Function at 0x404e65
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40d53e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x80
mov dword [ebp - 0x68], ecx
mov dword [ebp - 4], 1
mov byte [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
call sub.MFC42.DLL_CString::CString_2
mov byte [ebp - 4], 2
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
push 0x4115fc
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x68]
mov dword [eax + 0x100], 0
push 0xfa
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x24], 0
jmp 0x404ef1
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x11
jge 0x404f4a
lea eax, [ebp - 0x20]
push eax
push 0x411610
push 1
mov ecx, dword [ebp - 0x24]
push ecx
lea edx, [ebp - 0x38]
push edx
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::Mid
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x70], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x70]
call fcn.0040ae00
push eax
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x38]
call fcn.0040c7be
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov dl, byte [ebp - 0x20]
mov byte [ecx], dl
jmp 0x404ee8
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0xd
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx + 1], 0xa
push 0x13
mov edx, dword [ebp - 0x2c]
push edx
mov ecx, dword [ebp - 0x68]
call fcn.00406b25
cmp eax, 0xffffffff
jne 0x404fc1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
push ecx
call sub.MFC42.DLL_operatordelete
add esp, 4
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.0040c7be
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.0040c7be
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0040c7be
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040c7be
mov al, byte [ebp - 0x40]
jmp 0x405720
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x411614
lea edx, [ebp + 8]
push edx
push 0x411618
lea eax, [ebp - 0x44]
push eax
call sub.MFC42.DLL_operator_1
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x78]
push edx
lea eax, [ebp - 0x30]
push eax
call sub.MFC42.DLL_operator_2
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x44]
call fcn.0040c7be
mov ecx, dword [ebp - 0x30]
push ecx
push 0x41161c
push 0x411628
lea edx, [ebp - 0x28]
push edx
call sub.MFC42.DLL_CString::Format
add esp, 0x10
mov dword [ebp - 0x24], 0
jmp 0x405035
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x16
jge 0x40508e
lea ecx, [ebp - 0x20]
push ecx
push 0x411630
push 1
mov edx, dword [ebp - 0x24]
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x28]
call sub.MFC42.DLL_CString::Mid
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x80], ecx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x80]
call fcn.0040ae00
push eax
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x48]
call fcn.0040c7be
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov al, byte [ebp - 0x20]
mov byte [edx], al
jmp 0x40502c
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0xd
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx + 1], 0xa
push 0x18
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x68]
call fcn.00406b25
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x24], 0
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x4e
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0xb2
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0xff
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0xc
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x5f
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0xeb
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x90
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x12
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x54
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x58
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x76
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x7b
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x5f
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x55
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x5b
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0xc6
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x78
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 1
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x4e
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x3a
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0xff
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x1a
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x10], 0
jmp 0x40525f
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
lea ecx, [ebp + 0xc]
call fcn.0040ada0
cmp dword [ebp - 0x10], eax
jge 0x4052e9
lea ecx, [ebp - 0x20]
push ecx
push 0x411634
push 1
mov edx, dword [ebp - 0x10]
push edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp + 0xc]
call sub.MFC42.DLL_CString::Mid
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x88], ecx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x88]
call fcn.0040ae00
push eax
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4c]
call fcn.0040c7be
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov dl, byte [ebp - 0x20]
mov byte [ecx], dl
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
jmp 0x405256
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x30
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 2
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x8b
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0xf7
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x59
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0xa5
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x55
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x84
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x4f
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0xdd
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x5b
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x58
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x30
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 2
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x61
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x1f
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x8c
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x22
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x60
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0xa8
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x76
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x84
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x4f
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x7f
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x75
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x28
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0xff
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 1
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x30
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x10
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x5f
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0xeb
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0x66
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x13
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x53
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0xcb
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x30
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov byte [eax], 0x11
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov byte [edx], 0
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov byte [ecx], 0x1a
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
add eax, 1
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0x68]
call fcn.00406b25
cmp eax, 0xffffffff
jne 0x40562e
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x50]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
mov byte [ebp - 0x54], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x30]
call fcn.0040c7be
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.0040c7be
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.0040c7be
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0040c7be
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040c7be
mov al, byte [ebp - 0x54]
jmp 0x405720
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x58]
push edx
call sub.MFC42.DLL_operatordelete
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x1c]
cmp eax, 0x9c40
jge 0x4056d8
mov ecx, dword [ebp - 0x68]
call fcn.00403581
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x100], 1
jne 0x4056d3
push ecx
mov ecx, esp
mov dword [ebp - 0x5c], esp
push str.send_msg11
call sub.MFC42.DLL_CString::CString
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x68]
call fcn.004099cd
mov byte [ebp - 0x60], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x30]
call fcn.0040c7be
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.0040c7be
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.0040c7be
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0040c7be
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040c7be
mov al, byte [ebp - 0x60]
jmp 0x405720
jmp 0x405649
mov cl, byte [ebp - 0x18]
mov byte [ebp - 0x64], cl
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x30]
call fcn.0040c7be
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.0040c7be
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.0040c7be
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0040c7be
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.0040c7be
mov al, byte [ebp - 0x64]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8