Function at 0x1002dd80
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c0101
mov eax, dword fs:[0]
push eax
sub esp, 0x25c
mov eax, dword [0x100f6f50]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov esi, edx
xor eax, eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xec], eax
mov byte [ebp - 0x8c], al
mov ebx, 1
mov dword [ebp - 4], ebx
mov byte [ebp - 0xb0], al
mov byte [ebp - 4], 3
mov byte [ebp - 0x20], al
mov byte [ebp - 4], 5
mov byte [ebp - 0xa4], al
mov byte [ebp - 4], 7
mov byte [ebp - 0xbc], al
mov byte [ebp - 4], 9
mov byte [ebp - 0xd4], al
mov byte [ebp - 4], 0xb
mov byte [ebp - 0xc8], al
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xf8], 7
mov dword [ebp - 0xfc], eax
mov word [ebp - 0x10c], ax
push 0x23
push str.SoftwareNVIDIA_CorporationLogging
lea ecx, [ebp - 0x110]
call fcn.10058390
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xe4], ebx
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x8c]
push edx
mov edx, edi
call fcn.1002b3c0
add esp, 8
test eax, eax
jne 0x1002dffe
push esi
lea eax, [ebp - 0x1a4]
push eax
mov edx, str.Processes_
call fcn.1002b470
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xe4], 3
lea ecx, [ebp - 0x174]
push ecx
mov edi, 0x100d1658
mov ecx, eax
call fcn.10040560
add esp, 0xc
mov dword [ebp - 4], 0x10
mov ebx, 7
mov dword [ebp - 0xe4], ebx
push eax
lea edx, [ebp - 0xb0]
push edx
mov edx, dword [ebp - 0x88]
call fcn.1002b3c0
add esp, 8
test eax, eax
jne 0x1002dffe
push str.Definitions
lea ecx, [ebp - 0x150]
call fcn.10058480
mov dword [ebp - 4], 0x11
mov ebx, 0xf
mov dword [ebp - 0xe4], ebx
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x88]
call fcn.1002b3c0
add esp, 8
test eax, eax
jne 0x1002dffe
push str.LogChannels
lea ecx, [ebp - 0x130]
call fcn.10058480
mov dword [ebp - 4], 0x12
mov ebx, 0x1f
mov dword [ebp - 0xe4], ebx
lea edx, [ebp - 0x130]
push edx
lea eax, [ebp - 0xa4]
push eax
mov edx, dword [ebp - 0x1c]
call fcn.1002b3c0
add esp, 8
test eax, eax
jne 0x1002dffe
push str.LogPrinters
lea ecx, [ebp - 0x5c]
call fcn.10058480
mov dword [ebp - 4], 0x13
mov ebx, 0x3f
mov dword [ebp - 0xe4], ebx
lea ecx, [ebp - 0x5c]
push ecx
lea edx, [ebp - 0xbc]
push edx
mov edx, dword [ebp - 0x1c]
call fcn.1002b3c0
add esp, 8
test eax, eax
jne 0x1002dffe
push str.LogManagers
lea ecx, [ebp - 0x3c]
call fcn.10058480
mov dword [ebp - 4], 0x14
mov ebx, 0x7f
mov dword [ebp - 0xe4], ebx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xd4]
push ecx
mov edx, dword [ebp - 0x1c]
call fcn.1002b3c0
add esp, 8
test eax, eax
jne 0x1002dffe
push str.LogFilters
lea ecx, [ebp - 0x7c]
call fcn.10058480
mov dword [ebp - 4], 0x15
mov ebx, 0xff
mov dword [ebp - 0xe4], ebx
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0xc8]
push eax
mov edx, dword [ebp - 0x1c]
call fcn.1002b3c0
add esp, 8
test eax, eax
mov byte [ebp - 0xe5], 1
je 0x1002e005
mov byte [ebp - 0xe5], 0
mov dword [ebp - 4], 0x14
mov esi, 8
test bl, bl
jns 0x1002e049
and ebx, 0xffffff7f
mov dword [ebp - 0xe4], ebx
cmp dword [ebp - 0x64], esi
jb 0x1002e032
mov ecx, dword [ebp - 0x78]
push ecx
call fcn.10063187
add esp, 4
mov edi, 7
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x68], 0
xor edx, edx
mov word [ebp - 0x78], dx
jmp 0x1002e04e
mov edi, 7
mov dword [ebp - 4], 0x13
test bl, 0x40
je 0x1002e084
and ebx, 0xffffffbf
mov dword [ebp - 0xe4], ebx
cmp dword [ebp - 0x24], esi
jb 0x1002e074
mov eax, dword [ebp - 0x38]
push eax
call fcn.10063187
add esp, 4
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], 0
xor ecx, ecx
mov word [ebp - 0x38], cx
mov dword [ebp - 4], 0x12
test bl, 0x20
je 0x1002e0ba
and ebx, 0xffffffdf
mov dword [ebp - 0xe4], ebx
cmp dword [ebp - 0x44], esi
jb 0x1002e0aa
mov edx, dword [ebp - 0x58]
push edx
call fcn.10063187
add esp, 4
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], 0
xor eax, eax
mov word [ebp - 0x58], ax
mov dword [ebp - 4], 0x11
test bl, 0x10
je 0x1002e0ff
and ebx, 0xffffffef
mov dword [ebp - 0xe4], ebx
cmp dword [ebp - 0x118], esi
jb 0x1002e0e6
mov ecx, dword [ebp - 0x12c]
push ecx
call fcn.10063187
add esp, 4
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x11c], 0
xor edx, edx
mov word [ebp - 0x12c], dx
mov dword [ebp - 4], 0x10
test bl, 8
je 0x1002e144
and ebx, 0xfffffff7
mov dword [ebp - 0xe4], ebx
cmp dword [ebp - 0x138], esi
jb 0x1002e12b
mov eax, dword [ebp - 0x14c]
push eax
call fcn.10063187
add esp, 4
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x13c], 0
xor ecx, ecx
mov word [ebp - 0x14c], cx
mov dword [ebp - 4], 0xf
test bl, 4
je 0x1002e189
and ebx, 0xfffffffb
mov dword [ebp - 0xe4], ebx
cmp dword [ebp - 0x15c], esi
jb 0x1002e170
mov edx, dword [ebp - 0x170]
push edx
call fcn.10063187
add esp, 4
mov dword [ebp - 0x15c], edi
mov dword [ebp - 0x160], 0
xor eax, eax
mov word [ebp - 0x170], ax
mov dword [ebp - 4], 0xe
test bl, 2
je 0x1002e1ce
and ebx, 0xfffffffd
mov dword [ebp - 0xe4], ebx
cmp dword [ebp - 0x18c], esi
jb 0x1002e1b5
mov ecx, dword [ebp - 0x1a0]
push ecx
call fcn.10063187
add esp, 4
mov dword [ebp - 0x18c], edi
mov dword [ebp - 0x190], 0
xor edx, edx
mov word [ebp - 0x1a0], dx
mov dword [ebp - 4], 0xd
test bl, 1
je 0x1002e213
and ebx, 0xfffffffe
mov dword [ebp - 0xe4], ebx
cmp dword [ebp - 0xf8], esi
jb 0x1002e1fa
mov eax, dword [ebp - 0x10c]
push eax
call fcn.10063187
add esp, 4
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0xfc], 0
xor ecx, ecx
mov word [ebp - 0x10c], cx
cmp byte [ebp - 0xe5], 0
je 0x1002ea10
lea edx, [ebp - 0x178]
push edx
lea eax, [ebp - 0xac]
push eax
call fcn.10026f60
mov dword [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x1a8]
push ecx
call fcn.100263f0
add esp, 8
mov byte [ebp - 4], 0x1d
lea edx, [ebp - 0x178]
push edx
call fcn.10027630
mov byte [ebp - 4], 0x1f
test ebx, 0x1000
je 0x1002e27e
and ebx, 0xffffefff
mov dword [ebp - 0xe4], ebx
lea eax, [ebp - 0x154]
push eax
call fcn.10027690
mov byte [ebp - 4], 0x20
test ebx, 0x800
je 0x1002e2a2
and ebx, 0xfffff7ff
mov dword [ebp - 0xe4], ebx
lea ecx, [ebp - 0x134]
push ecx
call fcn.10027690
mov byte [ebp - 4], 0x21
test ebx, 0x400
je 0x1002e2c3
and ebx, 0xfffffbff
mov dword [ebp - 0xe4], ebx
lea edx, [ebp - 0x80]
push edx
call fcn.10027690
mov byte [ebp - 4], 0x22
test ebx, 0x200
je 0x1002e2e4
and ebx, 0xfffffdff
mov dword [ebp - 0xe4], ebx
lea eax, [ebp - 0x40]
push eax
call fcn.10027690
mov byte [ebp - 4], 0x23
test ebx, 0x100
je 0x1002e305
and ebx, 0xfffffeff
mov dword [ebp - 0xe4], ebx
lea ecx, [ebp - 0x60]
push ecx
call fcn.10027690
mov edx, dword [ebp - 0x190]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x184], eax
lea edi, [ebp - 0x188]
mov dword [ebp - 0x158], edi
mov dword [ebp - 4], 0x29
test ebx, 0x80000
je 0x1002e352
and ebx, 0xfff7ffff
mov dword [ebp - 0xe4], ebx
lea eax, [ebp - 0x178]
push eax
call fcn.10027690
mov dword [ebp - 4], 0x28
test ebx, 0x40000
je 0x1002e379
and ebx, 0xfffbffff
mov dword [ebp - 0xe4], ebx
lea ecx, [ebp - 0x154]
push ecx
call fcn.10027690
mov dword [ebp - 4], 0x27
test ebx, 0x20000
je 0x1002e3a0
and ebx, 0xfffdffff
mov dword [ebp - 0xe4], ebx
lea edx, [ebp - 0x134]
push edx
call fcn.10027690
mov dword [ebp - 4], 0x26
test ebx, 0x10000
je 0x1002e3c4
and ebx, 0xfffeffff
mov dword [ebp - 0xe4], ebx
lea eax, [ebp - 0x80]
push eax
call fcn.10027690
mov dword [ebp - 4], 0x25
test ebx, 0x8000
je 0x1002e3e8
and ebx, 0xffff7fff
mov dword [ebp - 0xe4], ebx
lea ecx, [ebp - 0x40]
push ecx
call fcn.10027690
mov dword [ebp - 4], 0x24
test ebx, 0x4000
je 0x1002e40c
and ebx, 0xffffbfff
mov dword [ebp - 0xe4], ebx
lea edx, [ebp - 0x60]
push edx
call fcn.10027690
mov esi, 0x23
mov dword [ebp - 4], esi
test ebx, 0x2000
je 0x1002e434
and ebx, 0xffffdfff
mov dword [ebp - 0xe4], ebx
lea eax, [ebp - 0x114]
push eax
call fcn.10027690
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x180]
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 4], 0x30
test ebx, 0x4000000
je 0x1002e47f
and ebx, 0xfbffffff
mov dword [ebp - 0xe4], ebx
lea edx, [ebp - 0x178]
push edx
call fcn.10027690
mov dword [ebp - 4], 0x2f
test ebx, 0x2000000
je 0x1002e4a6
and ebx, 0xfdffffff
mov dword [ebp - 0xe4], ebx
lea eax, [ebp - 0x154]
push eax
call fcn.10027690
mov dword [ebp - 4], 0x2e
test ebx, 0x1000000
je 0x1002e4cd
and ebx, 0xfeffffff
mov dword [ebp - 0xe4], ebx
lea ecx, [ebp - 0x134]
push ecx
call fcn.10027690
mov dword [ebp - 4], 0x2d
test ebx, 0x800000
je 0x1002e4f1
and ebx, 0xff7fffff
mov dword [ebp - 0xe4], ebx
lea edx, [ebp - 0x80]
push edx
call fcn.10027690
mov dword [ebp - 4], 0x2c
test ebx, 0x400000
je 0x1002e515
and ebx, 0xffbfffff
mov dword [ebp - 0xe4], ebx
lea eax, [ebp - 0x40]
push eax
call fcn.10027690
mov dword [ebp - 4], 0x2b
test ebx, 0x200000
je 0x1002e539
and ebx, 0xffdfffff
mov dword [ebp - 0xe4], ebx
lea ecx, [ebp - 0x60]
push ecx
call fcn.10027690
mov dword [ebp - 4], esi
test ebx, 0x100000
je 0x1002e55c
and ebx, 0xffefffff
mov dword [ebp - 0xe4], ebx
lea edx, [ebp - 0x114]
push edx
call fcn.10027690
mov bl, 1
mov edi, edi
test bl, bl
je 0x1002e58b
mov eax, dword [edi]
test eax, eax
je 0x1002e574
mov ecx, dword [ebp - 0xf4]
cmp eax, dword [ecx]
je 0x1002e579
call fcn.1008ddef
mov edx, dword [edi + 4]
mov eax, dword [ebp - 0xf4]
cmp edx, dword [eax + 4]
je 0x1002e58b
mov bl, 1
jmp 0x1002e58d
xor bl, bl
mov dword [ebp - 4], 0x34
test dword [ebp - 0xe4], 0x40000000
je 0x1002e5b6
and dword [ebp - 0xe4], 0xbfffffff
lea ecx, [ebp - 0x208]
push ecx
call fcn.10027690
mov dword [ebp - 4], 0x23
test dword [ebp - 0xe4], 0x20000000
je 0x1002e5df
and dword [ebp - 0xe4], 0xdfffffff
lea edx, [ebp - 0x1c8]
push edx
call fcn.10027690
test bl, bl
je 0x1002ea00
xor bl, bl
mov eax, dword [edi]
test eax, eax
jne 0x1002e7d3
call fcn.1008ddef
xor eax, eax
mov esi, dword [edi + 4]
cmp esi, dword [eax + 0x18]
jne 0x1002e607
call fcn.1008ddef
lea eax, [esi + 0xc]
mov esi, 7
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x68], 0
xor ecx, ecx
mov word [ebp - 0x78], cx
push 0xffffffffffffffff
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.10059df0
mov dword [ebp - 4], 0x39
test byte [ebp - 0xec], 1
je 0x1002e64e
and dword [ebp - 0xec], 0xfffffffe
lea edx, [ebp - 0x248]
push edx
call fcn.10027690
mov byte [ebp - 4], 0x3a
test dword [ebp - 0xe4], 0x80000000
je 0x1002e674
and dword [ebp - 0xe4], 0x7fffffff
lea eax, [ebp - 0x1e8]
push eax
call fcn.10027690
test bl, bl
jne 0x1002e974
mov byte [ebp - 0x98], bl
mov byte [ebp - 4], 0x3c
mov byte [ebp - 0xe0], bl
mov byte [ebp - 4], 0x3e
mov dword [ebp - 0x24], esi
xor edi, edi
mov dword [ebp - 0x28], edi
xor ecx, ecx
mov word [ebp - 0x38], cx
mov byte [ebp - 4], 0x3f
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], edi
xor edx, edx
mov word [ebp - 0x58], dx
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x178]
push eax
call fcn.10026530
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x98]
push edx
mov edx, dword [ebp - 0xa0]
call fcn.1002b3c0
add esp, 8
test eax, eax
jne 0x1002e7da
mov dword [ebp - 0xf8], esi
mov dword [ebp - 0xfc], edi
mov word [ebp - 0x10c], ax
push 9
push str.LogFilter
lea ecx, [ebp - 0x110]
call fcn.10058390
mov byte [ebp - 4], 0x42
mov ebx, dword [ebp - 0xec]
or ebx, 2
mov dword [ebp - 0xec], ebx
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x94]
push edx
lea ecx, [ebp - 0x110]
call fcn.1002b870
test eax, eax
jne 0x1002e7e0
push str.LogPrinter
lea ecx, [ebp - 0x130]
call fcn.10058480
mov dword [ebp - 4], 0x43
or ebx, 4
mov dword [ebp - 0xec], ebx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0x130]
call fcn.1002b870
test eax, eax
jne 0x1002e7e0
push str.LogManagers
lea ecx, [ebp - 0x150]
call fcn.10058480
mov dword [ebp - 4], 0x44
or ebx, 8
mov dword [ebp - 0xec], ebx
lea edx, [ebp - 0x150]
push edx
lea eax, [ebp - 0xe0]
push eax
mov edx, dword [ebp - 0x94]
call fcn.1002b3c0
add esp, 8
test eax, eax
jne 0x1002e7e0
lea ecx, [ebp - 0x178]
push ecx
lea edx, [ebp - 0xdc]
push edx
call fcn.10026a00
test eax, eax
jne 0x1002e7e0
mov byte [ebp - 0xed], 1
jmp 0x1002e7e7
mov eax, dword [eax]
jmp 0x1002e5fa
mov ebx, dword [ebp - 0xec]
mov byte [ebp - 0xed], 0
mov dword [ebp - 4], 0x43
test bl, 8
je 0x1002e829
and ebx, 0xfffffff7
mov dword [ebp - 0xec], ebx
cmp dword [ebp - 0x138], 8
jb 0x1002e814
mov eax, dword [ebp - 0x14c]
push eax
call fcn.10063187
add esp, 4
mov dword [ebp - 0x138], esi
mov dword [ebp - 0x13c], edi
xor ecx, ecx
mov word [ebp - 0x14c], cx
mov dword [ebp - 4], 0x42
test bl, 4
je 0x1002e86b
and ebx, 0xfffffffb
mov dword [ebp - 0xec], ebx
cmp dword [ebp - 0x118], 8
jb 0x1002e856
mov edx, dword [ebp - 0x12c]
push edx
call fcn.10063187
add esp, 4
mov dword [ebp - 0x118], esi
mov dword [ebp - 0x11c], edi
xor eax, eax
mov word [ebp - 0x12c], ax
mov dword [ebp - 4], 0x41
test bl, 2
je 0x1002e8ad
and ebx, 0xfffffffd
mov dword [ebp - 0xec], ebx
cmp dword [ebp - 0xf8], 8
jb 0x1002e898
mov ecx, dword [ebp - 0x10c]
push ecx
call fcn.10063187
add esp, 4
mov dword [ebp - 0xf8], esi
mov dword [ebp - 0xfc], edi
xor edx, edx
mov word [ebp - 0x10c], dx
cmp byte [ebp - 0xed], 0
je 0x1002e8d7
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x3c]
call fcn.1002da30
mov dword [ebp - 4], 0x41
mov byte [ebp - 4], 0x40
lea edx, [ebp - 0x178]
push edx
call fcn.10027630
mov byte [ebp - 4], 0x3f
mov edi, 8
cmp dword [ebp - 0x44], edi
jb 0x1002e901
mov eax, dword [ebp - 0x58]
push eax
call fcn.10063187
add esp, 4
mov ebx, 7
mov dword [ebp - 0x44], ebx
xor esi, esi
mov dword [ebp - 0x48], esi
xor ecx, ecx
mov word [ebp - 0x58], cx
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x24], edi
jb 0x1002e929
mov edx, dword [ebp - 0x38]
push edx
call fcn.10063187
add esp, 4
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], esi
xor eax, eax
mov word [ebp - 0x38], ax
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xe0]
push ecx
call fcn.1002b270
mov byte [ebp - 4], 0x3a
lea edx, [ebp - 0x98]
push edx
call fcn.1002b270
mov bl, 1
mov esi, 7
mov edi, dword [ebp - 0x158]
jmp 0x1002e674
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x64], 8
jb 0x1002e98a
mov eax, dword [ebp - 0x78]
push eax
call fcn.10063187
add esp, 4
mov dword [ebp - 0x64], 7
mov dword [ebp - 0x68], 0
xor ecx, ecx
mov word [ebp - 0x78], cx
mov esi, edi
call fcn.1002b140
mov dword [ebp - 4], 0x32
test dword [ebp - 0xe4], 0x10000000
je 0x1002e9ce
and dword [ebp - 0xe4], 0xefffffff
lea edx, [ebp - 0x228]
push edx
call fcn.10027690
mov dword [ebp - 4], 0x23
test dword [ebp - 0xe4], 0x8000000
je 0x1002e560
and dword [ebp - 0xe4], 0xf7ffffff
lea eax, [ebp - 0x268]
push eax
call fcn.10027690
jmp 0x1002e560
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1a8]
push ecx
call fcn.10027630
mov byte [ebp - 4], 0xb
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp byte [ebp - 0xc8], 0
je 0x1002ea33
mov edx, dword [ebp - 0xc4]
push edx
call esi
mov byte [ebp - 0xc8], 0
mov byte [ebp - 4], 9
cmp byte [ebp - 0xd4], 0
je 0x1002ea50
mov eax, dword [ebp - 0xd0]
push eax
call esi
mov byte [ebp - 0xd4], 0
mov byte [ebp - 4], 7
cmp byte [ebp - 0xbc], 0
je 0x1002ea6d
mov ecx, dword [ebp - 0xb8]
push ecx
call esi
mov byte [ebp - 0xbc], 0
mov byte [ebp - 4], 5
cmp byte [ebp - 0xa4], 0
je 0x1002ea8a
mov edx, dword [ebp - 0xa0]
push edx
call esi
mov byte [ebp - 0xa4], 0
mov byte [ebp - 4], 3
cmp byte [ebp - 0x20], 0
je 0x1002ea9e
mov eax, dword [ebp - 0x1c]
push eax
call esi
mov byte [ebp - 0x20], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0xb0], 0
je 0x1002eabb
mov ecx, dword [ebp - 0xac]
push ecx
call esi
mov byte [ebp - 0xb0], 0
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x8c], 0
je 0x1002eadb
mov edx, dword [ebp - 0x88]
push edx
call esi
mov byte [ebp - 0x8c], 0
mov al, byte [ebp - 0xe5]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1008db44
mov esp, ebp
pop ebp
ret