Function at 0x1002c9f0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007ccbf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
mov eax, dword [0x1015f508]
movss xmm0, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov eax, dword [eax + 0x60]
push edi
push ecx
movss dword [esp], xmm0
call eax
mov ecx, dword [0x1015eee4]
mov byte [ebp - 0xd], al
mov ecx, dword [ecx]
call fcn.1000e400
mov ecx, dword [0x1015eee4]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov dword [ebp - 0x18], eax
call fcn.1000e720
sub esp, 8
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x14], xmm0
fld dword [ebp - 0x14]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_floor
add esp, 8
fstp dword [ebp - 0x14]
test edi, edi
je 0x1002d625
cmp dword [edi + 4], 0
je 0x1002d625
mov eax, dword [0x1015ee98]
mov eax, dword [eax + 0x9c]
mov dword [ebp - 0x24], eax
call fcn.1002a570
cmp byte [eax + 0x3a8], 0
je 0x1002ca98
and dword [edi + 0x30], 0xfffffffe
cmp byte [0x1015ef53], 0
je 0x1002caa8
mov ecx, edi
call fcn.1000f2c0
call fcn.1000fe40
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
call fcn.1000e400
push dword [0x1015ef6c]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov eax, dword [eax]
mov dword [0x101257f0], eax
call esi
test ax, ax
je 0x1002cada
mov ecx, edi
call fcn.10011f20
call fcn.1002f680
call fcn.10022be0
mov ecx, edi
call fcn.1000fa60
mov dword [ebp - 4], 0
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
test ecx, ecx
je 0x1002cb15
mov eax, dword [0x10160e0c]
test eax, eax
je 0x1002cb0c
cmp byte [eax + 0x48], 0
je 0x1002cb15
call fcn.1000e580
mov eax, dword [eax]
jmp 0x1002cb1b
mov eax, dword [0x10160e10]
inc eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x10160e10], eax
mov eax, dword [0x1015eee4]
mov dword [0x10160e0c], edi
cmp dword [eax], 0
je 0x1002cba5
cmp byte [0x1015efc2], 0
je 0x1002cba5
test byte [0x101256a0], 1
jne 0x1002cb5c
mov eax, dword [0x1015b820]
mov eax, dword [eax + 0x1c]
add eax, dword [0x1015efc4]
mov dword [0x1012569c], eax
push dword [0x1015efb0]
call esi
test ax, ax
je 0x1002cba5
test byte [0x101256a0], 1
je 0x1002cba5
mov ecx, dword [0x1015b820]
mov eax, dword [0x1012569c]
mov edx, dword [edi + 0x30]
movss xmm0, dword [ecx + 0x10]
addss xmm0, dword [0x100e047c]
movss dword [0x1015bd18], xmm0
cmp eax, dword [ecx + 0x1c]
jl 0x1002cb9f
and edx, 0xfffffffd
jmp 0x1002cba2
or edx, 2
mov dword [edi + 0x30], edx
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1012535c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10160ef8]
mov dword [ebp - 0x28], ecx
cmp eax, dword [ecx + 4]
jle 0x1002cc15
push 0x10160ef8
call fcn.10079ad7
add esp, 4
cmp dword [0x10160ef8], 0xffffffff
jne 0x1002cc15
push 0xc4
mov dword [ebp - 4], 1
call fcn.100796ae
add esp, 4
mov dword [ebp - 0x20], eax
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1002a9f0
push 0x10160ef8
mov dword [0x10160e6c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10079a86
add esp, 4
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
call fcn.1000e400
cmp byte [0x1015efc8], 0
movq xmm0, qword [edi + 0xc]
movq qword [ebp - 0x34], xmm0
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x1015bc80]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x1c], eax
je 0x1002cc51
or dword [edi + 0x30], 0x400000
mov ecx, dword [0x10160e6c]
push edi
call fcn.1002ab00
push edi
mov ecx, 0x101236f0
call fcn.1000ace0
mov ecx, edi
call fcn.10012ee0
mov ecx, dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x14]
call fcn.10010ee0
cmp byte [0x1015eff1], 0
mov ecx, dword [0x1015b830]
push str.r_drawclipbrushes
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
je 0x1002cc9e
call eax
push 0x100dd650
jmp 0x1002cca5
call eax
push 0x100dd678
lea ecx, [eax + 0x18]
mov eax, dword [ecx]
call dword [eax + 0xc]
cmp byte [0x1015eff2], 0
mov ecx, dword [0x1015b830]
push str.mat_wireframe
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
je 0x1002cccf
call eax
push 0x100dd650
jmp 0x1002ccd6
call eax
push 0x100dd678
lea ecx, [eax + 0x18]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
call fcn.1000a6d0
cmp byte [0x1015f01d], 0
mov eax, dword [eax]
je 0x1002cd7c
mov ecx, dword [0x1015b83c]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov ecx, eax
call fcn.1000a1e0
movzx eax, word [eax]
cmp ax, 0x2a
je 0x1002cd76
cmp ax, 0x31
je 0x1002cd76
cmp ax, 0x2c
je 0x1002cd76
cmp ax, 0x2d
je 0x1002cd76
cmp ax, 0x2b
je 0x1002cd76
cmp ax, 0x2f
je 0x1002cd76
cmp ax, 0x30
je 0x1002cd76
cmp ax, 0x3b
je 0x1002cd76
mov ecx, 0x1f4
cmp ax, cx
jl 0x1002cd59
mov ecx, 0x20b
cmp ax, cx
jle 0x1002cd76
test byte [edi + 0x30], 1
je 0x1002cd76
mov ecx, dword [0x1015b828]
push 0
push str.slot11
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c8]
call eax
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp byte [0x1015efc9], 0
mov ecx, dword [0x1015b830]
push str._panorama_disable_blur
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
je 0x1002cd9e
call eax
push 0x100dd6b0
jmp 0x1002cda5
call eax
push 0x100dd678
lea ecx, [eax + 0x18]
mov eax, dword [ecx]
call dword [eax + 0xc]
cmp byte [0x1015f005], 0
mov ecx, dword [0x1015b830]
push str.cl_wpn_sway_scale
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
je 0x1002cdcf
call eax
push 0x100dd678
jmp 0x1002cdd6
call eax
push 0x100dd6c8
lea ecx, [eax + 0x18]
mov eax, dword [ecx]
call dword [eax + 0xc]
cmp byte [0x1015f032], 0
je 0x1002ce09
cmp byte [0x1015ef53], 0
je 0x1002ce09
mov ecx, dword [0x1015b830]
push str.sv_autobunnyhopping
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
call eax
push 0x100dd6b0
jmp 0x1002ce20
mov ecx, dword [0x1015b830]
push str.sv_autobunnyhopping
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
call eax
push 0x100dd678
lea ecx, [eax + 0x18]
mov eax, dword [ecx]
call dword [eax + 0xc]
cmp byte [0x1015f038], 0
jne 0x1002ce50
mov ecx, dword [0x1015b830]
push str.m_yaw
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
call eax
push str.0.022
lea ecx, [eax + 0x18]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, edi
call fcn.10011850
call fcn.10011db0
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
test ecx, ecx
je 0x1002cf8a
call fcn.1000cc70
cmp dword [eax], 0
jne 0x1002cf8a
push dword [0x1015ef84]
call esi
test ax, ax
je 0x1002ce9b
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
call fcn.1000e400
test byte [eax], 1
jne 0x1002cf8a
cmp byte [0x1015ef82], 0
je 0x1002cf8a
push dword [0x1015ef84]
call esi
test ax, ax
je 0x1002cf8a
mov eax, dword [0x1015eee4]
push dword [ebp + 0xc]
mov ecx, dword [0x1014690c]
mov eax, dword [eax]
mov edi, dword [eax + 0x25c]
call fcn.1002ab00
mov ecx, dword [0x1015ee18]
mov esi, dword [0x1014690c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov eax, dword [0x1015eee4]
push dword [eax]
call edx
mov ecx, dword [0x1015ee14]
push 0
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 0xc0]
mov ecx, dword [0x1015b820]
mov dword [eax], 0xffffffff
mov eax, dword [esi]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 4]
mov dword [ecx + 0x14], eax
mov eax, dword [0x1015eee4]
mov eax, dword [eax]
cmp edi, 9
jne 0x1002cf56
cmp dword [eax + 0x25c], edi
je 0x1002cf56
mov edi, dword [ebp + 0xc]
mov edx, dword [ecx + 0x1c]
mov dword [0x1015f450], edx
mov eax, dword [edi + 0x30]
or eax, 2
mov dword [edi + 0x24], 0
and eax, 0xfffff9e7
mov dword [edi + 0x28], 0
mov dword [edi + 0x30], eax
jmp 0x1002cf5f
mov edx, dword [0x1015f450]
mov edi, dword [ebp + 0xc]
mov eax, dword [ecx + 0x1c]
sub eax, edx
cmp eax, 1
jle 0x1002cf8a
cmp eax, 0xf
jge 0x1002cf8a
mov eax, dword [edi + 0x30]
and eax, 0xfffff9e7
mov dword [edi + 0x24], 0
or eax, 4
mov dword [edi + 0x28], 0
mov dword [edi + 0x30], eax
mov ecx, edi
call fcn.1000fd60
mov eax, dword [0x1015b820]
movss xmm0, dword [eax + 0x10]
comiss xmm0, dword [0x1015f428]
jbe 0x1002cfab
mov byte [0x1015bcc0], 0
mov eax, dword [0x1015eee4]
cmp dword [eax], 0
jne 0x1002cfbf
mov dword [0x1015f428], 0
cmp byte [0x1015ef91], 0
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
je 0x1002d039
push dword [0x1015ef94]
call esi
test ax, ax
je 0x1002d039
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
test ecx, ecx
je 0x1002d039
mov eax, dword [ecx + 0x25c]
cmp eax, 9
je 0x1002d039
cmp eax, 8
je 0x1002d039
test byte [0x101256a0], 1
je 0x1002d039
call fcn.1000e400
test byte [eax], 1
jne 0x1002d039
mov ecx, dword [edi + 0x30]
mov eax, dword [0x1015b820]
or ecx, 2
mov dword [edi + 0x30], ecx
or ecx, 4
mov byte [0x1015bcc0], 1
movss xmm0, dword [eax + 0x10]
addss xmm0, dword [0x100e047c]
mov dword [edi + 0x30], ecx
movss dword [0x1015f428], xmm0
cmp byte [0x1015ef88], 0
je 0x1002d099
push dword [0x1015ef8c]
call esi
test ax, ax
je 0x1002d099
lea edx, [ebp - 0x34]
mov ecx, edi
call fcn.1000f3b0
mov eax, dword [0x10124c50]
push dword [ebp - 0x1c]
push 0
mov eax, dword [eax]
call eax
movq xmm0, qword [ebp - 0x34]
sub esp, 0xc
mov eax, dword [ebp - 0x2c]
mov ecx, esp
sub esp, 0xc
movq qword [ecx], xmm0
movq xmm0, qword [edi + 0xc]
mov dword [ecx + 8], eax
mov ecx, esp
mov eax, dword [edi + 0x14]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, edi
call fcn.1000eb00
add esp, 0x18
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
test ecx, ecx
je 0x1002d1eb
call fcn.1000cc70
cmp dword [eax], 0
jne 0x1002d1eb
movss xmm0, dword [0x101256a8]
xorps xmm1, xmm1
comiss xmm0, xmm1
ja 0x1002d1eb
cmp byte [0x1015ef99], 0
je 0x1002d1eb
movss xmm1, dword [0x101236a8]
movss xmm0, dword [0x101236a4]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.10009630
comiss xmm0, dword [0x100e0610]
jb 0x1002d1eb
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
call fcn.1000e400
test byte [eax], 1
je 0x1002d1eb
mov ecx, dword [0x1015b830]
push str.sv_airaccelerate
mov eax, dword [ecx]
call dword [eax + 0x44]
movss xmm1, dword [0x101236a8]
movss xmm0, dword [0x101236a4]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.10009630
addss xmm0, dword [0x100e0524]
movss xmm1, dword [0x101236a4]
mulss xmm1, dword [0x100e0698]
subss xmm0, dword [0x100e0610]
divss xmm0, dword [0x100e059c]
mulss xmm0, dword [0x100e05e8]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x101236a8]
mulss xmm0, dword [0x100e0698]
call fcn.100095d0
mulss xmm0, dword [0x100e05dc]
subss xmm0, dword [edi + 0x10]
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x100e04e8]
cvtsd2ss xmm0, xmm0
movss dword [ebp + 0xc], xmm0
call fcn.1000e1c0
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [ebp + 0xc]
call fcn.1000e1e0
movss xmm1, dword [ebp - 0x1c]
xorps xmm0, xmmword [0x100e0950]
mulss xmm1, dword [ebp - 0x18]
mulss xmm0, dword [ebp - 0x1c]
movss dword [edi + 0x24], xmm1
movss dword [edi + 0x28], xmm0
mov ecx, edi
call fcn.10010070
mov ecx, edi
call fcn.10010cc0
mov ecx, edi
call fcn.10011930
mov ecx, edi
call fcn.10011d40
cmp byte [0x1015ef80], 0
je 0x1002d2d5
push dword [0x1015ef84]
call esi
test ax, ax
je 0x1002d2d5
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
call fcn.1000e400
test byte [eax], 1
jne 0x1002d2d5
test byte [ebp - 0x20], 1
je 0x1002d2d5
or dword [edi + 0x30], 2
cmp byte [0x1015f049], 0
je 0x1002d2d5
cmp byte [0x1015f046], 0
je 0x1002d275
mov ecx, dword [0x1015b828]
push 0
push str._forward
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c8]
call eax
cmp byte [0x1015f037], 0
je 0x1002d295
mov ecx, dword [0x1015b828]
push 0
push str._back
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c8]
call eax
cmp byte [0x1015f045], 0
je 0x1002d2b5
mov ecx, dword [0x1015b828]
push 0
push str._moveright
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c8]
call eax
cmp byte [0x1015f044], 0
je 0x1002d2d5
mov ecx, dword [0x1015b828]
push 0
push str._moveleft
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c8]
call eax
mov eax, dword [0x1015eee4]
mov ecx, dword [eax]
test ecx, ecx
je 0x1002d31d
call fcn.1000cc70
cmp dword [eax], 0
jne 0x1002d31d
cmp byte [0x1015f011], 0
je 0x1002d304
call fcn.1002f5f0
push dword [ebp - 0x24]
mov ecx, eax
call fcn.1001ae50
jmp 0x1002d31d
call fcn.1002f5f0
cmp dword [eax + 0x10], 0
je 0x1002d31d
mov ecx, eax
mov dword [eax + 0x14], 0
call fcn.1001af30
lea esi, [edi + 0xc]
mov ecx, esi
call fcn.1000a040
movss xmm1, dword [esi]
lea edx, [ebp + 0xc]
movss xmm0, dword [0x100e06cc]
lea ecx, [ebp - 0x24]
comiss xmm0, xmm1
mov dword [ebp - 0x24], 0x42b40000
mov dword [ebp + 0xc], 0xc2b40000
movss xmm0, dword [0x100e06d4]
seta al
test al, al
cmove edx, esi
comiss xmm1, dword [0x100e05f0]
seta al
test al, al
cmove ecx, edx
lea edx, [ebp + 0xc]
mov eax, dword [ecx]
lea ecx, [ebp - 0x24]
mov dword [esi], eax
lea esi, [edi + 0x10]
movss xmm1, dword [esi]
comiss xmm0, xmm1
mov dword [ebp - 0x24], 0x43340000
mov dword [ebp + 0xc], 0xc3340000
seta al
test al, al
cmove edx, esi
comiss xmm1, dword [0x100e0600]
movss xmm1, dword [0x100e06d8]
seta al
test al, al
cmove ecx, edx
lea edx, [ebp + 0xc]
mov eax, dword [ecx]
lea ecx, [ebp - 0x24]
mov dword [esi], eax
lea esi, [edi + 0x24]
mov dword [edi + 0x14], 0
movss xmm0, dword [esi]
comiss xmm1, xmm0
mov dword [ebp - 0x24], 0x43e10000
mov dword [ebp + 0xc], 0xc3e10000
seta al
test al, al
cmove edx, esi
comiss xmm0, dword [0x100e0628]
seta al
test al, al
cmove ecx, edx
lea edx, [ebp + 0xc]
mov eax, dword [ecx]
lea ecx, [ebp - 0x24]
mov dword [esi], eax
lea esi, [edi + 0x28]
movss xmm0, dword [esi]
comiss xmm1, xmm0
mov dword [ebp - 0x24], 0x43e10000
mov dword [ebp + 0xc], 0xc3e10000
seta al
test al, al
cmove edx, esi
comiss xmm0, dword [0x100e0628]
seta al
test al, al
cmove ecx, edx
mov eax, dword [ecx]
mov dword [esi], eax
cmp byte [0x1015ef60], 0
je 0x1002d451
test dword [edi + 0x30], 0x10000
je 0x1002d451
mov ecx, dword [0x1015bd70]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0x32
mov eax, dword [eax + 0x98]
call eax
cmp byte [0x1015efb8], 0
je 0x1002d5f7
mov eax, dword [0x1015eee4]
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax]
mov eax, dword [0x1015ee94]
cmp eax, dword [ecx + 4]
jle 0x1002d5be
push 0x1015ee94
call fcn.10079ad7
add esp, 4
cmp dword [0x1015ee94], 0xffffffff
jne 0x1002d5be
mov dword [ebp - 4], 3
call fcn.1000bd40
mov cx, word [0x100dd538]
xorps xmm0, xmm0
movups xmmword [ebp - 0x58], xmm0
mov edx, eax
mov al, byte [0x100dd53a]
movq xmm0, qword [str.m_bIsScoped]
mov dword [ebp - 0x48], 0xb
mov dword [ebp - 0x44], 0xf
movq qword [ebp - 0x58], xmm0
mov word [ebp - 0x50], cx
mov byte [ebp - 0x4e], al
mov byte [ebp - 0x4d], 0
mov ax, word [0x100807bc]
xorps xmm0, xmm0
movups xmmword [ebp - 0x40], xmm0
mov word [ebp - 0x38], ax
movq xmm0, qword [str.DT_CSPlayer]
mov al, byte [0x100807be]
mov dword [ebp - 0x30], 0xb
mov dword [ebp - 0x2c], 0xf
movq qword [ebp - 0x40], xmm0
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x40]
mov ecx, edx
push eax
call fcn.10079260
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x2c]
mov dword [0x1015ee90], eax
cmp ecx, 0x10
jb 0x1002d55e
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002d554
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002d588
push ecx
push edx
call fcn.10079a4d
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x1002d598
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1002d58e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002d58e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10079a4d
add esp, 8
push 0x1015ee94
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov dword [ebp - 4], 0xffffffff
call fcn.10079a86
add esp, 4
mov eax, dword [0x1015ee90]
cmp byte [eax + esi], 0
jne 0x1002d5f7
mov ecx, dword [0x1015b830]
push str.weapon_debug_spread_show
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
call eax
push 3
lea ecx, [eax + 0x18]
mov eax, dword [ecx]
call dword [eax + 4]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x1015b830]
push str.weapon_debug_spread_show
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
call eax
push 0
lea ecx, [eax + 0x18]
mov eax, dword [ecx]
call dword [eax + 4]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0xd]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret