8
movss xmm0, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x120]
mov edi, dword [ebp - 0x104]
movss dword [eax + 4], xmm0
cmp byte [edi + 0x1c], 0
je 0x100b8250
mov ecx, dword [0x1010ba68]
movsx edx, word [ebp - 0x58]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movss xmm0, dword [ebp - 0x12c]
mov edx, eax
comiss xmm0, dword [0x100d9cdc]
mov dword [ebp - 0x3c], edx
movss xmm1, dword [ebp - 0x124]
movss xmm0, dword [ebp - 0xf8]
jbe 0x100b7f96
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x100b8250
movss xmm2, dword [0x100d9aa8]
comiss xmm2, dword [edx + 0x58]
ja 0x100b8250
mov al, byte [ebp - 0x56]
mov ecx, dword [ebp - 0x68]
movzx edi, word [edx + 0x60]
mov edx, dword [ebp - 0x10c]
shr al, 7
shr ecx, 3
and al, 1
and ecx, 0xffffff01
mov byte [ebp - 0xfd], al
mov dword [ebp - 0x12c], ecx
test edx, edx
jne 0x100b7fec
test al, al
jne 0x100b7fec
test cl, cl
jne 0x100b7fec
cmp edi, 0x47
je 0x100b7fec
cmp edi, 0x59
jne 0x100b8250
comiss xmm0, xmm1
jae 0x100b8250
test edx, edx
jle 0x100b8250
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x8c]
call fcn.100b67b0
add esp, 0xc
test al, al
jne 0x100b8046
mov ecx, dword [0x1010ba44]
lea edx, [ebp - 0x30]
push 0
push 0x600400b
push edx
mov eax, dword [ecx]
mov eax, dword [eax]
call eax
test eax, 0x600400b
je 0x100b8250
mov ecx, dword [0x1010ba68]
movsx edx, word [ebp - 0xb0]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movzx edx, word [eax + 0x60]
mov ecx, edx
cmp edi, 0x47
je 0x100b80ae
cmp edi, 0x59
je 0x100b80ae
cmp byte [ebp - 0xfd], 0
jne 0x100b8094
cmp byte [ebp - 0x12c], 0
jne 0x100b8094
movss xmm3, dword [eax + 0x58]
mov eax, dword [ebp - 0x3c]
addss xmm3, dword [eax + 0x58]
mulss xmm3, dword [0x100d9b00]
jmp 0x100b809c
movss xmm3, dword [0x100d9b38]
movss xmm7, dword [0x100d9ab8]
movss xmm0, dword [0x100d9ba8]
jmp 0x100b80c1
movss xmm0, dword [0x100d9ba8]
movss xmm7, dword [0x100d9a9c]
movaps xmm3, xmm0
cmp edi, ecx
jne 0x100b80e1
cmp ecx, 0x55
je 0x100b80de
cmp ecx, 0x57
je 0x100b80de
cmp edx, 0x4c
jne 0x100b80e1
movss xmm3, dword [0x100d9b84]
jmp 0x100b80e1
movaps xmm3, xmm0
movss xmm4, dword [ebp - 0xe4]
movss xmm5, dword [ebp - 0xe0]
movaps xmm2, xmm4
subss xmm2, dword [ebp - 0x8c]
movss xmm6, dword [ebp - 0xdc]
movaps xmm0, xmm5
subss xmm0, dword [ebp - 0x88]
movaps xmm1, xmm6
subss xmm1, dword [ebp - 0x84]
mulss xmm2, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.10019ad0
movss xmm2, dword [0x100d9b38]
divss xmm2, xmm3
mulss xmm7, dword [ebp - 0xfc]
maxss xmm2, dword [ebp - 0xf8]
movss dword [ebp - 0x11c], xmm0
mulss xmm0, xmm0
movaps xmm1, xmm2
mulss xmm2, dword [0x100d9a98]
mulss xmm1, dword [0x100d9ba8]
mulss xmm0, xmm2
mulss xmm1, dword [esi]
addss xmm1, xmm7
addss xmm1, xmm0
movss xmm0, dword [ebp - 0xfc]
maxss xmm1, dword [ebp - 0xf8]
subss xmm0, xmm1
movss xmm1, dword [0x100d9b38]
comiss xmm1, xmm0
movss dword [ebp - 0xfc], xmm0
ja 0x100b8250
dec dword [ebp - 0x10c]
movss xmm7, dword [ebp - 0x18]
movss xmm3, dword [ebp - 0x1c]
movss xmm2, dword [ebp - 0x20]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm5
movss dword [ebp - 0x110], xmm6
jmp 0x100b7a10
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
comiss xmm0, dword [ecx + 0x18]
setae al
jmp 0x100b8252
mov eax, dword [0x1010bce4]
xor ecx, ecx
mov esi, dword [ebp - 0x140]
add eax, 0xffffffa2
movss xmm1, dword [ebp - 0xfc]
xor eax, 0x828e3ea3
cmp dword [eax + esi], 0x1f
mov eax, dword [ebp - 0x108]
cmove edx, ecx
mov ecx, dword [ebp - 0x4c]
movss xmm2, dword [eax + 0xf0]
call fcn.100b6650
mov eax, dword [ebp - 0x120]
cmp edi, 4
mov dword [eax], ecx
mov ecx, dword [ebp - 0x104]
mov dword [eax + 8], edx
movss dword [eax + 4], xmm0
jmp 0x100b7ed8
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100c9941
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret