Function at 0x10015740
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10062ddd
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x60
push esi
push edi
mov eax, dword [0x10080080]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x18], edi
mov esi, dword [ebx + 8]
mov dword [ebp - 0x6c], edi
mov dword [edi], 0
push 0x58
mov dword [ebp - 0x18], edi
mov dword [edi + 4], 0
mov dword [edi + 8], 0
call fcn.1003a330
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [edi + 4], eax
lea ecx, [edi + 0xc]
mov dword [ebp - 4], 0
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov byte [ebp - 4], 1
mov dword [edi + 0x18], 7
mov dword [edi + 0x1c], 8
mov dword [edi], 0x3f800000
push dword [edi + 4]
push 0x10
call fcn.10007bd0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x38]
push 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push str._cleartarget
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x24], 0
call fcn.100054c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax], 0x10070bdc
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x1c], esp
xorps xmm0, xmm0
push 7
movups xmmword [ecx], xmm0
push str._target
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov byte [ebp - 4], 5
mov ecx, esp
lea eax, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100146a0
mov ecx, edi
mov byte [ebp - 4], 3
call fcn.100153c0
push fcn.10002da0
push 1
push 0x18
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 2
push eax
call fcn.1003a454
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
push 8
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x50]
push str._autoinv
call fcn.100054c0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x38]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push 0x10070a04
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x24], 0
call fcn.100054c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070b18
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x18], esp
xorps xmm0, xmm0
push 0xe
movups xmmword [ecx], xmm0
push str._autoinventory
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov byte [ebp - 4], 9
mov ecx, esp
lea eax, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.100146a0
mov ecx, edi
mov byte [ebp - 4], 7
call fcn.100153c0
push fcn.10002da0
push 2
push 0x18
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 2
push eax
call fcn.1003a454
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
push str._autoba
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x3c], 0
movups xmmword [ebp - 0x50], xmm0
call fcn.100054c0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x38]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push 0x10070a20
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x24], 0
call fcn.100054c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070bc0
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x18], esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
push 9
push str._autobank
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov byte [ebp - 4], 0xd
mov ecx, esp
lea eax, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.100146a0
mov ecx, edi
mov byte [ebp - 4], 0xb
call fcn.100153c0
push fcn.10002da0
push 2
push 0x18
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 2
push eax
call fcn.1003a454
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070c84
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, esp
xorps xmm0, xmm0
push 4
movups xmmword [ecx], xmm0
push str._fov
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov ecx, edi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov byte [ebp - 4], 2
call fcn.100153c0
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push 0x10070a38
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
call fcn.100054c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070c4c
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x18], esp
xorps xmm0, xmm0
push 0xc
movups xmmword [ecx], xmm0
push str._aspectratio
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov byte [ebp - 4], 0x11
mov ecx, esp
lea eax, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100146a0
mov ecx, edi
mov byte [ebp - 4], 0xf
call fcn.100153c0
push fcn.10002da0
push 1
push 0x18
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 2
push eax
call fcn.1003a454
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070c30
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x12
mov ecx, esp
xorps xmm0, xmm0
push 0xa
movups xmmword [ecx], xmm0
push str._clearchat
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov ecx, edi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov byte [ebp - 4], 2
call fcn.100153c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070c14
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
xorps xmm0, xmm0
push 4
movups xmmword [ecx], xmm0
push str._sit
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov ecx, edi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov byte [ebp - 4], 2
call fcn.100153c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070b88
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x14
mov ecx, esp
xorps xmm0, xmm0
push 5
movups xmmword [ecx], xmm0
push str._camp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov ecx, edi
mov byte [ebp - 4], 2
call fcn.100153c0
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push str._helm
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
call fcn.100054c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070c68
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov ecx, esp
mov dword [ebp - 0x18], esp
xorps xmm0, xmm0
push 9
movups xmmword [ecx], xmm0
push str._showhelm
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov byte [ebp - 4], 0x17
mov ecx, esp
lea eax, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100146a0
mov ecx, edi
mov byte [ebp - 4], 0x15
call fcn.100153c0
push fcn.10002da0
push 1
push 0x18
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 2
push eax
call fcn.1003a454
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
push str._sll
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x68], xmm0
call fcn.100054c0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x50]
push 0x10
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
push str._showlootlockout
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
call fcn.100054c0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x38]
push 0xd
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push str._showlockouts
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x24], 0
call fcn.100054c0
sub esp, 0x28
mov dword [ebp - 0x14], esp
mov eax, esp
mov dword [eax], 0x10070ba4
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x1b
mov ecx, esp
mov dword [ebp - 0x18], esp
xorps xmm0, xmm0
push 0x11
movups xmmword [ecx], xmm0
push str._showlootlockouts
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov byte [ebp - 4], 0x1c
mov ecx, esp
lea eax, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.100146a0
mov ecx, edi
mov byte [ebp - 4], 0x1a
call fcn.100153c0
push fcn.10002da0
push 3
push 0x18
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 2
push eax
call fcn.1003a454
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push str._zea
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
call fcn.100054c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070b34
mov dword [eax + 4], edi
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x1e
mov ecx, esp
mov dword [ebp - 0x18], esp
xorps xmm0, xmm0
push 5
movups xmmword [ecx], xmm0
push str._zeal
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov byte [ebp - 4], 0x1f
mov ecx, esp
lea eax, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100146a0
mov ecx, edi
mov byte [ebp - 4], 0x1d
call fcn.100153c0
push fcn.10002da0
push 1
push 0x18
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 2
push eax
call fcn.1003a454
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push str._cmt
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
call fcn.100054c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070b6c
mov dword [eax + 4], edi
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x21
mov ecx, esp
mov dword [ebp - 0x18], esp
xorps xmm0, xmm0
push 0xf
movups xmmword [ecx], xmm0
push str._clientmanatick
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov byte [ebp - 4], 0x22
mov ecx, esp
lea eax, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100146a0
mov ecx, edi
mov byte [ebp - 4], 0x20
call fcn.100153c0
push fcn.10002da0
push 1
push 0x18
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 2
push eax
call fcn.1003a454
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070cbc
mov dword [eax + 4], edi
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x23
mov ecx, esp
xorps xmm0, xmm0
push 0xb
movups xmmword [ecx], xmm0
push str._reloadskin
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov ecx, edi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov byte [ebp - 4], 2
call fcn.100153c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070ca0
mov dword [eax + 4], edi
mov dword [eax + 8], esi
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x24
mov ecx, esp
xorps xmm0, xmm0
push 6
movups xmmword [ecx], xmm0
push str._alarm
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov ecx, edi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov byte [ebp - 4], 2
call fcn.100153c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070b50
mov dword [eax + 4], edi
mov dword [eax + 8], esi
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x25
mov ecx, esp
xorps xmm0, xmm0
push 8
movups xmmword [ecx], xmm0
push str._inspect
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov ecx, edi
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov byte [ebp - 4], 2
call fcn.100153c0
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push str._hel
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
call fcn.100054c0
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax], 0x10070bf8
mov dword [eax + 4], edi
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0x27
mov ecx, esp
mov dword [ebp - 0x18], esp
xorps xmm0, xmm0
push 5
movups xmmword [ecx], xmm0
push str._help
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100054c0
sub esp, 0xc
mov byte [ebp - 4], 0x28
mov ecx, esp
lea eax, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.100146a0
mov ecx, edi
mov byte [ebp - 4], 0x26
call fcn.100153c0
push fcn.10002da0
push 1
push 0x18
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 2
push eax
call fcn.1003a454
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x38]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], eax
push str.commands
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
call fcn.100054c0
mov ecx, 0x54572f
mov byte [ebp - 4], 0x29
call fcn.100066f0
mov ecx, eax
mov dword [ebp - 0x1c], ecx
cmp ecx, 5
jge 0x100160fb
add ecx, 0x54572f
call fcn.100066f0
mov ecx, dword [ebp - 0x1c]
add ecx, eax
mov dword [ebp - 0x1c], ecx
cmp ecx, 5
jl 0x100160e3
push 0x18
call fcn.1003a330
mov esi, eax
add esp, 4
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1c]
movups xmmword [esi], xmm0
push 1
movq qword [esi + 0x10], xmm0
mov dword [esi + 0x10], eax
call fcn.1003a330
mov ecx, dword [ebp - 0x1c]
mov edx, 0x54572f
push ecx
mov byte [eax], cl
mov ecx, eax
mov dword [esi], eax
mov dword [esi + 8], 0x54572f
mov dword [esi + 4], 0x10014fe0
mov dword [esi + 0x14], 2
mov dword [esi + 0xc], 0
call fcn.1001f3a0
mov eax, dword [esi + 0x14]
add esp, 8
cmp eax, 3
ja case.default.0x10016161
jmp dword [eax*4 + 0x10016208]
push 0x10014fe0
push 0x54572f
mov ecx, esi
call fcn.1001c3f0
jmp case.default.0x10016161
push 0x10014fe0
push 0x54572f
mov ecx, esi
call fcn.1001c670
jmp case.default.0x10016161
push 0x10014fe0
push 0x54572f
mov ecx, esi
call fcn.1001c750
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x18]
push eax
call fcn.100079a0
mov dword [eax], esi
mov dword [esi + 0x14], 2
mov ecx, dword [ebp - 0x24]
cmp ecx, 0xf
jbe 0x100161e8
mov edx, dword [ebp - 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100161de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016200
push ecx
push edx
call fcn.1003a365
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.100415d4
nop dword [eax]
jnp 0x1001626b
add dword [eax], edx
jnp 0x1001626f
add dword [eax], edx
push 0x8e100161
popal
add dword [eax], edx
int3
pop ebx
add dword [eax], eax
add byte [ebx - 0x7cf0fc08], al
push edx
add dword [eax], eax
add byte [edx + 2], ch
cmp eax, 3
jae 0x100163ca
push 2
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
push 0x100706c0
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x48], xmm0
call fcn.100054c0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x48]
mov ecx, dword [esi]
mov eax, 1
add ecx, 0x18
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
call fcn.10032870
test al, al
jne 0x1001630a
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.down
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.100054c0
mov dword [ebp - 4], 1
lea edx, [ebp - 0x30]
mov ecx, dword [esi]
mov eax, 3
add ecx, 0x18
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
call fcn.10032870
mov byte [ebp - 0xd], 0
test al, al
je 0x1001630e
mov byte [ebp - 0xd], 1
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x14]
test al, 2
je 0x10016359
mov ecx, dword [ebp - 0x1c]
and eax, 0xfffffffd
mov dword [ebp - 0x14], eax
cmp ecx, 0xf
jbe 0x10016359
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001634c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100163de
push ecx
push edx
call fcn.1003a365
mov eax, dword [ebp - 0x14]
add esp, 8
mov dword [ebp - 4], 0xffffffff
test al, 1
je 0x10016394
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xf
jbe 0x10016394
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001638a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100163de
push ecx
push edx
call fcn.1003a365
add esp, 8
cmp byte [ebp - 0xd], 0
je 0x100163ca
mov ecx, dword [0x7f94cc]
test ecx, ecx
je 0x100163b6
cmp byte [ecx + 0xb1], 0x6e
je 0x100163b6
push 0x6e
mov eax, 0x50be3c
call eax
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret 4
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret 4
call fcn.100415d4
int3