Function at 0x1000a4f0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100791e5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x50
mov eax, dword [0x10096400]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x5c], ecx
mov ecx, dword [0x10097a8c]
mov edi, 0xffff0000
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, dword [ecx + 0xc]
cmp dword [eax], 0
jne 0x1000a84a
mov eax, dword [ecx + 4]
mov eax, dword [eax]
cmp eax, 2
je 0x1000a84a
cmp eax, 4
je 0x1000a84a
push 0x24
mov dword [0x100988e8], 0x10004580
call fcn.10004580
cwde
shr eax, 0x10
test eax, eax
je 0x1000a5b3
cmp byte [0x1009abd0], 0
je 0x1000a59a
cmp dword [0x1009abd4], 0
je 0x1000a5ba
call esi
cmp dword [0x1009abd4], eax
ja 0x1000a5ba
xor eax, eax
mov byte [0x1009abd0], 1
cmp dword [0x100988d0], eax
sete al
mov dword [0x100988d0], eax
jmp 0x1000a5ba
mov byte [0x1009abd0], 0
mov eax, dword [0x1009696c]
test eax, eax
jg 0x1000a5cf
mov dword [0x100988d0], 1
jmp 0x1000a5dc
cmp dword [0x100988d0], 0
je 0x1000a84a
mov ecx, dword [ebp - 0x58]
cmp eax, 0x28
mov esi, dword [0x10098784]
mov edx, 0xff00ff00
cmovle ecx, edx
cmp eax, 0x1e
mov edx, 0xffffff00
cmovle ecx, edx
cmp eax, 0x14
mov edx, 0xffffc000
cmovle ecx, edx
cmp eax, 0xa
mov eax, esi
cmovle ecx, edi
mov edi, dword [0x10098780]
shr eax, 3
mov dword [ebp - 0x58], ecx
mov ecx, edi
shr esi, 1
sub esi, eax
shr ecx, 3
mov eax, dword [0x100987b4]
shr edi, 1
sub edi, ecx
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x42480000
push eax
call dword [ecx + 0x2c]
mov eax, dword [0x100987b4]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
movd xmm0, edi
lea eax, [esi + 0x19]
cvtdq2ps xmm0, xmm0
movd xmm1, eax
lea eax, [edi + 0xaa]
movss dword [ebp - 0x28], xmm0
movd xmm0, eax
mov eax, dword [0x100987b4]
cvtdq2ps xmm1, xmm1
push eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x24], xmm1
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x1c], xmm1
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [0x100987b4]
lea edx, [ebp - 0x28]
push 0xc8000000
push 2
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov eax, dword [0x100987b4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov edx, dword [ebp - 0x5c]
movss xmm3, dword [0x10090c08]
movss xmm2, dword [0x10090c3c]
movd xmm1, esi
movd xmm0, edi
cvtdq2ps xmm1, xmm1
push ecx
mov ecx, dword [ebp - 0x58]
mov dword [esp], 0x40000000
cvtdq2ps xmm0, xmm0
call fcn.10009c40
xor edx, edx
add esp, 4
cmp dword [0x1009696c], edx
jg 0x1000a770
mov ecx, 0x3b
nop dword [eax]
mov al, byte [edx + str.zKM]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x40], al
and ecx, 0x800000ff
jns 0x1000a70d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xf
jl 0x1000a6f0
mov byte [ebp - 0x31], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x40]
mov ecx, dword [0x10096ed4]
push eax
movzx eax, byte [0x10096ed0]
or ecx, 0xffffff00
shl ecx, 8
or ecx, eax
movzx eax, byte [0x10096cd4]
shl ecx, 8
or ecx, eax
lea eax, [esi + 0x12]
push ecx
push eax
lea eax, [edi + 0x55]
push eax
push dword [0x1009889c]
call fcn.10009b80
xorps xmm0, xmm0
mov dword [ebp - 4], 0xffffffff
add esp, 0x14
movups xmmword [ebp - 0x40], xmm0
jmp 0x1000a83f
mov ecx, 0xb3
mov al, byte [edx + 0x1008bc48]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x28], al
and ecx, 0x800000ff
jns 0x1000a792
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x1000a775
mov byte [ebp - 0x1a], 0
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 1
push eax
push 0xffccffff
lea eax, [esi + 8]
add edi, 0x55
push eax
push edi
push dword [0x1009889c]
call fcn.10009b80
add esp, 0x14
mov ecx, 0xa9
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x1008bc58]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x44], al
and ecx, 0x800000ff
jns 0x1000a7ed
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x15
jl 0x1000a7d0
mov byte [ebp - 0x2f], 0
mov dword [ebp - 4], 2
lea eax, [ebp - 0x44]
push dword [0x100964ec]
push dword [0x1009696c]
push eax
push dword [ebp - 0x58]
lea eax, [esi + 0x1b]
push eax
push edi
push dword [0x1009889c]
call fcn.10009b80
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
add esp, 0x1c
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x44], xmm0
mov word [ebp - 0x30], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, 0xffff0000
mov eax, dword [0x10097a8c]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0
je 0x1000ab46
push 0x24
mov dword [0x100988e8], 0x10004580
call fcn.10004580
cwde
shr eax, 0x10
test eax, eax
je 0x1000a8a9
cmp byte [0x1009abd0], 0
je 0x1000a890
cmp dword [0x1009abd4], 0
je 0x1000a8b0
call esi
cmp dword [0x1009abd4], eax
ja 0x1000a8b0
xor eax, eax
mov byte [0x1009abd0], 1
cmp dword [0x100988d0], eax
sete al
mov dword [0x100988d0], eax
jmp 0x1000a8b0
mov byte [0x1009abd0], 0
mov eax, dword [0x1009696c]
test eax, eax
jg 0x1000a8c5
mov dword [0x100988d0], 1
jmp 0x1000a8d2
cmp dword [0x100988d0], 0
je 0x1000ab2f
mov ecx, dword [ebp - 0x58]
cmp eax, 0x28
mov esi, dword [0x10098784]
mov edx, 0xff00ff00
cmovle ecx, edx
cmp eax, 0x1e
mov edx, 0xffffff00
cmovle ecx, edx
cmp eax, 0x14
mov edx, 0xffffc000
cmovle ecx, edx
cmp eax, 0xa
mov eax, esi
cmovle ecx, edi
mov edi, dword [0x10098780]
shr eax, 3
mov dword [ebp - 0x58], ecx
mov ecx, edi
shr esi, 1
sub esi, eax
shr ecx, 3
mov eax, dword [0x100987b4]
shr edi, 1
sub edi, ecx
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x42480000
push eax
call dword [ecx + 0x2c]
mov eax, dword [0x100987b4]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
movd xmm0, edi
lea eax, [esi + 0x19]
cvtdq2ps xmm0, xmm0
movd xmm1, eax
lea eax, [edi + 0xaa]
movss dword [ebp - 0x28], xmm0
movd xmm0, eax
mov eax, dword [0x100987b4]
cvtdq2ps xmm1, xmm1
push eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x24], xmm1
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x1c], xmm1
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [0x100987b4]
lea edx, [ebp - 0x28]
push 0xc8000000
push 2
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov eax, dword [0x100987b4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov edx, dword [ebp - 0x5c]
movss xmm3, dword [0x10090c08]
movss xmm2, dword [0x10090c3c]
movd xmm1, esi
movd xmm0, edi
cvtdq2ps xmm1, xmm1
push ecx
mov ecx, dword [ebp - 0x58]
mov dword [esp], 0x40000000
cvtdq2ps xmm0, xmm0
