Function at 0x1000a5c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002ad30
mov eax, dword fs:[0]
push eax
sub esp, 0x4e4
mov eax, dword [0x10037040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0xc0
lea eax, [ebp - 0xd4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xd4]
push 1
call fcn.10024d70
mov dword [ebp - 4], 0
mov cl, 0x3c
mov dword [ebp - 0x118], 0x60067f3c
xor eax, eax
mov dword [ebp - 0x114], 0x58585d70
mov dword [ebp - 0x110], 0x55124e59
mov word [ebp - 0x10c], 0x5552
mov byte [ebp - 0x10a], 0
nop dword [eax + eax]
xor byte [ebp + eax - 0x117], cl
inc eax
cmp eax, 0xd
jae 0x1000a665
mov cl, byte [ebp - 0x118]
jmp 0x1000a650
push 0x40
push 2
lea eax, [ebp - 0x117]
mov byte [ebp - 0x10a], 0
push eax
lea ecx, [ebp - 0xd4]
call fcn.10024c80
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd4]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator__void_const]
test al, al
jne 0x1000b30e
mov cl, 0x40
mov byte [ebp - 0xda], 0
mov al, 0x4a
mov byte [ebp - 0xdc], cl
xor al, cl
mov byte [ebp - 0xda], 0
lea edx, [ebp - 0xdb]
mov byte [ebp - 0xdb], al
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032e60]
xor ecx, ecx
movups xmmword [ebp - 0x304], xmm0
mov dword [ebp - 0x2d4], 0x56565656
movaps xmm0, xmmword [0x10032d00]
movups xmmword [ebp - 0x2f4], xmm0
mov dword [ebp - 0x2d0], 0x56565656
movaps xmm0, xmmword [0x10032e70]
movups xmmword [ebp - 0x2e4], xmm0
mov dword [ebp - 0x2cc], 0x5c565656
mov word [ebp - 0x2c8], 0x76
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp - 0x304]
xor byte [ebp + ecx - 0x303], al
inc ecx
cmp ecx, 0x3c
jb 0x1000a730
lea edx, [ebp - 0x303]
mov byte [ebp - 0x2c7], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032b80]
xor ecx, ecx
movups xmmword [ebp - 0x2c4], xmm0
mov dword [ebp - 0x2a4], 0x1c1c1c1c
movaps xmm0, xmmword [0x10032b70]
movups xmmword [ebp - 0x2b4], xmm0
mov dword [ebp - 0x2a0], 0x13131c1c
mov dword [ebp - 0x29c], 0x361c16
nop word [eax + eax]
mov al, byte [ebp - 0x2c4]
xor byte [ebp + ecx - 0x2c3], al
inc ecx
cmp ecx, 0x2a
jb 0x1000a7a0
lea edx, [ebp - 0x2c3]
mov byte [ebp - 0x299], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032eb0]
xor ecx, ecx
movups xmmword [ebp - 0x364], xmm0
mov dword [ebp - 0x334], 0x30303f6d
movaps xmm0, xmmword [0x10032d60]
movups xmmword [ebp - 0x354], xmm0
mov dword [ebp - 0x330], 0x153f35
movaps xmm0, xmmword [0x10032ff0]
movups xmmword [ebp - 0x344], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x364]
xor byte [ebp + ecx - 0x363], al
inc ecx
cmp ecx, 0x36
jb 0x1000a810
lea edx, [ebp - 0x363]
mov byte [ebp - 0x32d], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032d90]
xor ecx, ecx
movups xmmword [ebp - 0x39c], xmm0
mov dword [ebp - 0x36c], 0x603030c
movaps xmm0, xmmword [0x10032ea0]
movups xmmword [ebp - 0x38c], xmm0
mov word [ebp - 0x368], 0x260c
movaps xmm0, xmmword [0x10032a60]
movups xmmword [ebp - 0x37c], xmm0
mov byte [ebp - 0x366], 0
mov al, byte [ebp - 0x39c]
xor byte [ebp + ecx - 0x39b], al
inc ecx
cmp ecx, 0x35
jb 0x1000a881
lea edx, [ebp - 0x39b]
mov byte [ebp - 0x366], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032f80]
xor ecx, ecx
movups xmmword [ebp - 0x3d4], xmm0
mov dword [ebp - 0x3a4], 0x6f656060
movaps xmm0, xmmword [0x10032d50]
movups xmmword [ebp - 0x3c4], xmm0
mov word [ebp - 0x3a0], 0x45
movaps xmm0, xmmword [0x10032f90]
movups xmmword [ebp - 0x3b4], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x3d4]
xor byte [ebp + ecx - 0x3d3], al
inc ecx
cmp ecx, 0x34
jb 0x1000a8f0
lea edx, [ebp - 0x3d3]
mov byte [ebp - 0x39f], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [str.TTQ_Q3]
xor ecx, ecx
movups xmmword [ebp - 0x40c], xmm0
mov dword [ebp - 0x3dc], 0x715b5154
movaps xmm0, xmmword [0x10032a30]
movups xmmword [ebp - 0x3fc], xmm0
mov byte [ebp - 0x3d8], 0
movaps xmm0, xmmword [0x10032e20]
movups xmmword [ebp - 0x3ec], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x40c]
xor byte [ebp + ecx - 0x40b], al
inc ecx
cmp ecx, 0x33
jb 0x1000a960
lea edx, [ebp - 0x40b]
mov byte [ebp - 0x3d8], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032b30]
xor ecx, ecx
movups xmmword [ebp - 0x488], xmm0
mov dword [ebp - 0x458], 0x301a10
movaps xmm0, xmmword [0x10032de0]
movups xmmword [ebp - 0x478], xmm0
movaps xmm0, xmmword [str.NUHS_V]
movups xmmword [ebp - 0x468], xmm0
mov al, byte [ebp - 0x488]
xor byte [ebp + ecx - 0x487], al
inc ecx
cmp ecx, 0x32
jb 0x1000a9c1
lea edx, [ebp - 0x487]
mov byte [ebp - 0x455], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032ce0]
xor ecx, ecx
movups xmmword [ebp - 0x32c], xmm0
mov dword [ebp - 0x30c], 0x1e343e3b
movaps xmm0, xmmword [0x10032d40]
movups xmmword [ebp - 0x31c], xmm0
mov byte [ebp - 0x308], 0
nop dword [eax + eax]
mov al, byte [ebp - 0x32c]
xor byte [ebp + ecx - 0x32b], al
inc ecx
cmp ecx, 0x23
jb 0x1000aa20
lea edx, [ebp - 0x32b]
mov byte [ebp - 0x308], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032c70]
xor ecx, ecx
movups xmmword [ebp - 0x4f0], xmm0
mov word [ebp - 0x4c0], 9
movaps xmm0, xmmword [0x10032c80]
movups xmmword [ebp - 0x4e0], xmm0
movaps xmm0, xmmword [0x10032bf0]
movups xmmword [ebp - 0x4d0], xmm0
mov al, byte [ebp - 0x4f0]
xor byte [ebp + ecx - 0x4ef], al
inc ecx
cmp ecx, 0x30
jb 0x1000aa80
lea edx, [ebp - 0x4ef]
mov byte [ebp - 0x4bf], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov cl, 0x78
mov dword [ebp - 0x128], 0x57575278
mov dword [ebp - 0x124], 0x2c36373b
xor eax, eax
mov dword [ebp - 0x120], 0x42583037
mov word [ebp - 0x11c], 0x7258
mov byte [ebp - 0x11a], 0
nop dword [eax]
xor byte [ebp + eax - 0x127], cl
inc eax
cmp eax, 0xd
jae 0x1000aaf5
mov cl, byte [ebp - 0x128]
jmp 0x1000aae0
lea edx, [ebp - 0x127]
mov byte [ebp - 0x11a], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov ch, 0x60
mov byte [ebp - 0x13a], 0
mov cl, 0x4f
mov byte [ebp - 0x140], ch
mov dl, cl
mov byte [ebp - 0x13a], 0
xor dl, ch
xor cl, ch
mov al, 0x4a
mov byte [ebp - 0x13e], cl
mov ah, 0x6a
mov byte [ebp - 0x13d], dl
mov bl, 0x40
lea edx, [ebp - 0x13f]
xor al, ch
xor bl, ch
xor ah, ch
mov byte [ebp - 0x13f], al
lea ecx, [ebp - 0xc4]
mov byte [ebp - 0x13c], bl
mov byte [ebp - 0x13b], ah
call fcn.100016e0
movaps xmm0, xmmword [0x10032be0]
xor ecx, ecx
movups xmmword [ebp - 0x15c], xmm0
mov dword [ebp - 0x14c], 0x606013f
mov dword [ebp - 0x148], 0x62481a0d
mov byte [ebp - 0x144], 0
mov al, byte [ebp - 0x15c]
xor byte [ebp + ecx - 0x15b], al
inc ecx
cmp ecx, 0x17
jb 0x1000ab91
lea edx, [ebp - 0x15b]
mov byte [ebp - 0x144], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032ec0]
xor ecx, ecx
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0x61617d5e
mov dword [ebp - 0x164], 0x18326077
mov byte [ebp - 0x160], 0
nop word [eax + eax]
mov al, byte [ebp - 0x178]
xor byte [ebp + ecx - 0x177], al
inc ecx
cmp ecx, 0x17
jb 0x1000abf0
lea edx, [ebp - 0x177]
mov byte [ebp - 0x160], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov cl, 0x38
mov byte [ebp - 0xde], 0
mov al, 0x32
mov byte [ebp - 0xe0], cl
xor al, cl
mov byte [ebp - 0xde], 0
lea edx, [ebp - 0xdf]
mov byte [ebp - 0xdf], al
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032dd0]
xor ecx, ecx
movups xmmword [ebp - 0x1a8], xmm0
mov dword [ebp - 0x188], 0x525b565f
movaps xmm0, xmmword [0x10032dc0]
movups xmmword [ebp - 0x198], xmm0
mov dword [ebp - 0x184], 0x1a537e1a
mov dword [ebp - 0x180], 0x14534973
mov word [ebp - 0x17c], 0x301a
mov byte [ebp - 0x17a], 0
nop dword [eax + eax]
mov al, byte [ebp - 0x1a8]
xor byte [ebp + ecx - 0x1a7], al
inc ecx
cmp ecx, 0x2d
jb 0x1000aca0
lea edx, [ebp - 0x1a7]
mov byte [ebp - 0x17a], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [str.Kadd]
xor ecx, ecx
movups xmmword [ebp - 0x4bc], xmm0
mov word [ebp - 0x48c], 0x416b
movaps xmm0, xmmword [0x10032bc0]
movups xmmword [ebp - 0x4ac], xmm0
mov byte [ebp - 0x48a], 0
movaps xmm0, xmmword [0x10032f10]
movups xmmword [ebp - 0x49c], xmm0
nop word [eax + eax]
mov al, byte [ebp - 0x4bc]
xor byte [ebp + ecx - 0x4bb], al
inc ecx
cmp ecx, 0x31
jb 0x1000ad10
lea edx, [ebp - 0x4bb]
mov byte [ebp - 0x48a], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov cl, 0x43
mov byte [ebp - 0xe2], 0
mov al, 0x49
mov byte [ebp - 0xe4], cl
xor al, cl
mov byte [ebp - 0xe2], 0
lea edx, [ebp - 0xe3]
mov byte [ebp - 0xe3], al
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10033020]
xor ecx, ecx
movups xmmword [ebp - 0x1d8], xmm0
mov dword [ebp - 0x1b8], 0x6e1d757c
movaps xmm0, xmmword [0x10032f50]
movups xmmword [ebp - 0x1c8], xmm0
mov dword [ebp - 0x1b4], 0x17747374
mov dword [ebp - 0x1b0], 0x1d171717
mov word [ebp - 0x1ac], 0x37
mov al, byte [ebp - 0x1d8]
xor byte [ebp + ecx - 0x1d7], al
inc ecx
cmp ecx, 0x2c
jb 0x1000adb1
lea edx, [ebp - 0x1d7]
mov byte [ebp - 0x1ab], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032e00]
xor ecx, ecx
movups xmmword [ebp - 0x208], xmm0
mov dword [ebp - 0x1e8], 0x50505050
movaps xmm0, xmmword [0x10032df0]
movups xmmword [ebp - 0x1f8], xmm0
mov dword [ebp - 0x1e4], 0x50505050
mov dword [ebp - 0x1e0], 0x505a5050
mov word [ebp - 0x1dc], 0x7a
mov al, byte [ebp - 0x208]
xor byte [ebp + ecx - 0x207], al
inc ecx
cmp ecx, 0x2c
jb 0x1000ae21
lea edx, [ebp - 0x207]
mov byte [ebp - 0x1db], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032db0]
xor ecx, ecx
movups xmmword [ebp - 0x238], xmm0
mov dword [ebp - 0x218], 0x48484848
movaps xmm0, xmmword [0x10032da0]
movups xmmword [ebp - 0x228], xmm0
mov dword [ebp - 0x214], 0x48484848
mov dword [ebp - 0x210], 0x48424848
mov word [ebp - 0x20c], 0x62
mov al, byte [ebp - 0x238]
xor byte [ebp + ecx - 0x237], al
inc ecx
cmp ecx, 0x2c
jb 0x1000ae91
lea edx, [ebp - 0x237]
mov byte [ebp - 0x20b], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov byte [ebp - 0x108], 9
mov al, 0x52
xor al, byte [ebp - 0x108]
mov cl, 0x4a
mov byte [ebp - 0x107], al
mov dl, 0x41
mov al, byte [ebp - 0x108]
mov ch, 0x54
mov dh, 0x29
mov byte [ebp - 0xff], 0
xor cl, al
mov byte [ebp - 0xff], 0
xor dl, al
mov byte [ebp - 0x106], cl
xor ch, al
mov byte [ebp - 0x105], dl
xor dh, al
mov byte [ebp - 0x102], ch
mov ah, 0x5b
mov byte [ebp - 0x101], dh
mov bl, 0x48
lea edx, [ebp - 0x107]
mov bh, 3
lea ecx, [ebp - 0xc4]
xor bl, al
xor ah, al
xor bh, al
mov byte [ebp - 0x104], bl
mov byte [ebp - 0x103], ah
mov byte [ebp - 0x100], bh
call fcn.100016e0
movaps xmm0, xmmword [0x10032e90]
xor ecx, ecx
movups xmmword [ebp - 0x430], xmm0
mov byte [ebp - 0x410], 0
movaps xmm0, xmmword [0x10033010]
movups xmmword [ebp - 0x420], xmm0
mov al, byte [ebp - 0x430]
xor byte [ebp + ecx - 0x42f], al
inc ecx
cmp ecx, 0x1f
jb 0x1000af61
lea edx, [ebp - 0x42f]
mov byte [ebp - 0x410], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov byte [ebp - 0xf0], 0x52
mov al, 5
xor al, byte [ebp - 0xf0]
mov cl, 0x3b
xor cl, byte [ebp - 0xf0]
mov dh, 0x72
mov byte [ebp - 0xef], al
mov dl, 0x3c
mov byte [ebp - 0xd6], dh
mov bl, dl
mov al, byte [ebp - 0xd6]
mov ch, 0x20
mov byte [ebp - 0xee], cl
mov ah, 0x37
mov cl, byte [ebp - 0xf0]
mov bh, 0x6f
xor al, cl
mov byte [ebp - 0xd5], 0x58
xor dl, cl
mov byte [ebp - 0xe7], al
mov al, byte [ebp - 0xd5]
xor dh, cl
xor ch, cl
mov byte [ebp - 0xed], dl
xor bl, cl
mov byte [ebp - 0xea], ch
xor ah, cl
mov byte [ebp - 0xe9], dh
xor bh, cl
mov byte [ebp - 0xe5], 0
xor al, cl
mov byte [ebp - 0xec], bl
lea edx, [ebp - 0xef]
mov byte [ebp - 0xeb], ah
lea ecx, [ebp - 0xc4]
mov byte [ebp - 0xe8], bh
mov byte [ebp - 0xe6], al
mov byte [ebp - 0xe5], 0
call fcn.100016e0
mov byte [ebp - 0xfc], 0x5b
mov cl, 0x34
xor cl, byte [ebp - 0xfc]
mov ch, 0x7b
mov al, 0x17
mov byte [ebp - 0xd5], ch
xor al, byte [ebp - 0xfc]
mov dh, ch
mov byte [ebp - 0xfb], al
mov dl, 0x28
mov al, byte [ebp - 0xd5]
mov bl, 0x3e
mov byte [ebp - 0xfa], cl
mov ah, 0x29
mov cl, byte [ebp - 0xfc]
mov bh, 0x66
xor al, cl
mov byte [ebp - 0xd6], 0x51
xor dl, cl
mov byte [ebp - 0xf3], al
mov al, byte [ebp - 0xd6]
xor dh, cl
xor bl, cl
mov byte [ebp - 0xf1], 0
xor ah, cl
mov byte [ebp - 0xf9], dl
xor ch, cl
mov byte [ebp - 0xf5], dh
xor bh, cl
mov byte [ebp - 0xf6], ch
xor al, cl
mov byte [ebp - 0xf8], bl
mov byte [ebp - 0xf7], ah
lea edx, [ebp - 0xfb]
mov byte [ebp - 0xf4], bh
lea ecx, [ebp - 0xc4]
mov byte [ebp - 0xf2], al
mov byte [ebp - 0xf1], 0
call fcn.100016e0
movaps xmm0, xmmword [0x10032f30]
xor ecx, ecx
movups xmmword [ebp - 0x454], xmm0
mov byte [ebp - 0x434], 0
movaps xmm0, xmmword [0x10032d70]
movups xmmword [ebp - 0x444], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x454]
xor byte [ebp + ecx - 0x453], al
inc ecx
cmp ecx, 0x1f
jb 0x1000b110
lea edx, [ebp - 0x453]
mov byte [ebp - 0x434], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032e40]
xor ecx, ecx
movups xmmword [ebp - 0x268], xmm0
mov dword [ebp - 0x248], 0x55555555
movaps xmm0, xmmword [0x10032e30]
movups xmmword [ebp - 0x258], xmm0
mov dword [ebp - 0x244], 0x55555555
mov dword [ebp - 0x240], 0x555f5555
mov word [ebp - 0x23c], 0x7f
mov al, byte [ebp - 0x268]
xor byte [ebp + ecx - 0x267], al
inc ecx
cmp ecx, 0x2c
jb 0x1000b180
lea edx, [ebp - 0x267]
mov byte [ebp - 0x23b], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
movaps xmm0, xmmword [0x10032d10]
xor ecx, ecx
movups xmmword [ebp - 0x298], xmm0
mov dword [ebp - 0x278], 0x39393939
movaps xmm0, xmmword [0x10032d20]
movups xmmword [ebp - 0x288], xmm0
mov dword [ebp - 0x274], 0x39393939
mov dword [ebp - 0x270], 0x33393939
mov word [ebp - 0x26c], 0x19
mov al, byte [ebp - 0x298]
xor byte [ebp + ecx - 0x297], al
inc ecx
cmp ecx, 0x2c
jb 0x1000b1f0
lea edx, [ebp - 0x297]
mov byte [ebp - 0x26b], 0
lea ecx, [ebp - 0xc4]
call fcn.100016e0
mov cl, 0x66
mov dword [ebp - 0x138], 0x3a5c2566
mov dword [ebp - 0x134], 0x202072a
xor eax, eax
mov dword [ebp - 0x130], 0xf481403
mov word [ebp - 0x12c], 0xf08
mov byte [ebp - 0x12a], 0
nop dword [eax]
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 0xd
jae 0x1000b265
mov cl, byte [ebp - 0x138]
jmp 0x1000b250
push 0x40
push 1
lea eax, [ebp - 0x137]
mov byte [ebp - 0x12a], 0
push eax
lea ecx, [ebp - 0xd4]
call fcn.10024c80
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd4]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator__void_const]
test al, al
jne 0x1000b30e
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd4]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::eof_void_const]
test al, al
jne 0x1000b2e7
nop dword [eax]
nop dword [eax + eax]
lea edx, [ebp - 0x11]
lea ecx, [ebp - 0xd4]
call fcn.10024f50
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd4]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::eof_void_const]
test al, al
je 0x1000b2c0
lea ecx, [ebp - 0xbc]
call fcn.10001510
test eax, eax
jne 0x1000b30e
push eax
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd4]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0x5c]
call fcn.10024cc0
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10029901
mov esp, ebp
pop ebp
ret