Function at 0x10033730
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10043e35
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x1006b040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], 0x96b6d9
xor ecx, ecx
mov al, cl
add al, 0x36
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 3
jb 0x10033764
lea eax, [ebp - 0x14]
mov byte [ebp - 0x11], 0
push eax
lea ecx, [ebp - 0x4c]
call fcn.1003f380
mov edx, eax
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x1c], 0x4a196116
mov dword [ebp - 0x18], 0x505a4f
nop dword [eax + eax]
mov al, cl
add al, 0x36
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 7
jb 0x100337a0
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x15], 0
push eax
lea ecx, [ebp - 0x34]
call fcn.1003f490
add esp, 4
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 0xf
jbe 0x100337cd
mov eax, dword [eax]
mov ecx, eax
call fcn.10030160
mov byte [ebp - 4], 0
mov bl, al
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x1003380a
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10033800
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033849
push ecx
push edx
call fcn.1003fd96
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x10033859
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003384f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003384f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1003fd96
add esp, 8
test bl, bl
je 0x10033adc
mov edx, 0x1006bfed
mov ecx, str.Wallhack
call fcn.10022770
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
mov edx, 0x1006c00d
mov ecx, str.Box_Esp
call fcn.10022770
mov edx, 0x1006c097
mov ecx, str.Chams
call fcn.10022770
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
mov edx, 0x1006bf8b
mov ecx, str.Skeleton_ESP
call fcn.10022770
mov edx, 0x1006c062
mov ecx, str.Chams_Rainbow
call fcn.10022770
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
mov edx, 0x1006c095
mov ecx, str.Distance_Esp
call fcn.10022770
mov edx, 0x1006c060
mov ecx, str.Look_Direction
call fcn.10022770
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
mov edx, 0x1006bfee
mov ecx, str.Line_ESP
call fcn.10022770
mov edx, 0x1006c096
mov ecx, str.No_Smoke
call fcn.10022770
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
mov edx, 0x1006c00c
mov ecx, str.Radar_ESP
call fcn.10022770
mov edx, 0x1006bf8a
mov ecx, str.Bomb_Warning
call fcn.10022770
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
mov edx, 0x1006c061
mov ecx, str.Name_Esp
call fcn.10022770
mov ecx, dword [0x1006bc38]
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x78], 1
mov ebx, dword [ecx + 0x199c]
lea esi, [ebx + 0x17c]
mov dword [ebx + 0x168], 0x429c0000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x100339c6
inc ecx
test edi, edi
je 0x100339b4
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x100339b9
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10012510
mov ecx, dword [esi + 8]
mov edx, dword [esi]
mov eax, dword [ebx + 0x168]
push ecx
push 2
mov dword [ecx + edx*4], eax
mov edx, 0x1006bd18
inc dword [esi]
push 0x1006b20c
push ecx
mov ecx, str.Radar_Type
call fcn.10023d10
mov ecx, dword [0x1006bc38]
add esp, 0x10
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x78], 1
mov ebx, dword [ecx + 0x199c]
lea esi, [ebx + 0x17c]
mov dword [ebx + 0x168], 0x429c0000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x10033a42
inc ecx
test edi, edi
je 0x10033a30
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10033a35
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10012510
mov edx, dword [esi]
xorps xmm0, xmm0
mov ecx, dword [esi + 8]
mov eax, dword [ebx + 0x168]
movss xmm1, dword [0x1006859c]
mov dword [ecx + edx*4], eax
inc dword [esi]
call fcn.1000cda0
push ecx
push 3
push 0x1006b218
push ecx
mov edx, 0x1006bd54
mov ecx, str.Box_Type
call fcn.10023d10
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
add esp, 0xc
mov edx, 0x1006bc50
push 3
push 0x1006b398
push ecx
mov ecx, str.Select_Team
call fcn.10023d10
add esp, 0x10
test al, al
je 0x10033adc
mov eax, dword [0x1006bc50]
test eax, eax
je 0x10033abd
cmp eax, 1
je 0x10033abd
xor cl, cl
jmp 0x10033abf
mov cl, 1
mov byte [0x1006b225], cl
test eax, eax
je 0x10033ad5
mov byte [0x1006b224], 0
cmp eax, 2
jne 0x10033adc
mov byte [0x1006b224], 1
mov dword [ebp - 0x14], 0xa3b6d9
xor ecx, ecx
mov al, cl
add al, 0x36
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 3
jb 0x10033ae5
lea eax, [ebp - 0x14]
mov byte [ebp - 0x11], 0
push eax
lea ecx, [ebp - 0x4c]
call fcn.1003f380
mov edx, eax
mov dword [ebp - 4], 2
xor ecx, ecx
mov dword [ebp - 0x1c], 0x54517616
mov dword [ebp - 0x18], 0x485458
nop dword [eax]
mov al, cl
add al, 0x36
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 7
jb 0x10033b20
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x15], 0
push eax
lea ecx, [ebp - 0x34]
call fcn.1003f490
add esp, 4
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 0xf
jbe 0x10033b4d
mov eax, dword [eax]
mov ecx, eax
call fcn.10030160
mov byte [ebp - 4], 2
mov bl, al
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x10033b8a
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10033b80
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033bc9
push ecx
push edx
call fcn.1003fd96
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x10033bd9
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10033bcf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10033bcf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1003fd96
add esp, 8
test bl, bl
je 0x10033e4f
mov edx, 0x1006c00e
mov ecx, str.Enable_Aimbot
call fcn.10022770
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
mov ecx, dword [0x1006bc38]
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x78], 1
mov ebx, dword [ecx + 0x199c]
lea esi, [ebx + 0x17c]
mov dword [ebx + 0x168], 0x429c0000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x10033c51
inc ecx
test edi, edi
je 0x10033c3f
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10033c44
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10012510
mov ecx, dword [esi + 8]
mov edx, dword [esi]
mov eax, dword [ebx + 0x168]
push ecx
push 6
mov dword [ecx + edx*4], eax
mov edx, 0x1006bd68
inc dword [esi]
push 0x1006b354
push ecx
mov ecx, str.Aim_Key
call fcn.10023d10
mov edx, 0x1006bfef
mov ecx, str.Circle_Fov
call fcn.10022770
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
add esp, 0xc
mov edx, 0x1006bd78
push 3
push 0x1006b37c
push ecx
mov ecx, str.Aim_Bone
call fcn.10023d10
push 0x20
mov edx, 0x1006b3a4
mov ecx, str.Circle_Fov_Color
call fcn.1002ac10
mov ecx, dword [0x1006bc38]
add esp, 0x14
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x78], 1
mov ebx, dword [ecx + 0x199c]
lea esi, [ebx + 0x17c]
mov dword [ebx + 0x168], 0x431c0000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x10033d17
inc ecx
test edi, edi
je 0x10033d05
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10033d0a
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10012510
mov edx, dword [esi]
sub esp, 8
mov ecx, dword [esi + 8]
mov eax, dword [ebx + 0x168]
mov dword [ebp - 0x18], 0x41200000
mov dword [esp + 4], 0x3f800000
mov dword [ecx + edx*4], eax
lea eax, [ebp - 0x14]
inc dword [esi]
mov ecx, str.Aim_FOV
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x43b40000
push eax
push 0x1006b11c
call fcn.10024b80
mov ecx, dword [0x1006bc38]
add esp, 0x14
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x78], 1
mov ebx, dword [ecx + 0x199c]
lea esi, [ebx + 0x17c]
mov dword [ebx + 0x168], 0x431c0000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x10033dab
inc ecx
test edi, edi
je 0x10033d99
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10033d9e
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10012510
mov edx, dword [esi]
sub esp, 8
mov ecx, dword [esi + 8]
mov eax, dword [ebx + 0x168]
mov dword [ebp - 0x14], 0x3f000000
mov dword [esp + 4], 0x3f800000
mov dword [ecx + edx*4], eax
lea eax, [ebp - 0x18]
inc dword [esi]
mov ecx, str.Smooth
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], 0x40800000
push eax
push 0x1006b118
call fcn.10024b80
mov ecx, dword [0x1006bc38]
add esp, 0x14
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x78], 1
mov ebx, dword [ecx + 0x199c]
lea esi, [ebx + 0x17c]
mov dword [ebx + 0x168], 0x429c0000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x10033e3f
inc ecx
test edi, edi
je 0x10033e2d
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10033e32
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10012510
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [ebx + 0x168]
mov dword [ecx + edx*4], eax
inc dword [esi]
mov dword [ebp - 0x14], 0xb9bdd9
xor ecx, ecx
mov al, cl
add al, 0x36
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 3
jb 0x10033e58
lea eax, [ebp - 0x14]
mov byte [ebp - 0x11], 0
push eax
lea ecx, [ebp - 0x4c]
call fcn.1003f380
mov edx, eax
mov dword [ebp - 4], 4
xor ecx, ecx
mov dword [ebp - 0x1c], 0x545d7a16
mov dword [ebp - 0x18], 0x454955
nop
mov al, cl
add al, 0x36
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 7
jb 0x10033e90
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x15], 0
push eax
lea ecx, [ebp - 0x34]
call fcn.1003f490
add esp, 4
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 0xf
jbe 0x10033ebd
mov eax, dword [eax]
mov ecx, eax
call fcn.10030160
mov byte [ebp - 4], 4
mov bl, al
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x10033efa
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10033ef0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033f39
push ecx
push edx
call fcn.1003fd96
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x10033f49
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10033f3f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10033f3f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1003fd96
add esp, 8
test bl, bl
je 0x10033fa9
mov edx, 0x1006c0c8
mov ecx, str.No_Recoil
call fcn.10022770
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
mov edx, 0x1006c00f
mov ecx, str.No_Reload_BAN_Risky_
call fcn.10022770
mov edx, 0x1006c063
mov ecx, str.Anti_AFK
call fcn.10022770
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
mov edx, 0x1006c094
mov ecx, str.Fast_Reload_BAN_Risky_
call fcn.10022770
mov dword [ebp - 0x14], 0xb8b6d9
xor ecx, ecx
mov al, cl
add al, 0x36
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 3
jb 0x10033fb2
lea eax, [ebp - 0x14]
mov byte [ebp - 0x11], 0
push eax
lea ecx, [ebp - 0x7c]
call fcn.1003f380
mov edx, eax
mov dword [ebp - 4], 6
xor ecx, ecx
mov dword [ebp - 0x1c], 0x55577416
mov dword [ebp - 0x18], 0x4f4955
nop dword [eax]
mov al, cl
add al, 0x36
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 7
jb 0x10033ff0
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x15], 0
push eax
lea ecx, [ebp - 0x64]
call fcn.1003f490
add esp, 4
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 0xf
jbe 0x1003401d
mov eax, dword [eax]
mov ecx, eax
call fcn.10030160
mov byte [ebp - 4], 6
mov bl, al
mov ecx, dword [ebp - 0x50]
cmp ecx, 0xf
jbe 0x1003405a
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10034050
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034099
push ecx
push edx
call fcn.1003fd96
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp ecx, 0xf
jbe 0x100340a9
mov edx, dword [ebp - 0x7c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003409f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003409f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1003fd96
add esp, 8
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
test bl, bl
je 0x100342f9
push 0x22
mov edx, 0x1006b130
mov ecx, str.Chams_Zula_Visible
call fcn.1002ac10
movss xmm1, dword [0x1006859c]
add esp, 4
xorps xmm0, xmm0
call fcn.1000cda0
push 0x22
mov edx, 0x1006b0d0
mov ecx, str.Chams_Gladyo_Visible
call fcn.1002ac10
add esp, 4
mov edx, 0x1006b0b0
mov ecx, str.Chams_Zula_Invisible
push 0x22
call fcn.1002ac10
movss xmm1, dword [0x1006859c]
add esp, 4
xorps xmm0, xmm0
call fcn.1000cda0
push 0x22
mov edx, 0x1006b0f0
mov ecx, str.Chams_Gladyo_Invisible
call fcn.1002ac10
add esp, 4
mov edx, 0x1006b3d0
mov ecx, str.Zula_Skeleton_Color
push 0x20
call fcn.1002ac10
movss xmm1, dword [0x1006859c]
add esp, 4
xorps xmm0, xmm0
call fcn.1000cda0
push 0x20
mov edx, 0x1006b3e0
mov ecx, str.Gladio_Skeleton_Color
call fcn.1002ac10
add esp, 4
mov edx, str.333_
mov ecx, str.Esp_Color__Zula_Team_
push 0x20
call fcn.1002ac10
movss xmm1, dword [0x1006859c]
add esp, 4
xorps xmm0, xmm0
call fcn.1000cda0
push 0x20
mov edx, 0x1006b388
mov ecx, str.Esp_Color__Gladio_Team_
call fcn.1002ac10
add esp, 4
mov edx, 0x1006b36c
mov ecx, str.Esp_Line_Color__Zula_Team_
push 0x20
call fcn.1002ac10
movss xmm1, dword [0x1006859c]
add esp, 4
xorps xmm0, xmm0
call fcn.1000cda0
push 0x20
mov edx, 0x1006b3b4
mov ecx, str.Esp_Line_Color__Gladio_Team_
call fcn.1002ac10
add esp, 4
cmp byte [0x1006b225], 0
je 0x10034260
mov ecx, dword [0x1006bc38]
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x78], 1
mov ebx, dword [ecx + 0x199c]
lea esi, [ebx + 0x17c]
mov dword [ebx + 0x168], 0x429c0000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x10034235
inc ecx
test edi, edi
je 0x10034223
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10034228
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10012510
mov ecx, dword [esi + 8]
mov edx, dword [esi]
mov eax, dword [ebx + 0x168]
push ecx
push 3
mov dword [ecx + edx*4], eax
mov edx, 0x1006bd74
inc dword [esi]
push 0x1006b200
push ecx
mov ecx, str.Radar_Zula_Color
call fcn.10023d10
add esp, 0x10
cmp byte [0x1006b224], 0
je 0x100342f9
movss xmm1, dword [0x1006859c]
xorps xmm0, xmm0
call fcn.1000cda0
mov ecx, dword [0x1006bc38]
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x78], 1
mov ebx, dword [ecx + 0x199c]
lea esi, [ebx + 0x17c]
mov dword [ebx + 0x168], 0x429c0000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x100342ce
inc ecx
test edi, edi
je 0x100342bc
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x100342c1
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10012510
mov ecx, dword [esi + 8]
mov edx, dword [esi]
mov eax, dword [ebx + 0x168]
push ecx
push 3
mov dword [ecx + edx*4], eax
mov edx, 0x1006bc64
inc dword [esi]
push 0x1006b200
push ecx
mov ecx, str.Radar_Gladyo_Color
call fcn.10023d10
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003f8a4
mov esp, ebp
pop ebp
ret