call fcn.10009c40
xor edx, edx
add esp, 4
cmp dword [0x1009696c], edx
jg 0x1000aa62
mov ecx, 0x3b
mov al, byte [edx + str.zKM]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x28], al
and ecx, 0x800000ff
jns 0x1000a9ff
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xf
jl 0x1000a9e2
mov byte [ebp - 0x19], 0
mov dword [ebp - 4], 3
lea eax, [ebp - 0x28]
mov ecx, dword [0x10096ed4]
push eax
movzx eax, byte [0x10096ed0]
or ecx, 0xffffff00
shl ecx, 8
or ecx, eax
movzx eax, byte [0x10096cd4]
shl ecx, 8
or ecx, eax
lea eax, [esi + 0x12]
push ecx
push eax
lea eax, [edi + 0x55]
push eax
push dword [0x1009889c]
call fcn.10009b80
xorps xmm0, xmm0
mov dword [ebp - 4], 0xffffffff
add esp, 0x14
movups xmmword [ebp - 0x28], xmm0
jmp 0x1000ab2f
mov ecx, 0xb3
mov al, byte [edx + 0x1008bc48]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x28], al
and ecx, 0x800000ff
jns 0x1000aa84
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x1000aa67
mov byte [ebp - 0x1a], 0
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 4
push eax
push 0xffccffff
lea eax, [esi + 8]
add edi, 0x55
push eax
push edi
push dword [0x1009889c]
call fcn.10009b80
add esp, 0x14
mov ecx, 0xa9
xor edx, edx
nop dword [eax + eax]
mov al, byte [edx + 0x1008bc58]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x2c], al
and ecx, 0x800000ff
jns 0x1000aadd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x15
jl 0x1000aac0
mov byte [ebp - 0x17], 0
mov dword [ebp - 4], 5
lea eax, [ebp - 0x2c]
push dword [0x100964ec]
push dword [0x1009696c]
push eax
push dword [ebp - 0x58]
lea eax, [esi + 0x1b]
push eax
push edi
push dword [0x1009889c]
call fcn.10009b80
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
add esp, 0x1c
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x2c], xmm0
mov word [ebp - 0x18], 0
mov ecx, dword [0x10097a30]
test ecx, ecx
jne 0x1000ab4c
mov ecx, 1
mov dword [0x10097a30], ecx
jmp 0x1000ab4c
mov ecx, dword [0x10097a30]
mov eax, dword [0x10097a8c]
mov eax, dword [eax + 4]
mov edx, dword [eax]
cmp edx, 2
je 0x1000ab60
cmp edx, 4
jne 0x1000ab78
test ecx, ecx
je 0x1000ab78
mov dword [0x100988d0], 1
mov dword [0x10097a30], 0
mov eax, dword [0x10097a8c]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0
jne 0x1000b11f
cmp edx, 2
je 0x1000ab97
cmp edx, 4
jne 0x1000b11f
push 0x24
mov dword [0x100988e8], 0x10004580
call fcn.10004580
cwde
shr eax, 0x10
test eax, eax
je 0x1000abe9
cmp byte [0x1009abd0], 0
je 0x1000abd0
cmp dword [0x1009abd4], 0
je 0x1000abf0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x1009abd4], eax
ja 0x1000abf0
xor eax, eax
mov byte [0x1009abd0], 1
cmp dword [0x100988d0], eax
sete al
mov dword [0x100988d0], eax
jmp 0x1000abf0
mov byte [0x1009abd0], 0
cmp dword [0x1009696c], 0
jg 0x1000ac03
mov dword [0x100988d0], 1
mov edi, dword [0x10098780]
mov ecx, edi
mov esi, dword [0x10098784]
mov eax, esi
shr ecx, 3
shr eax, 3
shr edi, 1
shr esi, 1
sub edi, ecx
sub esi, eax
mov dword [ebp - 0x1c], edi
cmp dword [0x100988d0], 0
je 0x1000b11f
mov eax, dword [0x100987b4]
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x43020000
push eax
call dword [ecx + 0x2c]
mov eax, dword [0x100987b4]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
movd xmm0, edi
lea eax, [esi + 0x41]
cvtdq2ps xmm0, xmm0
movd xmm1, eax
lea eax, [edi + 0x14a]
movss dword [ebp - 0x40], xmm0
movd xmm0, eax
mov eax, dword [0x100987b4]
cvtdq2ps xmm1, xmm1
push eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x3c], xmm1
movss dword [ebp - 0x38], xmm0
movss dword [ebp - 0x34], xmm1
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [0x100987b4]
lea edx, [ebp - 0x40]
push 0xc8000000
push 2
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov eax, dword [0x100987b4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov ecx, dword [0x10096ed4]
movzx eax, byte [0x10096ed0]
or ecx, 0xffffff00
mov edx, dword [ebp - 0x5c]
movss xmm3, dword [0x10090c30]
movss xmm2, dword [0x10090c4c]
shl ecx, 8
or ecx, eax
movd xmm1, esi
movzx eax, byte [0x10096cd4]
movd xmm0, edi
shl ecx, 8
cvtdq2ps xmm1, xmm1
or ecx, eax
push ecx
mov dword [esp], 0x40000000
cvtdq2ps xmm0, xmm0
call fcn.10009c40
add esp, 4
mov ecx, 0xd4
xor edx, edx
nop dword [eax + eax]
mov al, byte [edx + 0x1008bc70]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x54], al
and ecx, 0x800000ff
jns 0x1000ad2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x23
jl 0x1000ad10
mov byte [ebp - 0x31], 0
lea eax, [ebp - 0x54]
mov dword [ebp - 4], 6
push eax
push 0xffccffff
lea eax, [esi + 8]
add edi, 0xa0
push eax
push edi
push dword [0x1009889c]
mov dword [ebp - 0x58], edi
call fcn.10009b80
add esp, 0x14
mov ecx, 0x14
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + str._pvv9RTQX_JNUWH]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x4c], al
and ecx, 0x800000ff
jns 0x1000ad8d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x1c
jl 0x1000ad70
mov byte [ebp - 0x30], 0
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 7
push eax
push 0xffccffff
lea eax, [esi + 0x21]
push eax
push edi
push dword [0x1009889c]
call fcn.10009b80
mov eax, dword [0x1009696c]
add esp, 0x14
mov edi, dword [ebp - 0x1c]
cmp eax, 0x28
mov ecx, 0xff00ff00
cmovle edi, ecx
cmp eax, 0x1e
mov ecx, 0xffffff00
cmovle edi, ecx
cmp eax, 0x14
mov ecx, 0xffffc000
cmovle edi, ecx
cmp eax, 0xa
mov ecx, 0xffff0000
cmovle edi, ecx
xor edx, edx
test eax, eax
jg 0x1000ae6e
mov ecx, 0x3b
nop dword [eax]
mov al, byte [edx + str.zKM]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x40], al
and ecx, 0x800000ff
jns 0x1000ae1d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xf
jl 0x1000ae00
mov byte [ebp - 0x31], 0
mov dword [ebp - 4], 8
lea eax, [ebp - 0x40]
mov ecx, dword [0x10096ed4]
push eax
movzx eax, byte [0x10096ed0]
or ecx, 0xffffff00
shl ecx, 8
or ecx, eax
movzx eax, byte [0x10096cd4]
shl ecx, 8
or ecx, eax
lea eax, [esi + 0x3a]
push ecx
push eax
push dword [ebp - 0x58]
push dword [0x1009889c]
call fcn.10009b80
add esp, 0x14
jmp 0x1000aec7
mov ecx, 0xa3
mov al, byte [edx + 0x1008bcb4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x54], al
and ecx, 0x800000ff
jns 0x1000ae90
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x26
jl 0x1000ae73
mov byte [ebp - 0x2e], 0
mov dword [ebp - 4], 9
lea eax, [ebp - 0x54]
push dword [0x100964ec]
push dword [0x1009696c]
push eax
push edi
lea eax, [esi + 0x3a]
push eax
push dword [ebp - 0x58]
push dword [0x1009889c]
call fcn.10009b80
add esp, 0x1c
mov dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x55]
mov eax, dword [ebp - 0x1c]
add eax, 0x8a
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x58]
cmp ecx, esi
jl 0x1000b059
lea eax, [esi + 0x28]
cmp ecx, eax
jg 0x1000b059
mov ecx, dword [ebp - 0x1c]
cmp ecx, edi
jl 0x1000b059
lea eax, [edi + 0x19]
cmp ecx, eax
jg 0x1000b059
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov ecx, dword [ebp - 0x5c]
push 0
push ecx
mov dword [esp], 0
movd xmm1, edi
cvttss2si eax, xmm0
mov esi, dword [ecx]
push 0xff000000
push 1
addss xmm0, dword [0x10090c00]
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x40], eax
cvttss2si eax, xmm1
mov dword [ebp - 0x3c], eax
cvttss2si eax, xmm0
movaps xmm0, xmm1
addss xmm0, dword [0x10090bf0]
mov dword [ebp - 0x38], eax
cvttss2si eax, xmm0
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x40]
push eax
push 1
push ecx
call dword [esi + 0xac]
mov esi, dword [ebp - 0x58]
mov edx, dword [ebp - 0x5c]
movss xmm3, dword [0x10090bf0]
movss xmm2, dword [0x10090c00]
movd xmm1, edi
movd xmm0, esi
cvtdq2ps xmm1, xmm1
push ecx
mov ecx, 0xff00ff00
mov dword [esp], 0x3f800000
cvtdq2ps xmm0, xmm0
call fcn.10009c40
add esp, 4
mov word [ebp - 0x58], 0x4b4f
mov byte [ebp - 0x56], 0
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 0xa
push eax
push 0xffccffff
lea eax, [edi + 3]
push eax
lea eax, [esi + 0x14]
push eax
push dword [0x1009889c]
call fcn.10009b80
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
mov dword [0x100988e8], 0x10004580
push 1
call fcn.10004580
cwde
shr eax, 0x10
test eax, eax
je 0x1000b04d
cmp byte [0x1009aab8], 0
je 0x1000b037
cmp dword [0x1009aabc], 0
je 0x1000b11f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x1009aabc], eax
ja 0x1000b11f
mov byte [0x1009aab8], 1
mov dword [0x100989cc], 1
jmp 0x1000b11f
mov byte [0x1009aab8], 0
jmp 0x1000b11f
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mov ecx, dword [ebp - 0x5c]
push 0
push ecx
mov dword [esp], 0
movd xmm1, edi
cvttss2si eax, xmm0
mov edx, dword [ecx]
push 0xff000000
push 1
addss xmm0, dword [0x10090c00]
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x40], eax
cvttss2si eax, xmm1
mov dword [ebp - 0x3c], eax
cvttss2si eax, xmm0
movaps xmm0, xmm1
addss xmm0, dword [0x10090bf0]
mov dword [ebp - 0x38], eax
cvttss2si eax, xmm0
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x40]
push eax
push 1
push ecx
call dword [edx + 0xac]
mov edx, dword [ebp - 0x5c]
movss xmm3, dword [0x10090bf0]
movss xmm2, dword [0x10090c00]
movd xmm1, edi
movd xmm0, esi
cvtdq2ps xmm1, xmm1
push ecx
mov ecx, 0xffff0000
mov dword [esp], 0x3f800000
cvtdq2ps xmm0, xmm0
call fcn.10009c40
add esp, 4
mov word [ebp - 0x5c], 0x4b4f
mov byte [ebp - 0x5a], 0
lea eax, [ebp - 0x5c]
mov dword [ebp - 4], 0xb
push eax
push 0xffccffff
lea eax, [edi + 3]
push eax
lea eax, [esi + 0x14]
push eax
push dword [0x1009889c]
call fcn.10009b80
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100773eb
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret