Function at 0x4adc40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x637a6b
mov eax, dword fs:[0]
push eax
sub esp, 0x64
push ebx
push esi
push edi
mov eax, dword [0x6bc858]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0xf
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x58]
lea eax, [ebx + 0x18c]
push ecx
push eax
mov dword [ebp - 0x1c], eax
call fcn.004c94d0
mov byte [ebp - 4], 0x10
lea esp, [esp]
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x64]
push edx
push eax
call fcn.00434830
mov esi, eax
lea edi, [ebp - 0x58]
mov byte [ebp - 4], 0x11
call fcn.00450b30
test al, al
push 3
lea ecx, [ebp - 0x20]
sete byte [ebp - 0xd]
mov byte [ebp - 4], 0x10
call fcn.00564140
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x4add0d
cmp dword [eax + 4], 0
lea esi, [eax + 4]
je 0x4adcea
mov eax, dword [esi]
lea ecx, [ebp - 0x64]
cmp eax, ecx
je 0x4adce5
cmp dword [eax + 4], 0
lea esi, [eax + 4]
jne 0x4adcd3
cmp dword [esi], 0
jne 0x4add01
push 0xb5
push 0x676220
push str.ITERATOR_LIST_CORRUPTED_
call fcn.00563e60
add esp, 0xc
mov edx, dword [ebp - 0x60]
mov dword [esi], edx
mov dword [ebp - 0x64], 0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x10
call fcn.00564180
cmp byte [ebp - 0xd], 0
je 0x4ade1e
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x4add3c
mov ecx, dword [eax]
test ecx, ecx
je 0x4add3c
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x4add3c
cmp eax, dword [ecx + 4]
jne 0x4add92
push 0xcf
push 0x6781a0
push str.list_iterator_not_dereferencable
call fcn.00563e60
push str._Standard_C_Libraries_Out_of_Range___0
push 0
push 0xd0
push 0x6781a0
push 2
call fcn.005f3d20
add esp, 0x20
cmp eax, 1
jne 0x4add71
int3
push 0
push 0xd0
push 0x6781a0
push 0x681db8
push str._out_of_range_
call fcn.005f5140
mov eax, dword [ebp - 0x50]
add esp, 0x14
mov eax, dword [eax + 8]
test eax, eax
je 0x4adda2
push eax
call fcn.005f0cb0
add esp, 4
lea eax, [ebp - 0x70]
push eax
lea ebx, [ebp - 0x58]
call fcn.00451b40
push 3
lea ecx, [ebp - 0x18]
call fcn.00564140
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x4ade0a
cmp dword [eax + 4], 0
lea esi, [eax + 4]
je 0x4adde7
lea esp, [esp]
mov eax, dword [esi]
lea ecx, [ebp - 0x70]
cmp eax, ecx
je 0x4adde2
cmp dword [eax + 4], 0
lea esi, [eax + 4]
jne 0x4addd0
cmp dword [esi], 0
jne 0x4addfe
push 0xb5
push 0x676220
push str.ITERATOR_LIST_CORRUPTED_
call fcn.00563e60
add esp, 0xc
mov edx, dword [ebp - 0x6c]
mov dword [esi], edx
mov dword [ebp - 0x70], 0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x10
call fcn.00564180
mov ebx, dword [ebp + 8]
jmp 0x4adc90
mov esi, dword [ebp - 0x1c]
call fcn.004af8b0
lea ecx, [ebp - 0x4c]
lea eax, [ebx + 0x19c]
push ecx
push eax
mov dword [ebp - 0x18], eax
call fcn.004c94d0
mov byte [ebp - 4], 0x14
lea ecx, [ecx]
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x70]
push edx
push eax
call fcn.00434830
mov esi, eax
lea edi, [ebp - 0x4c]
mov byte [ebp - 4], 0x15
call fcn.0049abe0
test al, al
push 3
lea ecx, [ebp - 0x20]
sete byte [ebp - 0xd]
mov byte [ebp - 4], 0x14
call fcn.00564140
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x4adebd
cmp dword [eax + 4], 0
lea esi, [eax + 4]
je 0x4ade9a
mov eax, dword [esi]
lea ecx, [ebp - 0x70]
cmp eax, ecx
je 0x4ade95
cmp dword [eax + 4], 0
lea esi, [eax + 4]
jne 0x4ade83
cmp dword [esi], 0
jne 0x4adeb1
push 0xb5
push 0x676220
push str.ITERATOR_LIST_CORRUPTED_
call fcn.00563e60
add esp, 0xc
mov edx, dword [ebp - 0x6c]
mov dword [esi], edx
mov dword [ebp - 0x70], 0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x14
call fcn.00564180
cmp byte [ebp - 0xd], 0
je 0x4ae0ae
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x4adeec
mov edx, dword [ecx]
test edx, edx
je 0x4adeec
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4adeec
cmp eax, dword [edx + 4]
jne 0x4adf45
push 0xcf
push 0x6781a0
push str.list_iterator_not_dereferencable
call fcn.00563e60
push str._Standard_C_Libraries_Out_of_Range___0
push 0
push 0xd0
push 0x6781a0
push 2
call fcn.005f3d20
add esp, 0x20
cmp eax, 1
jne 0x4adf21
int3
push 0
push 0xd0
push 0x6781a0
push 0x68b1c8
push str._out_of_range_
call fcn.005f5140
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x4c]
add esp, 0x14
cmp dword [eax + 8], 0
je 0x4ae036
test ecx, ecx
je 0x4adf5e
mov ecx, dword [ecx]
test ecx, ecx
je 0x4adf5e
cmp eax, dword [ecx + 4]
jne 0x4adfb4
push 0xcf
push 0x6781a0
push str.list_iterator_not_dereferencable
call fcn.00563e60
push str._Standard_C_Libraries_Out_of_Range___0
push 0
push 0xd0
push 0x6781a0
push 2
call fcn.005f3d20
add esp, 0x20
cmp eax, 1
jne 0x4adf93
int3
push 0
push 0xd0
push 0x6781a0
push 0x68b1c8
push str._out_of_range_
call fcn.005f5140
mov eax, dword [ebp - 0x44]
add esp, 0x14
mov eax, dword [eax + 8]
push eax
call fcn.005f0cb0
mov eax, dword [ebp - 0x4c]
add esp, 4
test eax, eax
je 0x4adfd9
mov eax, dword [eax]
test eax, eax
je 0x4adfd9
mov ecx, dword [ebp - 0x44]
test ecx, ecx
je 0x4adfd9
cmp ecx, dword [eax + 4]
jne 0x4ae02f
push 0xcf
push 0x6781a0
push str.list_iterator_not_dereferencable
call fcn.00563e60
push str._Standard_C_Libraries_Out_of_Range___0
push 0
push 0xd0
push 0x6781a0
push 2
call fcn.005f3d20
add esp, 0x20
cmp eax, 1
jne 0x4ae00e
int3
push 0
push 0xd0
push 0x6781a0
push 0x68b1c8
push str._out_of_range_
call fcn.005f5140
mov ecx, dword [ebp - 0x44]
add esp, 0x14
mov dword [ecx + 8], 0
lea eax, [ebp - 0x64]
push eax
lea ebx, [ebp - 0x4c]
call fcn.0049a600
push 3
lea ecx, [ebp - 0x14]
call fcn.00564140
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x4ae09a
cmp dword [eax + 4], 0
lea esi, [eax + 4]
je 0x4ae077
mov eax, dword [esi]
lea ecx, [ebp - 0x64]
cmp eax, ecx
je 0x4ae072
cmp dword [eax + 4], 0
lea esi, [eax + 4]
jne 0x4ae060
cmp dword [esi], 0
jne 0x4ae08e
push 0xb5
push 0x676220
push str.ITERATOR_LIST_CORRUPTED_
call fcn.00563e60
add esp, 0xc
mov edx, dword [ebp - 0x60]
mov dword [esi], edx
mov dword [ebp - 0x64], 0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x14
call fcn.00564180
mov ebx, dword [ebp + 8]
jmp 0x4ade40
mov esi, dword [ebp - 0x18]
call fcn.004af8b0
lea ecx, [ebp - 0x40]
lea eax, [ebx + 0x1bc]
push ecx
push eax
mov dword [ebp - 0x14], eax
call fcn.004c94d0
mov byte [ebp - 4], 0x18
lea ecx, [ecx]
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x70]
push edx
push eax
call fcn.00434830
mov esi, eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x19
call fcn.0049ace0
test al, al
push 3
lea ecx, [ebp - 0x20]
sete byte [ebp - 0xd]
mov byte [ebp - 4], 0x18
call fcn.00564140
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x4ae14d
cmp dword [eax + 4], 0
lea esi, [eax + 4]
je 0x4ae12a
mov eax, dword [esi]
lea ecx, [ebp - 0x70]
cmp eax, ecx
je 0x4ae125
cmp dword [eax + 4], 0
lea esi, [eax + 4]
jne 0x4ae113
cmp dword [esi], 0
jne 0x4ae141
push 0xb5
push 0x676220
push str.ITERATOR_LIST_CORRUPTED_
call fcn.00563e60
add esp, 0xc
mov edx, dword [ebp - 0x6c]
mov dword [esi], edx
mov dword [ebp - 0x70], 0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x18
call fcn.00564180
cmp byte [ebp - 0xd], 0
je 0x4ae33e
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x4ae17c
mov edx, dword [ecx]
test edx, edx
je 0x4ae17c
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x4ae17c
cmp eax, dword [edx + 4]
jne 0x4ae1d5
push 0xcf
push 0x6781a0
push str.list_iterator_not_dereferencable
call fcn.00563e60
push str._Standard_C_Libraries_Out_of_Range___0
push 0
push 0xd0
push 0x6781a0
push 2
call fcn.005f3d20
add esp, 0x20
cmp eax, 1
jne 0x4ae1b1
int3
push 0
push 0xd0
push 0x6781a0
push 0x68b3b8
push str._out_of_range_
call fcn.005f5140
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
add esp, 0x14
cmp dword [eax + 8], 0
je 0x4ae2c6
test ecx, ecx
je 0x4ae1ee
mov ecx, dword [ecx]
test ecx, ecx
je 0x4ae1ee
cmp eax, dword [ecx + 4]
jne 0x4ae244
push 0xcf
push 0x6781a0
push str.list_iterator_not_dereferencable
call fcn.00563e60
push str._Standard_C_Libraries_Out_of_Range___0
push 0
push 0xd0
push 0x6781a0
push 2
call fcn.005f3d20
add esp, 0x20
cmp eax, 1
jne 0x4ae223
int3
push 0
push 0xd0
push 0x6781a0
push 0x68b3b8
push str._out_of_range_
call fcn.005f5140
mov eax, dword [ebp - 0x38]
add esp, 0x14
mov eax, dword [eax + 8]
push eax
call fcn.005f0cb0
mov eax, dword [ebp - 0x40]
add esp, 4
test eax, eax
je 0x4ae269
mov eax, dword [eax]
test eax, eax
je 0x4ae269
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x4ae269
cmp ecx, dword [eax + 4]
jne 0x4ae2bf
push 0xcf
push 0x6781a0
push str.list_iterator_not_dereferencable
call fcn.00563e60
push str._Standard_C_Libraries_Out_of_Range___0
push 0
push 0xd0
push 0x6781a0
push 2
call fcn.005f3d20
add esp, 0x20
cmp eax, 1
jne 0x4ae29e
int3
push 0
push 0xd0
push 0x6781a0
push 0x68b3b8
push str._out_of_range_
call fcn.005f5140
mov ecx, dword [ebp - 0x38]
add esp, 0x14
mov dword [ecx + 8], 0
lea eax, [ebp - 0x64]
push eax
lea ebx, [ebp - 0x40]
call fcn.0049d600
push 3
lea ecx, [ebp - 0x24]
call fcn.00564140
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x4ae32a
cmp dword [eax + 4], 0
lea esi, [eax + 4]
je 0x4ae307
mov eax, dword [esi]
lea ecx, [ebp - 0x64]
cmp eax, ecx
je 0x4ae302
cmp dword [eax + 4], 0
lea esi, [eax + 4]
jne 0x4ae2f0
cmp dword [esi], 0
jne 0x4ae31e
push 0xb5
push 0x676220
push str.ITERATOR_LIST_CORRUPTED_
call fcn.00563e60
add esp, 0xc
mov edx, dword [ebp - 0x60]
mov dword [esi], edx
mov dword [ebp - 0x64], 0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x18
call fcn.00564180
mov ebx, dword [ebp + 8]
jmp 0x4ae0d0
mov esi, dword [ebp - 0x14]
call fcn.004af8b0
lea ecx, [ebp - 0x34]
lea eax, [ebx + 0x1ac]
push ecx
push eax
mov dword [ebp - 0x20], eax
call fcn.004c94d0
mov byte [ebp - 4], 0x1c
lea ecx, [ecx]
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x70]
push edx
push eax
call fcn.00434830
mov esi, eax
lea edi, [ebp - 0x34]
mov byte [ebp - 4], 0x1d
call fcn.004af830
test al, al
push 3
lea ecx, [ebp - 0x24]
sete byte [ebp - 0xd]
mov byte [ebp - 4], 0x1c
call fcn.00564140
mov byte [ebp - 4], 0x1e
mov esi, dword [ebp - 0x70]
test esi, esi
je 0x4ae3dc
add esi, 4
cmp dword [esi], 0
je 0x4ae3b9
mov eax, dword [esi]
lea ecx, [ebp - 0x70]
cmp eax, ecx
je 0x4ae3b4
cmp dword [eax + 4], 0
lea esi, [eax + 4]
jne 0x4ae3a2
cmp dword [esi], 0
jne 0x4ae3d0
push 0xb5
push 0x676220
push str.ITERATOR_LIST_CORRUPTED_
call fcn.00563e60
add esp, 0xc
mov edx, dword [ebp - 0x6c]
mov dword [esi], edx
mov dword [ebp - 0x70], 0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x1c
call fcn.00564180
cmp byte [ebp - 0xd], 0
je 0x4ae5ce
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x4ae40b
mov edx, dword [ecx]
test edx, edx
je 0x4ae40b
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4ae40b
cmp eax, dword [edx + 4]
jne 0x4ae464
push 0xcf
push 0x6781a0
push str.list_iterator_not_dereferencable
call fcn.00563e60
push str._Standard_C_Libraries_Out_of_Range___0
push 0
push 0xd0
push 0x6781a0
push 2
call fcn.005f3d20
add esp, 0x20
cmp eax, 1
jne 0x4ae440
int3
push 0
push 0xd0
push 0x6781a0
push 0x68f638
push str._out_of_range_
call fcn.005f5140
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
add esp, 0x14
cmp dword [eax + 8], 0
je 0x4ae555
test ecx, ecx
je 0x4ae47d
mov ecx, dword [ecx]
test ecx, ecx
je 0x4ae47d
cmp eax, dword [ecx + 4]
jne 0x4ae4d3
push 0xcf
push 0x6781a0
push str.list_iterator_not_dereferencable
call fcn.00563e60
push str._Standard_C_Libraries_Out_of_Range___0
push 0
push 0xd0
push 0x6781a0
push 2
call fcn.005f3d20
add esp, 0x20
cmp eax, 1
jne 0x4ae4b2
int3
push 0
push 0xd0
push 0x6781a0
push 0x68f638
push str._out_of_range_
call fcn.005f5140
mov eax, dword [ebp - 0x2c]
add esp, 0x14
mov eax, dword [eax + 8]
push eax
call fcn.005f0cb0
mov eax, dword [ebp - 0x34]
add esp, 4
test eax, eax
je 0x4ae4f8
mov eax, dword [eax]
test eax, eax
je 0x4ae4f8
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x4ae4f8
cmp ecx, dword [eax + 4]
jne 0x4ae54e
push 0xcf
push 0x6781a0
push str.list_iterator_not_dereferencable
call fcn.00563e60
push str._Standard_C_Libraries_Out_of_Range___0
push 0
push 0xd0
push 0x6781a0
push 2
call fcn.005f3d20
add esp, 0x20
cmp eax, 1
jne 0x4ae52d
int3
push 0
push 0xd0
push 0x6781a0
push 0x68f638
push str._out_of_range_
call fcn.005f5140
mov ecx, dword [ebp - 0x2c]
add esp, 0x14
mov dword [ecx + 8], 0
lea eax, [ebp - 0x64]
push eax
lea ebx, [ebp - 0x34]
call fcn.004af6f0
push 3
lea ecx, [ebp - 0x28]
call fcn.00564140
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x4ae5ba
cmp dword [eax + 4], 0
lea esi, [eax + 4]
je 0x4ae597
nop
mov eax, dword [esi]
lea ecx, [ebp - 0x64]
cmp eax, ecx
je 0x4ae592
cmp dword [eax + 4], 0
lea esi, [eax + 4]
jne 0x4ae580
cmp dword [esi], 0
jne 0x4ae5ae
push 0xb5
push 0x676220
push str.ITERATOR_LIST_CORRUPTED_
call fcn.00563e60
add esp, 0xc
mov edx, dword [ebp - 0x60]
mov dword [esi], edx
mov dword [ebp - 0x64], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call fcn.00564180
mov ebx, dword [ebp + 8]
jmp 0x4ae360
mov edi, dword [ebp - 0x20]
push edi
mov esi, edi
call fcn.004bc800
mov ecx, dword [edi + 4]
mov eax, dword [ecx]
mov dword [ecx], ecx
mov ecx, dword [edi + 4]
mov dword [ecx + 4], ecx
mov dword [edi + 8], 0
cmp eax, dword [edi + 4]
je 0x4ae604
mov esi, dword [eax]
push eax
call fcn.005f0cb0
add esp, 4
mov eax, esi
cmp esi, dword [edi + 4]
jne 0x4ae5f2
push 3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x18
call fcn.00564140
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x20
call fcn.00413660
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x18
call fcn.00564180
push 3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
call fcn.00564140
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x21
call fcn.00413660
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
call fcn.00564180
push 3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
call fcn.00564140
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x22
call fcn.00413660
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
call fcn.00564180
push 3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.00564140
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x23
call fcn.00413660
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.00564180
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x28], esi
mov byte [ebp - 4], 0x24
call fcn.004af8b0
mov eax, dword [esi + 4]
push eax
call fcn.005f0cb0
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x25
call fcn.0040ed70
mov eax, dword [esi]
push eax
call fcn.005f0cb0
add esp, 4
mov ecx, esi
mov dword [esi], 0
mov byte [ebp - 4], 0xe
call fcn.0040ed70
push edi
mov byte [ebp - 4], 0xd
call fcn.004bc560
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x28], esi
mov byte [ebp - 4], 0x26
call fcn.004af8b0
mov eax, dword [esi + 4]
push eax
call fcn.005f0cb0
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x27
call fcn.0040ed70
mov eax, dword [esi]
push eax
call fcn.005f0cb0
add esp, 4
mov ecx, esi
mov dword [esi], 0
mov byte [ebp - 4], 0xc
call fcn.0040ed70
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x28], esi
mov byte [ebp - 4], 0x28
call fcn.004af8b0
mov eax, dword [esi + 4]
push eax
call fcn.005f0cb0
add esp, 4
mov ecx, esi
mov byte [ebp - 4], 0x29
call fcn.0040ed70
mov eax, dword [esi]
push eax
call fcn.005f0cb0
add esp, 4
mov ecx, esi
mov dword [esi], 0
mov byte [ebp - 4], 0xb
call fcn.0040ed70
lea ecx, [ebx + 0x16c]
mov byte [ebp - 4], 0xa
call fcn.00412410
lea ecx, [ebx + 0x14c]
mov byte [ebp - 4], 9
call fcn.00412410
lea ecx, [ebx + 0x12c]
mov byte [ebp - 4], 8
call fcn.00412410
lea ecx, [ebx + 0x10c]
mov byte [ebp - 4], 7
call fcn.00412410
lea ecx, [ebx + 0xec]
mov byte [ebp - 4], 6
call fcn.00412410
lea ecx, [ebx + 0xcc]
mov byte [ebp - 4], 5
call fcn.00412410
lea ecx, [ebx + 0xa0]
mov byte [ebp - 4], 4
call fcn.00412410
lea ecx, [ebx + 0x80]
mov byte [ebp - 4], 3
call fcn.00412410
lea ecx, [ebx + 0x60]
mov byte [ebp - 4], 2
call fcn.00412410
lea ecx, [ebx + 0x40]
mov byte [ebp - 4], 1
call fcn.00412410
lea ecx, [ebx + 0x20]
mov byte [ebp - 4], 0
call fcn.00412410
mov ecx, ebx
mov dword [ebp - 4], 0xffffffff
call fcn.00412410
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4